@lamentis/naome 1.3.9 → 1.3.10

package/crates/naome-core/src/architecture/scan/path_scan.rs

@@ -0,0 +1,92 @@
+use std::fs;
+use std::path::Path;
+
+use crate::models::NaomeError;
+use crate::paths;
+
+use crate::architecture::config::ArchitectureConfig;
+
+pub(super) fn repository_files(
+    root: &Path,
+    config: &ArchitectureConfig,
+) -> Result<Vec<String>, NaomeError> {
+    let ignored_patterns = ignored_patterns(root, config);
+    let mut files = Vec::new();
+    collect_files(root, root, &ignored_patterns, &mut files)?;
+    files.sort();
+    Ok(files)
+}
+
+fn collect_files(
+    root: &Path,
+    dir: &Path,
+    ignored_patterns: &[String],
+    files: &mut Vec<String>,
+) -> Result<(), NaomeError> {
+    for entry in fs::read_dir(dir)? {
+        let entry = entry?;
+        let path = entry.path();
+        let relative = normalize_path(path.strip_prefix(root).unwrap_or(&path));
+        if is_ignored(&relative, ignored_patterns) {
+            continue;
+        }
+        let metadata = fs::symlink_metadata(&path)?;
+        if metadata.is_symlink() {
+            continue;
+        }
+        if metadata.is_dir() {
+            collect_files(root, &path, ignored_patterns, files)?;
+        } else if metadata.is_file() {
+            files.push(relative);
+        }
+    }
+    Ok(())
+}
+
+fn is_ignored(path: &str, ignored_patterns: &[String]) -> bool {
+    path.is_empty() || is_default_ignored_path(path) || paths::matches_any(path, ignored_patterns)
+}
+
+fn ignored_patterns(root: &Path, config: &ArchitectureConfig) -> Vec<String> {
+    let mut patterns = paths::naomeignore_patterns(root);
+    patterns.extend([
+        ".git/**".to_string(),
+        ".naome/archive/**".to_string(),
+        ".naome/cache/**".to_string(),
+        ".naome/local/**".to_string(),
+        ".naome/tasks/**".to_string(),
+        "node_modules/**".to_string(),
+        "target/**".to_string(),
+        "dist/**".to_string(),
+        "build/**".to_string(),
+    ]);
+    patterns.extend(config.ignore.iter().map(|rule| rule.path.clone()));
+    patterns
+}
+
+fn is_default_ignored_path(path: &str) -> bool {
+    path == ".git"
+        || path.starts_with(".git/")
+        || path == ".naome/archive"
+        || path.starts_with(".naome/archive/")
+        || path == ".naome/cache"
+        || path.starts_with(".naome/cache/")
+        || path == ".naome/local"
+        || path.starts_with(".naome/local/")
+        || path == ".naome/tasks"
+        || path.starts_with(".naome/tasks/")
+        || path == ".npm"
+        || path.starts_with(".npm/")
+        || path == "node_modules"
+        || path.contains("/node_modules/")
+        || path == "target"
+        || path.contains("/target/")
+        || path == "dist"
+        || path.contains("/dist/")
+        || path == "build"
+        || path.contains("/build/")
+}
+
+fn normalize_path(path: impl AsRef<Path>) -> String {
+    path.as_ref().to_string_lossy().replace('\\', "/")
+}

