Files
ruvnet--ruflo/scripts/audit-tool-descriptions.mjs
wehub-resource-sync 23f7624596
ADR-166 MCP Bridge Security Lock / Static-source security lock (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / Compose default binds loopback + Mongo has auth (push) Failing after 2s
CodeQL Advanced / Analyze (rust) (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / plugin-agent-federation bindHost default (push) Failing after 1s
ADR-166 MCP Bridge Security Lock / Runtime behavior — 401 + terminal gate + fail-closed (push) Failing after 4s
business-pods-smoke / smoke (push) Failing after 1s
all-plugins-smoke / smoke-all (push) Failing after 2s
CI/CD Pipeline / Security & Code Quality (push) Failing after 1s
CI/CD Pipeline / Test Suite (ubuntu-latest) (push) Failing after 1s
CI/CD Pipeline / Build & Package (macos-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (ubuntu-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (windows-latest) (push) Has been skipped
CI/CD Pipeline / Documentation & Examples (push) Failing after 1s
Clone Tracker (14-day rolling) / Snapshot clones for ruflo ecosystem (push) Failing after 1s
CodeQL Advanced / Analyze (actions) (push) Failing after 1s
CodeQL Advanced / Analyze (javascript-typescript) (push) Failing after 1s
federation-peer-rust / stable-noop (push) Failing after 1s
metaharness-ci / score (push) Failing after 1s
metaharness-ci / router-compat (push) Failing after 0s
metaharness-ci / similarity-tests (push) Failing after 0s
no-agentbbs-smoke / smoke-without-agentbbs (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (windows-latest) (push) Has been skipped
codex-integration-audit / Codex integration audit (push) Failing after 1s
helpers-manifest-guard / guard (push) Failing after 1s
🔗 Cross-Agent Integration Tests / 🤝 Agent Coordination Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🧠 Memory Sharing Integration (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🛡️ Fault Tolerance Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / ⚡ Performance Integration Tests (push) Has been skipped
metaharness-ci / mcp-scan (push) Failing after 1s
metaharness-ci / eject-dryrun (push) Failing after 1s
metaharness-ci / metaharness-real-data (push) Failing after 0s
no-cli-optdep-bloat-2561 / guard (push) Failing after 1s
no-metaharness-smoke / smoke-without-metaharness (push) Failing after 1s
no-phantom-agentic-flow-subpath / guard (push) Failing after 1s
🔄 Automated Rollback Manager / 🚨 Failure Detection (push) Failing after 1s
V3 CI/CD Pipeline / Plugin hooks smoke / ubuntu-latest / Node 22 (push) Failing after 1s
V3 CI/CD Pipeline / ruflo-graph-intelligence build + test smoke (#2044, ADR-123) (push) Failing after 1s
CVE Audit Gate / Audit root (critical-blocking) (push) Failing after 2s
cost-tracker-smoke / smoke (push) Failing after 3s
oia-audit-weekly / audit (push) Failing after 2s
ruflo-agent-smoke / ruflo-agent structural smoke (push) Failing after 1s
📊 Status Badges Update / 📊 Update Status Badges (push) Failing after 1s
V3 CI/CD Pipeline / Static regression guards (#2267 YAML + (push) Failing after 1s
V3 CI/CD Pipeline / Test V3 Packages (push) Failing after 0s
V3 CI/CD Pipeline / agent_execute provider routing smoke (#2042) (push) Failing after 0s
CVE Audit Gate / Audit v3 (critical-blocking) (push) Failing after 1s
federation-peer-rust / stable-native (push) Failing after 2s
🔗 Cross-Agent Integration Tests / 🚀 Integration Test Setup (push) Failing after 2s
neural-trader-smoke / runtime-smoke (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (macos-latest) (push) Has been skipped
V3 CI/CD Pipeline / Build V3 (ubuntu-latest) (push) Has been skipped
