@t275005746/gse 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
- package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
- package/.github/ISSUE_TEMPLATE/config.yml +5 -5
- package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
- package/.github/workflows/validate-gse.yml +33 -33
- package/.gse/README.md +18 -18
- package/.gse/gse-development-protocol.md +50 -50
- package/.gse/project-profile.md +29 -29
- package/.gse/quality-gates.md +25 -25
- package/.gse/releases/public-registry-publication-npm.md +49 -0
- package/.gse/releases/public-release-owner-required.md +65 -65
- package/.gse/releases/public-security-contact-owner-required.md +45 -45
- package/.gse/state.json +3 -4
- package/CHANGELOG.md +24 -24
- package/CONTRIBUTING.md +64 -64
- package/LICENSE +21 -21
- package/README.md +1 -1
- package/README.zh-CN.md +1 -1
- package/SECURITY.md +41 -41
- package/SUPPORT.md +38 -38
- package/assets/marketplace/README.md +7 -7
- package/assets/marketplace/gse-listing.json +75 -75
- package/assets/templates/acceptance-execution-packet.md +73 -73
- package/assets/templates/adr.md +14 -14
- package/assets/templates/change-brief.md +16 -16
- package/assets/templates/design.md +18 -18
- package/assets/templates/dispatch-packet.md +104 -104
- package/assets/templates/evidence.md +14 -14
- package/assets/templates/execution-quality-pack.md +65 -65
- package/assets/templates/goal-map.md +21 -21
- package/assets/templates/host-adapter.md +48 -48
- package/assets/templates/host-ui-invocation-record.md +42 -42
- package/assets/templates/incident-review.md +60 -60
- package/assets/templates/public-channel-publication-record.md +49 -49
- package/assets/templates/public-ci-run-record.md +53 -53
- package/assets/templates/public-release-record.md +65 -65
- package/assets/templates/public-repository-settings-record.md +59 -59
- package/assets/templates/public-security-contact-record.md +45 -45
- package/assets/templates/release-trust-record.md +32 -32
- package/assets/templates/review.md +18 -18
- package/assets/templates/spec.md +16 -16
- package/assets/templates/target-adoption-evidence.md +29 -29
- package/assets/templates/tasks.md +17 -17
- package/assets/templates/update-release-acceptance-record.md +58 -58
- package/examples/README.md +22 -22
- package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
- package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
- package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
- package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
- package/examples/agent-runtime-host/.gse/tooling.md +5 -5
- package/examples/agent-runtime-host/.mcp.json +9 -9
- package/examples/agent-runtime-host/AGENTS.md +5 -5
- package/examples/agent-runtime-host/README.md +10 -10
- package/examples/agent-runtime-host/docs/model-routing.md +5 -5
- package/examples/cli-tool/.gse/project-profile.md +21 -21
- package/examples/cli-tool/AGENTS.md +5 -5
- package/examples/cli-tool/README.md +12 -12
- package/examples/cli-tool/package.json +21 -21
- package/examples/small-app/.env.example +2 -2
- package/examples/small-app/.github/workflows/ci.yml +8 -8
- package/examples/small-app/AGENTS.md +5 -5
- package/examples/small-app/README.md +12 -12
- package/examples/small-app/package.json +26 -26
- package/examples/small-app/playwright.config.ts +4 -4
- package/package.json +53 -53
- package/references/adoption-recipes.md +171 -171
- package/references/agent-roles.md +49 -49
- package/references/architecture-health.md +101 -101
