@t275005746/gse 0.1.0 → 0.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
- package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
- package/.github/ISSUE_TEMPLATE/config.yml +5 -5
- package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
- package/.github/workflows/validate-gse.yml +33 -33
- package/.gse/README.md +18 -18
- package/.gse/gse-development-protocol.md +50 -50
- package/.gse/project-profile.md +29 -29
- package/.gse/quality-gates.md +25 -25
- package/.gse/releases/public-registry-publication-npm.md +49 -0
- package/.gse/releases/public-release-owner-required.md +65 -65
- package/.gse/releases/public-security-contact-owner-required.md +45 -45
- package/.gse/state.json +3 -4
- package/CHANGELOG.md +24 -24
- package/CONTRIBUTING.md +64 -64
- package/LICENSE +21 -21
- package/README.md +1 -1
- package/README.zh-CN.md +1 -1
- package/SECURITY.md +41 -41
- package/SUPPORT.md +38 -38
- package/assets/marketplace/README.md +7 -7
- package/assets/marketplace/gse-listing.json +75 -75
- package/assets/templates/acceptance-execution-packet.md +73 -73
- package/assets/templates/adr.md +14 -14
- package/assets/templates/change-brief.md +16 -16
- package/assets/templates/design.md +18 -18
- package/assets/templates/dispatch-packet.md +104 -104
- package/assets/templates/evidence.md +14 -14
- package/assets/templates/execution-quality-pack.md +65 -65
- package/assets/templates/goal-map.md +21 -21
- package/assets/templates/host-adapter.md +48 -48
- package/assets/templates/host-ui-invocation-record.md +42 -42
- package/assets/templates/incident-review.md +60 -60
- package/assets/templates/public-channel-publication-record.md +49 -49
- package/assets/templates/public-ci-run-record.md +53 -53
- package/assets/templates/public-release-record.md +65 -65
- package/assets/templates/public-repository-settings-record.md +59 -59
- package/assets/templates/public-security-contact-record.md +45 -45
- package/assets/templates/release-trust-record.md +32 -32
- package/assets/templates/review.md +18 -18
- package/assets/templates/spec.md +16 -16
- package/assets/templates/target-adoption-evidence.md +29 -29
- package/assets/templates/tasks.md +17 -17
- package/assets/templates/update-release-acceptance-record.md +58 -58
- package/examples/README.md +22 -22
- package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
- package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
- package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
- package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
- package/examples/agent-runtime-host/.gse/tooling.md +5 -5
- package/examples/agent-runtime-host/.mcp.json +9 -9
- package/examples/agent-runtime-host/AGENTS.md +5 -5
- package/examples/agent-runtime-host/README.md +10 -10
- package/examples/agent-runtime-host/docs/model-routing.md +5 -5
- package/examples/cli-tool/.gse/project-profile.md +21 -21
- package/examples/cli-tool/AGENTS.md +5 -5
- package/examples/cli-tool/README.md +12 -12
- package/examples/cli-tool/package.json +21 -21
- package/examples/small-app/.env.example +2 -2
- package/examples/small-app/.github/workflows/ci.yml +8 -8
- package/examples/small-app/AGENTS.md +5 -5
- package/examples/small-app/README.md +12 -12
- package/examples/small-app/package.json +26 -26
- package/examples/small-app/playwright.config.ts +4 -4
- package/package.json +53 -53
- package/references/adoption-recipes.md +171 -171
- package/references/agent-roles.md +49 -49
- package/references/architecture-health.md +101 -101
- package/references/benchmark-audit.md +73 -73
- package/references/community-channels.md +46 -46
- package/references/compatibility.md +70 -70
- package/references/design-basis.md +38 -38
- package/references/domain-model.md +129 -129
- package/references/domain-quality-gates.md +75 -75
- package/references/drift-audit.md +81 -81
- package/references/evidence-taxonomy.md +123 -123
- package/references/file-ownership.md +107 -107
- package/references/final-readiness.md +84 -84
- package/references/forward-test.md +133 -133
