@ps-neko/nekowork 0.1.0-alpha.5 → 0.1.0-alpha.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CLAUDE.md +3 -3
- package/README.md +41 -21
- package/agent.yaml +3 -2
- package/docs/ADVANCED.md +27 -2
- package/docs/AI-DEVELOPMENT-LIFECYCLE.md +17 -4
- package/docs/ARCHITECTURE.md +9 -6
- package/docs/AUDIT.md +14 -13
- package/docs/BUILD.md +69 -0
- package/docs/CATALOG-PACKS.md +8 -6
- package/docs/CHANGELOG.md +9 -3
- package/docs/CLI-STAGES.md +3 -2
- package/docs/CODEMAPS/scripts.md +5 -1
- package/docs/CODEMAPS/tests.md +2 -0
- package/docs/DEMO-REPORT.md +5 -3
- package/docs/DEMO.md +9 -9
- package/docs/PORTING.md +1 -1
- package/docs/PRODUCT-PRINCIPLES.md +17 -3
- package/docs/PUBLISH-ALPHA.md +22 -16
- package/docs/QUICKSTART.md +12 -6
- package/docs/RELEASE-READINESS.md +25 -24
- package/docs/ROADMAP.md +5 -2
- package/docs/RUNBOOK.md +4 -4
- package/docs/SETUP.md +1 -1
- package/docs/WHY-NEKOWORK.md +11 -9
- package/docs/assets/demo-terminal.svg +5 -5
- package/manifests/install-profiles.json +26 -0
- package/package.json +3 -2
- package/scripts/cli.js +126 -1
- package/scripts/demo-quick-run.js +14 -7
- package/scripts/lib/session-resolver.js +23 -0
- package/scripts/orchestrators/build.js +150 -0
- package/scripts/orchestrators/gate.js +5 -3
- package/scripts/orchestrators/report.js +19 -13
package/CLAUDE.md
CHANGED
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
|
|
9
9
|
## 자동 갱신 영역
|
|
10
10
|
|
|
11
|
-
<!-- HARNESS:START version=0.1.0-alpha.
|
|
11
|
+
<!-- HARNESS:START version=0.1.0-alpha.6 -->
|
|
12
12
|
<!-- 이 영역은 scripts/sync-claude-md.js 가 자동 갱신한다. 직접 편집 금지. -->
|
|
13
13
|
|
|
14
14
|
## 카탈로그 요약
|
|
@@ -17,8 +17,8 @@
|
|
|
17
17
|
- skills: 10
|
|
18
18
|
- commands: 1 (legacy compat)
|
|
19
19
|
- hooks: 5 (gateguard-fact-force, config-protection, quality-gate, pre-bash-dispatcher, persistent-mode)
|
|
20
|
-
- packs: core, quality, security, frontend, testing, release, enterprise
|
|
21
|
-
- profiles: core, developer, security, product, quality, frontend, testing, research, full
|
|
20
|
+
- packs: core, builder, quality, security, frontend, testing, release, enterprise
|
|
21
|
+
- profiles: core, developer, builder, security, product, quality, frontend, testing, research, full
|
|
22
22
|
- harnesses: claude, codex, cursor, gemini, opencode
|
|
23
23
|
|
|
24
24
|
## 에이전트 → 모델 매트릭스
|
package/README.md
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
# NEKOWORK
|
|
2
2
|
|
|
3
|
-
Local-first AI development quality runtime for Claude Code, Codex CLI, and Gemini CLI.
|
|
3
|
+
Local-first AI development OS and quality runtime for Claude Code, Codex CLI, and Gemini CLI.
|
|
4
4
|
|
|
5
5
|
[](https://github.com/Ps-Neko/NEKOWORK/actions/workflows/harness-validate.yml)
|
|
6
6
|
|
|
7
|
-
NEKOWORK
|
|
7
|
+
NEKOWORK helps AI coding agents build quickly, then prevents unverified changes from shipping.
|
|
8
8
|
|
|
9
9
|
It runs:
|
|
10
10
|
|
|
@@ -18,7 +18,7 @@ No auto-commit. No auto-push. No surprise deploy.
|
|
|
18
18
|
Product principle:
|
|
19
19
|
|
|
20
20
|
```text
|
|
21
|
-
NEKOWORK =
|
|
21
|
+
NEKOWORK = fast AI build -> Codex verification -> Human Gate -> explicit apply
|
|
22
22
|
```
|
|
23
23
|
|
|
24
24
|
NEKOWORK is the product. HARNESS is the local runtime it packages: one source catalog, `agent.yaml`, projected into Claude Code, Codex CLI, Cursor, Gemini CLI, and OpenCode surfaces.
|
|
@@ -30,7 +30,7 @@ NEKOWORK is intentionally not a 100-agent pack. Every agent, skill, hook, profil
|
|
|
30
30
|
3. produce auditable evidence,
|
|
31
31
|
4. respect Human Gate.
|
|
32
32
|
|
|
33
|
-
**Public alpha evidence:**
|
|
33
|
+
**Public alpha evidence:** 8 packs / 10 profiles / 36 components / 5 harness targets / 7 case-study flows / 263 tests / 0 moderate+ npm audit issues / fresh `npx @alpha` smoke
|
|
34
34
|
|
|
35
35
|
NEKOWORK does not automatically commit, push, publish, deploy, or apply diffs. `apply` is explicit and requires verified ship-ready evidence.
|
|
36
36
|
|
|
@@ -46,9 +46,22 @@ Use the current npm alpha for the published health smoke:
|
|
|
46
46
|
|
|
47
47
|
```bash
|
|
48
48
|
npx -y @ps-neko/nekowork@alpha check
|
|
49
|
+
npx -y @ps-neko/nekowork@alpha build "implement this safely" --mode fast --session first-build
|
|
50
|
+
npx -y @ps-neko/nekowork@alpha report --session latest
|
|
49
51
|
```
|
|
50
52
|
|
|
51
|
-
|
|
53
|
+
Start with `build`. Drop down to `work`, `verify`, and `ship` only when you need phase-level control.
