@lamentis/naome 1.1.1 → 1.2.0

package/templates/naome-root/.naome/bin/check-task-state.js

@@ -9,18 +9,17 @@ const nativeBinaryRelativePath = process.platform === "win32" ? ".naome/bin/naom
 const nativeBinaryName = process.platform === "win32" ? "naome.exe" : "naome";
 
 const expectedMachineOwnedIntegrity = Object.freeze({
-  "AGENTS.md": "sha256:84ce882fa6798a144c8c74673d4304fc6bf235b1cc417f7649eea9f7461775de",
-  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
-  ".naome/bin/naome.js": "sha256:7894690ad47700a9a5e7ecb5a94ba42c1a12e2637d2c9f41f0023b1bd8bd22b6",
+  ".naome/bin/check-harness-health.js": "sha256:dc4de52b79c69600b9ba47b924e2c2b8de61a2cbfab6d1ccc0f1924d963db657",
   ".naome/bin/check-task-state.js": "sha256:43c02868072d0d13499aefba2e9a5ec9517d59539fd19ff0f11e3e4623a51b44",
-  ".naome/bin/check-harness-health.js": "sha256:dce2a380022dd63d86bd762869debafbc635ab3d7e8fae985e2d429d8ee437ad",
-  ".naome/task-contract.schema.json": "sha256:c806416d4944eaed6dc48b3760fd0dd5b9b5a7c9ab895697fe36b54c41c1332f",
-  "docs/naome/index.md": "sha256:d04691b25ed377c2a3aa2c56965d0db276539aeadcfdd2a2ec1be7ff7706dd6f",
+  ".naome/bin/naome.js": "sha256:5675f729be6da3cbda1d8b9e0b36821cc98409aae95dff0603ed9161a5eb3b38",
+  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
+  ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
+  "AGENTS.md": "sha256:9192ea81f90bb19f8043513c49b5da9e9598ee694da8356f345e7ccbca0e28df",
+  "docs/naome/agent-workflow.md": "sha256:802eb34cf268fc9c5e7aefc28192efef4bf60302d30b3f78e5a61b876ce8a098",
+  "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
   "docs/naome/first-run.md": "sha256:a1dd0bd17ec9d71955a473cd2c4a615538e89a7d81e8f4e1015a50ab9efe3558",
-  "docs/naome/agent-workflow.md": "sha256:43ba8a6814068e1b932b12a392de70b39841dc82df0acdaac459d6714c501b9d",
-  "docs/naome/execution.md": "sha256:ad66611b2878d1ba8fe05ddc4cfe9de7fd41de172a0de8295c36227a2700631a",
-  "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1",
-  ".naome/bin/naome-rust": "sha256:cc754ae59477577dfc0130cc21c286beaf3f19e2852278bb8f1e8724277eb44b"
+  "docs/naome/index.md": "sha256:7d917f1fa368874653bb458384bd9d0b221529e19644028a3143db3d3c144213",
+  "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
 });
 
 function main(argv) {

package/templates/naome-root/.naome/bin/naome.js

@@ -27,7 +27,7 @@ function main(argv) {
     return;
   }
 
-  if (command === "status" || command === "next" || command === "intent" || command === "route" || command === "explain") {
+  if (["status", "next", "intent", "route", "explain", "quality", "cleanup", "refresh-integrity", "workflow"].includes(command)) {
     runNativeDecisionCommand(command, args);
     return;
   }
@@ -46,20 +46,25 @@ function runNativeDecisionCommand(command, args) {
     fail("NAOME harness root not found. Run this inside a repository with .naome/task-state.json.");
   }
 
-  const nativeBinary = resolveNativeDecisionBinary(root);
-  verifyNativeBinary(nativeBinary);
+  const result = spawnNative(root, [command, ...args], { stdio: "inherit" });
+
+  process.exit(result.status === null ? 1 : result.status);
+}
 
-  const result = spawnSync(nativeBinary, [command, ...args], {
+function spawnNative(root, args, options = {}) {
+  const nativeBinary = resolveNativeDecisionBinary(root);
+  if (!isUsableNativeBinary(nativeBinary, root)) {
+    fail("NAOME native decision binary failed integrity or compatibility checks.");
+  }
+  return spawnSync(nativeBinary, args, {
     cwd: root,
     encoding: "utf8",
     env: {
       ...process.env,
       NAOME_NODE_BIN: process.execPath
     },
-    stdio: "inherit"
+    ...options
   });
-
-  process.exit(result.status === null ? 1 : result.status);
 }
 
 function resolveNativeDecisionBinary(root) {
@@ -115,30 +120,22 @@ function buildSourceNativeBinary(root) {
     return null;
   }
 
