@nimiplatform/nimi-coding 0.2.1 → 0.2.3

package/CHANGELOG.md

@@ -4,6 +4,30 @@ All notable changes to `@nimiplatform/nimi-coding` are tracked here.
 
 This project follows semantic versioning for published npm releases.
 
+## 0.2.3
+
+- Added `nimicoding sweep audit chunk audit-claude` for Claude-backed sweep
+  chunk audits with structured JSON output, evidence ingestion, review, freeze,
+  post-chunk validation, and run-ledger events.
+- Hardened Claude auditor output handling by normalizing Claude CLI JSON result
+  wrappers, including `structured_output` and replayed raw output files.
+- Tightened audit evidence normalization so AGENTS, README, spec, contract, and
+  methodology refs are treated as context rather than implementation evidence.
+- Improved P0/P1 validity and spec-authority evidence mapping so context-only
+  chunks can be marked not applicable while declared implementation refs,
+  including `.prisma` surfaces, map to the correct owner roots.
+- Updated default audit-sweep exclusions for common tool state and archive
+  directories while keeping host-specific `nimi/**` exclusions out of the
+  package defaults.
+
+## 0.2.2
+
+- Fixed v2 doctor lifecycle/readiness derivation so host projects using the
+  class-filtered surface model no longer depend on legacy `.nimi/spec/_meta`
+  carriers or `.nimi/spec/bootstrap-state.yaml`.
+- Fixed v2 handoff readiness for `doc_spec_audit` so it can run when the
+  canonical tree is present but the local generation audit still needs repair.
+
 ## 0.2.1
 
 - Added the `gate_registry` table family for product-owned release gate

package/README.md

@@ -314,7 +314,7 @@ repository itself keeps the package-owned source directly under
 
 ```bash
 pnpm install
-pnpm test           # runs the node:test suite (329 tests at 0.2.1)
+pnpm test           # runs the node:test suite (337 tests at 0.2.3)
 pnpm check:pack     # npm pack --dry-run
 pnpm check:ci       # test + pack + CLI help/version smoke
 ```

package/README.zh-CN.md

@@ -256,7 +256,7 @@ Nimi Coding 坐在你已经用的 AI host *底下*。它是让 AI 做完的工
 
 ```bash
 pnpm install
-pnpm test           # 跑 node:test 套件（0.2.1 共 329 用例）
+pnpm test           # 跑 node:test 套件（0.2.3 共 337 用例）
 pnpm check:pack     # npm pack --dry-run
 pnpm check:ci       # test + pack + CLI help/version smoke
 ```

package/cli/commands/audit-sweep.mjs

@@ -10,6 +10,7 @@ import {
   ingestAuditSweepChunk,
   resolveAuditSweepFinding,
   reviewAuditSweepChunk,
+  runClaudeAuditSweepChunk,
   runCodexAuditSweepChunk,
   skipAuditSweepChunk,
   validateAuditSweepArtifacts,
@@ -150,6 +151,23 @@ function parseChunkAuditCodexOptions(args) {
   });
 }
 
