@lamentis/naome 1.1.2 → 1.2.1

package/crates/naome-core/tests/verification_contract.rs

@@ -1,51 +1,32 @@
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::time::{SystemTime, UNIX_EPOCH};
-
 use naome_core::validate_verification_contract;
 use serde_json::json;
 
+mod repo_support;
+
+use repo_support::{change_type, diff_check, verification_value, TestRepo};
+
 #[test]
 fn accepts_valid_contract_and_testing_map() {
     let repo = TestRepo::new("verification-contract-valid");
     repo.write_testing_markdown(default_testing_markdown());
-    repo.write_naome_json(
-        "verification.json",
-        json!({
-            "schema": "naome.verification.v1",
-            "version": 1,
-            "status": "uninitialized",
-            "lastUpdated": null,
-            "checks": [
-                {
-                    "id": "diff-check",
-                    "command": "git diff --check",
-                    "cwd": ".",
-                    "purpose": "Reject whitespace errors.",
-                    "cost": "fast",
-                    "source": "git",
-                    "evidence": [],
-                    "lastVerified": null
-                }
-            ],
-            "changeTypes": [
-                {
-                    "id": "docs",
-                    "description": "Documentation changes.",
-                    "paths": ["docs/**"],
-                    "requiredChecks": ["diff-check"],
-                    "recommendedChecks": [],
-                    "humanReview": false
-                }
-            ],
-            "releaseGates": [
-                {
-                    "checkId": "diff-check",
-                    "requiredWhen": "Before release when docs changed."
-                }
-            ]
-        }),
-    );
+    repo.write_naome_json("verification.json", {
+        let mut value = verification_value(
+            "uninitialized",
+            vec![diff_check(vec![])],
+            vec![change_type(
+                "docs",
+                "Documentation changes.",
+                vec!["docs/**"],
+                vec!["diff-check"],
+            )],
+        );
+        value["lastUpdated"] = json!(null);
+        value["releaseGates"] = json!([{
+            "checkId": "diff-check",
+            "requiredWhen": "Before release when docs changed."
+        }]);
+        value
+    });
 
     let errors = validate_verification_contract(repo.path()).unwrap();
 
@@ -142,40 +123,3 @@ fn default_testing_markdown() -> &'static str {
 ## Evidence\n\n\
 - Test fixture.\n"
 }
-
-struct TestRepo {
-    root: PathBuf,
-}
-
-impl TestRepo {
-    fn new(name: &str) -> Self {
-        let nonce = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap()
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!("naome-core-{name}-{nonce}"));
-        fs::create_dir_all(root.join(".naome")).unwrap();
-        fs::create_dir_all(root.join("docs").join("naome")).unwrap();
-        Self { root }
-    }
-
-    fn path(&self) -> &Path {
-        &self.root
-    }
-
-    fn write_naome_json(&self, file_name: &str, value: serde_json::Value) {
-        fs::write(
-            self.root.join(".naome").join(file_name),
-            format!("{}\n", serde_json::to_string_pretty(&value).unwrap()),
-        )
-        .unwrap();
-    }
-
-    fn write_testing_markdown(&self, content: &str) {
-        fs::write(
-            self.root.join("docs").join("naome").join("testing.md"),
-            content,
-        )
-        .unwrap();
-    }
-}

