@nimiplatform/nimi-coding 0.1.0 → 0.2.0

package/cli/seeds/seed-policy.yaml

@@ -0,0 +1,67 @@
+policy_id: nimicoding.seed-projection.v1
+description: |
+  Single source of truth for how nimi-coding package source is projected into
+  a host project's .nimi/** bootstrap surface. Every entry under the declared
+  source dirs is projected unless excluded; per-path ownership overrides
+  control whether the projected file stays package-canonical (refresh on sync,
+  drift is an error) or only carries the initial seed (host owns drift).
+
+projections:
+  - source_dir: config
+    output_dir: .nimi/config
+  - source_dir: contracts
+    output_dir: .nimi/contracts
+  - source_dir: methodology
+    output_dir: .nimi/methodology
+
+default_ownership: package_canonical
+
+ownership_semantics:
+  package_canonical:
+    initial_seed: true
+    refresh_on_sync: true
+    drift_is_error: true
+    description: |
+      Package source is canonical truth. nimicoding sync --apply rewrites
+      drifted host copies. nimicoding sync --check exits non-zero on any
+      drift or missing entry. doctor performs byte comparison.
+  host_state_seed:
+    initial_seed: true
+    refresh_on_sync: false
+    drift_is_error: false
+    description: |
+      Package ships an initial seed, but host owns the canonical content
+      after first install. nimicoding sync --apply only writes when the
+      host file is missing. Drift never fails sync or doctor.
+  host_profile_override:
+    initial_seed: true
+    refresh_on_sync: false
+    drift_is_error: false
+    description: |
+      Package ships the generic default, but an admitted host profile may own
+      the canonical content after bootstrap. nimicoding sync --apply only
+      writes when the host file is missing. Drift never fails sync or doctor.
+
+excluded_projection:
+  - methodology/spec-target-truth-profile.yaml
+
+ownership_overrides:
+  - path: .nimi/config/spec-generation-inputs.yaml
+    ownership: host_state_seed
+    reason: |
+      spec-generation-inputs carries host-specific reconstruction inputs
+      (code_roots, docs_roots, human_note_paths, blueprint refs). Package
+      only seeds the initial template; once the host populates real input
+      paths, sync --apply must not overwrite them.
+  - path: .nimi/contracts/domain-admission.schema.yaml
+    ownership: host_profile_override
+    reason: |
+      domain-admission is host-profile-specific. The package owns the generic
+      default project skeleton, while a product host such as Nimi owns its
+      admitted product domain list.
+  - path: .nimi/methodology/spec-reconstruction.yaml
+    ownership: host_profile_override
+    reason: |
+      spec-reconstruction declares host-specific required output domains and
+      generation shape. The package owns the generic default project skeleton,
+      while a product host may own a more specific reconstruction profile.

package/config/bootstrap.yaml

@@ -1,6 +1,6 @@
 version: 1
 initialized_by: "@nimiplatform/nimi-coding"
-cli_version: "0.1.0"
+cli_version: "0.2.0"
 bootstrap_contract: "nimicoding.bootstrap"
 bootstrap_contract_version: 1
 profile: default

package/config/skill-manifest.yaml

@@ -15,8 +15,10 @@ skills:
     inputs:
       - .nimi/config/spec-generation-inputs.yaml
       - .nimi/methodology/spec-reconstruction.yaml
-      - .nimi/spec/_meta/spec-tree-model.yaml
-      - .nimi/spec/bootstrap-state.yaml
+      - .nimi/contracts/surface-taxonomy.schema.yaml
+      - .nimi/contracts/placement-contract.schema.yaml
+      - .nimi/contracts/table-family.schema.yaml
+      - .nimi/contracts/domain-admission.schema.yaml
   - id: doc_spec_audit
     source: external
     required: true

