@hupan56/wlkj 3.0.0 → 3.1.3

package/templates/qoder/scripts/capability/smoke_test.py

@@ -0,0 +1,211 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""
+nexus MCP 端到端 smoke test。
+
+用法:
+    python .qoder/scripts/capability/smoke_test.py
+
+验证:
+    1. McpRegistry 能 spawn 每个 MCP server 子进程
+    2. list_tools 能拿到真实工具清单
+    3. call_tool 能端到端调通（以 kg 的 search_code 为例）
+    4. Memory 职责链链头是否可用
+
+输出: 每个 server 的 PASS/FAIL + tools_indexed + latency_ms。
+退出码: 0=全 PASS，1=有 FAIL。
+"""
+from __future__ import annotations
+
+import json
+import os
+import sys
+import time
+
+# 确保 scripts/ 在 sys.path
+_here = os.path.dirname(os.path.abspath(__file__))
+_scripts = os.path.dirname(_here)
+if _scripts not in sys.path:
+    sys.path.insert(0, _scripts)
+
+# UTF-8 (Windows)
+try:
+    sys.stdout.reconfigure(encoding="utf-8", errors="replace")
+except Exception:
+    pass
+
+
+def _section(title: str) -> None:
+    print("\n" + "=" * 60)
+    print(f"  {title}")
+    print("=" * 60)
+
+
+def test_registry() -> dict:
+    """测试 McpRegistry: 每个 server 的 list_tools + call_tool。"""
+    from capability.registry_mcp import McpRegistry
+
+    reg = McpRegistry()
+    results = {}
+    _section("McpRegistry server 探活")
+
+    for server_name in reg._servers:
+        t0 = time.monotonic()
+        try:
+            transport = reg._get_or_create(server_name)
+            available = transport.available
+            tools = transport.list_tools() if available else []
+            latency_ms = (time.monotonic() - t0) * 1000
+            results[server_name] = {
+                "available": available,
+                "tools_indexed": len(tools),
+                "latency_ms": round(latency_ms, 1),
+                "sample_tools": [t.get("name", "") for t in tools[:5]],
+                "spawn_pid": getattr(getattr(transport, "_proc", None), "pid", None),
+                "status": "PASS" if available and len(tools) > 0 else "FAIL",
+            }
+        except Exception as e:
+            latency_ms = (time.monotonic() - t0) * 1000
+            results[server_name] = {
+                "available": False,
+                "tools_indexed": 0,
+                "latency_ms": round(latency_ms, 1),
+                "error": str(e)[:120],
+                "status": "FAIL",
+            }
+
+    for name, r in results.items():
+        icon = "✅" if r["status"] == "PASS" else "❌"
+        pid = f" pid={r['spawn_pid']}" if r.get("spawn_pid") else ""
+        print(f"  {icon} {name}: tools={r['tools_indexed']} "
+              f"latency={r['latency_ms']}ms{pid} sample={r.get('sample_tools', [])[:3]}")
+        if r.get("error"):
+            print(f"     error: {r['error']}")
+
+    return results
+
+
+def test_call_kg_search(reg) -> dict:
+    """端到端调用: kg search_code（验证 call_tool 链路）。"""
+    _section("端到端 call_tool: search_code")
+    t0 = time.monotonic()
+    try:
+        result = reg.call("search_code", {"keyword": "保险"})
+        latency_ms = (time.monotonic() - t0) * 1000
+        ok = not result.is_error and len(result.text) > 0
+        return {
+            "status": "PASS" if ok else "FAIL",
+            "latency_ms": round(latency_ms, 1),
+            "text_preview": result.text[:200] if result.text else "",
+            "is_error": result.is_error,
+        }
+    except Exception as e:
+        latency_ms = (time.monotonic() - t0) * 1000
+        return {
+            "status": "FAIL",
+            "latency_ms": round(latency_ms, 1),
