@nimiplatform/nimi-coding 0.2.7 → 0.3.0

package/cli/commands/validate-acceptance.mjs

@@ -1,5 +0,0 @@
-import { runValidatorCommand, validateAcceptance } from "../lib/validators.mjs";
-
-export function runValidateAcceptance(args) {
-  return runValidatorCommand(args, "validate-acceptance", validateAcceptance);
-}

package/cli/commands/validate-execution-packet.mjs

@@ -1,5 +0,0 @@
-import { runValidatorCommand, validateExecutionPacket } from "../lib/validators.mjs";
-
-export function runValidateExecutionPacket(args) {
-  return runValidatorCommand(args, "validate-execution-packet", validateExecutionPacket);
-}

package/cli/commands/validate-orchestration-state.mjs

@@ -1,5 +0,0 @@
-import { runValidatorCommand, validateOrchestrationState } from "../lib/validators.mjs";
-
-export function runValidateOrchestrationState(args) {
-  return runValidatorCommand(args, "validate-orchestration-state", validateOrchestrationState);
-}

package/cli/commands/validate-prompt.mjs

@@ -1,5 +0,0 @@
-import { runValidatorCommand, validatePrompt } from "../lib/validators.mjs";
-
-export function runValidatePrompt(args) {
-  return runValidatorCommand(args, "validate-prompt", validatePrompt);
-}

package/cli/commands/validate-worker-output.mjs

@@ -1,5 +0,0 @@
-import { runValidatorCommand, validateWorkerOutput } from "../lib/validators.mjs";
-
-export function runValidateWorkerOutput(args) {
-  return runValidatorCommand(args, "validate-worker-output", validateWorkerOutput);
-}

