@ps-neko/nekowork 0.1.0-alpha.5 → 0.1.0-alpha.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CLAUDE.md CHANGED
@@ -8,7 +8,7 @@
8
8
 
9
9
  ## 자동 갱신 영역
10
10
 
11
- <!-- HARNESS:START version=0.1.0-alpha.5 -->
11
+ <!-- HARNESS:START version=0.1.0-alpha.6 -->
12
12
  <!-- 이 영역은 scripts/sync-claude-md.js 가 자동 갱신한다. 직접 편집 금지. -->
13
13
 
14
14
  ## 카탈로그 요약
@@ -17,8 +17,8 @@
17
17
  - skills: 10
18
18
  - commands: 1 (legacy compat)
19
19
  - hooks: 5 (gateguard-fact-force, config-protection, quality-gate, pre-bash-dispatcher, persistent-mode)
20
- - packs: core, quality, security, frontend, testing, release, enterprise
21
- - profiles: core, developer, security, product, quality, frontend, testing, research, full
20
+ - packs: core, builder, quality, security, frontend, testing, release, enterprise
21
+ - profiles: core, developer, builder, security, product, quality, frontend, testing, research, full
22
22
  - harnesses: claude, codex, cursor, gemini, opencode
23
23
 
24
24
  ## 에이전트 → 모델 매트릭스
package/README.md CHANGED
@@ -1,10 +1,10 @@
1
1
  # NEKOWORK
2
2
 
3
- Local-first AI development quality runtime for Claude Code, Codex CLI, and Gemini CLI.
3
+ Local-first AI development OS and quality runtime for Claude Code, Codex CLI, and Gemini CLI.
4
4
 
5
5
  [![harness-validate](https://github.com/Ps-Neko/NEKOWORK/actions/workflows/harness-validate.yml/badge.svg)](https://github.com/Ps-Neko/NEKOWORK/actions/workflows/harness-validate.yml)
6
6
 
7
- NEKOWORK prevents AI coding agents from shipping unverified changes.
7
+ NEKOWORK helps AI coding agents build quickly, then prevents unverified changes from shipping.
8
8
 
9
9
  It runs:
10
10
 
@@ -18,7 +18,7 @@ No auto-commit. No auto-push. No surprise deploy.
18
18
  Product principle:
19
19
 
20
20
  ```text
21
- NEKOWORK = Claude work -> Codex verification -> Human Gate
21
+ NEKOWORK = fast AI build -> Codex verification -> Human Gate -> explicit apply
22
22
  ```
23
23
 
24
24
  NEKOWORK is the product. HARNESS is the local runtime it packages: one source catalog, `agent.yaml`, projected into Claude Code, Codex CLI, Cursor, Gemini CLI, and OpenCode surfaces.
@@ -30,7 +30,7 @@ NEKOWORK is intentionally not a 100-agent pack. Every agent, skill, hook, profil
30
30
  3. produce auditable evidence,
31
31
  4. respect Human Gate.
32
32
 
33
- **Public alpha evidence:** 7 packs / 9 profiles / 36 components / 5 harness targets / 7 case-study flows / 253 tests / 0 moderate+ npm audit issues / fresh `npx @alpha` smoke
33
+ **Public alpha evidence:** 8 packs / 10 profiles / 36 components / 5 harness targets / 7 case-study flows / 263 tests / 0 moderate+ npm audit issues / fresh `npx @alpha` smoke
34
34
 
35
35
  NEKOWORK does not automatically commit, push, publish, deploy, or apply diffs. `apply` is explicit and requires verified ship-ready evidence.
36
36
 
@@ -46,9 +46,22 @@ Use the current npm alpha for the published health smoke:
46
46
 
47
47
  ```bash
48
48
  npx -y @ps-neko/nekowork@alpha check
49
+ npx -y @ps-neko/nekowork@alpha build "implement this safely" --mode fast --session first-build
50
+ npx -y @ps-neko/nekowork@alpha report --session latest
49
51
  ```
50
52
 
51
- Use a source checkout for the new simple command path:
53
+ Start with `build`. Drop down to `work`, `verify`, and `ship` only when you need phase-level control.
54
+
55
+ Use a source checkout for local development:
56
+
57
+ ```bash
58
+ node scripts/cli.js check
59
+ node scripts/cli.js build "implement this safely" --mode fast --session first-build
60
+ node scripts/cli.js report --session latest
61
+ node scripts/cli.js gate status --session latest
62
+ ```
63
+
64
+ Or use the decomposed beginner path directly:
52
65
 
53
66
  ```bash
54
67
  node scripts/cli.js check
@@ -57,7 +70,7 @@ node scripts/cli.js report --session first-run
57
70
  node scripts/cli.js gate status --session first-run
58
71
  ```
59
72
 
60
- The simple path maps to the full evidence loop: `check = doctor --quick`, and `run = work -> verify -> ship`.
73
+ The simple paths map to the evidence loop: `check = doctor --quick`, `build = mode presets over run`, and `run = work -> verify -> ship`.
61
74
 