- package/references/benchmark-audit.md +73 -73
- package/references/community-channels.md +46 -46
- package/references/compatibility.md +70 -70
- package/references/design-basis.md +38 -38
- package/references/domain-model.md +129 -129
- package/references/domain-quality-gates.md +75 -75
- package/references/drift-audit.md +81 -81
- package/references/evidence-taxonomy.md +123 -123
- package/references/file-ownership.md +107 -107
- package/references/final-readiness.md +84 -84
- package/references/forward-test.md +133 -133
- package/references/goal-map.md +36 -36
- package/references/host-adapters.md +119 -119
- package/references/learning-system.md +35 -35
- package/references/marketplace-discovery.md +46 -46
- package/references/model-routing.md +103 -103
- package/references/open-source-defaults.md +39 -39
- package/references/operating-model.md +52 -52
- package/references/packaging.md +277 -277
- package/references/project-agent-workspace.md +89 -89
- package/references/project-bootstrap.md +122 -122
- package/references/project-profile.md +57 -57
- package/references/public-release.md +174 -174
- package/references/quality-gates.md +100 -100
- package/references/recovery.md +176 -176
- package/references/release-trust.md +43 -43
- package/references/release.md +126 -126
- package/references/review.md +141 -141
- package/references/router.md +90 -90
- package/references/spec-workflow.md +66 -66
- package/references/task-levels.md +81 -81
- package/references/tool-adapters.md +73 -73
- package/scripts/audit-acceptance-execution-packet.mjs +133 -133
- package/scripts/audit-adoption-recipes.mjs +99 -99
- package/scripts/audit-change-lifecycle.mjs +77 -77
- package/scripts/audit-change-system.mjs +134 -134
- package/scripts/audit-ci-readiness.mjs +107 -107
- package/scripts/audit-close-gate.mjs +323 -323
- package/scripts/audit-command-adapters.mjs +91 -91
- package/scripts/audit-command-execution.mjs +210 -210
- package/scripts/audit-compatibility.mjs +149 -149
- package/scripts/audit-completion-readiness.mjs +292 -292
- package/scripts/audit-distribution.mjs +251 -251
- package/scripts/audit-domain-quality-gates.mjs +108 -108
- package/scripts/audit-evidence-placeholders.mjs +126 -126
- package/scripts/audit-final-readiness-promotion.mjs +255 -255
- package/scripts/audit-final-readiness.mjs +226 -226
- package/scripts/audit-fixtures.mjs +154 -154
- package/scripts/audit-fresh-session-readiness.mjs +177 -177
- package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
- package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
- package/scripts/audit-host-runtime-invocations.mjs +254 -254
- package/scripts/audit-host-ui-invocation.mjs +132 -132
- package/scripts/audit-marketplace-discovery.mjs +122 -122
- package/scripts/audit-npm-package-metadata.mjs +155 -155
- package/scripts/audit-npm-publish-dry-run.mjs +191 -169
- package/scripts/audit-npm-tarball-install.mjs +191 -191
- package/scripts/audit-open-source-defaults.mjs +92 -92
- package/scripts/audit-open-source-readiness.mjs +97 -97
- package/scripts/audit-project.mjs +138 -138
- package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
- package/scripts/audit-public-acceptance-readiness.mjs +224 -224
- package/scripts/audit-public-channel-publication.mjs +248 -248
- package/scripts/audit-public-ci-run.mjs +184 -184
- package/scripts/audit-public-collaboration-templates.mjs +98 -98
- package/scripts/audit-public-external-gate-probe.mjs +206 -206
