aienvmp 0.1.34 → 0.1.36

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.36
+
+- Added an explicit enforcement profile to the shared AI preflight contract.
+- Surfaced advisory-by-default vs optional strict mode in the dashboard.
+- Clarified that strict checks are intended for CI or explicit human-requested gates, not default local blocking.
+
+## 0.1.35
+
+- Added a shared AI preflight contract across status, context, plan, and handoff outputs.
+- Reused the same artifact map, read order, safe commands, decision, and enforcement guidance across AI-facing JSON.
+- Reduced drift risk between multi-agent handoffs and environment planning.
+
 ## 0.1.34
 
 - Added AI navigation metadata to `.aienvmp/status.json`.

package/README.md

@@ -55,6 +55,7 @@ AIENV.md
 
 Trust states are machine-readable: `observed`, `planned`, `changed`, `review`, `verified`, `stale`.
 `status.json` also lists AI read order, artifact paths, and safe commands.
+`status`, `context`, `plan`, and `handoff` share the same AI preflight contract.
 
 AI agents can observe, plan, and record. Only a human or CI should mark environment facts as verified.
 
@@ -104,6 +105,7 @@ aienvmp doctor --strict security  # fail only scoped warnings
 - one advisory engine, optional enforcement with `doctor --ci`
 - scoped enforcement with `doctor --strict security|policy|coordination|all`
 - context and plan expose suggested strict scopes for CI
+- dashboard and preflight explain advisory default vs optional strict mode
 - non-blocking unless strict mode is explicitly requested
 - security checks are opt-in and read-only
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aienvmp",
-  "version": "0.1.34",
+  "version": "0.1.36",
   "description": "AI-first environment maps and lightweight runtime SBOMs for shared development machines.",
   "type": "module",
   "bin": {

package/src/commands/context.js

@@ -8,6 +8,7 @@ import { recommendedActions } from "../actions.js";
 import { buildPlan, compactStepSummary } from "./plan.js";
 import { aiDecision } from "../decision.js";
 import { enforcementAdvice } from "../enforcement.js";
+import { buildPreflight } from "../preflight.js";
 
 export async function contextWorkspace(args) {
   const dir = workspaceDir(args);
@@ -20,9 +21,11 @@ export async function contextWorkspace(args) {
   const decision = aiDecision(warnings, intents);
   const actions = recommendedActions(manifest, { warnings, intents });
   const stepSummary = compactStepSummary(buildPlan(manifest, warnings, intents, policy));
+  const preflight = buildPreflight(manifest, warnings, intents);
   if (args.json) {
     console.log(JSON.stringify({
       status: warnings.length ? "review-required" : "clear",
+      preflight,
       decision,
       enforcement: enforcementAdvice(warnings),
       recommendedActions: actions,

package/src/commands/dash.js

@@ -9,6 +9,7 @@ import { renderDashboard } from "../render.js";
 import { loadPolicy, policyWarnings } from "../policy.js";
 import { recommendedActions } from "../actions.js";
 import { strictResult } from "../enforcement.js";
+import { buildPreflight } from "../preflight.js";
 
 export async function dashWorkspace(args) {
   const dir = workspaceDir(args);
@@ -23,6 +24,7 @@ export async function dashWorkspace(args) {
   const planEnvironment = await detectedPlanEnvironment(dir);
   const html = renderDashboard({
     ...manifest,
+    preflight: buildPreflight(manifest, warnings, intents),
     recommendedActions: recommendedActions(manifest, { warnings, intents }),
     planArtifacts,
     planRemediation,

package/src/commands/handoff.js

@@ -7,6 +7,7 @@ import { openIntents, readJsonl, readTimeline } from "../timeline.js";
 import { changedTrust } from "../trust.js";
 import { recommendedActions } from "../actions.js";
 import { aiDecision } from "../decision.js";
+import { buildPreflight } from "../preflight.js";
 
 export async function handoffWorkspace(args) {
   const dir = workspaceDir(args);
@@ -49,6 +50,7 @@ export function buildHandoff(manifest, timeline = [], warnings = [], intents = [
     status: reviewRequired ? "review-required" : "clear",
     trust: manifest.trust || {},
     schemaVersion: manifest.schemaVersion || 1,
+    preflight: buildPreflight(manifest, warnings, intents),
     decision: aiDecision(warnings, intents),
     workspace: manifest.workspace,
     safeRuntime: {

package/src/commands/plan.js

@@ -8,6 +8,7 @@ import { recommendedActions } from "../actions.js";
 import { openIntents, readJsonl, readTimeline } from "../timeline.js";
 import { aiDecision } from "../decision.js";
 import { enforcementAdvice } from "../enforcement.js";
+import { buildPreflight } from "../preflight.js";
 
