@lamentis/naome 1.3.7 → 1.3.8

package/crates/naome-core/tests/intent_v2.rs

@@ -1,6 +1,259 @@
 mod intent_support;
 
-use intent_support::{env, idle, Repo};
+use intent_support::{idle, legacy_env, prompt_env, prompt_env_with_actions, Repo};
+
+#[test]
+fn raw_prompts_require_structured_prompt_envelope_before_routing() {
+    let repo = Repo::clean("intent-v2-raw-prompt-envelope-required", idle());
+    for prompt in [
+        "What would you recommend for the next minor release?",
+        "Bitte sauber umsetzen, committen, pushen und MR erstellen.",
+        "Please implement a commit gate simulator.",
+    ] {
+        let intent = repo.intent(prompt);
+        assert_eq!(
+            intent.prompt_intent, "prompt_normalization_required",
+            "{prompt}"
+        );
+        assert_eq!(intent.policy_action, "normalize_prompt_first", "{prompt}");
+        assert!(intent.allowed, "{prompt}");
+        assert!(!intent.evidence.requests_new_goal, "{prompt}");
+        assert!(!intent.evidence.requests_commit, "{prompt}");
+        assert!(!intent.evidence.requests_review, "{prompt}");
+    }
+}
+
+#[test]
+fn prompt_envelope_drives_advisory_and_task_routing_without_prompt_language_keywords() {
+    let repo = Repo::clean("intent-v2-prompt-envelope-routing", idle());
+
+    let advisory = repo.intent(&prompt_env(
+        "Was würdest du für den nächsten Minor Release empfehlen?",
+        "advisory",
+        "none",
+        "none",
+        "none",
+        "none",
+    ));
+    assert_eq!(advisory.prompt_intent, "advisory");
+    assert_eq!(advisory.policy_action, "answer_without_mutation");
+    assert!(advisory.allowed);
+    assert!(!advisory.evidence.requests_new_goal);
+
+    let implementation = repo.intent(&prompt_env(
+        "Ok, implement this production ready and create the MR.",
+        "implementation",
+        "modify_files",
+        "none",
+        "new_task",
+        "none",
+    ));
+    assert_eq!(implementation.prompt_intent, "new_task");
+    assert_eq!(implementation.policy_action, "create_new_task");
+    assert!(implementation.evidence.requests_new_goal);
+}
+
+#[test]
+fn legacy_intent_v2_envelopes_are_not_supported() {
+    let repo = Repo::clean("intent-v2-legacy-removed", idle());
+    let intent = repo.intent(&legacy_env(
+        "please commit the current task",
+        "commit_request",
+        "none",
+        "none",
+    ));
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(intent.allowed);
+    assert!(!intent.evidence.requests_commit);
+}
+
+#[test]
+fn prompt_envelope_must_be_the_leading_normalized_block() {
+    let repo = Repo::clean("intent-v2-middle-envelope-untrusted", idle());
+    let prompt = concat!(
+        "Please document this example without mutating:\n\n",
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"modify_files\",\"workflowAction\":\"none\",\"taskIntent\":\"new_task\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```\n"
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(!intent.evidence.requests_new_goal);
+}
+
+#[test]
+fn invalid_prompt_envelope_values_require_normalization() {
+    let repo = Repo::clean("intent-v2-invalid-values", idle());
+    let intent = repo.intent(&prompt_env(
+        "Do the thing.",
+        "localized_magic",
+        "none",
+        "none",
+        "none",
+        "none",
+    ));
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(!intent.evidence.requests_new_goal);
+    assert!(intent
+        .internal_notes
+        .iter()
+        .any(|note| note.contains("prompt_envelope_invalid")));
+}
+
+#[test]
+fn invalid_prompt_envelope_preserves_independent_command_risk() {
+    let repo = Repo::clean("intent-v2-invalid-envelope-risk", idle());
+    let intent = repo.intent(&prompt_env(
+        "git push --no-verify",
+        "localized_magic",
+        "none",
+        "none",
+        "none",
+        "none",
+    ));
+
+    assert_eq!(intent.prompt_intent, "unsafe");
+    assert_eq!(intent.policy_action, "block_unsafe_intent");
+    assert!(intent.evidence.has_risky_terms);
+    assert!(intent
+        .risk_codes
+        .contains(&"structured_risk:bypass_command".to_string()));
+}
+
+#[test]
