aero-agent-roles 1.2.0 → 1.2.1

package/README.md

@@ -2,7 +2,7 @@
 
 **The role layer for aerospace engineering agents** — professional roles that bind verified [Aero Agent Skills](https://github.com/ashfordeOU/aero-agent-skills) into end-to-end deliverables, with evidence gates and a human sign-off stop, shipped as an npm CLI and an MCP server. Built and maintained by [Ashforde OÜ](https://ashforde.org).
 
-> **Not yet published.** This package is wired and tested (`make package-test`) but `private: true` in `package.json` — npm refuses to publish it until that is deliberately removed. Ready to release, not released.
+> Published on npm as [`aero-agent-roles`](https://www.npmjs.com/package/aero-agent-roles). Install with `npm i -g aero-agent-roles`, then run `aero-roles --help`.
 
 Full role bank, figures, and provenance: [github.com/ashfordeOU/aero-agent-roles](https://github.com/ashfordeOU/aero-agent-roles) · [ashforde.org/aeroagentroles](https://ashforde.org/aeroagentroles)
 

package/manifest.json

@@ -195,7 +195,7 @@
    ],
    "skills_bound": 4,
    "tests": 38,
-   "stage_preview": "do254/hardware-planning -> do254/requirements-capture -> do254/verification -> do254/configuration-management -> core engine"
+   "stage_preview": "do254/hardware-planning -> do254/requirements-capture -> do254/hardware-verification -> do254/hardware-configuration-manag -> core engine"
   },
   {
    "slug": "engineering-analysis-engineer",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aero-agent-roles",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "The role layer for aerospace engineering agents: professional roles that bind verified Aero Agent Skills into end-to-end deliverables, with evidence gates and a human sign-off. A CLI and an MCP server. By Ashforde OU.",
   "license": "Apache-2.0",
   "author": "Ashforde OU <contact@ashforde.org> (https://ashforde.org)",
@@ -16,6 +16,7 @@
   "files": [
     "bin/",
     "lib/",
+    "scripts/",
     "manifest.json",
     "roles/",
     "NOTICE"
@@ -43,4 +44,4 @@
     "systems-engineering",
     "skills-library"
   ]
-}
+}

package/roles/do254-hardware-engineer/ROLE.md

@@ -14,8 +14,8 @@ standards_bound:
 skills_bound:
   - avionics/do254/hardware-planning
   - avionics/do254/requirements-capture
-  - avionics/do254/verification
-  - avionics/do254/configuration-management
+  - avionics/do254/hardware-verification
+  - avionics/do254/hardware-configuration-management
 tools_allowed: [stdlib, offline-file-processing]
 forbidden:
   - "issue certification approval"
@@ -65,8 +65,8 @@ The role produces:
 |---|---|---|
 | 1. Hardware planning | do254/hardware-planning | AEH class (simple/complex), PHAC scope, artifact set |
 | 2. Requirements capture | do254/requirements-capture | requirement issue list, derived-vs-allocated classification, readiness verdict |
-| 3. Verification strategy | do254/verification | verification methods, coverage ratio (0.98 A/B, 0.95 C/D), independence |
-| 4. Configuration management | do254/configuration-management | change class, ECR/ECO path, HCI entries, baseline control |
+| 3. Verification strategy | do254/hardware-verification | verification methods, coverage ratio (0.98 A/B, 0.95 C/D), independence |
+| 4. Configuration management | do254/hardware-configuration-management | change class, ECR/ECO path, HCI entries, baseline control |
 | 5. Process assurance | core engine | process assurance records plan |
 | 6. Certification liaison | core engine | PHAC input, open items for the cert authority |
 

package/roles/do254-hardware-engineer/cli.py

@@ -31,8 +31,8 @@ HAS_SKILLS = os.path.isdir(os.path.join(AEROSKILLS, "skills"))
 # Bound avionics/do254 leaves and their logic files.
 DO254_LEAVES = {
     "hardware-planning": "avionics/do254/hardware-planning",
-    "verification": "avionics/do254/verification",
-    "configuration-management": "avionics/do254/configuration-management",
+    "verification": "avionics/do254/hardware-verification",
+    "configuration-management": "avionics/do254/hardware-configuration-management",
     "requirements-capture": "avionics/do254/requirements-capture",
 }
 

package/roles/do254-hardware-engineer/core/do254_hardware_core.py

@@ -47,13 +47,13 @@ DALS = ("A", "B", "C", "D", "E")
 
