@evo-dev/core 0.0.1-alpha → 0.0.1-alpha.1

package/dist/plugins/index.js

@@ -9,37 +9,28 @@ function createUnknownNegotiatedCapabilities(pluginId) {
     hooks: "unsupported",
     canPlanWrites: false,
     warnings: [],
-    blockers: [`Plugin ${pluginId} capabilities are unknown and unsupported.`]
+    advisories: [`Plugin ${pluginId} capabilities are unknown and unsupported.`]
   };
 }
 function isCapabilityUsable(state) {
   return state === "enabled";
 }
-function assertNoUnverifiedWrites(negotiation) {
-  if (!negotiation.canPlanWrites) {
-    throw new Error(`Plugin ${negotiation.pluginId} has no verified enabled write capabilities.`);
-  }
-}
 function negotiatePluginCapabilities(input) {
   if (input.pluginId === "codex") {
-    const declaredSupport = [
-      input.declared.skills.supported ? "skills" : null,
-      input.declared.agents.supported ? "agents" : null,
-      input.declared.hooks.supported ? "hooks" : null
-    ].filter(Boolean);
-    const blockers = ["Codex capabilities are unverified; writes are unsupported in I10."];
+    const advisories = [];
     const warnings = [
-      input.verified ? "Codex readonly verification artifact exists; sync remains no-write until formats are verified." : null,
-      declaredSupport.length > 0 ? `Codex declares ${declaredSupport.join(", ")} support, but declared support alone cannot authorize writes.` : null
+      input.verified ? "Codex metadata-only verification artifact exists; implemented Codex skill/agent distribution remains governed by adapter tests." : null,
+      input.declared.skills.supported ? "Codex skills are distributed through the EvoDev Codex plugin bundle, not direct user-directory skill sync." : null,
+      input.declared.agents.supported ? "Codex agents can sync to user-level TOML files with no-overwrite semantics." : null
     ].filter((warning) => warning !== null);
     return {
       pluginId: input.pluginId,
-      skills: input.declared.skills.supported ? "unverified" : "unsupported",
-      agents: input.declared.agents.supported ? "unverified" : "unsupported",
-      hooks: input.declared.hooks.supported ? "unverified" : "unsupported",
-      canPlanWrites: false,
+      skills: resolveNonCodexCapabilityState(input.declared.skills.supported, input.enabled),
+      agents: resolveNonCodexCapabilityState(input.declared.agents.supported, input.enabled),
+      hooks: resolveNonCodexCapabilityState(input.declared.hooks.supported, input.enabled),
+      canPlanWrites: input.enabled && input.declared.agents.supported,
       warnings,
-      blockers
+      advisories
     };
   }
   return {
@@ -49,9 +40,9 @@ function negotiatePluginCapabilities(input) {
     hooks: resolveNonCodexCapabilityState(input.declared.hooks.supported, input.enabled),
     canPlanWrites: input.enabled && input.declared.skills.supported && input.declared.agents.supported,
     warnings: input.enabled ? [] : [
-      `Plugin ${input.pluginId} has declared capabilities but is not enabled; writes are not authorized.`
+      `Plugin ${input.pluginId} has declared capabilities but is not enabled for write planning.`
     ],
-    blockers: []
+    advisories: []
   };
 }
 function resolveNonCodexCapabilityState(supported, enabled) {
@@ -63,7 +54,9 @@ async function createCodexCapabilityVerificationArtifact(input) {
   const timestamp = input.createdAt ?? new Date().toISOString();
   const detectionMessage = sanitizeText(input.detection.message);
   const diagnostics = [
-    "Codex remains no-write until concrete user-level paths and formats are verified."
+    "Codex skills are packaged in the EvoDev Codex plugin payload.",