|
|
54
|
+
|
|
55
|
+
Use a source checkout for local development:
|
|
56
|
+
|
|
57
|
+
```bash
|
|
58
|
+
node scripts/cli.js check
|
|
59
|
+
node scripts/cli.js build "implement this safely" --mode fast --session first-build
|
|
60
|
+
node scripts/cli.js report --session latest
|
|
61
|
+
node scripts/cli.js gate status --session latest
|
|
62
|
+
```
|
|
63
|
+
|
|
64
|
+
Or use the decomposed beginner path directly:
|
|
52
65
|
|
|
53
66
|
```bash
|
|
54
67
|
node scripts/cli.js check
|
|
@@ -57,7 +70,7 @@ node scripts/cli.js report --session first-run
|
|
|
57
70
|
node scripts/cli.js gate status --session first-run
|
|
58
71
|
```
|
|
59
72
|
|
|
60
|
-
The simple
|
|
73
|
+
The simple paths map to the evidence loop: `check = doctor --quick`, `build = mode presets over run`, and `run = work -> verify -> ship`.
|
|
61
74
|
|
|
62
75
|
To add generated harness surfaces to another local repository:
|
|
63
76
|
|
|
@@ -131,7 +144,7 @@ Apply command: node scripts/cli.js apply --session first-work
|
|
|
131
144
|
|---|---|---|
|
|
132
145
|
| Large Claude Code packs | More agents, commands, skills | Curated verification loop |
|
|
133
146
|
| Team simulation | More specialist perspectives | Read-only team plus one executor |
|
|
134
|
-
| Autopilot | Fast autonomous execution |
|
|
147
|
+
| Autopilot | Fast autonomous execution | `build` modes, report, gate, explicit apply |
|
|
135
148
|
| Discipline workflows | Better development habits | Evidence-backed ship decision |
|
|
136
149
|
|
|
137
150
|
## When To Choose What
|
|
@@ -142,15 +155,16 @@ Apply command: node scripts/cli.js apply --session first-work
|
|
|
142
155
|
| Get the broadest Claude Code skill/command environment | Everything Claude Code |
|
|
143
156
|
| Simulate startup team roles from planning to QA | GStack |
|
|
144
157
|
| Run autonomous multi-agent execution | OMC |
|
|
158
|
+
| Use one local AI development runtime with safe build modes | NEKOWORK |
|
|
145
159
|
| Verify AI changes, require human approval, then apply explicitly | NEKOWORK |
|
|
146
160
|
|
|
147
|
-
Use Superpowers, Everything Claude Code, GStack, or OMC to produce stronger AI work when they fit your workflow. Use NEKOWORK
|
|
161
|
+
Use Superpowers, Everything Claude Code, GStack, or OMC to produce stronger AI work when they fit your workflow. Use NEKOWORK as the main runtime when you want build speed plus verification, gate, report, and explicit apply in one product.
|
|
148
162
|
|
|
149
163
|
## Three Paths
|
|
150
164
|
|
|
151
165
|
Most users should start with the Beginner path. The other paths are for explicit phase control or legacy compatibility.
|
|
152
166
|
|
|
153
|
-
1. Beginner: `check ->
|
|
167
|
+
1. Beginner: `check -> build -> report -> gate`
|
|
154
168
|
2. Advanced: `ask -> plan -> team -> work -> verify -> gate -> ship -> report -> apply`
|
|
155
169
|
3. Legacy: `review` / `review-cycle`
|
|
156
170
|
|
|
@@ -160,11 +174,10 @@ NEKOWORK is for teams that want AI-assisted development without making the agent
|
|
|
160
174
|
|
|
161
175
|
## Status
|
|
162
176
|
|
|
163
|
-
- Current repository version: `0.1.0-alpha.
|
|
177
|
+
- Current repository version: `0.1.0-alpha.6`
|
|
164
178
|
- Current package name: `@ps-neko/nekowork`
|
|
165
|
-
- Published CLI
|
|
166
|
-
- Current npm alpha: `@ps-neko/nekowork@0.1.0-alpha.
|
|
167
|
-
- Next repository candidate: `0.1.0-alpha.5`; publish attempted, but npm rejected the current account with `E404` permission/not-found
|
|
179
|
+
- Published CLI names: `nekowork` and `harness`
|
|
180
|
+
- Current npm alpha: `@ps-neko/nekowork@0.1.0-alpha.6`
|
|
168
181
|
- Supported install path today: npm alpha, clone, submodule, or local repository integration
|
|
169
182
|
- Dist-tag note: use `@alpha` until a stable release; `latest` still points at the first alpha line
|
|
170
183
|
- Default mode: mock providers, no API keys, no provider CLI calls
|
|
@@ -172,7 +185,7 @@ NEKOWORK is for teams that want AI-assisted development without making the agent
|
|
|
172
185
|
Current local verification:
|
|
173
186
|
|
|
174
187
|
- `npm run lint`: pass
|
|
175
|
-
- `npm test`:
|
|
188
|
+
- `npm test`: 263 tests pass
|
|
176
189
|
- `npm audit --audit-level=moderate`: 0 vulnerabilities
|
|
177
190
|
- `npm pack --dry-run --json`: pass
|
|
178
191
|
- `npx -y @ps-neko/nekowork@alpha check`: pass with warnings only
|
|
@@ -214,7 +227,7 @@ npm ci
|
|
|
214
227
|
npm run demo:quick -- --cleanup
|
|
215
228
|
```
|
|
216
229
|
|
|
217
|
-
This creates a disposable target project and runs `doctor ->
|
|
230
|
+
This creates a disposable target project and runs `doctor -> build -> report -> gate status`. It uses mock providers and does not call Claude, Codex, Gemini, or paid APIs.
