@nathapp/nax 0.50.1 → 0.50.2

package/README.md

@@ -522,12 +522,16 @@ The hermetic requirement is injected into all code-writing prompts (test-writer,
 
 ### Configuration
 
+Configured under `quality.testing` — supports **per-package override** in monorepos.
+
 ```json
 {
-  "testing": {
-    "hermetic": true,
-    "externalBoundaries": ["claude", "acpx", "redis", "grpc"],
-    "mockGuidance": "Use injectable deps for CLI spawning, ioredis-mock for Redis"
+  "quality": {
+    "testing": {
+      "hermetic": true,
+      "externalBoundaries": ["claude", "acpx", "redis", "grpc"],
+      "mockGuidance": "Use injectable deps for CLI spawning, ioredis-mock for Redis"
+    }
   }
 }
 ```
@@ -540,7 +544,9 @@ The hermetic requirement is injected into all code-writing prompts (test-writer,
 
 > **Tip:** `externalBoundaries` and `mockGuidance` complement `context.md`. nax provides the rule ("mock all I/O"), while `context.md` provides project-specific knowledge ("use `ioredis-mock` for Redis"). Use both for best results.
 
-> **Opt-out:** Set `testing.hermetic: false` if your project requires real integration calls (e.g. live database tests against a local dev container).
+> **Monorepo:** Each package can override `quality.testing` in its own `packages/<name>/nax/config.json`. For example, `packages/api` can specify Redis boundaries while `packages/web` specifies HTTP-only.
+
+> **Opt-out:** Set `quality.testing.hermetic: false` if your project requires real integration calls (e.g. live database tests against a local dev container).
 
 ---
 

package/dist/nax.js

@@ -17678,7 +17678,7 @@ var init_zod = __esm(() => {
 });
 