+function parseChunkAuditClaudeOptions(args) {
+  return parseOptions(args, "chunk audit-claude", {
+    sweepId: { flag: "--sweep-id", required: true },
+    chunkId: { flag: "--chunk-id", required: true },
+    dispatchedAt: { flag: "--dispatched-at", required: true },
+    verifiedAt: { flag: "--verified-at", required: true },
+    reviewedAt: { flag: "--reviewed-at", required: true },
+    auditor: { flag: "--auditor" },
+    reviewer: { flag: "--reviewer" },
+    summary: { flag: "--summary" },
+    claudeBin: { flag: "--claude-bin" },
+    fromRawOutput: { flag: "--from-raw-output" },
+    timeoutMs: { flag: "--timeout-ms", type: "positive-int" },
+    json: { default: false },
+  });
+}
+
 function parseChunkReviewOptions(args) {
   return parseOptions(args, "chunk review", {
     sweepId: { flag: "--sweep-id", required: true },
@@ -238,6 +256,9 @@ function parseAuditSweepOptions(args) {
   if (command === "chunk" && subcommand === "audit-codex") {
     return { ok: true, action: "chunk-audit-codex", parsed: parseChunkAuditCodexOptions(args.slice(2)) };
   }
+  if (command === "chunk" && subcommand === "audit-claude") {
+    return { ok: true, action: "chunk-audit-claude", parsed: parseChunkAuditClaudeOptions(args.slice(2)) };
+  }
   if (command === "chunk" && subcommand === "review") {
     return { ok: true, action: "chunk-review", parsed: parseChunkReviewOptions(args.slice(2)) };
   }
@@ -269,8 +290,8 @@ function parseAuditSweepOptions(args) {
   return {
     ok: false,
     error: `${localize(
-      "nimicoding sweep audit refused: expected one of `plan`, `chunk dispatch`, `chunk audit-codex`, `chunk ingest`, `chunk review`, `chunk skip`, `ledger build`, `remediation-map build`, `remediation-map admit`, `finding resolve`, `closeout summary`, `status`, or `validate`.",
-      "nimicoding sweep audit 已拒绝：需要使用 `plan`、`chunk dispatch`、`chunk ingest`、`chunk review`、`chunk skip`、`ledger build`、`remediation-map build`、`remediation-map admit`、`finding resolve`、`closeout summary`、`status` 或 `validate`。",
+      "nimicoding sweep audit refused: expected one of `plan`, `chunk dispatch`, `chunk audit-codex`, `chunk audit-claude`, `chunk ingest`, `chunk review`, `chunk skip`, `ledger build`, `remediation-map build`, `remediation-map admit`, `finding resolve`, `closeout summary`, `status`, or `validate`.",
+      "nimicoding sweep audit 已拒绝：需要使用 `plan`、`chunk dispatch`、`chunk audit-codex`、`chunk audit-claude`、`chunk ingest`、`chunk review`、`chunk skip`、`ledger build`、`remediation-map build`、`remediation-map admit`、`finding resolve`、`closeout summary`、`status` 或 `validate`。",
     )}\n`,
   };
 }
@@ -303,6 +324,7 @@ export async function runAuditSweep(args) {
     "chunk-dispatch": dispatchAuditSweepChunk,
     "chunk-ingest": ingestAuditSweepChunk,
     "chunk-audit-codex": runCodexAuditSweepChunk,
+    "chunk-audit-claude": runClaudeAuditSweepChunk,
     "chunk-review": reviewAuditSweepChunk,
     "chunk-skip": skipAuditSweepChunk,
     "ledger-build": buildAuditSweepLedger,
@@ -328,6 +350,7 @@ export async function runAuditSweep(args) {
 
 export {
   parseAuditSweepOptions,
+  parseChunkAuditClaudeOptions,
   parseChunkAuditCodexOptions,
   parseChunkDispatchOptions,
   parseChunkIngestOptions,

package/cli/constants.mjs

@@ -1,4 +1,4 @@
-export const VERSION = "0.2.1";
+export const VERSION = "0.2.3";
 export const PACKAGE_NAME = "@nimiplatform/nimi-coding";
 export const BOOTSTRAP_CONTRACT_ID = "nimicoding.bootstrap";
 export const BOOTSTRAP_CONTRACT_VERSION = 1;

package/cli/help.mjs

@@ -53,6 +53,7 @@ export function helpText() {
     `  ${styleCommand("nimicoding sweep audit plan --root <dir> [--criteria <csv>] [--exclude <csv>] [--max-files <n>] [--sweep-id <id>] [--json]")}`,
     `  ${styleCommand("nimicoding sweep audit chunk dispatch --sweep-id <id> --chunk-id <chunk-id> --dispatched-at <iso8601> [--auditor <id>] [--json]")}`,
     `  ${styleCommand("nimicoding sweep audit chunk audit-codex --sweep-id <id> --chunk-id <chunk-id> --dispatched-at <iso8601> --verified-at <iso8601> --reviewed-at <iso8601> [--from-raw-output <ref>] [--timeout-ms <ms>] [--json]")}`,
+    `  ${styleCommand("nimicoding sweep audit chunk audit-claude --sweep-id <id> --chunk-id <chunk-id> --dispatched-at <iso8601> --verified-at <iso8601> --reviewed-at <iso8601> [--from-raw-output <ref>] [--timeout-ms <ms>] [--json]")}`,
     `  ${styleCommand("nimicoding sweep audit chunk ingest --sweep-id <id> --chunk-id <chunk-id> --from <json> --verified-at <iso8601> [--json]")}`,
     `  ${styleCommand("nimicoding sweep audit chunk review --sweep-id <id> --chunk-id <chunk-id> --verdict <pass|fail> --reviewed-at <iso8601> [--summary <text>] [--json]")}`,
     `  ${styleCommand("nimicoding sweep audit chunk skip --sweep-id <id> --chunk-id <chunk-id> --reason <text> --skipped-at <iso8601> [--json]")}`,

