@techgoblin/gobstack 0.5.0-beta.7 → 0.6.0-alpha.1

package/bin/goblin

@@ -1,20 +1,23 @@
 #!/usr/bin/env bash
-# goblin — the global CLI dispatcher (W1, PLAN-V1 §2.3 / W1-SPEC §3).
+# goblin — the CLI dispatcher.
 #
-#   gob verify [--only <id[,id...]>] [--json] [--list] [--source <path>]
-#   gob bans   [--only <id[,id...]>] [--list]
-#   gob audit  [--target <dir>] [--print]
-#   gob doctor [--platform <p>]      # W4a
-#   gob emit   --platform <p> [...]  # W4a/W4b; `gob sync` is the same verb, renamed
-#   gob init   [...]                 # W6: the first-run wizard
-#   gob upgrade [--target .] [...]   # W3
+#   gob init    [--heuristic | --write <proposal>] [--target <dir>] [...]
+#   gob map     [target] [--agent | --heuristic] [--write <dir>] [--force]
+#   gob verify  [--only <id[,id...]>] [--json] [--list] [--source <path>]
+#   gob bans    [--only <id[,id...]>] [--list]
+#   gob mcp                                     serve the harness over MCP stdio
+#   gob uninstall --target <dir>
 #   gob --version
 #
+# v2 SURFACE (AI-driven development): the CLI calls no AI API. `gob init` and `gob map`
+# EMIT a prompt + schema that the agent already running in this repo fulfils with its own
+# tools; heuristic detection demotes to the --heuristic fallback.
+#
+# UNWIRED this session (code kept under bin/, deletion is session 3): doctor, audit,
+# upgrade, emit/sync. `sync` becomes an init-internal step (hidden --resync flag).
+#
 # Identity: the package is gobstack (npm @techgoblin/gobstack), the command is `gob`
-# (`goblin` remains as a legacy alias). W1 ships the DISPATCH
-# SHELL only — the node shim and npm packaging are W2, doctor/emit are W4a (exit-2
-# placeholders naming their workstream), upgrade is W3 (same). G3 forbids a runtime
-# rewrite: the engine stays bash, this file only routes and propagates.
+# (`goblin` remains as a legacy alias).
 #
 # The four-value verify contract is unchanged and non-negotiable (bin/goblin-verify:5-9):
 #   0  every executed check passed
@@ -22,11 +25,10 @@
 #   2  could not run
 #   3  the manifest itself is broken
 # Every subcommand propagates the engine's exit code verbatim; no wrapper translates a
-# 1 into a 0. A placeholder that silently exited 0 would be a green build doing nothing.
+# 1 into a 0.
 #
-# Root resolution: find_installed_root() at bin/goblin-verify:64-77 is preserved
-# BYTE-FOR-BYTE (walk up from $PWD to .goblin/goblin.yaml; fall back to git toplevel,
-# then $PWD — the D20 nested-repo fix). W1 changes nothing about its logic.
+# Root resolution: find_installed_root() walks up from $PWD to an AGENTS.md carrying the
+# gob marker block; fall back to git toplevel, then $PWD — the D20 nested-repo fix.
 #
 # No npm, no jq, no yq, no network. bash/awk/sed/grep only.
 
@@ -42,26 +44,30 @@ usage() {
   cat <<'USAGE'
 gob — the gobstack command line.
 
-  gob verify [--only <id[,id...]>] [--json] [--list] [--source <path>]
-  gob bans   [--only <id[,id...]>] [--list]
-  gob audit  [--target <dir>] [--print]
-  gob doctor [--platform <p>] [--target <dir>]
-  gob emit   --platform <p> --scope project|global [...]   # alias: gob sync
-  gob sync   --platform <p> --scope project|global [...]   # the same verb, friendlier name
-  gob init   [--target <dir>] [--class app|A-F] [--dry-run]
-  gob upgrade [--target .] [--dry-run] [--yes] [--engine-dir <path>]
+  gob init    [--heuristic | --write <proposal>] [--target <dir>] [--class app|A-F] [--dry-run]
+  gob map     [target] [--agent | --heuristic] [--write <dir>] [--force]
+  gob verify  [--only <id[,id...]>] [--json] [--list] [--source <path>]
+  gob bans    [--only <id[,id...]>] [--list]
+  gob mcp     serve the harness to your agent over MCP stdio (verify/map/init tools)
+  gob uninstall --target <dir>
   gob --version
 
