@lamentis/naome 1.0.0

package/templates/naome-root/.naome/bin/check-task-state.js

@@ -0,0 +1,180 @@
+#!/usr/bin/env node
+
+const { existsSync, readFileSync } = require("node:fs");
+const { createHash } = require("node:crypto");
+const { dirname, join, resolve } = require("node:path");
+const { spawnSync } = require("node:child_process");
+
+const nativeBinaryRelativePath = process.platform === "win32" ? ".naome/bin/naome-rust.exe" : ".naome/bin/naome-rust";
+const nativeBinaryName = process.platform === "win32" ? "naome.exe" : "naome";
+
+const expectedMachineOwnedIntegrity = Object.freeze({
+  "AGENTS.md": "sha256:ebe589ce85b43d4aa23014d8a26a49bd33dc52ef1bba68e4f63a7e86640be06a",
+  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
+  ".naome/bin/naome.js": "sha256:1b63729dc55730a826193d35cf78e755a991b356ac81b45f4aa3fcf24c8152fa",
+  ".naome/bin/check-task-state.js": "sha256:43c02868072d0d13499aefba2e9a5ec9517d59539fd19ff0f11e3e4623a51b44",
+  ".naome/bin/check-harness-health.js": "sha256:dce2a380022dd63d86bd762869debafbc635ab3d7e8fae985e2d429d8ee437ad",
+  ".naome/task-contract.schema.json": "sha256:c806416d4944eaed6dc48b3760fd0dd5b9b5a7c9ab895697fe36b54c41c1332f",
+  "docs/naome/index.md": "sha256:75c4cdf9edcd46c83a619cbfc551e96cae35bcff694d955ebab4624125ae7f12",
+  "docs/naome/first-run.md": "sha256:a1dd0bd17ec9d71955a473cd2c4a615538e89a7d81e8f4e1015a50ab9efe3558",
+  "docs/naome/agent-workflow.md": "sha256:5e5b26e7896f95a9154abcd133f08b33f84fddc679757ed15c043a91e319fb4e",
+  "docs/naome/execution.md": "sha256:3d67fd9922a66a66f79f920adbb24dcd47eefdfde835a5351a27ffed932dcfea",
+  "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
+});
+
+function main(argv) {
+  const root = findHarnessRoot(process.cwd()) || resolve(__dirname, "..", "..");
+  const nativeBinary = resolveNativeDecisionBinary(root);
+
+  const result = spawnSync(nativeBinary, ["check-task-state", "--root", root, ...modeArgs(argv)], {
+    cwd: root,
+    encoding: "utf8",
+    env: {
+      ...process.env,
+      NAOME_EXPECTED_INTEGRITY_JSON: JSON.stringify(expectedMachineOwnedIntegrity)
+    },
+    stdio: "inherit"
+  });
+
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+function modeArgs(argv) {
+  if (argv.includes("--admission")) {
+    return ["--admission"];
+  }
+
+  if (argv.includes("--progress")) {
+    return ["--progress"];
+  }
+
+  if (argv.includes("--commit-gate")) {
+    return ["--commit-gate"];
+  }
+
+  if (argv.includes("--push-gate")) {
+    return ["--push-gate"];
+  }
+
+  return [];
+}
+
+function resolveNativeDecisionBinary(root) {
+  const expectedIntegrity = expectedNativeIntegrity(root);
+  const candidates = [
+    process.env.NAOME_NATIVE_BIN,
+    join(root, nativeBinaryRelativePath),
+    join(root, "packages", "naome", "target", "release", nativeBinaryName),