+            "error": str(e)[:120],
+        }
+
+
+def test_memory_chain() -> dict:
+    """测试 memory 职责链链头是否可用。"""
+    _section("Memory 职责链")
+    from capability.registry import resolve
+
+    cap = resolve()
+    mem = cap.memory
+    has_providers = hasattr(mem, "providers_status")
+    available = getattr(mem, "available", False)
+    providers = mem.providers_status() if has_providers else []
+
+    result = {
+        "available": available,
+        "providers": providers,
+        "status": "PASS" if available else "WARN",
+    }
+
+    icon = "✅" if available else "⚠️"
+    print(f"  {icon} memory.available={available}")
+    for p in providers:
+        hit = " ← ACTIVE" if p.get("hit") else ""
+        print(f"     {p['provider']}: available={p['available']}{hit}")
+
+    return result
+
+
+def main() -> int:
+    print("nexus MCP smoke test")
+    print(f"时间: {time.strftime('%Y-%m-%d %H:%M:%S')}")
+    print(f"Python: {sys.executable}")
+    print(f"CWD: {os.getcwd()}")
+
+    # 1. Registry 探活
+    from capability.registry_mcp import McpRegistry
+    reg = McpRegistry()
+    server_results = test_registry()
+
+    # 2. 端到端 call_tool（只在 kg 可用时跑）
+    call_result = {}
+    kg_ok = server_results.get("qoder-knowledge-graph", {}).get("status") == "PASS"
+    if kg_ok:
+        call_result = test_call_kg_search(reg)
+        icon = "✅" if call_result["status"] == "PASS" else "❌"
+        print(f"\n  {icon} search_code: latency={call_result['latency_ms']}ms "
+              f"text_len={len(call_result.get('text_preview', ''))}")
+        if call_result.get("error"):
+            print(f"     error: {call_result['error']}")
+    else:
+        print("\n  ⏭️  kg server 不可用，跳过 call_tool 测试")
+
+    # 3. Memory 链
+    memory_result = test_memory_chain()
+
+    # 4. 汇总
+    _section("汇总")
+    all_pass = all(r.get("status") == "PASS" for r in server_results.values())
+    call_pass = call_result.get("status") == "PASS" or not kg_ok
+    mem_pass = memory_result.get("status") in ("PASS", "WARN")
+    total_pass = all_pass and call_pass and mem_pass
+
+    total_tools = sum(r.get("tools_indexed", 0) for r in server_results.values())
+    active_servers = sum(1 for r in server_results.values() if r.get("status") == "PASS")
+
+    print(f"  Servers: {active_servers}/{len(server_results)} PASS")
+    print(f"  Tools indexed: {total_tools}")
+    print(f"  Call tool: {call_result.get('status', 'SKIP')}")
+    print(f"  Memory chain: {memory_result.get('status', 'SKIP')}")
+    print(f"\n  {'✅ ALL PASS' if total_pass else '❌ SOME FAILED'}")
+
+    # 写 JSON 报告（可选）
+    report = {
+        "timestamp": time.strftime("%Y-%m-%d %H:%M:%S"),
+        "servers": server_results,
+        "call_tool": call_result,
+        "memory": memory_result,
+        "summary": {
+            "all_pass": total_pass,
+            "active_servers": active_servers,
+            "total_servers": len(server_results),
+            "total_tools": total_tools,
+        },
+    }
+    report_path = os.path.join(_here, "smoke_test_report.json")
+    try:
+        with open(report_path, "w", encoding="utf-8") as f:
+            json.dump(report, f, ensure_ascii=False, indent=2)
+        print(f"\n  报告已写入: {report_path}")
+    except Exception:
+        pass
+
+    # 关闭所有 transport
+    try:
+        reg.close_all()
+    except Exception:
+        pass
+
+    return 0 if total_pass else 1
+
+
+if __name__ == "__main__":
+    sys.exit(main())

