@t275005746/gse 0.1.0 → 0.1.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (228) hide show
  1. package/.github/ISSUE_TEMPLATE/bug_report.yml +42 -42
  2. package/.github/ISSUE_TEMPLATE/change_request.yml +50 -50
  3. package/.github/ISSUE_TEMPLATE/config.yml +5 -5
  4. package/.github/PULL_REQUEST_TEMPLATE.md +38 -38
  5. package/.github/workflows/validate-gse.yml +33 -33
  6. package/.gse/README.md +18 -18
  7. package/.gse/gse-development-protocol.md +50 -50
  8. package/.gse/project-profile.md +29 -29
  9. package/.gse/quality-gates.md +25 -25
  10. package/.gse/releases/public-registry-publication-npm.md +49 -0
  11. package/.gse/releases/public-release-owner-required.md +65 -65
  12. package/.gse/releases/public-security-contact-owner-required.md +45 -45
  13. package/.gse/state.json +147 -27
  14. package/CHANGELOG.md +31 -15
  15. package/CONTRIBUTING.md +64 -64
  16. package/LICENSE +21 -21
  17. package/README.md +14 -7
  18. package/README.zh-CN.md +14 -7
  19. package/SECURITY.md +41 -41
  20. package/SKILL.md +32 -12
  21. package/SUPPORT.md +38 -38
  22. package/assets/marketplace/README.md +7 -7
  23. package/assets/marketplace/gse-listing.json +75 -75
  24. package/assets/templates/acceptance-execution-packet.md +73 -73
  25. package/assets/templates/adr.md +14 -14
  26. package/assets/templates/change-brief.md +16 -16
  27. package/assets/templates/design.md +18 -18
  28. package/assets/templates/dispatch-packet.md +100 -92
  29. package/assets/templates/evidence.md +15 -9
  30. package/assets/templates/execution-quality-pack.md +65 -65
  31. package/assets/templates/goal-map.md +21 -21
  32. package/assets/templates/host-adapter.md +48 -48
  33. package/assets/templates/host-ui-invocation-record.md +42 -42
  34. package/assets/templates/incident-review.md +60 -60
  35. package/assets/templates/public-channel-publication-record.md +49 -49
  36. package/assets/templates/public-ci-run-record.md +53 -53
  37. package/assets/templates/public-release-record.md +65 -65
  38. package/assets/templates/public-repository-settings-record.md +59 -59
  39. package/assets/templates/public-security-contact-record.md +45 -45
  40. package/assets/templates/release-trust-record.md +32 -32
  41. package/assets/templates/review.md +18 -18
  42. package/assets/templates/role-fallback-packet.md +49 -0
  43. package/assets/templates/spec.md +16 -16
  44. package/assets/templates/target-adoption-evidence.md +29 -29
  45. package/assets/templates/tasks.md +17 -17
  46. package/assets/templates/update-release-acceptance-record.md +58 -58
  47. package/examples/README.md +22 -22
  48. package/examples/agent-runtime-host/.claude/gse-adapter.md +6 -6
  49. package/examples/agent-runtime-host/.codex/gse-adapter.md +7 -7
  50. package/examples/agent-runtime-host/.gse/goal-map.md +7 -7
  51. package/examples/agent-runtime-host/.gse/project-profile.md +27 -27
  52. package/examples/agent-runtime-host/.gse/tooling.md +5 -5
  53. package/examples/agent-runtime-host/.mcp.json +9 -9
  54. package/examples/agent-runtime-host/AGENTS.md +5 -5
  55. package/examples/agent-runtime-host/README.md +10 -10
  56. package/examples/agent-runtime-host/docs/model-routing.md +5 -5
  57. package/examples/cli-tool/.gse/project-profile.md +21 -21
  58. package/examples/cli-tool/AGENTS.md +5 -5
  59. package/examples/cli-tool/README.md +12 -12
  60. package/examples/cli-tool/package.json +21 -21
  61. package/examples/small-app/.env.example +2 -2
  62. package/examples/small-app/.github/workflows/ci.yml +8 -8
  63. package/examples/small-app/AGENTS.md +5 -5
  64. package/examples/small-app/README.md +12 -12
  65. package/examples/small-app/package.json +26 -26
