@nimiplatform/nimi-coding 0.2.7 → 0.2.8

package/CHANGELOG.md

@@ -4,6 +4,18 @@ All notable changes to `@nimiplatform/nimi-coding` are tracked here.
 
 This project follows semantic versioning for published npm releases.
 
+## 0.2.8
+
+- Fixed Windows audit-sweep execution for JavaScript auditor entrypoints by
+  invoking `.cjs`, `.js`, and `.mjs` binaries through the active Node runtime
+  before passing CLI arguments to Codex or Claude auditors.
+- Hardened post-update proof lineage selection by ordering worker prompts with
+  nanosecond file timestamps and explicit dispatch-time mtimes, so rapid
+  remediation dispatches do not collapse into ambiguous or stale prompt
+  lineage.
+- Made README example alignment tolerant of CRLF checkouts without relaxing the
+  documented topic command shape.
+
 ## 0.2.7
 
 - Added delegated projection admissions for spec-authority sweeps so a host

package/cli/constants.mjs

@@ -1,4 +1,4 @@
-export const VERSION = "0.2.7";
+export const VERSION = "0.2.8";
 export const PACKAGE_NAME = "@nimiplatform/nimi-coding";
 export const BOOTSTRAP_CONTRACT_ID = "nimicoding.bootstrap";
 export const BOOTSTRAP_CONTRACT_VERSION = 1;

package/cli/dev/run-cli-smoke.mjs

@@ -0,0 +1,24 @@
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..");
+const cliPath = path.join(repoRoot, "bin", "nimicoding.mjs");
+
+for (const args of [["--help"], ["--version"]]) {
+  const result = spawnSync(process.execPath, [cliPath, ...args], {
+    cwd: repoRoot,
+    encoding: "utf8",
+    env: { ...process.env, NIMICODING_LANG: "en", NO_COLOR: "1" },
+  });
+  if (result.error) {
+    process.stderr.write(`${args.join(" ")} smoke failed: ${result.error.message}\n`);
+    process.exit(1);
+  }
+  if (result.status !== 0) {
+    if (result.stdout) process.stdout.write(result.stdout);
+    if (result.stderr) process.stderr.write(result.stderr);
+    process.stderr.write(`${args.join(" ")} smoke exited with ${result.status ?? "unknown"}\n`);
+    process.exit(result.status ?? 1);
+  }
+}

package/cli/dev/run-suite.mjs

@@ -0,0 +1,17 @@
+import { spawnSync } from "node:child_process";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..", "..");
+const result = spawnSync(process.execPath, ["--test"], {
+  cwd: repoRoot,
+  stdio: "inherit",
+  env: { ...process.env, NIMICODING_LANG: "en", NO_COLOR: "1" },
+});
+
+if (result.error) {
+  process.stderr.write(`node --test failed: ${result.error.message}\n`);
+  process.exit(1);
+}
+
+process.exit(result.status ?? 1);

package/cli/lib/audit-sweep-runtime/claude-auditor.mjs

@@ -192,6 +192,16 @@ function terminateProcess(child, signal) {
   }
 }
 
+function executableInvocation(executable, args) {
+  if (
+    process.platform === "win32" &&
+    [".cjs", ".js", ".mjs"].includes(path.extname(executable).toLowerCase())
+  ) {
+    return { command: process.execPath, args: [executable, ...args] };
+  }
+  return { command: executable, args };
+}
+
 const CLAUDE_AUDIT_OUTPUT_SCHEMA = JSON.stringify({
   type: "object",
   properties: {
@@ -210,7 +220,7 @@ function runClaudeExec({ projectRoot, claudeBin, rawOutputPath, prompt, timeoutM
     let timedOut = false;
     let settled = false;
     let killTimer = null;
-    const child = spawn(claudeBin, [
+    const invocation = executableInvocation(claudeBin, [
       "-p",
       "--output-format", "json",
       "--permission-mode", "bypassPermissions",
@@ -219,7 +229,8 @@ function runClaudeExec({ projectRoot, claudeBin, rawOutputPath, prompt, timeoutM
       "--no-session-persistence",
       "--add-dir", projectRoot,
       "--json-schema", CLAUDE_AUDIT_OUTPUT_SCHEMA,
-    ], {
+    ]);
+    const child = spawn(invocation.command, invocation.args, {
       cwd: projectRoot,
       stdio: ["pipe", "pipe", "pipe"],
       detached: process.platform !== "win32",

package/cli/lib/audit-sweep-runtime/codex-auditor.mjs

@@ -102,13 +102,23 @@ function terminateProcess(child, signal) {
   }
 }
 
+function executableInvocation(executable, args) {
+  if (
+    process.platform === "win32" &&
+    [".cjs", ".js", ".mjs"].includes(path.extname(executable).toLowerCase())
+  ) {
+    return { command: process.execPath, args: [executable, ...args] };
+  }
+  return { command: executable, args };
+}
+
 function runCodexExec({ projectRoot, codexBin, rawOutputPath, prompt, timeoutMs }) {
   return new Promise((resolve) => {
     const boundedTimeoutMs = Number.isInteger(timeoutMs) && timeoutMs > 0 ? timeoutMs : DEFAULT_CODEX_TIMEOUT_MS;
     let timedOut = false;
     let settled = false;
     let killTimer = null;
-    const child = spawn(codexBin, [
+    const invocation = executableInvocation(codexBin, [
       "exec",
       "-C",
       projectRoot,
@@ -117,7 +127,8 @@ function runCodexExec({ projectRoot, codexBin, rawOutputPath, prompt, timeoutMs
       "--output-last-message",
       rawOutputPath,
       "-",
-    ], {
+    ]);
+    const child = spawn(invocation.command, invocation.args, {
       cwd: projectRoot,
       stdio: ["pipe", "pipe", "pipe"],
       detached: process.platform !== "win32",