 # DO-254 verification logic: requirements-based test coverage ratio by
 # level: 0.98 at levels A/B, 0.95 at levels C/D (as encoded in the bound
-# avionics/do254/verification leaf). Level E (no safety effect) is
+# avionics/do254/hardware-verification leaf). Level E (no safety effect) is
 # typically outside DO-254 scope: no coverage target.
 COVERAGE_RATIO = {"A": 0.98, "B": 0.98, "C": 0.95, "D": 0.95, "E": None}
 
 # Verification independence by DAL: independent verification expected at
 # the higher hardware design assurance levels (A/B) per the bound
-# avionics/do254/verification leaf.
+# avionics/do254/hardware-verification leaf.
 INDEPENDENT = {"A": True, "B": True, "C": False, "D": False, "E": False}
 
 # Life cycle data set by DAL: the hardware life cycle data items a PHAC
@@ -218,7 +218,7 @@ def planning_artifacts(classification: str) -> list:
 
 
 # ---------------------------------------------------------------------------
-# Verification rules (grounded in avionics/do254/verification leaf)
+# Verification rules (grounded in avionics/do254/hardware-verification leaf)
 # ---------------------------------------------------------------------------
 
 def _check_dal(dal: str) -> None:
@@ -284,7 +284,7 @@ def structural_methods_text(dal: str) -> str:
 
 
 # ---------------------------------------------------------------------------
-# Configuration management (grounded in avionics/do254/configuration-management)
+# Configuration management (grounded in avionics/do254/hardware-configuration-management)
 # ---------------------------------------------------------------------------
 
 VALID_HARDWARE_CLASSES = ("simple", "complex")

package/roles/do254-hardware-engineer/tests/test_do254_bundle_profile.py

@@ -91,8 +91,8 @@ class TestDo254BundleProfile(unittest.TestCase):
         # all four bound leaves dispatch at least one logic cross-check
         leaves = {row["leaf"] for row in p["skills"]}
         for leaf in ("avionics/do254/hardware-planning",
-                     "avionics/do254/verification",
-                     "avionics/do254/configuration-management",
+                     "avionics/do254/hardware-verification",
+                     "avionics/do254/hardware-configuration-management",
                      "avionics/do254/requirements-capture"):
             self.assertIn(leaf, leaves, f"no dispatch row for {leaf}")
         for row in p["skills"]:

package/roles/do254-hardware-engineer/tests/test_role_do254_hardware.py

@@ -26,8 +26,8 @@ PHAC_TEMPLATE = os.path.join(ROLE_DIR, "templates", "phac-template.md")
 EXPECTED_BOUND = [
     "avionics/do254/hardware-planning",
     "avionics/do254/requirements-capture",
-    "avionics/do254/verification",
-    "avionics/do254/configuration-management",
+    "avionics/do254/hardware-verification",
+    "avionics/do254/hardware-configuration-management",
 ]
 
 EXPECTED_STAGES = [

package/roles/space-systems-engineer/ROLE.md

@@ -52,7 +52,7 @@ skills_bound:
   - space-systems/subsystems/thermal-design
   - space-systems/subsystems/propellant-tank-sizing
   - space-systems/subsystems/command-data-handling
-  - space-systems/ecss/systems-engineering
+  - space-systems/ecss/e10-systems-engineering
   - space-systems/ecss/software-engineering
   - space-systems/ecss/software-verification
 tools_allowed: [stdlib, offline-file-processing]
@@ -104,7 +104,7 @@ budgets. Do NOT use for aircraft certification or airframe roles.
 | 9. Power/thermal | power-thermal-budget + solar-array-sizing + spacecraft-battery-sizing + thermal-design | power/thermal budgets |
 | 10. Comms | communication-link-budget + antenna-aperture-sizing | link budget |
 | 11. Propulsion/C&DH | propellant-tank-sizing + command-data-handling | propulsion sizing, C&DH |
-| 12. ECSS context | ecss/systems-engineering + ecss/software-engineering + ecss/software-verification | process + software context |
+| 12. ECSS context | ecss/e10-systems-engineering + ecss/software-engineering + ecss/software-verification | process + software context |
 | 13. Report | (all above) | mission + subsystem reports |
 