 // src/config/schemas.ts
-var TokenPricingSchema, ModelDefSchema, ModelEntrySchema, ModelMapSchema, ModelTierSchema, TierConfigSchema, AutoModeConfigSchema, RectificationConfigSchema, RegressionGateConfigSchema, SmartTestRunnerConfigSchema, SMART_TEST_RUNNER_DEFAULT, smartTestRunnerFieldSchema, ExecutionConfigSchema, QualityConfigSchema, TddConfigSchema, ConstitutionConfigSchema, AnalyzeConfigSchema, ReviewConfigSchema, PlanConfigSchema, AcceptanceConfigSchema, TestCoverageConfigSchema, ContextAutoDetectConfigSchema, ContextConfigSchema, AdaptiveRoutingConfigSchema, LlmRoutingConfigSchema, RoutingConfigSchema, OptimizerConfigSchema, PluginConfigEntrySchema, HooksConfigSchema, InteractionConfigSchema, StorySizeGateConfigSchema, AgentConfigSchema, PrecheckConfigSchema, PromptsConfigSchema, TestingConfigSchema, DecomposeConfigSchema, NaxConfigSchema;
+var TokenPricingSchema, ModelDefSchema, ModelEntrySchema, ModelMapSchema, ModelTierSchema, TierConfigSchema, AutoModeConfigSchema, RectificationConfigSchema, RegressionGateConfigSchema, SmartTestRunnerConfigSchema, SMART_TEST_RUNNER_DEFAULT, smartTestRunnerFieldSchema, ExecutionConfigSchema, QualityConfigSchema, TddConfigSchema, ConstitutionConfigSchema, AnalyzeConfigSchema, ReviewConfigSchema, PlanConfigSchema, AcceptanceConfigSchema, TestCoverageConfigSchema, ContextAutoDetectConfigSchema, ContextConfigSchema, AdaptiveRoutingConfigSchema, LlmRoutingConfigSchema, RoutingConfigSchema, OptimizerConfigSchema, PluginConfigEntrySchema, HooksConfigSchema, InteractionConfigSchema, StorySizeGateConfigSchema, AgentConfigSchema, PrecheckConfigSchema, PromptsConfigSchema, DecomposeConfigSchema, NaxConfigSchema;
 var init_schemas3 = __esm(() => {
   init_zod();
   TokenPricingSchema = exports_external.object({
@@ -17818,7 +17818,12 @@ var init_schemas3 = __esm(() => {
       "SENTRY_AUTH_TOKEN",
       "DATADOG_API_KEY"
     ]),
-    environmentalEscalationDivisor: exports_external.number().min(1).max(10).default(2)
+    environmentalEscalationDivisor: exports_external.number().min(1).max(10).default(2),
+    testing: exports_external.object({
+      hermetic: exports_external.boolean().default(true),
+      externalBoundaries: exports_external.array(exports_external.string()).optional(),
+      mockGuidance: exports_external.string().optional()
+    }).optional()
   });
   TddConfigSchema = exports_external.object({
     maxRetries: exports_external.number().int().nonnegative(),
@@ -17965,11 +17970,6 @@ var init_schemas3 = __esm(() => {
       message: "Role must be one of: test-writer, implementer, verifier, single-session, tdd-simple"
     }), exports_external.string().min(1, "Override path must be non-empty")).optional()
   });
-  TestingConfigSchema = exports_external.object({
-    hermetic: exports_external.boolean().default(true),
-    externalBoundaries: exports_external.array(exports_external.string()).optional(),
-    mockGuidance: exports_external.string().optional()
-  });
   DecomposeConfigSchema = exports_external.object({
     trigger: exports_external.enum(["auto", "confirm", "disabled"]).default("auto"),
     maxAcceptanceCriteria: exports_external.number().int().min(1).default(6),
@@ -18000,8 +18000,7 @@ var init_schemas3 = __esm(() => {
     agent: AgentConfigSchema.optional(),
     precheck: PrecheckConfigSchema.optional(),
     prompts: PromptsConfigSchema.optional(),
-    decompose: DecomposeConfigSchema.optional(),
-    testing: TestingConfigSchema.optional()
+    decompose: DecomposeConfigSchema.optional()
   }).refine((data) => data.version === 1, {
     message: "Invalid version: expected 1",
     path: ["version"]
@@ -18118,7 +18117,10 @@ var init_defaults = __esm(() => {
         "SENTRY_AUTH_TOKEN",
         "DATADOG_API_KEY"
       ],
-      environmentalEscalationDivisor: 2
+      environmentalEscalationDivisor: 2,
+      testing: {
+        hermetic: true
+      }
     },
     tdd: {
       maxRetries: 2,
@@ -18206,9 +18208,6 @@ var init_defaults = __esm(() => {
       maxSubstoryComplexity: "medium",
       maxRetries: 2,
       model: "balanced"
-    },
-    testing: {
-      hermetic: true
     }
   };
 });
@@ -20827,7 +20826,8 @@ function mergePackageConfig(root, packageOverride) {
       commands: {
         ...root.quality.commands,
         ...packageOverride.quality?.commands
-      }
+      },
+      testing: packageOverride.quality?.testing !== undefined ? { ...root.quality.testing, ...packageOverride.quality.testing } : root.quality.testing
     },
     context: {
       ...root.context,