- package/scripts/audit-public-release-decision.mjs +201 -201
- package/scripts/audit-public-release-metadata.mjs +176 -176
- package/scripts/audit-public-repository-settings.mjs +237 -237
- package/scripts/audit-public-security-contact.mjs +171 -171
- package/scripts/audit-readme-docs.mjs +6 -4
- package/scripts/audit-recovery-readiness.mjs +98 -98
- package/scripts/audit-release-readiness.mjs +106 -106
- package/scripts/audit-release-trust.mjs +62 -62
- package/scripts/audit-remote-distribution.mjs +266 -266
- package/scripts/audit-roadmap-consistency.mjs +235 -235
- package/scripts/audit-signing.mjs +147 -147
- package/scripts/audit-state-freshness.mjs +14 -9
- package/scripts/audit-target-adoption-evidence.mjs +117 -117
- package/scripts/audit-target-project.mjs +507 -507
- package/scripts/audit-update-release-acceptance.mjs +136 -136
- package/scripts/audit-v1-target-validation.mjs +269 -269
- package/scripts/audit-validation-profiles.mjs +125 -125
- package/scripts/close-change.mjs +116 -116
- package/scripts/discover-project-profile.mjs +307 -307
- package/scripts/generate-command-adapter.mjs +231 -231
- package/scripts/generate-final-acceptance-packet.mjs +181 -181
- package/scripts/generate-final-form-progress-report.mjs +205 -205
- package/scripts/generate-host-runtime-evidence-handoff.mjs +206 -206
- package/scripts/generate-owner-external-gate-kit.mjs +295 -295
- package/scripts/generate-public-acceptance-handoff.mjs +168 -168
- package/scripts/generate-public-release-checklist.mjs +207 -207
- package/scripts/generate-release-bundle.mjs +505 -505
- package/scripts/generate-release-owner-action-plan.mjs +172 -172
- package/scripts/generate-release-status-manifest.mjs +200 -200
- package/scripts/generate-session-prompt.mjs +188 -188
- package/scripts/gse.mjs +67 -67
- package/scripts/init-change.mjs +265 -265
- package/scripts/init-project.mjs +785 -785
- package/scripts/install-gse.mjs +234 -234
- package/scripts/lib/evidence-placeholders.mjs +28 -28
- package/scripts/package-gse.mjs +174 -174
- package/scripts/probe-public-external-gates.mjs +167 -167
- package/scripts/record-host-invocation.mjs +151 -151
- package/scripts/record-public-channel-publication.mjs +178 -178
- package/scripts/record-public-ci-run.mjs +180 -180
- package/scripts/record-public-release.mjs +175 -175
- package/scripts/record-public-repository-settings.mjs +209 -209
- package/scripts/record-public-security-contact.mjs +157 -157
- package/scripts/sign-gse-package.mjs +83 -83
- package/scripts/update-project-state.mjs +223 -223
- package/scripts/verify-gse-package.mjs +85 -85
|
@@ -1,149 +1,149 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
import fs from 'node:fs'
|
|
3
|
-
import path from 'node:path'
|
|
4
|
-
|
|
5
|
-
const args = process.argv.slice(2)
|
|
6
|
-
|
|
7
|
-
function readArg(name, fallback = null) {
|
|
8
|
-
const index = args.indexOf(name)
|
|
9
|
-
if (index === -1) return fallback
|
|
10
|
-
return args[index + 1] ?? fallback
|
|
11
|
-
}
|
|
12
|
-
|
|
13
|
-
const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
|
|
14
|
-
const jsonOnly = args.includes('--json')
|
|
15
|
-
const compatibilityPath = path.join(root, 'references', 'compatibility.md')
|
|
16
|
-
const hostAdaptersPath = path.join(root, 'references', 'host-adapters.md')
|
|
17
|
-
const toolAdaptersPath = path.join(root, 'references', 'tool-adapters.md')
|
|
18
|
-
const generatedCodexAdapter = path.join(root, 'examples', 'agent-runtime-host', '.codex', 'gse-adapter.md')
|
|