  66. package/examples/small-app/playwright.config.ts +4 -4
  67. package/package.json +52 -44
  68. package/references/adoption-recipes.md +171 -171
  69. package/references/agent-roles.md +42 -21
  70. package/references/architecture-health.md +101 -101
  71. package/references/benchmark-audit.md +73 -73
  72. package/references/commands.md +74 -45
  73. package/references/community-channels.md +46 -46
  74. package/references/compatibility.md +70 -70
  75. package/references/design-basis.md +38 -38
  76. package/references/domain-model.md +129 -129
  77. package/references/domain-quality-gates.md +75 -75
  78. package/references/drift-audit.md +81 -80
  79. package/references/evidence-taxonomy.md +145 -108
  80. package/references/file-ownership.md +97 -93
  81. package/references/final-form-roadmap.md +201 -0
  82. package/references/final-readiness.md +84 -84
  83. package/references/forward-test.md +133 -133
  84. package/references/goal-map.md +36 -36
  85. package/references/host-adapters.md +129 -101
  86. package/references/learning-system.md +42 -26
  87. package/references/maintenance-cadence.md +51 -0
  88. package/references/marketplace-discovery.md +46 -46
  89. package/references/model-routing.md +103 -103
  90. package/references/open-source-defaults.md +39 -39
  91. package/references/operating-model.md +52 -52
  92. package/references/packaging.md +277 -277
  93. package/references/project-agent-workspace.md +89 -89
  94. package/references/project-bootstrap.md +122 -122
  95. package/references/project-guards.md +52 -0
  96. package/references/project-profile.md +57 -57
  97. package/references/public-release.md +174 -174
  98. package/references/quality-gates.md +96 -89
  99. package/references/recovery.md +176 -176
  100. package/references/release-trust.md +43 -43
  101. package/references/release.md +126 -126
  102. package/references/review.md +141 -141
  103. package/references/role-dispatch-fallback.md +54 -0
  104. package/references/router.md +90 -90
  105. package/references/spec-workflow.md +66 -66
  106. package/references/task-levels.md +81 -81
  107. package/references/tool-adapters.md +80 -70
  108. package/scripts/audit-acceptance-execution-packet.mjs +133 -133
  109. package/scripts/audit-adoption-recipes.mjs +99 -99
  110. package/scripts/audit-change-lifecycle.mjs +77 -77
  111. package/scripts/audit-change-system.mjs +134 -134
  112. package/scripts/audit-ci-readiness.mjs +107 -107
  113. package/scripts/audit-close-gate-hardening.mjs +188 -0
  114. package/scripts/audit-close-gate.mjs +448 -262
  115. package/scripts/audit-command-adapters.mjs +91 -91
  116. package/scripts/audit-command-execution.mjs +212 -199
  117. package/scripts/audit-commands.mjs +7 -5
  118. package/scripts/audit-compatibility.mjs +149 -149
  119. package/scripts/audit-completion-plan-drill.mjs +230 -0
  120. package/scripts/audit-completion-readiness.mjs +290 -287
  121. package/scripts/audit-continue-preflight.mjs +234 -0
  122. package/scripts/audit-distribution.mjs +251 -251
  123. package/scripts/audit-domain-quality-gates.mjs +108 -108
  124. package/scripts/audit-evidence-levels.mjs +217 -0
  125. package/scripts/audit-evidence-placeholders.mjs +126 -126
  126. package/scripts/audit-evidence-review-queue.mjs +206 -0
  127. package/scripts/audit-final-acceptance-packet.mjs +9 -9
  128. package/scripts/audit-final-form-progress-report.mjs +19 -18
  129. package/scripts/audit-final-form-roadmap.mjs +157 -0
  130. package/scripts/audit-final-form-stale-copy.mjs +2 -2
  131. package/scripts/audit-final-readiness-promotion.mjs +255 -255
  132. package/scripts/audit-final-readiness.mjs +226 -226