+gob init and gob map are AI-DRIVEN: they print a prompt + schema for the agent already
+running in this repo, which writes the proposal file; `--write` validates and installs
+it. The heuristic detectors are the --heuristic fallback.
+
 Exit codes (verify): 0 pass | 1 a check failed | 2 could not run | 3 the manifest is
 broken. Every subcommand propagates the engine's exit code verbatim.
 USAGE
 }
 
-# ---- the repo-root locator, preserved byte-for-byte from bin/goblin-verify:64-77 ----
+# ---- the repo-root locator (an AGENTS.md gob block is the install marker) ----
 find_installed_root() {
   local d="$PWD"
   while :; do
-    if [ -f "$d/.goblin/goblin.yaml" ]; then printf '%s\n' "$d"; return 0; fi
+    if [ -f "$d/AGENTS.md" ] && grep -q '^<!-- gob:begin' "$d/AGENTS.md" 2>/dev/null; then
+      printf '%s\n' "$d"; return 0
+    fi
     [ "$d" = "/" ] && return 1
     d=$(dirname "$d")
   done
@@ -73,6 +79,15 @@ CMD="${1:-}"
 shift
 
 case "$CMD" in
+  init)
+    # The prompt+schema engine: prints the agent brief, or installs a proposal.
+    exec bash "$SRC/bin/goblin-init" "$@"
+    ;;
+  map)
+    # The standalone feature-map generator: `--agent` (default) prints prompt+schema;
+    # --heuristic runs the scanner. Routes and propagates its 0/1/2 contract verbatim.
+    exec bash "$SRC/bin/goblin-map" "$@"
+    ;;
   verify)
     # The engine is whatever the per-repo chain resolves (W1 §2.3): --source, vendored,
     # engine_dir:, GOBLIN_ENGINE_DIR, ~/.goblin/engine — all inside goblin-verify. The
@@ -82,33 +97,16 @@ case "$CMD" in
   bans)
     exec bash "$SRC/bin/goblin-bans" "$@"
     ;;
-  audit)
-    exec bash "$SRC/bin/goblin-audit" "$@"
-    ;;
-  doctor)
-    # W4a: one run, three platforms (the §7 report); the dispatcher routes and
-    # propagates the doctor's 0/1/2 verbatim, like every other subcommand.
-    exec bash "$SRC/bin/goblin-doctor" "$@"
+  mcp)
+    # The MCP stdio server (bin/goblin-mcp.js): JSON-RPC 2.0 over stdin/stdout, a LOCAL
+    # tool server over the vendored harness — no API call, no socket. node is the same
+    # runtime bin/goblin.js already needs; it is exec'd directly, args pass through.
+    exec node "$SRC/bin/goblin-mcp.js" "$@"
     ;;
-  emit)
-    # W4a: per-platform emission (the §4 contract); the 0/1/2 exit contract is the
-    # same three values verify's wrapper states, propagated verbatim.
-    exec bash "$SRC/bin/goblin-emit" "$@"
-    ;;
-  sync)
-    # Wizard v2: the friendlier name for the same emission engine. `emit` stays a
-    # first-class verb; this case only adds the alias and propagates identically.
-    exec bash "$SRC/bin/goblin-emit" "$@"
-    ;;
-  init)
-    # W6: the first-run wizard. It drives install/emit/verify and propagates their
-    # exit contract verbatim, like every other subcommand here.
-    exec bash "$SRC/bin/goblin-init" "$@"
-    ;;
-  upgrade)
-    # W3: the migration lives in its own checkout-level script (W3-SPEC §1.1);
-    # the dispatcher routes and propagates the four-value contract verbatim.
-    exec bash "$SRC/bin/goblin-upgrade" "$@"
+  uninstall)
+    # Routes into the installer's uninstall job. `--uninstall` is appended FIRST so the
+    # user's own `--target <dir>` and options still parse.
+    exec bash "$SRC/bin/goblin-install" --uninstall "$@"
     ;;
   --version|-V|-v)
     printf '%s\n' "$VERSION"
@@ -118,6 +116,17 @@ case "$CMD" in
     usage
     exit 0
     ;;
+  doctor|audit|upgrade|emit|sync|install)
+    # Unwired from usage in v2 (code kept; deletion is session 3). The refusal names
+    # what replaced each verb rather than silently executing the old path.
+    g_err "gob $CMD is unwired in v2."
+    case "$CMD" in
+      install|init-legacy) g_err "fix: gob init --write <proposal> installs a repo now." ;;
+      sync|emit)           g_err "fix: gob init --write <proposal> runs the sync step internally." ;;
+      doctor|audit|upgrade) g_err "fix: gob verify (audit stays a deliberate manual step; see docs/)." ;;
+    esac
+    exit 2
+    ;;
   *)
     g_err "unknown subcommand: $CMD"
     usage >&2