19
|
-
const generatedClaudeAdapter = path.join(root, 'examples', 'agent-runtime-host', '.claude', 'gse-adapter.md')
|
|
20
|
-
|
|
21
|
-
function read(filePath) {
|
|
22
|
-
return fs.existsSync(filePath) ? fs.readFileSync(filePath, 'utf8') : ''
|
|
23
|
-
}
|
|
24
|
-
|
|
25
|
-
function check(id, label, ok, evidence, risk = '') {
|
|
26
|
-
return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
|
|
27
|
-
}
|
|
28
|
-
|
|
29
|
-
const compatibility = read(compatibilityPath)
|
|
30
|
-
const hostAdapters = read(hostAdaptersPath)
|
|
31
|
-
const toolAdapters = read(toolAdaptersPath)
|
|
32
|
-
const codexAdapter = read(generatedCodexAdapter)
|
|
33
|
-
const claudeAdapter = read(generatedClaudeAdapter)
|
|
34
|
-
|
|
35
|
-
const requiredHosts = [
|
|
36
|
-
'Codex-style',
|
|
37
|
-
'Claude Code-style',
|
|
38
|
-
'Hermes/AION-style runtime',
|
|
39
|
-
'WorkBuddy/other IDE agents',
|
|
40
|
-
'Copilot/Gemini-style assistants',
|
|
41
|
-
'Unknown or custom host',
|
|
42
|
-
]
|
|
43
|
-
const allowedStatuses = ['verified', 'documented', 'unknown', 'unavailable']
|
|
44
|
-
const riskyCapabilities = ['Subagents', 'MCP', 'LSP/index', 'Browser/Playwright', 'Hooks/plugins']
|
|
45
|
-
|
|
46
|
-
function extractTableRows(markdown, heading) {
|
|
47
|
-
const lines = markdown.split(/\r?\n/)
|
|
48
|
-
const start = lines.findIndex((line) => line.trim() === '## ' + heading)
|
|
49
|
-
if (start === -1) return []
|
|
50
|
-
const rows = []
|
|
51
|
-
for (let index = start + 1; index < lines.length; index += 1) {
|
|
52
|
-
const line = lines[index].trim()
|
|
53
|
-
if (line.startsWith('## ')) break
|
|
54
|
-
if (!line.startsWith('|')) continue
|
|
55
|
-
if (/^\|\s*-/.test(line)) continue
|
|
56
|
-
rows.push(line)
|
|
57
|
-
}
|
|
58
|
-
return rows
|
|
59
|
-
}
|
|
60
|
-
|
|
61
|
-
function rowCells(row) {
|
|
62
|
-
return row
|
|
63
|
-
.split('|')
|
|
64
|
-
.slice(1, -1)
|
|
65
|
-
.map((cell) => cell.trim())
|
|
66
|
-
}
|
|
67
|
-
|
|
68
|
-
function statusesInText(text) {
|
|
69
|
-
const matches = text.match(/`([^`]+)`/g) ?? []
|
|
70
|
-
return matches.map((item) => item.slice(1, -1)).filter((item) => allowedStatuses.includes(item))
|
|
71
|
-
}
|
|
72
|
-
|
|
73
|
-
const hostRows = extractTableRows(compatibility, 'Host Matrix')
|
|
74
|
-
const capabilityRows = extractTableRows(compatibility, 'Capability Matrix')
|
|
75
|
-
const hostRowText = hostRows.join('\n')
|
|
76
|
-
const capabilityMap = new Map(capabilityRows.map((row) => {
|
|
77
|
-
const cells = rowCells(row)
|
|
78
|
-
return [cells[0], cells]
|
|
79
|
-
}))
|
|
80
|
-
|
|
81
|
-
const codexHostRow = hostRows.find((row) => row.includes('| Codex-style |')) ?? ''
|
|
82
|
-
const claudeHostRow = hostRows.find((row) => row.includes('| Claude Code-style |')) ?? ''
|
|
83
|
-
const riskyRows = riskyCapabilities.map((name) => ({ name, cells: capabilityMap.get(name) ?? [] }))
|
|
84
|
-
const riskyVerifiedRows = riskyRows.filter((row) => row.cells.slice(1, 6).some((cell) => cell.includes('`verified`')))
|
|
85
|
-
const statusBackticks = new Set((hostRows.join('\n') + '\n' + capabilityRows.join('\n') + '\n' + compatibility.match(/## Status Vocabulary[\s\S]*?## Portable Source Of Truth/)?.[0]).match(/`([^`]+)`/g)?.map((item) => item.slice(1, -1)) ?? [])
|
|
86
|
-
const suspiciousStatusLabels = [...statusBackticks].filter((item) => {
|
|
87
|
-
if (allowedStatuses.includes(item)) return false
|
|
88
|
-