package/config/spec-generation-inputs.yaml

@@ -1,25 +1,47 @@
-version: 1
+version: 2
 contract_ref: .nimi/contracts/spec-generation-inputs.schema.yaml
 spec_generation_inputs:
-  mode: mixed
+  mode: class_filtered
   canonical_target_root: .nimi/spec
-  code_roots: []
-  docs_roots:
-    - README.md
-  structure_roots:
-    - .
-  human_note_paths: []
-  benchmark_blueprint_root: null
-  benchmark_mode: none
-  acceptance_mode: canonical_tree_validity_without_blueprint
+  code_inputs: []
+  docs_inputs:
+    - root: .nimi/spec
+      class_filter: product_authority_only
+      allowed_surface_classes: [product_authority, product_authority_table, product_admission_registry, thin_guidance, host_projection_anchor, support_registry]
+      forbidden_surface_classes: [derived_view, spec_generation_state, audit_evidence_state, operational_local_artifact, nimicoding_managed_projection, candidate_roadmap, lifecycle_progress_state, methodology_authority]
+      owner: nimi_host
+      use_as_authority: true
+      projection_edge_ref: null
+  structure_inputs: []
+  topic_inputs:
+    - root: .nimi/topics
+      owner: topic_lifecycle
+      allowed_surface_classes: [lifecycle_progress_state, candidate_roadmap]
+      use_as_authority: false
+  local_inputs:
+    - root: .nimi/local
+      owner: local_execution
+      allowed_surface_classes: [spec_generation_state, audit_evidence_state, operational_local_artifact, lifecycle_progress_state]
+      use_as_authority: false
+  forbidden_source_classes:
+    - derived_view
+    - spec_generation_state
+    - audit_evidence_state
+    - operational_local_artifact
+    - nimicoding_managed_projection
+    - candidate_roadmap
+    - lifecycle_progress_state
   generation_order:
-    - index
-    - kernel_markdown
-    - kernel_tables
-    - generated_views
+    - classify_inputs
+    - validate_placement
+    - product_authority
+    - product_authority_tables
     - thin_guides
+    - derived_views
+    - generation_audit
   inference_rules:
-    - infer_domains_from_available_source_materials_when_no_blueprint_exists
-    - separate_normative_kernel_from_generated_and_guidance_surfaces
-    - establish_kernel_markdown_before_thin_guides
-    - establish_kernel_tables_before_generated_views
+    - no_blanket_docs_roots
+    - no_generated_as_authority
+    - no_derived_views_written_to_local
+    - no_audit_or_lifecycle_state_as_authority
+  acceptance_mode: placement_validity_before_generation

package/contracts/audit-remediation-map.schema.yaml

@@ -49,3 +49,4 @@ hard_constraints:
   - duplicate_symptoms_do_not_count_as_independent_remediation_obligations_by_default
   - write_set_conflicts_must_be_visible
   - needs_decision_findings_require_manager_decision_admission
+  - remediation_map_is_not_a_substitute_for_sweep_design_when_fork_review_or_user_decision_is_required

package/contracts/audit-sweep-result.yaml

@@ -1,6 +1,9 @@
 version: 1
 result_contract:
   id: delegated_audit_sweep_result
+command_family:
+  canonical_entrypoint: "nimicoding sweep audit"
+  removed_entrypoint: "nimicoding audit-sweep"
 summary_required_fields:
   - plan_ref
   - chunk_refs
@@ -43,6 +46,7 @@ locality: local_only
 semantic_constraints:
   - do_not_promote_audit_sweep_summary_to_project_truth
   - do_not_treat_external_audit_sweep_summary_as_remediation_or_closure_judgement
+  - use_sweep_design_for_finding_confirmation_clustering_fork_review_user_decision_and_wave_planning
   - candidate_ready_requires_full_authority_and_evidence_coverage
   - full_coverage_status_requires_candidate_ready_ledger
   - spec_authority_sweeps_must_report_authority_coverage_and_evidence_coverage_separately