|
|
218
231
|
|
|
219
232
|
To initialize another local repository with the published alpha:
|
|
220
233
|
|
|
@@ -239,7 +252,7 @@ To inspect small case-study targets, see [examples/trading-dashboard-mock](examp
|
|
|
239
252
|
|
|
240
253
|
```text
|
|
241
254
|
doctor ... OK
|
|
242
|
-
|
|
255
|
+
build workflow ... OK
|
|
243
256
|
report ... OK
|
|
244
257
|
gate status ... OK
|
|
245
258
|
Demo completed: verdict=approve_with_fixes, ship_ready=false, applied=false
|
|
@@ -300,6 +313,7 @@ The public alpha surface is intentionally small:
|
|
|
300
313
|
- `ship`: produce a ship/no-ship readiness handoff after Codex verification
|
|
301
314
|
- `apply`: apply a verified `SHIP_READY` live-work diff to the target project
|
|
302
315
|
- `run`: execute the decomposed wrapper, `work -> verify -> ship`, with optional apply
|
|
316
|
+
- `build`: one-command builder wrapper with `fast`, `safe`, `team`, `tdd`, and `release` modes
|
|
303
317
|
- `report`: summarize session evidence into `REPORT.md` without project mutation
|
|
304
318
|
- `review`: run the legacy full Claude-led/Codex-reviewed workflow
|
|
305
319
|
- `review-cycle`: explicit compatibility alias for the legacy full review workflow
|
|
@@ -309,12 +323,15 @@ Advanced features such as `team-lite`, `ralph`, `wait`, instincts, cost tracking
|
|
|
309
323
|
|
|
310
324
|
`plan` is recommended before `work` for larger changes. The current `run` command intentionally stays compact: it runs `work -> verify -> ship`, records acceptance criteria through `work`, and applies only when `--apply` is explicitly provided.
|
|
311
325
|
|
|
312
|
-
Use
|
|
326
|
+
Use `build "<task>" --mode fast` when NEKOWORK should be the single entrypoint. Use `--mode safe` for security-sensitive work, `--mode team` for read-only multi-perspective planning before implementation, `--mode tdd` for strict acceptance evidence, and `--mode release` for readiness-focused work. `build` still uses one executor for writes, Codex verification before ship, and explicit apply only.
|
|
327
|
+
|
|
328
|
+
Use `--profile quality` or `--profile security` on `work`, `verify`, and `run` when a task needs stronger evidence prompts. Add `--strict-quality` to `verify`, `run`, or `build` when missing evidence or acceptance coverage should become a fix-required verdict before ship.
|
|
313
329
|
|
|
314
330
|
Use official packs when choosing an install shape:
|
|
315
331
|
|
|
316
332
|
```bash
|
|
317
333
|
node scripts/install-plan.js --list
|
|
334
|
+
node scripts/install-plan.js --pack builder
|
|
318
335
|
node scripts/install-plan.js --pack quality
|
|
319
336
|
node scripts/install-plan.js --pack security --target codex --json
|
|
320
337
|
```
|
|
@@ -327,8 +344,8 @@ Packs are aliases over validated profiles. They add clearer product packaging wi
|
|
|
327
344
|
- Skills: 10
|
|
328
345
|
- Hooks: 5
|
|
329
346
|
- Modules: 7
|
|
330
|
-
- Profiles: `core`, `developer`, `security`, `product`, `quality`, `frontend`, `testing`, `research`, `full`
|
|
331
|
-
- Official packs: `core`, `quality`, `security`, `frontend`, `testing`, `release`, `enterprise`
|
|
347
|
+
- Profiles: `core`, `developer`, `builder`, `security`, `product`, `quality`, `frontend`, `testing`, `research`, `full`
|
|
348
|
+
- Official packs: `core`, `builder`, `quality`, `security`, `frontend`, `testing`, `release`, `enterprise`
|
|
332
349
|
- Harness targets: `claude`, `codex`, `cursor`, `gemini`, `opencode`
|
|
333
350
|
|
|
334
351
|
Key skills:
|
|
@@ -350,6 +367,8 @@ Key skills:
|
|
|
350
367
|
node scripts/cli.js doctor
|
|
351
368
|
node scripts/cli.js doctor --quick --gemini-smoke
|
|
352
369
|
npm run demo:quick
|
|
370
|
+
node scripts/cli.js build "builder smoke" --mode team --session build-smoke
|
|
371
|
+
node scripts/cli.js report --session latest
|
|
353
372
|
node scripts/install-plan.js --list
|
|
354
373
|
node scripts/install-plan.js --pack quality
|
|
355
374
|
node scripts/install-plan.js --profile developer
|
|
@@ -394,11 +413,12 @@ npm run security:hardening
|
|
|
394
413
|
npm pack --dry-run --json
|
|
395
414
|
```
|
|
396
415
|
|
|
397
|
-
`npm pack --dry-run --json` currently produces a package named like `ps-neko-nekowork-0.1.0-alpha.
|
|
416
|
+
`npm pack --dry-run --json` currently produces a package named like `ps-neko-nekowork-0.1.0-alpha.6.tgz`. It does not publish.
|
|
398
417
|
|
|
399
418
|
## Documentation
|
|
400
419
|
|
|
401
420
|
- [docs/QUICKSTART.md](docs/QUICKSTART.md) - first run and common paths
|
|
421
|
+
- [docs/BUILD.md](docs/BUILD.md) - build command modes and invariants
|
|
402
422
|
- [docs/WHY-NEKOWORK.md](docs/WHY-NEKOWORK.md) - comparison and product positioning
|
|
403
423
|
- [docs/CATALOG-PACKS.md](docs/CATALOG-PACKS.md) - curated catalog, official packs, and case-study evidence
|
|
404
424
|
- [docs/PUBLISH-ALPHA.md](docs/PUBLISH-ALPHA.md) - public npm alpha release plan
|
|
@@ -419,7 +439,7 @@ npm pack --dry-run --json
|
|
|
419
439
|
- [docs/RUNBOOK.md](docs/RUNBOOK.md) - operations guide
|
|
420
440
|
- [docs/ARCHITECTURE.md](docs/ARCHITECTURE.md) - system architecture
|
|
421
441
|
- [docs/PRODUCT-PRINCIPLES.md](docs/PRODUCT-PRINCIPLES.md) - product position, invariants, CLI phase semantics
|
|
422
|
-
- [docs/AI-DEVELOPMENT-LIFECYCLE.md](docs/AI-DEVELOPMENT-LIFECYCLE.md) - quality runtime and disciplined
|
|
442
|
+
- [docs/AI-DEVELOPMENT-LIFECYCLE.md](docs/AI-DEVELOPMENT-LIFECYCLE.md) - AI development OS, quality runtime, and disciplined lifecycle
|
|
423
443
|
- [docs/CORE-INVARIANTS.md](docs/CORE-INVARIANTS.md) - non-negotiable runtime safety rules
|
|
424
444
|
- [docs/CLI-STAGES.md](docs/CLI-STAGES.md) - stage contract and compatibility transition
|
|
425
445
|
- [docs/RISK-CLASSIFIER.md](docs/RISK-CLASSIFIER.md) - shared risk tags, challenge, and gate policy
|
package/agent.yaml
CHANGED
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
spec_version: gitagent/0.1.0
|
|
2
2
|
name: nekowork
|
|
3
3
|
runtime_name: harness
|
|
4
|
-
version: 0.1.0-alpha.