if (item === '.gse/' || item.startsWith('examples/') || item.startsWith('scripts/') || item.startsWith('references/') || item.startsWith('assets/')) return false
|
|
89
|
-
return /verified|documented|unknown|unavailable/i.test(item)
|
|
90
|
-
})
|
|
91
|
-
|
|
92
|
-
const checks = [
|
|
93
|
-
check('C01', 'compatibility reference exists', fs.existsSync(compatibilityPath), 'references/compatibility.md'),
|
|
94
|
-
check('C02', 'required host families are represented', requiredHosts.every((host) => hostRowText.includes(host)), requiredHosts.join(', ')),
|
|
95
|
-
check('C03', 'status vocabulary is defined', allowedStatuses.every((status) => compatibility.includes('`' + status + '`')), allowedStatuses.join(', ')),
|
|
96
|
-
check('C04', 'no suspicious status labels appear', suspiciousStatusLabels.length === 0, suspiciousStatusLabels.length === 0 ? 'only allowed status labels detected' : suspiciousStatusLabels.join(', ')),
|
|
97
|
-
check('C05', 'portable source-of-truth rule is present', compatibility.includes('`.gse/` is the portable source of truth') && hostAdapters.includes('`.gse/` is the portable source of truth'), 'compatibility.md and host-adapters.md'),
|
|
98
|
-
check('C06', 'generated Codex and Claude adapters point to .gse', codexAdapter.includes('Source of truth: `.gse/`.') && claudeAdapter.includes('Source of truth: `.gse/`.'), 'examples/agent-runtime-host host adapters'),
|
|
99
|
-
check('C07', 'Codex/Claude verified claims cite local evidence', codexHostRow.includes('`verified`') && codexHostRow.includes('examples/agent-runtime-host/.codex/gse-adapter.md') && claudeHostRow.includes('`verified`') && claudeHostRow.includes('examples/agent-runtime-host/.claude/gse-adapter.md'), 'host matrix evidence cells'),
|
|
100
|
-
check('C08', 'risky host capabilities are not marked verified without current evidence', riskyVerifiedRows.length === 0, riskyVerifiedRows.length === 0 ? 'subagents/MCP/LSP/browser/hooks remain non-verified' : riskyVerifiedRows.map((row) => row.name).join(', ')),
|
|
101
|
-
check('C09', 'adoption rules require current-session verification', compatibility.includes('Record host-specific commands, hooks, MCP servers, subagents, models, browser tools, and indexes as `unknown` until checked in that project/session.') && compatibility.includes('Use `verified` only when current evidence proves the claim.'), 'Adoption Rules'),
|
|
102
|
-
check('C10', 'related references route through compatibility matrix', hostAdapters.includes('references/compatibility.md') && toolAdapters.includes('references/compatibility.md'), 'host-adapters.md and tool-adapters.md'),
|
|
103
|
-
]
|
|
104
|
-
|
|
105
|
-
const passed = checks.filter((item) => item.status === 'passed').length
|
|
106
|
-
const failed = checks.length - passed
|
|
107
|
-
const report = {
|
|
108
|
-
root,
|
|
109
|
-
generatedAt: new Date().toISOString(),
|
|
110
|
-
summary: { status: failed === 0 ? 'passed' : 'failed', passed, failed, total: checks.length },
|
|
111
|
-
workflows: { compatibilityMatrix: failed === 0 ? 'verified' : 'failed' },
|
|
112
|
-
limits: [
|
|
113
|
-
'Compatibility audit verifies documented support claims and source-of-truth invariants; it does not prove runtime host capabilities.',
|
|
114
|
-
'Generated host pointer claims are allowed as verified by current local evidence; runtime execution still requires host invocation records.',
|
|
115
|
-
'Subagents, MCP, LSP/index, browser, hooks/plugins, and provider model routing remain project/session-specific until separately verified.',
|
|
116