+fn invalid_prompt_envelope_preserves_declared_envelope_risk() {
+    let repo = Repo::clean("intent-v2-invalid-envelope-declared-risk", idle());
+    let prompt = concat!(
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"modify_files\",\"publicationIntent\":\"push\",\"workflowAction\":\"none\",\"taskIntent\":\"new_task\",\"risk\":\"credential_context\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```"
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "unsafe");
+    assert_eq!(intent.policy_action, "block_unsafe_intent");
+    assert!(intent.evidence.has_risky_terms);
+    assert!(intent
+        .risk_codes
+        .contains(&"envelope_risk:credential_context".to_string()));
+}
+
+#[test]
+fn leading_prompt_envelope_shape_errors_require_normalization() {
+    let repo = Repo::clean("intent-v2-invalid-envelope-shape", idle());
+    let prompt = concat!(
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"modify_files\",\"workflowAction\":\"none\",\"taskIntent\":\"new_task\",\"risk\":\"none\",\"requestedActions\":\"commit\",\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```"
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(intent
+        .internal_notes
+        .iter()
+        .any(|note| note.contains("prompt_envelope_invalid")));
+}
+
+#[test]
+fn publication_requests_require_normalization_instead_of_becoming_new_tasks() {
+    let repo = Repo::clean("intent-v2-publication-unsupported", idle());
+    let prompt = concat!(
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"commit\",\"publicationIntent\":\"push\",\"workflowAction\":\"none\",\"taskIntent\":\"none\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```\n\nCommit and push this task."
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(!intent.evidence.requests_commit);
+    assert!(intent
+        .internal_notes
+        .iter()
+        .any(|note| note.contains("prompt_envelope_unsupported:publicationIntent")));
+}
+
+#[test]
+fn publication_mutation_intents_require_normalization() {
+    let repo = Repo::clean("intent-v2-publication-mutation-unsupported", idle());
+    let prompt = concat!(
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"push\",\"publicationIntent\":\"none\",\"workflowAction\":\"none\",\"taskIntent\":\"none\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```"
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "prompt_normalization_required");
+    assert_eq!(intent.policy_action, "normalize_prompt_first");
+    assert!(!intent.evidence.requests_new_goal);
+    assert!(intent
+        .internal_notes
+        .iter()
+        .any(|note| note.contains("prompt_envelope_unsupported:mutationIntent")));
+}
+
+#[test]
+fn envelope_only_prompts_route_from_the_envelope() {
+    let repo = Repo::clean("intent-v2-envelope-only", idle());
+    let prompt = concat!(
+        "```naome-prompt-envelope-v1\n",
+        "{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"modify_files\",\"workflowAction\":\"none\",\"taskIntent\":\"new_task\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}\n",
+        "```"
+    );
+
+    let intent = repo.intent(prompt);
+
+    assert_eq!(intent.prompt_intent, "new_task");
+    assert_eq!(intent.policy_action, "create_new_task");
+}
+
+#[test]
+fn compatible_status_answer_envelopes_are_not_ambiguous() {
+    let repo = Repo::clean("intent-v2-status-answer", idle());
+    let intent = repo.intent(&prompt_env_with_actions(
+        "",
+        "status",
+        "none",
+        "none",
+        "none",
+        "none",
+        &["answer"],
+    ));
+
+    assert_eq!(intent.prompt_intent, "status_question");
+    assert_eq!(intent.policy_action, "answer_status_only");
+}
+
+#[test]
+fn conflicting_prompt_envelope_values_block_as_ambiguous() {
+    let repo = Repo::clean("intent-v2-conflicting-values", idle());
+    let intent = repo.intent(&prompt_env_with_actions(
+        "Only advise, but also edit files.",
+        "advisory",
+        "modify_files",
+        "none",
+        "none",
+        "none",
+        &[],
+    ));
+
+    assert_eq!(intent.prompt_intent, "ambiguous");
+    assert_eq!(intent.policy_action, "block_ambiguous_intent");
+    assert!(!intent.allowed);
+}
 