@@ -22351,7 +22351,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@nathapp/nax",
-    version: "0.50.1",
+    version: "0.50.2",
     description: "AI Coding Agent Orchestrator \u2014 loops until done",
     type: "module",
     bin: {
@@ -22425,8 +22425,8 @@ var init_version = __esm(() => {
   NAX_VERSION = package_default.version;
   NAX_COMMIT = (() => {
     try {
-      if (/^[0-9a-f]{6,10}$/.test("5ff4e09"))
-        return "5ff4e09";
+      if (/^[0-9a-f]{6,10}$/.test("c3a5edb"))
+        return "c3a5edb";
     } catch {}
     try {
       const result = Bun.spawnSync(["git", "rev-parse", "--short", "HEAD"], {
@@ -27659,13 +27659,13 @@ async function runTddSession(role, agent, story, config2, workdir, modelTier, be
   } else {
     switch (role) {
       case "test-writer":
-        prompt = await PromptBuilder.for("test-writer", { isolation: lite ? "lite" : "strict" }).withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.testing).build();
+        prompt = await PromptBuilder.for("test-writer", { isolation: lite ? "lite" : "strict" }).withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.quality?.testing).build();
         break;
       case "implementer":
-        prompt = await PromptBuilder.for("implementer", { variant: lite ? "lite" : "standard" }).withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.testing).build();
+        prompt = await PromptBuilder.for("implementer", { variant: lite ? "lite" : "standard" }).withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.quality?.testing).build();
         break;
       case "verifier":
-        prompt = await PromptBuilder.for("verifier").withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.testing).build();
+        prompt = await PromptBuilder.for("verifier").withLoader(workdir, config2).story(story).context(contextMarkdown).constitution(constitution).testCommand(config2.quality?.commands?.test).hermeticConfig(config2.quality?.testing).build();
         break;
     }
   }
@@ -28788,11 +28788,11 @@ var init_prompt = __esm(() => {
       const effectiveConfig = ctx.effectiveConfig ?? ctx.config;
       let prompt;
       if (isBatch) {
-        const builder = PromptBuilder.for("batch").withLoader(ctx.workdir, ctx.config).stories(ctx.stories).context(ctx.contextMarkdown).constitution(ctx.constitution?.content).testCommand(effectiveConfig.quality?.commands?.test).hermeticConfig(effectiveConfig.testing);
+        const builder = PromptBuilder.for("batch").withLoader(ctx.workdir, ctx.config).stories(ctx.stories).context(ctx.contextMarkdown).constitution(ctx.constitution?.content).testCommand(effectiveConfig.quality?.commands?.test).hermeticConfig(effectiveConfig.quality?.testing);
         prompt = await builder.build();
       } else {
         const role = "tdd-simple";
-        const builder = PromptBuilder.for(role).withLoader(ctx.workdir, ctx.config).story(ctx.story).context(ctx.contextMarkdown).constitution(ctx.constitution?.content).testCommand(effectiveConfig.quality?.commands?.test).hermeticConfig(effectiveConfig.testing);
+        const builder = PromptBuilder.for(role).withLoader(ctx.workdir, ctx.config).story(ctx.story).context(ctx.contextMarkdown).constitution(ctx.constitution?.content).testCommand(effectiveConfig.quality?.commands?.test).hermeticConfig(effectiveConfig.quality?.testing);
         prompt = await builder.build();
       }
       ctx.prompt = prompt;
@@ -69678,10 +69678,10 @@ var FIELD_DESCRIPTIONS = {
   agent: "Agent protocol configuration (ACP-003)",
   "agent.protocol": "Protocol for agent communication: 'acp' | 'cli' (default: 'acp')",
   "agent.maxInteractionTurns": "Max turns in multi-turn interaction loop when interactionBridge is active (default: 10)",
-  testing: "Hermetic test enforcement configuration (ENH-010)",
-  "testing.hermetic": "Inject hermetic test requirement into prompts \u2014 never call real external services in tests (default: true)",
-  "testing.externalBoundaries": "Project-specific CLI tools/clients to mock (e.g. ['claude', 'acpx', 'redis'])",
-  "testing.mockGuidance": "Project-specific mocking guidance injected verbatim into the prompt"
+  "quality.testing": "Hermetic test enforcement \u2014 per-package overridable (ENH-010)",
+  "quality.testing.hermetic": "Inject hermetic test requirement into prompts \u2014 never call real external services in tests (default: true)",
+  "quality.testing.externalBoundaries": "Project-specific CLI tools/clients to mock (e.g. ['claude', 'acpx', 'redis'])",
+  "quality.testing.mockGuidance": "Project-specific mocking guidance injected verbatim into the prompt"
 };
 
