@lamentis/naome 1.3.11 → 1.3.12

package/crates/naome-core/tests/architecture_support/mod.rs

@@ -0,0 +1,78 @@
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use naome_core::{ArchitectureEdgeKind, ArchitectureScanReport};
+
+static FIXTURE_COUNTER: AtomicU64 = AtomicU64::new(0);
+
+pub struct FixtureRepo {
+    root: PathBuf,
+}
+
+impl FixtureRepo {
+    pub fn new() -> Self {
+        let nonce = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let counter = FIXTURE_COUNTER.fetch_add(1, Ordering::Relaxed);
+        let root = std::env::temp_dir().join(format!(
+            "naome-arch-fixture-{}-{nonce}-{counter}",
+            std::process::id()
+        ));
+        fs::create_dir_all(&root).unwrap();
+        fs::write(
+            root.join(".naomeignore"),
+            ".naome/archive/\n.naome/tasks/\n",
+        )
+        .unwrap();
+        Self { root }
+    }
+
+    pub fn path(&self) -> &Path {
+        &self.root
+    }
+
+    pub fn write(&self, relative_path: &str, content: &str) {
+        let fixture_path = self.root.join(relative_path);
+        if let Some(parent) = fixture_path.parent() {
+            if !parent.exists() {
+                fs::create_dir_all(parent).unwrap();
+            }
+        }
+        fs::write(&fixture_path, content.as_bytes()).unwrap();
+    }
+
+    pub fn init_git(&self) {
+        run_git(&self.root, &["init"]);
+        run_git(&self.root, &["config", "user.email", "naome@example.com"]);
+        run_git(&self.root, &["config", "user.name", "NAOME Test"]);
+        self.write("README.md", "# Fixture\n");
+        run_git(&self.root, &["add", "."]);
+        run_git(&self.root, &["commit", "-m", "baseline"]);
+    }
+}
+
+pub fn has_import_edge(scan: &ArchitectureScanReport, from: &str, to: &str) -> bool {
+    scan.graph.edges.iter().any(|edge| {
+        edge.kind == ArchitectureEdgeKind::Imports && edge.from == from && edge.to == to
+    })
+}
+
+fn run_git(root: &Path, args: &[&str]) {
+    let result = Command::new("git")
+        .args(args)
+        .current_dir(root)
+        .output()
+        .unwrap();
+    assert!(
+        result.status.success(),
+        "git {:?} failed: {}{}",
+        args,
+        String::from_utf8_lossy(&result.stdout),
+        String::from_utf8_lossy(&result.stderr)
+    );
+}

package/installer/harness-files.js

@@ -22,7 +22,7 @@ export function ensureCoreHarnessFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/task-ledger.md", archiveDirName);
   ensureTemplateFile(ctx, "docs/naome/repository-model.md");
   ensureTemplateFile(ctx, "docs/naome/security.md");
-  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
+  replaceHarnessFile(ctx, "docs/naome/architecture-fitness.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
 }
 
@@ -40,7 +40,7 @@ export function ensureTaskControlHarnessFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/agent-workflow.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/context-economy.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/execution.md", archiveDirName);
-  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
+  replaceHarnessFile(ctx, "docs/naome/architecture-fitness.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
 }
 
@@ -59,7 +59,7 @@ export function ensureHarnessHealthFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/context-economy.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/execution.md", archiveDirName);
   ensureTemplateFile(ctx, "docs/naome/security.md");
-  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
+  replaceHarnessFile(ctx, "docs/naome/architecture-fitness.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
   ensureNaomeIgnore(ctx);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamentis/naome",
-  "version": "1.3.11",
+  "version": "1.3.12",
   "description": "Native-first CLI for the NAOME agent harness.",
   "license": "Apache-2.0",
   "type": "module",

package/templates/naome-root/.naome/manifest.json

@@ -9,7 +9,7 @@
     ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
     "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
     "docs/naome/agent-workflow.md": "sha256:0be1c29adfbcd3fd73c4f904080ffc67237692fe413871a30243538c4db38ac7",
-    "docs/naome/architecture-fitness.md": "sha256:a1f08dc02eff4e4c37934cf48e3d7ed2453e34d55dac475bc24ab913e03f263d",
+    "docs/naome/architecture-fitness.md": "sha256:3963d9a92d6481d4e72815a4dd749549320f23c45100b4821e75b7e6f3ffd00b",
     "docs/naome/context-economy.md": "sha256:3ed5075815ecf4ada46a5e65438769310307c35759fcd46b13dc0b96e02bebd9",
     "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
     "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",

package/templates/naome-root/docs/naome/architecture-fitness.md

@@ -53,6 +53,29 @@ rules:
   no_forbidden_layer_dependencies:
     enabled: true
     severity: error
+  no_cross_context_internal_imports:
+    enabled: true
+    severity: error
+  public_api_boundary:
+    enabled: true
+    severity: error
+  no_cycles:
+    enabled: true
+    severity: error
+  no_transitive_forbidden_layer_dependencies:
+    enabled: true
+    severity: error
+  max_imports_per_file:
+    enabled: true
+    value: 20
+    severity: warning
+  max_fan_out:
+    enabled: true
+    value: 20
+    severity: warning
+  external_dependency_policy:
+    enabled: true
+    severity: error
   max_file_lines:
     enabled: true
     value: 400
@@ -66,6 +89,14 @@ allowed_dependencies:
   infrastructure:
     - domain
 
+external_dependencies:
+  domain:
+    allow: []
+  infrastructure:
+    allow:
+      - "stripe"
+      - "@supabase/*"
+
 ignore:
   - path: "generated/**"
     reason: "Generated code is not architecture-owned."
@@ -79,6 +110,17 @@ ignore:
   change.
 - `arch.no_forbidden_layer_dependencies` rejects import edges whose source
   layer is not allowed to depend on the imported file's layer.
+- `arch.no_cross_context_internal_imports` rejects imports into another bounded
+  context's internal files.
+- `arch.public_api_boundary` requires cross-context imports to target declared
+  `public_api` paths.
+- `arch.no_cycles` detects file-level import cycles.
+- `arch.no_transitive_forbidden_layer_dependencies` catches indirect reachability
+  from a layer to a forbidden layer.
+- `arch.max_imports_per_file` and `arch.max_fan_out` enforce local dependency
+  budgets.
+- `arch.external_dependency_policy` enforces allowed external packages per layer
+  or context.
 
 ## Agent Integration
 
@@ -95,15 +137,16 @@ fails only on configured error rules.
 
 ## Language Support
 
-The v1.3.11 foundation classifies TypeScript, JavaScript, Rust, Python, Go,
+The v1.3.12 foundation classifies TypeScript, JavaScript, Rust, Python, Go,
 Java, Kotlin, and Swift files by path extension. It extracts import facts for
 TypeScript, JavaScript, Rust, Python, and Go, resolves relative imports and
 simple repository-absolute aliases, and represents unresolved imports
-explicitly as graph nodes instead of dropping them.
+explicitly as graph nodes instead of dropping them. Architecture rules now
+cover layers, bounded contexts, public APIs, cycles, transitive layer reach,
+import/fan-out budgets, and external dependency policies.
 
 ## Limitations
 
-This release intentionally validates direct file-level import edges. Manifest
-extractors, cross-context public API boundaries, cycle detection, transitive
-forbidden dependencies, SARIF output, and persistent scan caching remain planned
-follow-up slices before v1.4.0.
+This release intentionally keeps validation file-graph based. Manifest
+extractors, SARIF output, persistent scan caching, and deeper symbol-level call
+analysis remain planned follow-up slices before v1.4.0.