@evo-dev/core 0.0.1-alpha → 0.0.1-alpha.2

package/dist/plugins/index.js

@@ -9,37 +9,28 @@ function createUnknownNegotiatedCapabilities(pluginId) {
     hooks: "unsupported",
     canPlanWrites: false,
     warnings: [],
-    blockers: [`Plugin ${pluginId} capabilities are unknown and unsupported.`]
+    advisories: [`Plugin ${pluginId} capabilities are unknown and unsupported.`]
   };
 }
 function isCapabilityUsable(state) {
   return state === "enabled";
 }
-function assertNoUnverifiedWrites(negotiation) {
-  if (!negotiation.canPlanWrites) {
-    throw new Error(`Plugin ${negotiation.pluginId} has no verified enabled write capabilities.`);
-  }
-}
 function negotiatePluginCapabilities(input) {
   if (input.pluginId === "codex") {
-    const declaredSupport = [
-      input.declared.skills.supported ? "skills" : null,
-      input.declared.agents.supported ? "agents" : null,
-      input.declared.hooks.supported ? "hooks" : null
-    ].filter(Boolean);
-    const blockers = ["Codex capabilities are unverified; writes are unsupported in I10."];
+    const advisories = [];
     const warnings = [
-      input.verified ? "Codex readonly verification artifact exists; sync remains no-write until formats are verified." : null,
-      declaredSupport.length > 0 ? `Codex declares ${declaredSupport.join(", ")} support, but declared support alone cannot authorize writes.` : null
+      input.verified ? "Codex metadata-only verification artifact exists; implemented Codex skill/agent distribution remains governed by adapter tests." : null,
+      input.declared.skills.supported ? "Codex skills are distributed through the EvoDev Codex plugin bundle, not direct user-directory skill sync." : null,
+      input.declared.agents.supported ? "Codex agents can sync to user-level TOML files with no-overwrite semantics." : null
     ].filter((warning) => warning !== null);
     return {
       pluginId: input.pluginId,
-      skills: input.declared.skills.supported ? "unverified" : "unsupported",
-      agents: input.declared.agents.supported ? "unverified" : "unsupported",
-      hooks: input.declared.hooks.supported ? "unverified" : "unsupported",
-      canPlanWrites: false,
+      skills: resolveNonCodexCapabilityState(input.declared.skills.supported, input.enabled),
+      agents: resolveNonCodexCapabilityState(input.declared.agents.supported, input.enabled),
+      hooks: resolveNonCodexCapabilityState(input.declared.hooks.supported, input.enabled),
+      canPlanWrites: input.enabled && input.declared.agents.supported,
       warnings,
-      blockers
+      advisories
     };
   }
   return {
@@ -49,9 +40,9 @@ function negotiatePluginCapabilities(input) {
     hooks: resolveNonCodexCapabilityState(input.declared.hooks.supported, input.enabled),
     canPlanWrites: input.enabled && input.declared.skills.supported && input.declared.agents.supported,
     warnings: input.enabled ? [] : [
-      `Plugin ${input.pluginId} has declared capabilities but is not enabled; writes are not authorized.`
+      `Plugin ${input.pluginId} has declared capabilities but is not enabled for write planning.`
     ],
-    blockers: []
+    advisories: []
   };
 }
 function resolveNonCodexCapabilityState(supported, enabled) {
@@ -63,7 +54,9 @@ async function createCodexCapabilityVerificationArtifact(input) {
   const timestamp = input.createdAt ?? new Date().toISOString();
   const detectionMessage = sanitizeText(input.detection.message);
   const diagnostics = [
-    "Codex remains no-write until concrete user-level paths and formats are verified."
+    "Codex skills are packaged in the EvoDev Codex plugin payload.",
+    "Codex agents sync to user-level TOML files under ~/.codex/agents.",
+    "Codex hooks are supplied by the EvoDev Codex plugin manifest and enabled through Codex plugin hooks."
   ];
   return {
     version: 1,
@@ -80,7 +73,11 @@ async function createCodexCapabilityVerificationArtifact(input) {
     externalUpload: false,