 export async function planWorkspace(args) {
   const dir = workspaceDir(args);
@@ -39,6 +40,7 @@ export function buildPlan(manifest, warnings = [], intents = [], policy = {}) {
     schemaVersion: 1,
     generatedAt: new Date().toISOString(),
     status,
+    preflight: buildPreflight(manifest, warnings, intents),
     workspace: manifest.workspace || {},
     trust: manifest.trust || {},
     decision: aiDecision(warnings, intents),

package/src/commands/status.js

@@ -5,9 +5,7 @@ import { readJson } from "../fsutil.js";
 import { loadPolicy, policyWarnings } from "../policy.js";
 import { intentsPath, manifestPath, statusJsonPath, timelinePath, workspaceDir } from "../paths.js";
 import { openIntents, readJsonl, readTimeline } from "../timeline.js";
-import { recommendedActions } from "../actions.js";
-import { aiDecision } from "../decision.js";
-import { enforcementAdvice } from "../enforcement.js";
+import { buildPreflight } from "../preflight.js";
 
 export async function statusWorkspace(args) {
   const dir = workspaceDir(args);
@@ -39,63 +37,5 @@ export async function writeStatusArtifact(dir, status) {
 }
 
 export function buildStatus(manifest = {}, warnings = [], intents = []) {
-  const decision = aiDecision(warnings, intents);
-  const enforcement = enforcementAdvice(warnings);
-  const actions = recommendedActions(manifest, { warnings, intents });
-  const state = decision.reviewRequired ? "review-required" : "clear";
-  const topAction = actions[0] || null;
-  return {
-    schemaVersion: 1,
-    state,
-    summary: state === "clear"
-      ? "Project-local work can continue. Record intent before environment changes."
-      : "Review warnings or open intents before environment changes.",
-    decision,
-    enforcement,
-    counts: {
-      warnings: warnings.length,
-      openIntents: intents.length,
-      runtimes: Object.keys(manifest.runtimes || {}).length,
-      dependencies: Number(manifest.dependencySnapshot?.summary?.packages || 0),
-      vulnerabilities: Number(manifest.security?.summary?.total || 0)
-    },
-    agentUse: {
-      purpose: "First AI-readable environment preflight for this workspace.",
-      rule: "Read status first, use context for details, record intent before environment changes.",
-      projectLocalWork: decision.canContinueProjectLocalWork ? "allowed" : "review-first",
-      environmentChanges: decision.canChangeEnvironmentWithoutReview ? "allowed" : "intent-and-review-first"
-    },
-    artifacts: statusArtifacts(),
-    readOrder: [
-      ".aienvmp/status.json",
-      "AIENV.md",
-      ".aienvmp/manifest.json",
-      ".aienvmp/plan.json",
-      ".aienvmp/timeline.jsonl",
-      ".aienvmp/intents.jsonl"
-    ],
-    commands: {
-      refresh: "aienvmp sync",
-      status: "aienvmp status --write",
-      context: "aienvmp context --json",
-      plan: "aienvmp plan --write",
-      handoff: "aienvmp handoff --record --actor agent:id",
-      recordIntent: "aienvmp intent --actor agent:id --action planned-change"
-    },
-    topAction,
-    nextCommand: topAction?.command || decision.nextCommand
-  };
-}
-
-function statusArtifacts() {
-  return {
-    status: ".aienvmp/status.json",
-    envMap: "AIENV.md",
-    manifest: ".aienvmp/manifest.json",
-    dashboard: ".aienvmp/dashboard.html",
-    planJson: ".aienvmp/plan.json",
-    planMarkdown: ".aienvmp/plan.md",
-    intents: ".aienvmp/intents.jsonl",
-    timeline: ".aienvmp/timeline.jsonl"
-  };
+  return buildPreflight(manifest, warnings, intents);
 }