package/contracts/domain-admission.schema.yaml

@@ -0,0 +1,56 @@
+version: 1
+contract:
+  id: nimicoding.domain-admission.v1
+  owner: nimi-coding
+  purpose: Require explicit admission for every host spec domain before it is product authority.
+required_top_level_fields:
+  - version
+  - domain_admissions
+  - domain_authority_class_enum
+  - semantic_constraints
+domain_admission_required_fields:
+  - domain_id
+  - domain_root
+  - authority_class
+  - owner
+  - admitted_by
+  - allowed_surface_classes
+  - forbidden_surface_classes
+  - validation_commands
+  - migration_disposition_when_unadmitted
+shared_enum_ref: shared-enums.yaml
+domain_admissions:
+  - domain_id: project
+    domain_root: .nimi/spec/project
+    authority_class: active_product
+    owner: project
+    admitted_by: nimicoding_init_default_project_domain
+    allowed_surface_classes: [product_authority, product_authority_table, thin_guidance, support_registry]
+    forbidden_surface_classes: [derived_view, spec_generation_state, audit_evidence_state, lifecycle_progress_state, candidate_roadmap, methodology_authority]
+    validation_commands: [pnpm exec nimicoding validate-spec-tree -- .nimi/spec]
+    migration_disposition_when_unadmitted: block
+domain_authority_class_enum:
+  - active_product
+  - package_projection_anchor_only
+  - migration_input_only
+  - excluded_from_spec
+migration_disposition_when_unadmitted_enum:
+  - move_local
+  - move_package
+  - split
+  - delete
+  - block
+domain_rules:
+  - domain_id: project
+    required_authority_class: active_product
+    admission_required: true
+semantic_constraints:
+  - directory_presence_does_not_admit_product_authority
+  - unadmitted_domain_must_not_be_used_as_implementation_authority
+  - product_domain_admission_must_name_validation_commands
+  - package_projection_domains_must_not_define_product_rules
+  - active_product_domain_does_not_admit_generated_evidence_or_state_surfaces
+  - product_authority_tables_must_declare_table_family
+  - thin_guidance_must_not_carry_rule_body
+  - package_default_domain_admission_must_remain_generic_project_skeleton
+  - product_hosts_must_own_domain_specific_admission_as_host_profile_override

package/contracts/migration-inventory.schema.yaml

@@ -0,0 +1,80 @@
+version: 1
+contract:
+  id: nimicoding.spec-migration-inventory.v1
+  owner: nimi-coding
+  purpose: Define machine-readable classification and migration output for current host spec surfaces.
+required_top_level_fields:
+  - version
+  - inventory
+  - disposition_enum
+  - target_class_enum
+  - semantic_constraints
+inventory_entry_required_fields:
+  - source_path
+  - current_inferred_class
+  - target_class
+  - disposition
+  - target_root
+  - owner
+  - required_confirmation
+  - ambiguity
+  - evidence
+  - validation_commands
+shared_enum_ref: shared-enums.yaml
+disposition_enum:
+  - keep
+  - move_package
+  - move_local
+  - split
+  - rewrite
+  - delete
+  - block
+target_class_enum:
+  - product_authority
+  - product_authority_table
+  - product_admission_registry
+  - thin_guidance
+  - derived_view
+  - spec_generation_state
+  - audit_evidence_state
+  - operational_local_artifact
+  - methodology_authority
+  - host_projection_anchor
+  - nimicoding_managed_projection
+  - candidate_roadmap
+  - support_registry
+  - lifecycle_progress_state
+required_confirmation_enum:
+  - none
+  - product_semantic_fork
+  - owner_ambiguity
+  - package_boundary_ambiguity
+  - destructive_deletion
+ambiguity_required_fields:
+  - posture
+  - reason
+  - candidate_owners
+ambiguity_posture_enum:
+  - none
+  - blocks_migration
+inventory: []
+inventory_generation_rules:
+  - classify_every_file_under_.nimi/spec
+  - classify_nimicoding_managed_projections_under_.nimi/methodology_.nimi/contracts_and_.nimi/config
+  - generate_split_children_for_mixed_authority_and_state_files
+  - use_block_only_for_user_confirmation_cases
+  - use_keep_for_nimicoding_init_or_sync_managed_projections
+  - use_move_package_for_package_methodology_when_copied_under_.nimi/spec
+  - use_move_local_for_audit_lifecycle_and_operational_state
+  - use_delete_for_derived_views_with_stdout_view_replacement
+  - use_delete_for_obsolete_generated_or_one_time_state_without_durable_target
+semantic_constraints:
+  - inventory_must_not_modify_files
+  - every_candidate_source_gets_one_inventory_entry_or_split_children
+  - split_entries_must_name_child_targets
+  - block_entries_require_user_confirmation_before_migration
+  - future_under_spec_must_not_have_keep_disposition
+  - nimicoding_managed_projection_must_have_keep_disposition_and_must_not_be_promoted_to_product_authority
+  - product_admission_registry_must_not_be_moved_to_package
+  - generated_views_default_to_delete_with_stdout_view
+  - audit_state_defaults_to_move_local

