@nimiplatform/nimi-coding 0.3.0 → 0.4.0

package/cli/seeds/seed-policy.yaml

@@ -1,64 +1,10 @@
-policy_id: nimicoding.seed-projection.v1
-description: |
-  Single source of truth for how nimi-coding package source is projected into
-  a host project's .nimi/** bootstrap surface. Every entry under the declared
-  source dirs is projected unless excluded; per-path ownership overrides
-  control whether the projected file stays package-canonical (refresh on sync,
-  drift is an error) or only carries the initial seed (host owns drift).
-
+policy_id: nimicoding.seed-projection.v3
+description: Exact downstream projection registry for canonical authority authoring.
 projections:
-  - source_dir: config
-    output_dir: .nimi/config
-  - source_dir: contracts
-    output_dir: .nimi/contracts
-  - source_dir: methodology
-    output_dir: .nimi/methodology
-
-default_ownership: package_canonical
-
-ownership_semantics:
-  package_canonical:
-    initial_seed: true
-    refresh_on_sync: true
-    drift_is_error: true
-    description: |
-      Package source is canonical truth. nimicoding sync --apply rewrites
-      drifted host copies. nimicoding sync --check exits non-zero on any
-      drift or missing entry. doctor performs byte comparison.
-  host_state_seed:
-    initial_seed: true
-    refresh_on_sync: false
-    drift_is_error: false
-    description: |
-      Package ships an initial seed, but host owns the canonical content
-      after first install. nimicoding sync --apply only writes when the
-      host file is missing. Drift never fails sync or doctor.
-  host_profile_override:
-    initial_seed: true
-    refresh_on_sync: false
-    drift_is_error: false
-    description: |
-      Package ships the generic default, but an admitted host profile may own
-      the canonical content after bootstrap. nimicoding sync --apply only
-      writes when the host file is missing. Drift never fails sync or doctor.
-
-ownership_overrides:
-  - path: .nimi/config/spec-generation-inputs.yaml
-    ownership: host_state_seed
-    reason: |
-      spec-generation-inputs carries host-specific reconstruction inputs
-      (code_roots, docs_roots, human_note_paths, blueprint refs). Package
-      only seeds the initial template; once the host populates real input
-      paths, sync --apply must not overwrite them.
-  - path: .nimi/contracts/domain-admission.schema.yaml
-    ownership: host_profile_override
-    reason: |
-      domain-admission is host-profile-specific. The package owns the generic
-      default project skeleton, while a product host such as Nimi owns its
-      admitted product domain list.
-  - path: .nimi/methodology/spec-reconstruction.yaml
-    ownership: host_profile_override
-    reason: |
-      spec-reconstruction declares host-specific required output domains and
-      generation shape. The package owns the generic default project skeleton,
-      while a product host may own a more specific reconstruction profile.
+  - source: methodology/authority-authoring.yaml
+    output: .nimi/methodology/authority-authoring.yaml
+    ownership: package_canonical
+    downstream_consumer: project AI reads the compact canonical authority authoring guide
+deprecated_projections:
+  - .nimi/config/spec-generation-inputs.yaml
+  - .nimi/contracts/domain-admission.schema.yaml