 // src/cli/config-diff.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nathapp/nax",
-  "version": "0.50.1",
+  "version": "0.50.2",
   "description": "AI Coding Agent Orchestrator — loops until done",
   "type": "module",
   "bin": {

package/src/cli/config-descriptions.ts

@@ -209,10 +209,10 @@ export const FIELD_DESCRIPTIONS: Record<string, string> = {
   "agent.protocol": "Protocol for agent communication: 'acp' | 'cli' (default: 'acp')",
   "agent.maxInteractionTurns":
     "Max turns in multi-turn interaction loop when interactionBridge is active (default: 10)",
-  // Testing
-  testing: "Hermetic test enforcement configuration (ENH-010)",
-  "testing.hermetic":
+  // quality.testing (ENH-010) — per-package overridable
+  "quality.testing": "Hermetic test enforcement — per-package overridable (ENH-010)",
+  "quality.testing.hermetic":
     "Inject hermetic test requirement into prompts — never call real external services in tests (default: true)",
-  "testing.externalBoundaries": "Project-specific CLI tools/clients to mock (e.g. ['claude', 'acpx', 'redis'])",
-  "testing.mockGuidance": "Project-specific mocking guidance injected verbatim into the prompt",
+  "quality.testing.externalBoundaries": "Project-specific CLI tools/clients to mock (e.g. ['claude', 'acpx', 'redis'])",
+  "quality.testing.mockGuidance": "Project-specific mocking guidance injected verbatim into the prompt",
 };

package/src/config/defaults.ts

@@ -121,6 +121,9 @@ export const DEFAULT_CONFIG: NaxConfig = {
       "DATADOG_API_KEY",
     ],
     environmentalEscalationDivisor: 2,
+    testing: {
+      hermetic: true,
+    },
   },
   tdd: {
     maxRetries: 2,
@@ -211,7 +214,4 @@ export const DEFAULT_CONFIG: NaxConfig = {
     maxRetries: 2,
     model: "balanced",
   },
-  testing: {
-    hermetic: true,
-  },
 };

package/src/config/merge.ts

@@ -15,7 +15,7 @@ import type { NaxConfig } from "./schema";
  * - execution: smartTestRunner, regressionGate (deep), verificationTimeoutSeconds
  * - review: enabled, checks, commands (deep), pluginMode
  * - acceptance: enabled, generateTests, testPath
- * - quality: requireTests, requireTypecheck, requireLint, commands (deep)
+ * - quality: requireTests, requireTypecheck, requireLint, commands (deep), testing (deep)
  * - context: testCoverage (deep)
  *
  * All other sections (models, autoMode, routing, agent, generate, tdd,
@@ -89,6 +89,11 @@ export function mergePackageConfig(root: NaxConfig, packageOverride: Partial<Nax
         ...root.quality.commands,
         ...packageOverride.quality?.commands,
       },
+      // ENH-010: deep-merge testing config so per-package overrides work
+      testing:
+        packageOverride.quality?.testing !== undefined
+          ? { ...root.quality.testing, ...packageOverride.quality.testing }
+          : root.quality.testing,
     },
     context: {
       ...root.context,

package/src/config/runtime-types.ts

@@ -160,6 +160,8 @@ export interface QualityConfig {
   stripEnvVars: string[];
   /** Divisor for environmental failure early escalation (default: 2 = half the tier budget) */
   environmentalEscalationDivisor: number;
+  /** Hermetic test enforcement settings (ENH-010). Supports per-package override. */
+  testing?: TestingConfig;
 }
 
 /** TDD config */
@@ -495,8 +497,6 @@ export interface NaxConfig {
   decompose?: DecomposeConfig;
   /** Agent protocol settings (ACP-003) */
   agent?: AgentConfig;
-  /** Hermetic test enforcement settings (ENH-010) */
-  testing?: TestingConfig;
   /** Generate settings */
   generate?: GenerateConfig;
 }

package/src/config/schemas.ts

@@ -175,6 +175,29 @@ const QualityConfigSchema = z.object({
       "DATADOG_API_KEY",
     ]),
   environmentalEscalationDivisor: z.number().min(1).max(10).default(2),
+  testing: z
+    .object({
+      /**
+       * When true (default), nax injects a hermetic test requirement into all code-writing prompts.
+       * Instructs the AI to mock all I/O boundaries (HTTP, CLI spawning, databases, etc.)
+       * and never invoke real external processes or services during test execution.
+       * Set to false only if your project requires real integration calls in tests.
+       */
+      hermetic: z.boolean().default(true),
+      /**
+       * Project-specific external boundaries the AI should watch for and mock.
+       * E.g. ["claude", "acpx", "redis", "grpc"] — any CLI tools, clients, or services
+       * the project uses that should never be called from tests.
+       */
+      externalBoundaries: z.array(z.string()).optional(),
+      /**
+       * Project-specific guidance on how to mock external dependencies.
+       * Injected verbatim into the hermetic requirement section of the prompt.
+       * E.g. "Use injectable deps for CLI spawning, ioredis-mock for Redis"
+       */
+      mockGuidance: z.string().optional(),
+    })
+    .optional(),
 });
 
 const TddConfigSchema = z.object({
@@ -362,28 +385,6 @@ export const PromptsConfigSchema = z.object({
     .optional(),
 });
 