V3 CI/CD Pipeline / Type Check V3 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 24 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 22 (push) Failing after 2s
V3 CI/CD Pipeline / browser rvf create flag smoke (#2015) (push) Failing after 0s
V3 CI/CD Pipeline / Dependency review (#2046) (push) Has been skipped
V3 CI/CD Pipeline / Supply-chain audit (#2046) (push) Failing after 0s
V3 CI/CD Pipeline / witness marker drift smoke (#2021) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader portfolio CG smoke (#2068, ADR-126 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader backtest signing smoke (#2068, ADR-126 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / kg-extract type-import classification smoke (#2049) (push) Failing after 0s
V3 CI/CD Pipeline / witness verify precondition smoke (#1880) (push) Failing after 2s
V3 CI/CD Pipeline / neural-trader pipeline risk-gate smoke (#2068, ADR-126 Phase 5) (push) Failing after 0s
V3 CI/CD Pipeline / neural-trader feature attribution smoke (#2068, ADR-126 Phase 6) (push) Failing after 0s
V3 CI/CD Pipeline / plugin-registry signature verification smoke (#1922, CWE-347) (push) Failing after 4s
V3 CI/CD Pipeline / memory stats legacy-DB smoke (#2120) (push) Failing after 4s
V3 CI/CD Pipeline / github deprecated actions smoke (#2089, ADR-127 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / graph query + pathfinder smoke (ADR-130 P2+P5) (push) Has been skipped
V3 CI/CD Pipeline / graph trajectory hooks smoke (ADR-130 P3) (push) Has been skipped
V3 CI/CD Pipeline / graph plugin adapter smoke (ADR-130 P4) (push) Has been skipped
V3 CI/CD Pipeline / graph benchmark (ADR-130 P6) (push) Has been skipped
V3 CI/CD Pipeline / statusline generator delegation smoke (#2195) (push) Failing after 1s
V3 CI/CD Pipeline / wizard init regression guard (#2206 (push) Failing after 1s
V3 CI/CD Pipeline / memory no-stray-db smoke (ADR-125 P7) (push) Failing after 1s
V3 CI/CD Pipeline / github-safe injection smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github actions pin smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github attribution opt-in smoke (#2089, ADR-127 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / pre-bash hook safety smoke (#2017) (push) Failing after 1s
V3 CI/CD Pipeline / Memory import smoke / ubuntu-latest (push) Failing after 0s
V3 CI/CD Pipeline / MCP protocol smoke / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / ruvllm WASM auto-init smoke (#2086) (push) Failing after 4s
V3 CI/CD Pipeline / MCP paired-tool round-trip smoke (#1889) (push) Failing after 1s
V3 CI/CD Pipeline / Plugin package install-safety (#1902/#1903/#1904) (push) Failing after 1s
V3 CI/CD Pipeline / Tool description discoverability (ADR-112) (push) Failing after 3s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (22) (push) Failing after 1s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (24) (push) Failing after 1s
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Vector-index dimension audit (#1947) (push) Failing after 0s
V3 CI/CD Pipeline / Hook-command install safety (#1921) (push) Failing after 1s
V3 CI/CD Pipeline / ToolOutputGuardrail smoke (ADR-131, (push) Failing after 1s
V3 CI/CD Pipeline / init-bundle invariants smoke (#2095, ADR-128 Phase 5) (push) Failing after 1s
V3 CI/CD Pipeline / wasm provider bridge smoke (ADR-129 P1) (push) Failing after 2s
V3 CI/CD Pipeline / wasm gallery CRUD smoke (ADR-129 P3) (push) Failing after 1s
V3 CI/CD Pipeline / wasm plugin bridge smoke (ADR-129 P4) (push) Failing after 0s
V3 CI/CD Pipeline / wasm compose smoke (ADR-129 P2) (push) Failing after 4s