+    join(root, "packages", "naome", "target", "debug", nativeBinaryName)
+  ].filter(Boolean);
+
+  for (const candidate of candidates) {
+    if (isUsableNativeBinary(candidate, root, expectedIntegrity)) {
+      return candidate;
+    }
+  }
+
+  if (expectedIntegrity) {
+    fail(`No runnable NAOME native task-state binary matched ${expectedIntegrity}. Run naome sync again.`);
+  }
+
+  const built = buildSourceNativeBinary(root);
+  if (built && isUsableNativeBinary(built, root, null)) {
+    return built;
+  }
+
+  fail("NAOME native task-state binary is missing or incompatible. Run naome sync again.");
+}
+
+function expectedNativeIntegrity(root) {
+  if (isIntegrityHash(process.env.NAOME_EXPECTED_NATIVE_INTEGRITY)) {
+    return process.env.NAOME_EXPECTED_NATIVE_INTEGRITY;
+  }
+
+  const manifestPath = join(root, ".naome", "manifest.json");
+  if (!existsSync(manifestPath)) {
+    return null;
+  }
+
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
+  } catch {
+    return null;
+  }
+
+  const expected = manifest.integrity?.[nativeBinaryRelativePath];
+  if (!isIntegrityHash(expected)) {
+    return null;
+  }
+
+  return expected;
+}
+
+function isUsableNativeBinary(candidate, root, expectedIntegrity) {
+  if (!candidate || !existsSync(candidate)) {
+    return false;
+  }
+
+  if (expectedIntegrity) {
+    const actual = `sha256:${createHash("sha256").update(readFileSync(candidate)).digest("hex")}`;
+    if (actual !== expectedIntegrity) {
+      return false;
+    }
+  }
+
+  const probe = spawnSync(candidate, [], {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "ignore"
+  });
+  return !probe.error && probe.status !== null;
+}
+
+function buildSourceNativeBinary(root) {
+  const manifestPath = join(root, "packages", "naome", "Cargo.toml");
+  if (!existsSync(manifestPath)) {
+    return null;
+  }
+
+  const result = spawnSync("cargo", ["build", "--release", "--manifest-path", manifestPath, "-p", "naome-cli"], {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "ignore"
+  });
+  if (result.status !== 0) {
+    return null;
+  }
+
+  const builtPath = join(root, "packages", "naome", "target", "release", nativeBinaryName);
+  return existsSync(builtPath) ? builtPath : null;
+}
+
+function findHarnessRoot(startPath) {
+  let current = resolve(startPath);
+
+  while (true) {
+    if (existsSync(join(current, ".naome", "task-state.json"))) {
+      return current;
+    }
+
+    const parent = dirname(current);
+    if (parent === current) {
+      return null;
+    }
+
+    current = parent;
+  }
+}
+
+function isIntegrityHash(value) {
+  return typeof value === "string" && /^sha256:[a-f0-9]{64}$/.test(value);
+}
+
+function fail(message) {
+  console.error("NAOME task state check failed.");
+  console.error(`- ${message}`);
+  process.exit(1);
+}
+
+main(process.argv.slice(2));