-const TestingConfigSchema = z.object({
-  /**
-   * When true (default), nax injects a hermetic test requirement into all code-writing prompts.
-   * Instructs the AI to mock all I/O boundaries (HTTP, CLI spawning, databases, etc.)
-   * and never invoke real external processes or services during test execution.
-   * Set to false only if your project requires real integration calls in tests.
-   */
-  hermetic: z.boolean().default(true),
-  /**
-   * Project-specific external boundaries the AI should watch for and mock.
-   * E.g. ["claude", "acpx", "redis", "grpc"] — any CLI tools, clients, or services
-   * the project uses that should never be called from tests.
-   */
-  externalBoundaries: z.array(z.string()).optional(),
-  /**
-   * Project-specific guidance on how to mock external dependencies.
-   * Injected verbatim into the hermetic requirement section of the prompt.
-   * E.g. "Use injectable deps for CLI spawning, ioredis-mock for Redis"
-   */
-  mockGuidance: z.string().optional(),
-});
-
 const DecomposeConfigSchema = z.object({
   trigger: z.enum(["auto", "confirm", "disabled"]).default("auto"),
   maxAcceptanceCriteria: z.number().int().min(1).default(6),
@@ -417,7 +418,6 @@ export const NaxConfigSchema = z
     precheck: PrecheckConfigSchema.optional(),
     prompts: PromptsConfigSchema.optional(),
     decompose: DecomposeConfigSchema.optional(),
-    testing: TestingConfigSchema.optional(),
   })
   .refine((data) => data.version === 1, {
     message: "Invalid version: expected 1",

package/src/pipeline/stages/prompt.ts

@@ -45,7 +45,7 @@ export const promptStage: PipelineStage = {
         .context(ctx.contextMarkdown)
         .constitution(ctx.constitution?.content)
         .testCommand(effectiveConfig.quality?.commands?.test)
-        .hermeticConfig(effectiveConfig.testing);
+        .hermeticConfig(effectiveConfig.quality?.testing);
       prompt = await builder.build();
     } else {
       // Both test-after and tdd-simple use the tdd-simple prompt (RED/GREEN/REFACTOR)
@@ -56,7 +56,7 @@ export const promptStage: PipelineStage = {
         .context(ctx.contextMarkdown)
         .constitution(ctx.constitution?.content)
         .testCommand(effectiveConfig.quality?.commands?.test)
-        .hermeticConfig(effectiveConfig.testing);
+        .hermeticConfig(effectiveConfig.quality?.testing);
       prompt = await builder.build();
     }
 

package/src/tdd/session-runner.ts

@@ -133,7 +133,7 @@ export async function runTddSession(
           .context(contextMarkdown)
           .constitution(constitution)
           .testCommand(config.quality?.commands?.test)
-          .hermeticConfig(config.testing)
+          .hermeticConfig(config.quality?.testing)
           .build();
         break;
       case "implementer":
@@ -143,7 +143,7 @@ export async function runTddSession(
           .context(contextMarkdown)
           .constitution(constitution)
           .testCommand(config.quality?.commands?.test)
-          .hermeticConfig(config.testing)
+          .hermeticConfig(config.quality?.testing)
           .build();
         break;
       case "verifier":
@@ -153,7 +153,7 @@ export async function runTddSession(
           .context(contextMarkdown)
           .constitution(constitution)
           .testCommand(config.quality?.commands?.test)
-          .hermeticConfig(config.testing)
+          .hermeticConfig(config.quality?.testing)
           .build();
         break;
     }