|
-
],
|
|
117
|
-
checks,
|
|
118
|
-
}
|
|
119
|
-
|
|
120
|
-
function renderMarkdown(data) {
|
|
121
|
-
const lines = []
|
|
122
|
-
lines.push('# GSE Compatibility Audit')
|
|
123
|
-
lines.push('')
|
|
124
|
-
lines.push('Generated: ' + data.generatedAt)
|
|
125
|
-
lines.push('Root: ' + data.root)
|
|
126
|
-
lines.push('')
|
|
127
|
-
lines.push('## Summary')
|
|
128
|
-
lines.push('')
|
|
129
|
-
lines.push('- Status: ' + data.summary.status)
|
|
130
|
-
lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
|
|
131
|
-
lines.push('- Compatibility matrix: ' + data.workflows.compatibilityMatrix)
|
|
132
|
-
lines.push('')
|
|
133
|
-
lines.push('## Checks')
|
|
134
|
-
lines.push('')
|
|
135
|
-
for (const item of data.checks) {
|
|
136
|
-
const marker = item.status === 'passed' ? '[x]' : '[ ]'
|
|
137
|
-
lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
|
|
138
|
-
}
|
|
139
|
-
lines.push('')
|
|
140
|
-
lines.push('## Limits')
|
|
141
|
-
lines.push('')
|
|
142
|
-
for (const item of data.limits) lines.push('- ' + item)
|
|
143
|
-
return lines.join('\n') + '\n'
|
|
144
|
-
}
|
|
145
|
-
|
|
146
|
-
if (jsonOnly) console.log(JSON.stringify(report, null, 2))
|
|
147
|
-
else console.log(renderMarkdown(report))
|
|
148
|
-
|
|
149
|
-
if (failed > 0) process.exit(1)
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import fs from 'node:fs'
|
|
3
|
+
import path from 'node:path'
|
|
4
|
+
|
|
5
|
+
const args = process.argv.slice(2)
|
|
6
|
+
|
|
7
|
+
function readArg(name, fallback = null) {
|
|
8
|
+
const index = args.indexOf(name)
|
|
9
|
+
if (index === -1) return fallback
|
|
10
|
+
return args[index + 1] ?? fallback
|
|
11
|
+
}
|
|
12
|
+
|
|
13
|
+
const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
|
|
14
|
+
const jsonOnly = args.includes('--json')
|
|
15
|
+
const compatibilityPath = path.join(root, 'references', 'compatibility.md')
|
|
16
|
+
const hostAdaptersPath = path.join(root, 'references', 'host-adapters.md')
|
|
17
|
+
const toolAdaptersPath = path.join(root, 'references', 'tool-adapters.md')
|
|
18
|
+
const generatedCodexAdapter = path.join(root, 'examples', 'agent-runtime-host', '.codex', 'gse-adapter.md')
|
|
19
|
+
const generatedClaudeAdapter = path.join(root, 'examples', 'agent-runtime-host', '.claude', 'gse-adapter.md')
|
|
20
|
+
|
|
21
|
+
function read(filePath) {
|
|
22
|
+
return fs.existsSync(filePath) ? fs.readFileSync(filePath, 'utf8') : ''
|
|
23
|
+
}
|
|
24
|
+
|
|
25
|
+
function check(id, label, ok, evidence, risk = '') {
|
|
26
|
+
return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
|
|
27
|
+
}
|
|
28
|
+
|
|
29
|
+
const compatibility = read(compatibilityPath)
|
|
30
|
+
const hostAdapters = read(hostAdaptersPath)
|
|
31
|
+
const toolAdapters = read(toolAdaptersPath)
|
|
32
|
+
const codexAdapter = read(generatedCodexAdapter)
|
|
33
|
+
const claudeAdapter = read(generatedClaudeAdapter)
|
|
34
|
+
|
|
35
|
+
const requiredHosts = [
|
|
36
|
+
'Codex-style',
|
|
37
|
+
'Claude Code-style',
|
|
38
|
+
'Hermes/AION-style runtime',
|
|
39
|
+
'WorkBuddy/other IDE agents',
|
|
40
|
+
'Copilot/Gemini-style assistants',
|
|
41
|
+
'Unknown or custom host',
|
|
42
|
+
]
|
|
43
|
+
const allowedStatuses = ['verified', 'documented', 'unknown', 'unavailable']
|
|
44
|
+
const riskyCapabilities = ['Subagents', 'MCP', 'LSP/index', 'Browser/Playwright', 'Hooks/plugins']
|
|
45
|
+
|
|
46
|
+
function extractTableRows(markdown, heading) {
|
|
47
|
+
const lines = markdown.split(/\r?\n/)