-  const manifestPath = join(root, "packages", "naome", "Cargo.toml");
+  const sourcePath = (...parts) => join(root, "packages", "naome", ...parts);
+  const manifestPath = sourcePath("Cargo.toml");
   if (!existsSync(manifestPath)) {
     return null;
   }
 
-  const result = spawnSync("cargo", ["build", "--release", "--manifest-path", manifestPath, "-p", "naome-cli"], {
-    cwd: root,
-    encoding: "utf8",
-    stdio: "ignore"
-  });
+  const buildArgs = ["build", "--release", "--manifest-path", manifestPath, "-p", "naome-cli"];
+  const result = spawnSync("cargo", buildArgs, { cwd: root, encoding: "utf8", stdio: "ignore" });
   if (result.status !== 0) {
     return null;
   }
 
-  const builtPath = join(root, "packages", "naome", "target", "release", nativeBinaryName);
+  const builtPath = sourcePath("target", "release", nativeBinaryName);
   return existsSync(builtPath) ? builtPath : null;
 }
 
-function verifyNativeBinary(nativeBinary) {
-  if (!isUsableNativeBinary(nativeBinary, findHarnessRoot(process.cwd()) || process.cwd())) {
-    fail("NAOME native decision binary failed integrity or compatibility checks.");
-  }
-}
-
 function commit(args) {
   const root = findHarnessRoot(process.cwd());
   if (!root) {
@@ -179,16 +176,7 @@ function commitBaseline(root, message, options = {}) {
 }
 
 function readTaskCommitPaths(root) {
-  const nativeBinary = resolveNativeDecisionBinary(root);
-  verifyNativeBinary(nativeBinary);
-  const result = spawnSync(nativeBinary, ["commit-paths", "--json"], {
-    cwd: root,
-    encoding: "utf8",
-    env: {
-      ...process.env,
-      NAOME_NODE_BIN: process.execPath
-    }
-  });
+  const result = spawnNative(root, ["commit-paths", "--json"]);
   if (result.status !== 0) {
     fail(`Cannot determine NAOME task commit paths: ${result.stderr.trim() || result.stdout.trim()}`);
   }
@@ -205,8 +193,6 @@ function readTaskCommitPaths(root) {
 }
 
 function writeTaskJournal(root, outcome, commitInfo) {
-  const nativeBinary = resolveNativeDecisionBinary(root);
-  verifyNativeBinary(nativeBinary);
   const args = [
     "journal-task",
     "--outcome",
@@ -220,14 +206,7 @@ function writeTaskJournal(root, outcome, commitInfo) {
     args.push("--commit-after", commitInfo.after);
   }
 
-  const result = spawnSync(nativeBinary, args, {
-    cwd: root,
-    encoding: "utf8",
-    env: {
-      ...process.env,
-      NAOME_NODE_BIN: process.execPath
-    }
-  });
+  const result = spawnNative(root, args);
   if (result.status !== 0) {
     fail(`Cannot write NAOME task journal: ${result.stderr.trim() || result.stdout.trim()}`);
   }
@@ -261,16 +240,7 @@ function defaultSetupCommitMessage(decision) {
 }
 
 function readDecision(root) {
-  const nativeBinary = resolveNativeDecisionBinary(root);
-  verifyNativeBinary(nativeBinary);
-  const result = spawnSync(nativeBinary, ["status", "--json"], {
-    cwd: root,
-    encoding: "utf8",
-    env: {
-      ...process.env,
-      NAOME_NODE_BIN: process.execPath
-    }
-  });
+  const result = spawnNative(root, ["status", "--json"]);
 
   if (result.status !== 0) {
     fail(`Cannot read NAOME status: ${result.stderr.trim() || result.stdout.trim()}`);
@@ -358,10 +328,14 @@ function gitHead(root) {
 }
 
 function findHarnessRoot(startPath) {
+  return findAncestorWithMarker(startPath, [".naome", "task-state.json"]);
+}
+
+function findAncestorWithMarker(startPath, markerParts) {
   let current = resolve(startPath);
 
   while (true) {
-    if (existsSync(join(current, ".naome", "task-state.json"))) {
+    if (existsSync(join(current, ...markerParts))) {
       return current;
     }
 