62
75
  To add generated harness surfaces to another local repository:
63
76
 
@@ -131,7 +144,7 @@ Apply command: node scripts/cli.js apply --session first-work
131
144
  |---|---|---|
132
145
  | Large Claude Code packs | More agents, commands, skills | Curated verification loop |
133
146
  | Team simulation | More specialist perspectives | Read-only team plus one executor |
134
- | Autopilot | Fast autonomous execution | Report, gate, explicit apply |
147
+ | Autopilot | Fast autonomous execution | `build` modes, report, gate, explicit apply |
135
148
  | Discipline workflows | Better development habits | Evidence-backed ship decision |
136
149
 
137
150
  ## When To Choose What
@@ -142,15 +155,16 @@ Apply command: node scripts/cli.js apply --session first-work
142
155
  | Get the broadest Claude Code skill/command environment | Everything Claude Code |
143
156
  | Simulate startup team roles from planning to QA | GStack |
144
157
  | Run autonomous multi-agent execution | OMC |
158
+ | Use one local AI development runtime with safe build modes | NEKOWORK |
145
159
  | Verify AI changes, require human approval, then apply explicitly | NEKOWORK |
146
160
 
147
- Use Superpowers, Everything Claude Code, GStack, or OMC to produce stronger AI work when they fit your workflow. Use NEKOWORK to verify, gate, report, and apply that work safely.
161
+ Use Superpowers, Everything Claude Code, GStack, or OMC to produce stronger AI work when they fit your workflow. Use NEKOWORK as the main runtime when you want build speed plus verification, gate, report, and explicit apply in one product.
148
162
 
149
163
  ## Three Paths
150
164
 
151
165
  Most users should start with the Beginner path. The other paths are for explicit phase control or legacy compatibility.
152
166
 
153
- 1. Beginner: `check -> run -> report -> gate`
167
+ 1. Beginner: `check -> build -> report -> gate`
154
168
  2. Advanced: `ask -> plan -> team -> work -> verify -> gate -> ship -> report -> apply`
155
169
  3. Legacy: `review` / `review-cycle`
156
170
 
@@ -160,11 +174,10 @@ NEKOWORK is for teams that want AI-assisted development without making the agent
160
174
 
161
175
  ## Status
162
176
 
163
- - Current repository version: `0.1.0-alpha.5`
177
+ - Current repository version: `0.1.0-alpha.6`
164
178
  - Current package name: `@ps-neko/nekowork`
165
- - Published CLI name: `harness`; repository candidate also exposes `nekowork`
166
- - Current npm alpha: `@ps-neko/nekowork@0.1.0-alpha.4`
167
- - Next repository candidate: `0.1.0-alpha.5`; publish attempted, but npm rejected the current account with `E404` permission/not-found
179
+ - Published CLI names: `nekowork` and `harness`
180
+ - Current npm alpha: `@ps-neko/nekowork@0.1.0-alpha.6`
168
181
  - Supported install path today: npm alpha, clone, submodule, or local repository integration
169
182
  - Dist-tag note: use `@alpha` until a stable release; `latest` still points at the first alpha line
170
183
  - Default mode: mock providers, no API keys, no provider CLI calls
@@ -172,7 +185,7 @@ NEKOWORK is for teams that want AI-assisted development without making the agent
172
185
  Current local verification:
173
186
 
174
187
  - `npm run lint`: pass
175
- - `npm test`: 253 tests pass
188
+ - `npm test`: 263 tests pass
176
189
  - `npm audit --audit-level=moderate`: 0 vulnerabilities
177
190
  - `npm pack --dry-run --json`: pass
178
191
  - `npx -y @ps-neko/nekowork@alpha check`: pass with warnings only
@@ -214,7 +227,7 @@ npm ci
214
227
  npm run demo:quick -- --cleanup
215
228
  ```
216
229
 
217
- This creates a disposable target project and runs `doctor -> run -> report -> gate status`. It uses mock providers and does not call Claude, Codex, Gemini, or paid APIs.
230
+ This creates a disposable target project and runs `doctor -> build -> report -> gate status`. It uses mock providers and does not call Claude, Codex, Gemini, or paid APIs.
218
231
 
219
232
  To initialize another local repository with the published alpha:
220
233
 
@@ -239,7 +252,7 @@ To inspect small case-study targets, see [examples/trading-dashboard-mock](examp
239
252
 
240
253
  ```text
241
254
  doctor ... OK
242
- run workflow ... OK
255
+ build workflow ... OK
243
256
  report ... OK
244
257
  gate status ... OK
245
258
  Demo completed: verdict=approve_with_fixes, ship_ready=false, applied=false
@@ -300,6 +313,7 @@ The public alpha surface is intentionally small:
300
313
  - `ship`: produce a ship/no-ship readiness handoff after Codex verification
301
314
  - `apply`: apply a verified `SHIP_READY` live-work diff to the target project
302
315
  - `run`: execute the decomposed wrapper, `work -> verify -> ship`, with optional apply
316
+ - `build`: one-command builder wrapper with `fast`, `safe`, `team`, `tdd`, and `release` modes
303
317
  - `report`: summarize session evidence into `REPORT.md` without project mutation
304
318
  - `review`: run the legacy full Claude-led/Codex-reviewed workflow
305
319
  - `review-cycle`: explicit compatibility alias for the legacy full review workflow
@@ -309,12 +323,15 @@ Advanced features such as `team-lite`, `ralph`, `wait`, instincts, cost tracking
309
323
 