  133. package/scripts/audit-fixtures.mjs +154 -154
  134. package/scripts/audit-fresh-session-readiness.mjs +177 -177
  135. package/scripts/audit-host-capabilities.mjs +237 -0
  136. package/scripts/audit-host-runtime-evidence-handoff.mjs +159 -159
  137. package/scripts/audit-host-runtime-invocation-drill.mjs +240 -240
  138. package/scripts/audit-host-runtime-invocations.mjs +254 -254
  139. package/scripts/audit-host-ui-invocation.mjs +132 -132
  140. package/scripts/audit-installed-sync.mjs +203 -0
  141. package/scripts/audit-learning-drift.mjs +292 -0
  142. package/scripts/audit-learning-promotion.mjs +351 -0
  143. package/scripts/audit-learning-system.mjs +24 -14
  144. package/scripts/audit-local-final-form-completion.mjs +11 -10
  145. package/scripts/audit-maintenance-cadence.mjs +139 -0
  146. package/scripts/audit-maintenance-snapshot.mjs +181 -0
  147. package/scripts/audit-marketplace-discovery.mjs +122 -122
  148. package/scripts/audit-npm-package-metadata.mjs +160 -154
  149. package/scripts/audit-npm-publish-dry-run.mjs +194 -166
  150. package/scripts/audit-npm-tarball-install.mjs +195 -189
  151. package/scripts/audit-open-source-defaults.mjs +92 -92
  152. package/scripts/audit-open-source-readiness.mjs +97 -97
  153. package/scripts/audit-owner-external-gate-kit.mjs +12 -11
  154. package/scripts/audit-project-guards.mjs +189 -0
  155. package/scripts/audit-project.mjs +144 -141
  156. package/scripts/audit-public-acceptance-command-dry-run-drill.mjs +203 -203
  157. package/scripts/audit-public-acceptance-handoff.mjs +10 -10
  158. package/scripts/audit-public-acceptance-readiness.mjs +222 -222
  159. package/scripts/audit-public-channel-publication.mjs +248 -248
  160. package/scripts/audit-public-ci-run.mjs +184 -184
  161. package/scripts/audit-public-collaboration-templates.mjs +98 -98
  162. package/scripts/audit-public-external-gate-probe.mjs +206 -206
  163. package/scripts/audit-public-release-checklist.mjs +17 -15
  164. package/scripts/audit-public-release-decision.mjs +201 -201
  165. package/scripts/audit-public-release-metadata.mjs +176 -176
  166. package/scripts/audit-public-repository-settings.mjs +237 -237
  167. package/scripts/audit-public-security-contact.mjs +171 -171
  168. package/scripts/audit-readme-docs.mjs +6 -4
  169. package/scripts/audit-recovery-readiness.mjs +98 -98
  170. package/scripts/audit-release-bundle.mjs +13 -11
  171. package/scripts/audit-release-owner-action-plan-drill.mjs +5 -4
  172. package/scripts/audit-release-owner-action-plan.mjs +10 -10
  173. package/scripts/audit-release-readiness.mjs +106 -106
  174. package/scripts/audit-release-status-manifest.mjs +4 -4
  175. package/scripts/audit-release-trust.mjs +62 -62
  176. package/scripts/audit-remote-distribution.mjs +266 -266
  177. package/scripts/audit-roadmap-consistency.mjs +234 -230
  178. package/scripts/audit-role-dispatch-fallback.mjs +212 -0
  179. package/scripts/audit-session-sync.mjs +127 -0
  180. package/scripts/audit-signing.mjs +147 -147
  181. package/scripts/audit-state-freshness.mjs +20 -14
  182. package/scripts/audit-state-repair.mjs +360 -0
  183. package/scripts/audit-target-adoption-evidence.mjs +117 -117
  184. package/scripts/audit-target-hardening-drills.mjs +267 -0
  185. package/scripts/audit-target-project.mjs +507 -507
  186. package/scripts/audit-tool-fallback-policy.mjs +180 -0
  187. package/scripts/audit-ui-browser-evidence-policy.mjs +191 -0
  188. package/scripts/audit-update-release-acceptance.mjs +136 -136
  189. package/scripts/audit-v1-target-validation.mjs +269 -269
  190. package/scripts/audit-validation-profiles.mjs +125 -123