|
|
5
|
-
description: "NEKOWORK HARNESS - Local-first
|
|
4
|
+
version: 0.1.0-alpha.6
|
|
5
|
+
description: "NEKOWORK HARNESS - Local-first AI development OS and quality runtime"
|
|
6
6
|
license: MIT
|
|
7
7
|
homepage: https://github.com/Ps-Neko/NEKOWORK
|
|
8
8
|
# authors: contributor 목록은 git 히스토리로 갈음. 별도 명시 안 함.
|
|
@@ -89,6 +89,7 @@ profiles:
|
|
|
89
89
|
available:
|
|
90
90
|
- core
|
|
91
91
|
- developer
|
|
92
|
+
- builder
|
|
92
93
|
- security
|
|
93
94
|
- product
|
|
94
95
|
- quality
|
package/docs/ADVANCED.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# Advanced Features
|
|
2
2
|
|
|
3
|
-
The public alpha path focuses on `doctor`, `ask`, `plan`, `team`, `work`, `verify`, `
|
|
3
|
+
The public alpha path focuses on `doctor`, `build`, `report`, `gate`, and the decomposed `ask`, `plan`, `team`, `work`, `verify`, `ship`, `apply`, `run`, `review`, `review-cycle`, and install/apply surfaces. This page keeps the larger runtime surface discoverable without crowding the first-run docs.
|
|
4
4
|
|
|
5
5
|
## team
|
|
6
6
|
|
|
@@ -184,12 +184,37 @@ Outputs:
|
|
|
184
184
|
- `.harness/state/sessions/<id>/run-summary.json`
|
|
185
185
|
- all normal `work`, `verify`, `ship`, and optional `apply` outputs
|
|
186
186
|
|
|
187
|
+
## build
|
|
188
|
+
|
|
189
|
+
`build` is the public one-command builder wrapper:
|
|
190
|
+
|
|
191
|
+
```bash
|
|
192
|
+
node scripts/cli.js build "implement this safely" --mode fast --session build-smoke
|
|
193
|
+
node scripts/cli.js build "auth-sensitive change" --mode safe --session auth-smoke
|
|
194
|
+
node scripts/cli.js build "scope with team thinking" --mode team --session team-smoke
|
|
195
|
+
```
|
|
196
|
+
|
|
197
|
+
Rules:
|
|
198
|
+
|
|
199
|
+
- `fast` runs the compact safe path through `run`.
|
|
200
|
+
- `safe` uses the security profile, strict quality, and Codex challenge.
|
|
201
|
+
- `team` creates read-only team handoffs before the single executor runs.
|
|
202
|
+
- `tdd` uses strict quality and acceptance evidence.
|
|
203
|
+
- `release` focuses on ship/readiness and report evidence.
|
|
204
|
+
- `apply` is never implicit; use `--apply` only for verified live-work diffs.
|
|
205
|
+
|
|
206
|
+
Outputs:
|
|
207
|
+
|
|
208
|
+
- `.harness/state/sessions/<id>/build-summary.json`
|
|
209
|
+
- all normal `run`, `work`, `verify`, `ship`, and optional `apply` outputs
|
|
210
|
+
|
|
187
211
|
## report
|
|
188
212
|
|
|
189
213
|
`report` turns existing session evidence into a readable inspect-only report:
|
|
190
214
|
|
|
191
215
|
```bash
|
|
192
216
|
node scripts/cli.js report --session run-smoke
|
|
217
|
+
node scripts/cli.js report --session latest
|
|
193
218
|
node scripts/cli.js report --session run-smoke --stdout
|
|
194
219
|
node scripts/cli.js report --session run-smoke --output docs/session-report.md
|
|
195
220
|
```
|
|
@@ -199,7 +224,7 @@ Rules:
|
|
|
199
224
|
- Reads summaries, markers, acceptance criteria, and handoffs from `.harness/state/sessions/<id>/`.
|
|
200
225
|
- Writes `REPORT.md` and `report-summary.json` by default.
|
|
201
226
|
- Does not call providers, run git commands, apply diffs, or mutate target project files.
|
|
202
|
-
- Can run after `ask`, `work`, `verify`, `ship`, `run`, or `apply`.
|
|
227
|
+
- Can run after `ask`, `work`, `verify`, `ship`, `run`, `build`, or `apply`.
|
|
203
228
|
|
|
204
229
|
Outputs:
|
|
205
230
|
|
|
@@ -1,23 +1,24 @@
|
|
|
1
1
|
# AI Development Lifecycle
|
|
2
2
|
|
|
3
|
-
NEKOWORK is a local-first AI development quality runtime. Its job is not to collect every useful agent feature; its job is to make AI development disciplined, high-quality, independently verified, and human-gated.
|
|
3
|
+
NEKOWORK is a local-first AI development OS and quality runtime. Its job is not to collect every useful agent feature; its job is to make AI development fast, disciplined, high-quality, independently verified, and human-gated.