 ## Evidence gates

package/roles/space-systems-engineer/tests/test_role_space_systems_engineer.py

@@ -54,7 +54,7 @@ EXPECTED_BOUND = [
     "space-systems/subsystems/thermal-design",
     "space-systems/subsystems/propellant-tank-sizing",
     "space-systems/subsystems/command-data-handling",
-    "space-systems/ecss/systems-engineering",
+    "space-systems/ecss/e10-systems-engineering",
     "space-systems/ecss/software-engineering",
     "space-systems/ecss/software-verification"
 ]

package/roles/state-estimation-engineer/cli.py

@@ -20,6 +20,8 @@ estimation-filtering leaf logic files and cross-checks identical
 computations (alpha-beta gains, Kalman recursion, EKF Jacobian, NEES,
 effective sample size); agreement is recorded in provenance.json.
 """
+from __future__ import annotations  # PEP 604 unions (dict | None) on Python 3.9
+
 import argparse
 import importlib.util
 import json

package/roles/systems-integration-engineer/ROLE.md

@@ -20,7 +20,7 @@ skills_bound:
   - systems-engineering-safety/arp4754a/derived-requirements
   - systems-engineering-safety/arp4754a/validation
   - systems-engineering-safety/arp4754a/verification-planning
-  - systems-engineering-safety/arp4754a/configuration-management
+  - systems-engineering-safety/arp4754a/systems-configuration-management
 tools_allowed: [stdlib, offline-file-processing]
 forbidden:
   - "issue certification approval"
@@ -85,7 +85,7 @@ The role produces:
 | 5. Derived requirements | arp4754a/derived-requirements | derived requirement register with source/rationale obligation |
 | 6. Validation | arp4754a/validation | validation closure score, independence need at A/B |
 | 7. Integration verification | arp4754a/verification-planning | acceptable methods per level, method-to-requirement coverage |
-| 8. Configuration management | arp4754a/configuration-management | CI baseline, change classification (major/minor), change log |
+| 8. Configuration management | arp4754a/systems-configuration-management | CI baseline, change classification (major/minor), change log |
 | 9. Plan + gates | (all above) | the System Development Assurance and Integration Plan + bundle |
 
 ## Evidence gates

package/roles/systems-integration-engineer/tests/test_role_systems_integration_engineer.py

@@ -40,7 +40,7 @@ EXPECTED_BOUND = [
     "systems-engineering-safety/arp4754a/derived-requirements",
     "systems-engineering-safety/arp4754a/validation",
     "systems-engineering-safety/arp4754a/verification-planning",
-    "systems-engineering-safety/arp4754a/configuration-management",
+    "systems-engineering-safety/arp4754a/systems-configuration-management",
 ]
 