  191. package/scripts/backfill-evidence-levels.mjs +98 -0
  192. package/scripts/check-encoding.mjs +72 -0
  193. package/scripts/close-change.mjs +116 -116
  194. package/scripts/discover-project-profile.mjs +307 -307
  195. package/scripts/generate-command-adapter.mjs +231 -231
  196. package/scripts/generate-continue-packet.mjs +1214 -0
  197. package/scripts/generate-final-acceptance-packet.mjs +188 -173
  198. package/scripts/generate-final-form-progress-report.mjs +191 -189
  199. package/scripts/generate-host-runtime-evidence-handoff.mjs +198 -191
  200. package/scripts/generate-maintenance-snapshot.mjs +216 -0
  201. package/scripts/generate-owner-external-gate-kit.mjs +295 -295
  202. package/scripts/generate-public-acceptance-handoff.mjs +168 -156
  203. package/scripts/generate-public-release-checklist.mjs +207 -207
  204. package/scripts/generate-release-bundle.mjs +505 -505
  205. package/scripts/generate-release-owner-action-plan.mjs +172 -171
  206. package/scripts/generate-release-status-manifest.mjs +199 -198
  207. package/scripts/generate-session-prompt.mjs +188 -188
  208. package/scripts/gse.mjs +67 -67
  209. package/scripts/init-change.mjs +265 -265
  210. package/scripts/init-project.mjs +793 -712
  211. package/scripts/install-gse.mjs +234 -234
  212. package/scripts/lib/evidence-placeholders.mjs +28 -28
  213. package/scripts/package-gse.mjs +174 -174
  214. package/scripts/probe-public-external-gates.mjs +167 -167
  215. package/scripts/record-host-invocation.mjs +151 -151
  216. package/scripts/record-learning.mjs +37 -8
  217. package/scripts/record-public-channel-publication.mjs +178 -178
  218. package/scripts/record-public-ci-run.mjs +180 -180
  219. package/scripts/record-public-release.mjs +175 -175
  220. package/scripts/record-public-repository-settings.mjs +209 -209
  221. package/scripts/record-public-security-contact.mjs +157 -157
  222. package/scripts/record-session-sync.mjs +87 -0
  223. package/scripts/run-gse-command.mjs +79 -47
  224. package/scripts/run-validation-profile.mjs +24 -5
  225. package/scripts/sign-gse-package.mjs +83 -83
  226. package/scripts/update-project-state.mjs +223 -223
  227. package/scripts/validate-gse.mjs +216 -0
  228. package/scripts/verify-gse-package.mjs +85 -85
@@ -1,154 +1,154 @@
1
- #!/usr/bin/env node
2
- import fs from 'node:fs'
3
- import path from 'node:path'
4
-
5
- const args = process.argv.slice(2)
6
-
7
- function readArg(name, fallback = null) {
8
- const index = args.indexOf(name)
9
- if (index === -1) return fallback
10
- return args[index + 1] ?? fallback
11
- }
12
-
13
- const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
14
- const jsonOnly = args.includes('--json')
15
-
16
- function exists(relativePath) {
17
- return fs.existsSync(path.join(root, relativePath))
18
- }
19
-
20
- function readText(relativePath) {
21
- const filePath = path.join(root, relativePath)
22
- if (!fs.existsSync(filePath)) return ''
23
- return fs.readFileSync(filePath, 'utf8')
24
- }
25
-
26
- function safeJson(relativePath) {
27
- const text = readText(relativePath)
28
- if (!text) return null
29
- try {
30
- return JSON.parse(text.replace(/^\uFEFF/, ''))
31
- } catch {
32
- return null
33
- }
34
- }
35
-
36
- function detectSmallAppProfile() {
37
- const base = 'examples/small-app'
38
- const pkg = safeJson(base + '/package.json')
39
- const deps = { ...(pkg?.dependencies ?? {}), ...(pkg?.devDependencies ?? {}) }
40
- const scripts = pkg?.scripts ?? {}
41
- const frameworks = []
42
- const checks = [
43
- ['react', 'React'],
44
- ['vite', 'Vite'],
45
- ['typescript', 'TypeScript'],
46
- ['@playwright/test', 'Playwright'],