package/crates/naome-core/src/architecture/scan.rs

@@ -0,0 +1,75 @@
+use std::collections::BTreeMap;
+use std::path::{Path, PathBuf};
+
+use serde::Serialize;
+
+use crate::git;
+use crate::models::NaomeError;
+
+use super::config::{read_architecture_config, ArchitectureConfig};
+use super::model::ArchitectureGraph;
+
+mod graph_builder;
+mod path_scan;
+
+#[derive(Debug, Clone, Default)]
+pub struct ArchitectureScanOptions {
+    pub config_path: Option<PathBuf>,
+    pub changed_only: bool,
+}
+
+#[derive(Debug, Clone, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ArchitectureScanReport {
+    pub schema: String,
+    pub graph: ArchitectureGraph,
+    pub files_scanned: usize,
+    pub changed_only_requested: bool,
+    pub changed_only_degraded_to_full_scan: bool,
+    pub changed_paths: Vec<String>,
+    #[serde(skip_serializing)]
+    pub config: ArchitectureConfig,
+    #[serde(skip_serializing)]
+    pub file_facts: BTreeMap<String, FileFact>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct FileFact {
+    pub path: String,
+    pub language: Option<String>,
+    pub line_count: usize,
+    pub layers: Vec<String>,
+    pub contexts: Vec<String>,
+    pub ignored: Option<String>,
+}
+
+pub fn scan_architecture(
+    root: &Path,
+    options: ArchitectureScanOptions,
+) -> Result<ArchitectureScanReport, NaomeError> {
+    let config = read_architecture_config(root, options.config_path.as_deref())?;
+    let changed_paths = changed_paths(root, options.changed_only)?;
+    let files = path_scan::repository_files(root, &config)?;
+    let (mut graph, file_facts) = graph_builder::build_path_graph(root, files, &config);
+
+    graph.sort_stable();
+    Ok(ArchitectureScanReport {
+        schema: "naome.arch.scan.v1".to_string(),
+        files_scanned: file_facts.len(),
+        graph,
+        changed_only_requested: options.changed_only,
+        changed_only_degraded_to_full_scan: options.changed_only,
+        changed_paths,
+        config,
+        file_facts,
+    })
+}
+
+fn changed_paths(root: &Path, changed_only: bool) -> Result<Vec<String>, NaomeError> {
+    if changed_only {
+        git::changed_paths(root)
+    } else {
+        Ok(Vec::new())
+    }
+}

package/crates/naome-core/src/architecture.rs

@@ -0,0 +1,31 @@
+mod config;
+mod model;
+mod output;
+mod rules;
+mod scan;
+
+use std::path::Path;
+
+use crate::models::NaomeError;
+
+pub use config::{
+    default_architecture_config_text, ArchitectureConfig, ContextConfig, LayerConfig, RuleConfig,
+};
+pub use model::{
+    ArchitectureEdge, ArchitectureEdgeKind, ArchitectureGraph, ArchitectureMetadata,
+    ArchitectureNode, ArchitectureNodeKind, SourceRange,
+};
+pub use output::{
+    format_architecture_explain, format_architecture_scan, format_architecture_validation,
+    ArchitectureAgentFeedback, ArchitectureValidation, ArchitectureViolation, Severity,
+    ViolationSummary,
+};
+pub use scan::{scan_architecture, ArchitectureScanOptions, ArchitectureScanReport};
+
+pub fn validate_architecture(
+    root: &Path,
+    options: ArchitectureScanOptions,
+) -> Result<ArchitectureValidation, NaomeError> {
+    let scan = scan_architecture(root, options)?;
+    Ok(rules::validate_scan(scan))
+}

package/crates/naome-core/src/install_plan.rs

@@ -12,6 +12,7 @@ pub const MACHINE_OWNED_PATHS: &[&str] = &[
     "docs/naome/agent-workflow.md",
     "docs/naome/context-economy.md",
     "docs/naome/task-ledger.md",
+    "docs/naome/architecture-fitness.md",
     "docs/naome/execution.md",
     "docs/naome/upgrade.md",
 ];
@@ -48,6 +49,7 @@ pub const LOCAL_ONLY_MACHINE_OWNED_PATHS: &[&str] = &[
     "docs/naome/agent-workflow.md",
     "docs/naome/context-economy.md",
     "docs/naome/task-ledger.md",
+    "docs/naome/architecture-fitness.md",
     "docs/naome/execution.md",
     "docs/naome/upgrade.md",
 ];

package/crates/naome-core/src/lib.rs

@@ -1,3 +1,4 @@
+mod architecture;
 mod context;
 mod decision;
 mod git;
@@ -19,6 +20,14 @@ mod verification_contract;
 mod verification_contract_policy;
 mod workflow;
 