package/crates/naome-core/tests/workflow_integrity.rs

@@ -0,0 +1,85 @@
+mod workflow_support;
+
+use std::fs;
+
+use naome_core::{
+    refresh_integrity, summarize_command_output, verification_phase_plan, CommandCheckResult,
+};
+use serde_json::json;
+use workflow_support::{check, phase, WorkflowFixture};
+
+#[test]
+fn refresh_integrity_is_idempotent_and_repairs_manifest_hash() {
+    let repo = WorkflowFixture::new("refresh-integrity");
+    repo.install_machine_owned_harness();
+    let wrong = "sha256:0000000000000000000000000000000000000000000000000000000000000000";
+    repo.write_manifest_with_integrity(wrong);
+
+    let first = refresh_integrity(repo.path()).unwrap();
+    let after_first = fs::read_to_string(repo.path().join(".naome/manifest.json")).unwrap();
+    let second = refresh_integrity(repo.path()).unwrap();
+    let after_second = fs::read_to_string(repo.path().join(".naome/manifest.json")).unwrap();
+
+    assert!(first.updated);
+    assert!(!second.updated);
+    assert_eq!(after_first, after_second);
+    assert!(!after_first.contains(wrong));
+}
+
+#[test]
+fn failed_early_phase_withholds_expensive_recommendations() {
+    let repo = WorkflowFixture::new("verification-phases");
+    repo.write_verification(json!({
+        "schema": "naome.verification.v1",
+        "version": 1,
+        "status": "ready",
+        "lastUpdated": "2026-05-07",
+        "checks": [
+            check("naome-harness-health", "node .naome/bin/check-harness-health.js", "fast"),
+            check("repository-quality-check", "node .naome/bin/naome.js quality check --changed", "fast"),
+            check("package-dry-run", "npm run pack:dry-run", "medium")
+        ],
+        "phases": [
+            phase("shape-health", 10, ["naome-harness-health"]),
+            phase("quality", 20, ["repository-quality-check"]),
+            phase("package-release", 50, ["package-dry-run"])
+        ],
+        "changeTypes": [],
+        "releaseGates": []
+    }));
+
+    let plan = verification_phase_plan(
+        repo.path(),
+        &[CommandCheckResult {
+            check_id: "naome-harness-health".to_string(),
+            exit_code: 1,
+        }],
+    )
+    .unwrap();
+
+    assert_eq!(plan.recommended_check_ids, vec!["naome-harness-health"]);
+    assert!(plan
+        .withheld_check_ids
+        .contains(&"package-dry-run".to_string()));
+}
+
+#[test]
+fn long_command_output_is_stably_summarized() {
+    let output = (0..80)
+        .map(|index| {
+            if index == 42 {
+                "error: src/main.rs failed to compile".to_string()
+            } else {
+                format!("line {index}")
+            }
+        })
+        .collect::<Vec<_>>()
+        .join("\n");
+
+    let summary = summarize_command_output("cargo test", ".", 101, &output, 8);
+
+    assert!(summary.truncated);
+    assert_eq!(summary.exit_code, 101);
+    assert!(summary.relevant_lines[0].contains("error: src/main.rs"));
+    assert!(summary.affected_paths.contains(&"src/main.rs".to_string()));
+}