package/cli/lib/adapter-profiles.mjs

@@ -1,403 +0,0 @@
-import { readFile } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-import { ADAPTER_PACKAGE_PROFILE_REFS } from "../constants.mjs";
-import { arraysEqual, isPlainObject, toStringArray } from "./value-helpers.mjs";
-import { parseYamlText } from "./yaml-helpers.mjs";
-
-const PACKAGE_ROOT = fileURLToPath(new URL("../..", import.meta.url));
-
-const ADAPTER_PROFILE_EXPECTATIONS = {
-  codex: {
-    hostClass: "native_codex_sdk_host",
-    upstreamSeedProfile: "external_ai_host",
-    semanticOwner: [
-      ".nimi/methodology",
-      ".nimi/spec",
-      ".nimi/contracts",
-      ".nimi/config",
-    ],
-    operationalOwner: [
-      ".codex",
-      ".nimi/local",
-      ".nimi/cache",
-    ],
-    admittedSkillSurfaces: [
-      "spec_reconstruction",
-      "doc_spec_audit",
-      "audit_sweep",
-      "high_risk_execution",
-      "topic_loop_execution",
-      "authority_convergence_audit",
-    ],
-    promptBootstrapSurface: [
-      "nimicoding handoff --skill spec_reconstruction --prompt",
-      "nimicoding handoff --skill doc_spec_audit --prompt",
-      "nimicoding handoff --skill audit_sweep --prompt",
-      "nimicoding handoff --skill high_risk_execution --prompt",
-    ],
-    promptFutureSurface: [
-      "Codex.startThread().run",
-      "Codex.resumeThread().run",
-    ],
-    promptFutureSurfaceStatus: "active_via_codex_sdk",
-    outputHandoff: {
-      workerOutputTarget: ".nimi/local/outputs/** candidate artifact",
-      evidenceTarget: ".nimi/local/evidence/** candidate artifact",
-      closeoutTarget: "local-only closeout payload unless later admitted",
-    },
-    nativeReviewBoundary: {
-      approvalReview: {
-        scope: "lower_layer_permission_review",
-        semanticEffect: "none",
-        evidenceTarget: ".nimi/local/evidence/** candidate artifact",
-      },
-      githubAutoReview: {
-        scope: "lower_layer_pr_review_findings",
-        semanticEffect: "evidence_only",
-        evidenceTarget: ".nimi/local/evidence/** candidate artifact",
-      },
-      forbiddenSemanticSubstitutions: [
-        "wave_admission",
-        "packet_freeze",
-        "result_verdict",
-        "wave_closeout",
-        "topic_closeout",
-        "true_close",
-      ],
-    },
-    hardConstraints: [
-      "codex_sdk_must_not_become_semantic_owner",
-      "codex_sdk_must_not_write_canonical_.nimi/spec_truth_directly_without_validator_admission",
-      "codex_sdk_must_not_define_acceptance_disposition_or_finding_judgment",
-      "codex_thread_state_must_remain_operational_only",
-      "codex_sdk_runs_must_be_recorded_in_topic_run_ledger",
-      "codex_native_approval_review_must_remain_permission_review_only",
-      "codex_github_auto_review_must_remain_evidence_only",
-      "codex_review_must_not_substitute_nimicoding_semantic_commands",
-      "unresolved_authority_or_missing_context_must_fail_closed",
-      "codex_subagent_authority_convergence_output_must_remain_candidate_evidence",
-    ],
-  },
-  claude: {
-    hostClass: "inline_coding_host",
-    upstreamSeedProfile: "external_ai_host",
-    semanticOwner: [
-      ".nimi/methodology",
-      ".nimi/spec",
-      ".nimi/contracts",
-      ".nimi/config",
-    ],
-    operationalOwner: [
-      ".claude",
-      ".nimi/local",
-      ".nimi/cache",
-    ],
-    admittedSkillSurfaces: [
-      "spec_reconstruction",
-      "doc_spec_audit",
-      "audit_sweep",
-      "high_risk_execution",
-      "inline_review",
-      "authority_convergence_audit",
-    ],
-    promptBootstrapSurface: [
-      "nimicoding handoff --skill spec_reconstruction --prompt",
-      "nimicoding handoff --skill doc_spec_audit --prompt",
-      "nimicoding handoff --skill audit_sweep --prompt",
-      "nimicoding handoff --skill high_risk_execution --prompt",
-    ],
-    promptFutureSurface: [],
-    promptFutureSurfaceStatus: "active_via_hooks",
-    outputHandoff: {
-      workerOutputTarget: ".nimi/local/outputs/** candidate artifact",
-      evidenceTarget: ".nimi/local/evidence/** candidate artifact",
-      closeoutTarget: "local-only closeout payload unless later admitted",
-    },
-    hardConstraints: [
-      "claude_must_not_become_semantic_owner",
-      "claude_must_not_write_canonical_.nimi/spec_truth_directly_without_validator_admission",
-      "claude_must_not_define_acceptance_disposition_or_finding_judgment",
-      "claude_operational_state_must_remain_operational_only",
-      "claude_hooks_must_not_replace_agents_md_authority",
-      "unresolved_authority_or_missing_context_must_fail_closed",
-      "claude_subagent_authority_convergence_output_must_remain_candidate_evidence",
-    ],
-  },
-  oh_my_codex: {
-    hostClass: "external_execution_host",
-    upstreamSeedProfile: "external_ai_host",
-    semanticOwner: [
-      ".nimi/methodology",
-      ".nimi/spec",
-      ".nimi/contracts",
-      ".nimi/config",
-    ],
-    operationalOwner: [
-      ".omx",
-      ".nimi/local",
-      ".nimi/cache",
-    ],
-    admittedSkillSurfaces: [
-      "spec_reconstruction",
-      "doc_spec_audit",
-      "audit_sweep",
-      "high_risk_execution",
-    ],
-    promptBootstrapSurface: [