47
- ['vitest', 'Vitest'],
48
- ['eslint', 'ESLint'],
49
- ['prettier', 'Prettier'],
50
- ]
51
- for (const [dep, label] of checks) {
52
- if (deps[dep]) frameworks.push(label)
53
- }
54
- const configFiles = [
55
- base + '/package.json',
56
- base + '/playwright.config.ts',
57
- base + '/.env.example',
58
- base + '/.github/workflows/ci.yml',
59
- base + '/AGENTS.md',
60
- ].filter(exists)
61
- return { pkg, frameworks, scripts, configFiles }
62
- }
63
-
64
- function detectCliToolProfile() {
65
- const base = 'examples/cli-tool'
66
- const pkg = safeJson(base + '/package.json')
67
- const scripts = pkg?.scripts ?? {}
68
- const configFiles = [
69
- base + '/package.json',
70
- base + '/AGENTS.md',
71
- base + '/.gse/project-profile.md',
72
- ].filter(exists)
73
- return { pkg, scripts, configFiles }
74
- }
75
-
76
- function check(id, label, ok, evidence, risk = '') {
77
- return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
78
- }
79
-
80
- const small = detectSmallAppProfile()
81
- const cli = detectCliToolProfile()
82
- const runtimeProfile = readText('examples/agent-runtime-host/.gse/project-profile.md')
83
- const codexAdapter = readText('examples/agent-runtime-host/.codex/gse-adapter.md')
84
- const claudeAdapter = readText('examples/agent-runtime-host/.claude/gse-adapter.md')
85
- const runtimeTooling = readText('examples/agent-runtime-host/.gse/tooling.md')
86
- const modelRouting = readText('examples/agent-runtime-host/docs/model-routing.md')
87
-
88
- const checks = [
89
- check('F01', 'examples root exists', exists('examples/README.md'), 'examples/README.md'),
90
- check('F02', 'small-app fixture exists', exists('examples/small-app/README.md') && exists('examples/small-app/package.json'), 'examples/small-app/README.md, package.json'),
91
- check('F03', 'small-app profile discovery signals are present', small.frameworks.includes('React') && small.frameworks.includes('Vite') && small.frameworks.includes('TypeScript') && small.frameworks.includes('Playwright'), 'frameworks: ' + small.frameworks.join(', ')),
92
- check('F04', 'small-app commands and evidence sources are documented', Boolean(small.scripts.test && small.scripts['test:e2e'] && small.scripts.typecheck && small.configFiles.length >= 5), 'scripts: ' + Object.keys(small.scripts).join(', ') + '; config files: ' + small.configFiles.join(', ')),
93
- check('F05', 'cli-tool fixture exists', exists('examples/cli-tool/README.md') && exists('examples/cli-tool/package.json') && exists('examples/cli-tool/.gse/project-profile.md'), 'examples/cli-tool README, package.json, project-profile.md'),
94
- check('F06', 'cli-tool package adoption signals are documented', Boolean(cli.pkg?.bin?.['gse-fixture'] && cli.scripts.smoke && cli.scripts['release:dry-run'] && cli.scripts.typecheck && cli.scripts.lint), 'bin and scripts: ' + Object.keys(cli.scripts).join(', ')),
95
- check('F07', 'cli-tool profile keeps package capabilities evidence-bound', readText('examples/cli-tool/.gse/project-profile.md').includes('documented') && readText('examples/cli-tool/.gse/project-profile.md').includes('unknown') && readText('examples/cli-tool/.gse/project-profile.md').includes('npm pack --dry-run'), 'examples/cli-tool/.gse/project-profile.md'),
96
- check('F08', 'cli-tool is listed in examples routing', readText('examples/README.md').includes('cli-tool') && readText('examples/README.md').includes('package adoption'), 'examples/README.md'),
97
- check('F09', 'agent-runtime-host fixture exists', exists('examples/agent-runtime-host/README.md') && exists('examples/agent-runtime-host/.gse/project-profile.md'), 'examples/agent-runtime-host/README.md, .gse/project-profile.md'),
