@noir-ai/create 1.14.0 → 1.15.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@noir-ai/create",
-  "version": "1.14.0",
+  "version": "1.15.0",
   "description": "Noir scaffold engine — the idempotent declarative writer, manifest, templates, stack-detect, and migrations that power `noir init`/`create`/`sync`.",
   "license": "MIT",
   "author": "agaaaptr",
@@ -46,8 +46,8 @@
     "templates"
   ],
   "dependencies": {
-    "@noir-ai/adapters": "1.14.0",
-    "@noir-ai/core": "1.14.0"
+    "@noir-ai/core": "1.15.0",
+    "@noir-ai/adapters": "1.15.0"
   },
   "devDependencies": {
     "@types/node": "^22.17.0"

package/templates/config.env.tmpl

@@ -1,75 +1,38 @@
-# .noir/.env — project-scoped configuration for this repo.
-#
-# This file is the recommended home for project-scoped configuration and
-# secrets. Precedence:
-#   1. run profile env     run.profiles.<n>.env      (per-invocation; merges OVER)
-#   2. .noir/.env          <- recommended home for project-scoped configuration
-#   3. real environment    CI / container / launchd / shell rc
-#   4. built-in default
-#
-# A real environment variable is a FALLBACK: it applies only to keys this file
-# leaves unset. A machine-global export therefore cannot shadow a value here.
-# Run `noir env` to see which source is winning for each key.
-#
-# Keep this file private: chmod 600 .noir/.env
-# It is gitignored by Noir's managed .gitignore block, and Noir REFUSES to load
-# it if it is tracked by git (a cloned repo could redirect credentials).
-# Never commit it.
-#
-# EVERY LINE BELOW IS COMMENTED OUT. `noir init` created this file at mode 0600
-# with no active value, so it parses to an empty overlay and changes no
-# behaviour. Uncomment only what you enable, and fill in a real value.
-# `.noir/.env.example` carries the same set and stays committable.
+# .noir/.env — project configuration & secrets (chmod 600, gitignored).
+# This file WINS over your shell environment for every key it defines.
+# Run `noir env` to see the winning source per key.
 #
+# Everything below is commented out: Noir works with defaults.
+# Uncomment a line and set a real value to enable it.
 # Full reference: docs/reference/environment.md
 
-# --- Integrations -----------------------------------------------------------
-# ClickUp — only if the noir-clickup integration is enabled.
-# CLICKUP_API_TOKEN=pk_00000000000000000000000000000000
-#
-# CLICKUP_TEAM_ID is NOT an env var — Noir never reads it. Workspace binding
-# (team/list/space ids) is config.yml instead:
-#   integrations:
-#     clickup:
-#       teamId: "ABC123"   # optional — only for custom task IDs (#ABC-123)
+# --- Host gateway (Claude Code via Z.AI / LiteLLM / OpenRouter / Kimi ...) ---
+# Point the host at an Anthropic-shaped endpoint. BASE_URL is host-only
+# (no /v1). AUTH_TOKEN is sent as Authorization: Bearer.
+# ANTHROPIC_BASE_URL=https://api.z.ai/api/anthropic
+# ANTHROPIC_AUTH_TOKEN=replace-with-your-gateway-token
+# Remap the haiku/sonnet/opus aliases to gateway model ids:
+# ANTHROPIC_DEFAULT_HAIKU_MODEL=glm-5.3-flash
+# ANTHROPIC_DEFAULT_SONNET_MODEL=glm-5.3
+# ANTHROPIC_DEFAULT_OPUS_MODEL=glm-5.3
+# API_TIMEOUT_MS=3000000
+# CLAUDE_CODE_AUTO_COMPACT_WINDOW=1000000
 