     networkUsed: false,
     toolSummary: { tool: "codex", detectionStatus: input.detection.status, version: null },
-    capabilities: { skills: "unverified", agents: "unverified", hooks: "unverified" },
+    capabilities: {
+      skills: "plugin-bundled",
+      agents: "user-level-toml-sync",
+      hooks: "plugin-manifest-hooks"
+    },
     writeBoundary: {
       writesAllowed: false,
       allowedPaths: [],
@@ -98,7 +95,7 @@ async function createCodexCapabilityVerificationArtifact(input) {
       secretsStored: false,
       externalUpload: false
     },
-    blockers: ["Codex asset capabilities are unverified and unsupported for writes in I10."],
+    advisories: [],
     diagnostics,
     evidenceRefs: [],
     evidence: {
@@ -106,7 +103,8 @@ async function createCodexCapabilityVerificationArtifact(input) {
       detectionMessage,
       writesAllowed: false,
       notes: [
-        "Metadata-only readonly artifact; no Codex paths, formats, hooks, or writes verified."
+        "Metadata-only verification artifact; it does not probe or write Code Agent directories.",
+        "Implemented Codex asset distribution is covered by adapter tests: plugin-bundled skills and user-level TOML agents."
       ]
     }
   };
@@ -149,12 +147,12 @@ function formatCodexCapabilityVerificationArtifact(artifact, path) {
     `Status: ${artifact.status}`,
     `Artifact: ${path ?? "dry-run only"}`,
     `Verified at: ${artifact.verifiedAt}`,
-    "Capabilities: skills=unverified agents=unverified hooks=unverified",
-    "Writes allowed: false",
+    `Capabilities: skills=${artifact.capabilities.skills} agents=${artifact.capabilities.agents} hooks=${artifact.capabilities.hooks}`,
+    "Verification writes allowed: false",
     "Allowed paths: none",
-    "User-level write paths verified: false",
+    "User-level agent sync path: ~/.codex/agents",
     "Project writes allowed: false",
-    "No-overwrite verified: false",
+    "No-overwrite policy: skip existing files unless force refresh is requested",
     `External upload: ${artifact.externalUpload}`,
     `Detection: ${artifact.evidence.detectionStatus}`,
     ...artifact.evidence.notes.map((note) => `Note: ${note}`)
@@ -171,8 +169,11 @@ async function runPluginConformance(plugin) {
   }
   if (plugin.id === "codex") {
     const capabilities = await plugin.getCapabilities();
-    if (capabilities.skills.supported || capabilities.agents.supported || capabilities.hooks.supported) {
-      findings.push("Codex must not declare verified runtime support in I10.");
+    if (!capabilities.skills.supported || !capabilities.agents.supported) {
+      findings.push("Codex must declare plugin-bundled skills and user-level TOML agents.");
+    }
+    if (!capabilities.hooks.supported || capabilities.hooks.events.length === 0) {
+      findings.push("Codex must declare plugin-manifest hook support.");
     }
   }
   return { ok: findings.length === 0, findings };
@@ -259,7 +260,6 @@ export {
   createUnknownNegotiatedCapabilities,
   createPluginRegistry,
   createCodexCapabilityVerificationArtifact,
-  assertNoUnverifiedWrites,
   PluginRegistryError,
   PluginRegistry
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evo-dev/core",
-  "version": "0.0.1-alpha",
+  "version": "0.0.1-alpha.2",
   "type": "module",
   "repository": {
     "type": "git",
@@ -10,18 +10,22 @@
   "exports": {
     ".": {
       "types": "./src/index.ts",
+      "bun": "./src/index.ts",
       "import": "./dist/index.js"
     },
     "./assets": {
       "types": "./src/assets/index.ts",
+      "bun": "./src/assets/index.ts",
       "import": "./dist/assets/index.js"
     },
     "./config": {
       "types": "./src/config/index.ts",
+      "bun": "./src/config/index.ts",
       "import": "./dist/config/index.js"
     },
     "./plugins": {
       "types": "./src/plugins/index.ts",
+      "bun": "./src/plugins/index.ts",
       "import": "./dist/plugins/index.js"
     }
   },

