@lamentis/naome 1.2.0 → 1.2.1

package/crates/naome-core/tests/task_state_support/mod.rs

@@ -0,0 +1,163 @@
+mod states;
+
+use std::collections::HashMap;
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use naome_core::{HarnessHealthOptions, MACHINE_OWNED_PATHS, PROJECT_OWNED_PATHS};
+use serde_json::{json, Value};
+use sha2::{Digest, Sha256};
+pub use states::{
+    active_task, complete_task_state, idle_task_state, successful_admission, successful_proof,
+};
+
+static FIXTURE_COUNTER: AtomicU64 = AtomicU64::new(0);
+
+pub struct TaskFixture {
+    root: PathBuf,
+}
+
+impl TaskFixture {
+    pub fn new(task_state: Value) -> Self {
+        let nonce = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let counter = FIXTURE_COUNTER.fetch_add(1, Ordering::Relaxed);
+        let root = std::env::temp_dir().join(format!(
+            "naome-task-state-rust-{}-{nonce}-{counter}",
+            std::process::id()
+        ));
+        fs::create_dir_all(root.join(".naome")).unwrap();
+        write_json(&root, ".naome/task-state.json", task_state);
+        write_json(&root, ".naome/init-state.json", init_state());
+        write_json(&root, ".naome/upgrade-state.json", upgrade_state());
+        write_json(&root, ".naome/verification.json", verification_state());
+        Self { root }
+    }
+
+    pub fn path(&self) -> &Path {
+        &self.root
+    }
+
+    pub fn write(&self, relative_path: &str, content: &str) {
+        let path = self.root.join(relative_path);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(path, content).unwrap();
+    }
+
+    pub fn write_json(&self, relative_path: &str, value: Value) {
+        write_json(&self.root, relative_path, value);
+    }
+
+    pub fn install_healthy_harness(&self) -> HashMap<String, String> {
+        let mut integrity = HashMap::new();
+        for relative_path in MACHINE_OWNED_PATHS {
+            let content = machine_content(relative_path);
+            self.write(relative_path, &content);
+            let digest = Sha256::digest(content.as_bytes());
+            integrity.insert((*relative_path).to_string(), format!("sha256:{digest:x}"));
+        }
+        for relative_path in PROJECT_OWNED_PATHS {
+            let path = self.root.join(relative_path);
+            if *relative_path == ".naome/manifest.json" || path.exists() {
+                continue;
+            }
+            let content = if *relative_path == ".naomeignore" {
+                ".naome/archive/\n".to_string()
+            } else {
+                format!("# {relative_path}\n")
+            };
+            self.write(relative_path, &content);
+        }
+        fs::create_dir_all(self.root.join(".naome/archive")).unwrap();
+        self.write_json(".naome/manifest.json", manifest_state(integrity.clone()));
+        integrity
+    }
+
+    pub fn init_git(&self) {
+        self.git(["init"]);
+        self.git(["config", "user.email", "naome@example.com"]);
+        self.git(["config", "user.name", "NAOME Test"]);
+        self.git(["add", "."]);
+        self.git(["commit", "-m", "baseline"]);
+        self.refresh_admission_head();
+    }
+
+    pub fn git<const N: usize>(&self, args: [&str; N]) -> String {
+        let output = Command::new("git")
+            .args(args)
+            .current_dir(&self.root)
+            .output()
+            .unwrap();
+        assert!(
+            output.status.success(),
+            "{}",
+            String::from_utf8_lossy(&output.stderr)
+        );
+        String::from_utf8_lossy(&output.stdout).to_string()
+    }
+
+    fn refresh_admission_head(&self) {
+        let path = self.root.join(".naome/task-state.json");
+        let mut task_state: Value =
+            serde_json::from_str(&fs::read_to_string(&path).unwrap()).unwrap();
+        let Some(admission) = task_state
+            .get_mut("activeTask")
+            .and_then(|task| task.get_mut("admission"))
+        else {
+            return;
+        };
+        admission["gitHead"] = Value::String(self.git(["rev-parse", "HEAD"]).trim().to_string());
+        fs::write(
+            path,
+            format!("{}\n", serde_json::to_string_pretty(&task_state).unwrap()),
+        )
+        .unwrap();
+    }
+}
+
+pub fn strict_health_options(expected_integrity: HashMap<String, String>) -> HarnessHealthOptions {
+    HarnessHealthOptions {
+        expected_integrity,
+        allow_missing_integrity: false,
+        allow_missing_archive: false,
+    }
+}
+
+pub fn write_json(root: &Path, relative_path: &str, value: Value) {
+    let path = root.join(relative_path);
+    fs::create_dir_all(path.parent().unwrap()).unwrap();
+    fs::write(
+        path,
+        format!("{}\n", serde_json::to_string_pretty(&value).unwrap()),
+    )
+    .unwrap();
+}
+
+fn machine_content(relative_path: &str) -> String {
+    match relative_path {
+        "AGENTS.md" => "# Agent Instructions\nRun node .naome/bin/check-task-state.js --admission before task work.\n".to_string(),
+        ".naome/package.json" => format!("{}\n", json!({ "type": "commonjs" })),
+        _ => format!("# {relative_path}\n"),
+    }
+}
+
+fn init_state() -> Value {
+    json!({ "initialized": true, "intakeStatus": "complete", "initializedAt": "2026-05-04T12:00:00.000Z", "initializedBy": "naome-test", "blockedReason": null, "requiredDocs": [] })
+}
+
+fn upgrade_state() -> Value {
+    json!({ "status": "complete", "fromVersion": null, "toVersion": "0.6.1", "pending": [], "completed": [] })
+}
+
+fn verification_state() -> Value {
+    json!({ "schema": "naome.verification.v1", "version": 1, "status": "ready", "lastUpdated": "2026-05-04", "checks": [{ "id": "diff-check", "command": "git diff --check", "cwd": ".", "purpose": "Detect whitespace and patch formatting issues.", "cost": "fast", "source": "git", "evidence": ["README.md"], "lastVerified": "2026-05-04" }], "changeTypes": [], "releaseGates": [] })
+}
+
+fn manifest_state(integrity: HashMap<String, String>) -> Value {
+    json!({ "name": "naome", "harnessVersion": "0.6.1", "profile": "standard", "installedAt": "2026-05-05T00:00:00.000Z", "machineOwned": MACHINE_OWNED_PATHS, "projectOwned": PROJECT_OWNED_PATHS, "integrity": integrity })
+}

