mirror of
https://github.com/garrytan/gstack.git
synced 2026-11-01 22:45:02 +01:00
* fix(make-pdf,design): real TOC page numbers and anchors; design models move to gpt-5.5 + gpt-image-2 (#2903, #2807) * ci: pin every action to a SHA, Scorecard, checksummed Bun, scoped Codex CLI in the CI image, macOS named-regressions job (#1948, #1706, #1997) * fix(cso,browse): Windows/macOS lease identity, retention skips bad runs, truthful 'not assessed' reports, env.kv false positive, Windows browse spawn fixes (#2894, #2912, #2048, #2637, #2805) * fix(outside-voice): one Codex model precedence for probe and dispatch, bounded timeouts with KILL escalation, probe cache identity, guarded mktemp, skills hidden in nested Codex (#2776, #2914, #2787, #2881, #2847) * feat(setup): install registry, ./setup --status, staged activation, per-scope migrations, host tiers and conformance kit, OpenCode/Hermes fixes, Copilot CLI (experimental), disabled_skills, slimmer CLAUDE.md (#1925, #2879, #2347, #2338, #2626, #2629, #2825, #2015, #393, #1206, #2096) Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com> * fix(preamble): skills start in worktree-isolated Claude Code sessions — one literal skill-start line, context-recovery helper, no eval in skill blocks, $N token tripwire, honest plan-mode precedence (#2763, #2896, #2851) * fix(setup): per-install renders for renamed, vendored and custom-config installs, space-safe alias roots, per-host /cso launcher path (#1882, #2906) * test: free tests never write the real HOME (home-write tripwire), no orphaned browse daemons, symlinked-TMPDIR (macOS) fixes, gbrain-on-PATH isolation (#2895, #2816, #2829, #2841, #2982, #2911, #2909, #2908, #2910) * chore: integrate wave follow-ups — regenerate all hosts, README model docs, TODOS, touchfiles, duration seeds, Bun 1.3 telemetry test fix, replay fixtures pinned to their recorded bytes * v1.91.14.0: release metadata * test(browse): group-kill cleanup falls back to the leader when macOS returns EPERM for a live group * ci: Codex login steps run under bash (the CI container's default sh rejects pipefail) * fix: full-suite repairs — private state roots for 7 real-HOME writers, truthful home-guard attribution with --attribute-home, gstack-paths shim in ship-hook fixtures, Copilot in team-init probes, test-of-test detector, cookie review fixture pinned to the approved excerpt * fix(windows): LF for Dockerfiles, normalized home-guard exclusions, path.relative fixture containment, ship push test spawn timeouts * test(design-detect): widen the whole-scan budget test's timing margins so a loaded macOS runner can't time out the single-batch call * fix(evals): qa protocol names defined for the judge, async PTY judge so overlapping sessions keep their cleanup deadline, bws setup cases use the standard JUDGE_MS tier * test(pty): the non-blocking judge case is POSIX-only (its fake judge is a shebang script, like the PTY harness it covers) * test(evals): ship-coverage-audit names absolute skill paths, uses Read, and skips the Step 7 artifact nothing consumes (removes the mechanism behind 3 of 4 historical timeouts) * test: deflake terminal-agent concurrent startup (write the placeholder record before spawning, like the product) and qa-evidence resumed pipe (barrier on a full high-water mark instead of a sleep) * fix(design): daemon log stream handles open errors instead of crashing the daemon; shutdown test awaits the stubbed exit * test(evals): skillify checks the product's resolved state root (no GSTACK_HOME bypass), negative cases check every root; tpa shims live outside the agent's cwd and answer consistently * test(evals): coverage-audit detector splits parallel columns at │ rails and [+] groups; coverage prompts name absolute skill paths; TODOs from the gate eval census * fix(plan-eng-review): scope gate always sends the menu (no headless 'Scope pending' exit); PTY harness ends idle turn-ends and API-error panels promptly with a precise diagnostic * test(evals): one position-bound coverage-read rule credits read-only && chains (labels, context ranges, git displays in either order) and still rejects forged output * fix(ship): documentation section has one saved source inserted by cat (never retyped); spawned-marker evidence is the child output; refreshed codex/factory ship goldens * test(docsync): the byte-exact insert positive is POSIX-only (the bash-command observer refuses backslash paths by design) * test(evals): plan-design-with-ui focus-title rule accepts the comma-less 'dimensions or focus' wording (replayed on the captured CI run, negative controls kept) * fix(qa-callers): exploratory preflight says the scope/method Reads come after exploratory.md; design-review scan check credits an executed scan proven by one engine run over the changed files --------- Co-authored-by: Andrey Esipov <61357035+andrey-esipov@users.noreply.github.com> Co-authored-by: Matthew Williams <5863886+ridermw@users.noreply.github.com> Co-authored-by: Rocky Wu <92764750+lolisaigao1234@users.noreply.github.com>
114 lines
4.5 KiB
TypeScript
114 lines
4.5 KiB
TypeScript
/**
|
|
* Opt-in live check of the design binary's OpenAI defaults (#2807). Not part
|
|
* of any test lane: it spends real tokens (one low-quality 1024x1024 image,
|
|
* one short vision answer).
|
|
*
|
|
* OPENAI_API_KEY=... bun run design/scripts/live-model-check.ts
|
|
*
|
|
* Sends exactly the request bodies the design commands send (built by
|
|
* design/src/models.ts), honoring GSTACK_DESIGN_MODEL when set. Prints the
|
|
* models requested and returned, HTTP status, token usage and PASS/FAIL per
|
|
* call — never the key, and any key-shaped text in an error body is redacted.