+pub use architecture::{
+    default_architecture_config_text, format_architecture_explain, format_architecture_scan,
+    format_architecture_validation, scan_architecture, validate_architecture,
+    ArchitectureAgentFeedback, ArchitectureConfig, ArchitectureEdge, ArchitectureEdgeKind,
+    ArchitectureGraph, ArchitectureMetadata, ArchitectureNode, ArchitectureNodeKind,
+    ArchitectureScanOptions, ArchitectureScanReport, ArchitectureValidation, ArchitectureViolation,
+    ContextConfig, LayerConfig, RuleConfig, Severity, SourceRange, ViolationSummary,
+};
 pub use context::{
     select_context_for_changed_paths, select_context_for_prompt, ContextBudgetLedger,
     ContextCapsule, ContextItem, ContextSelection,
@@ -36,14 +45,13 @@ pub use journal::{append_task_journal, TaskJournalEntry};
 pub use models::{Decision, NaomeError};
 pub use quality::{
     check_repository_quality, check_repository_quality_paths, check_semantic_legacy,
-    check_semantic_legacy_paths,
-    clear_quality_cache, explain_repository_structure, init_repository_quality,
-    init_repository_quality_with_mode, plan_quality_cleanup, quality_cache_status,
-    reconcile_repository_quality, route_quality_cleanup, semantic_route_for_finding,
-    QualityCacheStatus, QualityCleanupPlan, QualityCleanupRoute, QualityCleanupTask,
-    QualityInitMode, QualityInitResult, QualityMode, QualityReconcileReport, QualityReport,
-    QualitySummary, QualityViolation, RepositoryQualityConfig, RepositoryStructureConfig,
-    SemanticFinding, SemanticReport, StructurePathExplanation,
+    check_semantic_legacy_paths, clear_quality_cache, explain_repository_structure,
+    init_repository_quality, init_repository_quality_with_mode, plan_quality_cleanup,
+    quality_cache_status, reconcile_repository_quality, route_quality_cleanup,
+    semantic_route_for_finding, QualityCacheStatus, QualityCleanupPlan, QualityCleanupRoute,
+    QualityCleanupTask, QualityInitMode, QualityInitResult, QualityMode, QualityReconcileReport,
+    QualityReport, QualitySummary, QualityViolation, RepositoryQualityConfig,
+    RepositoryStructureConfig, SemanticFinding, SemanticReport, StructurePathExplanation,
 };
 pub use repository_model::{
     explain_repository_model_path, refresh_repository_model, repository_model_drift,