-# --- Remote embedders (context.embedder.kind: remote) -----------------------
-# The default local embedder (kind: local) needs no key.
-# OPENAI_API_KEY=sk-000000000000000000000000000000000000000000000000
-# VOYAGE_API_KEY=pa-0000000000000000000000000000000000000000000000
-# COHERE_API_KEY=0000000000000000000000000000000000000000
-#
-# Ollama (kind: ollama) reads its base URL from config.yml
-# (context.embedder.baseURL); this variable is the fallback:
+# --- Integrations ---
+# CLICKUP_API_TOKEN=replace-with-your-clickup-token
+
+# --- Remote embedders (context.embedder.kind: remote) ---
+# OPENAI_API_KEY=replace-with-your-openai-key
+# VOYAGE_API_KEY=replace-with-your-voyage-key
+# COHERE_API_KEY=replace-with-your-cohere-key
 # OLLAMA_BASE_URL=http://localhost:11434
 
-# --- Model provider key -----------------------------------------------------
-# There is NO fixed "model key" variable, and setting one is not enough on its
-# own. `apiKeyEnv` is a NAME, not an interpolation: the config stores the
-# variable NAME and Noir reads process.env[<that name>] at call time. Write the
-# bare name — never `${...}` — in .noir/config.yml:
-#
-#   model:
-#     providers:
-#       anthropic:
-#         apiKeyEnv: ANTHROPIC_API_KEY   # -> reads $ANTHROPIC_API_KEY
-#     tiers:
-#       default:
-#         provider: anthropic
-#
-# Only `run.profiles.<name>.env` interpolates `${VAR}`. With no provider
-# configured the model layer degrades to templates — Noir never makes a silent
-# paid call. `ANTHROPIC_API_KEY` is the conventional example, not a variable
-# Noir looks up on its own:
-# ANTHROPIC_API_KEY=sk-ant-0000000000000000000000000000000000000000000000
+# --- Model provider key (read via apiKeyEnv in .noir/config.yml) ---
+# ANTHROPIC_API_KEY=replace-with-your-anthropic-key
 
-# --- Run profile selection --------------------------------------------------
-# Selects a `run.profiles.<name>` entry for `noir run`.
-# Precedence: --profile flag > NOIR_PROFILE > run.defaultProfile > host default.
+# --- Run profile selection (noir run) ---
 # NOIR_PROFILE=work
 
-# --- Update kill-switches ---------------------------------------------------
-# NOIR_DISABLE_UPDATE_CHECK=1   # suppress the background startup check only
-# NOIR_DISABLE_UPDATES=1        # make `noir update` refuse (exit 2)
-
-# See docs/reference/environment.md for every variable Noir reads.
+# --- Update kill-switches ---
+# NOIR_DISABLE_UPDATE_CHECK=1
+# NOIR_DISABLE_UPDATES=1