310
324
  `plan` is recommended before `work` for larger changes. The current `run` command intentionally stays compact: it runs `work -> verify -> ship`, records acceptance criteria through `work`, and applies only when `--apply` is explicitly provided.
311
325
 
312
- Use `--profile quality` or `--profile security` on `work`, `verify`, and `run` when a task needs stronger evidence prompts. Add `--strict-quality` to `verify` or `run` when missing evidence or acceptance coverage should become a fix-required verdict before ship.
326
+ Use `build "<task>" --mode fast` when NEKOWORK should be the single entrypoint. Use `--mode safe` for security-sensitive work, `--mode team` for read-only multi-perspective planning before implementation, `--mode tdd` for strict acceptance evidence, and `--mode release` for readiness-focused work. `build` still uses one executor for writes, Codex verification before ship, and explicit apply only.
327
+
328
+ Use `--profile quality` or `--profile security` on `work`, `verify`, and `run` when a task needs stronger evidence prompts. Add `--strict-quality` to `verify`, `run`, or `build` when missing evidence or acceptance coverage should become a fix-required verdict before ship.
313
329
 
314
330
  Use official packs when choosing an install shape:
315
331
 
316
332
  ```bash
317
333
  node scripts/install-plan.js --list
334
+ node scripts/install-plan.js --pack builder
318
335
  node scripts/install-plan.js --pack quality
319
336
  node scripts/install-plan.js --pack security --target codex --json
320
337
  ```
@@ -327,8 +344,8 @@ Packs are aliases over validated profiles. They add clearer product packaging wi
327
344
  - Skills: 10
328
345
  - Hooks: 5
329
346
  - Modules: 7
330
- - Profiles: `core`, `developer`, `security`, `product`, `quality`, `frontend`, `testing`, `research`, `full`
331
- - Official packs: `core`, `quality`, `security`, `frontend`, `testing`, `release`, `enterprise`
347
+ - Profiles: `core`, `developer`, `builder`, `security`, `product`, `quality`, `frontend`, `testing`, `research`, `full`
348
+ - Official packs: `core`, `builder`, `quality`, `security`, `frontend`, `testing`, `release`, `enterprise`
332
349
  - Harness targets: `claude`, `codex`, `cursor`, `gemini`, `opencode`
333
350
 