-      "nimicoding handoff --skill spec_reconstruction --prompt",
-      "nimicoding handoff --skill doc_spec_audit --prompt",
-      "nimicoding handoff --skill audit_sweep --prompt",
-      "nimicoding handoff --skill high_risk_execution --prompt",
-    ],
-    promptFutureSurface: [
-      "nimicoding run-next-prompt",
-    ],
-    promptFutureSurfaceStatus: "future_only_not_packaged",
-    outputHandoff: {
-      workerOutputTarget: ".nimi/local/outputs/** candidate artifact",
-      evidenceTarget: ".nimi/local/evidence/** candidate artifact",
-      closeoutTarget: "local-only closeout payload unless later admitted",
-    },
-    hardConstraints: [
-      "omx_must_not_become_semantic_owner",
-      "omx_must_not_write_canonical_.nimi/spec_truth_directly_without_validator_admission",
-      "omx_must_not_define_acceptance_disposition_or_finding_judgment",
-      "omx_runtime_state_must_remain_operational_only",
-      "unresolved_authority_or_missing_context_must_fail_closed",
-    ],
-  },
-};
-
-function buildInvalidProfile(adapterId, profileRef, reason) {
-  return {
-    ok: false,
-    id: adapterId,
-    profileRef,
-    absolutePath: profileRef ? path.join(PACKAGE_ROOT, profileRef) : null,
-    reason,
-    version: null,
-    hostClass: null,
-    upstreamSeedProfile: null,
-    purpose: null,
-    semanticOwner: [],
-    operationalOwner: [],
-    admittedSkillSurfaces: [],
-    promptHandoff: {
-      bootstrapSurface: [],
-      futureSurface: [],
-      futureSurfaceStatus: null,
-    },
-    outputHandoff: {
-      workerOutputTarget: null,
-      evidenceTarget: null,
-      closeoutTarget: null,
-    },
-    nativeReviewBoundary: null,
-    hardConstraints: [],
-    currentGaps: [],
-  };
-}
-
-function normalizeAdapterProfile(adapterId, profileRef, parsed) {
-  const profile = parsed?.adapter_profile;
-  if (!isPlainObject(profile)) {
-    return buildInvalidProfile(adapterId, profileRef, "adapter profile YAML is missing adapter_profile");
-  }
-
-  return {
-    ok: true,
-    id: typeof profile.id === "string" ? profile.id : null,
-    profileRef,
-    absolutePath: path.join(PACKAGE_ROOT, profileRef),
-    reason: null,
-    version: parsed?.version ?? null,
-    hostClass: typeof profile.host_class === "string" ? profile.host_class : null,
-    upstreamSeedProfile: typeof profile.upstream_seed_profile === "string" ? profile.upstream_seed_profile : null,
-    purpose: typeof profile.purpose === "string" ? profile.purpose.trim() : null,
-    semanticOwner: toStringArray(profile.semantic_owner),
-    operationalOwner: toStringArray(profile.operational_owner),
-    admittedSkillSurfaces: toStringArray(profile.admitted_skill_surfaces),
-    promptHandoff: {
-      bootstrapSurface: toStringArray(profile.prompt_handoff?.bootstrap_surface),
-      futureSurface: toStringArray(profile.prompt_handoff?.future_surface?.commands),
-      futureSurfaceStatus: typeof profile.prompt_handoff?.future_surface?.status === "string"
-        ? profile.prompt_handoff.future_surface.status
-        : null,
-    },
-    outputHandoff: {
-      workerOutputTarget: typeof profile.output_handoff?.worker_output_target === "string"
-        ? profile.output_handoff.worker_output_target
-        : null,
-      evidenceTarget: typeof profile.output_handoff?.evidence_target === "string"
-        ? profile.output_handoff.evidence_target
-        : null,
-      closeoutTarget: typeof profile.output_handoff?.closeout_target === "string"
-        ? profile.output_handoff.closeout_target
-        : null,
-    },
-    nativeReviewBoundary: isPlainObject(profile.native_review_boundary)
-      ? {
-        approvalReview: {
-          scope: typeof profile.native_review_boundary.approval_review?.scope === "string"
-            ? profile.native_review_boundary.approval_review.scope
-            : null,
-          semanticEffect: typeof profile.native_review_boundary.approval_review?.semantic_effect === "string"
-            ? profile.native_review_boundary.approval_review.semantic_effect
-            : null,
-          evidenceTarget: typeof profile.native_review_boundary.approval_review?.evidence_target === "string"
-            ? profile.native_review_boundary.approval_review.evidence_target
-            : null,
-        },
-        githubAutoReview: {
-          scope: typeof profile.native_review_boundary.github_auto_review?.scope === "string"
-            ? profile.native_review_boundary.github_auto_review.scope
-            : null,
-          semanticEffect: typeof profile.native_review_boundary.github_auto_review?.semantic_effect === "string"
-            ? profile.native_review_boundary.github_auto_review.semantic_effect
-            : null,
-          evidenceTarget: typeof profile.native_review_boundary.github_auto_review?.evidence_target === "string"
-            ? profile.native_review_boundary.github_auto_review.evidence_target
-            : null,
-        },
-        forbiddenSemanticSubstitutions: toStringArray(
-          profile.native_review_boundary.forbidden_semantic_substitutions,
-        ),
-      }
-      : null,
-    hardConstraints: toStringArray(profile.hard_constraints),
-    currentGaps: toStringArray(profile.current_gaps),
-  };
-}
-
-function validateAdapterProfile(profile) {