package/cli/lib/authority-convergence.mjs

@@ -183,15 +183,31 @@ async function latestWorkerPromptPacketId(topicDir, packetEntries) {
     if (!packetIds.has(packetId)) continue;
     const promptPath = path.join(topicDir, entry.name);
     try {
-      const promptStat = await stat(promptPath);
-      prompts.push({ packetId, mtimeMs: promptStat.mtimeMs, promptRefName: entry.name });
+      const promptStat = await stat(promptPath, { bigint: true });
+      prompts.push({
+        packetId,
+        mtimeNs: promptStat.mtimeNs,
+        ctimeNs: promptStat.ctimeNs,
+        birthtimeNs: promptStat.birthtimeNs,
+        promptRefName: entry.name,
+      });
     } catch {
       return null;
     }
   }
   if (prompts.length === 0) return null;
-  prompts.sort((left, right) => right.mtimeMs - left.mtimeMs || left.promptRefName.localeCompare(right.promptRefName));
-  if (prompts.length > 1 && prompts[0].mtimeMs === prompts[1].mtimeMs) return { ambiguous: true };
+  prompts.sort((left, right) => (
+    Number(right.mtimeNs - left.mtimeNs)
+    || Number(right.ctimeNs - left.ctimeNs)
+    || Number(right.birthtimeNs - left.birthtimeNs)
+    || left.promptRefName.localeCompare(right.promptRefName)
+  ));
+  if (
+    prompts.length > 1
+    && prompts[0].mtimeNs === prompts[1].mtimeNs
+    && prompts[0].ctimeNs === prompts[1].ctimeNs
+    && prompts[0].birthtimeNs === prompts[1].birthtimeNs
+  ) return { ambiguous: true };
   return prompts[0];
 }
 

package/cli/lib/topic-execution.mjs

@@ -1,4 +1,4 @@
-import { readFile, writeFile } from "node:fs/promises";
+import { readdir, readFile, utimes, writeFile } from "node:fs/promises";
 import path from "node:path";
 import YAML from "yaml";
 
@@ -35,6 +35,22 @@ import {
 export function promptFilename(packetId, role) {
   return `prompt-${packetId}-${role}.md`;
 }
+
+async function nextPromptMtime(topicDir, role) {
+  let rolePromptCount = 0;
+  try {
+    const entries = await readdir(topicDir, { withFileTypes: true });
+    rolePromptCount = entries.filter((entry) => (
+      entry.isFile()
+      && entry.name.startsWith("prompt-")
+      && entry.name.endsWith(`-${role}.md`)
+    )).length;
+  } catch {
+    rolePromptCount = 0;
+  }
+  return new Date(Date.now() + rolePromptCount + 1);
+}
+
 export async function dispatchTopicPacket(projectRoot, input, packetId, role) {
   const loaded = await loadTopicPacket(projectRoot, input, packetId);
   if (!loaded.ok) return loaded;
@@ -49,8 +65,10 @@ export async function dispatchTopicPacket(projectRoot, input, packetId, role) {
   if (!["candidate", "admitted", "preflight", "dispatched"].includes(loaded.packet.status))
     return { ok: false, error: `Packet is not dispatchable from status ${loaded.packet.status}` };
   const promptPath = path.join(loaded.topicDir, promptFilename(packetId, role));
+  const promptMtime = await nextPromptMtime(loaded.topicDir, role);
   return (
     await writeFile(promptPath, buildDispatchPrompt(loaded.packet, loaded.topicId, role), "utf8"),
+    await utimes(promptPath, promptMtime, promptMtime),
     (loaded.packet.status = "dispatched"),
     await writeFile(loaded.packetPath, packetMarkdown(loaded.packet), "utf8"),
     role === "worker" &&

package/config/bootstrap.yaml

@@ -1,6 +1,6 @@
 version: 1
 initialized_by: "@nimiplatform/nimi-coding"
-cli_version: "0.2.7"
+cli_version: "0.2.8"
 bootstrap_contract: "nimicoding.bootstrap"
 bootstrap_contract_version: 1
 profile: default

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nimiplatform/nimi-coding",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "private": false,
   "description": "AI-native coding governance toolkit for bootstrapping .nimi/** into arbitrary projects.",
   "license": "MIT",
@@ -58,8 +58,8 @@
     "LICENSE"
   ],
   "scripts": {
-    "test": "NIMICODING_LANG=en NO_COLOR=1 node --test",
-    "check:ci": "pnpm test && pnpm check:pack && node ./bin/nimicoding.mjs --help >/dev/null && node ./bin/nimicoding.mjs --version >/dev/null",
+    "test": "node ./cli/dev/run-suite.mjs",
+    "check:ci": "pnpm test && pnpm check:pack && node ./cli/dev/run-cli-smoke.mjs",
     "check:pack": "npm pack --dry-run"
   }
 }