334
351
  Key skills:
@@ -350,6 +367,8 @@ Key skills:
350
367
  node scripts/cli.js doctor
351
368
  node scripts/cli.js doctor --quick --gemini-smoke
352
369
  npm run demo:quick
370
+ node scripts/cli.js build "builder smoke" --mode team --session build-smoke
371
+ node scripts/cli.js report --session latest
353
372
  node scripts/install-plan.js --list
354
373
  node scripts/install-plan.js --pack quality
355
374
  node scripts/install-plan.js --profile developer
@@ -394,11 +413,12 @@ npm run security:hardening
394
413
  npm pack --dry-run --json
395
414
  ```
396
415
 
397
- `npm pack --dry-run --json` currently produces a package named like `ps-neko-nekowork-0.1.0-alpha.5.tgz`. It does not publish.
416
+ `npm pack --dry-run --json` currently produces a package named like `ps-neko-nekowork-0.1.0-alpha.6.tgz`. It does not publish.
398
417
 
399
418
  ## Documentation
400
419
 
401
420
  - [docs/QUICKSTART.md](docs/QUICKSTART.md) - first run and common paths
421
+ - [docs/BUILD.md](docs/BUILD.md) - build command modes and invariants
402
422
  - [docs/WHY-NEKOWORK.md](docs/WHY-NEKOWORK.md) - comparison and product positioning
403
423
  - [docs/CATALOG-PACKS.md](docs/CATALOG-PACKS.md) - curated catalog, official packs, and case-study evidence
404
424
  - [docs/PUBLISH-ALPHA.md](docs/PUBLISH-ALPHA.md) - public npm alpha release plan
@@ -419,7 +439,7 @@ npm pack --dry-run --json
419
439
  - [docs/RUNBOOK.md](docs/RUNBOOK.md) - operations guide
420
440
  - [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) - system architecture
421
441
  - [docs/PRODUCT-PRINCIPLES.md](docs/PRODUCT-PRINCIPLES.md) - product position, invariants, CLI phase semantics
422
- - [docs/AI-DEVELOPMENT-LIFECYCLE.md](docs/AI-DEVELOPMENT-LIFECYCLE.md) - quality runtime and disciplined AI development lifecycle
442
+ - [docs/AI-DEVELOPMENT-LIFECYCLE.md](docs/AI-DEVELOPMENT-LIFECYCLE.md) - AI development OS, quality runtime, and disciplined lifecycle
423
443
  - [docs/CORE-INVARIANTS.md](docs/CORE-INVARIANTS.md) - non-negotiable runtime safety rules
424
444
  - [docs/CLI-STAGES.md](docs/CLI-STAGES.md) - stage contract and compatibility transition
425
445
  - [docs/RISK-CLASSIFIER.md](docs/RISK-CLASSIFIER.md) - shared risk tags, challenge, and gate policy
package/agent.yaml CHANGED
@@ -1,8 +1,8 @@
1
1
  spec_version: gitagent/0.1.0
2
2
  name: nekowork
3
3
  runtime_name: harness
4
- version: 0.1.0-alpha.5
5
- description: "NEKOWORK HARNESS - Local-first multi-AI development verification runtime"
4
+ version: 0.1.0-alpha.6
5
+ description: "NEKOWORK HARNESS - Local-first AI development OS and quality runtime"
6
6
  license: MIT
7
7
  homepage: https://github.com/Ps-Neko/NEKOWORK
8
8
  # authors: contributor 목록은 git 히스토리로 갈음. 별도 명시 안 함.
@@ -89,6 +89,7 @@ profiles:
89
89
  available:
90
90
  - core
91
91
  - developer
92
+ - builder
92
93
  - security
93
94
  - product
94
95
  - quality
package/docs/ADVANCED.md CHANGED
@@ -1,6 +1,6 @@
1
1
  # Advanced Features
2
2
 
3
- The public alpha path focuses on `doctor`, `ask`, `plan`, `team`, `work`, `verify`, `gate`, `ship`, `apply`, `run`, `review`, `review-cycle`, and install/apply. This page keeps the larger runtime surface discoverable without crowding the first-run docs.
3
+ The public alpha path focuses on `doctor`, `build`, `report`, `gate`, and the decomposed `ask`, `plan`, `team`, `work`, `verify`, `ship`, `apply`, `run`, `review`, `review-cycle`, and install/apply surfaces. This page keeps the larger runtime surface discoverable without crowding the first-run docs.
4
4
 
5
5
  ## team
6
6
 
@@ -184,12 +184,37 @@ Outputs:
184
184
  - `.harness/state/sessions/<id>/run-summary.json`
185
185
  - all normal `work`, `verify`, `ship`, and optional `apply` outputs
186
186
 
187
+ ## build
188
+
189
+ `build` is the public one-command builder wrapper:
190
+
191
+ ```bash
192
+ node scripts/cli.js build "implement this safely" --mode fast --session build-smoke
193
+ node scripts/cli.js build "auth-sensitive change" --mode safe --session auth-smoke
194
+ node scripts/cli.js build "scope with team thinking" --mode team --session team-smoke
195
+ ```
196
+
197
+ Rules:
198
+
199
+ - `fast` runs the compact safe path through `run`.
200
+ - `safe` uses the security profile, strict quality, and Codex challenge.
201
+ - `team` creates read-only team handoffs before the single executor runs.
202
+ - `tdd` uses strict quality and acceptance evidence.
203
+ - `release` focuses on ship/readiness and report evidence.
204
+ - `apply` is never implicit; use `--apply` only for verified live-work diffs.
205
+
206
+ Outputs:
207
+
208
+ - `.harness/state/sessions/<id>/build-summary.json`
209
+ - all normal `run`, `work`, `verify`, `ship`, and optional `apply` outputs
210
+
187
211
  ## report
188
212
 
189
213
  `report` turns existing session evidence into a readable inspect-only report:
190
214
 
191
215
  ```bash
192
216
  node scripts/cli.js report --session run-smoke
217
+ node scripts/cli.js report --session latest
193
218
  node scripts/cli.js report --session run-smoke --stdout
194
219
  node scripts/cli.js report --session run-smoke --output docs/session-report.md
195
220
  ```
@@ -199,7 +224,7 @@ Rules:
199
224
  - Reads summaries, markers, acceptance criteria, and handoffs from `.harness/state/sessions/<id>/`.
200
225
  - Writes `REPORT.md` and `report-summary.json` by default.
201
226
  - Does not call providers, run git commands, apply diffs, or mutate target project files.
202
- - Can run after `ask`, `work`, `verify`, `ship`, `run`, or `apply`.