package/crates/naome-core/tests/task_state_support/states.rs

@@ -0,0 +1,84 @@
+use serde_json::{json, Value};
+
+pub fn idle_task_state() -> Value {
+    json!({
+        "schema": "naome.task-state.v1",
+        "version": 1,
+        "status": "idle",
+        "activeTask": null,
+        "blocker": null,
+        "updatedAt": null
+    })
+}
+
+pub fn complete_task_state(overrides: Value) -> Value {
+    json!({
+        "schema": "naome.task-state.v1",
+        "version": 1,
+        "status": "complete",
+        "activeTask": active_task(overrides),
+        "blocker": null,
+        "updatedAt": "2026-05-04T12:00:00.000Z"
+    })
+}
+
+pub fn active_task(overrides: Value) -> Value {
+    let mut task = json!({
+        "id": "readme-test",
+        "request": "Update the README.",
+        "userPrompt": {
+            "receivedAt": "2026-05-04T12:00:00.000Z",
+            "text": "Update the README."
+        },
+        "admission": successful_admission(json!({})),
+        "allowedPaths": ["README.md"],
+        "declaredChangeTypes": ["docs"],
+        "requiredCheckIds": ["diff-check"],
+        "proofResults": [],
+        "humanReview": {
+            "required": false,
+            "approved": false,
+            "reason": null
+        }
+    });
+    merge_object(&mut task, overrides);
+    task
+}
+
+pub fn successful_admission(overrides: Value) -> Value {
+    let mut admission = json!({
+        "command": "node .naome/bin/check-task-state.js --admission",
+        "cwd": ".",
+        "exitCode": 0,
+        "checkedAt": "2026-05-04T12:00:00.000Z",
+        "gitHead": "pending-test-head",
+        "changedPaths": []
+    });
+    merge_object(&mut admission, overrides);
+    admission
+}
+
+pub fn successful_proof(overrides: Value) -> Value {
+    let mut proof = json!({
+        "checkId": "diff-check",
+        "command": "git diff --check",
+        "cwd": ".",
+        "exitCode": 0,
+        "checkedAt": "2026-05-04T12:00:00.000Z",
+        "evidence": ["README.md"]
+    });
+    merge_object(&mut proof, overrides);
+    proof
+}
+
+fn merge_object(target: &mut Value, overrides: Value) {
+    let Some(target_object) = target.as_object_mut() else {
+        return;
+    };
+    let Some(overrides_object) = overrides.as_object() else {
+        return;
+    };
+    for (key, value) in overrides_object {
+        target_object.insert(key.clone(), value.clone());
+    }
+}

package/crates/naome-core/tests/verification.rs

@@ -1,10 +1,10 @@
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::time::{SystemTime, UNIX_EPOCH};
-
 use naome_core::seed_builtin_verification_checks;
 use serde_json::json;
 