V3 CI/CD Pipeline / graph schema smoke (ADR-130 P1) (push) Failing after 0s
Validate Marketplace / validate (push) Failing after 1s
🔍 Verification Pipeline / 🚀 Setup Verification (push) Failing after 1s
🔍 Verification Pipeline / 🛡️ Security Verification (push) Has been skipped
🔍 Verification Pipeline / 📝 Code Quality (push) Has been skipped
🔍 Verification Pipeline / 🧪 Test Verification (${{ matrix.os }}, Node ${{ matrix.node }}) (push) Has been skipped
🔍 Verification Pipeline / 🏗️ Build Verification (push) Has been skipped
🔍 Verification Pipeline / 📚 Documentation Verification (push) Has been skipped
CVE Audit Gate / High-severity report (warn only) (push) Has been cancelled
🔄 Automated Rollback Manager / 🔄 Execute Rollback (push) Has been cancelled
🔄 Automated Rollback Manager / ✅ Post-Rollback Verification (push) Has been cancelled
🔄 Automated Rollback Manager / 📊 Rollback Monitoring (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / windows-latest (push) Has been cancelled
🔄 Automated Rollback Manager / ⏳ Manual Rollback Approval (push) Has been cancelled
V3 CI/CD Pipeline / MCP protocol smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Memory import smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / ubuntu-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Publish to npm (alpha) (push) Has been cancelled
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / macos-latest / Node 22 (push) Has been cancelled
V3 CI/CD Pipeline / Plugin hooks smoke / macos-latest / Node 22 (push) Has been cancelled
CI/CD Pipeline / Deploy & Release (push) Has been cancelled
CI/CD Pipeline / CI Status (push) Has been cancelled
🔗 Cross-Agent Integration Tests / 📊 Integration Test Report (push) Has been cancelled
🔄 Automated Rollback Manager / 🔍 Pre-Rollback Validation (push) Has been cancelled
🔍 Verification Pipeline / ⚡ Performance Verification (push) Has been cancelled
🔍 Verification Pipeline / 📊 Verification Report (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:02:19 +08:00

147 lines
6.0 KiB
JavaScript
Executable File

#!/usr/bin/env node
/**
* ADR-112 — MCP tool description discoverability audit.
*
* Scans every MCPTool definition in src/mcp-tools/*.ts and checks each
* description for "use this over native when?" guidance signals:
* - /Use when/i
* - /Prefer .* over/i
* - /Pair with/i
* - /fall back/i
* - /use over native/i
*
* Emits a JSON report and a human-readable summary. Exits non-zero if
* the no-guidance count exceeds the baseline registered in
* verification/mcp-tool-baseline.json — the baseline is monotone-decreasing,
* so any regression fails CI.
*
* Usage:
* node scripts/audit-tool-descriptions.mjs [--update-baseline]
*
* --update-baseline writes the current no-guidance count to the baseline
* file. Run this AFTER landing a description-improvement PR and validating
* the fixes locally; do NOT use to mask regressions.
*/
import { readFileSync, readdirSync, writeFileSync, existsSync } from 'node:fs';
import { join } from 'node:path';
const REPO_ROOT = process.cwd();
const TOOLS_DIR = join(REPO_ROOT, 'v3/@claude-flow/cli/src/mcp-tools');
const BASELINE_FILE = join(REPO_ROOT, 'verification/mcp-tool-baseline.json');
const GUIDANCE_PATTERNS = [
/Use when/i,
/Prefer .* over/i,
/use .* over (native|the )/i,
/Pair with/i,
/fall back/i,
/native .* is (fine|wrong)/i,
];
const MIN_DESCRIPTION_LENGTH = 80;
function hasGuidance(desc) {
return GUIDANCE_PATTERNS.some(re => re.test(desc));
}
function scanFile(file) {
const src = readFileSync(file, 'utf-8');
// Match `name: '...',` followed by `description: '...'` (with escaped chars).