package/templates/naome-root/.naome/bin/naome.js

@@ -0,0 +1,306 @@
+#!/usr/bin/env node
+
+const { existsSync, readFileSync } = require("node:fs");
+const { createHash } = require("node:crypto");
+const { spawnSync } = require("node:child_process");
+const { dirname, join, resolve } = require("node:path");
+
+const nativeBinaryRelativePath = process.platform === "win32" ? ".naome/bin/naome-rust.exe" : ".naome/bin/naome-rust";
+const nativeBinaryName = process.platform === "win32" ? "naome.exe" : "naome";
+const expectedNativeBinaryIntegrity = "sha256:generated";
+
+function main(argv) {
+  const [command, ...args] = argv;
+
+  if (isHelpRequest(argv)) {
+    printHelp();
+    process.exit(0);
+  }
+
+  if (command === "commit") {
+    commit(args);
+    return;
+  }
+
+  if (command === "install" || command === "sync") {
+    installOrSync(command, args);
+    return;
+  }
+
+  if (command === "status" || command === "next") {
+    runNativeDecisionCommand(command, args);
+    return;
+  }
+
+  printHelp();
+  process.exit(command ? 1 : 0);
+}
+
+function isHelpRequest(args) {
+  return ["help", "--help", "-h"].includes(args[0]) || ["help", "--help", "-h"].includes(args[1]);
+}
+
+function runNativeDecisionCommand(command, args) {
+  const root = findHarnessRoot(process.cwd());
+  if (!root) {
+    fail("NAOME harness root not found. Run this inside a repository with .naome/task-state.json.");
+  }
+
+  const nativeBinary = resolveNativeDecisionBinary(root);
+  verifyNativeBinary(nativeBinary);
+
+  const result = spawnSync(nativeBinary, [command, ...args], {
+    cwd: root,
+    encoding: "utf8",
+    env: {
+      ...process.env,
+      NAOME_NODE_BIN: process.execPath
+    },
+    stdio: "inherit"
+  });
+
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+function resolveNativeDecisionBinary(root) {
+  const candidates = [
+    process.env.NAOME_NATIVE_BIN,
+    join(root, nativeBinaryRelativePath),
+    join(root, "packages", "naome", "target", "release", nativeBinaryName),
+    join(root, "packages", "naome", "target", "debug", nativeBinaryName)
+  ].filter(Boolean);
+
+  for (const candidate of candidates) {
+    if (isUsableNativeBinary(candidate, root)) {
+      return candidate;
+    }
+  }
+
+  const built = buildSourceNativeBinary(root);
+  if (built && isUsableNativeBinary(built, root)) {
+    return built;
+  }
+
+  fail("NAOME native decision binary is missing or incompatible. Run naome sync again, or set NAOME_NATIVE_BIN to a built naome binary.");
+}
+
+function isUsableNativeBinary(candidate, root) {
+  if (!candidate || !existsSync(candidate)) {
+    return false;
+  }
+
+  if (expectedNativeBinaryIntegrity === "sha256:generated") {
+    return isRunnableNativeBinary(candidate, root);
+  }
+
+  const actual = `sha256:${createHash("sha256").update(readFileSync(candidate)).digest("hex")}`;
+  if (actual !== expectedNativeBinaryIntegrity) {
+    return false;
+  }
+
+  return isRunnableNativeBinary(candidate, root);
+}
+
+function isRunnableNativeBinary(candidate, root) {
+  const probe = spawnSync(candidate, [], {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "ignore"
+  });
+  return !probe.error && probe.status !== null;
+}
+
+function buildSourceNativeBinary(root) {
+  if (expectedNativeBinaryIntegrity !== "sha256:generated") {
+    return null;
+  }
+
+  const manifestPath = join(root, "packages", "naome", "Cargo.toml");
+  if (!existsSync(manifestPath)) {
+    return null;
+  }
+
+  const result = spawnSync("cargo", ["build", "--release", "--manifest-path", manifestPath, "-p", "naome-cli"], {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "ignore"
+  });
+  if (result.status !== 0) {
+    return null;
+  }
+
+  const builtPath = join(root, "packages", "naome", "target", "release", nativeBinaryName);
+  return existsSync(builtPath) ? builtPath : null;
+}
+
+function verifyNativeBinary(nativeBinary) {
+  if (!isUsableNativeBinary(nativeBinary, findHarnessRoot(process.cwd()) || process.cwd())) {
+    fail("NAOME native decision binary failed integrity or compatibility checks.");
+  }
+}
+
+function commit(args) {
+  const root = findHarnessRoot(process.cwd());
+  if (!root) {
+    fail("NAOME harness root not found. Run this inside a repository with .naome/task-state.json.");
+  }
+