package/bin/goblin-audit

@@ -16,14 +16,14 @@
 #
 # Exit codes:
 #   0  the record was written (whether or not it is clean)
-#   2  usage, or no .goblin/goblin.yaml to read `security.audit_cmd` from
+#   2  usage, or no AGENTS.md frontmatter to read `security.audit_cmd` from
 #   3  the class declares no audit command (security.audit_cmd is empty) - nothing to run
 #   4  the declared command could not run
 #   5  the output could not be parsed as an audit report - REFUSING to write an empty record,
 #      because an empty record reads to SC-07 as "clean" and that would be a fabricated pass
 set -uo pipefail
 
-GOBLIN_AUDIT_VERSION="0.5.0"
+GOBLIN_AUDIT_VERSION="0.6.0-alpha.1"
 
 usage() { sed -n '2,/^$/p' "${BASH_SOURCE[0]}" | sed 's/^# \{0,1\}//'; }
 
@@ -40,22 +40,20 @@ done
 [ -n "$TARGET" ] || { printf 'goblin-audit: --target needs a directory\n' >&2; exit 2; }
 cd "$TARGET" || { printf 'goblin-audit: no such directory: %s\n' "$TARGET" >&2; exit 2; }
 
-CONFIG=".goblin/goblin.yaml"
-[ -f "$CONFIG" ] || { printf 'goblin-audit: %s has no %s - run goblin-install first\n' "$TARGET" "$CONFIG" >&2; exit 2; }
+CONFIG="AGENTS.md"
+[ -f "$CONFIG" ] && grep -q "^$GOB_AGENTS_BEGIN" "$CONFIG" 2>/dev/null \
+  || { printf 'goblin-audit: %s has no %s gob block - run gob init first\n' "$TARGET" "$CONFIG" >&2; exit 2; }
 
 # Self-contained on purpose: the audit runner must work even if goblin-lib.sh was edited or is
 # missing, because it is the one tool a human runs by hand.
-g_yaml_block_scalar() { # <file> <block> <key>
-  awk -v b="$2" -v k="$3" '
-    $0 ~ ("^" b ":[[:space:]]*$") { inb = 1; next }
-    inb && /^[^ ]/ { inb = 0 }
-    inb && $0 ~ ("^  " k ":") {
-      v = $0; sub("^  " k ":[[:space:]]*", "", v); print v; exit
-    }
-  ' "$1"
+g_agents_read_inline() { # <file> <dotted-key> — the one reader the audit needs, inline
+  local f="$1" k="$2" line
+  while IFS= read -r line; do
+    case "$line" in "$k:"*) printf '%s\n' "${line#"$k":}"; return 0 ;; esac
+  done < "$f"
 }
 