package/crates/naome-core/tests/workflow_policy.rs

@@ -0,0 +1,139 @@
+mod workflow_support;
+
+use std::collections::HashMap;
+
+use naome_core::{
+    classify_mutations, safe_rg_args, tracked_process_report, validate_read_boundaries,
+    validate_search_command, validate_task_state, ReadActivity, TaskStateMode, TaskStateOptions,
+};
+use serde_json::json;
+use workflow_support::WorkflowFixture;
+
+#[test]
+fn read_boundary_violation_is_detected_from_activity() {
+    let repo = WorkflowFixture::new("read-boundary");
+    repo.write(".naomeignore", ".naome/archive/\n.local-cache/\n");
+
+    let findings = validate_read_boundaries(
+        repo.path(),
+        &[ReadActivity {
+            command: "rg --hidden panic .".to_string(),
+            paths: vec![".naome/archive/old-task.json".to_string()],
+        }],
+    )
+    .unwrap();
+
+    assert_eq!(findings[0].check_id, "read-boundary");
+    assert!(findings[0]
+        .paths
+        .contains(&".naome/archive/old-task.json".to_string()));
+}
+
+#[test]
+fn safe_search_profile_excludes_default_boundaries() {
+    let repo = WorkflowFixture::new("safe-search-profile");
+    repo.write(".naomeignore", ".naome/archive/\n.local-cache/\n");
+
+    let args = safe_rg_args(repo.path()).unwrap().join(" ");
+
+    assert!(args.contains("!.git/**"));
+    assert!(args.contains("!.naome/archive/**"));
+    assert!(args.contains("!node_modules/**"));
+    assert!(args.contains("!.local-cache/**"));
+}
+
+#[test]
+fn unsafe_hidden_search_is_workflow_finding() {
+    let repo = WorkflowFixture::new("unsafe-search");
+
+    let findings = validate_search_command(repo.path(), "rg --hidden TODO .").unwrap();
+
+    assert!(findings
+        .iter()
+        .any(|finding| finding.check_id == "unsafe-search-command"));
+}
+
+#[test]
+fn scope_drift_is_reported_during_progress_gate() {
+    let repo = WorkflowFixture::new("scope-drift");
+    repo.init_git();
+    repo.write_task_state("implementing", &["src/owned.rs"], &["diff-check"]);
+    repo.write("src/outside.rs", "pub fn outside() {}\n");
+
+    let report = validate_task_state(
+        repo.path(),
+        TaskStateOptions {
+            mode: TaskStateMode::Progress,
+            ..TaskStateOptions::default()
+        },
+    )
+    .unwrap();
+    let joined = report.errors.join("\n");
+
+    assert!(joined.contains("Changed files outside allowedPaths"));
+    assert!(joined.contains("src/outside.rs"));
+    assert!(joined.contains("request_scope_change"));
+}
+
+#[test]
+fn tracked_running_process_blocks_completion_until_documented() {
+    let repo = WorkflowFixture::new("process-tracking");
+    repo.write(
+        ".naome/processes.json",
+        &format!(
+            "{}\n",
+            serde_json::to_string_pretty(&json!({
+                "schema": "naome.processes.v1",
+                "processes": [{
+                    "pid": std::process::id(),
+                    "command": "npm run dev",
+                    "cwd": ".",
+                    "startedAt": "2026-05-07T12:00:00.000Z",
+                    "status": "running",
+                    "allowAfterCompletion": false
+                }]
+            }))
+            .unwrap()
+        ),
+    );
+
+    let report = tracked_process_report(repo.path()).unwrap();
+
+    assert_eq!(report.active.len(), 1);
+    assert!(report.active[0].command.contains("npm run dev"));
+}
+
+#[test]
+fn mutation_classifier_recognizes_core_classes() {
+    let repo = WorkflowFixture::new("mutation-classes");
+
+    let classes = classify_mutations(
+        repo.path(),
+        &[
+            "src/lib.rs".to_string(),
+            ".naome/manifest.json".to_string(),
+            ".naome/archive/repair/AGENTS.md".to_string(),
+            "coverage/report.json".to_string(),
+            "packages/naome/native/darwin-arm64/naome".to_string(),
+            "notes/manual.md".to_string(),
+        ],
+    )
+    .unwrap();
+    let by_path = classes
+        .iter()
+        .map(|entry| (entry.path.as_str(), entry.mutation_class.as_str()))
+        .collect::<HashMap<_, _>>();
+
+    assert_eq!(by_path["src/lib.rs"], "source change");
+    assert_eq!(by_path[".naome/manifest.json"], "generated refresh");
+    assert_eq!(
+        by_path[".naome/archive/repair/AGENTS.md"],
+        "local-only repair"
+    );
+    assert_eq!(by_path["coverage/report.json"], "test artifact");
+    assert_eq!(
+        by_path["packages/naome/native/darwin-arm64/naome"],
+        "release artifact"
+    );
+    assert_eq!(by_path["notes/manual.md"], "user edit");
+}