package/templates/qoder/scripts/capability/smoke_test_report.json

@@ -0,0 +1,94 @@
+{
+  "timestamp": "2026-06-26 21:25:55",
+  "servers": {
+    "qoder-knowledge-graph": {
+      "available": true,
+      "tools_indexed": 17,
+      "latency_ms": 437.0,
+      "sample_tools": [
+        "search_code",
+        "search_api",
+        "search_prd",
+        "get_impact",
+        "context_360"
+      ],
+      "spawn_pid": 38616,
+      "status": "PASS"
+    },
+    "qoder-zentao": {
+      "available": true,
+      "tools_indexed": 66,
+      "latency_ms": 3657.0,
+      "sample_tools": [
+        "check_zentao_status",
+        "get_zentao_url",
+        "list_products",
+        "get_product",
+        "create_product"
+      ],
+      "spawn_pid": 11224,
+      "status": "PASS"
+    },
+    "qoder-mysql": {
+      "available": true,
+      "tools_indexed": 6,
+      "latency_ms": 3484.0,
+      "sample_tools": [
+        "list_envs",
+        "query_schema",
+        "query_data",
+        "query_distinct",
+        "list_databases"
+      ],
+      "spawn_pid": 37868,
+      "status": "PASS"
+    },
+    "lanhu": {
+      "available": true,
+      "tools_indexed": 13,
+      "latency_ms": 3156.0,
+      "sample_tools": [
+        "lanhu_resolve_invite_link",
+        "lanhu_list_product_documents",
+        "lanhu_get_pages",
+        "lanhu_get_ai_analyze_page_result",
+        "lanhu_get_designs"
+      ],
+      "spawn_pid": 36836,
+      "status": "PASS"
+    }
+  },
+  "call_tool": {
+    "status": "PASS",
+    "latency_ms": 3953.0,
+    "text_preview": "Chinese: 保险 -> English: ins insurance vehlife/insurance\n\n[Carmg-H5] 12 files\n  Carmg-H5/src/.../main/List.vue  ->  data/code/Carmg-H5/src/modules/icsAbnormalCenter/module/main/List.vue\n  Carmg-H5/src/",
+    "is_error": false
+  },
+  "memory": {
+    "available": true,
+    "providers": [
+      {
+        "provider": "McpMemoryProvider",
+        "available": true,
+        "hit": true
+      },
+      {
+        "provider": "FileMemoryCap",
+        "available": true,
+        "hit": false
+      },
+      {
+        "provider": "NoOpMemoryCap",
+        "available": false,
+        "hit": false
+      }
+    ],
+    "status": "PASS"
+  },
+  "summary": {
+    "all_pass": true,
+    "active_servers": 4,
+    "total_servers": 4,
+    "total_tools": 102
+  }
+}

package/templates/qoder/scripts/{report → deployment/setup}/__init__.py

@@ -1,11 +1,11 @@
-# 子包初始化: 注入 scripts/根 + 所有子包到 sys.path
-# 让跨包 import (旧式不带前缀) 仍可用, 兼容现有代码
-import os as _os, sys as _sys
-_root = _os.path.dirname(_os.path.dirname(_os.path.abspath(__file__)))
-if _root not in _sys.path:
-    _sys.path.insert(0, _root)
-# 注入所有子包目录 (兼容旧式 import xxx)
-for _sub in ('kg', 'build', 'test', 'setup', 'io'):
-    _subdir = _os.path.join(_root, _sub)
-    if _os.path.isdir(_subdir) and _subdir not in _sys.path:
-        _sys.path.insert(0, _subdir)
+# 子包初始化: 注入 scripts/根 + 所有子包到 sys.path
+# 让跨包 import (旧式不带前缀) 仍可用, 兼容现有代码
+import os as _os, sys as _sys
+_root = _os.path.dirname(_os.path.dirname(_os.path.abspath(__file__)))
+if _root not in _sys.path:
+    _sys.path.insert(0, _root)
+# 注入所有子包目录 (兼容旧式 import xxx)
+for _sub in ('kg', 'build', 'test', 'setup', 'io'):
+    _subdir = _os.path.join(_root, _sub)
+    if _os.path.isdir(_subdir) and _subdir not in _sys.path:
+        _sys.path.insert(0, _subdir)

package/templates/qoder/scripts/{setup → deployment/setup}/carriers.py

@@ -13,7 +13,12 @@ v3.0 合并自: check_carriers + check_qoderwork_consistency + sync_carriers。
 """
 # v3.0 路径自举: 引导到 common/bootstrap, 统一 sys.path 逻辑
 import os as _o, sys as _s
-_cp = _o.path.join(_o.path.dirname(_o.path.dirname(_o.path.abspath(__file__))), 'common')
+_f = _o.path.abspath(__file__)
+for _ in range(10):
+    _f = _o.path.dirname(_f)
+    _cp = _o.path.join(_f, 'foundation')
+    if _o.path.isfile(_o.path.join(_cp, 'bootstrap.py')):
+        break
 if _cp not in _s.path: _s.path.insert(0, _cp)
 from bootstrap import setup; setup()
 