+mod repo_support;
+
+use repo_support::TestRepo;
+
 #[test]
 fn seeds_builtin_checks_without_removing_repo_specific_checks() {
     let repo = TestRepo::new("verification-seed");
@@ -122,44 +122,3 @@ fn check_command<'a>(verification: &'a serde_json::Value, check_id: &str) -> Opt
         .get("command")?
         .as_str()
 }
-
-struct TestRepo {
-    root: PathBuf,
-}
-
-impl TestRepo {
-    fn new(name: &str) -> Self {
-        let nonce = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap()
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!("naome-core-{name}-{nonce}"));
-        fs::create_dir_all(root.join(".naome")).unwrap();
-        Self { root }
-    }
-
-    fn path(&self) -> &Path {
-        &self.root
-    }
-
-    fn write_naome_json(&self, file_name: &str, value: serde_json::Value) {
-        fs::write(
-            self.root.join(".naome").join(file_name),
-            format!("{}\n", serde_json::to_string_pretty(&value).unwrap()),
-        )
-        .unwrap();
-    }
-
-    fn write_naome_file(&self, file_name: &str, content: &str) {
-        fs::write(self.root.join(".naome").join(file_name), content).unwrap();
-    }
-
-    fn read_naome_json(&self, file_name: &str) -> serde_json::Value {
-        serde_json::from_str(&fs::read_to_string(self.root.join(".naome").join(file_name)).unwrap())
-            .unwrap()
-    }
-
-    fn read_naome_file(&self, file_name: &str) -> String {
-        fs::read_to_string(self.root.join(".naome").join(file_name)).unwrap()
-    }
-}

package/crates/naome-core/tests/verification_contract.rs

@@ -1,51 +1,32 @@
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::time::{SystemTime, UNIX_EPOCH};
-
 use naome_core::validate_verification_contract;
 use serde_json::json;
 
+mod repo_support;
+
+use repo_support::{change_type, diff_check, verification_value, TestRepo};
+
 #[test]
 fn accepts_valid_contract_and_testing_map() {
     let repo = TestRepo::new("verification-contract-valid");
     repo.write_testing_markdown(default_testing_markdown());
-    repo.write_naome_json(
-        "verification.json",
-        json!({
-            "schema": "naome.verification.v1",
-            "version": 1,
-            "status": "uninitialized",
-            "lastUpdated": null,
-            "checks": [
-                {
-                    "id": "diff-check",
-                    "command": "git diff --check",
-                    "cwd": ".",
-                    "purpose": "Reject whitespace errors.",
-                    "cost": "fast",
-                    "source": "git",
-                    "evidence": [],
-                    "lastVerified": null
-                }
-            ],
-            "changeTypes": [
-                {
-                    "id": "docs",
-                    "description": "Documentation changes.",
-                    "paths": ["docs/**"],
-                    "requiredChecks": ["diff-check"],
-                    "recommendedChecks": [],
-                    "humanReview": false
-                }
-            ],
-            "releaseGates": [
-                {
-                    "checkId": "diff-check",
-                    "requiredWhen": "Before release when docs changed."
-                }
-            ]
-        }),
-    );
+    repo.write_naome_json("verification.json", {
+        let mut value = verification_value(
+            "uninitialized",
+            vec![diff_check(vec![])],
+            vec![change_type(
+                "docs",
+                "Documentation changes.",
+                vec!["docs/**"],
+                vec!["diff-check"],
+            )],
+        );
+        value["lastUpdated"] = json!(null);
+        value["releaseGates"] = json!([{
+            "checkId": "diff-check",
+            "requiredWhen": "Before release when docs changed."
+        }]);
+        value
+    });
 
     let errors = validate_verification_contract(repo.path()).unwrap();
 