98
- check('F10', 'host adapters point back to .gse source of truth', codexAdapter.includes('Source of truth: `.gse/`.') && claudeAdapter.includes('Source of truth: `.gse/`.'), '.codex/gse-adapter.md, .claude/gse-adapter.md'),
99
- check('F11', 'host adapter fixture separates verified and unknown capability claims', runtimeProfile.includes('documented') && runtimeProfile.includes('unknown') && runtimeTooling.includes('not verified'), '.gse/project-profile.md and .gse/tooling.md status vocabulary'),
100
- check('F12', 'drift audit and model routing signals are present', codexAdapter.includes('references/drift-audit.md') && modelRouting.includes('provider support from docs alone'), 'Codex adapter drift pointer and docs/model-routing.md'),
101
- check('F13', 'fixture safety rules avoid secrets and bulky artifacts', readText('examples/README.md').includes('No secrets') && readText('examples/README.md').includes('No lockfiles, caches, screenshots'), 'examples/README.md safety rules'),
102
- ]
103
-
104
- const passed = checks.filter((item) => item.status === 'passed').length
105
- const failed = checks.length - passed
106
- const report = {
107
- root,
108
- generatedAt: new Date().toISOString(),
109
- summary: { passed, failed, total: checks.length, status: failed === 0 ? 'passed' : 'failed' },
110
- workflows: {
111
- projectProfileDiscovery: checks.filter((item) => ['F02', 'F03', 'F04'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
112
- cliPackageAdoption: checks.filter((item) => ['F05', 'F06', 'F07', 'F08'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
113
- hostAdapterAndDrift: checks.filter((item) => ['F09', 'F10', 'F11', 'F12'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
114
- },
115
- limits: [
116
- 'Fixture audit uses controlled example project shapes, not broad real repositories.',
117
- 'Fixture audit does not claim fresh-session acceptance.',
118
- 'Config presence is treated as documented unless a command is actually run.',
119
- ],
120
- checks,
121
- }
122
-
123
- function renderMarkdown(data) {
124
- const lines = []
125
- lines.push('# GSE Fixture Audit')
126
- lines.push('')
127
- lines.push('Generated: ' + data.generatedAt)
128
- lines.push('Root: ' + data.root)
129
- lines.push('')
130
- lines.push('## Summary')
131
- lines.push('')
132
- lines.push('- Status: ' + data.summary.status)
133
- lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
134
- lines.push('- Project profile discovery: ' + data.workflows.projectProfileDiscovery)
135
- lines.push('- CLI package adoption: ' + data.workflows.cliPackageAdoption)
136
- lines.push('- Host adapter and drift: ' + data.workflows.hostAdapterAndDrift)
137
- lines.push('')
138
- lines.push('## Checks')
139
- lines.push('')
140
- for (const item of data.checks) {
141
- const marker = item.status === 'passed' ? '[x]' : '[ ]'
142
- lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
143
- }
144
- lines.push('')
145
- lines.push('## Limits')
146
- lines.push('')
147
- for (const item of data.limits) lines.push('- ' + item)
148
- return lines.join('\n') + '\n'
149
- }
150
-
151
- if (jsonOnly) console.log(JSON.stringify(report, null, 2))
152
- else console.log(renderMarkdown(report))
153
-
154
- if (failed > 0) process.exit(1)
1
+ #!/usr/bin/env node
2
+ import fs from 'node:fs'
3
+ import path from 'node:path'
4
+
5
+ const args = process.argv.slice(2)
6
+
7
+ function readArg(name, fallback = null) {
8
+ const index = args.indexOf(name)
9
+ if (index === -1) return fallback
10
+ return args[index + 1] ?? fallback
11
+ }
12
+
13
+ const root = path.resolve(readArg('--root', path.join(import.meta.dirname, '..')))