@@ -22,20 +27,15 @@ try:
     import yaml
 except ImportError:
     yaml=None
-from common.paths import get_repo_root
-BASE = str(get_repo_root())
-COMMANDS_DIR = os.path.join(BASE, '.qoder', 'commands')
-SKILLS_DIR = os.path.join(BASE, '.qoder', 'skills')
-AGENTS_MD = os.path.join(BASE, 'AGENTS.md')
-
-# ==================== 来自 check_carriers.py ====================
-from common.paths import get_repo_root
+from foundation.core.paths import get_repo_root
 
 BASE = get_repo_root()
 COMMANDS_DIR = BASE / '.qoder' / 'commands'
 SKILLS_DIR = BASE / '.qoder' / 'skills'
 AGENTS_MD = BASE / 'AGENTS.md'
 
+# ==================== 来自 check_carriers.py ====================
+
 # description 相似度阈值 (改了标点/措辞不算漂移, 实质改变才算)
 DESC_SIMILAR_THRESHOLD = 0.6
 
@@ -234,7 +234,7 @@ def main_check_carriers():
 
 
 # ==================== 来自 check_qoderwork_consistency.py ====================
-from common.paths import get_repo_root  # noqa: E402
+# (复用顶部已定义的 get_repo_root / BASE / COMMANDS_DIR / SKILLS_DIR)
 
 # 扫描目标: commands 全部 .md + skills 的 SKILL.md
 SCAN_GLOBS = [
@@ -246,6 +246,10 @@ SCAN_GLOBS = [
 # 匹配 `python .qoder/scripts/` 或 `python3 .qoder/scripts/`, 不带 $R 引号包裹
 BARE_PAT = re.compile(r'(?<![\"\$])\bpython3?\s+\.qoder/scripts/([A-Za-z0-9_./-]+)')
 
+# 叶子路径 (能抓 $R 前缀和裸路径两种): .qoder/scripts/<leaf>.py
+# 用于"存在性校验" — 本次断链的根因: 叶子路径文件不存在, 但旧检查器只查 $R 前缀没查存在性
+LEAF_PAT = re.compile(r'\.qoder/scripts/([A-Za-z0-9_./-]+\.py)')
+
 # 已安全模式: cd "$R" && python .qoder/scripts/...
 SAFE_CD_PAT = re.compile(r'cd\s+["\']?\$R["\']?\s*&&\s*python3?\s+\.qoder/scripts/')
 
@@ -256,12 +260,13 @@ ROOT_LOCATOR_PAT = re.compile(r'repo_root\.py|R=\$\(python.*repo_root')
 HINT_CTX = 'install_qoderwork.py'
 
 
-def scan_file(path, strict):
+def scan_file(path, strict, repo):
     """扫一个文件, 返回 (errors, warnings, root_block_present)。
-    errors = 裸相对路径真实调用(必修); warnings = 无 R 块等(建议修)。
+    errors = 断链(叶子路径文件不存在) 或 裸相对路径(QoderWork 失效); warnings = 无 R 块等。
     """
     errors = []
     warnings = []
+    seen_leaves = set()  # (行号, leaf) 去重, 避免裸路径+不存在双重报
     try:
         with open(path, encoding='utf-8') as f:
             lines = f.readlines()
@@ -277,12 +282,19 @@ def scan_file(path, strict):
         # 豁免: 已安全的 cd "$R" && python 模式
         if SAFE_CD_PAT.search(line):
             continue
-        # 找裸相对路径
+        # 1. 裸相对路径风格 (QoderWork 桌面端工作目录非仓库根, 裸路径会失效)
         for m in BARE_PAT.finditer(line):
             script = m.group(1)
-            # 过滤掉明显是文字描述(行里既无 bash 代码块上下文也无命令感)
-            # 简化: 只要匹配到就算(宁可误报让 reviewer 看一眼)
-            errors.append((i, line.rstrip(), script))
+            seen_leaves.add((i, script))
+            errors.append((i, line.rstrip(), script + ' (裸相对路径)'))
+        # 2. 叶子路径存在性校验 — 本次断链根因 (短子包路径文件不存在但旧检查器没校验)
+        for m in LEAF_PAT.finditer(line):
+            leaf = m.group(1)
+            if (i, leaf) in seen_leaves:
+                continue
+            seen_leaves.add((i, leaf))
+            if not (repo / '.qoder' / 'scripts' / leaf).is_file():
+                errors.append((i, line.rstrip(), '.qoder/scripts/' + leaf + ' (文件不存在)'))
 