 EXPECTED_STAGES = [

package/scripts/evidence.py

@@ -0,0 +1,198 @@
+#!/usr/bin/env python3
+"""evidence.py - shared evidence-bundle writer for role CLIs.
+
+Implements docs/PROTOCOL.md v1: every role emits
+  deliverable.md + evidence/{model.json, gates.json, provenance.json}
+so any harness can consume results programmatically.
+
+Usage (from a role cli.py):
+    import sys, os
+    sys.path.insert(0, os.path.join(os.path.dirname(os.path.abspath(__file__)),
+                                    "..", "..", "scripts"))
+    import evidence
+    evidence.write_bundle(out_dir, role_slug, model, gates, provenance)
+"""
+from __future__ import annotations
+
+import json
+import os
+from datetime import datetime, timezone
+
+
+def _utcnow() -> str:
+    return datetime.now(timezone.utc).isoformat(timespec="seconds")
+
+
+def load_profile(path: str) -> dict | None:
+    """Load and validate a program profile JSON (docs/PROFILE-SCHEMA.md)."""
+    if not path or not os.path.exists(path):
+        return None
+    with open(path) as f:
+        p = json.load(f)
+    if not isinstance(p, dict) or not p.get("customer"):
+        raise ValueError("profile must be a JSON object with 'customer'")
+    return p
+
+
+def profile_header_block(profile: dict) -> str:
+    """Render a markdown header block for a program profile.
+
+    Returns "" when profile is None. NEVER an approval — always a DRAFT
+    context header for human review.
+    """
+    if not profile:
+        return ""
+    lines = [
+        "## Program context (profile)",
+        "",
+        f"- Customer: {profile.get('customer', '')}",
+        f"- Program: {profile.get('program', '')}",
+        f"- Basis: {profile.get('basis', '')}  ·  "
+        f"Authority: {profile.get('authority', '')}",
+    ]
+    if profile.get("der"):
+        lines.append(f"- DER/CVE: {profile['der']}")
+    if profile.get("document_prefix"):
+        rev = profile.get("revision", "")
+        lines.append(f"- Document: {profile['document_prefix']}"
+                     + (f" {rev}" if rev else ""))
+    if profile.get("standards"):
+        lines.append("- Standards: " + ", ".join(profile["standards"]))
+    if profile.get("notes"):
+        lines.append(f"- Notes: {profile['notes']}")
+    lines += [
+        "",
+        "> This document is a DRAFT for human review within the program "
+        "sign-off chain. It is not an approval and carries no regulatory "
+        "authority.",
+        "",
+    ]
+    return "\n".join(lines)
+
+
+def dispatch_crosscheck(leaf: str, skill_fn: str, core_fn,
+                        tolerance: float = 1e-6,
+                        skills_root: str = "") -> dict | None:
+    """Run a bound AeroSkills leaf's logic fn and compare to the core fn.
+
+    Both functions are called with the same kwargs. Returns a provenance
+    row: {leaf, logic_file, function, dispatched, core_value,
+    skill_value, delta, agrees}. Returns None if the skill logic file or
+    function is unavailable.
+
+    leaf         e.g. 'structures/loads/gust-maneuver-loads'
+    skill_fn     the function name inside the leaf's *logic.py
+    core_fn      a zero-arg callable returning the core's computed value
+    skills_root  AeroSkills root (default: AEROSKILLS_DEV or ~/company-ops/aero-agent-skills)
+    """
+    import importlib.util  # local import (stdlib)
+    root = skills_root or os.environ.get(
+        "AEROSKILLS_DEV", os.path.expanduser("~/company-ops/aero-agent-skills"))
+    logic_dir = os.path.join(root, "skills", leaf, "scripts")
+    if not os.path.isdir(logic_dir):
+        return None
+    logic_files = sorted(f for f in os.listdir(logic_dir)
+                         if f.endswith("_logic.py"))
+    if not logic_files:
+        return None
+    # try each logic file until one exposes the requested fn
+    for lf in logic_files:
+        path = os.path.join(logic_dir, lf)
+        spec = importlib.util.spec_from_file_location("role_dispatch", path)
+        mod = importlib.util.module_from_spec(spec)
+        try:
+            spec.loader.exec_module(mod)
+        except Exception:
+            continue
+        if not hasattr(mod, skill_fn):
+            continue
+        try:
+            skill_value = getattr(mod, skill_fn)()
+            core_value = core_fn()
+            if not isinstance(skill_value, (int, float)) or \
+               not isinstance(core_value, (int, float)):
+                continue
+            delta = abs(float(core_value) - float(skill_value))
+            return {
+                "leaf": leaf,
+                "logic_file": lf,
+                "function": skill_fn,
+                "dispatched": True,
+                "core_value": round(float(core_value), 6),
+                "skill_value": round(float(skill_value), 6),
+                "delta": round(delta, 9),
+                "agrees": delta <= tolerance,
+                "tolerance": tolerance,
+            }
+        except Exception:
+            continue
+    return None
+
+
+def write_json(path: str, obj: dict) -> None:
+    os.makedirs(os.path.dirname(path), exist_ok=True)
+    with open(path, "w") as f:
+        json.dump(obj, f, indent=2, sort_keys=True)
+
+
+def write_bundle(out_md: str, role: str, deliverable_type: str,
+                 model: dict, gates: dict, provenance: dict) -> dict:
+    """Write the evidence bundle next to the markdown deliverable.
+
+    out_md       path of the deliverable .md (evidence/ goes beside it)
+    role         role slug, e.g. "structures-loads-engineer"
+    model        the computed content model (build_<deliverable>() result)
+    gates        gates dict from check_<deliverable>() (has 'all_pass')
+    provenance   provenance dict (core + skills + disclaimer)
+
+    Returns the paths written: {"model": ..., "gates": ..., "provenance": ...}
+    """
+    ev_dir = os.path.join(os.path.dirname(os.path.abspath(out_md)), "evidence")
+    os.makedirs(ev_dir, exist_ok=True)
+
+    # Normalize gates into the protocol shape
+    gate_rows = []
+    for k, v in gates.items():
+        if k in ("all_pass", "exit_code", "checker"):
+            continue
+        if isinstance(v, dict):
+            gate_rows.append({"gate": k, "pass": bool(v.get("pass", v.get("ok", False))),
+                              "detail": str(v.get("detail", ""))})
+        else:
+            gate_rows.append({"gate": k, "pass": bool(v)})
+    gates_payload = {
+        "schema_version": 1,
+        "role": role,
+        "checker": gates.get("checker", "check_<deliverable>"),
+        "gates": gate_rows,
+        "all_pass": bool(gates.get("all_pass", all(r["pass"] for r in gate_rows))),
+        "exit_code": 0 if gates.get("all_pass", all(r["pass"] for r in gate_rows)) else 1,
+        "checked_at": _utcnow(),
+    }
+
+    model_payload = dict(model or {})
+    model_payload.setdefault("schema_version", 1)
+    model_payload.setdefault("role", role)
+    model_payload.setdefault("deliverable_type", deliverable_type)
+    model_payload.setdefault("generated", _utcnow())
+    model_payload.setdefault("status", "draft-for-review")
+    # generator = the producing agent/role. The VERIFIER (gates.checker) must be
+    # independent of it (founder 2026-09-10): no bot grades its own output.
+    # The roles gates are deterministic Python checks, so they qualify; this
+    # field makes the relationship checkable by scripts/verify-independence.py.
+    model_payload.setdefault("generator", role)
+
+    prov_payload = dict(provenance or {})
+    prov_payload.setdefault("schema_version", 1)
+    prov_payload.setdefault("role", role)
+    prov_payload.setdefault("disclaimer",
+                            "DRAFT for human review. Not an approval document.")
+
+    model_path = os.path.join(ev_dir, "model.json")
+    gates_path = os.path.join(ev_dir, "gates.json")
+    prov_path = os.path.join(ev_dir, "provenance.json")
+    write_json(model_path, model_payload)
+    write_json(gates_path, gates_payload)
+    write_json(prov_path, prov_payload)
+
+    return {"model": model_path, "gates": gates_path, "provenance": prov_path}