+    "Codex agents sync to user-level TOML files under ~/.codex/agents.",
+    "Codex hooks are supplied by the EvoDev Codex plugin manifest and enabled through Codex plugin hooks."
   ];
   return {
     version: 1,
@@ -80,7 +73,11 @@ async function createCodexCapabilityVerificationArtifact(input) {
     externalUpload: false,
     networkUsed: false,
     toolSummary: { tool: "codex", detectionStatus: input.detection.status, version: null },
-    capabilities: { skills: "unverified", agents: "unverified", hooks: "unverified" },
+    capabilities: {
+      skills: "plugin-bundled",
+      agents: "user-level-toml-sync",
+      hooks: "plugin-manifest-hooks"
+    },
     writeBoundary: {
       writesAllowed: false,
       allowedPaths: [],
@@ -98,7 +95,7 @@ async function createCodexCapabilityVerificationArtifact(input) {
       secretsStored: false,
       externalUpload: false
     },
-    blockers: ["Codex asset capabilities are unverified and unsupported for writes in I10."],
+    advisories: [],
     diagnostics,
     evidenceRefs: [],
     evidence: {
@@ -106,7 +103,8 @@ async function createCodexCapabilityVerificationArtifact(input) {
       detectionMessage,
       writesAllowed: false,
       notes: [
-        "Metadata-only readonly artifact; no Codex paths, formats, hooks, or writes verified."
+        "Metadata-only verification artifact; it does not probe or write Code Agent directories.",
+        "Implemented Codex asset distribution is covered by adapter tests: plugin-bundled skills and user-level TOML agents."
       ]
     }
   };
@@ -149,12 +147,12 @@ function formatCodexCapabilityVerificationArtifact(artifact, path) {
     `Status: ${artifact.status}`,
     `Artifact: ${path ?? "dry-run only"}`,
     `Verified at: ${artifact.verifiedAt}`,
-    "Capabilities: skills=unverified agents=unverified hooks=unverified",
-    "Writes allowed: false",
+    `Capabilities: skills=${artifact.capabilities.skills} agents=${artifact.capabilities.agents} hooks=${artifact.capabilities.hooks}`,
+    "Verification writes allowed: false",
     "Allowed paths: none",
-    "User-level write paths verified: false",
+    "User-level agent sync path: ~/.codex/agents",
     "Project writes allowed: false",
-    "No-overwrite verified: false",
+    "No-overwrite policy: skip existing files unless force refresh is requested",
     `External upload: ${artifact.externalUpload}`,
     `Detection: ${artifact.evidence.detectionStatus}`,
     ...artifact.evidence.notes.map((note) => `Note: ${note}`)
@@ -171,8 +169,11 @@ async function runPluginConformance(plugin) {
   }
   if (plugin.id === "codex") {
     const capabilities = await plugin.getCapabilities();
-    if (capabilities.skills.supported || capabilities.agents.supported || capabilities.hooks.supported) {
-      findings.push("Codex must not declare verified runtime support in I10.");
+    if (!capabilities.skills.supported || !capabilities.agents.supported) {
+      findings.push("Codex must declare plugin-bundled skills and user-level TOML agents.");
+    }
+    if (!capabilities.hooks.supported || capabilities.hooks.events.length === 0) {
+      findings.push("Codex must declare plugin-manifest hook support.");
     }
   }
   return { ok: findings.length === 0, findings };
@@ -259,7 +260,6 @@ export {
   createUnknownNegotiatedCapabilities,
   createPluginRegistry,
   createCodexCapabilityVerificationArtifact,
-  assertNoUnverifiedWrites,
   PluginRegistryError,
   PluginRegistry
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evo-dev/core",
-  "version": "0.0.1-alpha",
+  "version": "0.0.1-alpha.1",
   "type": "module",
   "repository": {
     "type": "git",