|
|
48
|
+
const start = lines.findIndex((line) => line.trim() === '## ' + heading)
|
|
49
|
+
if (start === -1) return []
|
|
50
|
+
const rows = []
|
|
51
|
+
for (let index = start + 1; index < lines.length; index += 1) {
|
|
52
|
+
const line = lines[index].trim()
|
|
53
|
+
if (line.startsWith('## ')) break
|
|
54
|
+
if (!line.startsWith('|')) continue
|
|
55
|
+
if (/^\|\s*-/.test(line)) continue
|
|
56
|
+
rows.push(line)
|
|
57
|
+
}
|
|
58
|
+
return rows
|
|
59
|
+
}
|
|
60
|
+
|
|
61
|
+
function rowCells(row) {
|
|
62
|
+
return row
|
|
63
|
+
.split('|')
|
|
64
|
+
.slice(1, -1)
|
|
65
|
+
.map((cell) => cell.trim())
|
|
66
|
+
}
|
|
67
|
+
|
|
68
|
+
function statusesInText(text) {
|
|
69
|
+
const matches = text.match(/`([^`]+)`/g) ?? []
|
|
70
|
+
return matches.map((item) => item.slice(1, -1)).filter((item) => allowedStatuses.includes(item))
|
|
71
|
+
}
|
|
72
|
+
|
|
73
|
+
const hostRows = extractTableRows(compatibility, 'Host Matrix')
|
|
74
|
+
const capabilityRows = extractTableRows(compatibility, 'Capability Matrix')
|
|
75
|
+
const hostRowText = hostRows.join('\n')
|
|
76
|
+
const capabilityMap = new Map(capabilityRows.map((row) => {
|
|
77
|
+
const cells = rowCells(row)
|
|
78
|
+
return [cells[0], cells]
|
|
79
|
+
}))
|
|
80
|
+
|
|
81
|
+
const codexHostRow = hostRows.find((row) => row.includes('| Codex-style |')) ?? ''
|
|
82
|
+
const claudeHostRow = hostRows.find((row) => row.includes('| Claude Code-style |')) ?? ''
|
|
83
|
+
const riskyRows = riskyCapabilities.map((name) => ({ name, cells: capabilityMap.get(name) ?? [] }))
|
|
84
|
+
const riskyVerifiedRows = riskyRows.filter((row) => row.cells.slice(1, 6).some((cell) => cell.includes('`verified`')))
|
|
85
|
+
const statusBackticks = new Set((hostRows.join('\n') + '\n' + capabilityRows.join('\n') + '\n' + compatibility.match(/## Status Vocabulary[\s\S]*?## Portable Source Of Truth/)?.[0]).match(/`([^`]+)`/g)?.map((item) => item.slice(1, -1)) ?? [])
|
|
86
|
+
const suspiciousStatusLabels = [...statusBackticks].filter((item) => {
|
|
87
|
+
if (allowedStatuses.includes(item)) return false
|
|
88
|
+
if (item === '.gse/' || item.startsWith('examples/') || item.startsWith('scripts/') || item.startsWith('references/') || item.startsWith('assets/')) return false
|
|
89
|
+
return /verified|documented|unknown|unavailable/i.test(item)
|
|
90
|
+
})
|
|
91
|
+
|
|
92
|
+
const checks = [
|
|
93
|
+
check('C01', 'compatibility reference exists', fs.existsSync(compatibilityPath), 'references/compatibility.md'),
|
|
94
|
+
check('C02', 'required host families are represented', requiredHosts.every((host) => hostRowText.includes(host)), requiredHosts.join(', ')),
|
|
95
|
+
check('C03', 'status vocabulary is defined', allowedStatuses.every((status) => compatibility.includes('`' + status + '`')), allowedStatuses.join(', ')),
|
|
96
|
+
check('C04', 'no suspicious status labels appear', suspiciousStatusLabels.length === 0, suspiciousStatusLabels.length === 0 ? 'only allowed status labels detected' : suspiciousStatusLabels.join(', ')),
|
|
97
|
+
check('C05', 'portable source-of-truth rule is present', compatibility.includes('`.gse/` is the portable source of truth') && hostAdapters.includes('`.gse/` is the portable source of truth'), 'compatibility.md and host-adapters.md'),
|
|
98
|
+
check('C06', 'generated Codex and Claude adapters point to .gse', codexAdapter.includes('Source of truth: `.gse/`.') && claudeAdapter.includes('Source of truth: `.gse/`.'), 'examples/agent-runtime-host host adapters'),