package/scripts/prepack.js

@@ -0,0 +1,46 @@
+// Runs on `npm pack` / `npm publish` from the repo checkout: copies the
+// payload (roles tree, NOTICE) from the repo root into the package so the
+// tarball is self-contained. The copy is gitignored — the repo tree stays
+// the single source of truth.
+'use strict';
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+const pkg = path.join(__dirname, '..');
+const repo = path.join(pkg, '..', '..');
+
+if (!fs.existsSync(path.join(repo, 'roles')) || !fs.existsSync(path.join(repo, 'manifest.json'))) {
+  console.error('prepack: must run from the aero-agent-roles repo checkout (roles/ not found two levels up)');
+  process.exit(1);
+}
+
+fs.rmSync(path.join(pkg, 'roles'), { recursive: true, force: true });
+fs.cpSync(path.join(repo, 'roles'), path.join(pkg, 'roles'), { recursive: true });
+fs.copyFileSync(path.join(repo, 'NOTICE'), path.join(pkg, 'NOTICE'));
+
+// scripts/evidence.py travels with the tarball. Every role's cli.py does
+// `sys.path.insert(.., '../../scripts'); import evidence`, so without this the
+// installed package has 38 CLIs that all die on import. Shipped 1.2.0 did.
+fs.mkdirSync(path.join(pkg, 'scripts'), { recursive: true });
+fs.copyFileSync(path.join(repo, 'scripts', 'evidence.py'),
+                path.join(pkg, 'scripts', 'evidence.py'));
+
+// Strip Python bytecode caches: local test runs leave __pycache__/*.pyc
+// behind, and a plain cpSync copies them straight into the tarball. Never
+// ship compiled bytecode in a public package regardless of dev-tree state.
+function stripPycache(dir) {
+  for (const entry of fs.readdirSync(dir, { withFileTypes: true })) {
+    const full = path.join(dir, entry.name);
+    if (entry.isDirectory()) {
+      if (entry.name === '__pycache__') {
+        fs.rmSync(full, { recursive: true, force: true });
+      } else {
+        stripPycache(full);
+      }
+    }
+  }
+}
+stripPycache(path.join(pkg, 'roles'));
+
+console.log('prepack: bundled roles/, scripts/evidence.py, NOTICE from repo root (pycache stripped)');