package/contracts/authority-evidence-bindings.schema.yaml

@@ -0,0 +1,53 @@
+version: 1
+contract:
+  id: nimicoding.authority-evidence-bindings.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority-evidence-bindings/v1
+probe: package-script-target-reachability/v1
+container:
+  path: .nimi/config
+  Git_index: one_exact_tracked_stage-zero_regular_entry
+  worktree: exact_current_regular_non-symlink_bytes
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+script_pattern: '^[a-z0-9](?:[a-z0-9._:-]*[a-z0-9])?$'
+version_pattern: '^[A-Za-z0-9](?:[A-Za-z0-9._+-]*[A-Za-z0-9])?$'
+fields:
+  top: [format, required_bindings, bindings]
+  binding: [id, authority, probe, manifest, command, tests, external_probe]
+  authority: [unit, scope]
+  command: [script, target]
+  tests: [script, targets]
+  external_probe: [id, version, required]
+paths:
+  form: non_empty_repository_relative_POSIX_path
+  forbidden: [absolute, empty_segment, dot_segment, dot_dot_segment, backslash, NUL, any_case-folded_.git_path_segment]
+  resolution: lexical_and_physical_containment_in_exact_repository_root
+  symlink_or_non_regular_leaf_or_parent: refused_and_never_followed
+package_script_grammar:
+  parsing: static_manifest_string_comparison_only
+  separator: one_ASCII_space_between_tokens_with_no_leading_or_trailing_space
+  command: node --import tsx <target>
+  tests: pnpm exec vitest run <targets...>
+  targets: exact_binding_paths_in_declared_order_using_only_ASCII_letters_digits_dot_underscore_hyphen_and_slash
+  forbidden: [quoting, escaping, environment_assignment, additional_option_or_flag, glob, pipe, redirect, command_substitution, command_chaining, arbitrary_executable]
+constraints:
+  required_bindings: non_empty_unique_exact_binding_IDs
+  binding_ID: unique_exact_dotted_lowercase_identifier
+  authority_unit: exact_active_rule_ID
+  authority_scope: exact_member_of_the_bound_active_rule_scope
+  probe: fixed_package_owned_probe_only
+  manifest: one_safe_repository_relative_regular_JSON_file_locator
+  command_script: one_exact_manifest_scripts_key
+  command_target: one_safe_repository_relative_regular_file_locator
+  tests_script: one_exact_manifest_scripts_key_distinct_from_command_script
+  test_targets: non_empty_unique_safe_repository_relative_regular_file_locators
+  within_binding_locator_roles: manifest_command_target_and_test_targets_are_pairwise_portable-distinct
+  cross_binding_locator_paths: exact_duplicates_may_share_one_input_but_portable_case_collisions_are_forbidden
+  configured_binding_not_required: evaluated_but_does_not_create_required_coverage
+  external_probe: null_or_exact_object
+  external_probe_ID: exact_dotted_lowercase_identifier
+  external_probe_version: explicit_non_empty_version
+  external_probe_required: boolean
+  duplicate_or_extra_fields: forbidden
+  binding_product_semantics_defaults_or_conformance_claims: forbidden

package/contracts/authority-evidence-probe-results.schema.yaml

@@ -0,0 +1,38 @@
+version: 1
+contract:
+  id: nimicoding.authority-evidence-probe-results.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority-evidence-probe-results/v1
+container:
+  path: .nimi/local
+  entry: one_exact_regular_non-symlink_supplied_observation_file
+  Git_tracking: not_required
+identity_pattern: '^sha256:[0-9a-f]{64}$'
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+version_pattern: '^[A-Za-z0-9](?:[A-Za-z0-9._+-]*[A-Za-z0-9])?$'
+fields:
+  top: [format, authority_content_identity, repository_input_identity, binding_identity, results]
+  item: [binding, probe, version, adapter, execution, outcome]
+  adapter: [id, version]
+execution: [completed, failed, unsupported]
+outcome:
+  completed: [passed, failed]
+  failed_or_unsupported: null
+constraints:
+  identities: exact_lowercase_SHA-256_identities_of_the_captured_inputs
+  results: unique_by_binding_with_no_extra_or_duplicate_items
+  binding: exact_configured_binding_ID_with_one_external_probe_declaration
+  probe_and_version: exact_match_to_the_binding_external_probe
+  adapter_ID: exact_dotted_lowercase_identifier
+  adapter_version: explicit_non_empty_version
+  malformed_unknown_or_identity_mismatched_result: refused_not_gap_or_clean
+  missing_declared_result: represented_by_runtime_as_not_provided
+  execution_and_outcome: exact_conditional_shape
+  extra_fields: forbidden
+trust:
+  source: external_supplied_observation
+  package_attestation: false
+  shape_identity_or_coverage_validation_proves_execution: false
+  reported_pass_proves_conformance_or_test_success: false
+  external_result_creates_deterministic_finding_or_blocking_authority: false