@@ -142,40 +123,3 @@ fn default_testing_markdown() -> &'static str {
 ## Evidence\n\n\
 - Test fixture.\n"
 }
-
-struct TestRepo {
-    root: PathBuf,
-}
-
-impl TestRepo {
-    fn new(name: &str) -> Self {
-        let nonce = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap()
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!("naome-core-{name}-{nonce}"));
-        fs::create_dir_all(root.join(".naome")).unwrap();
-        fs::create_dir_all(root.join("docs").join("naome")).unwrap();
-        Self { root }
-    }
-
-    fn path(&self) -> &Path {
-        &self.root
-    }
-
-    fn write_naome_json(&self, file_name: &str, value: serde_json::Value) {
-        fs::write(
-            self.root.join(".naome").join(file_name),
-            format!("{}\n", serde_json::to_string_pretty(&value).unwrap()),
-        )
-        .unwrap();
-    }
-
-    fn write_testing_markdown(&self, content: &str) {
-        fs::write(
-            self.root.join("docs").join("naome").join("testing.md"),
-            content,
-        )
-        .unwrap();
-    }
-}

package/crates/naome-core/tests/workflow_support/mod.rs

@@ -60,7 +60,7 @@ impl WorkflowFixture {
             ".naome/manifest.json",
             &pretty(json!({
                 "name": "naome",
-                "harnessVersion": "1.2.0",
+                "harnessVersion": "1.2.1",
                 "profile": "standard",
                 "installedAt": null,
                 "machineOwned": ["AGENTS.md", ".naome/bin/naome.js", "docs/naome/index.md"],

package/installer/agents.js

@@ -0,0 +1,90 @@
+import { createInterface } from "node:readline/promises";
+import { stdin as input, stdout as output } from "node:process";
+import { copyFileSync, existsSync, readFileSync, renameSync } from "node:fs";
+import { join, relative } from "node:path";
+
+import {
+  assertArchiveDirectoryAvailableForTakeover,
+  hasSymlinkInTargetPath,
+  nextArchivePath,
+  removeSkipped,
+} from "./filesystem.js";
+import { printCancelled, printError, printSection } from "./output.js";
+
+export async function confirmAgentsTakeover(ctx) {
+  if (!hasAgentsTakeoverCandidate(ctx)) {
+    return;
+  }
+
+  if (hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    printError(ctx, "NAOME cannot take over AGENTS.md because it is a symlink.");
+    console.error("Replace the symlink with a regular file before installing NAOME.");
+    process.exit(1);
+  }
+
+  if (!process.stdin.isTTY || process.env.CI === "true") {
+    printError(ctx, "AGENTS.md already exists.");
+    console.error("NAOME must replace AGENTS.md to become the active harness entrypoint.");
+    console.error("Run this installer in an interactive terminal and confirm the takeover.");
+    process.exit(1);
+  }
+
+  printSection(ctx, "AGENTS.md takeover required");
+  console.log(`${ctx.color.dim("existing")} AGENTS.md`);
+  console.log(`${ctx.color.dim("archive ")} .naome/archive/AGENTS.pre-naome.md`);
+  console.log(`${ctx.color.dim("replace ")} AGENTS.md with the NAOME entrypoint`);
+  console.log(`${ctx.color.dim("ignore  ")} .naome/archive/ via .naomeignore`);
+  console.log("");
+
+  const rl = createInterface({ input, output });
+  const answer = await rl.question(`${ctx.color.yellow("?")} Replace AGENTS.md and continue installation? (y/N) `);
+  rl.close();
+
+  if (answer.trim().toLowerCase() !== "y") {
+    printCancelled(ctx, "NAOME was not installed. AGENTS.md was left unchanged.");
+    process.exit(1);
+  }
+
+  assertArchiveDirectoryAvailableForTakeover(ctx);
+}
+
+export function takeoverExistingAgents(ctx) {
+  const agentsPath = join(ctx.targetRoot, "AGENTS.md");
+  if (!existsSync(agentsPath) || hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    return;
+  }
+
+  const templateAgentsPath = join(ctx.templateRoot, "AGENTS.md");
+  const templateAgents = readFileSync(templateAgentsPath, "utf8");
+  const existingAgents = readFileSync(agentsPath, "utf8");
+
+  if (existingAgents === templateAgents) {
+    return;
+  }
+
+  const archivePath = nextArchivePath(ctx, "AGENTS.pre-naome.md");
+  if (!archivePath) {
+    printError(ctx, "AGENTS.md already exists, but NAOME could not archive it safely.");
+    console.error("AGENTS.md was left unchanged.");
+    process.exit(1);
+  }
+
+  renameSync(agentsPath, archivePath);
+  copyFileSync(templateAgentsPath, agentsPath);
+  removeSkipped(ctx, "AGENTS.md");
+  ctx.installed.push("AGENTS.md");
+  ctx.archived.push({ from: "AGENTS.md", to: relative(ctx.targetRoot, archivePath) });
+}
+
+function hasAgentsTakeoverCandidate(ctx) {
+  const agentsPath = join(ctx.targetRoot, "AGENTS.md");
+  if (!existsSync(agentsPath)) {
+    return false;
+  }
+
+  if (hasSymlinkInTargetPath(ctx, "AGENTS.md")) {
+    return true;
+  }
+
+  return readFileSync(agentsPath, "utf8") !== readFileSync(join(ctx.templateRoot, "AGENTS.md"), "utf8");
+}