package/crates/naome-core/tests/architecture.rs

@@ -0,0 +1,209 @@
+use std::fs;
+use std::path::{Path, PathBuf};
+use std::process::Command;
+use std::sync::atomic::{AtomicU64, Ordering};
+use std::time::{SystemTime, UNIX_EPOCH};
+
+use naome_core::{
+    default_architecture_config_text, scan_architecture, validate_architecture, ArchitectureConfig,
+    ArchitectureScanOptions,
+};
+
+static FIXTURE_COUNTER: AtomicU64 = AtomicU64::new(0);
+
+#[test]
+fn parses_starter_architecture_config() {
+    let config = ArchitectureConfig::parse(default_architecture_config_text(), "test").unwrap();
+
+    assert!(config.layers.contains_key("application"));
+    assert_eq!(
+        config.rule("max_file_lines").value,
+        Some(400),
+        "starter config should seed a production file-size budget"
+    );
+    assert_eq!(
+        config.ignore[0].reason,
+        "Generated code is not architecture-owned."
+    );
+}
+
+#[test]
+fn path_extractor_builds_language_agnostic_graph_for_mixed_repo() {
+    let repo = FixtureRepo::new();
+    repo.write("src/domain/event.ts", "export const event = 1;\n");
+    repo.write("src/infrastructure/db.py", "client = object()\n");
+    repo.write("cmd/server/main.go", "package main\n");
+    repo.write(
+        "naome.arch.yaml",
+        r#"
+layers:
+  domain:
+    paths:
+      - "src/domain/**"
+  infrastructure:
+    paths:
+      - "src/infrastructure/**"
+contexts:
+  app:
+    paths:
+      - "src/**"
+    public_api:
+      - "src/index.ts"
+rules:
+  max_file_lines:
+    enabled: true
+    value: 400
+    severity: warning
+"#,
+    );
+
+    let scan = scan_architecture(repo.path(), ArchitectureScanOptions::default()).unwrap();
+
+    assert!(scan
+        .graph
+        .nodes
+        .iter()
+        .any(|node| node.id == "file:src/domain/event.ts"));
+    assert!(scan
+        .graph
+        .nodes
+        .iter()
+        .any(|node| node.id == "layer:domain"));
+    assert!(scan
+        .graph
+        .edges
+        .iter()
+        .any(|edge| { edge.from == "layer:domain" && edge.to == "file:src/domain/event.ts" }));
+    assert_eq!(
+        scan.file_facts
+            .get("cmd/server/main.go")
+            .unwrap()
+            .language
+            .as_deref(),
+        Some("go")
+    );
+}
+
+#[test]
+fn validates_file_size_budget_with_stable_json_shape() {
+    let repo = FixtureRepo::new();
+    repo.write(
+        "naome.arch.yaml",
+        r#"
+rules:
+  max_file_lines:
+    enabled: true
+    value: 2
+    severity: error
+"#,
+    );
+    repo.write("src/too_big.rs", "one\ntwo\nthree\n");
+
+    let report = validate_architecture(repo.path(), ArchitectureScanOptions::default()).unwrap();
+    let json = serde_json::to_string(&report).unwrap();
+
+    assert_eq!(report.status, "fail");
+    assert!(json.contains("\"schema\":\"naome.arch.validation.v1\""));
+    assert!(json.contains("\"id\":\"arch.max_file_lines\""));
+    let violation = report
+        .violations
+        .iter()
+        .find(|violation| violation.path.as_deref() == Some("src/too_big.rs"))
+        .expect("expected src/too_big.rs file-size violation");
+    assert_eq!(violation.agent_instruction, "Reduce src/too_big.rs below 2 lines or add a justified generated-code ignore rule if it is not manually owned.");
+}
+
+#[test]
+fn changed_only_generated_boundary_reports_changed_generated_file() {
+    let repo = FixtureRepo::new();
+    repo.init_git();
+    repo.write(
+        "naome.arch.yaml",
+        r#"
+rules:
+  generated_manual_boundary:
+    enabled: true
+    severity: error
+ignore:
+  - path: "generated/**"
+    reason: "Generated code is not manually edited."
+"#,
+    );
+    repo.write("generated/client.ts", "export const generated = true;\n");
+
+    let report = validate_architecture(
+        repo.path(),
+        ArchitectureScanOptions {
+            changed_only: true,
+            config_path: None,
+        },
+    )
+    .unwrap();
+
+    assert_eq!(report.status, "fail");
+    assert!(report.changed_only_degraded_to_full_scan);
+    assert_eq!(report.violations[0].id, "arch.generated_manual_boundary");
+    assert_eq!(
+        report.violations[0].path.as_deref(),
+        Some("generated/client.ts")
+    );
+}
+
+struct FixtureRepo {
+    root: PathBuf,
+}
+
+impl FixtureRepo {
+    fn new() -> Self {
+        let nonce = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap()
+            .as_nanos();
+        let counter = FIXTURE_COUNTER.fetch_add(1, Ordering::Relaxed);
+        let root = std::env::temp_dir().join(format!(
+            "naome-arch-fixture-{}-{nonce}-{counter}",
+            std::process::id()
+        ));
+        fs::create_dir_all(&root).unwrap();
+        fs::write(
+            root.join(".naomeignore"),
+            ".naome/archive/\n.naome/tasks/\n",
+        )
+        .unwrap();
+        Self { root }
+    }
+
+    fn path(&self) -> &Path {
+        &self.root
+    }
+
+    fn write(&self, relative_path: &str, content: &str) {
+        let path = self.root.join(relative_path);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(path, content).unwrap();
+    }
+
+    fn init_git(&self) {
+        run_git(&self.root, &["init"]);
+        run_git(&self.root, &["config", "user.email", "naome@example.com"]);
+        run_git(&self.root, &["config", "user.name", "NAOME Test"]);
+        self.write("README.md", "# Fixture\n");
+        run_git(&self.root, &["add", "."]);
+        run_git(&self.root, &["commit", "-m", "baseline"]);
+    }
+}
+
+fn run_git(root: &Path, args: &[&str]) {
+    let result = Command::new("git")
+        .args(args)
+        .current_dir(root)
+        .output()
+        .unwrap();
+    assert!(
+        result.status.success(),
+        "git {:?} failed: {}{}",
+        args,
+        String::from_utf8_lossy(&result.stdout),
+        String::from_utf8_lossy(&result.stderr)
+    );
+}

package/crates/naome-core/tests/harness_health.rs

@@ -19,6 +19,7 @@ const MACHINE_OWNED_PATHS: &[&str] = &[
     "docs/naome/first-run.md",
     "docs/naome/agent-workflow.md",
     "docs/naome/context-economy.md",
+    "docs/naome/architecture-fitness.md",
     "docs/naome/execution.md",
     "docs/naome/task-ledger.md",
     "docs/naome/upgrade.md",

package/installer/harness-files.js

@@ -22,6 +22,7 @@ export function ensureCoreHarnessFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/task-ledger.md", archiveDirName);
   ensureTemplateFile(ctx, "docs/naome/repository-model.md");
   ensureTemplateFile(ctx, "docs/naome/security.md");
+  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
 }
 