227
+ - Can run after `ask`, `work`, `verify`, `ship`, `run`, `build`, or `apply`.
203
228
 
204
229
  Outputs:
205
230
 
@@ -1,23 +1,24 @@
1
1
  # AI Development Lifecycle
2
2
 
3
- NEKOWORK is a local-first AI development quality runtime. Its job is not to collect every useful agent feature; its job is to make AI development disciplined, high-quality, independently verified, and human-gated.
3
+ NEKOWORK is a local-first AI development OS and quality runtime. Its job is not to collect every useful agent feature; its job is to make AI development fast, disciplined, high-quality, independently verified, and human-gated.
4
4
 
5
5
  ## Position
6
6
 
7
7
  ```text
8
- Good development habits
8
+ Fast build loop
9
+ + good development habits
9
10
  + quality rules, hooks, and skills
10
11
  + product-aware scope control
11
12
  + read-only multi-agent thinking
12
13
  + Codex verification
13
14
  + Human Gate and explicit apply
14
- = NEKOWORK gated AI development runtime
15
+ = NEKOWORK gated AI development OS
15
16
  ```
16
17
 
17
18
  The short slogan remains:
18
19
 
19
20
  ```text
20
- Claude work -> Codex verification -> Human Gate
21
+ fast AI build -> Codex verification -> Human Gate -> explicit apply
21
22
  ```
22
23
 
23
24
  ## Product Rules
@@ -29,6 +30,7 @@ Claude work -> Codex verification -> Human Gate
29
30
  5. Multiple agents may think, but only one executor writes.
30
31
  6. Rich skills, hooks, and rules may improve quality, but cannot weaken safety.
31
32
  7. Apply is explicit and evidence-based.
33
+ 8. Build modes may improve speed, but cannot bypass verification or gates.
32
34
 
33
35
  ## Absorption Model
34
36
 
@@ -40,6 +42,7 @@ External project ideas are absorbed as capabilities, not as a new architecture:
40
42
  | Rich agent environment | Skills, hooks, rules, MCP, memory, scanner-style checks | Profile/module based selective install |
41
43
  | Product questioning | Product, design, QA, release, and scope control questions | `ask`, `plan`, and `product` profile |
42
44
  | Team orchestration | Multiple perspectives and parallel review | `team` read-only handoffs |
45
+ | Productivity/autopilot-lite | One command for implementation, verification, and readiness | `build` modes over `run`; apply remains explicit |
43
46
  | NEKOWORK core | Codex verification, Human Gate, controlled apply | Non-bypassable runtime invariants |
44
47
 
45
48
  Capabilities can expand. The architecture cannot weaken the verification loop.
@@ -60,6 +63,16 @@ ask
60
63
 
61
64
  Quality enters early through `ask` and `plan`, not only at the final review step. Team mode collects multiple perspectives, but the write phase stays single-executor. Verification is independent, gate decisions are explicit, `report` makes evidence readable, and apply requires evidence.
62
65
 
66
+ For the one-command product experience, `build` selects a safe preset over the same loop:
67
+
68
+ ```bash
69
+ nekowork build "implement feature" --mode fast
70
+ nekowork build "auth-sensitive change" --mode safe
71
+ nekowork build "scope through QA first" --mode team
72
+ nekowork build "test-first change" --mode tdd
73
+ nekowork build "prepare release handoff" --mode release
74
+ ```
75
+
63
76
  ## Quality Profile
64
77
 
65
78
  The `quality` profile is the disciplined-development bundle:
@@ -1,6 +1,6 @@
1
1
  # Architecture
2
2
 
3
- NEKOWORK is the product. HARNESS is the local runtime packaged by NEKOWORK as a local-first AI development harness. The project keeps one canonical catalog and projects it into multiple agent surfaces.
3
+ NEKOWORK is the product. HARNESS is the local runtime packaged by NEKOWORK as a local-first AI development OS and quality harness. The project keeps one canonical catalog and projects it into multiple agent surfaces.
4
4
 
5
5
  ## Core Idea
6
6
 
@@ -25,10 +25,10 @@ The canonical source is the repository catalog. Generated harness directories ar
25
25
 
26
26
  ## Product Invariants
27
27
 
28
- NEKOWORK is a verification runtime, not a general agent pack:
28
+ NEKOWORK is an AI development OS bounded by a verification runtime, not a general agent pack:
29
29
 
30
30
  ```text
31
- Claude work -> Codex verification -> Human Gate
31
+ fast AI build -> Codex verification -> Human Gate -> explicit apply
32
32
  ```
33
33
 
34
34
  Core invariants:
@@ -50,7 +50,7 @@ User command
50
50
  |
51
51
  |-- doctor
52
52
  |-- install plan/apply
53
- |-- ask / plan / team / work / verify / gate / ship / report / apply / run / review / review-cycle
53
+ |-- ask / plan / team / work / verify / gate / ship / report / apply / run / build / review / review-cycle
54
54
  |-- ralph
55
55
  |-- team-lite
56
56
  |-- sessions / costs / instincts
@@ -87,6 +87,7 @@ node scripts/cli.js ship "ship readiness" --session work-smoke --project-root <t
87
87
  node scripts/cli.js report --session work-smoke --project-root <target>
88
88
  node scripts/cli.js apply --session work-smoke --project-root <target>
89
89
  node scripts/cli.js run "decomposed wrapper" --session run-smoke --project-root <target>
90
+ node scripts/cli.js build "safe builder wrapper" --mode team --session build-smoke --project-root <target>
90
91
  node scripts/cli.js review "change request" --no-ship --project-root <target>
91
92
  node scripts/cli.js review-cycle "legacy full-cycle request" --no-ship --project-root <target>
92
93
  ```
@@ -137,6 +138,8 @@ ask -> plan -> team -> work -> verify -> gate -> ship -> report -> apply
137
138
 