package/installer/context.js

@@ -0,0 +1,67 @@
+import { readFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const firstRunPrompt = `Run the NAOME first-run protocol for this repository.
+
+Start by reading .naomeignore, then docs/naome/index.md, then .naome/init-state.json.
+Then read .naome/upgrade-state.json, .naome/task-state.json, and docs/naome/execution.md.
+Run node .naome/bin/check-harness-health.js before feature work.
+If initialized is false, follow docs/naome/first-run.md.
+Do not begin feature work until NAOME intake is complete.
+After intake, save the user's next natural-language request to a temporary prompt file, then run node .naome/bin/naome.js route --prompt-file <path> --execute --json.
+Follow userMessage, humanOptions, requiredContext, and canCreateTask from the route output before creating the requested task.`;
+
+export function createInstallerContext() {
+  const packageRoot = dirname(dirname(fileURLToPath(import.meta.url)));
+  const targetRoot = process.cwd();
+  const useColor = process.stdout.isTTY && process.env.NO_COLOR !== "1";
+  const format = (value, code) => useColor ? `\u001b[${code}m${value}\u001b[0m` : value;
+
+  return {
+    packageRoot,
+    templateRoot: join(packageRoot, "templates", "naome-root"),
+    targetRoot,
+    packageVersion: JSON.parse(readFileSync(join(packageRoot, "package.json"), "utf8")).version,
+    installed: [],
+    archived: [],
+    updated: [],
+    skipped: [],
+    unsafeSkipped: [],
+    verboseOutput: process.argv.includes("--verbose"),
+    summaryTitle: "NAOME intake harness installed",
+    nextStepPrompt: firstRunPrompt,
+    installPlan: null,
+    machineOwnedPaths: [],
+    projectOwnedPaths: [],
+    localOnlyMachineOwnedPaths: [],
+    localOnlyGitIgnoreEntries: [],
+    localOnlyGitExcludeEntries: [],
+    localOnlyGitUntrackPaths: [],
+    healthCheckerRelativePath: ".naome/bin/check-harness-health.js",
+    taskStateCheckerRelativePath: ".naome/bin/check-task-state.js",
+    naomeCommandRelativePath: ".naome/bin/naome.js",
+    nativeBinaryName: process.platform === "win32" ? "naome.exe" : "naome",
+    nativeBinaryRelativePath:
+      process.platform === "win32" ? ".naome/bin/naome-rust.exe" : ".naome/bin/naome-rust",
+    minimumSupportedUpgradeVersion: "0.6.1",
+    integrityBlockPattern: /^const expectedMachineOwnedIntegrity = Object\.freeze\(\{[\s\S]*?\n\}\);\n/m,
+    normalizedIntegrityBlock:
+      "const expectedMachineOwnedIntegrity = Object.freeze({\n  __generated__: \"sha256:generated\"\n});\n",
+    nativeIntegrityPattern:
+      /^const expectedNativeBinaryIntegrity = "(?:sha256:[a-f0-9]{64}|sha256:generated)";\n/m,
+    normalizedNativeIntegrity: 'const expectedNativeBinaryIntegrity = "sha256:generated";\n',
+    executableMachineOwnedPaths: new Set([
+      ".naome/bin/naome.js",
+      ".naome/bin/check-task-state.js",
+      ".naome/bin/check-harness-health.js",
+    ]),
+    color: {
+      bold: (value) => format(value, "1"),
+      dim: (value) => format(value, "2"),
+      green: (value) => format(value, "32"),
+      yellow: (value) => format(value, "33"),
+      red: (value) => format(value, "31"),
+    },
+  };
+}