@nodii/dev 0.6.29 → 0.6.30

package/README.md

@@ -87,7 +87,7 @@ nodii-dev login [--no-browser] [--scope KEYS] [--force]
 nodii-dev logout
 nodii-dev whoami                   # OAuth identity plus the registered agent
 nodii-dev config show
-nodii-dev doctor [--figma-file KEY] [--json]   # preflight: everything a lane needs, read-only
+nodii-dev doctor [--figma-file KEY] [--json]   # preflight: Dev, hooks, local Ollama + Gather model, optional Figma
 
 nodii-dev api list [--tag TAG] [--json]
 nodii-dev api OPERATION_ID [--param name=value ...] [--body @file|-|JSON]
@@ -129,6 +129,15 @@ nodii-dev decisions get D123
 nodii-dev decisions search WORDS
 nodii-dev decisions create|lock|supersede|amend
 
+nodii-dev lane gather [KEY] [--delta] [--objective TEXT] [--done-check TEXT]
+                        [--paths A,B] [--components K,L]
+nodii-dev lane freeze add KEY --section SECTION --file ITEM.json --reason TEXT
+nodii-dev lane freeze drop KEY --section SECTION --item ID --reason TEXT
+nodii-dev lane freeze swap KEY --section SECTION [--item ID] --file VALUE.json --reason TEXT
+nodii-dev lane freeze show KEY
+nodii-dev lane freeze history KEY
+nodii-dev rules find "QUESTION" [--limit N]
+
 nodii-dev open-questions list|show|answer
 nodii-dev feature-docs list|show|claim|release|status
 nodii-dev contracts grpc|rest|outbox|saga|table publish|status
@@ -764,6 +773,13 @@ call until `lane gather --delta` serves the current rules and acknowledges the
 newest displayed version. `NODII_DEV_RUN_ID` makes this check per subagent run,
 so one child cannot acknowledge for its siblings.
 
+Gather also persists the lane's bounded Freeze: the objective and done check,
+strict repository/Figma boundaries, the current pinned clauses, and the lane's
+lookups, decisions, and unconfirmed questions. Ordinary CLI calls print and
+acknowledge a changed Freeze before continuing, and compact SessionStart uses
+the same backstop. `lane freeze add|drop|swap` makes a reasoned, version-checked
+change; `show|history` reads the current contract or its append-only history.
+
 `lane start` creates and starts a lane. It infers the repository (by short
 name, as Dev compares it), branch and worktree from git unless overridden, and resolves `--issue` keys to the UUIDs
 required by Dev. Lane keys are passed directly to every lane and Built

package/dist/cli.js

@@ -26,6 +26,7 @@ import { harnessCommand } from "./harness.js";
 import { hookRuntime, recordHookFire, safetyPostHook, safetyPreHook } from "./safety.js";
 import { doctorCommand } from "./doctor.js";
 import { dispatchManagedHook } from "./managed-hooks.js";
+import { freezeCommand } from "./freeze.js";
 import {
   figmaChangeSetShow,
   figmaChangeSetText,
@@ -95,8 +96,8 @@ Usage: nodii-dev <command> [options] [--json]
   login [--force] | logout | whoami | config show
                                         # login says so when the machine is already signed in; --force
                                         # replaces that one sign-in (never from a lane)
-  doctor [--figma-file KEY] [--json]    # preflight: sign-in, agent, permissions, machine, repo, lane slots
-                                        # and, given a key (or NODII_DEV_FIGMA_FILE), that Figma file's registration
+  doctor [--figma-file KEY] [--json]    # preflight: sign-in, agent, permissions, machine, repo, lane slots,
+                                        # local Ollama + pinned Gather model, and optional Figma registration
   agent register --name NAME | agent heartbeat
   issues list|show|create|update|claim|release
   issues comment ISSUE --body TEXT      # or --body-file FILE; issues update --comment TEXT|--comment-file FILE adds one too
@@ -135,7 +136,7 @@ Usage: nodii-dev <command> [options] [--json]
   figma file add FILE_KEY --name TEXT --kind design-system|surfaces|prototype [--module M]
                                         # register a Figma file in Dev so it can be locked
   hook claude-figma-pre|claude-figma-post|safety-pre|safety-post|session-start|managed-dispatch|print-settings
-  setup [--yes|--check]                 # dry-run by default
+  setup [--yes|--check]                 # dry-run by default; installs/checks Ollama and pulls the Gather model
   harness install|update [--include-drafts[=false]] [--adopt PATH,...] [--dry-run] [--system]
                                         # --system stages managed hooks and only prints operator-reviewed sudo commands
   harness check                         # 0 current, 1 differs from Dev, 2 not installed
@@ -150,6 +151,7 @@ Usage: nodii-dev <command> [options] [--json]
   rulebook list|show CODE [--version V]|diff CODE
   rules core                            # the generated core (M05-33); refused over the cap
   rules report [--section S] [--lane KEY]   # delivery totals per document; rules served per lane
+  rules find "QUESTION" [--limit N]         # answer an ad-hoc rules question from the indexed sections
   rules cap TOKENS                      # operator: set the core token cap (default 3000)
 