package/templates/env.example.tmpl

@@ -1,78 +1,104 @@
-# .noir/.env.example — committable documentation of the format.
+# .noir/.env.example — the committable reference for .noir/.env.
 #
-# This file is a TEMPLATE and is never loaded. Noir reads `.noir/.env`, which
-# `noir init` already created for you at mode 0600 — edit that file and
-# uncomment the entries you need. Keep this example in git so the variable set
-# stays discoverable.
+# What .noir/.env is for
+# ----------------------
+# .noir/.env is this project's configuration-and-secrets file. `noir init`
+# creates it at mode 0600 and gitignores it, and Noir loads it on every
+# command. For every key it defines, it WINS over your shell environment, so it
+# is the recommended home for project-scoped values and secrets.
 #
-# ---------------------------------------------------------------------------
-# The block below is the same header `.noir/.env` carries (spec 12.1).
-# ---------------------------------------------------------------------------
-#
-# .noir/.env — project-scoped configuration for this repo.
-#
-# This file is the recommended home for project-scoped configuration and
-# secrets. Precedence:
-#   1. run profile env     run.profiles.<n>.env      (per-invocation; merges OVER)
-#   2. .noir/.env          <- recommended home for project-scoped configuration
+# Precedence (highest wins):
+#   1. run profile env     run.profiles.<n>.env      (per-invocation; merges over)
+#   2. .noir/.env          the project-scoped file this example documents
 #   3. real environment    CI / container / launchd / shell rc
 #   4. built-in default
 #
-# A real environment variable is a FALLBACK: it applies only to keys this file
-# leaves unset. A machine-global export therefore cannot shadow a value here.
-# Run `noir env` to see which source is winning for each key.
+# A real environment variable is only a FALLBACK for keys .noir/.env leaves
+# unset. For a value scoped to one invocation, add a `run.profiles.<name>.env`
+# entry and reference it there as `${VAR}`, so the literal value stays out of
+# config.yml; values that must not be committed belong in `.noir/.env`
+# (gitignored) or the real environment. `noir env` reports the winning source
+# for each key.
+#
+# What to commit
+# --------------
+# Keep .noir/.env OUT of git: it holds real secrets, Noir's managed .gitignore
+# block excludes it, and Noir refuses to load a copy that IS tracked (a cloned
+# repo could redirect credentials). chmod 600 .noir/.env to keep it private.
+# Never commit the real file — commit THIS example, so the keys stay
+# discoverable and documented.
 #
-# Keep this file private: chmod 600 .noir/.env
-# It is gitignored by Noir's managed .gitignore block, and Noir REFUSES to load
-# it if it is tracked by git (a cloned repo could redirect credentials).
-# Never commit `.noir/.env`. (THIS file is the committable one.)
+# Every line below is documentation. Copy a key to .noir/.env and set a real
+# value to enable it.
+#
+# Full reference: docs/reference/environment.md
 
-# --- Integrations -----------------------------------------------------------
-# ClickUp — only if the noir-clickup integration is enabled.
-# CLICKUP_API_TOKEN=pk_00000000000000000000000000000000
+# --- Host gateway (Claude Code via Z.AI / LiteLLM / OpenRouter / Kimi ...) ---
+# Point the host at an Anthropic-shaped endpoint instead of api.anthropic.com.
+#
+# ANTHROPIC_BASE_URL — the gateway's base URL. Host ONLY: give the origin (for
+#   example https://gateway.example) and NOT the /v1/messages path — the host
+#   appends that itself.
+# ANTHROPIC_AUTH_TOKEN — sent as `Authorization: Bearer <token>`. It is the
+#   HEADER variant of a credential: AUTH_TOKEN becomes Bearer, while
+#   ANTHROPIC_API_KEY becomes x-api-key. Do not set BOTH — that is an auth
+#   conflict.
+# ANTHROPIC_DEFAULT_HAIKU_MODEL / _SONNET_MODEL / _OPUS_MODEL — remap the
+#   haiku / sonnet / opus aliases to the model ids your gateway serves.
+# API_TIMEOUT_MS — per-request timeout in milliseconds (Claude Code default is
+#   600000).
+# CLAUDE_CODE_AUTO_COMPACT_WINDOW — auto-compact window (100000 to 1000000).
 #
-# CLICKUP_TEAM_ID is NOT an env var — Noir never reads it. Workspace binding
-# (team/list/space ids) is config.yml instead:
-#   integrations:
-#     clickup:
-#       teamId: "ABC123"   # optional — only for custom task IDs (#ABC-123)
+# ANTHROPIC_BASE_URL=https://gateway.example
+# ANTHROPIC_AUTH_TOKEN=replace-with-your-gateway-token
+# ANTHROPIC_DEFAULT_HAIKU_MODEL=replace-with-your-gateway-haiku-model
+# ANTHROPIC_DEFAULT_SONNET_MODEL=replace-with-your-gateway-sonnet-model
+# ANTHROPIC_DEFAULT_OPUS_MODEL=replace-with-your-gateway-opus-model
+# API_TIMEOUT_MS=600000
+# CLAUDE_CODE_AUTO_COMPACT_WINDOW=1000000
+
+# --- Integrations ---
+# CLICKUP_API_TOKEN — the token for the noir-clickup integration; set it only
+#   when that integration is enabled.
+# CLICKUP_TEAM_ID is NOT an env var. Noir never reads it — workspace binding
+#   (team / list / space ids) belongs in .noir/config.yml under
+#   integrations.clickup.
+# CLICKUP_API_TOKEN=replace-with-your-clickup-token
 