-AUDIT_CMD=$(g_yaml_block_scalar "$CONFIG" security audit_cmd)
+AUDIT_CMD=$(g_agents_read_inline "$CONFIG" security.audit_cmd)
 if [ -z "$AUDIT_CMD" ]; then
   printf 'goblin-audit: this class declares no audit command (security.audit_cmd is empty in\n'
   printf '  %s). Nothing to run, and no record to write.\n' "$CONFIG"

package/bin/goblin-bans

@@ -28,7 +28,7 @@
 
 set -uo pipefail
 
-GOBLIN_BANS_VERSION="0.5.0"
+GOBLIN_BANS_VERSION="0.6.0-alpha.1"
 SELF_DIR=$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)
 # shellcheck source=goblin-lib.sh
 . "$SELF_DIR/goblin-lib.sh"
@@ -49,7 +49,7 @@ done
 find_installed_root() {
   local d="$PWD"
   while :; do
-    if [ -f "$d/.goblin/goblin.yaml" ]; then printf '%s\n' "$d"; return 0; fi
+    if [ -f "$d/AGENTS.md" ] && grep -q "^$GOB_AGENTS_BEGIN" "$d/AGENTS.md" 2>/dev/null; then printf '%s\n' "$d"; return 0; fi
     [ "$d" = "/" ] && return 1
     d=$(dirname "$d")
   done
@@ -60,9 +60,9 @@ if [ -z "$ROOT" ]; then
   [ -n "$ROOT" ] || ROOT="$PWD"
 fi
 
-CONFIG="$ROOT/.goblin/goblin.yaml"
-if [ -f "$ROOT/.goblin/manifest/bans.tsv" ]; then
-  BANS="$ROOT/.goblin/manifest/bans.tsv"
+CONFIG="$ROOT/AGENTS.md"
+if [ -f "$ROOT/.gob/manifest/bans.tsv" ]; then
+  BANS="$ROOT/.gob/manifest/bans.tsv"
 else
   BANS="$SELF_DIR/../manifest/bans.tsv"
 fi
@@ -85,13 +85,11 @@ fi
 # ---- the config: which bans this project turns on, and its narrow exceptions --
 ENABLED=""
 if [ -f "$CONFIG" ]; then
-  ENABLED=$(g_yaml_scalar "$CONFIG" bans)
-  ENABLED=${ENABLED#[}; ENABLED=${ENABLED%]}
-  ENABLED=$(printf '%s' "$ENABLED" | tr ',' ' ' | tr -s ' ' ' ')
+  ENABLED=$(g_agents_list "$CONFIG" bans | tr '\n' ' ')
   # The electron opt-in (software class): `electron: true` turns the electron ban set ON even
   # when a hand-edited bans: list omits it — the declaration is the contract, and the engine
   # (not the LLM) is what makes a listed ban non-skippable. A repo without the key is unaffected.
-  if [ "$(g_yaml_scalar "$CONFIG" electron)" = "true" ]; then
+  if [ "$(g_agents_read "$CONFIG" electron)" = "true" ]; then
     for e in BN-06 BN-07 BN-08 BN-09; do
       case " $ENABLED " in *" $e "*) ;; *) ENABLED="$ENABLED $e" ;; esac
     done
@@ -113,7 +111,9 @@ enabled() {
 # keeps the old behaviour, which fails CLOSED, never open.
 exempt_paths() { # exempt_paths <id> -> path prefixes, one per line
   [ -f "$CONFIG" ] || return 0
-  g_yaml_list "$CONFIG" bans_exempt | awk -v id="$1" '$1==id {print $2}'
+  # v2 shape: one flat `[BN-01 src, BN-02 app]` array — item 1 is the ban id, item 2 its
+  # path prefix (g_agents_list splits on the commas, so an item keeps its inner space).
+  g_agents_list "$CONFIG" bans_exempt | awk -v id="$1" '$1==id {print $2}'
 }
 
 only_selected() {
@@ -131,7 +131,7 @@ while IFS=$'\t' read -r id ban globs detect replacement escape reviewer source;
   SEL=$((SEL + 1))
 
   if ! enabled "$id"; then
-    SKIP=$((SKIP + 1)); g_skip "$id" "$ban (not enabled in bans: - add $id to .goblin/goblin.yaml to turn it on)"
+    SKIP=$((SKIP + 1)); g_skip "$id" "$ban (not enabled in bans: - add $id to the bans: array in AGENTS.md to turn it on)"
     continue
   fi
   # A ban whose globs match no file is a SKIP with a reason, not a pass and not a fail.