   coordinator start --machine NAME       # register this machine's one watched coordinator; refuses a live second
@@ -162,7 +164,8 @@ Usage: nodii-dev <command> [options] [--json]
                                         # authoritative preflight, one worktree per repo, watched launch
                                         # uses the provisioned agents/lane-<key>.json Dev identity
   lane amend <key> --objective|--scope|--rules TEXT --reason TEXT
-  lane gather [<key>] [--delta]         # infers a launched worktree; Delta required after an amendment
+  lane gather [<key>] [--delta] [--objective TEXT] [--done-check TEXT]
+                                        # infers a launched worktree; explicit contract inputs support manual lane start
   run [--kind build|test_run|subagent|deploy] [--name TEXT] -- <command> [args...]
                                         # watched command: registers with NODII_DEV_RUN_ID,
                                         # heartbeats, and records exit code + redacted log tail
@@ -175,12 +178,18 @@ Usage: nodii-dev <command> [options] [--json]
   lane heartbeat|resume|land|verify|prioritize|deprioritize|stop <key>
   lane review <key> --file REVIEW.json  # base/head, outcome and clause-cited findings
   lane reviews <key>                    # stored review history for the lane
+  lane freeze add <key> --section SECTION --file ITEM.json --reason TEXT
+  lane freeze drop <key> --section SECTION --item ID --reason TEXT
+  lane freeze swap <key> --section SECTION [--item ID] --file VALUE.json --reason TEXT
+  lane freeze show|history <key>         # durable compact-safe contract and all versions
   lane non-issue <key> --reason TEXT --evidence TEXT --reroute KEY[,KEY]|none
                  --branch carried:KEY|dropped[:REASON] [--commits SHA[,SHA]]
                                         # DEC-0011: terminal non_issue; issue -> wont_do; slot frees
   lane list [--kind KIND] [--status STATUS] [--mine] [--cursor CURSOR]
   lane show <key> | next <key> [--paths A,B] [--components K,L] [--role R]
                                         # next step, plus the rules Dev serves for it (DEC-0020)
+  lane gather [key] [--delta] [--paths A,B] [--components K,L]
+                                        # local document pick; prints Lane contract then Clause map
   built list | built ack <key...>
   machine list|show|set-coordinator|assign|report
   agent lane-limit|grant|revoke
@@ -574,6 +583,8 @@ export async function main(argv = process.argv.slice(2)) {
   if (command === "lane" && action === "launch") return emitCommand(await launchLaneCommand(rest[0], f));
   if (command === "lane" && action === "amend") return emitCommand(await amendLaneCommand(rest[0], f));
   if (command === "lane" && action === "gather") return emitCommand(await gatherLaneCommand(rest[0], f));
+  if (command === "lane" && action === "freeze")
+    return emitCommand(await freezeCommand(rest[0], rest.slice(1), f));
   if (command === "lane") return emitCommand(await laneCommand(action, rest, f));
   if (command === "next") return emitCommand(await nextCommand(action, f));
   if (command === "built") return emitCommand(await builtCommand(action, rest, f));

package/dist/core.js

@@ -4,7 +4,7 @@ import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir, platform } from "node:os";
 import { dirname, join } from "node:path";
 
-export const VERSION = "0.6.29";
+export const VERSION = "0.6.30";
 export const configPath = () =>
   process.env.NODII_DEV_CONFIG_PATH ??
   join(homedir(), ".config/nodii-dev/config.json");
@@ -119,9 +119,30 @@ const staleCode = (raw) => {
   }
 };
 