14
+ const jsonOnly = args.includes('--json')
15
+
16
+ function exists(relativePath) {
17
+ return fs.existsSync(path.join(root, relativePath))
18
+ }
19
+
20
+ function readText(relativePath) {
21
+ const filePath = path.join(root, relativePath)
22
+ if (!fs.existsSync(filePath)) return ''
23
+ return fs.readFileSync(filePath, 'utf8')
24
+ }
25
+
26
+ function safeJson(relativePath) {
27
+ const text = readText(relativePath)
28
+ if (!text) return null
29
+ try {
30
+ return JSON.parse(text.replace(/^\uFEFF/, ''))
31
+ } catch {
32
+ return null
33
+ }
34
+ }
35
+
36
+ function detectSmallAppProfile() {
37
+ const base = 'examples/small-app'
38
+ const pkg = safeJson(base + '/package.json')
39
+ const deps = { ...(pkg?.dependencies ?? {}), ...(pkg?.devDependencies ?? {}) }
40
+ const scripts = pkg?.scripts ?? {}
41
+ const frameworks = []
42
+ const checks = [
43
+ ['react', 'React'],
44
+ ['vite', 'Vite'],
45
+ ['typescript', 'TypeScript'],
46
+ ['@playwright/test', 'Playwright'],
47
+ ['vitest', 'Vitest'],
48
+ ['eslint', 'ESLint'],
49
+ ['prettier', 'Prettier'],
50
+ ]
51
+ for (const [dep, label] of checks) {
52
+ if (deps[dep]) frameworks.push(label)
53
+ }
54
+ const configFiles = [
55
+ base + '/package.json',
56
+ base + '/playwright.config.ts',
57
+ base + '/.env.example',
58
+ base + '/.github/workflows/ci.yml',
59
+ base + '/AGENTS.md',
60
+ ].filter(exists)
61
+ return { pkg, frameworks, scripts, configFiles }
62
+ }
63
+
64
+ function detectCliToolProfile() {
65
+ const base = 'examples/cli-tool'
66
+ const pkg = safeJson(base + '/package.json')
67
+ const scripts = pkg?.scripts ?? {}
68
+ const configFiles = [
69
+ base + '/package.json',
70
+ base + '/AGENTS.md',
71
+ base + '/.gse/project-profile.md',
72
+ ].filter(exists)
73
+ return { pkg, scripts, configFiles }
74
+ }
75
+
76
+ function check(id, label, ok, evidence, risk = '') {
77
+ return { id, label, status: ok ? 'passed' : 'failed', evidence, risk }
78
+ }
79
+
80
+ const small = detectSmallAppProfile()
81
+ const cli = detectCliToolProfile()
82
+ const runtimeProfile = readText('examples/agent-runtime-host/.gse/project-profile.md')
83
+ const codexAdapter = readText('examples/agent-runtime-host/.codex/gse-adapter.md')
84
+ const claudeAdapter = readText('examples/agent-runtime-host/.claude/gse-adapter.md')
85
+ const runtimeTooling = readText('examples/agent-runtime-host/.gse/tooling.md')
86
+ const modelRouting = readText('examples/agent-runtime-host/docs/model-routing.md')
87
+
88
+ const checks = [
89
+ check('F01', 'examples root exists', exists('examples/README.md'), 'examples/README.md'),
90
+ check('F02', 'small-app fixture exists', exists('examples/small-app/README.md') && exists('examples/small-app/package.json'), 'examples/small-app/README.md, package.json'),
91
+ check('F03', 'small-app profile discovery signals are present', small.frameworks.includes('React') && small.frameworks.includes('Vite') && small.frameworks.includes('TypeScript') && small.frameworks.includes('Playwright'), 'frameworks: ' + small.frameworks.join(', ')),
92
+ check('F04', 'small-app commands and evidence sources are documented', Boolean(small.scripts.test && small.scripts['test:e2e'] && small.scripts.typecheck && small.configFiles.length >= 5), 'scripts: ' + Object.keys(small.scripts).join(', ') + '; config files: ' + small.configFiles.join(', ')),
93
+ check('F05', 'cli-tool fixture exists', exists('examples/cli-tool/README.md') && exists('examples/cli-tool/package.json') && exists('examples/cli-tool/.gse/project-profile.md'), 'examples/cli-tool README, package.json, project-profile.md'),
94
+ check('F06', 'cli-tool package adoption signals are documented', Boolean(cli.pkg?.bin?.['gse-fixture'] && cli.scripts.smoke && cli.scripts['release:dry-run'] && cli.scripts.typecheck && cli.scripts.lint), 'bin and scripts: ' + Object.keys(cli.scripts).join(', ')),
95