package/src/agents/index.ts

@@ -1,4 +1,9 @@
 import { readFile } from "node:fs/promises";
+import {
+  type ScopedKnowledgeContextPack,
+  createScopedKnowledgeContextPack,
+  formatScopedKnowledgePromptBlock,
+} from "../knowledge/index.ts";
 import type { TaskContract, TaskExecutionMode } from "../task/index.ts";
 
 export type AgentPersistence = "named" | "dynamic";
@@ -14,7 +19,7 @@ export type AgentOutputSchemaId =
   | "review-findings-v1"
   | "verification-summary-v1"
   | "design-options-v1";
-export type AgentFindingSeverity = "blocker" | "high" | "medium" | "low" | "info";
+export type AgentFindingSeverity = "critical" | "high" | "medium" | "low" | "info";
 
 export interface AgentPermissions {
   canReadMetadata: boolean;
@@ -64,11 +69,11 @@ export interface AgentPlannedInvocation {
 }
 
 export interface AgentMergePlan {
-  strategy: "none" | "single-output" | "dedupe-preserve-conflicts-fail-closed";
+  strategy: "none" | "single-output" | "dedupe-preserve-conflicts";
   outputSchema: AgentOutputSchemaId | null;
   dedupeBy: string[];
   conflictPolicy: string[];
-  failClosedCategories: string[];
+  advisoryCategories: string[];
 }
 
 export interface AgentComposeDryRunPlan {
@@ -80,7 +85,7 @@ export interface AgentComposeDryRunPlan {
   permissions: AgentPermissions;
   mergePlan: AgentMergePlan;
   warnings: string[];
-  blockers: string[];
+  advisories: string[];
   rationale: string;
 }
 
@@ -93,7 +98,16 @@ export interface AgentContextDryRunBundle {
     provenance: string[];
   };
   warnings: string[];
-  blockers: string[];
+  advisories: string[];
+}
+
+export interface AgentLoadedContextBundle {
+  profile: AgentProfile;
+  contextPack: ScopedKnowledgeContextPack | null;
+  promptBlock: string | null;
+  warnings: string[];
+  advisories: string[];
+  rawContentStored: false;
 }
 
 export interface ReviewFindingOutput {
@@ -124,7 +138,7 @@ const DEFAULT_AGENT_PERMISSIONS: AgentPermissions = {
 };
 const FORBIDDEN_INPUTS = ["rawPrompts", "secrets", "rawCommandLogs", "sourceCorpus"];
 const SAFE_AGENT_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
-const PRIVACY_BLOCKER_PATTERN =
+const PRIVACY_ADVISORY_PATTERN =
   /raw prompt|rawprompt|source corpus|sourcecorpus|secret|\.env|raw command|raw log|internal url|private url|network|write files|run commands|spawn agents|write memory/i;
 const LENS_TO_EXPERTISE: Record<AgentLens, string[]> = {
   review: ["code-review"],
@@ -170,16 +184,6 @@ export function parseAgentProfile(value: unknown): AgentProfile {
     throw new Error("Agent profile must be metadata-only and must not store raw prompts/source.");
   }
   const permissions = normalizeAgentPermissions(profile.permissions);
-  if (
-    permissions.canWriteFiles ||
-    permissions.canRunCommands ||
-    permissions.canUseNetwork ||
-    permissions.canSpawnAgents ||
-    permissions.canWriteMemory ||
-    permissions.canReadSourceContent
-  ) {
-    throw new Error("Agent profile requests permissions outside I8 dry-run boundaries.");
-  }
   if (!SAFE_AGENT_ID_PATTERN.test(profile.id)) throw new Error("Agent profile id is unsafe.");
   assertStringArray(profile.traits?.expertise, "profile.traits.expertise");
   assertStringArray(profile.traits?.stance, "profile.traits.stance");
@@ -188,11 +192,6 @@ export function parseAgentProfile(value: unknown): AgentProfile {
   assertStringArray(profile.inputs?.required, "profile.inputs.required");
   assertStringArray(profile.inputs?.optional, "profile.inputs.optional");
   assertStringArray(profile.inputs?.forbidden, "profile.inputs.forbidden");
-  if (!FORBIDDEN_INPUTS.every((item) => profile.inputs.forbidden.includes(item))) {
-    throw new Error(
-      "Agent profile must forbid raw prompts, secrets, raw command logs, and source corpus.",
-    );
-  }
   if (!isKnownOutputSchema(profile.output?.schema))
     throw new Error("Agent profile output schema is unsupported.");
   assertStringArray(profile.output.requiredFields, "profile.output.requiredFields");
@@ -211,19 +210,13 @@ export function composeAgentDryRun(input: {
   const mode = input.contract.route.mode;
   const workflowId = input.workflowId ?? input.contract.route.workflowId;
   const warnings: string[] = [];
-  const blockers: string[] = [];
   const permissions = createDefaultAgentPermissions();
   const requestedLenses = dedupeLenses(input.lenses ?? []);
-  const privacyBlockers = collectPrivacyBoundaryBlockers(
-    input.contract,
-    requestedLenses,
-    workflowId,
-  );
-  blockers.push(...privacyBlockers);
+  const advisories = collectPrivacyBoundaryAdvisories(input.contract, requestedLenses, workflowId);
 
