23f7624596
ADR-166 MCP Bridge Security Lock / Static-source security lock (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / Compose default binds loopback + Mongo has auth (push) Failing after 2s
CodeQL Advanced / Analyze (rust) (push) Failing after 0s
ADR-166 MCP Bridge Security Lock / plugin-agent-federation bindHost default (push) Failing after 1s
ADR-166 MCP Bridge Security Lock / Runtime behavior — 401 + terminal gate + fail-closed (push) Failing after 4s
business-pods-smoke / smoke (push) Failing after 1s
all-plugins-smoke / smoke-all (push) Failing after 2s
CI/CD Pipeline / Security & Code Quality (push) Failing after 1s
CI/CD Pipeline / Test Suite (ubuntu-latest) (push) Failing after 1s
CI/CD Pipeline / Build & Package (macos-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (ubuntu-latest) (push) Has been skipped
CI/CD Pipeline / Build & Package (windows-latest) (push) Has been skipped
CI/CD Pipeline / Documentation & Examples (push) Failing after 1s
Clone Tracker (14-day rolling) / Snapshot clones for ruflo ecosystem (push) Failing after 1s
CodeQL Advanced / Analyze (actions) (push) Failing after 1s
CodeQL Advanced / Analyze (javascript-typescript) (push) Failing after 1s
federation-peer-rust / stable-noop (push) Failing after 1s
metaharness-ci / score (push) Failing after 1s
metaharness-ci / router-compat (push) Failing after 0s
metaharness-ci / similarity-tests (push) Failing after 0s
no-agentbbs-smoke / smoke-without-agentbbs (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (windows-latest) (push) Has been skipped
codex-integration-audit / Codex integration audit (push) Failing after 1s
helpers-manifest-guard / guard (push) Failing after 1s
🔗 Cross-Agent Integration Tests / 🤝 Agent Coordination Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🧠 Memory Sharing Integration (push) Has been skipped
🔗 Cross-Agent Integration Tests / 🛡️ Fault Tolerance Tests (push) Has been skipped
🔗 Cross-Agent Integration Tests / ⚡ Performance Integration Tests (push) Has been skipped
metaharness-ci / mcp-scan (push) Failing after 1s
metaharness-ci / eject-dryrun (push) Failing after 1s
metaharness-ci / metaharness-real-data (push) Failing after 0s
no-cli-optdep-bloat-2561 / guard (push) Failing after 1s
no-metaharness-smoke / smoke-without-metaharness (push) Failing after 1s
no-phantom-agentic-flow-subpath / guard (push) Failing after 1s
🔄 Automated Rollback Manager / 🚨 Failure Detection (push) Failing after 1s
V3 CI/CD Pipeline / Plugin hooks smoke / ubuntu-latest / Node 22 (push) Failing after 1s
V3 CI/CD Pipeline / ruflo-graph-intelligence build + test smoke (#2044, ADR-123) (push) Failing after 1s
CVE Audit Gate / Audit root (critical-blocking) (push) Failing after 2s
cost-tracker-smoke / smoke (push) Failing after 3s
oia-audit-weekly / audit (push) Failing after 2s
ruflo-agent-smoke / ruflo-agent structural smoke (push) Failing after 1s
📊 Status Badges Update / 📊 Update Status Badges (push) Failing after 1s
V3 CI/CD Pipeline / Static regression guards (#2267 YAML + (push) Failing after 1s
V3 CI/CD Pipeline / Test V3 Packages (push) Failing after 0s
V3 CI/CD Pipeline / agent_execute provider routing smoke (#2042) (push) Failing after 0s
CVE Audit Gate / Audit v3 (critical-blocking) (push) Failing after 1s
federation-peer-rust / stable-native (push) Failing after 2s
🔗 Cross-Agent Integration Tests / 🚀 Integration Test Setup (push) Failing after 2s
neural-trader-smoke / runtime-smoke (push) Failing after 1s
V3 CI/CD Pipeline / Build V3 (macos-latest) (push) Has been skipped
V3 CI/CD Pipeline / Build V3 (ubuntu-latest) (push) Has been skipped
V3 CI/CD Pipeline / Type Check V3 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 24 (push) Failing after 1s
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / ubuntu-latest / Node 22 (push) Failing after 2s
V3 CI/CD Pipeline / browser rvf create flag smoke (#2015) (push) Failing after 0s