package/contracts/authority-impact-dispositions.schema.yaml

@@ -0,0 +1,13 @@
+version: 1
+contract:
+  id: nimicoding.authority-impact-dispositions.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority-impact-dispositions/v1
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+status: addressed
+fields:
+  top: [format, rules]
+  rule: [id, consumers, test]
+  consumer: [scope, status, evidence]
+  test: [status, evidence]

package/contracts/authority-scope-bindings.schema.yaml

@@ -0,0 +1,15 @@
+version: 1
+contract:
+  id: nimicoding.scope-bindings.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.scope-bindings/v1
+fields:
+  top: [format, scopes]
+  scope: [scope, bindings]
+  binding: [kind, value]
+binding_kinds: [path_glob, module, command]
+text_values:
+  unicode: well_formed_scalar_sequence
+  non_empty: true
+  line_break_code_points: [U+000A, U+000B, U+000C, U+000D, U+0085, U+2028, U+2029]

package/contracts/authority-source.schema.yaml

@@ -0,0 +1,64 @@
+version: 1
+contract:
+  id: nimicoding.authority-source.v2
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority/v2
+migration_inputs:
+  format: nimicoding.authority/v1
+  admitted_by: [fmt --upgrade, diff, compile, check, impact]
+  rationale: history_snapshots_and_migration_inputs_are_read_not_authored
+  compatibility_product_surface: none_v1_is_not_a_current_authoring_format
+file_suffixes: [.authority.yaml, .authority.md]
+yaml_document:
+  allowed_fields: [format, owner, scope, units]
+  required_fields: [format, units]
+  container_defaults:
+    owner: applies_to_every_unit_that_omits_owner
+    scope: one_scope_value_applied_to_every_active_rule_that_omits_scope
+    definitions_do_not_inherit_scope: true
+  unit_omission_defaults:
+    lifecycle: active
+    relations: []
+  both_levels_absent: fail_closed_no_inference
+  units: non_empty_sequence_of_closed_authority_unit_mappings
+  unit_format_field: forbidden
+  unit_identity: explicit_and_independent_of_file_name_source_index_move_order_or_regroup
+  source_order: non_semantic
+  legacy_top_level_single_unit_mapping: rejected
+markdown_document:
+  units_per_file: 1
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+kinds: [rule, definition]
+lifecycles: [active, removed]
+modalities: [must, must_not]
+text_values:
+  fields: [title, meaning, statement, condition, failure, reason]
+  unicode: well_formed_scalar_sequence
+  non_empty: true
+  trim: no_leading_or_trailing_whitespace
+  line_break_code_points: [U+000A, U+000B, U+000C, U+000D, U+0085, U+2028, U+2029]
+fields:
+  yaml_document: [format, owner, scope, units]
+  yaml_document_migration_input: [format, units]
+  unit_common: [id, kind, owner, lifecycle, title, relations]
+  active_definition_required: [meaning]
+  active_rule_required: [modality, scope, statement, condition, failure]
+  removed_required: [reason]
+  yaml_unit_allowed: [id, kind, owner, lifecycle, title, meaning, modality, scope, statement, condition, failure, reason, relations]
+  markdown_frontmatter_allowed: [format, id, kind, owner, lifecycle, modality, scope, relations]
+relation_item_fields: [type, target]
+relation_types:
+  applies_to:
+    source: active_rule
+    target: active_definition
+    minimum_outgoing: 1
+  supersedes:
+    source: active_or_removed_unit
+    target: removed_same_kind
+    maximum_outgoing: 1
+    maximum_incoming: 1
+ordering:
+  unit: id
+  scope: lexical
+  relation: [type, target]