package/contracts/negative-fixtures.yaml

@@ -0,0 +1,91 @@
+version: 1
+contract:
+  id: nimicoding.spec-surface-negative-fixtures.v1
+  owner: nimi-coding
+fixture_required_fields:
+  - fixture_id
+  - contract_ref
+  - setup
+  - expected_failure
+  - validator_scope
+fixtures:
+  - fixture_id: generated_view_under_product_authority
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/spec/runtime/kernel/generated/example.md
+    expected_failure: derived_view_under_product_authority_root
+    validator_scope: placement
+  - fixture_id: spec_generation_state_under_meta
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/spec/_meta/spec-generation-audit.yaml
+    expected_failure: spec_generation_state_under_spec
+    validator_scope: placement
+  - fixture_id: rule_evidence_with_coverage_status_under_kernel_tables
+    contract_ref: table-family.schema.yaml
+    setup: .nimi/spec/runtime/kernel/tables/rule-evidence.yaml with coverage_status
+    expected_failure: table_contains_forbidden_state_or_audit_field
+    validator_scope: table_family
+  - fixture_id: future_backlog_under_spec
+    contract_ref: domain-admission.schema.yaml
+    setup: .nimi/spec/future/kernel/tables/backlog-items.yaml
+    expected_failure: excluded_domain_retained_under_spec
+    validator_scope: domain_admission
+  - fixture_id: thin_guidance_with_normative_body
+    contract_ref: surface-taxonomy.schema.yaml
+    setup: .nimi/spec/desktop/local-ai.md containing MUST or 必须
+    expected_failure: guidance_defines_rule_body
+    validator_scope: guidance
+  - fixture_id: package_methodology_copied_to_spec
+    contract_ref: projection-edge.schema.yaml
+    setup: .nimi/spec/product-scope.yaml containing package methodology body
+    expected_failure: package_body_promoted_to_product_authority
+    validator_scope: projection
+  - fixture_id: nimicoding_managed_projection_passes
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/contracts/topic.schema.yaml as init-managed projection
+    expected_failure: none
+    validator_scope: placement
+  - fixture_id: nimicoding_config_projection_passes
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/config/spec-generation-inputs.yaml as init-managed projection
+    expected_failure: none
+    validator_scope: placement
+  - fixture_id: nimicoding_methodology_projection_passes
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/methodology/spec-reconstruction.yaml as init-managed projection
+    expected_failure: none
+    validator_scope: placement
+  - fixture_id: blanket_v2_docs_input_root
+    contract_ref: spec-generation-inputs.schema.yaml
+    setup: .nimi/config/spec-generation-inputs.yaml docs_inputs root "."
+    expected_failure: invalid_spec_generation_inputs_config
+    validator_scope: doctor
+  - fixture_id: lifecycle_cutover_status_under_spec
+    contract_ref: placement-contract.schema.yaml
+    setup: .nimi/spec/_meta/spec-authority-cutover-readiness.yaml with current phase/status
+    expected_failure: lifecycle_progress_state_under_spec
+    validator_scope: placement
+  - fixture_id: generated_file_referenced_as_authority
+    contract_ref: projection-edge.schema.yaml
+    setup: product authority markdown links to .nimi/spec/runtime/kernel/generated/rule-evidence.md as authority
+    expected_failure: derived_view_referenced_as_authority
+    validator_scope: projection
+  - fixture_id: kernel_table_without_family
+    contract_ref: table-family.schema.yaml
+    setup: .nimi/spec/runtime/kernel/tables/example.yaml without table_family
+    expected_failure: missing_table_family
+    validator_scope: table_family
+  - fixture_id: tracked_non_product_without_admission
+    contract_ref: tracked-output-admission.schema.yaml
+    setup: .nimi/audit/example.yaml
+    expected_failure: tracked_non_product_without_admission
+    validator_scope: tracked_output
+  - fixture_id: valid_state_machine_table_passes
+    contract_ref: table-family.schema.yaml
+    setup: .nimi/spec/runtime/kernel/tables/job-states.yaml with table_family state_machine
+    expected_failure: none
+    validator_scope: table_family
+  - fixture_id: valid_minimal_package_anchor_passes
+    contract_ref: projection-edge.schema.yaml
+    setup: .nimi/spec/_meta/nimi-coding-admission-anchor.yaml with package id/version/root/edge refs only
+    expected_failure: none
+    validator_scope: projection