V3 CI/CD Pipeline / Dependency review (#2046) (push) Has been skipped
V3 CI/CD Pipeline / Supply-chain audit (#2046) (push) Failing after 0s
V3 CI/CD Pipeline / witness marker drift smoke (#2021) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader portfolio CG smoke (#2068, ADR-126 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / neural-trader backtest signing smoke (#2068, ADR-126 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / kg-extract type-import classification smoke (#2049) (push) Failing after 0s
V3 CI/CD Pipeline / witness verify precondition smoke (#1880) (push) Failing after 2s
V3 CI/CD Pipeline / neural-trader pipeline risk-gate smoke (#2068, ADR-126 Phase 5) (push) Failing after 0s
V3 CI/CD Pipeline / neural-trader feature attribution smoke (#2068, ADR-126 Phase 6) (push) Failing after 0s
V3 CI/CD Pipeline / plugin-registry signature verification smoke (#1922, CWE-347) (push) Failing after 4s
V3 CI/CD Pipeline / memory stats legacy-DB smoke (#2120) (push) Failing after 4s
V3 CI/CD Pipeline / github deprecated actions smoke (#2089, ADR-127 Phase 3) (push) Failing after 1s
V3 CI/CD Pipeline / graph query + pathfinder smoke (ADR-130 P2+P5) (push) Has been skipped
V3 CI/CD Pipeline / graph trajectory hooks smoke (ADR-130 P3) (push) Has been skipped
V3 CI/CD Pipeline / graph plugin adapter smoke (ADR-130 P4) (push) Has been skipped
V3 CI/CD Pipeline / graph benchmark (ADR-130 P6) (push) Has been skipped
V3 CI/CD Pipeline / statusline generator delegation smoke (#2195) (push) Failing after 1s
V3 CI/CD Pipeline / wizard init regression guard (#2206 (push) Failing after 1s
V3 CI/CD Pipeline / memory no-stray-db smoke (ADR-125 P7) (push) Failing after 1s
V3 CI/CD Pipeline / github-safe injection smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github actions pin smoke (#2089, ADR-127 Phase 1) (push) Failing after 1s
V3 CI/CD Pipeline / github attribution opt-in smoke (#2089, ADR-127 Phase 4) (push) Failing after 1s
V3 CI/CD Pipeline / pre-bash hook safety smoke (#2017) (push) Failing after 1s
V3 CI/CD Pipeline / Memory import smoke / ubuntu-latest (push) Failing after 0s
V3 CI/CD Pipeline / MCP protocol smoke / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / ruvllm WASM auto-init smoke (#2086) (push) Failing after 4s
V3 CI/CD Pipeline / MCP paired-tool round-trip smoke (#1889) (push) Failing after 1s
V3 CI/CD Pipeline / Plugin package install-safety (#1902/#1903/#1904) (push) Failing after 1s
V3 CI/CD Pipeline / Tool description discoverability (ADR-112) (push) Failing after 3s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (22) (push) Failing after 1s
V3 CI/CD Pipeline / CLI npx-install smoke (#1147 / (24) (push) Failing after 1s
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / ubuntu-latest (push) Failing after 2s
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / ubuntu-latest (push) Failing after 1s
V3 CI/CD Pipeline / Vector-index dimension audit (#1947) (push) Failing after 0s
V3 CI/CD Pipeline / Hook-command install safety (#1921) (push) Failing after 1s
V3 CI/CD Pipeline / ToolOutputGuardrail smoke (ADR-131, (push) Failing after 1s
V3 CI/CD Pipeline / init-bundle invariants smoke (#2095, ADR-128 Phase 5) (push) Failing after 1s
V3 CI/CD Pipeline / wasm provider bridge smoke (ADR-129 P1) (push) Failing after 2s
V3 CI/CD Pipeline / wasm gallery CRUD smoke (ADR-129 P3) (push) Failing after 1s
V3 CI/CD Pipeline / wasm plugin bridge smoke (ADR-129 P4) (push) Failing after 0s
V3 CI/CD Pipeline / wasm compose smoke (ADR-129 P2) (push) Failing after 4s
V3 CI/CD Pipeline / graph schema smoke (ADR-130 P1) (push) Failing after 0s
Validate Marketplace / validate (push) Failing after 1s
🔍 Verification Pipeline / 🚀 Setup Verification (push) Failing after 1s
🔍 Verification Pipeline / 🛡️ Security Verification (push) Has been skipped
🔍 Verification Pipeline / 📝 Code Quality (push) Has been skipped