138
139
  `run` is the compatibility-friendly wrapper around the decomposed path. It runs `work -> verify -> ship` and only runs `apply` when `--apply` is explicitly requested and `SHIP_READY` exists. New automation should prefer `run` or the explicit decomposed commands; old automation can continue to use `review` or `review-cycle`.
139
140
 
141
+ `build` is the safe one-command builder entrypoint. It applies named mode presets (`fast`, `safe`, `team`, `tdd`, `release`) over the existing safe loop, records `build-summary.json`, and keeps apply explicit.
142
+
140
143
  `ralph` is an advanced repeated-iteration loop. Its default engine remains legacy `review` for compatibility, but `ralph --engine run` repeats the decomposed wrapper and records child run sessions. Ralph does not apply diffs; verified mutation still flows through `apply`.
141
144
 
142
145
  `wait` is an advanced persistent wakeup daemon. It watches session `wakeup.json` files, parses the session `active` contract, and resumes only supported modes (`ralph`, `run`, `review-cycle`). It writes `wait-summary.json` / `wait-events.jsonl`, backs off failed resumes, and refuses to resume sessions with `HUMAN_GATE`.
@@ -202,8 +205,8 @@ Builders project the catalog into tool-specific files:
202
205
 
203
206
  ## Release State
204
207
 
205
- The current repository candidate is `0.1.0-alpha.5`:
208
+ The current repository release line is `0.1.0-alpha.6`:
206
209
 
207
210
  - Repository and GitHub tarball release are available.
208
- - Public npm alpha is published as `@ps-neko/nekowork@alpha` and currently points at `0.1.0-alpha.4`.
211
+ - Public npm alpha is published as `@ps-neko/nekowork@alpha` and currently points at `0.1.0-alpha.6`.
209
212
  - Clone, submodule, and local checkout integration remain supported for repository-pinned workflows.
package/docs/AUDIT.md CHANGED
@@ -2,22 +2,22 @@
2
2
 
3
3
  Status date: 2026-05-08
4
4
 
5
- This audit summarizes the current NEKOWORK state after preparing the `0.1.0-alpha.5` repository candidate. The public npm alpha currently remains on `0.1.0-alpha.4`.
5
+ This audit summarizes the current NEKOWORK state after publishing the `0.1.0-alpha.6` public alpha.
6
6
 
7
7
  ## Current Status
8
8
 
9
9
  | Area | Status | Notes |
10
10
  |---|---|---|
11
- | Package metadata | OK | `@ps-neko/nekowork@0.1.0-alpha.5`, `agent.yaml` uses `name: nekowork`, `runtime_name: harness`, matching version, and `nekowork`/`harness` CLI bins |
12
- | npm publish | WARN | `@ps-neko/nekowork@alpha` points at `0.1.0-alpha.4`; `0.1.0-alpha.5` publish failed for the current account with npm `E404` permission/not-found |
11
+ | Package metadata | OK | repository version `@ps-neko/nekowork@0.1.0-alpha.6`, `agent.yaml` uses `name: nekowork`, `runtime_name: harness`, matching version, and `nekowork`/`harness` CLI bins |
12
+ | npm publish | OK | `@ps-neko/nekowork@alpha` points at `0.1.0-alpha.6` |
13
13
  | Source install | OK | Clone, local checkout, and submodule workflows are documented |
14
- | Public npm alpha | OK | `docs/PUBLISH-ALPHA.md` records alpha publishes through `0.1.0-alpha.4` and the pending `0.1.0-alpha.5` candidate |
14
+ | Public npm alpha | OK | `docs/PUBLISH-ALPHA.md` records alpha publishes through `0.1.0-alpha.6` |
15
15
  | CLI doctor/check | OK | `check`, `doctor`, `doctor --quick`, and `doctor --gemini-smoke` are available |
16
16
  | Provider auth | OK | Local delegated CLI auth is the default path |
17
17
  | Internal provider adapter | OK | `HARNESS_PROVIDER_OVERRIDE=internal` can call an explicit JSON command adapter without weakening gates |
18
- | Catalog | OK | 7 official packs, 11 agents, 10 skills, 5 hooks, 7 modules, 36 components, 9 profiles |
18
+ | Catalog | OK | 8 official packs, 11 agents, 10 skills, 5 hooks, 7 modules, 36 components, 10 profiles |
19
19
  | Multi-harness output | OK | Claude, Codex, Cursor, Gemini, and OpenCode builders are present |
20
- | Quick demo | OK | `npm run demo:quick` verifies the shortest no-API `doctor -> run -> report -> gate status` path |
20
+ | Quick demo | OK | `npm run demo:quick` verifies the shortest no-API `doctor -> build -> report -> gate status` path |
21
21
  | Fresh npm alpha smoke | OK | CI runs `npx -y @ps-neko/nekowork@alpha check --json` from a disposable directory |
22
22
  | Report UX | OK | `report` writes inspect-only `REPORT.md` and `report-summary.json` from session evidence |
23
23
  | External demo | OK | `npm run demo:external` verifies a disposable target project flow |
@@ -30,7 +30,7 @@ This audit summarizes the current NEKOWORK state after preparing the `0.1.0-alph
30
30
  | Persistent wakeup | OK | `wait` resumes supported active sessions and blocks on `HUMAN_GATE` |
31
31
  | Generated docs | OK | CODEMAP output is stable ASCII and reproducible |
32
32
  | Tests | OK | Unit, integration, and e2e suites pass locally and in CI |
33
- | Release | WARN | Tags and GitHub prereleases exist through `v0.1.0-alpha.4`; do not create `v0.1.0-alpha.5` until npm publish succeeds |
33
+ | Release | OK | `v0.1.0-alpha.6` is tagged and published as a GitHub prerelease |
34
34
 