-  const expectation = ADAPTER_PROFILE_EXPECTATIONS[profile.id];
-  if (!expectation) {
-    return {
-      ok: false,
-      reason: `no package-owned adapter profile expectation is declared for ${profile.id}`,
-    };
-  }
-
-  const hardConstraintsOk = expectation.hardConstraints.every((entry) => profile.hardConstraints.includes(entry));
-  const outputHandoffOk = profile.outputHandoff.workerOutputTarget === expectation.outputHandoff.workerOutputTarget
-    && profile.outputHandoff.evidenceTarget === expectation.outputHandoff.evidenceTarget
-    && profile.outputHandoff.closeoutTarget === expectation.outputHandoff.closeoutTarget;
-  const nativeReviewOk = !expectation.nativeReviewBoundary
-    || (
-      profile.nativeReviewBoundary?.approvalReview?.scope === expectation.nativeReviewBoundary.approvalReview.scope
-      && profile.nativeReviewBoundary.approvalReview.semanticEffect === expectation.nativeReviewBoundary.approvalReview.semanticEffect
-      && profile.nativeReviewBoundary.approvalReview.evidenceTarget === expectation.nativeReviewBoundary.approvalReview.evidenceTarget
-      && profile.nativeReviewBoundary.githubAutoReview?.scope === expectation.nativeReviewBoundary.githubAutoReview.scope
-      && profile.nativeReviewBoundary.githubAutoReview.semanticEffect === expectation.nativeReviewBoundary.githubAutoReview.semanticEffect
-      && profile.nativeReviewBoundary.githubAutoReview.evidenceTarget === expectation.nativeReviewBoundary.githubAutoReview.evidenceTarget
-      && arraysEqual(
-        profile.nativeReviewBoundary.forbiddenSemanticSubstitutions,
-        expectation.nativeReviewBoundary.forbiddenSemanticSubstitutions,
-      )
-    );
-
-  const ok = profile.version === 1
-    && profile.id in ADAPTER_PACKAGE_PROFILE_REFS
-    && profile.hostClass === expectation.hostClass
-    && profile.upstreamSeedProfile === expectation.upstreamSeedProfile
-    && Boolean(profile.purpose)
-    && arraysEqual(profile.semanticOwner, expectation.semanticOwner)
-    && arraysEqual(profile.operationalOwner, expectation.operationalOwner)
-    && arraysEqual(profile.admittedSkillSurfaces, expectation.admittedSkillSurfaces)
-    && arraysEqual(profile.promptHandoff.bootstrapSurface, expectation.promptBootstrapSurface)
-    && arraysEqual(profile.promptHandoff.futureSurface, expectation.promptFutureSurface)
-    && profile.promptHandoff.futureSurfaceStatus === expectation.promptFutureSurfaceStatus
-    && outputHandoffOk
-    && nativeReviewOk
-    && hardConstraintsOk;
-
-  return {
-    ok,
-    reason: ok
-      ? null
-      : `${profile.profileRef} drifted away from the declared package-owned adapter overlay contract`,
-  };
-}
-
-function serializeProfile(profile) {
-  return {
-    id: profile.id,
-    profileRef: profile.profileRef,
-    hostClass: profile.hostClass,
-    upstreamSeedProfile: profile.upstreamSeedProfile,
-    purpose: profile.purpose,
-    semanticOwner: profile.semanticOwner,
-    operationalOwner: profile.operationalOwner,
-    admittedSkillSurfaces: profile.admittedSkillSurfaces,
-    promptHandoff: profile.promptHandoff,
-    outputHandoff: profile.outputHandoff,
-    nativeReviewBoundary: profile.nativeReviewBoundary,
-    hardConstraints: profile.hardConstraints,
-    currentGaps: profile.currentGaps,
-    ok: profile.ok,
-    reason: profile.reason,
-  };
-}
-
-export async function loadAdapterProfile(adapterId) {
-  const profileRef = ADAPTER_PACKAGE_PROFILE_REFS[adapterId] ?? null;
-  if (!profileRef) {
-    return buildInvalidProfile(adapterId, null, `no package-owned adapter profile is declared for ${adapterId}`);
-  }
-
-  let rawText;
-  try {
-    rawText = await readFile(path.join(PACKAGE_ROOT, profileRef), "utf8");
-  } catch {
-    return buildInvalidProfile(adapterId, profileRef, `cannot read package-owned adapter profile ${profileRef}`);
-  }
-
-  const parsed = parseYamlText(rawText);
-  if (!parsed) {
-    return buildInvalidProfile(adapterId, profileRef, `package-owned adapter profile ${profileRef} is invalid YAML`);
-  }
-
-  const normalized = normalizeAdapterProfile(adapterId, profileRef, parsed);
-  if (!normalized.ok) {
-    return normalized;
-  }
-
-  if (normalized.id !== adapterId) {
-    return buildInvalidProfile(adapterId, profileRef, `${profileRef} declares adapter id ${normalized.id ?? "unknown"} instead of ${adapterId}`);
-  }
-
-  const validation = validateAdapterProfile(normalized);
-  if (!validation.ok) {
-    return {
-      ...normalized,
-      ok: false,
-      reason: validation.reason,
-    };
-  }
-
-  return normalized;
-}
-
-export async function loadAdmittedAdapterProfiles(adapterIds) {
-  const profiles = [];
-
-  for (const adapterId of adapterIds) {
-    profiles.push(await loadAdapterProfile(adapterId));
-  }
-
-  return {
-    admitted: profiles.map((profile) => serializeProfile(profile)),
-    invalid: profiles.filter((profile) => !profile.ok).map((profile) => serializeProfile(profile)),
-    selected: null,
-  };
-}
-
-export function selectAdapterProfile(adapterProfiles, selectedAdapterId) {
-  if (!selectedAdapterId || selectedAdapterId === "none") {
-    return null;
-  }
-
-  return adapterProfiles.admitted.find((profile) => profile.id === selectedAdapterId) ?? null;
-}