package/src/agents/index.ts

@@ -14,7 +14,7 @@ export type AgentOutputSchemaId =
   | "review-findings-v1"
   | "verification-summary-v1"
   | "design-options-v1";
-export type AgentFindingSeverity = "blocker" | "high" | "medium" | "low" | "info";
+export type AgentFindingSeverity = "critical" | "high" | "medium" | "low" | "info";
 
 export interface AgentPermissions {
   canReadMetadata: boolean;
@@ -64,11 +64,11 @@ export interface AgentPlannedInvocation {
 }
 
 export interface AgentMergePlan {
-  strategy: "none" | "single-output" | "dedupe-preserve-conflicts-fail-closed";
+  strategy: "none" | "single-output" | "dedupe-preserve-conflicts";
   outputSchema: AgentOutputSchemaId | null;
   dedupeBy: string[];
   conflictPolicy: string[];
-  failClosedCategories: string[];
+  advisoryCategories: string[];
 }
 
 export interface AgentComposeDryRunPlan {
@@ -80,7 +80,7 @@ export interface AgentComposeDryRunPlan {
   permissions: AgentPermissions;
   mergePlan: AgentMergePlan;
   warnings: string[];
-  blockers: string[];
+  advisories: string[];
   rationale: string;
 }
 
@@ -93,7 +93,7 @@ export interface AgentContextDryRunBundle {
     provenance: string[];
   };
   warnings: string[];
-  blockers: string[];
+  advisories: string[];
 }
 
 export interface ReviewFindingOutput {
@@ -124,7 +124,7 @@ const DEFAULT_AGENT_PERMISSIONS: AgentPermissions = {
 };
 const FORBIDDEN_INPUTS = ["rawPrompts", "secrets", "rawCommandLogs", "sourceCorpus"];
 const SAFE_AGENT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
-const PRIVACY_BLOCKER_PATTERN =
+const PRIVACY_ADVISORY_PATTERN =
   /raw prompt|rawprompt|source corpus|sourcecorpus|secret|\.env|raw command|raw log|internal url|private url|network|write files|run commands|spawn agents|write memory/i;
 const LENS_TO_EXPERTISE: Record<AgentLens, string[]> = {
   review: ["code-review"],
@@ -170,16 +170,6 @@ export function parseAgentProfile(value: unknown): AgentProfile {
     throw new Error("Agent profile must be metadata-only and must not store raw prompts/source.");
   }
   const permissions = normalizeAgentPermissions(profile.permissions);
-  if (
-    permissions.canWriteFiles ||
-    permissions.canRunCommands ||
-    permissions.canUseNetwork ||
-    permissions.canSpawnAgents ||
-    permissions.canWriteMemory ||
-    permissions.canReadSourceContent
-  ) {
-    throw new Error("Agent profile requests permissions outside I8 dry-run boundaries.");
-  }
   if (!SAFE_AGENT_ID_PATTERN.test(profile.id)) throw new Error("Agent profile id is unsafe.");
   assertStringArray(profile.traits?.expertise, "profile.traits.expertise");
   assertStringArray(profile.traits?.stance, "profile.traits.stance");
@@ -188,11 +178,6 @@ export function parseAgentProfile(value: unknown): AgentProfile {
   assertStringArray(profile.inputs?.required, "profile.inputs.required");
   assertStringArray(profile.inputs?.optional, "profile.inputs.optional");
   assertStringArray(profile.inputs?.forbidden, "profile.inputs.forbidden");
-  if (!FORBIDDEN_INPUTS.every((item) => profile.inputs.forbidden.includes(item))) {
-    throw new Error(
-      "Agent profile must forbid raw prompts, secrets, raw command logs, and source corpus.",
-    );
-  }
   if (!isKnownOutputSchema(profile.output?.schema))
     throw new Error("Agent profile output schema is unsupported.");
   assertStringArray(profile.output.requiredFields, "profile.output.requiredFields");
@@ -211,19 +196,13 @@ export function composeAgentDryRun(input: {
   const mode = input.contract.route.mode;
   const workflowId = input.workflowId ?? input.contract.route.workflowId;
   const warnings: string[] = [];
-  const blockers: string[] = [];
   const permissions = createDefaultAgentPermissions();
   const requestedLenses = dedupeLenses(input.lenses ?? []);
-  const privacyBlockers = collectPrivacyBoundaryBlockers(
-    input.contract,
-    requestedLenses,
-    workflowId,
-  );
-  blockers.push(...privacyBlockers);
+  const advisories = collectPrivacyBoundaryAdvisories(input.contract, requestedLenses, workflowId);
 
