forkit-ai-footprints 0.2.0

package/docs/MACOS_TESTER_GUIDE.md

@@ -0,0 +1,88 @@
+# Forkit AI Footprints macOS Field Test
+
+This is a metadata-only Apple Silicon macOS field test. Forkit AI Footprints has
+no uploader. Do not test it on a machine where
+you are unable to review the local metadata it will inspect.
+
+## What the test reads
+
+AI Footprints reads process metadata, known application/configuration-path existence,
+supported model-file metadata, known MCP configuration entry counts, and
+supported loopback runtime APIs. It does not read model bytes, retain raw
+commands, emit full paths or MCP values, authenticate, or contact Forkit.dev.
+
+## Requirements
+
+- a Mac you are authorized to inspect;
+- Node.js 20, 22, or 24 and npm;
+- the provided `forkit-census-0.2.0.tgz` test artifact;
+- its SHA-256 checksum from the test coordinator.
+
+Verify and install the artifact:
+
+```bash
+shasum -a 256 ./forkit-census-0.2.0.tgz
+npm install -g ./forkit-census-0.2.0.tgz
+forkit-census doctor
+```
+
+Stop if the checksum differs or `doctor` does not identify macOS.
+
+## Create independent truth
+
+Copy `examples/macos-truth.template.json` outside the repository and fill it in
+after manually checking the Mac. Do this before looking at the Census scan so
+the tool does not define its own truth.
+
+- `agent_signatures`: supported agent processes actually running now. Supported
+  values are `codex`, `claude`, `aider`, `openhands`, `goose`, `cursor`,
+  `windsurf`, `gemini-cli`, `opencode`, `openclaw`, `cline`, `roo-code`,
+  `mcp-server`, `langchain`, `langgraph`, `crewai`, `autogen`, `llamaindex`,
+  `agno`, `pydantic-ai`, and `smolagents`.
+- `tool_names`: supported installed/configured products. Supported values are
+  `Claude Code`, `Codex`, `Cursor`, `Windsurf`, `Gemini CLI`, `GitHub Copilot`,
+  `OpenCode`, `OpenClaw`, `Jan`, `LM Studio`, and `Zed`.
+- `online_runtime_names`: supported runtime APIs responding locally now:
+  `ollama`, `lmstudio`, or `openai-compatible`.
+- `model_keys`: every expected supported model as `runtime:model-name`, using
+  the exact name shown by the runtime or local model manager.
+- `mcp_clients`: supported clients with a non-empty known MCP configuration.
+  Use `Claude Code`, `Codex`, `Cursor`, `VS Code`, `VS Code Insiders`,
+  `Windsurf`, or `Zed`.
+
+Use an empty array when nothing should be detected for a surface. Keep this
+truth file private; it may contain model names.
+
+## Run and review
+
+```bash
+forkit-census evaluate \
+  --truth /absolute/path/to/local-truth.json \
+  --output ./macos-evaluation.json
+```
+
+The result contains only aggregate true-positive, false-positive, and
+false-negative counts, plus macOS major version, CPU architecture, Node major,
+and product version. It contains no truth item names and is not uploaded.
+
+Open `macos-evaluation.json` before sharing it. Share only that evaluation file
+if you separately consent. Never send the truth file, raw scan output, terminal
+history, configuration files, or screenshots containing private names.
+
+## Coordinator aggregation
+
+Place explicitly shared evaluation JSON files in one directory and run:
+
+```bash
+forkit-census aggregate \
+  --results /absolute/path/to/macos-field-results \
+  --output ./macos-field-aggregate.json
+```
+
+The aggregate includes coverage counts and Wilson 95% confidence intervals.
+It deliberately keeps `field_accuracy_claim_allowed` false. A human review
+against `docs/MACOS_ACCURACY_GATE.md` is required before any accuracy claim or
+release decision. The coordinator must independently track one result per Mac;
+the result format deliberately contains no persistent device identifier and
+therefore cannot automatically detect repeated submissions from one machine.
+Results from different Census versions are rejected rather than pooled.