@@ -39,6 +40,7 @@ export function ensureTaskControlHarnessFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/agent-workflow.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/context-economy.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/execution.md", archiveDirName);
+  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
 }
 
@@ -57,6 +59,7 @@ export function ensureHarnessHealthFiles(ctx, archiveDirName) {
   replaceHarnessFile(ctx, "docs/naome/context-economy.md", archiveDirName);
   replaceHarnessFile(ctx, "docs/naome/execution.md", archiveDirName);
   ensureTemplateFile(ctx, "docs/naome/security.md");
+  ensureTemplateFile(ctx, "docs/naome/architecture-fitness.md");
   replaceHarnessFile(ctx, "docs/naome/upgrade.md", archiveDirName);
   ensureNaomeIgnore(ctx);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lamentis/naome",
-  "version": "1.3.9",
+  "version": "1.3.10",
   "description": "Native-first CLI for the NAOME agent harness.",
   "license": "Apache-2.0",
   "type": "module",

package/templates/naome-root/.naome/bin/check-harness-health.js

@@ -10,18 +10,18 @@ const nativeBinaryName = process.platform === "win32" ? "naome.exe" : "naome";
 const expectedNativeBinaryIntegrity = "sha256:generated";
 
 const expectedMachineOwnedIntegrity = Object.freeze({
-  "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
-  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
-  ".naome/bin/naome.js": "sha256:a34c2e50a68d15ff2722a57590ccddc504e025d3c98ea62fd700d7ec1a789b9a",
-  ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
   ".naome/bin/check-harness-health.js": "sha256:802d7419774981a6af1826b3882270ff8f41259d516f98c52a02b4ddc184c467",
+  ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
+  ".naome/bin/naome.js": "sha256:f129c580fb70b3a1d92d0ab0de9fa6c131b2fc51a8dcdebe9d6f5a812a3be61b",
+  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
   ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
-  "docs/naome/index.md": "sha256:07ef776f49130319a5280bdb3ae38af22141708253f38eb983a4336fbae1b25a",
-  "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+  "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
   "docs/naome/agent-workflow.md": "sha256:0be1c29adfbcd3fd73c4f904080ffc67237692fe413871a30243538c4db38ac7",
   "docs/naome/context-economy.md": "sha256:3ed5075815ecf4ada46a5e65438769310307c35759fcd46b13dc0b96e02bebd9",
-  "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
   "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
+  "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+  "docs/naome/index.md": "sha256:cac748ed375d86d288460456fc5d606b29bd99d91148522c303d5400a083dbc5",
+  "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
   "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
 });
 

package/templates/naome-root/.naome/bin/check-task-state.js

@@ -10,18 +10,18 @@ const nativeBinaryName = process.platform === "win32" ? "naome.exe" : "naome";
 const expectedNativeBinaryIntegrity = "sha256:generated";
 
 const expectedMachineOwnedIntegrity = Object.freeze({
-  "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
-  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
-  ".naome/bin/naome.js": "sha256:a34c2e50a68d15ff2722a57590ccddc504e025d3c98ea62fd700d7ec1a789b9a",
-  ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
   ".naome/bin/check-harness-health.js": "sha256:802d7419774981a6af1826b3882270ff8f41259d516f98c52a02b4ddc184c467",
+  ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
+  ".naome/bin/naome.js": "sha256:f129c580fb70b3a1d92d0ab0de9fa6c131b2fc51a8dcdebe9d6f5a812a3be61b",
+  ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
   ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
-  "docs/naome/index.md": "sha256:07ef776f49130319a5280bdb3ae38af22141708253f38eb983a4336fbae1b25a",
-  "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+  "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
   "docs/naome/agent-workflow.md": "sha256:0be1c29adfbcd3fd73c4f904080ffc67237692fe413871a30243538c4db38ac7",
   "docs/naome/context-economy.md": "sha256:3ed5075815ecf4ada46a5e65438769310307c35759fcd46b13dc0b96e02bebd9",
-  "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
   "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
+  "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+  "docs/naome/index.md": "sha256:cac748ed375d86d288460456fc5d606b29bd99d91148522c303d5400a083dbc5",
+  "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
   "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
 });
 