package/contracts/authority-verifier-bindings.schema.yaml

@@ -0,0 +1,20 @@
+version: 1
+contract:
+  id: nimicoding.authority-verifier-bindings.v1
+  owner: nimi-coding
+  visibility: package_internal
+format: nimicoding.authority-verifier-bindings/v1
+detector: minimum-independent-incoming-reference/v1
+identifier_pattern: '^[a-z](?:[a-z0-9-]*[a-z0-9])?(?:\.[a-z](?:[a-z0-9-]*[a-z0-9])?)+$'
+policies: [advisory, blocking]
+fields:
+  top: [format, required_bindings, bindings]
+  binding: [id, detector, premise, targets, minimum, policy]
+constraints:
+  required_bindings: non_empty_unique_exact_binding_IDs
+  binding_ID: unique_exact_dotted_lowercase_identifier
+  premise: exact_active_rule_ID
+  targets: non_empty_unique_exact_active_definition_IDs
+  minimum: positive_safe_integer
+  policy: advisory_or_blocking
+  extra_fields: forbidden

package/methodology/authority-authoring.yaml

@@ -0,0 +1,144 @@
+version: 2
+id: nimicoding.authority-authoring
+purpose: Author explicit .nimi/spec authority without inference.
+authority_boundary:
+  canonical_root: .nimi/spec
+  sources: ["*.authority.yaml", "*.authority.md"]
+  rule: The project owns product meaning; nimicoding formats, validates, and derives read-only results.
+  AI_inputs: [this_guide, task_authority, bounded_discovery, exact_query_or_bounded_context, diagnostics]
+  do_not_read: [complete_authority_corpus, contracts, package_internal_specs]
+
+daily_workflow:
+  - If no exact ID is known, run nimicoding authority discover <path> <query> --max-candidates 10 --max-snippet-terms 24 --max-bytes 131072 --json. Filters are exact; pass --preview-direction, --relations, and --max-edges together. It neither selects nor proves absence.
+  - Select an ID only from task or product authority. Use nimicoding authority query <path> <id> --max-bytes <positive-integer> --json for one unit, or context <path> <id> --max-units <positive-integer> --max-bytes <positive-integer> --json for its declared outgoing applies_to/supersedes closure. Context is not complete task context.
+  - Modify only project-owned canonical authority. Choose every product value before writing; never infer an ID, owner, scope, condition, failure, or relation.
+  - Run nimicoding authority fmt <changed-file> for each changed file.
+  - Run nimicoding authority check <complete-path> [--scope-bindings <file>] --json; then compile. For repository anchors run nimicoding authority anchors <repository-path> --spec <corpus-path> [--scope-bindings <file>] --max-units <positive-safe-integer> --max-anchors <positive-safe-integer> --max-bytes <positive-safe-integer> --json.
+  - For semantic changes, run diff and impact with explicit budgets and complete inputs; address every obligation and rerun impact.
+  - Never continue from compiler diagnostics, unknown IDs, budget failures, or partial/guessed results.
+
+source_profiles:
+  yaml:
+    shape: "Closed mapping: format nimicoding.authority/v2; owner?; scope string?; units. Units/IDs/order unchanged."
+    defaults: owner/rule scope inherit; unit overrides; definitions lack scope.
+    omissions: lifecycle active and relations [] may be omitted; removed/reason stay explicit; missing owner/rule scope at both levels fails.
+    legacy: nimicoding.authority/v1 remains accepted unchanged; fmt --upgrade emits v2 and hoists uniform defaults.
+  markdown:
+    shape: One unit per file. Front matter carries format, id, kind, owner, lifecycle, rule modality/scope, and relations.
+    title: One plain H1.
+    sections:
+      active_definition: [Meaning]
+      active_rule: [Statement, Condition, Failure]
+      removed_unit: [Removal reason]
+    boundary: Each section is one plain-text line; no free prose or unknown structures.
+  shared_text_rule: Text fields are non-empty trimmed single-line Unicode.
+
+common_fields:
+  id: Stable dot-separated lower-case identity; never reuse a removed ID.
+  kind: rule or definition.
+  owner: Accountable dotted lower-case unit or container value.
+  lifecycle: active or explicit removed.
+  title: Required display label.
+  relations: Type/target pairs; omitted means [].
+
+unit_shapes:
+  active_definition:
+    required: [id, kind, title, meaning]
+    fixed: {kind: definition, lifecycle: active}
+    forbidden: [modality, scope, statement, condition, failure, reason]
+  active_rule:
+    required: [id, kind, title, modality, statement, condition, failure]
+    fixed: {kind: rule, lifecycle: active}
+    modality: must or must_not.
+    scope: Non-empty unique unit list or one inherited container value.
+    condition: Write the actual condition; use Always. only when unconditional.