     # 无 R 块但文件里有 $R 引用 → 警告
     if not root_block and '$R' in ''.join(lines):
@@ -312,7 +324,7 @@ def main_check_paths():
                 if not fnmatch.fnmatch(fn, pattern):
                     continue
                 path = os.path.join(dirpath, fn)
-                errors, warnings, root_block = scan_file(path, args.strict)
+                errors, warnings, root_block = scan_file(path, args.strict, repo)
                 rel = os.path.relpath(path, str(repo))
                 if errors:
                     files_with_errors.append((rel, errors))
@@ -364,11 +376,7 @@ def main_check_paths():
 
 
 # ==================== 来自 sync_carriers.py ====================
-from common.paths import get_repo_root
-
-BASE = get_repo_root()
-COMMANDS_DIR = BASE / '.qoder' / 'commands'
-SKILLS_DIR = BASE / '.qoder' / 'skills'
+# (复用顶部已定义的 get_repo_root / BASE / COMMANDS_DIR / SKILLS_DIR)
 
 
 def _read_frontmatter(path):
@@ -597,8 +605,7 @@ def main_all():
     改了规则/技能后跑一次, 4载体全同步。
     """
     import subprocess, os
-    SCRIPTS = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))
-    BASE = os.path.dirname(os.path.dirname(SCRIPTS))
+    # 复用顶部 BASE (= 仓库根) 和 SCRIPTS_DIR; 避免再次手算路径
     print('=' * 56)
     print('全系列同步 (4载体: IDE/Quest/CLI/QoderWork)')
     print('=' * 56)
@@ -613,7 +620,7 @@ def main_all():
 
     # 2. sync_templates (npm 镜像)
     print('\n[2/3] 同步 npm 镜像 (.qoder→packages/wlkj/templates)...')
-    sync_script = os.path.join(BASE, 'packages', 'wlkj', 'sync_templates.py')
+    sync_script = str(BASE / 'packages' / 'wlkj' / 'sync_templates.py')
     if os.path.isfile(sync_script):
         r = subprocess.run([sys.executable, sync_script], capture_output=True, text=True, encoding='utf-8')
         print(r.stdout.strip().split('\n')[-1] if r.stdout else '  (无输出)')
@@ -622,7 +629,7 @@ def main_all():
 
     # 3. install_qoderwork (投影 ~/.qoderwork/)
     print('\n[3/3] 投影 QoderWork (skills/commands→~/.qoderwork/)...')
-    install_script = os.path.join(SCRIPTS, 'setup', 'install_qoderwork.py')
+    install_script = str(BASE / '.qoder' / 'scripts' / 'deployment' / 'setup' / 'install_qoderwork.py')
     if os.path.isfile(install_script):
         r = subprocess.run([sys.executable, install_script, '--force-commands'],
                            capture_output=True, text=True, encoding='utf-8', timeout=60)