package/cli/lib/audit-execution.mjs

@@ -1,52 +0,0 @@
-import path from "node:path";
-
-import {
-  AUDIT_EXECUTION_ARTIFACTS_CONFIG_REF,
-  AUDIT_SWEEP_ARTIFACT_HARD_CONSTRAINTS,
-  AUDIT_SWEEP_ARTIFACT_ROOTS,
-  AUDIT_SWEEP_RESULT_CONTRACT_REF,
-  HOST_ADAPTER_CONFIG_REF,
-} from "../constants.mjs";
-import { readTextIfFile } from "./fs-helpers.mjs";
-import { arraysEqual, isPlainObject, toStringArray } from "./value-helpers.mjs";
-import { parseYamlText } from "./yaml-helpers.mjs";
-
-function parseAuditExecutionArtifactsConfig(text) {
-  const parsed = parseYamlText(text);
-  const root = parsed?.audit_execution_artifacts;
-  const artifactRoots = isPlainObject(root?.artifact_roots) ? root.artifact_roots : null;
-  const hardConstraints = toStringArray(root?.hard_constraints);
-
-  const artifactRootsOk = Boolean(artifactRoots)
-    && Object.entries(AUDIT_SWEEP_ARTIFACT_ROOTS).every(
-      ([field, expectedPath]) => String(artifactRoots[field] ?? "") === expectedPath,
-    )
-    && Object.keys(artifactRoots).length === Object.keys(AUDIT_SWEEP_ARTIFACT_ROOTS).length;
-
-  return {
-    ok: String(root?.skill_id ?? "") === "audit_sweep"
-      && String(root?.host_adapter_ref ?? "") === HOST_ADAPTER_CONFIG_REF
-      && String(root?.result_contract_ref ?? "") === AUDIT_SWEEP_RESULT_CONTRACT_REF
-      && String(root?.locality ?? "") === "local_only"
-      && artifactRootsOk
-      && arraysEqual(hardConstraints, AUDIT_SWEEP_ARTIFACT_HARD_CONSTRAINTS),
-    artifactRoots: artifactRootsOk
-      ? Object.fromEntries(
-        Object.entries(AUDIT_SWEEP_ARTIFACT_ROOTS).map(([field]) => [field, artifactRoots[field]]),
-      )
-      : null,
-    hardConstraints,
-  };
-}
-
-export async function loadAuditExecutionArtifactsConfig(projectRoot) {
-  const text = await readTextIfFile(
-    path.join(projectRoot, AUDIT_EXECUTION_ARTIFACTS_CONFIG_REF),
-  );
-
-  return {
-    path: AUDIT_EXECUTION_ARTIFACTS_CONFIG_REF,
-    text,
-    ...parseAuditExecutionArtifactsConfig(text),
-  };
-}