 #[test]
 fn feature_descriptions_with_workflow_terms_route_as_new_tasks() {
@@ -11,7 +264,14 @@ fn feature_descriptions_with_workflow_terms_route_as_new_tasks() {
         "Implement a review findings feature for pull request analysis.",
         "Create a baseline flow visualization in the UI.",
     ] {
-        let intent = repo.intent(prompt);
+        let intent = repo.intent(&prompt_env(
+            prompt,
+            "implementation",
+            "modify_files",
+            "none",
+            "new_task",
+            "none",
+        ));
         assert_eq!(intent.prompt_intent, "new_task", "{prompt}");
         assert_eq!(intent.policy_action, "create_new_task", "{prompt}");
         assert!(!intent.evidence.requests_commit, "{prompt}");
@@ -23,8 +283,10 @@ fn feature_descriptions_with_workflow_terms_route_as_new_tasks() {
 #[test]
 fn enveloped_workflow_requests_keep_their_intent() {
     let repo = Repo::clean("intent-v2-direct-workflow", idle());
-    let commit = repo.intent(&env(
+    let commit = repo.intent(&prompt_env(
         "please commit the current task",
+        "implementation",
+        "commit",
         "commit_request",
         "none",
         "none",
@@ -32,16 +294,26 @@ fn enveloped_workflow_requests_keep_their_intent() {
     assert_eq!(commit.prompt_intent, "commit_request");
     assert!(commit.evidence.requests_commit);
 
-    let review = repo.intent(&env(
+    let review = repo.intent(&prompt_env_with_actions(
         "review the current diff",
+        "implementation",
+        "none",
         "review_request",
         "none",
         "none",
+        &["review"],
     ));
     assert_eq!(review.prompt_intent, "review_request");
     assert!(review.evidence.requests_review);
 
-    let status = repo.intent(&env("show status", "status_question", "none", "none"));
+    let status = repo.intent(&prompt_env(
+        "show status",
+        "status",
+        "none",
+        "status_question",
+        "none",
+        "none",
+    ));
     assert_eq!(status.prompt_intent, "status_question");
     assert_eq!(status.policy_action, "answer_status_only");
 }
@@ -49,8 +321,10 @@ fn enveloped_workflow_requests_keep_their_intent() {
 #[test]
 fn envelope_is_canonical_over_legacy_prompt_words() {
     let repo = Repo::clean("intent-v2-envelope-canonical", idle());
-    let intent = repo.intent(&env(
+    let intent = repo.intent(&prompt_env(
         "please commit the current task",
+        "implementation",
+        "modify_files",
         "none",
         "new_task",
         "none",
@@ -62,12 +336,25 @@ fn envelope_is_canonical_over_legacy_prompt_words() {
 #[test]
 fn token_boundaries_and_code_segments_avoid_false_workflow_actions() {
     let repo = Repo::clean("intent-v2-segments", idle());
-    let async_intent = repo.intent("Add async sync-state naming examples to the documentation.");
+    let async_intent = repo.intent(&prompt_env(
+        "Add async sync-state naming examples to the documentation.",
+        "implementation",
+        "modify_files",
+        "none",
+        "new_task",
+        "none",
+    ));
     assert_eq!(async_intent.prompt_intent, "new_task");
     assert!(!async_intent.evidence.requests_repair);
 
-    let code_intent =
-        repo.intent("Add docs with examples like `naome commit` and ```sh\ngit push\n```.");
+    let code_intent = repo.intent(&prompt_env(
+        "Add docs with examples like `naome commit` and ```sh\ngit push\n```.",
+        "implementation",
+        "modify_files",
+        "none",
+        "new_task",
+        "none",
+    ));
     assert_eq!(code_intent.prompt_intent, "new_task");
     assert!(!code_intent.evidence.requests_commit);
     assert!(!code_intent.evidence.has_risky_terms);
@@ -76,8 +363,10 @@ fn token_boundaries_and_code_segments_avoid_false_workflow_actions() {
 #[test]
 fn explicit_credential_context_still_routes_as_unsafe() {
     let repo = Repo::clean("intent-v2-risk", idle());
-    let intent = repo.intent(&env(
+    let intent = repo.intent(&prompt_env(
         "Commit the current token and API key so the deployment can use the secret.",
+        "implementation",
+        "commit",
         "commit_request",
         "none",
         "credential_context",

package/crates/naome-core/tests/repo_support/routes.rs

@@ -6,10 +6,16 @@ use super::TestRepo;
 
 const NEW_README_TASK_PROMPT: &str = "Add another line to README as a new task.";
 