   if (mode === "minimal") {
     return {
-      ok: blockers.length === 0,
+      ok: advisories.length === 0,
       taskId: input.contract.taskId,
       mode,
       workflowId,
@@ -231,7 +224,7 @@ export function composeAgentDryRun(input: {
       permissions,
       mergePlan: createMergePlan([]),
       warnings,
-      blockers,
+      advisories,
       rationale: "Minimal mode does not force dynamic agents by default.",
     };
   }
@@ -250,11 +243,11 @@ export function composeAgentDryRun(input: {
   }));
 
   if (mode === "standard" && agents.length > 1) {
-    blockers.push("Standard mode allows at most one optional reviewer/triager in I8 dry-run.");
+    warnings.push("Standard mode advisory selected more than one reviewer/triager.");
   }
 
   return {
-    ok: blockers.length === 0,
+    ok: advisories.length === 0,
     taskId: input.contract.taskId,
     mode,
     workflowId,
@@ -262,7 +255,7 @@ export function composeAgentDryRun(input: {
     permissions,
     mergePlan: createMergePlan(agents),
     warnings,
-    blockers,
+    advisories,
     rationale:
       agents.length === 0
         ? "No dynamic agents selected; deterministic verification may be sufficient."
@@ -288,10 +281,52 @@ export function loadAgentContextDryRun(profile: AgentProfile): AgentContextDryRu
       provenance: [`agent-profile:${parsed.id}`],
     },
     warnings: [],
-    blockers: [],
+    advisories: [],
+  };
+}
+
+export async function loadAgentContext(input: {
+  homeDir: string;
+  profile: AgentProfile;
+  projectKey?: string;
+  roleId?: string;
+  workflowId?: string;
+  paths?: string[];
+  queryText?: string;
+  limit?: number;
+}): Promise<AgentLoadedContextBundle> {
+  const parsed = parseAgentProfile(input.profile);
+  const pack = await createScopedKnowledgeContextPack({
+    homeDir: input.homeDir,
+    projectKey: input.projectKey,
+    roleId: input.roleId ?? parsed.id,
+    workflowId: input.workflowId,
+    paths: input.paths,
+    queryText: input.queryText,
+    limit: input.limit,
+  });
+  return {
+    profile: parsed,
+    contextPack: pack,
+    promptBlock: pack === null ? null : formatScopedKnowledgePromptBlock(pack),
+    warnings: pack?.warnings ?? [],
+    advisories: [],
+    rawContentStored: false,
   };
 }
 
+export function formatAgentLoadedContextPromptBlock(bundle: AgentLoadedContextBundle): string {
+  if (bundle.promptBlock !== null) return bundle.promptBlock;
+  return [
+    "EvoDev Scoped Knowledge Context",
+    `Agent: ${bundle.profile.id}`,
+    "Raw content stored: false",
+    "",
+    "Applicable items:",
+    "- none",
+  ].join("\n");
+}
+
 export function validateAgentOutput(
   schema: AgentOutputSchemaId,
   output: unknown,
@@ -375,10 +410,10 @@ export function formatAgentComposeDryRun(plan: AgentComposeDryRunPlan): string {
     ...(plan.warnings.length === 0
       ? ["  - none"]
       : plan.warnings.map((warning) => `  - ${warning}`)),
-    "Blockers:",
-    ...(plan.blockers.length === 0
+    "Advisories:",
+    ...(plan.advisories.length === 0
       ? ["  - none"]
-      : plan.blockers.map((blocker) => `  - ${blocker}`)),
+      : plan.advisories.map((advisory) => `  - ${advisory}`)),
   ].join("\n");
 }
 