🔍 Verification Pipeline / 🧪 Test Verification (${{ matrix.os }}, Node ${{ matrix.node }}) (push) Has been skipped
🔍 Verification Pipeline / 🏗️ Build Verification (push) Has been skipped
🔍 Verification Pipeline / 📚 Documentation Verification (push) Has been skipped
CVE Audit Gate / High-severity report (warn only) (push) Has been cancelled
🔄 Automated Rollback Manager / 🔄 Execute Rollback (push) Has been cancelled
🔄 Automated Rollback Manager / ✅ Post-Rollback Verification (push) Has been cancelled
🔄 Automated Rollback Manager / 📊 Rollback Monitoring (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook execution smoke (#2132) / windows-latest (push) Has been cancelled
🔄 Automated Rollback Manager / ⏳ Manual Rollback Approval (push) Has been cancelled
V3 CI/CD Pipeline / MCP protocol smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Memory import smoke / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows hook shim smoke (#2132) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Windows init hooks smoke (#2132) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / macos-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / ubuntu-latest (push) Has been cancelled
V3 CI/CD Pipeline / Witness verify (signed manifest) / windows-latest (push) Has been cancelled
V3 CI/CD Pipeline / Publish to npm (alpha) (push) Has been cancelled
V3 CI/CD Pipeline / Smoke (no better-sqlite3) / macos-latest / Node 22 (push) Has been cancelled
V3 CI/CD Pipeline / Plugin hooks smoke / macos-latest / Node 22 (push) Has been cancelled
CI/CD Pipeline / Deploy & Release (push) Has been cancelled
CI/CD Pipeline / CI Status (push) Has been cancelled
🔗 Cross-Agent Integration Tests / 📊 Integration Test Report (push) Has been cancelled
🔄 Automated Rollback Manager / 🔍 Pre-Rollback Validation (push) Has been cancelled
🔍 Verification Pipeline / ⚡ Performance Verification (push) Has been cancelled
🔍 Verification Pipeline / 📊 Verification Report (push) Has been cancelled
148 lines
5.0 KiB
JavaScript
Executable File
148 lines
5.0 KiB
JavaScript
Executable File
#!/usr/bin/env node
|
|
// check-fingerprint-schema — protect _similarity.mjs from silent upstream
|
|
// schema drift in `metaharness score` / `metaharness genome`.
|
|
//
|
|
// iter 47 discovered that `harness score` and `metaharness score` have
|
|
// different output schemas — using the wrong one made similarity() return
|
|
// 0.8125 on self-roundtrip (should be 1.0). The fix routed score+genome
|
|
// through `runMetaharness` to get the correct shape.
|
|
//
|
|
// But there's still no test that ASSERTS the correct shape stays correct.
|
|
// If upstream renames `harnessFit` to `harness_fit` (or anything),
|
|
// _similarity.mjs::projectToVec reads `s.harnessFit` → undefined → 0 →
|
|
// all numerics collapse to 0 → similarity always returns the categorical
|
|
// + jaccard agreement, never the cosine. Drift detection silently breaks.
|
|
//
|
|
// This script runs the two `metaharness` subcommands and asserts the
|
|
// fields _similarity.mjs::projectToVec actually reads.
|
|
//
|
|
// USAGE
|
|
// node scripts/check-fingerprint-schema.mjs # exits 0 if intact
|
|
// node scripts/check-fingerprint-schema.mjs --format json # CI-consumable
|
|
//
|
|
// EXIT CODES
|
|
// 0 fingerprint schemas intact (or metaharness not installed)
|
|
// 1 at least one expected field is missing
|
|
// 2 unexpected error
|
|
|
|
import { spawnSync } from 'node:child_process';
|
|
|
|
const ARGS = (() => {
|
|
const a = { format: 'table' };
|
|
for (let i = 2; i < process.argv.length; i++) {
|
|
if (process.argv[i] === '--format') a.format = process.argv[++i];
|
|
}
|
|
return a;
|
|
})();
|
|
|
|
// _similarity.mjs::projectToVec reads these EXACT field names. If
|
|
// upstream renames any of them, projectToVec returns 0 for that index
|
|
// and the cosine signal degrades silently.