|
|
4
4
|
|
|
5
5
|
## Position
|
|
6
6
|
|
|
7
7
|
```text
|
|
8
|
-
|
|
8
|
+
Fast build loop
|
|
9
|
+
+ good development habits
|
|
9
10
|
+ quality rules, hooks, and skills
|
|
10
11
|
+ product-aware scope control
|
|
11
12
|
+ read-only multi-agent thinking
|
|
12
13
|
+ Codex verification
|
|
13
14
|
+ Human Gate and explicit apply
|
|
14
|
-
= NEKOWORK gated AI development
|
|
15
|
+
= NEKOWORK gated AI development OS
|
|
15
16
|
```
|
|
16
17
|
|
|
17
18
|
The short slogan remains:
|
|
18
19
|
|
|
19
20
|
```text
|
|
20
|
-
|
|
21
|
+
fast AI build -> Codex verification -> Human Gate -> explicit apply
|
|
21
22
|
```
|
|
22
23
|
|
|
23
24
|
## Product Rules
|
|
@@ -29,6 +30,7 @@ Claude work -> Codex verification -> Human Gate
|
|
|
29
30
|
5. Multiple agents may think, but only one executor writes.
|
|
30
31
|
6. Rich skills, hooks, and rules may improve quality, but cannot weaken safety.
|
|
31
32
|
7. Apply is explicit and evidence-based.
|
|
33
|
+
8. Build modes may improve speed, but cannot bypass verification or gates.
|
|
32
34
|
|
|
33
35
|
## Absorption Model
|
|
34
36
|
|
|
@@ -40,6 +42,7 @@ External project ideas are absorbed as capabilities, not as a new architecture:
|
|
|
40
42
|
| Rich agent environment | Skills, hooks, rules, MCP, memory, scanner-style checks | Profile/module based selective install |
|
|
41
43
|
| Product questioning | Product, design, QA, release, and scope control questions | `ask`, `plan`, and `product` profile |
|
|
42
44
|
| Team orchestration | Multiple perspectives and parallel review | `team` read-only handoffs |
|
|
45
|
+
| Productivity/autopilot-lite | One command for implementation, verification, and readiness | `build` modes over `run`; apply remains explicit |
|
|
43
46
|
| NEKOWORK core | Codex verification, Human Gate, controlled apply | Non-bypassable runtime invariants |
|
|
44
47
|
|
|
45
48
|
Capabilities can expand. The architecture cannot weaken the verification loop.
|
|
@@ -60,6 +63,16 @@ ask
|
|
|
60
63
|
|
|
61
64
|
Quality enters early through `ask` and `plan`, not only at the final review step. Team mode collects multiple perspectives, but the write phase stays single-executor. Verification is independent, gate decisions are explicit, `report` makes evidence readable, and apply requires evidence.
|
|
62
65
|
|
|
66
|
+
For the one-command product experience, `build` selects a safe preset over the same loop:
|
|
67
|
+
|
|
68
|
+
```bash
|
|
69
|
+
nekowork build "implement feature" --mode fast
|
|
70
|
+
nekowork build "auth-sensitive change" --mode safe
|
|
71
|
+
nekowork build "scope through QA first" --mode team
|
|
72
|
+
nekowork build "test-first change" --mode tdd
|
|
73
|
+
nekowork build "prepare release handoff" --mode release
|
|
74
|
+
```
|
|
75
|
+
|
|
63
76
|
## Quality Profile
|
|
64
77
|
|
|
65
78
|
The `quality` profile is the disciplined-development bundle:
|
package/docs/ARCHITECTURE.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# Architecture
|
|
2
2
|
|
|
3
|
-
NEKOWORK is the product. HARNESS is the local runtime packaged by NEKOWORK as a local-first AI development harness. The project keeps one canonical catalog and projects it into multiple agent surfaces.
|
|
3
|
+
NEKOWORK is the product. HARNESS is the local runtime packaged by NEKOWORK as a local-first AI development OS and quality harness. The project keeps one canonical catalog and projects it into multiple agent surfaces.
|
|
4
4
|
|
|
5
5
|
## Core Idea
|
|
6
6
|
|
|
@@ -25,10 +25,10 @@ The canonical source is the repository catalog. Generated harness directories ar
|
|
|
25
25
|
|
|
26
26
|
## Product Invariants
|
|
27
27
|
|
|
28
|
-
NEKOWORK is a verification runtime, not a general agent pack:
|
|
28
|
+
NEKOWORK is an AI development OS bounded by a verification runtime, not a general agent pack:
|
|
29
29
|
|
|
30
30
|
```text
|
|
31
|
-
|
|
31
|
+
fast AI build -> Codex verification -> Human Gate -> explicit apply
|
|
32
32
|
```
|
|
33
33
|
|
|
34
34
|
Core invariants:
|
|
@@ -50,7 +50,7 @@ User command
|
|
|
50
50
|
|
|
|
51
51
|
|-- doctor
|
|
52
52
|
|-- install plan/apply
|
|
53
|
-
|-- ask / plan / team / work / verify / gate / ship / report / apply / run / review / review-cycle
|
|
53
|
+
|-- ask / plan / team / work / verify / gate / ship / report / apply / run / build / review / review-cycle
|
|
54
54
|
|-- ralph
|
|
55
55
|
|-- team-lite
|
|
56
56
|
|-- sessions / costs / instincts
|
|
@@ -87,6 +87,7 @@ node scripts/cli.js ship "ship readiness" --session work-smoke --project-root <t
|
|
|
87
87
|
node scripts/cli.js report --session work-smoke --project-root <target>
|
|
88
88
|
node scripts/cli.js apply --session work-smoke --project-root <target>
|
|
89
89
|
node scripts/cli.js run "decomposed wrapper" --session run-smoke --project-root <target>
|
|
90
|
+
node scripts/cli.js build "safe builder wrapper" --mode team --session build-smoke --project-root <target>
|
|
90
91
|
node scripts/cli.js review "change request" --no-ship --project-root <target>
|
|
91
92
|
node scripts/cli.js review-cycle "legacy full-cycle request" --no-ship --project-root <target>
|
|
92
93
|
```
|
|
@@ -137,6 +138,8 @@ ask -> plan -> team -> work -> verify -> gate -> ship -> report -> apply
|
|
|
137
138
|
|
|
138
139
|
`run` is the compatibility-friendly wrapper around the decomposed path. It runs `work -> verify -> ship` and only runs `apply` when `--apply` is explicitly requested and `SHIP_READY` exists. New automation should prefer `run` or the explicit decomposed commands; old automation can continue to use `review` or `review-cycle`.