package/examples/macos-truth.template.json

@@ -0,0 +1,10 @@
+{
+  "schema_version": "1.0",
+  "expected": {
+    "agent_signatures": [],
+    "tool_names": [],
+    "online_runtime_names": [],
+    "model_keys": [],
+    "mcp_clients": []
+  }
+}

package/package.json

@@ -0,0 +1,75 @@
+{
+  "name": "forkit-ai-footprints",
+  "version": "0.2.0",
+  "description": "Forkit AI Footprints: private local AI model, runtime, and agent inventory",
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/arpitasarker01/forkit-census.git"
+  },
+  "homepage": "https://github.com/arpitasarker01/forkit-census#readme",
+  "bugs": {
+    "url": "https://github.com/arpitasarker01/forkit-census/issues"
+  },
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.js",
+      "default": "./dist/index.js"
+    }
+  },
+  "engines": {
+    "node": "20.x || 22.x || 24.x"
+  },
+  "os": [
+    "darwin"
+  ],
+  "cpu": [
+    "arm64"
+  ],
+  "files": [
+    "dist",
+    "README.md",
+    "STATUS.md",
+    "PRIVACY.md",
+    "docs/MACOS_TESTER_GUIDE.md",
+    "docs/MACOS_ACCURACY_GATE.md",
+    "docs/GLOBAL_DISTRIBUTION.md",
+    "release/channels.json",
+    "examples/macos-truth.template.json",
+    "LICENSE"
+  ],
+  "scripts": {
+    "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true });\"",
+    "build": "npm run clean && tsc -p tsconfig.json && node ./scripts/prepare-dist.mjs",
+    "dev": "tsc -w -p tsconfig.json",
+    "test": "npm run build && node ./scripts/run-tests.mjs && node ./scripts/benchmark-agents.mjs",
+    "benchmark:agents": "npm run build && node ./scripts/benchmark-agents.mjs",
+    "validate:macos": "npm run build && node ./scripts/validate-macos-device.mjs",
+    "validate:app-attest": "node ./scripts/validate-app-attest-helper.mjs",
+    "preflight:macos:release": "node ./scripts/preflight-macos-release.mjs",
+    "evaluate:macos": "npm run build && node ./scripts/evaluate-macos-field.mjs",
+    "prepack": "npm run build && node ./scripts/prune-dist.mjs && node ./scripts/prepare-macos-bootstrap.mjs",
+    "smoke:package": "node ./scripts/smoke-package.mjs",
+    "build:macos:installer": "npm run build && node ./scripts/prune-dist.mjs && COPYFILE_DISABLE=1 node ./scripts/build-macos-installer.mjs",
+    "release:check": "node ./scripts/verify-release-coherence.mjs",
+    "release:manifest": "node ./scripts/verify-release-coherence.mjs --write",
+    "prepublishOnly": "npm test && npm run validate:macos"
+  },
+  "bin": {
+    "forkit-ai-footprints": "dist/cli.js",
+    "forkit-census": "dist/cli.js"
+  },
+  "dependencies": {
+    "ps-list": "^9.0.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "typescript": "^5.0.0"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/release/channels.json

@@ -0,0 +1,41 @@
+{
+  "schema_version": "1.0",
+  "product": "forkit-ai-footprints",
+  "version_source": "package.json",
+  "repository": "arpitasarker01/forkit-census",
+  "support": {
+    "operating_system": "macOS",
+    "architecture": "Apple Silicon",
+    "field_accuracy_claim": false
+  },
+  "channels": {
+    "github_release": {
+      "role": "canonical immutable release",
+      "tag": "v{version}",
+      "manifest_asset": "forkit-ai-footprints-{version}-release.json",
+      "status": "available"
+    },
+    "npm": {
+      "role": "global developer installation",
+      "package": "forkit-ai-footprints",
+      "install": "npx --yes forkit-ai-footprints@{version}",
+      "status": "available"
+    },
+    "homebrew": {
+      "role": "global macOS package-manager installation",
+      "formula": "forkit-ai-footprints",
+      "install": "brew install arpitasarker01/ai-footprints/forkit-ai-footprints",
+      "status": "tap-not-created"
+    },
+    "macos_installer": {
+      "role": "future click installation",
+      "asset": "Forkit-AI-Footprints-{version}-macos-arm64.pkg",
+      "status": "blocked-on-developer-id-and-notarization"
+    },
+    "website": {
+      "role": "public recommendation surface",
+      "path": "/ai-footprint",
+      "status": "available"
+    }
+  }
+}