aienvmp 0.1.21 → 0.1.23

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.23
+
+- Added compact `stepSummary` output to `context --json`.
+- Reused the AI plan step model so preflight context can show remediation and environment drift summaries.
+- Kept full step details in `aienvmp plan` while keeping context lightweight.
+
+## 0.1.22
+
+- Reworked the README around Quick Start, AI Usage, CI Usage, and outputs.
+- Made the project positioning clearer: AI-first environment maps for shared coding machines.
+- Emphasized read-only planning and avoiding runtime/tool drift across agents.
+
 ## 0.1.21
 
 - Added a GitHub Actions artifact upload example for `AIENV.md`, plan outputs, manifest, and dashboard.

package/README.md

@@ -6,29 +6,39 @@
 
 **AI Environment Map.**
 
-`aienvmp` is an AI environment coordination tool for shared coding machines.
+`aienvmp` is an AI-first environment map for shared coding machines.
 
-It helps Codex, Claude, Gemini, and other agents avoid silently using or installing different runtime and tool versions.
+It helps Codex, Claude, Gemini, and humans avoid silent Node, Python, package manager, Docker, and security drift.
 
-Core loop: scan the env, give AI a preflight context, and hand off safe next steps to the next agent.
+Core loop: scan once, give AI a preflight context, write a read-only action plan, and hand off safe next steps.
 
-## Use
+## Quick Start
 
 ```bash
 npx aienvmp sync
 npx aienvmp context
 npx aienvmp plan
 npx aienvmp handoff
-npx aienvmp handoff --record --actor agent:codex
 ```
 
-Optional read-only checks:
+Optional deeper read-only checks:
 
 ```bash
 npx aienvmp sync --deep
 npx aienvmp sync --security
 ```
 
+## AI Usage
+
+Tell each agent to read `aienvmp context --json` before environment changes.
+
+```bash
+npx aienvmp context --json
+npx aienvmp intent --actor agent:codex --action "upgrade node" --target node
+npx aienvmp record --actor agent:codex --summary "updated .nvmrc" --target node
+npx aienvmp handoff --record --actor agent:codex
+```
+
 ## Output
 
 ```text
@@ -45,7 +55,7 @@ Trust states are machine-readable: `observed`, `planned`, `changed`, `review`, `
 
 AI agents can observe, plan, and record. Only a human or CI should mark environment facts as verified.
 
-## For AGENTS.md
+## Agent Files
 
 `aienvmp` does not replace AGENTS.md. It gives AGENTS.md a live environment source of truth.
 
@@ -53,16 +63,23 @@ AI agents can observe, plan, and record. Only a human or CI should mark environm
 npx aienvmp snippet agents
 ```
 
-## CI
+## CI Usage
 
 Use the GitHub Action to write the env map, plan, dashboard, and optional strict checks. See [examples/github-action.yml](examples/github-action.yml).
 
+```yaml
+- uses: soovwv/aienvmp@main
+  with:
+    write-plan: "true"
+    strict: "off" # security, policy, coordination, all, or off
+```
+
 ## Commands
 
 ```bash
 aienvmp sync              # update env map, light SBOM, ledger, dashboard
 aienvmp context           # AI preflight brief
-aienvmp context --json    # machine-readable AI decision context + recommended actions
+aienvmp context --json    # AI decision context + actions + compact step summary
 aienvmp plan              # read-only AI action plan for drift and remediation
 aienvmp handoff           # next-agent handoff summary + recommended actions
 aienvmp intent            # record a planned env change
@@ -76,6 +93,7 @@ aienvmp doctor --strict security  # fail only scoped warnings
 - simple by default
 - AI-first
 - lightweight
+- read-only planning, no automatic fixes
 - one advisory engine, optional enforcement with `doctor --ci`
 - scoped enforcement with `doctor --strict security|policy|coordination|all`
 - non-blocking unless strict mode is explicitly requested

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aienvmp",
-  "version": "0.1.21",
+  "version": "0.1.23",
   "description": "AI-first environment maps and lightweight runtime SBOMs for shared development machines.",
   "type": "module",
   "bin": {

package/src/commands/context.js

@@ -5,6 +5,7 @@ import { intentsPath, manifestPath, timelinePath, workspaceDir } from "../paths.
 import { renderContext } from "../render.js";
 import { loadPolicy, policyWarnings } from "../policy.js";
 import { recommendedActions } from "../actions.js";
+import { buildPlan, compactStepSummary } from "./plan.js";
 
 export async function contextWorkspace(args) {
   const dir = workspaceDir(args);
@@ -16,11 +17,13 @@ export async function contextWorkspace(args) {
   const warnings = [...diagnose(manifest, { timeline, intents }), ...policyWarnings(manifest, policy)];
   const decision = contextDecision(warnings, intents);
   const actions = recommendedActions(manifest, { warnings, intents });
+  const stepSummary = compactStepSummary(buildPlan(manifest, warnings, intents, policy));
   if (args.json) {
     console.log(JSON.stringify({
       status: warnings.length ? "review-required" : "clear",
       decision,
       recommendedActions: actions,
+      stepSummary,
       trust: manifest.trust || {},
       guidance: decision,
       workspace: manifest.workspace,

package/src/commands/plan.js

@@ -66,6 +66,22 @@ export function buildPlan(manifest, warnings = [], intents = [], policy = {}) {
   };
 }
 
+export function compactStepSummary(plan = {}) {
+  return {
+    remediation: (plan.remediationSteps || []).slice(0, 3).map((item) => ({
+      package: item.package,
+      severity: item.severity,
+      fixVersions: (item.fixVersions || []).slice(0, 3),
+      advisoryIds: (item.advisories || []).map((advisory) => advisory.id || advisory.title).filter(Boolean).slice(0, 3)
+    })),
+    environment: (plan.environmentSteps || []).slice(0, 3).map((item) => ({
+      code: item.code,
+      category: item.category,
+      summary: item.summary
+    }))
+  };
+}
+
 function environmentSteps(warnings = []) {
   return warnings
     .filter((warning) => warning.code !== "security-vulnerabilities")