|
|
99
|
+
check('C07', 'Codex/Claude verified claims cite local evidence', codexHostRow.includes('`verified`') && codexHostRow.includes('examples/agent-runtime-host/.codex/gse-adapter.md') && claudeHostRow.includes('`verified`') && claudeHostRow.includes('examples/agent-runtime-host/.claude/gse-adapter.md'), 'host matrix evidence cells'),
|
|
100
|
+
check('C08', 'risky host capabilities are not marked verified without current evidence', riskyVerifiedRows.length === 0, riskyVerifiedRows.length === 0 ? 'subagents/MCP/LSP/browser/hooks remain non-verified' : riskyVerifiedRows.map((row) => row.name).join(', ')),
|
|
101
|
+
check('C09', 'adoption rules require current-session verification', compatibility.includes('Record host-specific commands, hooks, MCP servers, subagents, models, browser tools, and indexes as `unknown` until checked in that project/session.') && compatibility.includes('Use `verified` only when current evidence proves the claim.'), 'Adoption Rules'),
|
|
102
|
+
check('C10', 'related references route through compatibility matrix', hostAdapters.includes('references/compatibility.md') && toolAdapters.includes('references/compatibility.md'), 'host-adapters.md and tool-adapters.md'),
|
|
103
|
+
]
|
|
104
|
+
|
|
105
|
+
const passed = checks.filter((item) => item.status === 'passed').length
|
|
106
|
+
const failed = checks.length - passed
|
|
107
|
+
const report = {
|
|
108
|
+
root,
|
|
109
|
+
generatedAt: new Date().toISOString(),
|
|
110
|
+
summary: { status: failed === 0 ? 'passed' : 'failed', passed, failed, total: checks.length },
|
|
111
|
+
workflows: { compatibilityMatrix: failed === 0 ? 'verified' : 'failed' },
|
|
112
|
+
limits: [
|
|
113
|
+
'Compatibility audit verifies documented support claims and source-of-truth invariants; it does not prove runtime host capabilities.',
|
|
114
|
+
'Generated host pointer claims are allowed as verified by current local evidence; runtime execution still requires host invocation records.',
|
|
115
|
+
'Subagents, MCP, LSP/index, browser, hooks/plugins, and provider model routing remain project/session-specific until separately verified.',
|
|
116
|
+
],
|
|
117
|
+
checks,
|
|
118
|
+
}
|
|
119
|
+
|
|
120
|
+
function renderMarkdown(data) {
|
|
121
|
+
const lines = []
|
|
122
|
+
lines.push('# GSE Compatibility Audit')
|
|
123
|
+
lines.push('')
|
|
124
|
+
lines.push('Generated: ' + data.generatedAt)
|
|
125
|
+
lines.push('Root: ' + data.root)
|
|
126
|
+
lines.push('')
|
|
127
|
+
lines.push('## Summary')
|
|
128
|
+
lines.push('')
|
|
129
|
+
lines.push('- Status: ' + data.summary.status)
|
|
130
|
+
lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
|
|
131
|
+
lines.push('- Compatibility matrix: ' + data.workflows.compatibilityMatrix)
|
|
132
|
+
lines.push('')
|
|
133
|
+
lines.push('## Checks')
|
|
134
|
+
lines.push('')
|
|
135
|
+
for (const item of data.checks) {
|
|
136
|
+
const marker = item.status === 'passed' ? '[x]' : '[ ]'
|
|
137
|
+
lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
|
|
138
|
+
}
|
|
139
|
+
lines.push('')
|
|
140
|
+
lines.push('## Limits')
|
|
141
|
+
lines.push('')
|
|
142
|
+
for (const item of data.limits) lines.push('- ' + item)
|
|
143
|
+
return lines.join('\n') + '\n'
|
|
144
|
+
}
|
|
145
|
+
|
|
146
|
+
if (jsonOnly) console.log(JSON.stringify(report, null, 2))
|
|
147
|
+
else console.log(renderMarkdown(report))
|
|
148
|
+
|
|
149
|
+
if (failed > 0) process.exit(1)
|