|
|
139
140
|
|
|
141
|
+
`build` is the safe one-command builder entrypoint. It applies named mode presets (`fast`, `safe`, `team`, `tdd`, `release`) over the existing safe loop, records `build-summary.json`, and keeps apply explicit.
|
|
142
|
+
|
|
140
143
|
`ralph` is an advanced repeated-iteration loop. Its default engine remains legacy `review` for compatibility, but `ralph --engine run` repeats the decomposed wrapper and records child run sessions. Ralph does not apply diffs; verified mutation still flows through `apply`.
|
|
141
144
|
|
|
142
145
|
`wait` is an advanced persistent wakeup daemon. It watches session `wakeup.json` files, parses the session `active` contract, and resumes only supported modes (`ralph`, `run`, `review-cycle`). It writes `wait-summary.json` / `wait-events.jsonl`, backs off failed resumes, and refuses to resume sessions with `HUMAN_GATE`.
|
|
@@ -202,8 +205,8 @@ Builders project the catalog into tool-specific files:
|
|
|
202
205
|
|
|
203
206
|
## Release State
|
|
204
207
|
|
|
205
|
-
The current repository
|
|
208
|
+
The current repository release line is `0.1.0-alpha.6`:
|
|
206
209
|
|
|
207
210
|
- Repository and GitHub tarball release are available.
|
|
208
|
-
- Public npm alpha is published as `@ps-neko/nekowork@alpha` and currently points at `0.1.0-alpha.
|
|
211
|
+
- Public npm alpha is published as `@ps-neko/nekowork@alpha` and currently points at `0.1.0-alpha.6`.
|
|
209
212
|
- Clone, submodule, and local checkout integration remain supported for repository-pinned workflows.
|
package/docs/AUDIT.md
CHANGED
|
@@ -2,22 +2,22 @@
|
|
|
2
2
|
|
|
3
3
|
Status date: 2026-05-08
|
|
4
4
|
|
|
5
|
-
This audit summarizes the current NEKOWORK state after
|
|
5
|
+
This audit summarizes the current NEKOWORK state after publishing the `0.1.0-alpha.6` public alpha.
|
|
6
6
|
|
|
7
7
|
## Current Status
|
|
8
8
|
|
|
9
9
|
| Area | Status | Notes |
|
|
10
10
|
|---|---|---|
|
|
11
|
-
| Package metadata | OK | `@ps-neko/nekowork@0.1.0-alpha.
|
|
12
|
-
| npm publish |
|
|
11
|
+
| Package metadata | OK | repository version `@ps-neko/nekowork@0.1.0-alpha.6`, `agent.yaml` uses `name: nekowork`, `runtime_name: harness`, matching version, and `nekowork`/`harness` CLI bins |
|
|
12
|
+
| npm publish | OK | `@ps-neko/nekowork@alpha` points at `0.1.0-alpha.6` |
|
|
13
13
|
| Source install | OK | Clone, local checkout, and submodule workflows are documented |
|
|
14
|
-
| Public npm alpha | OK | `docs/PUBLISH-ALPHA.md` records alpha publishes through `0.1.0-alpha.
|
|
14
|
+
| Public npm alpha | OK | `docs/PUBLISH-ALPHA.md` records alpha publishes through `0.1.0-alpha.6` |
|
|
15
15
|
| CLI doctor/check | OK | `check`, `doctor`, `doctor --quick`, and `doctor --gemini-smoke` are available |
|
|
16
16
|
| Provider auth | OK | Local delegated CLI auth is the default path |
|
|
17
17
|
| Internal provider adapter | OK | `HARNESS_PROVIDER_OVERRIDE=internal` can call an explicit JSON command adapter without weakening gates |
|
|
18
|
-
| Catalog | OK |
|
|
18
|
+
| Catalog | OK | 8 official packs, 11 agents, 10 skills, 5 hooks, 7 modules, 36 components, 10 profiles |
|
|
19
19
|
| Multi-harness output | OK | Claude, Codex, Cursor, Gemini, and OpenCode builders are present |
|
|
20
|
-
| Quick demo | OK | `npm run demo:quick` verifies the shortest no-API `doctor ->
|
|
20
|
+
| Quick demo | OK | `npm run demo:quick` verifies the shortest no-API `doctor -> build -> report -> gate status` path |
|
|
21
21
|
| Fresh npm alpha smoke | OK | CI runs `npx -y @ps-neko/nekowork@alpha check --json` from a disposable directory |
|
|
22
22
|
| Report UX | OK | `report` writes inspect-only `REPORT.md` and `report-summary.json` from session evidence |
|
|
23
23
|
| External demo | OK | `npm run demo:external` verifies a disposable target project flow |
|
|
@@ -30,7 +30,7 @@ This audit summarizes the current NEKOWORK state after preparing the `0.1.0-alph
|
|
|
30
30
|
| Persistent wakeup | OK | `wait` resumes supported active sessions and blocks on `HUMAN_GATE` |
|
|
31
31
|
| Generated docs | OK | CODEMAP output is stable ASCII and reproducible |
|
|
32
32
|
| Tests | OK | Unit, integration, and e2e suites pass locally and in CI |
|
|
33
|
-
| Release |
|
|
33
|
+
| Release | OK | `v0.1.0-alpha.6` is tagged and published as a GitHub prerelease |
|
|
34
34
|
|
|
35
35
|
## Verification Gates
|
|
36
36
|
|
|
@@ -55,7 +55,7 @@ Current local result for this working tree:
|
|
|
55
55
|
- `npm run test:unit`: covered by full `npm test`
|
|
56
56
|
- `npm run validate:all`: pass
|
|
57
57
|
- `npm run lint`: pass
|
|
58
|
-
- `npm test`:
|
|
58
|
+
- `npm test`: 263 tests pass
|
|
59
59
|
- quick run demo: pass through `npm run demo:quick -- --cleanup`
|
|
60
60
|
- external project e2e smoke: pass through `npm test`
|
|
61
61
|
- `node scripts/sync-claude-md.js --check`: pass
|
|
@@ -63,13 +63,14 @@ Current local result for this working tree:
|
|
|
63
63
|
- `npm audit --audit-level=moderate`: 0 vulnerabilities
|
|
64
64
|
- `npm pack --dry-run --json`: pass
|
|
65
65
|
- `npm publish --dry-run --access public --tag alpha`: pass
|
|
66
|
-
- `npm publish --access public --tag alpha`: `0.1.0-alpha.