+pub fn prompt_env(prompt: &str, workflow: &str, task: &str, mutation_intent: &str) -> String {
+    format!(
+        "```naome-prompt-envelope-v1\n{{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"{mutation_intent}\",\"workflowAction\":\"{workflow}\",\"taskIntent\":\"{task}\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}}\n```\n\n{prompt}"
+    )
+}
+
 pub fn route_commit_request(repo: &TestRepo) -> RouteDecision {
     evaluate_route(
         repo.path(),
-        "commit my changes",
+        &prompt_env("commit my changes", "commit_request", "none", "commit"),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::offline(),
@@ -29,7 +35,7 @@ pub fn try_route_new_task(
 ) -> Result<RouteDecision, NaomeError> {
     evaluate_route(
         repo.path(),
-        prompt,
+        &prompt_env(prompt, "none", "new_task", "modify_files"),
         RouteOptions {
             execute,
             evaluation: EvaluationOptions::offline(),

package/crates/naome-core/tests/route_baseline.rs

@@ -3,11 +3,40 @@ use std::fs;
 
 mod repo_support;
 
+use naome_core::{evaluate_route, EvaluationOptions, RouteOptions};
 use repo_support::{
     assert_commit_paths, assert_isolated_worktree_ready, route_new_task, route_readme_task,
     TestRepo,
 };
 
+#[test]
+fn execute_route_with_raw_prompt_requests_normalization_without_mutating() {
+    let repo = TestRepo::new("route-raw-prompt-normalize-first");
+    repo.init_git();
+    repo.write_file("README.md", "# Baseline\n");
+    repo.write_base_naome_state(json!({ "status": "idle", "activeTask": null }));
+    repo.git(&["add", "."]);
+    repo.git(&["commit", "-m", "baseline"]);
+    let before = repo.git_stdout(&["rev-parse", "HEAD"]);
+
+    let route = evaluate_route(
+        repo.path(),
+        "Please implement, commit, push, and create the MR.",
+        RouteOptions {
+            execute: true,
+            evaluation: EvaluationOptions::offline(),
+        },
+    )
+    .unwrap();
+
+    assert_eq!(route.prompt_intent, "prompt_normalization_required");
+    assert_eq!(route.policy_action, "normalize_prompt_first");
+    assert!(!route.mutation_performed);
+    assert!(!route.can_create_task);
+    assert_eq!(repo.git_stdout(&["rev-parse", "HEAD"]), before);
+    assert!(repo.git_status_short().is_empty());
+}
+
 #[test]
 fn dry_route_reports_auto_baseline_without_mutating() {
     let repo = TestRepo::completed_task_with_diff("route-dry-auto");

package/crates/naome-core/tests/route_completion.rs

@@ -7,6 +7,12 @@ mod repo_support;
 
 use repo_support::TestRepo;
 
+fn route_prompt(prompt: &str, workflow: &str, task: &str, mutation_intent: &str) -> String {
+    format!(
+        "```naome-prompt-envelope-v1\n{{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"{mutation_intent}\",\"workflowAction\":\"{workflow}\",\"taskIntent\":\"{task}\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}}\n```\n\n{prompt}"
+    )
+}
+
 #[test]
 fn execute_route_does_not_mutate_when_prompt_blocks_commit() {
     let repo = TestRepo::completed_task_with_diff("route-no-commit");
@@ -14,7 +20,12 @@ fn execute_route_does_not_mutate_when_prompt_blocks_commit() {
 