   if (mode === "minimal") {
     return {
-      ok: blockers.length === 0,
+      ok: advisories.length === 0,
       taskId: input.contract.taskId,
       mode,
       workflowId,
@@ -231,7 +210,7 @@ export function composeAgentDryRun(input: {
       permissions,
       mergePlan: createMergePlan([]),
       warnings,
-      blockers,
+      advisories,
       rationale: "Minimal mode does not force dynamic agents by default.",
     };
   }
@@ -250,11 +229,11 @@ export function composeAgentDryRun(input: {
   }));
 
   if (mode === "standard" && agents.length > 1) {
-    blockers.push("Standard mode allows at most one optional reviewer/triager in I8 dry-run.");
+    warnings.push("Standard mode advisory selected more than one reviewer/triager.");
   }
 
   return {
-    ok: blockers.length === 0,
+    ok: advisories.length === 0,
     taskId: input.contract.taskId,
     mode,
     workflowId,
@@ -262,7 +241,7 @@ export function composeAgentDryRun(input: {
     permissions,
     mergePlan: createMergePlan(agents),
     warnings,
-    blockers,
+    advisories,
     rationale:
       agents.length === 0
         ? "No dynamic agents selected; deterministic verification may be sufficient."
@@ -288,7 +267,7 @@ export function loadAgentContextDryRun(profile: AgentProfile): AgentContextDryRu
       provenance: [`agent-profile:${parsed.id}`],
     },
     warnings: [],
-    blockers: [],
+    advisories: [],
   };
 }
 
@@ -375,10 +354,10 @@ export function formatAgentComposeDryRun(plan: AgentComposeDryRunPlan): string {
     ...(plan.warnings.length === 0
       ? ["  - none"]
       : plan.warnings.map((warning) => `  - ${warning}`)),
-    "Blockers:",
-    ...(plan.blockers.length === 0
+    "Advisories:",
+    ...(plan.advisories.length === 0
       ? ["  - none"]
-      : plan.blockers.map((blocker) => `  - ${blocker}`)),
+      : plan.advisories.map((advisory) => `  - ${advisory}`)),
   ].join("\n");
 }
 
@@ -394,10 +373,10 @@ export function formatAgentContextDryRun(bundle: AgentContextDryRunBundle): stri
     ...bundle.context.forbiddenSections.map((section) => `  - ${section}`),
     "Permissions:",
     ...Object.entries(bundle.profile.permissions).map(([key, value]) => `  - ${key}: ${value}`),
-    "Blockers:",
-    ...(bundle.blockers.length === 0
+    "Advisories:",
+    ...(bundle.advisories.length === 0
       ? ["  - none"]
-      : bundle.blockers.map((blocker) => `  - ${blocker}`)),
+      : bundle.advisories.map((advisory) => `  - ${advisory}`)),
   ].join("\n");
 }
 
@@ -415,7 +394,7 @@ function createDynamicProfile(
     traits: {
       expertise: LENS_TO_EXPERTISE[lens],
       stance: ["skeptical-reviewer"],
-      approach: ["evidence-first", "fail-closed"],
+      approach: ["evidence-first", "advisory"],
       domain: ["software-rd"],
     },
     inputs: {
@@ -462,7 +441,7 @@ function createMergePlan(agents: AgentPlannedInvocation[]): AgentMergePlan {
       outputSchema: null,
       dedupeBy: [],
       conflictPolicy: [],
-      failClosedCategories: [],
+      advisoryCategories: [],
     };
   if (agents.length === 1)
     return {
@@ -470,14 +449,14 @@ function createMergePlan(agents: AgentPlannedInvocation[]): AgentMergePlan {
       outputSchema: agents[0].profile.output.schema,
       dedupeBy: [],
       conflictPolicy: [],
-      failClosedCategories: [],
+      advisoryCategories: [],
     };
   return {
-    strategy: "dedupe-preserve-conflicts-fail-closed",
+    strategy: "dedupe-preserve-conflicts",
     outputSchema: "review-findings-v1",
     dedupeBy: ["category", "path", "line", "title"],
     conflictPolicy: ["preserve dissent", "keep higher severity unless evidence refutes"],
-    failClosedCategories: ["security", "privacy", "release"],
+    advisoryCategories: ["security", "privacy", "release"],
   };
 }
 