package/crates/naome-core/tests/workflow_support/mod.rs

@@ -0,0 +1,194 @@
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use serde_json::json;
+
+static FIXTURE_COUNTER: AtomicU64 = AtomicU64::new(0);
+
+pub struct WorkflowFixture {
+    root: PathBuf,
+}
+
+impl WorkflowFixture {
+    pub fn new(name: &str) -> Self {
+        let nonce = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let root = std::env::temp_dir().join(format!(
+            "naome-workflow-{name}-{}-{}-{nonce}",
+            std::process::id(),
+            FIXTURE_COUNTER.fetch_add(1, Ordering::SeqCst)
+        ));
+        fs::create_dir_all(root.join(".naome")).unwrap();
+        fs::create_dir_all(root.join("docs/naome")).unwrap();
+        let fixture = Self { root };
+        fixture.write(".naomeignore", ".naome/archive/\n");
+        fixture.write(
+            ".naome/init-state.json",
+            "{\"initialized\":true,\"intakeStatus\":\"complete\"}\n",
+        );
+        fixture.write(".naome/upgrade-state.json", "{\"status\":\"complete\"}\n");
+        fixture.write_verification(default_verification());
+        fixture
+    }
+
+    pub fn path(&self) -> &Path {
+        &self.root
+    }
+
+    pub fn init_git(&self) {
+        run_git(&self.root, &["init"]);
+        run_git(&self.root, &["config", "user.email", "test@example.com"]);
+        run_git(&self.root, &["config", "user.name", "Test User"]);
+        self.write("README.md", "# Baseline\n");
+        run_git(&self.root, &["add", "."]);
+        run_git(&self.root, &["commit", "-m", "baseline"]);
+    }
+
+    pub fn install_machine_owned_harness(&self) {
+        for path in ["AGENTS.md", ".naome/bin/naome.js", "docs/naome/index.md"] {
+            self.write(path, &format!("# {path}\n"));
+        }
+    }
+
+    pub fn write_manifest_with_integrity(&self, integrity: &str) {
+        self.write(
+            ".naome/manifest.json",
+            &pretty(json!({
+                "name": "naome",
+                "harnessVersion": "1.2.1",
+                "profile": "standard",
+                "installedAt": null,
+                "machineOwned": ["AGENTS.md", ".naome/bin/naome.js", "docs/naome/index.md"],
+                "projectOwned": [".naome/manifest.json"],
+                "integrity": {
+                    "AGENTS.md": integrity,
+                    ".naome/bin/naome.js": integrity,
+                    "docs/naome/index.md": integrity
+                }
+            })),
+        );
+    }
+
+    pub fn write_task_state(&self, status: &str, allowed_paths: &[&str], checks: &[&str]) {
+        let active_task = active_task_state(
+            allowed_paths,
+            checks,
+            git_text(&self.root, &["rev-parse", "HEAD"]),
+        );
+        self.write(
+            ".naome/task-state.json",
+            &pretty(json!({
+                "schema": "naome.task-state.v2",
+                "version": 2,
+                "status": status,
+                "activeTask": active_task,
+                "blocker": null,
+                "updatedAt": "2026-05-07T12:00:00.000Z"
+            })),
+        );
+    }
+
+    pub fn write_verification(&self, value: serde_json::Value) {
+        self.write(".naome/verification.json", &pretty(value));
+    }
+
+    pub fn write(&self, relative_path: &str, content: &str) {
+        let path = self.root.join(relative_path);
+        if let Some(parent) = path.parent() {
+            fs::create_dir_all(parent).unwrap();
+        }
+        fs::write(path, content).unwrap();
+    }
+}
+
+impl Drop for WorkflowFixture {
+    fn drop(&mut self) {
+        let _ = fs::remove_dir_all(&self.root);
+    }
+}
+
+pub fn default_verification() -> serde_json::Value {
+    json!({
+        "schema": "naome.verification.v1",
+        "version": 1,
+        "status": "ready",
+        "lastUpdated": "2026-05-07",
+        "checks": [check("diff-check", "git diff --check", "fast")],
+        "changeTypes": [],
+        "releaseGates": []
+    })
+}
+
+pub fn check(id: &str, command: &str, cost: &str) -> serde_json::Value {
+    json!({
+        "id": id,
+        "command": command,
+        "cwd": ".",
+        "purpose": "Test check.",
+        "cost": cost,
+        "source": "test",
+        "evidence": [],
+        "lastVerified": null
+    })
+}
+
+pub fn phase<const N: usize>(id: &str, order: usize, check_ids: [&str; N]) -> serde_json::Value {
+    json!({ "id": id, "order": order, "checkIds": check_ids.to_vec() })
+}
+
+fn active_task_state(
+    allowed_paths: &[&str],
+    checks: &[&str],
+    git_head: String,
+) -> serde_json::Value {
+    json!({
+        "id": "workflow-test",
+        "request": "Test workflow gates.",
+        "userPrompt": { "receivedAt": "2026-05-07T12:00:00.000Z", "text": "Test workflow gates." },
+        "admission": admission_record(git_head),
+        "allowedPaths": allowed_paths,
+        "declaredChangeTypes": ["source"],
+        "requiredCheckIds": checks,
+        "humanReview": { "required": false, "approved": false, "reason": null },
+        "proofResults": []
+    })
+}
+
+fn admission_record(git_head: String) -> serde_json::Value {
+    json!({
+        "command": "node .naome/bin/check-task-state.js --admission",
+        "cwd": ".",
+        "exitCode": 0,
+        "checkedAt": "2026-05-07T12:00:00.000Z",
+        "gitHead": git_head,
+        "changedPaths": []
+    })
+}
+
+fn pretty(value: serde_json::Value) -> String {
+    format!("{}\n", serde_json::to_string_pretty(&value).unwrap())
+}
+
+fn run_git(root: &Path, args: &[&str]) {
+    let output = Command::new("git")
+        .args(args)
+        .current_dir(root)
+        .output()
+        .unwrap();
+    assert!(output.status.success(), "git {} failed", args.join(" "));
+}
+
+fn git_text(root: &Path, args: &[&str]) -> String {
+    let output = Command::new("git")
+        .args(args)
+        .current_dir(root)
+        .output()
+        .unwrap();
+    assert!(output.status.success());
+    String::from_utf8_lossy(&output.stdout).trim().to_string()
+}