@@ -384,6 +358,13 @@ function printHelp() {
   console.log("  naome route --prompt <text> [--execute] [--json]");
   console.log("  naome explain --prompt-file <path> [--json]");
   console.log("  naome explain --prompt <text> [--json]");
+  console.log("  naome quality init [--json]");
+  console.log("  naome quality check --changed [--json]");
+  console.log("  naome quality report [--json]");
+  console.log("  naome cleanup plan [--json]");
+  console.log("  naome cleanup route --path <path> [--json]");
+  console.log("  naome refresh-integrity [--json]");
+  console.log("  naome workflow search-profile|check-search|phases|processes|mutations [--json]");
   console.log("  naome install");
   console.log("  naome sync");
   console.log("  naome commit -m \"type(scope): message\"");
@@ -399,24 +380,14 @@ function installOrSync(command, args) {
   const root = findHarnessRoot(process.cwd()) || process.cwd();
   const packageRoot = sourcePackageRoot(root);
   if (packageRoot) {
-    const nativeBinary = resolveNativeDecisionBinary(root);
-    verifyNativeBinary(nativeBinary);
-    const result = spawnSync(nativeBinary, [
+    const result = spawnNative(root, [
       command,
       "--package-root",
       packageRoot,
       "--installer-js",
       join(packageRoot, "bin", "naome-node.js"),
       ...args
-    ], {
-      cwd: root,
-      encoding: "utf8",
-      env: {
-        ...process.env,
-        NAOME_NODE_BIN: process.execPath
-      },
-      stdio: "inherit"
-    });
+    ], { stdio: "inherit" });
     process.exit(result.status === null ? 1 : result.status);
   }
 

package/templates/naome-root/.naome/manifest.json

@@ -1,8 +1,19 @@
 {
-  "name": "naome",
-  "harnessVersion": "1.1.1",
-  "profile": "standard",
+  "harnessVersion": "1.2.0",
   "installedAt": null,
+  "integrity": {
+    ".naome/bin/check-harness-health.js": "sha256:dc4de52b79c69600b9ba47b924e2c2b8de61a2cbfab6d1ccc0f1924d963db657",
+    ".naome/bin/check-task-state.js": "sha256:43c02868072d0d13499aefba2e9a5ec9517d59539fd19ff0f11e3e4623a51b44",
+    ".naome/bin/naome.js": "sha256:5675f729be6da3cbda1d8b9e0b36821cc98409aae95dff0603ed9161a5eb3b38",
+    ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
+    ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
+    "AGENTS.md": "sha256:9192ea81f90bb19f8043513c49b5da9e9598ee694da8356f345e7ccbca0e28df",
+    "docs/naome/agent-workflow.md": "sha256:802eb34cf268fc9c5e7aefc28192efef4bf60302d30b3f78e5a61b876ce8a098",
+    "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
+    "docs/naome/first-run.md": "sha256:a1dd0bd17ec9d71955a473cd2c4a615538e89a7d81e8f4e1015a50ab9efe3558",
+    "docs/naome/index.md": "sha256:7d917f1fa368874653bb458384bd9d0b221529e19644028a3143db3d3c144213",
+    "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
+  },
   "machineOwned": [
     "AGENTS.md",
     ".naome/package.json",
@@ -16,6 +27,8 @@
     "docs/naome/execution.md",
     "docs/naome/upgrade.md"
   ],
+  "name": "naome",
+  "profile": "standard",
   "projectOwned": [
     ".naomeignore",
     ".naome/init-state.json",
@@ -23,24 +36,13 @@
     ".naome/task-state.json",
     ".naome/upgrade-state.json",
     ".naome/verification.json",
+    ".naome/repository-quality.json",
+    ".naome/repository-quality-baseline.json",
     "docs/naome/architecture.md",
     "docs/naome/decisions.md",
     "docs/naome/repo-profile.md",
+    "docs/naome/repository-quality.md",
     "docs/naome/security.md",
     "docs/naome/testing.md"
-  ],
-  "integrity": {
-    "AGENTS.md": "sha256:84ce882fa6798a144c8c74673d4304fc6bf235b1cc417f7649eea9f7461775de",
-    ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
-    ".naome/bin/naome.js": "sha256:7894690ad47700a9a5e7ecb5a94ba42c1a12e2637d2c9f41f0023b1bd8bd22b6",
-    ".naome/bin/check-task-state.js": "sha256:43c02868072d0d13499aefba2e9a5ec9517d59539fd19ff0f11e3e4623a51b44",
-    ".naome/bin/check-harness-health.js": "sha256:dce2a380022dd63d86bd762869debafbc635ab3d7e8fae985e2d429d8ee437ad",
-    ".naome/task-contract.schema.json": "sha256:c806416d4944eaed6dc48b3760fd0dd5b9b5a7c9ab895697fe36b54c41c1332f",
-    "docs/naome/index.md": "sha256:d04691b25ed377c2a3aa2c56965d0db276539aeadcfdd2a2ec1be7ff7706dd6f",
-    "docs/naome/first-run.md": "sha256:a1dd0bd17ec9d71955a473cd2c4a615538e89a7d81e8f4e1015a50ab9efe3558",
-    "docs/naome/agent-workflow.md": "sha256:43ba8a6814068e1b932b12a392de70b39841dc82df0acdaac459d6714c501b9d",
-    "docs/naome/execution.md": "sha256:ad66611b2878d1ba8fe05ddc4cfe9de7fd41de172a0de8295c36227a2700631a",
-    "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1",
-    ".naome/bin/naome-rust": "sha256:cc754ae59477577dfc0130cc21c286beaf3f19e2852278bb8f1e8724277eb44b"
-  }
+  ]
 }