- package/references/goal-map.md +36 -36
- package/references/host-adapters.md +119 -119
- package/references/learning-system.md +35 -35
- package/references/marketplace-discovery.md +46 -46
- package/references/model-routing.md +103 -103
- package/references/open-source-defaults.md +39 -39
- package/references/operating-model.md +52 -52
- package/references/packaging.md +277 -277
- package/references/project-agent-workspace.md +89 -89
- package/references/project-bootstrap.md +122 -122
- package/references/project-profile.md +57 -57
- package/references/public-release.md +174 -174
- package/references/quality-gates.md +100 -100
- package/references/recovery.md +176 -176
- package/references/release-trust.md +43 -43
- package/references/release.md +126 -126
- package/references/review.md +141 -141
- package/references/router.md +90 -90
- package/references/spec-workflow.md +66 -66
- package/references/task-levels.md +81 -81
- package/references/tool-adapters.md +73 -73
- package/scripts/audit-acceptance-execution-packet.mjs +133 -133
- package/scripts/audit-adoption-recipes.mjs +99 -99
- package/scripts/audit-change-lifecycle.mjs +77 -77
- package/scripts/audit-change-system.mjs +134 -134
- package/scripts/audit-ci-readiness.mjs +107 -107
- package/scripts/audit-close-gate.mjs +323 -323
- package/scripts/audit-command-adapters.mjs +91 -91
- package/scripts/audit-command-execution.mjs +210 -210
- package/scripts/audit-compatibility.mjs +149 -149
- package/scripts/audit-completion-readiness.mjs +292 -292
- package/scripts/audit-distribution.mjs +251 -251
- package/scripts/audit-domain-quality-gates.mjs +108 -108
- package/scripts/audit-evidence-placeholders.mjs +126 -126
- package/scripts/audit-final-readiness-promotion.mjs +255 -255
- package/scripts/audit-final-readiness.mjs +226 -226
- package/scripts/audit-fixtures.mjs +154 -154
- package/scripts/audit-fresh-session-readiness.mjs +177 -177
- package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
- package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
- package/scripts/audit-host-runtime-invocations.mjs +254 -254
- package/scripts/audit-host-ui-invocation.mjs +132 -132
- package/scripts/audit-marketplace-discovery.mjs +122 -122
- package/scripts/audit-npm-package-metadata.mjs +155 -155
- package/scripts/audit-npm-publish-dry-run.mjs +191 -169
- package/scripts/audit-npm-tarball-install.mjs +191 -191
- package/scripts/audit-open-source-defaults.mjs +92 -92
- package/scripts/audit-open-source-readiness.mjs +97 -97
- package/scripts/audit-project.mjs +138 -138
- package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
- package/scripts/audit-public-acceptance-readiness.mjs +224 -224
- package/scripts/audit-public-channel-publication.mjs +248 -248
- package/scripts/audit-public-ci-run.mjs +184 -184
- package/scripts/audit-public-collaboration-templates.mjs +98 -98
- package/scripts/audit-public-external-gate-probe.mjs +206 -206
- package/scripts/audit-public-release-decision.mjs +201 -201
- package/scripts/audit-public-release-metadata.mjs +176 -176
- package/scripts/audit-public-repository-settings.mjs +237 -237
- package/scripts/audit-public-security-contact.mjs +171 -171
- package/scripts/audit-readme-docs.mjs +6 -4
- package/scripts/audit-recovery-readiness.mjs +98 -98
- package/scripts/audit-release-readiness.mjs +106 -106
- package/scripts/audit-release-trust.mjs +62 -62
- package/scripts/audit-remote-distribution.mjs +266 -266
- package/scripts/audit-roadmap-consistency.mjs +235 -235
- package/scripts/audit-signing.mjs +147 -147
- package/scripts/audit-state-freshness.mjs +14 -9
- package/scripts/audit-target-adoption-evidence.mjs +117 -117
- package/scripts/audit-target-project.mjs +507 -507
- package/scripts/audit-update-release-acceptance.mjs +136 -136
- package/scripts/audit-v1-target-validation.mjs +269 -269
- package/scripts/audit-validation-profiles.mjs +125 -125
- package/scripts/close-change.mjs +116 -116
- package/scripts/discover-project-profile.mjs +307 -307