const re = /name:\s*'([^']+)',\s*\n\s*description:\s*'((?:[^'\\]|\\.)*)'/g;
const results = [];
let m;
while ((m = re.exec(src))) {
results.push({ name: m[1], description: m[2], hasGuidance: hasGuidance(m[2]) });
}
return results;
}
const updateBaseline = process.argv.includes('--update-baseline');
const files = readdirSync(TOOLS_DIR)
.filter(f => f.endsWith('.ts') && !f.endsWith('.test.ts'))
.map(f => join(TOOLS_DIR, f));
const allTools = files.flatMap(scanFile);
const withGuidance = allTools.filter(t => t.hasGuidance);
const withoutGuidance = allTools.filter(t => !t.hasGuidance);
// Additional static checks — every MCPTool description must:
// 1. Have "Use when …" guidance (the original check)
// 2. Be at least MIN_DESCRIPTION_LENGTH chars (catches near-empty descriptions)
// 3. Be unique across all tools (catches lazy copy-paste of a generic line)
const tooShort = allTools.filter(t => t.description.length < MIN_DESCRIPTION_LENGTH);
const descCounts = new Map();
for (const t of allTools) {
descCounts.set(t.description, (descCounts.get(t.description) ?? 0) + 1);
}
const duplicates = [...descCounts.entries()].filter(([, c]) => c > 1);
const report = {
scannedAt: new Date().toISOString(),
totalTools: allTools.length,
withGuidance: withGuidance.length,
withoutGuidance: withoutGuidance.length,
tooShort: tooShort.length,
duplicateDescriptions: duplicates.length,
offenders: withoutGuidance.map(t => ({ name: t.name, description: t.description.slice(0, 100) })),
shortOffenders: tooShort.map(t => ({ name: t.name, length: t.description.length, description: t.description })),
duplicateGroups: duplicates.slice(0, 5).map(([desc, count]) => ({ count, description: desc.slice(0, 100) })),
};
console.log(`MCP tool discoverability audit (ADR-112)`);
console.log(`========================================`);
console.log(`Total tools scanned: ${report.totalTools}`);
console.log(`With Use-when guidance: ${report.withGuidance}`);
console.log(`Without guidance: ${report.withoutGuidance}`);
console.log(`Too short (<${MIN_DESCRIPTION_LENGTH} chars): ${report.tooShort}`);
console.log(`Duplicate descriptions: ${report.duplicateDescriptions}`);
let baseline = { withoutGuidance: report.withoutGuidance, tooShort: report.tooShort, duplicateDescriptions: report.duplicateDescriptions };
if (existsSync(BASELINE_FILE)) {
baseline = { ...baseline, ...JSON.parse(readFileSync(BASELINE_FILE, 'utf-8')) };
console.log(`Baseline no-guidance: ${baseline.withoutGuidance}`);
console.log(`Baseline tooShort: ${baseline.tooShort ?? '(n/a)'}`);
console.log(`Baseline duplicates: ${baseline.duplicateDescriptions ?? '(n/a)'}`);
}
if (updateBaseline) {
writeFileSync(
BASELINE_FILE,
JSON.stringify({
withoutGuidance: report.withoutGuidance,
tooShort: report.tooShort,
duplicateDescriptions: report.duplicateDescriptions,
totalTools: report.totalTools,
updatedAt: report.scannedAt,
note: 'ADR-112 baseline — monotone decreasing for all three counts',
}, null, 2) + '\n',
);
console.log(`\nBaseline updated: noGuidance=${report.withoutGuidance}, tooShort=${report.tooShort}, duplicates=${report.duplicateDescriptions}.`);
process.exit(0);
}
let failed = false;
function check(label, actual, baselineValue, offendersFmt) {
if (baselineValue === undefined) return;
if (actual > baselineValue) {
console.error(`\nFAIL ${label}: count ${actual} exceeds baseline ${baselineValue}`);
console.error(` Regression: ${actual - baselineValue} new violation(s)`);
if (offendersFmt) console.error(offendersFmt);
failed = true;
} else if (actual < baselineValue) {
console.log(`\nProgress ${label}: ${baselineValue - actual} improvement(s) — run with --update-baseline to lock the new floor.`);
}
}
check('no-guidance', report.withoutGuidance, baseline.withoutGuidance,
' Add "Use when … is wrong because …" guidance per ADR-112 template.');
check('too-short', report.tooShort, baseline.tooShort,
` Top short offenders:\n ${report.shortOffenders.slice(0, 5).map(o => `${o.name} (${o.length} chars)`).join('\n ')}`);
check('duplicate-descriptions', report.duplicateDescriptions, baseline.duplicateDescriptions,
` Top duplicate groups:\n ${report.duplicateGroups.slice(0, 5).map(g => `[x${g.count}] ${g.description}`).join('\n ')}`);
if (failed) process.exit(1);
console.log(`\nOK — ${report.totalTools} tools, ${report.withGuidance} with guidance, all gates pass.`);