|
|
67
|
-
- `npm view @ps-neko/nekowork dist-tags version versions --json`: `alpha` points at `0.1.0-alpha.
|
|
68
|
-
- `npx -y @ps-neko/nekowork@alpha
|
|
66
|
+
- `npm publish --access public --tag alpha`: `0.1.0-alpha.6` published
|
|
67
|
+
- `npm view @ps-neko/nekowork dist-tags version versions --json`: `alpha` points at `0.1.0-alpha.6`; `latest` remains `0.1.0-alpha.0`
|
|
68
|
+
- `npx -y @ps-neko/nekowork@alpha check`: passed for `0.1.0-alpha.6` with WARN summary from Gemini auth not checked
|
|
69
69
|
|
|
70
70
|
## Completed Work
|
|
71
71
|
|
|
72
72
|
- Local-first provider auth policy implemented and documented.
|
|
73
|
+
- `build` is the beginner entrypoint with `fast`, `safe`, `team`, `tdd`, and `release` modes over the safe run/report/gate loop.
|
|
73
74
|
- Internal provider command adapter implemented and documented without bypassing verification, Human Gate, or apply controls.
|
|
74
75
|
- `acceptance-coverage` skill added as a focused quality evidence helper.
|
|
75
76
|
- API-key override warnings and guards are in place.
|
|
@@ -93,7 +94,7 @@ Current local result for this working tree:
|
|
|
93
94
|
- Official packs expose curated install shapes without creating a second safety model.
|
|
94
95
|
- Checked-in example fixtures now cover financial UI, CI hardening, and quality lifecycle evidence flows.
|
|
95
96
|
- Third-party case studies record NEKOWORK runs against `sindresorhus/is-plain-obj`, `jshttp/basic-auth`, `python-hyper/h11`, and `motdotla/dotenv`.
|
|
96
|
-
- Public npm alpha `0.1.0-alpha.
|
|
97
|
+
- Public npm alpha `0.1.0-alpha.6` is published under the `alpha` dist-tag.
|
|
97
98
|
|
|
98
99
|
## Remaining Optional Work
|
|
99
100
|
|
|
@@ -113,7 +114,7 @@ Current local result for this working tree:
|
|
|
113
114
|
|
|
114
115
|
## External Readiness Score
|
|
115
116
|
|
|
116
|
-
Current external readiness, excluding broader adoption evidence: **9.
|
|
117
|
+
Current external readiness, excluding broader adoption evidence: **9.2 / 10**.
|
|
117
118
|
|
|
118
119
|
Main deductions:
|
|
119
120
|
|
package/docs/BUILD.md
ADDED
|
@@ -0,0 +1,69 @@
|
|
|
1
|
+
# Build Command
|
|
2
|
+
|
|
3
|
+
`build` is NEKOWORK's productivity-first entrypoint. Start here when you want one command to move from a task to verified ship readiness:
|
|
4
|
+
|
|
5
|
+
```bash
|
|
6
|
+
nekowork build "implement this safely" --mode fast
|
|
7
|
+
nekowork report --session latest
|
|
8
|
+
nekowork gate status --session latest
|
|
9
|
+
```
|
|
10
|
+
|
|
11
|
+
Drop down to `ask`, `plan`, `team`, `work`, `verify`, `ship`, and `apply` only when you need phase-level control.
|
|
12
|
+
|
|
13
|
+
## Mode Contract
|
|
14
|
+
|
|
15
|
+
| Mode | Purpose | Internal Behavior | Apply |
|
|
16
|
+
|---|---|---|---|
|
|
17
|
+
| `fast` | Quick implementation | `run = work -> verify -> ship` with quality profile | Explicit only |
|
|
18
|
+
| `safe` | Risky or sensitive changes | security profile, strict quality, Codex challenge, Human Gate policy | Explicit only |
|
|
19
|
+
| `team` | Parallel thinking before work | read-only team handoffs, then one executor through `run` | Explicit only |
|
|
20
|
+
| `tdd` | Test-first work | quality profile with strict acceptance and evidence checks | Explicit only |
|
|
21
|
+
| `release` | Release readiness | quality profile with ship/report evidence before apply | Explicit only |
|
|
22
|
+
|
|
23
|
+
## Safety Invariants
|
|
24
|
+
|
|
25
|
+
`build` is a wrapper, not a bypass:
|
|
26
|
+
|
|
27
|
+
```text
|
|
28
|
+
optional read-only team thinking
|
|
29
|
+
-> single executor work
|
|
30
|
+
-> Codex verification
|
|
31
|
+
-> ship/no-ship readiness
|
|
32
|
+
-> report
|
|
33
|
+
-> explicit apply only when requested
|
|
34
|
+
```
|
|
35
|
+
|
|
36
|
+
It preserves the same core rules as the decomposed workflow:
|
|
37
|
+
|
|
38
|
+
- no automatic commit, push, publish, deploy, or PR creation
|
|
39
|
+
- no implicit `apply`
|
|
40
|
+
- multi-worker phases are read-only
|
|
41
|
+
- one executor owns project-file mutation
|
|
42
|
+
- Codex verification remains mandatory before ship/apply
|
|
43
|
+
- Human Gate remains non-bypassable for risky work
|
|
44
|
+
|
|
45
|
+
## Examples
|
|
46
|
+
|
|
47
|
+
Fast path:
|
|
48
|
+
|
|
49
|
+
```bash
|
|
50
|
+
nekowork build "add a small validated change" --mode fast --session work-1
|
|
51
|
+
nekowork report --session work-1
|
|
52
|
+
```
|
|
53
|
+
|
|
54
|
+
Security-sensitive path:
|
|
55
|
+
|
|
56
|
+
```bash
|
|
57
|
+
nekowork build "change auth token validation" --mode safe --session auth-1
|
|
58
|
+
nekowork report --session auth-1
|
|
59
|
+
nekowork gate status --session auth-1
|
|
60
|
+
```
|
|
61
|
+
|
|
62
|
+
Team-thinking path:
|
|
63
|
+
|
|
64
|
+
```bash
|
|
65
|
+
nekowork build "scope and implement dashboard filters" --mode team --session dashboard-1
|
|
66
|
+
nekowork report --session dashboard-1
|
|
67
|
+
```
|
|
68
|
+
|
|
69
|
+
Use `--apply` only when live work captured a verified `SHIP_READY` diff and you intentionally want to mutate the target project.