package/installer/agents.js

@@ -0,0 +1,90 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { copyFileSync, existsSync, readFileSync, renameSync } from "node:fs";
+import { join, relative } from "node:path";
+
+import {
+  assertArchiveDirectoryAvailableForTakeover,
+  hasSymlinkInTargetPath,
+  nextArchivePath,
+  removeSkipped,
+} from "./filesystem.js";
+import { printCancelled, printError, printSection } from "./output.js";
+
+export async function confirmAgentsTakeover(ctx) {
+  if (!hasAgentsTakeoverCandidate(ctx)) {
+    return;
+  }
+
+  if (hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    printError(ctx, "NAOME cannot take over AGENTS.md because it is a symlink.");
+    console.error("Replace the symlink with a regular file before installing NAOME.");
+    process.exit(1);
+  }
+
+  if (!process.stdin.isTTY || process.env.CI === "true") {
+    printError(ctx, "AGENTS.md already exists.");
+    console.error("NAOME must replace AGENTS.md to become the active harness entrypoint.");
+    console.error("Run this installer in an interactive terminal and confirm the takeover.");
+    process.exit(1);
+  }
+
+  printSection(ctx, "AGENTS.md takeover required");
+  console.log(`${ctx.color.dim("existing")} AGENTS.md`);
+  console.log(`${ctx.color.dim("archive ")} .naome/archive/AGENTS.pre-naome.md`);
+  console.log(`${ctx.color.dim("replace ")} AGENTS.md with the NAOME entrypoint`);
+  console.log(`${ctx.color.dim("ignore  ")} .naome/archive/ via .naomeignore`);
+  console.log("");
+
+  const rl = createInterface({ input, output });
+  const answer = await rl.question(`${ctx.color.yellow("?")} Replace AGENTS.md and continue installation? (y/N) `);
+  rl.close();
+
+  if (answer.trim().toLowerCase() !== "y") {
+    printCancelled(ctx, "NAOME was not installed. AGENTS.md was left unchanged.");
+    process.exit(1);
+  }
+
+  assertArchiveDirectoryAvailableForTakeover(ctx);
+}
+
+export function takeoverExistingAgents(ctx) {
+  const agentsPath = join(ctx.targetRoot, "AGENTS.md");
+  if (!existsSync(agentsPath) || hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    return;
+  }
+
+  const templateAgentsPath = join(ctx.templateRoot, "AGENTS.md");
+  const templateAgents = readFileSync(templateAgentsPath, "utf8");
+  const existingAgents = readFileSync(agentsPath, "utf8");
+
+  if (existingAgents === templateAgents) {
+    return;
+  }
+
+  const archivePath = nextArchivePath(ctx, "AGENTS.pre-naome.md");
+  if (!archivePath) {
+    printError(ctx, "AGENTS.md already exists, but NAOME could not archive it safely.");
+    console.error("AGENTS.md was left unchanged.");
+    process.exit(1);
+  }
+
+  renameSync(agentsPath, archivePath);
+  copyFileSync(templateAgentsPath, agentsPath);
+  removeSkipped(ctx, "AGENTS.md");
+  ctx.installed.push("AGENTS.md");
+  ctx.archived.push({ from: "AGENTS.md", to: relative(ctx.targetRoot, archivePath) });
+}
+
+function hasAgentsTakeoverCandidate(ctx) {
+  const agentsPath = join(ctx.targetRoot, "AGENTS.md");
+  if (!existsSync(agentsPath)) {
+    return false;
+  }
+
+  if (hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    return true;
+  }
+
+  return readFileSync(agentsPath, "utf8") !== readFileSync(join(ctx.templateRoot, "AGENTS.md"), "utf8");
+}