- package/scripts/generate-command-adapter.mjs +231 -231
- package/scripts/generate-final-acceptance-packet.mjs +181 -181
- package/scripts/generate-final-form-progress-report.mjs +205 -205
- package/scripts/generate-host-runtime-evidence-handoff.mjs +206 -206
- package/scripts/generate-owner-external-gate-kit.mjs +295 -295
- package/scripts/generate-public-acceptance-handoff.mjs +168 -168
- package/scripts/generate-public-release-checklist.mjs +207 -207
- package/scripts/generate-release-bundle.mjs +505 -505
- package/scripts/generate-release-owner-action-plan.mjs +172 -172
- package/scripts/generate-release-status-manifest.mjs +200 -200
- package/scripts/generate-session-prompt.mjs +188 -188
- package/scripts/gse.mjs +67 -67
- package/scripts/init-change.mjs +265 -265
- package/scripts/init-project.mjs +785 -785
- package/scripts/install-gse.mjs +234 -234
- package/scripts/lib/evidence-placeholders.mjs +28 -28
- package/scripts/package-gse.mjs +174 -174
- package/scripts/probe-public-external-gates.mjs +167 -167
- package/scripts/record-host-invocation.mjs +151 -151
- package/scripts/record-public-channel-publication.mjs +178 -178
- package/scripts/record-public-ci-run.mjs +180 -180
- package/scripts/record-public-release.mjs +175 -175
- package/scripts/record-public-repository-settings.mjs +209 -209
- package/scripts/record-public-security-contact.mjs +157 -157
- package/scripts/sign-gse-package.mjs +83 -83
- package/scripts/update-project-state.mjs +223 -223
- package/scripts/verify-gse-package.mjs +85 -85
|
@@ -1,206 +1,206 @@
|
|
|
1
|
-
#!/usr/bin/env node
|
|
2
|
-
import fs from 'node:fs'
|
|
3
|
-
import path from 'node:path'
|
|
4
|
-
import { spawnSync } from 'node:child_process'
|
|
5
|
-
|
|
6
|
-
const args = process.argv.slice(2)
|
|
7
|
-
|
|
8
|
-
function readArg(name, fallback = null) {
|
|
9
|
-
const index = args.indexOf(name)
|
|
10
|
-
if (index === -1) return fallback
|
|
11
|
-
return args[index + 1] ?? fallback
|
|
12
|
-
}
|
|
13
|
-
|
|
14
|
-
function hasArg(name) {
|
|
15
|
-
return args.includes(name)
|
|
16
|
-
}
|
|
17
|
-
|
|
18
|
-
const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
|
|
19
|
-
const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'host-runtime-evidence-handoff.md')))
|
|
20
|
-
const displayRoot = readArg('--display-root', '<gse-root>')
|
|
21
|
-
const jsonOnly = hasArg('--json')
|
|
22
|
-
const dryRun = hasArg('--dry-run')
|
|
23
|
-
const force = hasArg('--force')
|
|
24
|
-
|
|
25
|
-
function read(relativePath) {
|
|
26
|
-
const fullPath = path.join(root, relativePath)
|
|
27
|
-
return fs.existsSync(fullPath) ? fs.readFileSync(fullPath, 'utf8').replace(/^\uFEFF/, '') : ''
|
|
28
|
-
}
|
|
29
|
-
|
|
30
|
-
function run(command, commandArgs) {
|
|
31
|
-
const result = spawnSync(command, commandArgs, {
|
|
32
|
-
cwd: root,
|
|
33
|
-
encoding: 'utf8',
|
|
34
|
-
windowsHide: true,
|
|
35
|
-
})
|
|
36
|
-
return {
|
|
37
|
-
status: result.status ?? 1,
|
|
38
|
-
stdout: (result.stdout ?? '').trim(),
|
|
39
|
-
stderr: (result.stderr ?? '').trim(),
|
|
40
|
-
command: [command, ...commandArgs].join(' '),
|
|
41
|
-
}
|
|
42
|
-
}
|
|
43
|
-
|
|
44
|
-
function parseJson(text) {
|
|
45
|
-
try {
|
|
46
|
-
return JSON.parse(text)
|
|
47
|
-
} catch {
|
|
48
|
-
return null
|
|
49
|
-
}
|
|
50
|
-
}
|
|
51
|
-
|
|
52
|
-
function runHostAudit() {
|
|
53
|
-
const result = run(process.execPath, [path.join(root, 'scripts', 'audit-host-runtime-invocations.mjs'), '--root', root, '--json'])
|
|
54
|
-
if (result.status !== 0) {
|
|
55
|
-
return { ok: false, error: 'host runtime invocation audit failed', result }
|
|
56
|
-
}
|
|
57
|
-
const data = parseJson(result.stdout)
|
|
58
|
-
if (!data) return { ok: false, error: 'host runtime invocation audit returned invalid JSON', result }
|
|
59
|
-
return { ok: true, data, command: result.command }
|
|
60
|
-
}
|
|
61
|
-
|
|
62
|
-
function hostRowsFromCompatibility() {
|
|
63
|
-
const text = read('references/compatibility.md')
|
|
64
|
-
const rows = []
|
|
65
|