@@ -489,7 +468,7 @@ function createLensReason(
   return `${lens} lens selected for ${mode ?? "unrouted"} mode${workflowId ? ` and workflow ${workflowId}` : ""}.`;
 }
 
-function collectPrivacyBoundaryBlockers(
+function collectPrivacyBoundaryAdvisories(
   contract: TaskContract,
   lenses: AgentLens[],
   workflowId: string | null,
@@ -504,9 +483,9 @@ function collectPrivacyBoundaryBlockers(
     ...contract.scope.requiresUserConfirmation,
     ...lenses,
   ].join(" ");
-  return PRIVACY_BLOCKER_PATTERN.test(text)
+  return PRIVACY_ADVISORY_PATTERN.test(text)
     ? [
-        "Agent planning refuses privacy/risky context requiring raw data, writes, commands, network, spawning, or memory.",
+        "Agent planning detected privacy/risky context requiring raw data, writes, commands, network, spawning, or memory.",
       ]
     : [];
 }
@@ -539,7 +518,7 @@ function dedupeLenses(lenses: AgentLens[]): AgentLens[] {
 }
 
 function severityRank(severity: AgentFindingSeverity): number {
-  return { info: 0, low: 1, medium: 2, high: 3, blocker: 4 }[severity];
+  return { info: 0, low: 1, medium: 2, high: 3, critical: 4 }[severity];
 }
 
 function assertString(value: unknown, path: string): void {

package/src/config/index.ts

@@ -10,6 +10,8 @@ export {
   type EvoDevSettings,
   type PluginSettings,
   type SettingsInput,
+  type TeamRuntimeSettings,
+  createDefaultTeamRuntimeSettings,
   createDefaultSettings,
   mergeSettings,
   parseSettings,

package/src/config/paths.ts

@@ -4,6 +4,18 @@ export interface EvoDevPaths {
   settingsPath: string;
   registryPath: string;
   stateDir: string;
+  logsDir: string;
+  knowledgeDir: string;
+  knowledgeIndexPath: string;
+  evosDir: string;
+  evosCasesDir: string;
+  evosIndexPath: string;
+  roleAgentsDir: string;
+  roleAgentsIndexPath: string;
+  teamsDir: string;
+  teamsIndexPath: string;
+  runsDir: string;
+  latestRunPath: string;
   installStatePath: string;
   syncStatePath: string;
 }
@@ -12,6 +24,12 @@ export function resolveEvoDevPaths(homeDir: string = getHomeDir()): EvoDevPaths
   const normalizedHome = stripTrailingSlash(homeDir);
   const rootDir = `${normalizedHome}/.evodev`;
   const stateDir = `${rootDir}/state`;
+  const logsDir = `${rootDir}/logs`;
+  const knowledgeDir = `${rootDir}/knowledge`;
+  const evosDir = `${rootDir}/evos`;
+  const roleAgentsDir = `${rootDir}/agents/roles`;
+  const teamsDir = `${rootDir}/teams`;
+  const runsDir = `${rootDir}/runs`;
 
   return {
     homeDir: normalizedHome,
@@ -19,6 +37,18 @@ export function resolveEvoDevPaths(homeDir: string = getHomeDir()): EvoDevPaths
     settingsPath: `${rootDir}/settings.json`,
     registryPath: `${rootDir}/registry.json`,
     stateDir,
+    logsDir,
+    knowledgeDir,
+    knowledgeIndexPath: `${knowledgeDir}/index.json`,
+    evosDir,
+    evosCasesDir: `${evosDir}/cases`,
+    evosIndexPath: `${evosDir}/index.json`,
+    roleAgentsDir,
+    roleAgentsIndexPath: `${roleAgentsDir}/index.json`,
+    teamsDir,
+    teamsIndexPath: `${teamsDir}/index.json`,
+    runsDir,
+    latestRunPath: `${runsDir}/latest.json`,
     installStatePath: `${stateDir}/install.json`,
     syncStatePath: `${stateDir}/sync.json`,
   };