package/templates/naome-root/.naome/bin/naome.js

@@ -27,7 +27,7 @@ function main(argv) {
     return;
   }
 
-  if (["status", "next", "intent", "route", "explain", "context", "doctor", "task", "quality", "semantic", "repo", "structure", "cleanup", "refresh-integrity", "workflow"].includes(command)) {
+  if (["status", "next", "intent", "route", "explain", "context", "doctor", "task", "quality", "semantic", "arch", "repo", "structure", "cleanup", "refresh-integrity", "workflow"].includes(command)) {
     runNativeDecisionCommand(command, args);
     return;
   }
@@ -367,7 +367,7 @@ function findAncestorWithAnyMarker(startPath, markers) {
 }
 
 function printHelp() {
-  const commands = "naome status [--json]|naome next [--json]|naome intent --prompt-file <path> [--json]|naome intent --prompt <text> [--json]|naome route --prompt-file <path> [--execute] [--json]|naome route --prompt <text> [--execute] [--json]|naome explain --prompt-file <path> [--json]|naome explain --prompt <text> [--json]|naome context select --changed [--json]|naome context select --prompt-file <path> [--json]|naome context select --prompt <text> [--json]|naome doctor [--json]|naome task render-state [--write] [--json]|naome task migrate-ledger [--write] [--json]|naome quality init [--baseline|--deep-baseline] [--json]|naome quality check --changed [--include-scanned-paths] [--json]|naome quality check --path <path> [--path <path>...] [--include-scanned-paths] [--json]|naome quality report [--deep] [--include-scanned-paths] [--json]|naome quality cache status [--json]|naome quality cache clear|naome semantic report [--deep] [--json]|naome semantic check --changed [--json]|naome semantic check --path <path> [--path <path>...] [--json]|naome semantic route --finding <id> [--json]|naome semantic loop [--json]|naome repo model [--write] [--json]|naome repo check [--json]|naome repo explain --path <path> [--json]|naome structure report [--json]|naome structure explain --path <path> [--json]|naome cleanup plan [--json]|naome cleanup route --path <path> [--json]|naome refresh-integrity [--json]|naome workflow agent-plan|context-delta|proof-plan|capabilities|edit-watchdog|decision-gate|digest [--json]|naome workflow search-profile|check-search|phases|processes|mutations [--json]|naome install|naome sync|naome commit -m \"type(scope): message\"|node .naome/bin/naome.js commit -m \"type(scope): message\"".split("|");
+  const commands = "naome status [--json]|naome next [--json]|naome intent --prompt-file <path> [--json]|naome intent --prompt <text> [--json]|naome route --prompt-file <path> [--execute] [--json]|naome route --prompt <text> [--execute] [--json]|naome explain --prompt-file <path> [--json]|naome explain --prompt <text> [--json]|naome context select --changed [--json]|naome context select --prompt-file <path> [--json]|naome context select --prompt <text> [--json]|naome doctor [--json]|naome task render-state [--write] [--json]|naome task migrate-ledger [--write] [--json]|naome quality init [--baseline|--deep-baseline] [--json]|naome quality check --changed [--include-scanned-paths] [--json]|naome quality check --path <path> [--path <path>...] [--include-scanned-paths] [--json]|naome quality report [--deep] [--include-scanned-paths] [--json]|naome quality cache status [--json]|naome quality cache clear|naome semantic report [--deep] [--json]|naome semantic check --changed [--json]|naome semantic check --path <path> [--path <path>...] [--json]|naome semantic route --finding <id> [--json]|naome semantic loop [--json]|naome arch init [--config <path>] [--json]|naome arch explain [--config <path>] [--json]|naome arch scan [--config <path>] [--changed-only] [--write] [--output <path>] [--json]|naome arch validate [--config <path>] [--changed-only] [--json|--agent-feedback]|naome repo model [--write] [--json]|naome repo check [--json]|naome repo explain --path <path> [--json]|naome structure report [--json]|naome structure explain --path <path> [--json]|naome cleanup plan [--json]|naome cleanup route --path <path> [--json]|naome refresh-integrity [--json]|naome workflow agent-plan|context-delta|proof-plan|capabilities|edit-watchdog|decision-gate|digest [--json]|naome workflow search-profile|check-search|phases|processes|mutations [--json]|naome install|naome sync|naome commit -m \"type(scope): message\"|node .naome/bin/naome.js commit -m \"type(scope): message\"".split("|");
   console.log(["Usage:", ...commands.map((command) => `  ${command}`)].join("\n"));
 }
 