-
let inHostMatrix = false
|
|
66
|
-
for (const line of text.split(/\r?\n/)) {
|
|
67
|
-
if (line.trim() === '## Host Matrix') {
|
|
68
|
-
inHostMatrix = true
|
|
69
|
-
continue
|
|
70
|
-
}
|
|
71
|
-
if (inHostMatrix && line.startsWith('## ')) break
|
|
72
|
-
if (!inHostMatrix) continue
|
|
73
|
-
if (!line.startsWith('| ')) continue
|
|
74
|
-
if (line.includes('---') || line.includes('Host family')) continue
|
|
75
|
-
const cells = line.split('|').map((item) => item.trim()).filter(Boolean)
|
|
76
|
-
if (cells.length < 6) continue
|
|
77
|
-
rows.push({
|
|
78
|
-
hostFamily: cells[0],
|
|
79
|
-
adapterLocation: cells[1],
|
|
80
|
-
sourcePointer: cells[2],
|
|
81
|
-
currentStatus: cells[3].replace(/`/g, ''),
|
|
82
|
-
evidence: cells[4],
|
|
83
|
-
fallback: cells[5],
|
|
84
|
-
})
|
|
85
|
-
}
|
|
86
|
-
return rows
|
|
87
|
-
}
|
|
88
|
-
|
|
89
|
-
function commandFor(hostFamily) {
|
|
90
|
-
const safeHost = hostFamily.replace(/\|/g, '').replace(/\s+/g, ' ').trim()
|
|
91
|
-
return [
|
|
92
|
-
'node __GSE__/scripts/record-host-invocation.mjs',
|
|
93
|
-
'--root __PROJECT_OR_GSE__',
|
|
94
|
-
`--host "${safeHost}"`,
|
|
95
|
-
'--host-version "__VERSION_OR_UNKNOWN__"',
|
|
96
|
-
'--project "__PROJECT_NAME__"',
|
|
97
|
-
'--adapter-path "__HOST_ADAPTER_OR_POINTER__"',
|
|
98
|
-
'--invocation-method "__NATIVE_SLASH_COMMAND_OR_PORTABLE_TEXT_COMMAND_OR_HOST_UI_COMMAND_OR_RUNTIME_BRIDGE__"',
|
|
99
|
-
'--command "/gse continue"',
|
|
100
|
-
'--status verified',
|
|
101
|
-
'--evidence-owner "__PERSON_OR_AGENT__"',
|
|
102
|
-
'--evidence "__THREAD_ID_TRANSCRIPT_SCREENSHOT_TERMINAL_OUTPUT_OR_HOST_LOG__"',
|
|
103
|
-
'--portable-text-command true|false',
|
|
104
|
-
'--native-slash-command true|false',
|
|
105
|
-
'--generated-pointer true|false',
|
|
106
|
-
'--owner-acceptance-required false',
|
|
107
|
-
'--out __PROJECT_OR_GSE__/.gse/evidence/host-invocations/__DATE__-__HOST__-gse.md',
|
|
108
|
-
].join(' ')
|
|
109
|
-
}
|
|
110
|
-
|
|
111
|
-
function renderHandoff(audit, hostRows) {
|
|
112
|
-
const inventory = audit.inventory ?? {}
|
|
113
|
-
const lines = []
|
|
114
|
-
lines.push('# GSE Host Runtime Evidence Handoff')
|
|
115
|
-
lines.push('')
|
|
116
|
-
lines.push('Generated: ' + new Date().toISOString())
|
|
117
|
-
lines.push('Root: ' + displayRoot)
|
|
118
|
-
lines.push('')
|
|
119
|
-
lines.push('## Purpose')
|
|
120
|
-
lines.push('')
|
|
121
|
-
lines.push('Turn cross-host support into auditable runtime evidence. Generated adapters, docs, or command pointers are useful setup, but they are not proof that a host actually invoked GSE.')
|
|
122
|
-
lines.push('')
|
|
123
|
-
lines.push('## Current Runtime Evidence')
|
|
124
|
-
lines.push('')
|
|
125
|
-
lines.push('- Host runtime invocation records: ' + (inventory.records ?? 0))
|
|
126
|
-
lines.push('- Verified or accepted records: ' + (inventory.closeableRecords ?? 0))
|
|
127
|
-
lines.push('- Hosts with records: ' + (inventory.hosts?.length ? inventory.hosts.join(', ') : 'none'))
|
|
128
|
-
lines.push('- Native slash-command records: ' + (inventory.nativeSlashCommandRecords ?? 0))
|
|
129
|
-
lines.push('- Portable text-command records: ' + (inventory.portableTextCommandRecords ?? 0))
|
|
130
|
-
lines.push('- Audit command: `node scripts/audit-host-runtime-invocations.mjs --root __GSE_OR_PROJECT__ --json`')
|
|
131
|
-
lines.push('')
|
|
132
|
-
lines.push('## Host Evidence Plan')
|
|
133
|
-
lines.push('')
|
|
134
|
-
for (const host of hostRows) {
|
|
135
|
-
lines.push('### ' + host.hostFamily)
|
|
136
|
-
lines.push('')
|
|
137
|
-
lines.push('- Adapter location: ' + host.adapterLocation)
|
|
138
|
-
lines.push('- Current matrix status: ' + host.currentStatus)
|
|
139
|
-
lines.push('- Existing evidence: ' + host.evidence)
|
|
140
|
-
lines.push('- Fallback: ' + host.fallback)
|
|
141
|
-
lines.push('- Required runtime proof: a persistent record under `.gse/evidence/host-invocations/` produced by `record-host-invocation.mjs` or manually matching the same fields.')