+    failure: State observable failure; never pseudo-success or silent fallback.
+    forbidden: [meaning, reason]
+  removed_tombstone:
+    required: [id, kind, lifecycle, title, reason]
+    fixed: {lifecycle: removed}
+    boundary: Preserve the stable identity and kind. reason is lifecycle rationale, not normative replacement content.
+    forbidden: [meaning, modality, scope, statement, condition, failure]
+
+relation_rules:
+  applies_to: Required one or more times from each active rule to active definitions only.
+  supersedes: Optional from active or removed to one removed unit of the same kind; at most one incoming/outgoing edge, acyclic linear lineage.
+  resolution: Targets resolve by exact ID in the complete input; invalid, dangling, mismatched, cyclic, duplicate, or inferred edges fail.
+
+formatter_and_diagnostics:
+  - fmt canonicalizes; v2 strips redundant unit defaults but keeps container choices.
+  - fmt --upgrade emits v2, hoists uniform owner/single scope, and preserves compiled meaning.
+  - check/compile use the complete path and fail closed; no public or partial AuthorityIR is emitted.
+  - Diagnostics give locations, reasons, conflicts, and repair categories, never product values.
+  - Fix values only from task or product authority. Do not invent container defaults, fallback data, historical inference, internal contracts, or wildcard corpus reading.
+
+change_workflow:
+  diff: nimicoding authority diff <before-path> <after-path> --max-bytes <positive-integer> --json
+  impact: nimicoding authority impact <before-path> <after-path> --dispositions <file> --max-bytes <positive-integer> --json
+  boundaries:
+    - Diff compares complete canonical inputs; formatting, profile, file, and order-only changes are semantic zero.
+    - Impact follows declared reverse applies_to/supersedes only. Each impacted active rule needs evidence for every before/after scope consumer and one test obligation.
+    - Diff/impact budgets cover complete compact payloads; budget failure returns no partial result.
+    - Dispositions are local evidence under .nimi/local, never authority or proof that implementation, consumers, or tests are synchronized.
+
+disposition_authoring:
+  workflow:
+    - Write the empty skeleton and run impact to obtain exact obligations from the failed result.
+    - Add exactly one entry per impacted active rule using real project evidence, then rerun impact with the same budget. Missing or extra dispositions fail.
+  empty_skeleton: |
+    format: nimicoding.authority-impact-dispositions/v1
+    rules: []
+  complete_example: |
+    format: nimicoding.authority-impact-dispositions/v1
+    rules:
+      - id: rule.checkout-session
+        consumers:
+          - scope: api.checkout
+            status: addressed
+            evidence: src/checkout/session-handler.ts
+        test:
+          status: addressed
+          evidence: tests/checkout-session.test.ts
+
+canonical_examples:
+  complete_yaml_lifecycle: |
+    format: nimicoding.authority/v2
+    scope: api.checkout
+    units:
+      - id: definition.session-v0
+        kind: definition
+        owner: team.identity
+        lifecycle: removed
+        title: Legacy session
+        reason: Replaced by the current session definition.
+      - id: definition.session
+        kind: definition
+        owner: team.identity
+        title: Session
+        meaning: A server-issued identity context presented with a protected request.
+        relations:
+          - type: supersedes
+            target: definition.session-v0
+      - id: rule.checkout-no-anonymous-v0
+        kind: rule
+        owner: team.checkout
+        lifecycle: removed
+        title: Legacy anonymous checkout prohibition
+        reason: Replaced by the current checkout prohibition.
+      - id: rule.checkout-no-anonymous
+        kind: rule
+        owner: team.checkout
+        title: Anonymous checkout is prohibited
+        modality: must_not
+        statement: Checkout creates an order without a valid session.
+        condition: Always.
+        failure: Reject the request before creating an order.
+        relations:
+          - type: applies_to
+            target: definition.session
+          - type: supersedes
+            target: rule.checkout-no-anonymous-v0
+
+final_boundaries:
+  - Authority is only project-authored *.authority.yaml or *.authority.md under .nimi/spec; derived/local output is not authority.
+  - Derived reads are bounded and read-only; none selects authority, supplies complete task context, or proves completion.