|
|
* Exit 0 both pass, 1 any fail, 2 OPENAI_API_KEY unset.
|
|
*/
|
|
|
|
import {
|
|
DESIGN_MODEL_ENV,
|
|
IMAGE_TOOL_MODEL,
|
|
designModel,
|
|
imageRequestBody,
|
|
visionRequestBody,
|
|
} from "../src/models";
|
|
import { receiptedFetch } from "../src/receipted-fetch";
|
|
|
|
const TINY_PNG = "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNkAAIAAAoAAv/lxKUAAAAASUVORK5CYII=";
|
|
|
|
const key = process.env.OPENAI_API_KEY?.trim();
|
|
if (!key) {
|
|
console.log("SKIP: OPENAI_API_KEY is not set");
|
|
process.exit(2);
|
|
}
|
|
|
|
const redact = (s: string) => s.replace(/\b(?:sk|org|proj)-[A-Za-z0-9_*.-]{4,}/g, "[redacted]").slice(0, 400);
|
|
|
|
async function post(payloadClass: string, url: string, body: string, timeoutMs: number) {
|
|
const controller = new AbortController();
|
|
const timer = setTimeout(() => controller.abort(), timeoutMs);
|
|
const started = Date.now();
|
|
try {
|
|
const res = await receiptedFetch(payloadClass, url, {
|
|
method: "POST",
|
|
headers: { Authorization: `Bearer ${key}`, "Content-Type": "application/json" },
|
|
body,
|
|
signal: controller.signal,
|
|
});
|
|
const text = await res.text();
|
|
let json: any = null;
|
|
try { json = JSON.parse(text); } catch { /* non-JSON error body */ }
|
|
return { status: res.status, ok: res.ok, json, text, ms: Date.now() - started };
|
|
} catch (err) {
|
|
return { status: 0, ok: false, json: null, text: (err as Error).message, ms: Date.now() - started };
|
|
} finally {
|
|
clearTimeout(timer);
|
|
}
|
|
}
|
|
|
|
const report = (fields: Record<string, unknown>) =>
|
|
console.log(Object.entries(fields).map(([k, v]) => `${k}=${typeof v === "string" ? v : JSON.stringify(v)}`).join(" "));
|
|
|
|
console.log(`${DESIGN_MODEL_ENV}=${process.env[DESIGN_MODEL_ENV]?.trim() || "(unset, defaults)"}`);
|
|
let failed = false;
|
|
let image = TINY_PNG;
|
|
|
|
// 1. Image generation: Responses API + image_generation tool.
|
|
{
|
|
let body: string;
|
|
try {
|
|
body = imageRequestBody("Draw a plain blue square on a white background.", { size: "1024x1024", quality: "low" });
|
|
} catch (err) {
|
|
body = "";
|
|
report({ call: "image", result: "FAIL", error: (err as Error).message });
|
|
failed = true;
|
|
}
|
|
if (body) {
|
|
const r = await post("live-check-image-request", "https://api.openai.com/v1/responses", body, 240_000);
|
|
const item = r.json?.output?.find((o: any) => o.type === "image_generation_call");
|
|
const pass = r.ok && typeof item?.result === "string" && item.result.length > 0;
|
|
if (pass) image = item.result;
|
|
report({
|
|
call: "image", result: pass ? "PASS" : "FAIL", status: r.status, ms: r.ms,
|
|
requested_model: designModel("image"), returned_model: r.json?.model ?? null,
|
|
tool_model: IMAGE_TOOL_MODEL, image_bytes: pass ? Buffer.from(item.result, "base64").length : 0,
|
|
...(pass ? {} : { error: redact(r.json?.error?.message ?? r.text) }),
|
|
});
|
|
failed ||= !pass;
|
|
}
|
|
}
|
|
|
|
// 2. Vision analysis: Chat Completions with an image input.
|
|
{
|
|
const body = visionRequestBody([{
|
|
role: "user",
|
|
content: [
|
|
{ type: "image_url", image_url: { url: `data:image/png;base64,${image}` } },
|
|
{ type: "text", text: "Reply with exactly one word: PASS." },
|
|
],
|
|
}], 20);
|
|
const r = await post("live-check-vision-request", "https://api.openai.com/v1/chat/completions", body, 120_000);
|
|
const choice = r.json?.choices?.[0];
|
|
const content = String(choice?.message?.content ?? "").trim();
|
|
const pass = r.ok && content.length > 0;
|
|
report({
|
|
call: "vision", result: pass ? "PASS" : "FAIL", status: r.status, ms: r.ms,
|
|
requested_model: designModel("vision"), returned_model: r.json?.model ?? null,
|
|
max_completion_tokens: JSON.parse(body).max_completion_tokens, finish_reason: choice?.finish_reason ?? null,
|
|
completion_tokens: r.json?.usage?.completion_tokens ?? null,
|
|
reasoning_tokens: r.json?.usage?.completion_tokens_details?.reasoning_tokens ?? null,
|
|
answer: content.slice(0, 40),
|
|
...(pass ? {} : { error: redact(r.json?.error?.message ?? r.text) }),
|
|
});
|
|
failed ||= !pass;
|
|
}
|
|
|
|
process.exit(failed ? 1 : 0);
|