package/cli/lib/audit-sweep-runtime/audit-validity.mjs

@@ -12,6 +12,20 @@ function normalizeFileRef(value) {
   return typeof value === "string" ? value.replace(/\\/g, "/") : null;
 }
 
+function isNonImplementationContextRef(ref) {
+  if (typeof ref !== "string") {
+    return false;
+  }
+  const normalized = ref.replace(/\\/g, "/");
+  return /(^|\/)AGENTS\.md$/u.test(normalized)
+    || /(^|\/)README\.md$/u.test(normalized)
+    || normalized.startsWith(".nimi/spec/")
+    || normalized.startsWith(".nimi/contracts/")
+    || normalized.startsWith(".nimi/methodology/")
+    || normalized.startsWith("package://@nimiplatform/nimi-coding/methodology/")
+    || normalized.startsWith("package://@nimiplatform/nimi-coding/spec/");
+}
+
 const REQUIRED_P0P1_RULE_CHECK_IDS = [
   "fail_open_or_pseudo_success",
   "partial_coverage_misrepresented_as_complete",
@@ -111,7 +125,7 @@ function looksSyntheticNoFindingEvidence(evidence) {
 
 export function p0p1ImplementationRefsForChunk(chunk) {
   if (chunk?.planning_basis === "spec_authority") {
-    return normalizeRefs(chunk?.evidence_inventory);
+    return normalizeRefs(chunk?.evidence_inventory).filter((ref) => !isNonImplementationContextRef(ref));
   }
   return normalizeRefs(chunk?.files);
 }
@@ -155,6 +169,7 @@ export function buildAuditValidityForEvidence(chunk, evidence) {
   const evidenceInventorySet = new Set(evidenceInventory);
   const p0p1ImplementationRefSet = new Set(p0p1ImplementationRefs);
   const hasImplementationInventory = evidenceInventory.length > 0;
+  const hasP0P1ImplementationInventory = p0p1ImplementationRefs.length > 0;
   const findingsEmpty = findings.length === 0;
   const p0p1RecallRequired = criteriaEnableP0P1Recall(chunk?.criteria);
   const hasP0P1Finding = findings.some((finding) => ["critical", "high"].includes(finding?.severity));
@@ -218,7 +233,7 @@ export function buildAuditValidityForEvidence(chunk, evidence) {
     const p0p1NegativeReasoning = typeof evidence?.coverage?.p0p1_negative_reasoning === "string"
       && evidence.coverage.p0p1_negative_reasoning.trim().length > 0;
     const p0p1EvidenceRefs = normalizeRefs(evidence?.coverage?.p0p1_evidence_refs);
-    const p0p1ImplementationNotApplicable = !hasImplementationInventory
+    const p0p1ImplementationNotApplicable = !hasP0P1ImplementationInventory
       && typeof evidence?.coverage?.p0p1_implementation_not_applicable_reason === "string"
       && evidence.coverage.p0p1_implementation_not_applicable_reason.trim().length > 0;
     const invalidP0P1EvidenceRefs = p0p1EvidenceRefs.filter((ref) => !p0p1ImplementationRefSet.has(ref));
@@ -248,7 +263,7 @@ export function buildAuditValidityForEvidence(chunk, evidence) {
         "P0/P1 no-finding evidence appears to be generated by a script or bulk template rather than a semantic audit.",
       ));
     }
-    if (hasImplementationInventory) {
+    if (hasP0P1ImplementationInventory) {
       if (!hasSemanticAuditorProvenance(evidence)) {
         blockers.push(diagnostic(
           "auditor_provenance_missing",