     let route = evaluate_route(
         repo.path(),
-        "Do not commit. Start a new task after this.",
+        &route_prompt(
+            "Do not commit. Start a new task after this.",
+            "no_commit_request",
+            "new_task",
+            "none",
+        ),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::offline(),
@@ -41,7 +52,7 @@ fn explicit_route_commit_baseline_leaves_unrelated_user_edit_unstaged() {
 
     let route = evaluate_route(
         repo.path(),
-        "commit_task_baseline",
+        &route_prompt("commit_task_baseline", "commit_request", "none", "commit"),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::offline(),
@@ -67,7 +78,12 @@ fn execute_route_journals_external_commit_after_completed_task() {
 
     let route = evaluate_route(
         repo.path(),
-        "Create a new task for README polish.",
+        &route_prompt(
+            "Create a new task for README polish.",
+            "none",
+            "new_task",
+            "modify_files",
+        ),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::offline(),
@@ -94,7 +110,12 @@ fn explain_reports_winning_rule_and_mutation_plan_without_executing() {
 
     let explain = explain_route(
         repo.path(),
-        "Start a new task for README polish.",
+        &route_prompt(
+            "Start a new task for README polish.",
+            "none",
+            "new_task",
+            "modify_files",
+        ),
         EvaluationOptions::offline(),
     )
     .unwrap();
@@ -126,7 +147,7 @@ fn unhealthy_harness_route_blocks_normal_work() {
 
     let route = evaluate_route(
         repo.path(),
-        "Create a new task.",
+        &route_prompt("Create a new task.", "none", "new_task", "modify_files"),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::online(),

package/crates/naome-core/tests/route_harness_refresh.rs

@@ -9,6 +9,12 @@ use repo_support::{
     TestRepo,
 };
 
+fn repair_prompt(prompt: &str) -> String {
+    format!(
+        "```naome-prompt-envelope-v1\n{{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"fix\",\"mutationIntent\":\"modify_files\",\"workflowAction\":\"repair_request\",\"taskIntent\":\"none\",\"risk\":\"none\",\"requestedActions\":[\"repair\"],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}}\n```\n\n{prompt}"
+    )
+}
+
 #[test]
 fn execute_route_baselines_harness_refresh_before_dirty_repo_worktree() {
     let repo = TestRepo::dirty_harness_refresh_repo("route-dirty-harness-refresh-worktree", true);
@@ -66,7 +72,7 @@ fn execute_route_repair_request_baselines_harness_refresh_only() {
 
     let route = evaluate_route(
         repo.path(),
-        "please repair all",
+        &repair_prompt("please repair all"),
         RouteOptions {
             execute: true,
             evaluation: EvaluationOptions::offline(),

package/crates/naome-core/tests/route_user_diff.rs

@@ -27,7 +27,7 @@ fn execute_route_does_not_mutate_or_offer_clear_commit_for_dirty_unowned_diff()
     )
     .unwrap();
 
-    assert_eq!(route.policy_action, "block_unowned_diff");
+    assert_eq!(route.policy_action, "normalize_prompt_first");
     assert!(!route.mutation_performed);
     assert!(!route.can_create_task);
     assert_eq!(route.executed_actions, Vec::<String>::new());

package/crates/naome-core/tests/task_state_compact.rs

@@ -6,6 +6,12 @@ use task_state_compact_support::{
     compact_state, large_compact_state, large_expanded_state, legacy_state, MiniRepo,
 };
 
+fn new_task_prompt(prompt: &str) -> String {
+    format!(
+        "```naome-prompt-envelope-v1\n{{\"schema\":\"naome.prompt-envelope.v1\",\"requestKind\":\"implementation\",\"mutationIntent\":\"modify_files\",\"workflowAction\":\"none\",\"taskIntent\":\"new_task\",\"risk\":\"none\",\"requestedActions\":[],\"referencedPaths\":[],\"constraints\":[],\"uncertainties\":[]}}\n```\n\n{prompt}"
+    )
+}
+
 #[test]
 fn legacy_v1_proof_results_remain_valid() {
     let repo = MiniRepo::new();
@@ -30,7 +36,7 @@ fn compact_path_sets_and_batches_cover_completion_commit_and_route() {
 