+  const message = parseCommitMessage(args) || defaultCommitMessage(root);
+  const taskState = readTaskState(root);
+
+  if (taskState.status !== "complete") {
+    fail(`naome commit requires task-state status complete. Current status: ${taskState.status}.`);
+  }
+
+  runOrExit(root, [process.execPath, [join(root, ".naome", "bin", "check-task-state.js")]]);
+
+  const changedPaths = readChangedPaths(root);
+  if (changedPaths.length === 0) {
+    fail("Nothing to commit.");
+  }
+
+  runGitOrExit(root, ["add", "-A", "--", "."]);
+  runOrExit(root, [process.execPath, [join(root, ".naome", "bin", "check-task-state.js"), "--commit-gate"]]);
+  runGitOrExit(root, ["commit", "-m", message]);
+
+  console.log(`NAOME committed task ${taskState.activeTask?.id || "unknown"}.`);
+}
+
+function parseCommitMessage(args) {
+  for (let index = 0; index < args.length; index += 1) {
+    const arg = args[index];
+    if ((arg === "-m" || arg === "--message") && args[index + 1]) {
+      return args[index + 1];
+    }
+
+    if (arg.startsWith("--message=")) {
+      return arg.slice("--message=".length);
+    }
+  }
+
+  return null;
+}
+
+function defaultCommitMessage(root) {
+  const taskState = readTaskState(root);
+  const taskId = taskState.activeTask?.id || "task";
+  return `chore(naome): baseline ${taskId}`;
+}
+
+function readTaskState(root) {
+  const taskStatePath = join(root, ".naome", "task-state.json");
+  try {
+    return JSON.parse(readFileSync(taskStatePath, "utf8"));
+  } catch (error) {
+    fail(`Cannot read .naome/task-state.json: ${error.message}`);
+  }
+}
+
+function readChangedPaths(root) {
+  const result = runGit(root, ["status", "--porcelain"]);
+  if (result.status !== 0) {
+    fail(`git status failed: ${result.stderr.trim() || result.stdout.trim()}`);
+  }
+
+  return result.stdout.split(/\r?\n/).filter((line) => line.trim().length > 0);
+}
+
+function runOrExit(root, command) {
+  const [bin, args] = command;
+  const result = spawnSync(bin, args, {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "inherit"
+  });
+
+  if (result.status !== 0) {
+    process.exit(result.status || 1);
+  }
+}
+
+function runGitOrExit(root, args) {
+  const result = runGit(root, args, { stdio: "inherit" });
+  if (result.status !== 0) {
+    process.exit(result.status || 1);
+  }
+}
+
+function runGit(root, args, options = {}) {
+  return spawnSync("git", args, {
+    cwd: root,
+    encoding: "utf8",
+    stdio: options.stdio || "pipe"
+  });
+}
+
+function findHarnessRoot(startPath) {
+  let current = resolve(startPath);
+
+  while (true) {
+    if (existsSync(join(current, ".naome", "task-state.json"))) {
+      return current;
+    }
+
+    const parent = dirname(current);
+    if (parent === current) {
+      return null;
+    }
+
+    current = parent;
+  }
+}
+
+function printHelp() {
+  console.log("Usage:");
+  console.log("  naome status [--json]");
+  console.log("  naome next [--json]");
+  console.log("  naome install");
+  console.log("  naome sync");
+  console.log("  naome commit -m \"type(scope): message\"");
+  console.log("  node .naome/bin/naome.js commit -m \"type(scope): message\"");
+}
+
+function fail(message) {
+  console.error(`NAOME: ${message}`);
+  process.exit(1);
+}
+
+function installOrSync(command, args) {
+  const root = findHarnessRoot(process.cwd()) || process.cwd();
+  const packageRoot = sourcePackageRoot(root);
+  if (packageRoot) {
+    const nativeBinary = resolveNativeDecisionBinary(root);
+    verifyNativeBinary(nativeBinary);
+    const result = spawnSync(nativeBinary, [
+      command,
+      "--package-root",
+      packageRoot,
+      "--installer-js",
+      join(packageRoot, "bin", "naome-node.js"),
+      ...args
+    ], {
+      cwd: root,
+      encoding: "utf8",
+      env: {
+        ...process.env,
+        NAOME_NODE_BIN: process.execPath
+      },
+      stdio: "inherit"
+    });
+    process.exit(result.status === null ? 1 : result.status);
+  }
+
+  const result = spawnSync("npm", ["create", "naome"], {
+    cwd: root,
+    encoding: "utf8",
+    stdio: "inherit"
+  });
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+function sourcePackageRoot(root) {
+  const candidate = join(root, "packages", "naome");
+  return existsSync(join(candidate, "bin", "naome-node.js")) ? candidate : null;
+}
+
+main(process.argv.slice(2));