package/templates/naome-root/.naome/repository-quality-baseline.json

@@ -0,0 +1,5 @@
+{
+  "schema": "naome.repository-quality-baseline.v1",
+  "version": 1,
+  "violations": []
+}

package/templates/naome-root/.naome/repository-quality.json

@@ -0,0 +1,24 @@
+{
+  "schema": "naome.repository-quality.v1",
+  "version": 1,
+  "status": "ready",
+  "limits": {
+    "maxFileLines": 450,
+    "maxNewFileLines": 300,
+    "maxDiffAddedLines": 180,
+    "maxFunctionLines": 100,
+    "maxTopLevelSymbols": 30,
+    "duplicateBlockLines": 10,
+    "nearDuplicateSimilarity": 0.9
+  },
+  "enabledAdapters": [],
+  "disabledChecks": [],
+  "ignoredPaths": [],
+  "generatedPaths": [
+    "**/*.min.js",
+    "**/*.map",
+    "**/dist/**",
+    "**/build/**"
+  ],
+  "pathRules": []
+}

package/templates/naome-root/.naome/task-contract.schema.json

@@ -1,13 +1,13 @@
 {
   "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "naome.task-state.v1",
+  "$id": "naome.task-state.v2",
   "title": "NAOME Task State",
   "type": "object",
   "additionalProperties": false,
   "required": ["schema", "version", "status", "activeTask", "blocker", "updatedAt"],
   "properties": {
-    "schema": { "const": "naome.task-state.v1" },
-    "version": { "const": 1 },
+    "schema": { "enum": ["naome.task-state.v1", "naome.task-state.v2"] },
+    "version": { "enum": [1, 2] },
     "status": {
       "enum": ["idle", "planning", "implementing", "revising", "verifying", "needs_human_review", "blocked", "complete"]
     },
@@ -30,11 +30,29 @@
       ]
     }
   },
+  "oneOf": [
+    {
+      "properties": {
+        "schema": { "const": "naome.task-state.v1" },
+        "version": { "const": 1 }
+      }
+    },
+    {
+      "properties": {
+        "schema": { "const": "naome.task-state.v2" },
+        "version": { "const": 2 }
+      }
+    }
+  ],
   "$defs": {
     "activeTask": {
       "type": "object",
       "additionalProperties": false,
-      "required": ["id", "request", "userPrompt", "admission", "allowedPaths", "declaredChangeTypes", "requiredCheckIds", "proofResults", "humanReview"],
+      "required": ["id", "request", "userPrompt", "admission", "allowedPaths", "declaredChangeTypes", "requiredCheckIds", "humanReview"],
+      "anyOf": [
+        { "required": ["proofResults"] },
+        { "required": ["proofBatches"] }
+      ],
       "properties": {
         "id": { "type": "string", "pattern": "^[a-z0-9][a-z0-9-]*$" },
         "request": { "type": "string", "minLength": 1 },
@@ -58,6 +76,14 @@
           "type": "array",
           "items": { "$ref": "#/$defs/proofResult" }
         },
+        "proofPathSets": {
+          "type": "object",
+          "additionalProperties": { "$ref": "#/$defs/evidenceArray" }
+        },
+        "proofBatches": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/proofBatch" }
+        },
         "revisions": {
           "type": "array",
           "items": { "$ref": "#/$defs/revision" }
@@ -109,17 +135,73 @@
         "cwd": { "type": "string", "minLength": 1 },
         "exitCode": { "type": "integer" },
         "checkedAt": { "type": "string", "format": "date-time" },
-        "evidence": {
+        "evidence": { "$ref": "#/$defs/evidenceArray" },
+        "outputSummary": { "$ref": "#/$defs/outputSummary" }
+      }
+    },
+    "proofBatch": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["checkedAt", "proofs"],
+      "properties": {
+        "checkedAt": { "type": "string", "format": "date-time" },