-# --- Remote embedders (context.embedder.kind: remote) -----------------------
-# The default local embedder (kind: local) needs no key.
-# OPENAI_API_KEY=sk-000000000000000000000000000000000000000000000000
-# VOYAGE_API_KEY=pa-0000000000000000000000000000000000000000000000
-# COHERE_API_KEY=0000000000000000000000000000000000000000
+# --- Remote embedders (context.embedder.kind: remote) ---
+# The default local embedder (kind: local) needs no key. The three API-key
+# variables below apply only when config.yml selects a remote embedder.
+# OPENAI_API_KEY=replace-with-your-openai-key
+# VOYAGE_API_KEY=replace-with-your-voyage-key
+# COHERE_API_KEY=replace-with-your-cohere-key
 #
 # Ollama (kind: ollama) reads its base URL from config.yml
 # (context.embedder.baseURL); this variable is the fallback:
 # OLLAMA_BASE_URL=http://localhost:11434
 
-# --- Model provider key -----------------------------------------------------
-# There is NO fixed "model key" variable, and setting one is not enough on its
-# own. `apiKeyEnv` is a NAME, not an interpolation: the config stores the
-# variable NAME and Noir reads process.env[<that name>] at call time. Write the
-# bare name — never `${...}` — in .noir/config.yml:
+# --- Model provider key (read via apiKeyEnv in .noir/config.yml) ---
+# There is no fixed "model key" variable, and setting a key is not enough on
+# its own. `apiKeyEnv` is a NAME, not an interpolation: config.yml stores the
+# variable NAME, and Noir reads process.env[<that name>] at call time. Write
+# the bare name — never `${...}` — in .noir/config.yml:
 #
 #   model:
 #     providers:
 #       anthropic:
 #         apiKeyEnv: ANTHROPIC_API_KEY   # -> reads $ANTHROPIC_API_KEY
-#     tiers:
-#       default:
-#         provider: anthropic
 #
 # Only `run.profiles.<name>.env` interpolates `${VAR}`. With no provider
 # configured the model layer degrades to templates — Noir never makes a silent
 # paid call. `ANTHROPIC_API_KEY` is the conventional example, not a variable
-# Noir looks up on its own:
-# ANTHROPIC_API_KEY=sk-ant-0000000000000000000000000000000000000000000000
+# Noir looks up on its own.
+# ANTHROPIC_API_KEY=replace-with-your-anthropic-key
 
-# --- Run profile selection --------------------------------------------------
+# --- Run profile selection (noir run) ---
 # Selects a `run.profiles.<name>` entry for `noir run`.
 # Precedence: --profile flag > NOIR_PROFILE > run.defaultProfile > host default.
 # NOIR_PROFILE=work
 
-# --- Update kill-switches ---------------------------------------------------
+# --- Update kill-switches ---
 # NOIR_DISABLE_UPDATE_CHECK=1   # suppress the background startup check only
 # NOIR_DISABLE_UPDATES=1        # make `noir update` refuse (exit 2)
 

package/templates/noir-readme.md.tmpl

@@ -13,7 +13,7 @@ the feature named beside it.
 | `NOIR.md` | The context brief the host context file `@`-imports. Noir-managed region. |
 | `rules/RULES.md` | The AI working contract the host `@`-imports. Yours to edit. |
 | `.env` | Project-scoped configuration and secrets (mode 0600, gitignored). |
-| `.env.example` | Committable documentation of the same variable set. Never loaded. |
+| `.env.example` | The committable reference: what each variable does, the precedence order, and what to commit. Never loaded. |
 | `scaffold-version` | Which scaffold version produced this tree — drives `noir init --upgrade`. |
 | `ancestors.json` | Merge base for Noir's managed regions (leave it alone). |
 | `README.md` | This map. |