package/contracts/placement-contract.schema.yaml

@@ -0,0 +1,163 @@
+version: 1
+contract:
+  id: nimicoding.placement-contract.v1
+  owner: nimi-coding
+  purpose: Bind roots to surface classes and fail closed on mismatches.
+required_top_level_fields:
+  - version
+  - placement_rules
+  - root_policy
+  - forbidden_roots
+  - fail_closed_cases
+placement_rule_required_fields:
+  - root_pattern
+  - allowed_classes
+  - owner
+  - tracking_policy
+  - requires_admission
+  - validator_scope
+shared_enum_ref: shared-enums.yaml
+placement_rules:
+  - root_pattern: .nimi/spec/<domain>/kernel/*.md
+    allowed_classes: [product_authority]
+    owner: product_domain
+    tracking_policy: tracked_required
+    requires_admission: domain_admission
+    validator_scope: product_authority
+  - root_pattern: .nimi/spec/<domain>/kernel/tables/*.yaml
+    allowed_classes: [product_authority_table, support_registry]
+    owner: product_domain
+    tracking_policy: tracked_required
+    requires_admission: domain_admission_and_table_family
+    validator_scope: table_family
+  - root_pattern: .nimi/spec/<domain>/*.md
+    allowed_classes: [thin_guidance]
+    owner: product_domain
+    tracking_policy: tracked_required
+    requires_admission: domain_admission
+    validator_scope: thin_guidance
+  - root_pattern: .nimi/spec/INDEX.md
+    allowed_classes: [thin_guidance]
+    owner: product_domain
+    tracking_policy: tracked_required
+    requires_admission: none
+    validator_scope: thin_guidance
+  - root_pattern: .nimi/spec/high-risk-admissions.yaml
+    allowed_classes: [product_admission_registry]
+    owner: product_governance
+    tracking_policy: tracked_required
+    requires_admission: packaged_schema
+    validator_scope: product_admission_registry
+  - root_pattern: .nimi/spec/_meta/<package>-admission-anchor.yaml
+    allowed_classes: [host_projection_anchor]
+    owner: host_projection
+    tracking_policy: tracked_only_with_explicit_admission
+    requires_admission: projection_edge
+    validator_scope: host_projection
+  - root_pattern: .nimi/config/host-overlay.yaml
+    allowed_classes: [host_projection_anchor]
+    owner: host_projection
+    tracking_policy: tracked_only_with_explicit_admission
+    requires_admission: projection_edge
+    validator_scope: host_overlay
+  - root_pattern: .nimi/{config,contracts,methodology}/**
+    allowed_classes: [nimicoding_managed_projection]
+    owner: nimi_coding_package_projection
+    tracking_policy: tracked_required
+    requires_admission: nimicoding_init_or_sync_projection
+    validator_scope: nimicoding_managed_projection
+  - root_pattern: package://@nimiplatform/nimi-coding/{spec,methodology,contracts,config}/**
+    allowed_classes: [methodology_authority, support_registry]
+    owner: nimi_coding_package
+    tracking_policy: tracked_required
+    requires_admission: package_authority
+    validator_scope: package_authority
+  - root_pattern: .nimi/topics/**
+    allowed_classes: [lifecycle_progress_state, candidate_roadmap]
+    owner: topic_lifecycle
+    tracking_policy: local_only
+    requires_admission: none
+    validator_scope: topic_lifecycle
+  - root_pattern: .nimi/local/state/**
+    allowed_classes: [spec_generation_state, lifecycle_progress_state, operational_local_artifact]
+    owner: execution_workflow