package/templates/naome-root/.naome/manifest.json

@@ -1,19 +1,20 @@
 {
-  "harnessVersion": "1.3.9",
+  "harnessVersion": "1.3.10",
   "installedAt": null,
   "integrity": {
-    "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
-    ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
-    ".naome/bin/naome.js": "sha256:a34c2e50a68d15ff2722a57590ccddc504e025d3c98ea62fd700d7ec1a789b9a",
-    ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
     ".naome/bin/check-harness-health.js": "sha256:802d7419774981a6af1826b3882270ff8f41259d516f98c52a02b4ddc184c467",
+    ".naome/bin/check-task-state.js": "sha256:2612577b7e4ab45d9d39dd5ac54c8e7ed749d237d78f1a8d252f4dfa0b4eaaab",
+    ".naome/bin/naome.js": "sha256:f129c580fb70b3a1d92d0ab0de9fa6c131b2fc51a8dcdebe9d6f5a812a3be61b",
+    ".naome/package.json": "sha256:8005a3491db7d92f36ac66369861589f9c47123d3a7c71e643fc2c06168cd45a",
     ".naome/task-contract.schema.json": "sha256:1b3b62350328d0d6d660e36d1d1baaa2b88718530db774f9ab2a9e2fcba369c8",
-    "docs/naome/index.md": "sha256:07ef776f49130319a5280bdb3ae38af22141708253f38eb983a4336fbae1b25a",
-    "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+    "AGENTS.md": "sha256:e8b2fc786c1c72b69ba8f2b2ffce4f459e799c7453ce9ff4a9f6448a8f9e6b4f",
     "docs/naome/agent-workflow.md": "sha256:0be1c29adfbcd3fd73c4f904080ffc67237692fe413871a30243538c4db38ac7",
+    "docs/naome/architecture-fitness.md": "sha256:ec2cff9f2090d9b6bfeb2464a650cff97790c4d3e626fd40a42374d5f79c7c38",
     "docs/naome/context-economy.md": "sha256:3ed5075815ecf4ada46a5e65438769310307c35759fcd46b13dc0b96e02bebd9",
-    "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
     "docs/naome/execution.md": "sha256:bfc5d55838942ec8e3d790b59e3c634ff5bf6a2298265cef3dca9788a097eafb",
+    "docs/naome/first-run.md": "sha256:1466ce8c65e19a1514885f917db14e8a772350e3f6d1c03a66326963365919e1",
+    "docs/naome/index.md": "sha256:cac748ed375d86d288460456fc5d606b29bd99d91148522c303d5400a083dbc5",
+    "docs/naome/task-ledger.md": "sha256:6ca7222c80079b4662fb718d3c71d686770646f1fa52b83b0e90aed1c5a1101b",
     "docs/naome/upgrade.md": "sha256:2c60f0441bbd98bd528d109b30a7ded4b0ad55d61ffb9f52edac9e93b7999cb1"
   },
   "machineOwned": [
@@ -28,6 +29,7 @@
     "docs/naome/agent-workflow.md",
     "docs/naome/context-economy.md",
     "docs/naome/task-ledger.md",
+    "docs/naome/architecture-fitness.md",
     "docs/naome/execution.md",
     "docs/naome/upgrade.md"
   ],

package/templates/naome-root/.naome/verification.json

@@ -65,6 +65,19 @@
         ".naome/repository-quality-baseline.json"
       ],
       "lastVerified": null
+    },
+    {
+      "id": "architecture-fitness-check",
+      "command": "node .naome/bin/naome.js arch validate --changed-only",
+      "cwd": ".",
+      "purpose": "Validate changed files against deterministic NAOME architecture fitness rules.",
+      "cost": "fast",
+      "source": "NAOME built-in",
+      "evidence": [
+        "naome.arch.yaml",
+        "docs/naome/architecture-fitness.md"
+      ],
+      "lastVerified": null
     }
   ],
   "phases": [
@@ -81,7 +94,8 @@
       "order": 20,
       "checkIds": [
         "repository-quality-check",
-        "repository-semantic-check"
+        "repository-semantic-check",
+        "architecture-fitness-check"
       ]
     },
     {