package/installer/context.js

@@ -0,0 +1,67 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const firstRunPrompt = `Run the NAOME first-run protocol for this repository.
+
+Start by reading .naomeignore, then docs/naome/index.md, then .naome/init-state.json.
+Then read .naome/upgrade-state.json, .naome/task-state.json, and docs/naome/execution.md.
+Run node .naome/bin/check-harness-health.js before feature work.
+If initialized is false, follow docs/naome/first-run.md.
+Do not begin feature work until NAOME intake is complete.
+After intake, save the user's next natural-language request to a temporary prompt file, then run node .naome/bin/naome.js route --prompt-file <path> --execute --json.
+Follow userMessage, humanOptions, requiredContext, and canCreateTask from the route output before creating the requested task.`;
+
+export function createInstallerContext() {
+  const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+  const targetRoot = process.cwd();
+  const useColor = process.stdout.isTTY && process.env.NO_COLOR !== "1";
+  const format = (value, code) => useColor ? `\u001b[${code}m${value}\u001b[0m` : value;
+
+  return {
+    packageRoot,
+    templateRoot: join(packageRoot, "templates", "naome-root"),
+    targetRoot,
+    packageVersion: JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8")).version,
+    installed: [],
+    archived: [],
+    updated: [],
+    skipped: [],
+    unsafeSkipped: [],
+    verboseOutput: process.argv.includes("--verbose"),
+    summaryTitle: "NAOME intake harness installed",
+    nextStepPrompt: firstRunPrompt,
+    installPlan: null,
+    machineOwnedPaths: [],
+    projectOwnedPaths: [],
+    localOnlyMachineOwnedPaths: [],
+    localOnlyGitIgnoreEntries: [],
+    localOnlyGitExcludeEntries: [],
+    localOnlyGitUntrackPaths: [],
+    healthCheckerRelativePath: ".naome/bin/check-harness-health.js",
+    taskStateCheckerRelativePath: ".naome/bin/check-task-state.js",
+    naomeCommandRelativePath: ".naome/bin/naome.js",
+    nativeBinaryName: process.platform === "win32" ? "naome.exe" : "naome",
+    nativeBinaryRelativePath:
+      process.platform === "win32" ? ".naome/bin/naome-rust.exe" : ".naome/bin/naome-rust",
+    minimumSupportedUpgradeVersion: "0.6.1",
+    integrityBlockPattern: /^const expectedMachineOwnedIntegrity = Object\.freeze\(\{[\s\S]*?\n\}\);\n/m,
+    normalizedIntegrityBlock:
+      "const expectedMachineOwnedIntegrity = Object.freeze({\n  __generated__: \"sha256:generated\"\n});\n",
+    nativeIntegrityPattern:
+      /^const expectedNativeBinaryIntegrity = "(?:sha256:[a-f0-9]{64}|sha256:generated)";\n/m,
+    normalizedNativeIntegrity: 'const expectedNativeBinaryIntegrity = "sha256:generated";\n',
+    executableMachineOwnedPaths: new Set([
+      ".naome/bin/naome.js",
+      ".naome/bin/check-task-state.js",
+      ".naome/bin/check-harness-health.js",
+    ]),
+    color: {
+      bold: (value) => format(value, "1"),
+      dim: (value) => format(value, "2"),
+      green: (value) => format(value, "32"),
+      yellow: (value) => format(value, "33"),
+      red: (value) => format(value, "31"),
+    },
+  };
+}