package/src/config/settings.ts

@@ -28,6 +28,7 @@ export interface EvoDevSettings {
     lastRunAt: string | null;
   };
   hooks: HookSettings;
+  teamRuntime: TeamRuntimeSettings;
 }
 
 export type SettingsInput = Partial<{
@@ -43,8 +44,16 @@ export type SettingsInput = Partial<{
   }>;
   doctor: Partial<EvoDevSettings["doctor"]>;
   hooks: unknown;
+  teamRuntime: Partial<TeamRuntimeSettings>;
 }>;
 
+export interface TeamRuntimeSettings {
+  defaultRuntime: "codex" | "claude";
+  defaultModel: string | null;
+  defaultThinkingLevel: string | null;
+  recordTranscript: boolean;
+}
+
 export function createDefaultSettings(os: string = process.platform): EvoDevSettings {
   return {
     version: 1,
@@ -73,6 +82,16 @@ export function createDefaultSettings(os: string = process.platform): EvoDevSett
       lastRunAt: null,
     },
     hooks: createDefaultHookSettings(),
+    teamRuntime: createDefaultTeamRuntimeSettings(),
+  };
+}
+
+export function createDefaultTeamRuntimeSettings(): TeamRuntimeSettings {
+  return {
+    defaultRuntime: "codex",
+    defaultModel: null,
+    defaultThinkingLevel: null,
+    recordTranscript: false,
   };
 }
 
@@ -112,6 +131,10 @@ export function mergeSettings(
       ...existing.doctor,
     },
     hooks: existing.hooks ?? defaults.hooks,
+    teamRuntime: {
+      ...defaults.teamRuntime,
+      ...existing.teamRuntime,
+    },
   };
 
   return parseSettings(merged);
@@ -157,11 +180,40 @@ export function parseSettings(value: unknown): EvoDevSettings {
       lastRunAt: expectNullableString(doctor.lastRunAt, "settings.doctor.lastRunAt"),
     },
     hooks: parseHookSettings(root.hooks),
+    teamRuntime: parseTeamRuntimeSettings(
+      root.teamRuntime ?? createDefaultTeamRuntimeSettings(),
+      "settings.teamRuntime",
+    ),
   };
 
   return parsed;
 }
 
+function parseTeamRuntimeSettings(value: unknown, path: string): TeamRuntimeSettings {
+  const input = expectRecord(value, path);
+  const defaults = createDefaultTeamRuntimeSettings();
+  const defaultRuntime = input.defaultRuntime ?? defaults.defaultRuntime;
+  if (defaultRuntime !== "codex" && defaultRuntime !== "claude") {
+    throw new EvoDevConfigError(`Invalid ${path}.defaultRuntime; expected codex or claude`);
+  }
+
+  return {
+    defaultRuntime,
+    defaultModel:
+      input.defaultModel === undefined
+        ? defaults.defaultModel
+        : expectNullableString(input.defaultModel, `${path}.defaultModel`),
+    defaultThinkingLevel:
+      input.defaultThinkingLevel === undefined
+        ? defaults.defaultThinkingLevel
+        : expectNullableString(input.defaultThinkingLevel, `${path}.defaultThinkingLevel`),
+    recordTranscript:
+      input.recordTranscript === undefined
+        ? defaults.recordTranscript
+        : expectBoolean(input.recordTranscript, `${path}.recordTranscript`),
+  };
+}
+
 function parsePluginSettings(value: unknown, path: string): PluginSettings {
   const input = expectRecord(value, path);
   const parsed: PluginSettings = {