-async function devFetch(method, path, bodyText, contentType, accept, extra = {}) {
-  const config = await readConfig();
-  const auth = await authProvider();
+const withSignal = (promise, signal) => {
+  if (!signal) return promise;
+  if (signal.aborted) return Promise.reject(signal.reason ?? new Error("aborted"));
+  return new Promise((resolvePromise, rejectPromise) => {
+    const abort = () => rejectPromise(signal.reason ?? new Error("aborted"));
+    signal.addEventListener("abort", abort, { once: true });
+    Promise.resolve(promise).then(
+      (value) => { signal.removeEventListener("abort", abort); resolvePromise(value); },
+      (error) => { signal.removeEventListener("abort", abort); rejectPromise(error); },
+    );
+  });
+};
+
+async function devFetch(method, path, bodyText, contentType, accept, extra = {}, signal) {
+  const wait = async (promise) => {
+    try {
+      return await withSignal(promise, signal);
+    } catch (error) {
+      if (signal?.aborted) throw new CliError("DEV_TIMEOUT", `Dev request timed out: ${method} ${path}`, 1);
+      throw error;
+    }
+  };
+  const config = await wait(readConfig());
+  const auth = await wait(authProvider());
   const url = requestUrl(config, path);
   // The edge refuses a token minted before the principal's claims epoch with
   // 401 token_stale (refresh and retry once). The request never reached Dev,
@@ -132,26 +153,28 @@ async function devFetch(method, path, bodyText, contentType, accept, extra = {})
   for (;;) {
     const headers = { accept, ...extra };
     if (bodyText !== undefined) headers["content-type"] = contentType;
-    Object.assign(headers, await auth.headers({ method, path, body: bodyText ?? "" }));
+    Object.assign(headers, await wait(auth.headers({ method, path, body: bodyText ?? "" })));
     let response;
     try {
-      response = await fetch(url, { method, headers, body: bodyText });
+      response = await wait(fetch(url, { method, headers, body: bodyText, signal }));
     } catch (error) {
+      if (error?.code === "DEV_TIMEOUT") throw error;
+      if (signal?.aborted) throw new CliError("DEV_TIMEOUT", `Dev request timed out: ${method} ${path}`, 1);
       throw new CliError("DEV_UNREACHABLE", `Cannot reach Dev at ${new URL(url).origin}: ${error.message}`);
     }
-    const raw = await response.text();
+    const raw = await wait(response.text());
     if (response.status !== 401 || typeof auth.refreshStale !== "function" || !staleCode(raw)) return { response, raw };
     if (refreshed) return { response, raw };
     // A cached token that is stale too is not adopted twice: the next one is refreshed.
     const used = String(headers.authorization ?? "").replace(/^Bearer /, "");
-    if ((await auth.refreshStale(used, { force: adopted })) === "refreshed") refreshed = true;
+    if ((await wait(auth.refreshStale(used, { force: adopted }))) === "refreshed") refreshed = true;
     else adopted = true;
   }
 }
 
 /** A JSON call that keeps the status: `{ status, payload }`. Errors throw as devRawRequest's do. */
-export async function devExchange(method, path, bodyText, { contentType = "application/json", headers = {} } = {}) {
-  const { response, raw } = await devFetch(method, path, bodyText, contentType, "application/json", headers);
+export async function devExchange(method, path, bodyText, { contentType = "application/json", headers = {}, signal } = {}) {
+  const { response, raw } = await devFetch(method, path, bodyText, contentType, "application/json", headers, signal);
   let payload;
   try {
     payload = raw ? JSON.parse(raw) : {};
@@ -168,8 +191,8 @@ export async function devExchange(method, path, bodyText, { contentType = "appli
   return { status: response.status, payload };
 }
 
-export async function devRawRequest(method, path, bodyText, contentType = "application/json") {
-  return (await devExchange(method, path, bodyText, { contentType })).payload;
+export async function devRawRequest(method, path, bodyText, contentType = "application/json", options = {}) {
+  return (await devExchange(method, path, bodyText, { ...options, contentType })).payload;
 }
 
 /** A Dev route that answers with text (e.g. a document body as text/markdown). Errors are Dev's JSON. */
@@ -181,8 +204,8 @@ export async function devTextRequest(method, path) {
   throw new CliError(payload.code ?? `HTTP_${response.status}`, payload.message ?? `Dev returned HTTP ${response.status}`, 1, payload.details);
 }
 
-export const devRequest = (method, path, body) =>
-  devRawRequest(method, path, body === undefined ? undefined : JSON.stringify(body));
+export const devRequest = (method, path, body, options) =>
+  devRawRequest(method, path, body === undefined ? undefined : JSON.stringify(body), "application/json", options);
 
 /** A JSON call sent with `Prefer: respond-async` (RFC 7240): `{ status, payload }`, 202 when Dev took it as a job. */
 export const devAsyncRequest = async (method, path, body) =>