package/src/preflight.js

@@ -0,0 +1,79 @@
+import { recommendedActions } from "./actions.js";
+import { aiDecision } from "./decision.js";
+import { enforcementAdvice } from "./enforcement.js";
+
+export function buildPreflight(manifest = {}, warnings = [], intents = []) {
+  const decision = aiDecision(warnings, intents);
+  const enforcement = enforcementAdvice(warnings);
+  const actions = recommendedActions(manifest, { warnings, intents });
+  const state = decision.reviewRequired ? "review-required" : "clear";
+  const topAction = actions[0] || null;
+  return {
+    schemaVersion: 1,
+    state,
+    summary: state === "clear"
+      ? "Project-local work can continue. Record intent before environment changes."
+      : "Review warnings or open intents before environment changes.",
+    decision,
+    enforcement,
+    enforcementProfile: {
+      defaultMode: "advisory",
+      localOperation: "non-blocking",
+      strictMode: "optional",
+      strictUse: "CI or explicit human-requested checks only",
+      reason: "Avoid disrupting shared servers or developer machines while still making drift visible.",
+      recommendedStrictCommand: enforcement.recommendedCommand,
+      strictCommands: [
+        "aienvmp doctor --strict security",
+        "aienvmp doctor --strict policy",
+        "aienvmp doctor --strict coordination",
+        "aienvmp doctor --strict all"
+      ]
+    },
+    counts: {
+      warnings: warnings.length,
+      openIntents: intents.length,
+      runtimes: Object.keys(manifest.runtimes || {}).length,
+      dependencies: Number(manifest.dependencySnapshot?.summary?.packages || 0),
+      vulnerabilities: Number(manifest.security?.summary?.total || 0)
+    },
+    agentUse: {
+      purpose: "First AI-readable environment preflight for this workspace.",
+      rule: "Read status first, use context for details, record intent before environment changes.",
+      projectLocalWork: decision.canContinueProjectLocalWork ? "allowed" : "review-first",
+      environmentChanges: decision.canChangeEnvironmentWithoutReview ? "allowed" : "intent-and-review-first"
+    },
+    artifacts: preflightArtifacts(),
+    readOrder: [
+      ".aienvmp/status.json",
+      "AIENV.md",
+      ".aienvmp/manifest.json",
+      ".aienvmp/plan.json",
+      ".aienvmp/timeline.jsonl",
+      ".aienvmp/intents.jsonl"
+    ],
+    commands: {
+      refresh: "aienvmp sync",
+      status: "aienvmp status --write",
+      context: "aienvmp context --json",
+      plan: "aienvmp plan --write",
+      handoff: "aienvmp handoff --record --actor agent:id",
+      recordIntent: "aienvmp intent --actor agent:id --action planned-change"
+    },
+    topAction,
+    nextCommand: topAction?.command || decision.nextCommand
+  };
+}
+
+export function preflightArtifacts() {
+  return {
+    status: ".aienvmp/status.json",
+    envMap: "AIENV.md",
+    manifest: ".aienvmp/manifest.json",
+    dashboard: ".aienvmp/dashboard.html",
+    planJson: ".aienvmp/plan.json",
+    planMarkdown: ".aienvmp/plan.md",
+    intents: ".aienvmp/intents.jsonl",
+    timeline: ".aienvmp/timeline.jsonl"
+  };
+}

package/src/render.js

@@ -313,6 +313,9 @@ const envStepsHtml=envSteps.length?'<div class="timeline">'+envSteps.map(s=>\`<d
 const ciReadiness=manifest.ciReadiness||[];
 const ciHasFailure=ciReadiness.some(s=>s.status==='fail');
 const ciReadinessHtml=ciReadiness.length?'<table>'+ciReadiness.map(s=>\`<tr><th>\${esc(s.scope)}</th><td><code>\${esc(s.status)}</code>\${s.matchedWarningCodes?.length?\` \${esc(s.matchedWarningCodes.join(', '))}\`:''}</td></tr>\`).join('')+'</table>':'<div class="okline">Run <code>aienvmp doctor --strict security|policy|coordination|all</code> to choose CI enforcement scope.</div>';
+const enforcementProfile=manifest.preflight?.enforcementProfile||{};
+const strictCommands=enforcementProfile.strictCommands||[];
+const enforcementHtml=\`<table><tr><th>Default</th><td><code>\${esc(enforcementProfile.defaultMode||'advisory')}</code></td></tr><tr><th>Local</th><td>\${esc(enforcementProfile.localOperation||'non-blocking')}</td></tr><tr><th>Strict</th><td>\${esc(enforcementProfile.strictUse||'CI or explicit checks only')}</td></tr><tr><th>Recommended</th><td><code>\${esc(enforcementProfile.recommendedStrictCommand||'aienvmp doctor --strict all')}</code></td></tr></table><div class="timeline">\${strictCommands.slice(0,4).map(cmd=>\`<div class="event"><time>CI</time><div><code>\${esc(cmd)}</code></div></div>\`).join('')}</div><div class="path">\${esc(enforcementProfile.reason||'Warnings stay advisory unless strict mode is requested.')}</div>\`;
 const card=(title,badge,body)=>\`<section class="card"><div class="card-head"><h2>\${title}</h2>\${badge||''}</div>\${body}</section>\`;
 const reviewRequired=warnings.length>0||intents.length>0;
 const recentChanges=timeline.slice(-8).length;
@@ -361,6 +364,8 @@ document.getElementById('app').innerHTML=\`
     <div style="height:14px"></div>
     \${card('Environment Steps',envSteps.length?'<span class="pill warn">'+envSteps.length+' items</span>':'<span class="pill off">none</span>',envStepsHtml)}
     <div style="height:14px"></div>
+    \${card('Enforcement Mode','<span class="pill">advisory</span>',enforcementHtml)}
+    <div style="height:14px"></div>
     \${card('CI Readiness',ciHasFailure?'<span class="pill warn">review</span>':'<span class="pill">ready</span>',ciReadinessHtml)}
     <div style="height:14px"></div>
     \${card('Environment Health',warnings.length?'<span class="pill warn">attention</span>':'<span class="pill">clear</span>',warnHtml)}