+        "command": { "type": "string", "minLength": 1 },
+        "cwd": { "type": "string", "minLength": 1 },
+        "evidencePathSet": { "type": "string", "minLength": 1 },
+        "proofs": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/compactProofResult" }
+        }
+      }
+    },
+    "compactProofResult": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["checkId", "exitCode"],
+      "properties": {
+        "checkId": { "type": "string", "minLength": 1 },
+        "command": { "type": "string", "minLength": 1 },
+        "cwd": { "type": "string", "minLength": 1 },
+        "exitCode": { "type": "integer" },
+        "checkedAt": { "type": "string", "format": "date-time" },
+        "evidence": { "$ref": "#/$defs/evidenceArray" },
+        "evidencePathSet": { "type": "string", "minLength": 1 },
+        "outputSummary": { "$ref": "#/$defs/outputSummary" }
+      }
+    },
+    "outputSummary": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["command", "cwd", "exitCode", "truncated", "relevantLines", "affectedPaths"],
+      "properties": {
+        "command": { "type": "string", "minLength": 1 },
+        "cwd": { "type": "string", "minLength": 1 },
+        "exitCode": { "type": "integer" },
+        "truncated": { "type": "boolean" },
+        "omittedLineCount": { "type": "integer", "minimum": 0 },
+        "relevantLines": {
           "type": "array",
-          "items": {
-            "anyOf": [
-              { "type": "string", "minLength": 1 },
-              { "$ref": "#/$defs/evidenceEntry" }
-            ]
-          }
+          "items": { "type": "string" }
+        },
+        "affectedPaths": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
+        },
+        "artifacts": {
+          "type": "array",
+          "items": { "type": "string", "minLength": 1 }
         }
       }
     },
+    "evidenceArray": {
+      "type": "array",
+      "items": {
+        "anyOf": [
+          { "type": "string", "minLength": 1 },
+          { "$ref": "#/$defs/evidenceEntry" }
+        ]
+      }
+    },
     "evidenceEntry": {
       "type": "object",
       "additionalProperties": false,

package/templates/naome-root/.naome/upgrade-state.json

@@ -1,7 +1,7 @@
 {
   "status": "complete",
   "fromVersion": null,
-  "toVersion": "1.1.1",
+  "toVersion": "1.2.0",
   "pending": [],
   "completed": []
 }

package/templates/naome-root/.naome/verification.json

@@ -38,6 +38,43 @@
         ".naome/task-contract.schema.json"
       ],
       "lastVerified": null
+    },
+    {
+      "id": "repository-quality-check",
+      "command": "node .naome/bin/naome.js quality check --changed",
+      "cwd": ".",
+      "purpose": "Validate changed files against deterministic NAOME repository quality rules.",
+      "cost": "fast",
+      "source": "NAOME built-in",
+      "evidence": [
+        ".naome/repository-quality.json",
+        ".naome/repository-quality-baseline.json"
+      ],
+      "lastVerified": null
+    }
+  ],
+  "phases": [
+    {
+      "id": "shape-health",
+      "order": 10,
+      "checkIds": [
+        "naome-harness-health",
+        "naome-task-state"
+      ]
+    },
+    {
+      "id": "quality",
+      "order": 20,
+      "checkIds": [
+        "repository-quality-check"
+      ]
+    },
+    {
+      "id": "diff-check",
+      "order": 60,
+      "checkIds": [
+        "diff-check"
+      ]
     }
   ],
   "changeTypes": [],