package/methodology/core.yaml

@@ -1,33 +1,38 @@
-version: 3
+version: 5
 methodology:
   id: nimi-coding
-  mission: Preserve explicit product authority while AI-assisted changes are designed, implemented, and verified by the host environment.
+  mission: Preserve explicit project-authored canonical authority through deterministic formatting, compilation, and fail-closed gates.
   package_boundary:
     owns:
-      - methodology_principles
-      - spec_construction_contracts
-      - managed_methodology_and_contract_projections
-      - deterministic_spec_and_governance_validation
+      - compact_canonical_authority_authoring_methodology
+      - exact_package_projection_and_managed_instruction_blocks
+      - canonical_authority_formatter_and_conformance_gate
+      - bounded_deterministic_exact_filtered_lexical_candidate_discovery_with_SourceMapped_field_snippets_and_optional_direct_authored_relation_preview
+      - private_compiler_filtered_lexical_discovery_and_exact_query
+      - complete_declared_outgoing_interpretation_closure
+      - bounded_explicit_relation_graph_navigation
+      - project_bound_deterministic_authority_audit_and_SARIF_projection
+      - semantic_diff_and_declared_review_obligations
+      - optional_L3_repository_governance_checks
     does_not_own:
-      - task_planning
-      - task_state
-      - agent_delegation
-      - implementation_execution
-      - review_or_approval_state
-      - provider_runtime
-  principles:
-    - authority_before_convenience
-    - explicit_complexity_over_ambiguous_simplicity
-    - root_cause_over_local_patch
-    - no_pseudo_success
-    - evidence_must_not_override_authority
-    - generated_views_are_never_canonical
-    - unresolved_semantic_forks_fail_closed
+      - project_product_semantics
+      - historical_document_reconstruction_or_inference
+      - profile_specific_authority_validation
+      - task_planning_or_state
+      - agent_delegation_or_AI_execution
+      - implementation_or_review_completion
+      - host_workflow_commands
+      - storage_semantic_search_visualization_or_Atlas
   authority_order:
-    - host_product_spec
-    - package_methodology_and_contracts
+    - host_canonical_authority_under_.nimi/spec
+    - projected_compact_authoring_methodology
+    - package_internal_compiler_contracts
     - local_non_authority_evidence
-    - implementation
-  host_integration:
-    execution_owner: host_native_capabilities
-    constraint: nimi-coding_outputs_may_inform_but_must_not_orchestrate_host_execution
+  boundaries:
+    discovery: bounded_exact_filtered_lexical_candidates_with_SourceMapped_field_snippets_and_optional_M1_direct_authored_relation_preview_not_semantic_search_selection_context_complete_recall_or_absence_proof
+    context: complete_declared_outgoing_interpretation_closure_not_complete_task_context
+    graph: bounded_explicit_relation_navigation_not_semantic_inference_or_raw_IR
+    audit: explicit_project_verifier_bindings_not_prose_inference_plugin_execution_or_product_authority
+    impact: declared_review_obligations_not_implementation_consumer_or_test_sync_proof
+    authority_admission: nimicoding_authority_check_on_complete_canonical_root
+    optional_repository_governance: separate_L3_not_authority_admission