35
35
  ## Verification Gates
36
36
 
@@ -55,7 +55,7 @@ Current local result for this working tree:
55
55
  - `npm run test:unit`: covered by full `npm test`
56
56
  - `npm run validate:all`: pass
57
57
  - `npm run lint`: pass
58
- - `npm test`: 253 tests pass
58
+ - `npm test`: 263 tests pass
59
59
  - quick run demo: pass through `npm run demo:quick -- --cleanup`
60
60
  - external project e2e smoke: pass through `npm test`
61
61
  - `node scripts/sync-claude-md.js --check`: pass
@@ -63,13 +63,14 @@ Current local result for this working tree:
63
63
  - `npm audit --audit-level=moderate`: 0 vulnerabilities
64
64
  - `npm pack --dry-run --json`: pass
65
65
  - `npm publish --dry-run --access public --tag alpha`: pass
66
- - `npm publish --access public --tag alpha`: `0.1.0-alpha.5` failed with npm `E404` permission/not-found for the current account
67
- - `npm view @ps-neko/nekowork dist-tags version versions --json`: `alpha` points at `0.1.0-alpha.4`; `latest` remains `0.1.0-alpha.0`
68
- - `npx -y @ps-neko/nekowork@alpha doctor --quick`: passed for `0.1.0-alpha.4` with WARN summary from Gemini auth not checked
66
+ - `npm publish --access public --tag alpha`: `0.1.0-alpha.6` published
67
+ - `npm view @ps-neko/nekowork dist-tags version versions --json`: `alpha` points at `0.1.0-alpha.6`; `latest` remains `0.1.0-alpha.0`
68
+ - `npx -y @ps-neko/nekowork@alpha check`: passed for `0.1.0-alpha.6` with WARN summary from Gemini auth not checked
69
69
 
70
70
  ## Completed Work
71
71
 
72
72
  - Local-first provider auth policy implemented and documented.
73
+ - `build` is the beginner entrypoint with `fast`, `safe`, `team`, `tdd`, and `release` modes over the safe run/report/gate loop.
73
74
  - Internal provider command adapter implemented and documented without bypassing verification, Human Gate, or apply controls.
74
75
  - `acceptance-coverage` skill added as a focused quality evidence helper.
75
76
  - API-key override warnings and guards are in place.
@@ -93,7 +94,7 @@ Current local result for this working tree:
93
94
  - Official packs expose curated install shapes without creating a second safety model.
94
95
  - Checked-in example fixtures now cover financial UI, CI hardening, and quality lifecycle evidence flows.
95
96
  - Third-party case studies record NEKOWORK runs against `sindresorhus/is-plain-obj`, `jshttp/basic-auth`, `python-hyper/h11`, and `motdotla/dotenv`.
96
- - Public npm alpha `0.1.0-alpha.4` is published under the `alpha` dist-tag. `0.1.0-alpha.5` remains a repository candidate until an owner account publishes it.
97
+ - Public npm alpha `0.1.0-alpha.6` is published under the `alpha` dist-tag.
97
98
 
98
99
  ## Remaining Optional Work
99
100
 
@@ -113,7 +114,7 @@ Current local result for this working tree:
113
114
 
114
115
  ## External Readiness Score
115
116
 
116
- Current external readiness, excluding broader adoption evidence: **9.1 / 10**.
117
+ Current external readiness, excluding broader adoption evidence: **9.2 / 10**.
117
118
 
118
119
  Main deductions:
119
120
 
package/docs/BUILD.md ADDED
@@ -0,0 +1,69 @@
1
+ # Build Command
2
+
3
+ `build` is NEKOWORK's productivity-first entrypoint. Start here when you want one command to move from a task to verified ship readiness:
4
+
5
+ ```bash
6
+ nekowork build "implement this safely" --mode fast
7
+ nekowork report --session latest
8
+ nekowork gate status --session latest
9
+ ```
10
+
11
+ Drop down to `ask`, `plan`, `team`, `work`, `verify`, `ship`, and `apply` only when you need phase-level control.
12
+
13
+ ## Mode Contract
14
+
15
+ | Mode | Purpose | Internal Behavior | Apply |
16
+ |---|---|---|---|
17
+ | `fast` | Quick implementation | `run = work -> verify -> ship` with quality profile | Explicit only |
18
+ | `safe` | Risky or sensitive changes | security profile, strict quality, Codex challenge, Human Gate policy | Explicit only |
19
+ | `team` | Parallel thinking before work | read-only team handoffs, then one executor through `run` | Explicit only |
20
+ | `tdd` | Test-first work | quality profile with strict acceptance and evidence checks | Explicit only |
21
+ | `release` | Release readiness | quality profile with ship/report evidence before apply | Explicit only |
22
+
23
+ ## Safety Invariants
24
+
25
+ `build` is a wrapper, not a bypass:
26
+
27
+ ```text
28
+ optional read-only team thinking
29
+ -> single executor work
30
+ -> Codex verification
31
+ -> ship/no-ship readiness
32
+ -> report
33
+ -> explicit apply only when requested
34
+ ```
35
+
36
+ It preserves the same core rules as the decomposed workflow:
37
+
38
+ - no automatic commit, push, publish, deploy, or PR creation
39
+ - no implicit `apply`
40
+ - multi-worker phases are read-only
41
+ - one executor owns project-file mutation
42
+ - Codex verification remains mandatory before ship/apply
43
+ - Human Gate remains non-bypassable for risky work
44
+
45
+ ## Examples
46
+
47
+ Fast path:
48
+
49
+ ```bash
50
+ nekowork build "add a small validated change" --mode fast --session work-1
51
+ nekowork report --session work-1
52
+ ```
53
+
54
+ Security-sensitive path:
55
+
56
+ ```bash
57
+ nekowork build "change auth token validation" --mode safe --session auth-1
58
+ nekowork report --session auth-1
59
+ nekowork gate status --session auth-1
60
+ ```
61
+
62
+ Team-thinking path:
63
+
64
+ ```bash
65
+ nekowork build "scope and implement dashboard filters" --mode team --session dashboard-1
66
+ nekowork report --session dashboard-1
67
+ ```
68
+
69
+ Use `--apply` only when live work captured a verified `SHIP_READY` diff and you intentionally want to mutate the target project.
@@ -3,7 +3,7 @@
3
3
  NEKOWORK intentionally keeps the catalog selective. Every agent, skill, hook, module, profile, and pack must preserve the verification loop:
4
4
 