package/templates/naome-root/.naome/init-state.json

@@ -0,0 +1,13 @@
+{
+  "initialized": false,
+  "intakeStatus": "not_started",
+  "initializedAt": null,
+  "initializedBy": null,
+  "blockedReason": null,
+  "requiredDocs": [
+    "docs/naome/repo-profile.md",
+    "docs/naome/testing.md",
+    "docs/naome/architecture.md",
+    "docs/naome/security.md"
+  ]
+}

package/templates/naome-root/.naome/manifest.json

@@ -0,0 +1,45 @@
+{
+  "name": "naome",
+  "harnessVersion": "1.0.0",
+  "profile": "standard",
+  "installedAt": null,
+  "machineOwned": [
+    "AGENTS.md",
+    ".naome/package.json",
+    ".naome/bin/naome.js",
+    ".naome/bin/check-task-state.js",
+    ".naome/bin/check-harness-health.js",
+    ".naome/task-contract.schema.json",
+    "docs/naome/index.md",
+    "docs/naome/first-run.md",
+    "docs/naome/agent-workflow.md",
+    "docs/naome/execution.md",
+    "docs/naome/upgrade.md"
+  ],
+  "projectOwned": [
+    ".naomeignore",
+    ".naome/init-state.json",
+    ".naome/manifest.json",
+    ".naome/task-state.json",
+    ".naome/upgrade-state.json",
+    ".naome/verification.json",
+    "docs/naome/architecture.md",
+    "docs/naome/decisions.md",
+    "docs/naome/repo-profile.md",
+    "docs/naome/security.md",
+    "docs/naome/testing.md"
+  ],
+  "integrity": {
+    "AGENTS.md": "sha256:ebe589ce85b43d4aa23014d8a26a49bd33dc52ef1bba68e4f63a7e86640be06a",
+    ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
+    ".naome/bin/naome.js": "sha256:1b63729dc55730a826193d35cf78e755a991b356ac81b45f4aa3fcf24c8152fa",
+    ".naome/bin/check-task-state.js": "sha256:43c02868072d0d13499aefba2e9a5ec9517d59539fd19ff0f11e3e4623a51b44",
+    ".naome/bin/check-harness-health.js": "sha256:dce2a380022dd63d86bd762869debafbc635ab3d7e8fae985e2d429d8ee437ad",
+    ".naome/task-contract.schema.json": "sha256:c806416d4944eaed6dc48b3760fd0dd5b9b5a7c9ab895697fe36b54c41c1332f",
+    "docs/naome/index.md": "sha256:75c4cdf9edcd46c83a619cbfc551e96cae35bcff694d955ebab4624125ae7f12",
+    "docs/naome/first-run.md": "sha256:a1dd0bd17ec9d71955a473cd2c4a615538e89a7d81e8f4e1015a50ab9efe3558",
+    "docs/naome/agent-workflow.md": "sha256:5e5b26e7896f95a9154abcd133f08b33f84fddc679757ed15c043a91e319fb4e",
+    "docs/naome/execution.md": "sha256:3d67fd9922a66a66f79f920adbb24dcd47eefdfde835a5351a27ffed932dcfea",
+    "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
+  }
+}

package/templates/naome-root/.naome/package.json

@@ -0,0 +1,3 @@
+{
+  "type": "commonjs"
+}