|
package/docs/CATALOG-PACKS.md
CHANGED
|
@@ -3,7 +3,7 @@
|
|
|
3
3
|
NEKOWORK intentionally keeps the catalog selective. Every agent, skill, hook, module, profile, and pack must preserve the verification loop:
|
|
4
4
|
|
|
5
5
|
```text
|
|
6
|
-
|
|
6
|
+
fast AI build -> Codex verification -> report -> Human Gate -> explicit apply
|
|
7
7
|
```
|
|
8
8
|
|
|
9
9
|
Packs are public install aliases over validated profiles. They make the catalog easier to choose without creating a second safety model.
|
|
@@ -11,8 +11,8 @@ Packs are public install aliases over validated profiles. They make the catalog
|
|
|
11
11
|
## Current Shape
|
|
12
12
|
|
|
13
13
|
```text
|
|
14
|
-
|
|
15
|
-
|
|
14
|
+
8 official packs
|
|
15
|
+
10 install profiles
|
|
16
16
|
7 modules
|
|
17
17
|
36 components
|
|
18
18
|
11 agents
|
|
@@ -20,7 +20,7 @@ Packs are public install aliases over validated profiles. They make the catalog
|
|
|
20
20
|
5 hooks
|
|
21
21
|
5 harness targets
|
|
22
22
|
7 case-study flows
|
|
23
|
-
|
|
23
|
+
263 tests
|
|
24
24
|
```
|
|
25
25
|
|
|
26
26
|
Harness targets:
|
|
@@ -46,6 +46,7 @@ environment configuration boundary
|
|
|
46
46
|
| Pack | Profile | Best For | Representative Workflow |
|
|
47
47
|
|---|---|---|---|
|
|
48
48
|
| `core` | `core` | Minimal verification runtime | `doctor -> ask -> run -> report -> gate` |
|
|
49
|
+
| `builder` | `builder` | One-command AI development OS entrypoint | `build "<task>" --mode fast|safe|team|tdd|release -> report -> gate` |
|
|
49
50
|
| `quality` | `quality` | Disciplined development and evidence coverage | `ask --profile quality -> run --profile quality --strict-quality -> report` |
|
|
50
51
|
| `security` | `security` | Auth, secrets, permissions, deploy, financial, or data-sensitive changes | `ask --profile security -> run --profile security --secure --strict-quality -> report -> gate` |
|
|
51
52
|
| `frontend` | `frontend` | UI mockups, component review, accessibility-oriented checks | `ask --profile product -> team -> run -> report` |
|
|
@@ -57,6 +58,7 @@ environment configuration boundary
|
|
|
57
58
|
|
|
58
59
|
```bash
|
|
59
60
|
node scripts/install-plan.js --list
|
|
61
|
+
node scripts/install-plan.js --pack builder
|
|
60
62
|
node scripts/install-plan.js --pack security
|
|
61
63
|
node scripts/install-plan.js --pack quality --target claude --json
|
|
62
64
|
node scripts/install-apply.js --pack core --project-root <target>
|
|
@@ -69,10 +71,10 @@ node scripts/install-apply.js --pack core --project-root <target>
|
|
|
69
71
|
NEKOWORK does not try to be the largest catalog. It is a curated catalog for a reportable evidence pipeline:
|
|
70
72
|
|
|
71
73
|
```text
|
|
72
|
-
selective catalog
|
|
74
|
+
selective builder catalog
|
|
73
75
|
+ multi-surface projection
|
|
74
76
|
+ evidence report
|
|
75
77
|
+ Human Gate
|
|
76
78
|
+ explicit apply
|
|
77
|
-
= local-first AI development quality runtime
|
|
79
|
+
= local-first AI development OS and quality runtime
|
|
78
80
|
```
|
package/docs/CHANGELOG.md
CHANGED
|
@@ -4,16 +4,22 @@
|
|
|
4
4
|
|
|
5
5
|
## [Unreleased]
|
|
6
6
|
|
|
7
|
+
## [0.1.0-alpha.6] - 2026-05-08
|
|
8
|
+
|
|
7
9
|
### Added
|
|
8
|
-
-
|
|
10
|
+
- Add the `build` command as a safe all-in-one builder wrapper with `fast`, `safe`, `team`, `tdd`, and `release` modes.
|
|
11
|
+
- Add the `builder` pack/profile for productivity-oriented setup without weakening Codex verification, Human Gate, or explicit apply.
|
|
12
|
+
- Add `build-summary.json` to report evidence and support `--session latest` for report/gate inspection.
|
|
9
13
|
|
|
10
14
|
### Changed
|
|
11
|
-
-
|
|
15
|
+
- Position NEKOWORK as an AI development OS and quality runtime, not only a verification harness.
|
|
16
|
+
- Make the one-minute demo and beginner path `build` centered.
|
|
12
17
|
|
|
13
|
-
## [0.1.0-alpha.5] -
|
|
18
|
+
## [0.1.0-alpha.5] - 2026-05-08
|
|
14
19
|
|
|
15
20
|
### Added
|
|
16
21
|
- Add release-surface version consistency coverage, bringing the suite to 253 tests.
|
|
22
|
+
- Publish public alpha `@ps-neko/nekowork@0.1.0-alpha.5` with the product-name CLI alias and sharpened npm metadata.
|
|
17
23
|
|
|
18
24
|
### Changed
|
|
19
25
|
- Align published alpha smoke, feedback templates, and demo docs around the beginner `check` command.
|