|
|
142
|
-
lines.push('- Record command:')
|
|
143
|
-
lines.push('')
|
|
144
|
-
lines.push('```bash')
|
|
145
|
-
lines.push(commandFor(host.hostFamily))
|
|
146
|
-
lines.push('```')
|
|
147
|
-
lines.push('')
|
|
148
|
-
}
|
|
149
|
-
lines.push('## Verification')
|
|
150
|
-
lines.push('')
|
|
151
|
-
lines.push('Run these commands after adding host evidence:')
|
|
152
|
-
lines.push('')
|
|
153
|
-
lines.push('```bash')
|
|
154
|
-
lines.push('node scripts/audit-host-runtime-invocations.mjs --root __GSE_OR_PROJECT__ --json')
|
|
155
|
-
lines.push('node scripts/audit-final-readiness.mjs --root __GSE_OR_PROJECT__ --json')
|
|
156
|
-
lines.push('node scripts/validate-gse.mjs --root __GSE_OR_PROJECT__ --json')
|
|
157
|
-
lines.push('```')
|
|
158
|
-
lines.push('')
|
|
159
|
-
lines.push('## Anti-Overclaim')
|
|
160
|
-
lines.push('')
|
|
161
|
-
lines.push('- Do not claim native slash-command support from generated pointers or portable text-command records.')
|
|
162
|
-
lines.push('- Do not claim a host is supported without a host runtime invocation record for that host.')
|
|
163
|
-
lines.push('- Do not mark a host record accepted when `owner-acceptance-required` is true.')
|
|
164
|
-
lines.push('- Keep host capability status separate from portable `.gse/` workflow status.')
|
|
165
|
-
lines.push('- Treat subagents, MCP, LSP, browser tools, hooks, and plugins as host/session-specific until current evidence proves them.')
|
|
166
|
-
lines.push('')
|
|
167
|
-
lines.push('## Next Action')
|
|
168
|
-
lines.push('')
|
|
169
|
-
lines.push('Record real invocation evidence for Claude Code-style, Hermes/AION-style, WorkBuddy/other IDE agents, and any host-native slash-command mechanism that becomes available.')
|
|
170
|
-
return lines.join('\n') + '\n'
|
|
171
|
-
}
|
|
172
|
-
|
|
173
|
-
const audit = runHostAudit()
|
|
174
|
-
if (!audit.ok) {
|
|
175
|
-
console.error(JSON.stringify({ status: 'failed', root, out, error: audit.error, auditResult: audit.result }, null, 2))
|
|
176
|
-
process.exit(1)
|
|
177
|
-
}
|
|
178
|
-
|
|
179
|
-
const hostRows = hostRowsFromCompatibility()
|
|
180
|
-
const handoff = renderHandoff(audit.data, hostRows)
|
|
181
|
-
|
|
182
|
-
if (!dryRun) {
|
|
183
|
-
if (fs.existsSync(out) && !force) {
|
|
184
|
-
console.error(JSON.stringify({ status: 'exists', root, out, error: 'output exists; pass --force to overwrite' }, null, 2))
|
|
185
|
-
process.exit(1)
|
|
186
|
-
}
|
|
187
|
-
fs.mkdirSync(path.dirname(out), { recursive: true })
|
|
188
|
-
fs.writeFileSync(out, handoff, 'utf8')
|
|
189
|
-
}
|
|
190
|
-
|
|
191
|
-
const report = {
|
|
192
|
-
status: dryRun ? 'ready' : 'written',
|
|
193
|
-
root,
|
|
194
|
-
out,
|
|
195
|
-
dryRun,
|
|
196
|
-
hostAuditCommand: audit.command,
|
|
197
|
-
summary: {
|
|
198
|
-
hostFamilies: hostRows.length,
|
|
199
|
-
records: audit.data.inventory?.records ?? 0,
|
|
200
|
-
nativeSlashCommandRecords: audit.data.inventory?.nativeSlashCommandRecords ?? 0,
|
|
201
|
-
portableTextCommandRecords: audit.data.inventory?.portableTextCommandRecords ?? 0,
|
|
202
|
-
},
|
|
203
|
-
}
|
|
204
|
-
|
|
205
|
-
if (jsonOnly) console.log(JSON.stringify(report, null, 2))
|
|
206
|
-
else console.log(handoff)
|
|
1
|
+
#!/usr/bin/env node