package/templates/qoder/scripts/deployment/setup/carriers_verify.py

@@ -0,0 +1,148 @@
+import os
+import sys
+
+HERE = os.path.dirname(os.path.abspath(__file__))
+SCRIPTS = None
+cur = HERE
+for _ in range(8):
+    if os.path.isdir(os.path.join(cur, "foundation")) and os.path.isdir(os.path.join(cur, "domain")):
+        SCRIPTS = cur
+        break
+    cur = os.path.dirname(cur)
+if SCRIPTS is None:
+    SCRIPTS = os.path.dirname(os.path.dirname(HERE))
+if SCRIPTS not in sys.path:
+    sys.path.insert(0, SCRIPTS)
+    sys.path.insert(0, os.path.join(SCRIPTS, "foundation"))
+try:
+    from bootstrap import setup
+    setup()
+except Exception as e:
+    print("bootstrap setup failed: %s" % e)
+
+from foundation.core.paths import get_repo_root
+ROOT = get_repo_root()
+
+COMMANDS = os.path.join(str(ROOT), ".qoder", "commands")
+SKILLS = os.path.join(str(ROOT), ".qoder", "skills")
+AGENTS = os.path.join(str(ROOT), "AGENTS.md")
+
+CMD_PREFIX = "wl-"
+
+def names_cmds():
+    s = set()
+    if os.path.isdir(COMMANDS):
+        for r, d, fs in os.walk(COMMANDS):
+            for f in fs:
+                if f.endswith(".md") and f.startswith(CMD_PREFIX):
+                    s.add(os.path.splitext(f)[0])
+    return s
+
+def names_skills():
+    s = set()
+    if os.path.isdir(SKILLS):
+        for d in os.listdir(SKILLS):
+            p = os.path.join(SKILLS, d, "SKILL.md")
+            if os.path.isfile(p) and d.startswith(CMD_PREFIX):
+                s.add(d)
+    return s
+
+def agents_table_cmds():
+    s = set()
+    if not os.path.isfile(AGENTS):
+        return s, False
+    txt = open(AGENTS, encoding="utf-8", errors="ignore").read()
+    in_table = False
+    for line in txt.splitlines():
+        if "7 Core" in line or "核心命令" in line:
+            in_table = True
+        if not in_table:
+            continue
+        # match /wl-xxx only when followed by a table cell boundary
+        i = 0
+        while True:
+            a = line.find("/wl-", i)
+            if a < 0:
+                break
+            b = a + 4
+            while b < len(line) and (line[b].isalpha() or line[b] == "-"):
+                b += 1
+            # name must be at least /wl- + 1 char, and next char must be a boundary
+            ok = b >= a + 5
+            nxt = line[b] if b < len(line) else ""
+            if ok and nxt in ("`", " ", "|", "", "\t"):
+                s.add(line[a + 1:b])
+            i = b
+    return s, True
+
+def main():
+    errs = 0
+    warns = 0
+    print("=" * 60)
+    print("carriers verify: 4-carrier name-set + table integrity")
+    print("ROOT = %s" % ROOT)
+    print("=" * 60)
+
+    cs = names_cmds()
+    ss = names_skills()
+    ts, has_agents = agents_table_cmds()
+
+    only_cmd = sorted(cs - ss)
+    only_skill = sorted(ss - cs)
+
+    print("\n[1] command<->skill name set diff (wl-* prefixed only)")
+    print("    commands: %d, skills: %d" % (len(cs), len(ss)))
+    if only_cmd:
+        warns += 1
+        print("    [warn] commands without matching skill dir:")
+        for n in only_cmd:
+            print("       -%s" % n)
+    # 白名单: wl-prd-full/quick/review 是 wl-prd 路由器命令的模式子 skill (设计如此, 非漂移)
+    PRD_ROUTER_SKILLS = {"wl-prd-full", "wl-prd-quick", "wl-prd-review"}
+    real_orphans = [n for n in only_skill if n not in PRD_ROUTER_SKILLS]
+    prd_router = [n for n in only_skill if n in PRD_ROUTER_SKILLS]
+    if real_orphans:
+        errs += 1
+        print("    [FAIL] skills without matching command file (orphan):")
+        for n in real_orphans:
+            print("       -%s" % n)
+    if prd_router:
+        print("    [info] %d prd-router sub-skills (wl-prd-full/quick/review, by-design)" % len(prd_router))
+    if not only_cmd and not only_skill:
+        print("    [ok] wl-* command<->skill name sets aligned")
+
+    print("\n[2] AGENTS.md core-command table vs files")
+    if not has_agents:
+        errs += 1
+        print("    [FAIL] AGENTS.md missing")
+    else:
+        missing = sorted(ts - cs - ss)
+        if missing:
+            errs += 1
+            print("    [FAIL] table lists commands that have no file:")
+            for n in missing:
+                print("       /%s" % n)
+        else:
+            print("    [ok] all %d table entries have a file" % len(ts))
+
+    print("\n[3] delegate content check to existing carriers.py check")
+    chk = os.path.join(str(ROOT), ".qoder", "scripts", "deployment", "setup", "carriers.py")
+    if os.path.isfile(chk):
+        import subprocess
+        r = subprocess.run([sys.executable, chk, "check"], capture_output=True, text=True, encoding="utf-8", errors="replace")
+        if r.returncode == 0:
+            print("    [ok] carriers check passed")
+        else:
+            errs += 1
+            print("    [FAIL] carriers check reported drift (rc=%d)" % r.returncode)
+            for ln in (r.stdout or "").splitlines():
+                if ln.strip():
+                    print("       %s" % ln[:90])
+
+    print("-" * 60)
+    print("RESULT: %d FAIL / %d warn" % (errs, warns))
+    print("FAIL=must-fix drift; warn=advisory. exit 0 only if FAIL==0.")
+    return 1 if errs else 0
+
+if __name__ == "__main__":
+    sys.exit(main())