     let route = evaluate_route(
         repo.path(),
-        "new task",
+        &new_task_prompt("new task"),
         RouteOptions {
             execute: false,
             evaluation: EvaluationOptions::offline(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamentis/naome",
-  "version": "1.3.7",
+  "version": "1.3.8",
   "description": "Native-first CLI for the NAOME agent harness.",
   "license": "Apache-2.0",
   "type": "module",

package/templates/naome-root/.naome/manifest.json

@@ -1,5 +1,5 @@
 {
-  "harnessVersion": "1.2.0",
+  "harnessVersion": "1.3.8",
   "installedAt": null,
   "integrity": {
     ".naome/bin/check-harness-health.js": "sha256:dc4de52b79c69600b9ba47b924e2c2b8de61a2cbfab6d1ccc0f1924d963db657",
@@ -8,7 +8,7 @@
     ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
     ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
     "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
-    "docs/naome/agent-workflow.md": "sha256:cbef6dee1543b4c74111f8dc23e81a5bf092a9585a342504678bfc9c9d0655ea",
+    "docs/naome/agent-workflow.md": "sha256:0be1c29adfbcd3fd73c4f904080ffc67237692fe413871a30243538c4db38ac7",
     "docs/naome/context-economy.md": "sha256:3ed5075815ecf4ada46a5e65438769310307c35759fcd46b13dc0b96e02bebd9",
     "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
     "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",

package/templates/naome-root/docs/naome/agent-workflow.md

@@ -11,11 +11,20 @@ Use this workflow after first-run intake is complete.
    `canCreateTask` fields instead of inventing routing or final-response text.
    If route returns a `taskRoot` different from the current directory, continue
    the task from that path and leave the original worktree untouched.
-   When preparing the route prompt file, prepend a fenced `naome-intent-v2`
-   JSON envelope that states `workflowAction`, `taskIntent`, and `risk` using
-   canonical NAOME schema constants such as `commit_request`,
-   `task_revision`, and `credential_context`. Keep the original user text below
-   it. Do not derive workflow actions from natural-language keywords.
+   When preparing the route prompt file, first normalize the user's raw prompt
+   into a fenced `naome-prompt-envelope-v1` JSON envelope. The envelope is the
+   routing input; the raw user text below it is audit text. Use canonical NAOME
+   schema fields such as `requestKind`, `mutationIntent`,
+   `publicationIntent`, `requestedActions`, `referencedPaths`, `constraints`,
+   `uncertainties`, `workflowAction`, `taskIntent`, and `risk`. Do not derive
+   workflow actions from natural-language keywords, localized words, or the
+   prompt's prose language. If a prompt file has no envelope, route returns a
+   non-mutating `normalize_prompt_first` decision and the agent must add the
+   deterministic envelope before retrying. `naome-intent-v2` is not supported.
+   Unknown envelope values require normalization, and conflicting envelope
+   fields block as ambiguous instead of mutating. Put concrete files in
+   `referencedPaths`; prompt context selection treats those paths as the
+   primary source of path intent.
 3. Use `node .naome/bin/naome.js explain --prompt-file <path> --json` only when
    debugging why a policy won.
 4. Run `node .naome/bin/naome.js status --json` when reporting state without

package/templates/naome-root/docs/naome/architecture.md

@@ -18,6 +18,15 @@ Status: Uninitialized
 - Per-check proof files are local run evidence. Prefer compact proof batches in
   the committed task-state projection when many release checks share the same
   evidence paths.
+- Prompt routing uses fenced `naome-prompt-envelope-v1` JSON envelopes as the
+  deterministic routing input. Raw natural-language prompts are audit text and
+  must not be treated as workflow authority until an agent normalizes them into
+  canonical fields such as `requestKind`, `mutationIntent`,
+  `publicationIntent`, `requestedActions`, `workflowAction`, `taskIntent`, and
+  `risk`. Legacy `naome-intent-v2` envelopes are not supported. Unknown
+  envelope values require prompt normalization, conflicting fields block as
+  ambiguous, and `referencedPaths` is the primary context-selection source for
+  prompt-mentioned files.
 
 ## Assumed Boundaries