|
|
2
|
+
import fs from 'node:fs'
|
|
3
|
+
import path from 'node:path'
|
|
4
|
+
import { spawnSync } from 'node:child_process'
|
|
5
|
+
|
|
6
|
+
const args = process.argv.slice(2)
|
|
7
|
+
|
|
8
|
+
function readArg(name, fallback = null) {
|
|
9
|
+
const index = args.indexOf(name)
|
|
10
|
+
if (index === -1) return fallback
|
|
11
|
+
return args[index + 1] ?? fallback
|
|
12
|
+
}
|
|
13
|
+
|
|
14
|
+
function hasArg(name) {
|
|
15
|
+
return args.includes(name)
|
|
16
|
+
}
|
|
17
|
+
|
|
18
|
+
const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
|
|
19
|
+
const out = path.resolve(readArg('--out', path.join(root, '.gse', 'acceptance', 'host-runtime-evidence-handoff.md')))
|
|
20
|
+
const displayRoot = readArg('--display-root', '<gse-root>')
|
|
21
|
+
const jsonOnly = hasArg('--json')
|
|
22
|
+
const dryRun = hasArg('--dry-run')
|
|
23
|
+
const force = hasArg('--force')
|
|
24
|
+
|
|
25
|
+
function read(relativePath) {
|
|
26
|
+
const fullPath = path.join(root, relativePath)
|
|
27
|
+
return fs.existsSync(fullPath) ? fs.readFileSync(fullPath, 'utf8').replace(/^\uFEFF/, '') : ''
|
|
28
|
+
}
|
|
29
|
+
|
|
30
|
+
function run(command, commandArgs) {
|
|
31
|
+
const result = spawnSync(command, commandArgs, {
|
|
32
|
+
cwd: root,
|
|
33
|
+
encoding: 'utf8',
|
|
34
|
+
windowsHide: true,
|
|
35
|
+
})
|
|
36
|
+
return {
|
|
37
|
+
status: result.status ?? 1,
|
|
38
|
+
stdout: (result.stdout ?? '').trim(),
|
|
39
|
+
stderr: (result.stderr ?? '').trim(),
|
|
40
|
+
command: [command, ...commandArgs].join(' '),
|
|
41
|
+
}
|
|
42
|
+
}
|
|
43
|
+
|
|
44
|
+
function parseJson(text) {
|
|
45
|
+
try {
|
|
46
|
+
return JSON.parse(text)
|
|
47
|
+
} catch {
|
|
48
|
+
return null
|
|
49
|
+
}
|
|
50
|
+
}
|
|
51
|
+
|
|
52
|
+
function runHostAudit() {
|
|
53
|
+
const result = run(process.execPath, [path.join(root, 'scripts', 'audit-host-runtime-invocations.mjs'), '--root', root, '--json'])
|
|
54
|
+
if (result.status !== 0) {
|
|
55
|
+
return { ok: false, error: 'host runtime invocation audit failed', result }
|
|
56
|
+
}
|
|
57
|
+
const data = parseJson(result.stdout)
|
|
58
|
+
if (!data) return { ok: false, error: 'host runtime invocation audit returned invalid JSON', result }
|
|
59
|
+
return { ok: true, data, command: result.command }
|
|
60
|
+
}
|
|
61
|
+
|
|
62
|
+
function hostRowsFromCompatibility() {
|
|
63
|
+
const text = read('references/compatibility.md')
|
|
64
|
+
const rows = []
|
|
65
|
+
let inHostMatrix = false
|
|
66
|
+
for (const line of text.split(/\r?\n/)) {
|
|
67
|
+
if (line.trim() === '## Host Matrix') {
|
|
68
|
+
inHostMatrix = true
|
|
69
|
+
continue
|
|
70
|
+
}
|
|
71
|
+
if (inHostMatrix && line.startsWith('## ')) break
|
|
72
|
+
if (!inHostMatrix) continue
|
|
73
|
+
if (!line.startsWith('| ')) continue
|
|
74
|
+
if (line.includes('---') || line.includes('Host family')) continue
|
|
75
|
+
const cells = line.split('|').map((item) => item.trim()).filter(Boolean)
|
|
76
|
+
if (cells.length < 6) continue
|
|
77
|
+
rows.push({
|
|
78
|
+
hostFamily: cells[0],
|
|
79
|
+
adapterLocation: cells[1],
|
|
80
|
+
sourcePointer: cells[2],
|
|
81
|
+
currentStatus: cells[3].replace(/`/g, ''),
|
|
82
|
+
evidence: cells[4],
|
|
83
|
+