5
5
  ```text
6
- Claude work -> Codex verification -> report -> Human Gate -> explicit apply
6
+ fast AI build -> Codex verification -> report -> Human Gate -> explicit apply
7
7
  ```
8
8
 
9
9
  Packs are public install aliases over validated profiles. They make the catalog easier to choose without creating a second safety model.
@@ -11,8 +11,8 @@ Packs are public install aliases over validated profiles. They make the catalog
11
11
  ## Current Shape
12
12
 
13
13
  ```text
14
- 7 official packs
15
- 9 install profiles
14
+ 8 official packs
15
+ 10 install profiles
16
16
  7 modules
17
17
  36 components
18
18
  11 agents
@@ -20,7 +20,7 @@ Packs are public install aliases over validated profiles. They make the catalog
20
20
  5 hooks
21
21
  5 harness targets
22
22
  7 case-study flows
23
- 253 tests
23
+ 263 tests
24
24
  ```
25
25
 
26
26
  Harness targets:
@@ -46,6 +46,7 @@ environment configuration boundary
46
46
  | Pack | Profile | Best For | Representative Workflow |
47
47
  |---|---|---|---|
48
48
  | `core` | `core` | Minimal verification runtime | `doctor -> ask -> run -> report -> gate` |
49
+ | `builder` | `builder` | One-command AI development OS entrypoint | `build "<task>" --mode fast|safe|team|tdd|release -> report -> gate` |
49
50
  | `quality` | `quality` | Disciplined development and evidence coverage | `ask --profile quality -> run --profile quality --strict-quality -> report` |
50
51
  | `security` | `security` | Auth, secrets, permissions, deploy, financial, or data-sensitive changes | `ask --profile security -> run --profile security --secure --strict-quality -> report -> gate` |
51
52
  | `frontend` | `frontend` | UI mockups, component review, accessibility-oriented checks | `ask --profile product -> team -> run -> report` |
@@ -57,6 +58,7 @@ environment configuration boundary
57
58
 
58
59
  ```bash
59
60
  node scripts/install-plan.js --list
61
+ node scripts/install-plan.js --pack builder
60
62
  node scripts/install-plan.js --pack security
61
63
  node scripts/install-plan.js --pack quality --target claude --json
62
64
  node scripts/install-apply.js --pack core --project-root <target>
@@ -69,10 +71,10 @@ node scripts/install-apply.js --pack core --project-root <target>
69
71
  NEKOWORK does not try to be the largest catalog. It is a curated catalog for a reportable evidence pipeline:
70
72
 
71
73
  ```text
72
- selective catalog
74
+ selective builder catalog
73
75
  + multi-surface projection
74
76
  + evidence report
75
77
  + Human Gate
76
78
  + explicit apply
77
- = local-first AI development quality runtime
79
+ = local-first AI development OS and quality runtime
78
80
  ```
package/docs/CHANGELOG.md CHANGED
@@ -4,16 +4,22 @@
4
4
 
5
5
  ## [Unreleased]
6
6
 
7
+ ## [0.1.0-alpha.6] - 2026-05-08
8
+
7
9
  ### Added
8
- - No entries yet.
10
+ - Add the `build` command as a safe all-in-one builder wrapper with `fast`, `safe`, `team`, `tdd`, and `release` modes.
11
+ - Add the `builder` pack/profile for productivity-oriented setup without weakening Codex verification, Human Gate, or explicit apply.
12
+ - Add `build-summary.json` to report evidence and support `--session latest` for report/gate inspection.
9
13
 
10
14
  ### Changed
11
- - No entries yet.
15
+ - Position NEKOWORK as an AI development OS and quality runtime, not only a verification harness.
16
+ - Make the one-minute demo and beginner path `build` centered.
12
17
 
13
- ## [0.1.0-alpha.5] - Candidate
18
+ ## [0.1.0-alpha.5] - 2026-05-08
14
19
 
15
20
  ### Added
16
21
  - Add release-surface version consistency coverage, bringing the suite to 253 tests.
22
+ - Publish public alpha `@ps-neko/nekowork@0.1.0-alpha.5` with the product-name CLI alias and sharpened npm metadata.
17
23
 
18
24
  ### Changed
19
25
  - Align published alpha smoke, feedback templates, and demo docs around the beginner `check` command.