@@ -394,10 +429,10 @@ export function formatAgentContextDryRun(bundle: AgentContextDryRunBundle): stri
     ...bundle.context.forbiddenSections.map((section) => `  - ${section}`),
     "Permissions:",
     ...Object.entries(bundle.profile.permissions).map(([key, value]) => `  - ${key}: ${value}`),
-    "Blockers:",
-    ...(bundle.blockers.length === 0
+    "Advisories:",
+    ...(bundle.advisories.length === 0
       ? ["  - none"]
-      : bundle.blockers.map((blocker) => `  - ${blocker}`)),
+      : bundle.advisories.map((advisory) => `  - ${advisory}`)),
   ].join("\n");
 }
 
@@ -415,7 +450,7 @@ function createDynamicProfile(
     traits: {
       expertise: LENS_TO_EXPERTISE[lens],
       stance: ["skeptical-reviewer"],
-      approach: ["evidence-first", "fail-closed"],
+      approach: ["evidence-first", "advisory"],
       domain: ["software-rd"],
     },
     inputs: {
@@ -462,7 +497,7 @@ function createMergePlan(agents: AgentPlannedInvocation[]): AgentMergePlan {
       outputSchema: null,
       dedupeBy: [],
       conflictPolicy: [],
-      failClosedCategories: [],
+      advisoryCategories: [],
     };
   if (agents.length === 1)
     return {
@@ -470,14 +505,14 @@ function createMergePlan(agents: AgentPlannedInvocation[]): AgentMergePlan {
       outputSchema: agents[0].profile.output.schema,
       dedupeBy: [],
       conflictPolicy: [],
-      failClosedCategories: [],
+      advisoryCategories: [],
     };
   return {
-    strategy: "dedupe-preserve-conflicts-fail-closed",
+    strategy: "dedupe-preserve-conflicts",
     outputSchema: "review-findings-v1",
     dedupeBy: ["category", "path", "line", "title"],
     conflictPolicy: ["preserve dissent", "keep higher severity unless evidence refutes"],
-    failClosedCategories: ["security", "privacy", "release"],
+    advisoryCategories: ["security", "privacy", "release"],
   };
 }
 
@@ -489,7 +524,7 @@ function createLensReason(
   return `${lens} lens selected for ${mode ?? "unrouted"} mode${workflowId ? ` and workflow ${workflowId}` : ""}.`;
 }
 
-function collectPrivacyBoundaryBlockers(
+function collectPrivacyBoundaryAdvisories(
   contract: TaskContract,
   lenses: AgentLens[],
   workflowId: string | null,
@@ -504,9 +539,9 @@ function collectPrivacyBoundaryBlockers(
     ...contract.scope.requiresUserConfirmation,
     ...lenses,
   ].join(" ");
-  return PRIVACY_BLOCKER_PATTERN.test(text)
+  return PRIVACY_ADVISORY_PATTERN.test(text)
     ? [
-        "Agent planning refuses privacy/risky context requiring raw data, writes, commands, network, spawning, or memory.",
+        "Agent planning detected privacy/risky context requiring raw data, writes, commands, network, spawning, or memory.",
       ]
     : [];
 }
@@ -539,7 +574,7 @@ function dedupeLenses(lenses: AgentLens[]): AgentLens[] {
 }
 
 function severityRank(severity: AgentFindingSeverity): number {
-  return { info: 0, low: 1, medium: 2, high: 3, blocker: 4 }[severity];
+  return { info: 0, low: 1, medium: 2, high: 3, critical: 4 }[severity];
 }
 
 function assertString(value: unknown, path: string): void {