fallback: cells[5],
|
|
84
|
+
})
|
|
85
|
+
}
|
|
86
|
+
return rows
|
|
87
|
+
}
|
|
88
|
+
|
|
89
|
+
function commandFor(hostFamily) {
|
|
90
|
+
const safeHost = hostFamily.replace(/\|/g, '').replace(/\s+/g, ' ').trim()
|
|
91
|
+
return [
|
|
92
|
+
'node __GSE__/scripts/record-host-invocation.mjs',
|
|
93
|
+
'--root __PROJECT_OR_GSE__',
|
|
94
|
+
`--host "${safeHost}"`,
|
|
95
|
+
'--host-version "__VERSION_OR_UNKNOWN__"',
|
|
96
|
+
'--project "__PROJECT_NAME__"',
|
|
97
|
+
'--adapter-path "__HOST_ADAPTER_OR_POINTER__"',
|
|
98
|
+
'--invocation-method "__NATIVE_SLASH_COMMAND_OR_PORTABLE_TEXT_COMMAND_OR_HOST_UI_COMMAND_OR_RUNTIME_BRIDGE__"',
|
|
99
|
+
'--command "/gse continue"',
|
|
100
|
+
'--status verified',
|
|
101
|
+
'--evidence-owner "__PERSON_OR_AGENT__"',
|
|
102
|
+
'--evidence "__THREAD_ID_TRANSCRIPT_SCREENSHOT_TERMINAL_OUTPUT_OR_HOST_LOG__"',
|
|
103
|
+
'--portable-text-command true|false',
|
|
104
|
+
'--native-slash-command true|false',
|
|
105
|
+
'--generated-pointer true|false',
|
|
106
|
+
'--owner-acceptance-required false',
|
|
107
|
+
'--out __PROJECT_OR_GSE__/.gse/evidence/host-invocations/__DATE__-__HOST__-gse.md',
|
|
108
|
+
].join(' ')
|
|
109
|
+
}
|
|
110
|
+
|
|
111
|
+
function renderHandoff(audit, hostRows) {
|
|
112
|
+
const inventory = audit.inventory ?? {}
|
|
113
|
+
const lines = []
|
|
114
|
+
lines.push('# GSE Host Runtime Evidence Handoff')
|
|
115
|
+
lines.push('')
|
|
116
|
+
lines.push('Generated: ' + new Date().toISOString())
|
|
117
|
+
lines.push('Root: ' + displayRoot)
|
|
118
|
+
lines.push('')
|
|
119
|
+
lines.push('## Purpose')
|
|
120
|
+
lines.push('')
|
|
121
|
+
lines.push('Turn cross-host support into auditable runtime evidence. Generated adapters, docs, or command pointers are useful setup, but they are not proof that a host actually invoked GSE.')
|
|
122
|
+
lines.push('')
|
|
123
|
+
lines.push('## Current Runtime Evidence')
|
|
124
|
+
lines.push('')
|
|
125
|
+
lines.push('- Host runtime invocation records: ' + (inventory.records ?? 0))
|
|
126
|
+
lines.push('- Verified or accepted records: ' + (inventory.closeableRecords ?? 0))
|
|
127
|
+
lines.push('- Hosts with records: ' + (inventory.hosts?.length ? inventory.hosts.join(', ') : 'none'))
|
|
128
|
+
lines.push('- Native slash-command records: ' + (inventory.nativeSlashCommandRecords ?? 0))
|
|
129
|
+
lines.push('- Portable text-command records: ' + (inventory.portableTextCommandRecords ?? 0))
|
|
130
|
+
lines.push('- Audit command: `node scripts/audit-host-runtime-invocations.mjs --root __GSE_OR_PROJECT__ --json`')
|
|
131
|
+
lines.push('')
|
|
132
|
+
lines.push('## Host Evidence Plan')
|
|
133
|
+
lines.push('')
|
|
134
|
+
for (const host of hostRows) {
|
|
135
|
+
lines.push('### ' + host.hostFamily)
|
|
136
|
+
lines.push('')
|
|
137
|
+
lines.push('- Adapter location: ' + host.adapterLocation)
|
|
138
|
+
lines.push('- Current matrix status: ' + host.currentStatus)
|
|
139
|
+
lines.push('- Existing evidence: ' + host.evidence)
|
|
140
|
+
lines.push('- Fallback: ' + host.fallback)
|
|
141
|
+
lines.push('- Required runtime proof: a persistent record under `.gse/evidence/host-invocations/` produced by `record-host-invocation.mjs` or manually matching the same fields.')