|
|
const SCORE_FIELDS = [
|
|
'harnessFit', 'compileConfidence', 'taskCoverage', 'toolSafety',
|
|
'memoryUsefulness', 'estCostPerRunUsd', 'recommendedMode',
|
|
'archetype', 'template',
|
|
];
|
|
const GENOME_FIELDS = [
|
|
'repo_type', 'agent_topology', 'risk_score',
|
|
'test_confidence', 'publish_readiness',
|
|
];
|
|
|
|
function emit(payload, code) {
|
|
if (ARGS.format === 'json') console.log(JSON.stringify(payload, null, 2));
|
|
else {
|
|
console.log(`# check-fingerprint-schema\n`);
|
|
if (payload.skipped) console.log(`⊘ ${payload.reason}`);
|
|
else if (payload.ok) console.log(`✓ All ${payload.results.length} fields intact.`);
|
|
else {
|
|
console.log(`✗ ${payload.failedCount}/${payload.results.length} fields missing:`);
|
|
for (const r of payload.results) {
|
|
if (!r.ok) console.log(` - ${r.subcommand}.${r.field} (${r.detail})`);
|
|
}
|
|
}
|
|
}
|
|
process.exit(code);
|
|
}
|
|
|
|
function runMeta(subcmd, path) {
|
|
const r = spawnSync('npx', [
|
|
'-y', 'metaharness@latest', subcmd, path, '--json',
|
|
], { encoding: 'utf-8', timeout: 90_000 });
|
|
if (r.status === null
|
|
|| /could not determine executable|404|not installed|MODULE_NOT_FOUND|ENOTFOUND/i.test(r.stderr || '')) {
|
|
return { degraded: true };
|
|
}
|
|
const m = /\{[\s\S]*\}/.exec(r.stdout || '');
|
|
if (!m) return { degraded: false, json: null, raw: r.stdout?.slice(0, 200) };
|
|
try { return { degraded: false, json: JSON.parse(m[0]) }; }
|
|
catch (e) { return { degraded: false, json: null, error: e.message }; }
|
|
}
|
|
|
|
async function main() {
|
|
const path = '.';
|
|
|
|
// 1. metaharness score
|
|
const scoreR = runMeta('score', path);
|
|
if (scoreR.degraded) {
|
|
emit({
|
|
skipped: true,
|
|
reason: 'metaharness-not-available — install with `npm i --include=optional` to verify schema',
|
|
generatedAt: new Date().toISOString(),
|
|
}, 0);
|
|
}
|
|
if (!scoreR.json) {
|
|
emit({
|
|
ok: false,
|
|
results: [{ subcommand: 'score', field: '*', ok: false, detail: 'no JSON in output' }],
|
|
failedCount: 1,
|
|
generatedAt: new Date().toISOString(),
|
|
}, 1);
|
|
}
|
|
|
|
// 2. metaharness genome
|
|
const genomeR = runMeta('genome', path);
|
|
if (!genomeR.json) {
|
|
emit({
|
|
ok: false,
|
|
results: [{ subcommand: 'genome', field: '*', ok: false, detail: 'no JSON in output' }],
|
|
failedCount: 1,
|
|
generatedAt: new Date().toISOString(),
|
|
}, 1);
|
|
}
|
|
|
|
// 3. Assert each expected field is present (i.e., key exists, even
|
|
// if value is null — we just care upstream didn't rename it).
|
|
const results = [];
|
|
for (const field of SCORE_FIELDS) {
|
|
const present = scoreR.json[field] !== undefined;
|
|
results.push({
|
|
subcommand: 'score',
|
|
field,
|
|
ok: present,
|
|
detail: present ? `value=${typeof scoreR.json[field]}` : 'MISSING — projectToVec defaults to 0',
|
|
});
|
|
}
|
|
for (const field of GENOME_FIELDS) {
|
|
const present = genomeR.json[field] !== undefined;
|
|
results.push({
|
|
subcommand: 'genome',
|
|
field,
|
|
ok: present,
|
|
detail: present ? `value=${typeof genomeR.json[field]}` : 'MISSING — projectToVec defaults to 0',
|
|
});
|
|
}
|
|
|
|
const failed = results.filter((r) => !r.ok);
|
|
emit({
|
|
ok: failed.length === 0,
|
|
results,
|
|
failedCount: failed.length,
|
|
generatedAt: new Date().toISOString(),
|
|
}, failed.length === 0 ? 0 : 1);
|
|
}
|
|
|
|
main().catch((e) => {
|
|
console.error('check-fingerprint-schema crashed:', e?.message ?? e);
|
|
process.exit(2);
|
|
});
|