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@nimiplatform/nimi-coding",
-  "version": "0.3.0",
+  "version": "0.4.0",
   "private": false,
-  "description": "AI-native methodology, spec construction, and deterministic governance validation.",
+  "description": "Canonical authority methodology, formatter, compiler primitives, and deterministic gates.",
   "license": "MIT",
   "homepage": "https://docs.nimi.ai/nimicoding",
   "repository": {
@@ -24,6 +24,7 @@
   "bin": {
     "nimicoding": "bin/nimicoding.mjs"
   },
+  "exports": {},
   "packageManager": "pnpm@10.32.1",
   "engines": {
     "node": ">=24.0.0",
@@ -43,7 +44,6 @@
   "files": [
     "bin",
     "cli",
-    "config",
     "contracts",
     "methodology",
     "spec",
@@ -56,8 +56,12 @@
     "LICENSE"
   ],
   "scripts": {
-    "test": "node ./cli/dev/run-suite.mjs",
-    "check:ci": "pnpm test && pnpm check:pack && node ./cli/dev/run-cli-smoke.mjs",
-    "check:pack": "npm pack --dry-run"
+    "check:authority-surface": "node ./cli/dev/check-authority-surface.mjs",
+    "check:product-conformance": "node ./cli/dev/check-product-conformance.mjs",
+    "check:product-conformance:packed": "node ./cli/dev/check-product-conformance.mjs --packed",
+    "check:ci": "pnpm test && pnpm check:pack && pnpm check:product-conformance:packed && node ./cli/dev/run-cli-smoke.mjs",
+    "check:pack": "npm pack --dry-run",
+    "prepack": "node ./cli/dev/check-authority-surface.mjs && node ./cli/dev/check-product-conformance.mjs",
+    "test": "node ./cli/dev/run-suite.mjs"
   }
 }