|
|
142
|
+
lines.push('- Record command:')
|
|
143
|
+
lines.push('')
|
|
144
|
+
lines.push('```bash')
|
|
145
|
+
lines.push(commandFor(host.hostFamily))
|
|
146
|
+
lines.push('```')
|
|
147
|
+
lines.push('')
|
|
148
|
+
}
|
|
149
|
+
lines.push('## Verification')
|
|
150
|
+
lines.push('')
|
|
151
|
+
lines.push('Run these commands after adding host evidence:')
|
|
152
|
+
lines.push('')
|
|
153
|
+
lines.push('```bash')
|
|
154
|
+
lines.push('node scripts/audit-host-runtime-invocations.mjs --root __GSE_OR_PROJECT__ --json')
|
|
155
|
+
lines.push('node scripts/audit-final-readiness.mjs --root __GSE_OR_PROJECT__ --json')
|
|
156
|
+
lines.push('node scripts/validate-gse.mjs --root __GSE_OR_PROJECT__ --json')
|
|
157
|
+
lines.push('```')
|
|
158
|
+
lines.push('')
|
|
159
|
+
lines.push('## Anti-Overclaim')
|
|
160
|
+
lines.push('')
|
|
161
|
+
lines.push('- Do not claim native slash-command support from generated pointers or portable text-command records.')
|
|
162
|
+
lines.push('- Do not claim a host is supported without a host runtime invocation record for that host.')
|
|
163
|
+
lines.push('- Do not mark a host record accepted when `owner-acceptance-required` is true.')
|
|
164
|
+
lines.push('- Keep host capability status separate from portable `.gse/` workflow status.')
|
|
165
|
+
lines.push('- Treat subagents, MCP, LSP, browser tools, hooks, and plugins as host/session-specific until current evidence proves them.')
|
|
166
|
+
lines.push('')
|
|
167
|
+
lines.push('## Next Action')
|
|
168
|
+
lines.push('')
|
|
169
|
+
lines.push('Record real invocation evidence for Claude Code-style, Hermes/AION-style, WorkBuddy/other IDE agents, and any host-native slash-command mechanism that becomes available.')
|
|
170
|
+
return lines.join('\n') + '\n'
|
|
171
|
+
}
|
|
172
|
+
|
|
173
|
+
const audit = runHostAudit()
|
|
174
|
+
if (!audit.ok) {
|
|
175
|
+
console.error(JSON.stringify({ status: 'failed', root, out, error: audit.error, auditResult: audit.result }, null, 2))
|
|
176
|
+
process.exit(1)
|
|
177
|
+
}
|
|
178
|
+
|
|
179
|
+
const hostRows = hostRowsFromCompatibility()
|
|
180
|
+
const handoff = renderHandoff(audit.data, hostRows)
|
|
181
|
+
|
|
182
|
+
if (!dryRun) {
|
|
183
|
+
if (fs.existsSync(out) && !force) {
|
|
184
|
+
console.error(JSON.stringify({ status: 'exists', root, out, error: 'output exists; pass --force to overwrite' }, null, 2))
|
|
185
|
+
process.exit(1)
|
|
186
|
+
}
|
|
187
|
+
fs.mkdirSync(path.dirname(out), { recursive: true })
|
|
188
|
+
fs.writeFileSync(out, handoff, 'utf8')
|
|
189
|
+
}
|
|
190
|
+
|
|
191
|
+
const report = {
|
|
192
|
+
status: dryRun ? 'ready' : 'written',
|
|
193
|
+
root,
|
|
194
|
+
out,
|
|
195
|
+
dryRun,
|
|
196
|
+
hostAuditCommand: audit.command,
|
|
197
|
+
summary: {
|
|
198
|
+
hostFamilies: hostRows.length,
|
|
199
|
+
records: audit.data.inventory?.records ?? 0,
|
|
200
|
+
nativeSlashCommandRecords: audit.data.inventory?.nativeSlashCommandRecords ?? 0,
|
|
201
|
+
portableTextCommandRecords: audit.data.inventory?.portableTextCommandRecords ?? 0,
|
|
202
|
+
},
|
|
203
|
+
}
|
|
204
|
+
|
|
205
|
+
if (jsonOnly) console.log(JSON.stringify(report, null, 2))
|
|
206
|
+
else console.log(handoff)
|