package/templates/naome-root/AGENTS.md

@@ -69,6 +69,9 @@ This repository uses NAOME as its coding-agent harness.
   previous-task, or other unowned changes.
 - Treat `.naomeignore` as a hard read boundary. Do not inspect ignored paths
   unless the user first removes the path from `.naomeignore`.
+- Use `naome workflow search-profile` or equivalent excludes for broad searches;
+  hidden searches must exclude `.git`, `.naome/archive`, dependencies, build
+  outputs, caches, and `.naomeignore` paths.
 - Use `docs/naome/testing.md` and `.naome/verification.json` before claiming
   completion.
 - Before claiming completion, run the narrowest meaningful verification that can

package/templates/naome-root/docs/naome/agent-workflow.md

@@ -11,6 +11,11 @@ Use this workflow after first-run intake is complete.
    `canCreateTask` fields instead of inventing routing or final-response text.
    If route returns a `taskRoot` different from the current directory, continue
    the task from that path and leave the original worktree untouched.
+   When preparing the route prompt file, prepend a fenced `naome-intent-v2`
+   JSON envelope that states `workflowAction`, `taskIntent`, and `risk` using
+   canonical NAOME schema constants such as `commit_request`,
+   `task_revision`, and `credential_context`. Keep the original user text below
+   it. Do not derive workflow actions from natural-language keywords.
 3. Use `node .naome/bin/naome.js explain --prompt-file <path> --json` only when
    debugging why a policy won.
 4. Run `node .naome/bin/naome.js status --json` when reporting state without
@@ -38,11 +43,14 @@ Use this workflow after first-run intake is complete.
 11. Restate the task in concrete terms.
 12. Read `.naomeignore`.
 13. Exclude every path matched by `.naomeignore` from context gathering.
-14. Read only the `requiredContext` returned by route/status plus the smallest
+14. For broad searches, use `node .naome/bin/naome.js workflow search-profile`
+    or equivalent excludes for `.git`, `.naome/archive`, dependencies, build
+    outputs, caches, and `.naomeignore` paths.
+15. Read only the `requiredContext` returned by route/status plus the smallest
     task-relevant NAOME docs.
-15. Inspect the existing code or docs before proposing changes.
-16. Read `testing.md` and `.naome/verification.json`.
-17. Identify the required proof before claiming success.
+16. Inspect the existing code or docs before proposing changes.
+17. Read `testing.md` and `.naome/verification.json`.
+18. Identify the required proof before claiming success.
 
 ## Instruction Boundaries
 
@@ -66,25 +74,30 @@ Use this workflow after first-run intake is complete.
 - Update NAOME docs only when the change reveals durable project knowledge.
 - Use `node .naome/bin/check-task-state.js --progress` for in-flight task
   validation. Use the normal task-state check only after setting `complete`.
+  Scope changes outside `allowedPaths` require human review before continuing.
 
 ## Before Completion
 
 1. Identify changed files.
 2. Match them against `.naome/verification.json`.
 3. Run the required checks when available.
-4. Record proof in `.naome/task-state.json`, including every changed in-scope
-   path reported by git in proof evidence.
+4. Record proof in `.naome/task-state.json`, using compact `proofPathSets` and
+   `proofBatches` when several checks share the same evidence or timestamp.
+   Include every changed in-scope path reported by git in expanded proof
+   evidence.
 5. Do not list `.naome/task-state.json` as task scope or proof evidence.
-6. Set task state to `complete`.
-7. Run `node .naome/bin/check-task-state.js`.
-8. If the task-state check prints a next-task admission notice, do not repeat
+6. Stop tracked long-running processes or mark them explicitly allowed in
+   `.naome/processes.json`.
+7. Set task state to `complete`.
+8. Run `node .naome/bin/check-task-state.js`.
+9. If the task-state check prints a next-task admission notice, do not repeat
    internal baseline options in the final response. Use the machine-generated
    `userMessage` from route/status and mention `humanOptions` only when that
    array is non-empty.
-9. If no rule matches or the task check fails, report the gap and ask for human
+10. If no rule matches or the task check fails, report the gap and ask for human
    review before claiming completion.
-10. Report changed files, exact commands, results, and remaining risk.
-11. Only ask the user for options when intent blocks, the user explicitly asks
+11. Report changed files, exact commands, results, and remaining risk.
+12. Only ask the user for options when intent blocks, the user explicitly asks
     to review/revise/cancel, or automatic baselining fails.
 
 ## Commit And Push