+    tracking_policy: local_only
+    requires_admission: none
+    validator_scope: local_state
+  - root_pattern: .nimi/local/audit/**
+    allowed_classes: [audit_evidence_state, operational_local_artifact]
+    owner: audit_workflow
+    tracking_policy: local_only
+    requires_admission: none
+    validator_scope: audit_state
+  - root_pattern: .nimi/{derived,state,audit,roadmap}/**
+    allowed_classes: [derived_view, spec_generation_state, audit_evidence_state, candidate_roadmap]
+    owner: tracked_output_admission
+    tracking_policy: tracked_only_with_explicit_admission
+    requires_admission: tracked_output_admission
+    validator_scope: tracked_output
+allowed_spec_meta_rules:
+  - root_pattern: .nimi/spec/_meta/<package>-admission-anchor.yaml
+    allowed_classes: [host_projection_anchor]
+    required_fields: [package_id, package_version, package_truth_root, projection_edges, must_not_override]
+  - root_pattern: .nimi/spec/_meta/**
+    allowed_classes: []
+    allowed_dispositions: [move_package, move_local, delete]
+  - root_pattern: .nimi/config/host-overlay.yaml
+    allowed_classes: [host_projection_anchor]
+    required_fields: [package_id, package_version, package_truth_root, overlay_fields, drift_check_command]
+root_policy:
+  product_authority_root: .nimi/spec
+  package_authority_root: package://@nimiplatform/nimi-coding
+  topic_lifecycle_root: .nimi/topics
+  local_artifact_root: .nimi/local
+  tracked_non_product_roots:
+    default: disabled
+    roots:
+      - .nimi/derived
+      - .nimi/state
+      - .nimi/audit
+      - .nimi/roadmap
+forbidden_roots:
+  candidate_roadmap:
+    - .nimi/spec/**
+  derived_view:
+    - .nimi/spec/**/kernel/generated/**
+    - .nimi/spec/generated/**
+    - .nimi/local/derived/**
+  spec_generation_state:
+    - .nimi/spec/_meta/spec-generation-audit/**
+    - .nimi/spec/_meta/spec-generation-audit.yaml
+  audit_evidence_state:
+    - .nimi/spec/**/kernel/**
+    - .nimi/spec/_meta/**
+  lifecycle_progress_state:
+    - .nimi/spec/**
+  methodology_authority:
+    - .nimi/spec/**
+forbidden_root_exceptions:
+  nimicoding_managed_projection:
+    - .nimi/methodology/**
+    - .nimi/contracts/**
+    - .nimi/config/**
+tracking_policy_notes:
+  .nimi/topics/**:
+    tracking_policy: local_only
+    meaning: local_human_authored_lifecycle_workspace_not_product_authority
+  .nimi/{config,contracts,methodology}/**:
+    tracking_policy: tracked_required
+    meaning: project_local_nimicoding_managed_projection_created_by_init_or_sync_not_product_authority
+fail_closed_cases:
+  - class_root_mismatch
+  - file_under_.nimi/spec_without_product_or_minimal_anchor_class
+  - file_under_kernel_tables_without_table_family
+  - _meta_file_without_minimal_anchor_or_package_migration_disposition
+  - tracked_non_product_file_without_admission
+  - nimicoding_managed_projection_promoted_to_product_authority
+  - future_or_backlog_under_.nimi/spec
+  - product_admission_registry_contains_package_methodology_body
+semantic_constraints:
+  - path_shape_is_never_sufficient_authority_proof
+  - keep_move_package_move_local_split_rewrite_delete_block_must_be_explicit
+  - product_semantic_forks_block_for_user_confirmation
+  - high_risk_admission_records_stay_product_governance_truth_while_schema_and_cli_stay_package_owned