package/spec/authority-anchors.yaml

@@ -0,0 +1,99 @@
+version: 1
+spec:
+  id: nimicoding.authority-anchors.v1
+  owner: nimi-coding
+  status: active
+product_claim: bounded_static_lexical_anchor_validation_against_one_exact_Git_tracked_file_inventory_and_root_package_scripts
+command: nimicoding authority anchors <repository-path> --spec <corpus-path> [--scope-bindings <file>] [--embedded-paths] --max-units <positive-safe-integer> --max-anchors <positive-safe-integer> --max-bytes <positive-safe-integer> [--json]
+surface:
+  report_format: nimicoding.authority-anchors/v1
+  corpus_root: repository_authority_corpus_only
+  boolean_flags: [json, embedded-paths]
+  value_flags: [spec, scope-bindings]
+  integer_flags: [max-units, max-anchors, max-bytes]
+  repeatable_flags: []
+  findings_change_exit_code: true
+inputs:
+  repository:
+    shape: exact_non_symlink_Git_worktree_root
+    tracked_files: one_complete_git_ls_files_cached_NUL_inventory
+    Git_environment: inherited_Git_overrides_traces_replacements_lazy_fetch_prompts_and_locale_are_sanitized_as_for_authority_snapshots
+    writes_or_execution: forbidden
+  corpus:
+    root: exact_repository_relative_.nimi/spec_resolved_realpath
+    admission: complete_authority_compile_required
+    units: active_only
+    fields:
+      shared_lexicon: normative_field_set_is_one_shared_definition_across_report_products
+      active_definition: [meaning]
+      active_rule: [statement, condition, failure]
+      removed: []
+  scope_bindings:
+    required: false
+    structural_contract: nimicoding.scope-bindings/v1
+    evaluated_kinds: [path_glob]
+    declaration_only_kinds: [module, command]
+lexical_grammar:
+  token: maximal_non_whitespace_sequence
+  class_A:
+    name: tracked_file_path
+    requirements:
+      - token_contains_at_least_one_forward_slash
+      - token_ends_exactly_with_one_known_lowercase_extension
+    excluded_prefixes:
+      - any_leading_tilde_including_tilde_forward_slash
+      - POSIX_absolute_forward_slash
+      - ASCII_letter_colon_forward_or_back_slash_Windows_drive
+      - two_leading_backslashes_UNC
+    exclusion_evaluation: deterministic_exact_prefix_checks_before_class_A_admission
+    extensions: [mjs, js, ts, tsx, rs, go, yaml, yml, md, json, proto, ps1]
+    resolution: exact_byte_text_membership_in_the_decoded_Git_tracked_file_inventory
+    normalization_or_inference: forbidden
+  class_B:
+    name: root_package_script
+    phrase: pnpm_followed_by_exactly_one_ASCII_space_then_one_maximal_non_whitespace_script_name_token
+    script_name_admission: contains_colon_OR_fully_matches_[a-z][a-z0-9:-]*
+    builtin_subcommands_excluded: [add, audit, create, dlx, exec, install, link, list, outdated, patch, publish, remove, run, update, why]
+    resolution: exact_own_key_membership_in_repository_root_package.json_scripts
+    execution: forbidden
+  class_C:
+    name: embedded_repository_path
+    admission: opt_in_via_--embedded-paths
+    shape: maximal_embedded_<root>/<segment>(/<segment>)*.<extension>_substring
+    segment_alphabet: shared_lexicon_[A-Za-z0-9_.-]
+    roots: Git_tracked_top_level_segments_plus_.nimi
+    left_boundary:
+      segment_character: rejected_as_mid_segment_start
+      separator_run_after_a_longer_path: rejected_as_foreign_tail
+      relative_prefix_dot_or_dot_dot: admitted
+    excluded_context: glob_star_or_angle_bracket_placeholder
+    resolution: exact_byte_text_membership_in_the_decoded_Git_tracked_file_inventory
+scope_path_globs:
+  candidates: complete_Git_tracked_file_inventory
+  matching: whole_repository_relative_path_case_sensitive
+  operators:
+    star: zero_or_more_non_slash_characters
+    question: one_non_slash_character
+    double_star: zero_or_more_characters_including_slash
+    double_star_slash: zero_or_more_complete_path_segments
+  zero_matches: diagnostic_lists_exact_scope_and_glob
+result:
+  trackedPathSetDigest: sha256_hex_of_nimicoding.repository-inventory/v1_canonical_tracked_path_set_preimage
+  summary_fields: [units, anchorsChecked, diagnostics]
+  diagnostic_location: exact_unit_ID_field_SourceMap_range_and_source_pointer
+  anchor_diagnostic_fields: [unitId, field, anchor]
+  scope_diagnostic_fields: [scope, glob]
+  ordering:
+    anchors: [unit_ID, anchor_text, field, class]
+    scope_globs: [scope, glob]
+  unresolved_anchor_or_glob: complete_invalid_product_exit_1
+  human_and_json: required
+budgets:
+  max_units: complete_active_unit_count
+  max_anchors: complete_extracted_anchor_occurrence_count
+  max_bytes: UTF-8_size_of_compact_format_complete_summary_and_diagnostics_product
+  overflow: refused_exit_1_with_required_and_admitted_values
+  N_and_N_minus_1: exact_symmetric_boundary
+  truncation_or_partial_result: forbidden
+usage_failure: missing_repeated_unknown_or_invalid_CLI_argument_exit_2_without_anchor_product
+not_claimed: [semantic_path_inference, module_resolution, command_binding_resolution, command_execution, test_execution, code_conformance]