+ check('F07', 'cli-tool profile keeps package capabilities evidence-bound', readText('examples/cli-tool/.gse/project-profile.md').includes('documented') && readText('examples/cli-tool/.gse/project-profile.md').includes('unknown') && readText('examples/cli-tool/.gse/project-profile.md').includes('npm pack --dry-run'), 'examples/cli-tool/.gse/project-profile.md'),
96
+ check('F08', 'cli-tool is listed in examples routing', readText('examples/README.md').includes('cli-tool') && readText('examples/README.md').includes('package adoption'), 'examples/README.md'),
97
+ check('F09', 'agent-runtime-host fixture exists', exists('examples/agent-runtime-host/README.md') && exists('examples/agent-runtime-host/.gse/project-profile.md'), 'examples/agent-runtime-host/README.md, .gse/project-profile.md'),
98
+ check('F10', 'host adapters point back to .gse source of truth', codexAdapter.includes('Source of truth: `.gse/`.') && claudeAdapter.includes('Source of truth: `.gse/`.'), '.codex/gse-adapter.md, .claude/gse-adapter.md'),
99
+ check('F11', 'host adapter fixture separates verified and unknown capability claims', runtimeProfile.includes('documented') && runtimeProfile.includes('unknown') && runtimeTooling.includes('not verified'), '.gse/project-profile.md and .gse/tooling.md status vocabulary'),
100
+ check('F12', 'drift audit and model routing signals are present', codexAdapter.includes('references/drift-audit.md') && modelRouting.includes('provider support from docs alone'), 'Codex adapter drift pointer and docs/model-routing.md'),
101
+ check('F13', 'fixture safety rules avoid secrets and bulky artifacts', readText('examples/README.md').includes('No secrets') && readText('examples/README.md').includes('No lockfiles, caches, screenshots'), 'examples/README.md safety rules'),
102
+ ]
103
+
104
+ const passed = checks.filter((item) => item.status === 'passed').length
105
+ const failed = checks.length - passed
106
+ const report = {
107
+ root,
108
+ generatedAt: new Date().toISOString(),
109
+ summary: { passed, failed, total: checks.length, status: failed === 0 ? 'passed' : 'failed' },
110
+ workflows: {
111
+ projectProfileDiscovery: checks.filter((item) => ['F02', 'F03', 'F04'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
112
+ cliPackageAdoption: checks.filter((item) => ['F05', 'F06', 'F07', 'F08'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
113
+ hostAdapterAndDrift: checks.filter((item) => ['F09', 'F10', 'F11', 'F12'].includes(item.id)).every((item) => item.status === 'passed') ? 'verified' : 'failed',
114
+ },
115
+ limits: [
116
+ 'Fixture audit uses controlled example project shapes, not broad real repositories.',
117
+ 'Fixture audit does not claim fresh-session acceptance.',
118
+ 'Config presence is treated as documented unless a command is actually run.',
119
+ ],
120
+ checks,
121
+ }
122
+
123
+ function renderMarkdown(data) {
124
+ const lines = []
125
+ lines.push('# GSE Fixture Audit')
126
+ lines.push('')
127
+ lines.push('Generated: ' + data.generatedAt)
128
+ lines.push('Root: ' + data.root)
129
+ lines.push('')
130
+ lines.push('## Summary')
131
+ lines.push('')
132
+ lines.push('- Status: ' + data.summary.status)
133
+ lines.push('- Checks: ' + data.summary.passed + '/' + data.summary.total)
134
+ lines.push('- Project profile discovery: ' + data.workflows.projectProfileDiscovery)
135
+ lines.push('- CLI package adoption: ' + data.workflows.cliPackageAdoption)
136
+ lines.push('- Host adapter and drift: ' + data.workflows.hostAdapterAndDrift)
137
+ lines.push('')
138
+ lines.push('## Checks')
139
+ lines.push('')
140
+ for (const item of data.checks) {
141
+ const marker = item.status === 'passed' ? '[x]' : '[ ]'
142
+ lines.push('- ' + marker + ' ' + item.id + ' ' + item.label + ': ' + item.evidence)
143
+ }
144
+ lines.push('')
145
+ lines.push('## Limits')
146
+ lines.push('')
147
+ for (const item of data.limits) lines.push('- ' + item)
148
+ return lines.join('\n') + '\n'
149
+ }
150
+
151
+ if (jsonOnly) console.log(JSON.stringify(report, null, 2))
152
+ else console.log(renderMarkdown(report))
153
+
154
+ if (failed > 0) process.exit(1)