aienvmp 0.1.55 → 0.1.56

package/BUGFIXES.md

@@ -124,6 +124,12 @@ Short record of bugs, fixes, and follow-up checks.
 - Fix: `.aienvmp/summary.md` now starts with `AI readiness`, `AI signals`, and `AI next`; the dashboard audit band includes readiness signals in its hint.
 - Verification: regression tests assert the summary top block and dashboard readiness signals; Windows and macOS package smoke checks cover generated artifacts.
 
+### AI review state could sound more blocking than intended
+
+- Issue: `aiReadiness.level: review` made risk visible, but did not explicitly tell AI agents which local actions remain safe and which environment changes need intent/review first.
+- Fix: `aiReadiness` now includes `requiresHumanReview`, `safeProjectLocalActions`, and `reviewOnlyEnvironmentChanges`; `summary.md` includes the first safe-local-work hint.
+- Verification: regression tests cover status, context, summary, and schema outputs; Windows smoke confirmed generated JSON and summary fields.
+
 ## Template
 
 ### Title

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.1.56
+
+- Added `aiReadiness.requiresHumanReview` so agents can distinguish review-needed signals from hard blocking.
+- Added `aiReadiness.safeProjectLocalActions` to clarify what AI agents may still do in review state.
+- Added `aiReadiness.reviewOnlyEnvironmentChanges` to keep environment changes advisory, intentional, and non-disruptive.
+- Added the safe-local-work hint to `.aienvmp/summary.md`.
+- Documented the summary top block and `aiReadiness` consumption rule in `schema --json`.
+- Added regression tests for status, context, summary, and schema outputs.
+
 ## 0.1.55
 
 - Moved `AI readiness`, readiness signals, and next action to the top of `.aienvmp/summary.md`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aienvmp",
-  "version": "0.1.55",
+  "version": "0.1.56",
   "description": "AI-first environment maps and lightweight runtime SBOMs for shared development machines.",
   "type": "module",
   "bin": {

package/src/commands/summary.js

@@ -62,6 +62,7 @@ export function renderSummary(status = {}, manifest = {}) {
     `- AI readiness: ${aiReadiness.level || "unknown"}`,
     `- AI signals: ${aiSignals.length ? aiSignals.join("; ") : "none"}`,
     `- AI next: ${aiNext}`,
+    `- AI safe local work: ${toList(aiReadiness.safeProjectLocalActions)[0] || "read artifacts and avoid environment changes until reviewed"}`,
     `- AI read first: ${readFirst}, then ${detail}`,
     `- mode: advisory by default; strict is opt-in with ${strict}`,
     "",

package/src/contract.js

@@ -24,7 +24,8 @@ export function schemaContract() {
         file: ".aienvmp/summary.md",
         command: "aienvmp summary --write",
         format: "markdown",
-        purpose: "Compact AI and CI step summary for quick review."
+        purpose: "Compact AI and CI step summary for quick review.",
+        startsWith: ["AI readiness", "AI signals", "AI next"]
       },
       context: {
         command: "aienvmp context --json",
@@ -52,7 +53,8 @@ export function schemaContract() {
     compatibility: {
       stability: "additive",
       consumerRule: "Ignore unknown fields. Do not require optional fields unless listed in requiredFields.",
-      localBehavior: "read-only; this command does not scan, install, update, or lock anything."
+      localBehavior: "read-only; this command does not scan, install, update, or lock anything.",
+      aiReadinessRule: "When aiReadiness.level is review, project-local code work may still continue if aiReadiness.projectLocalWork is allowed; environment changes should follow intent/review guidance."
     }
   };
 }

package/src/preflight.js

@@ -105,10 +105,21 @@ function aiReadinessSummary({ state, decision, coordination, agentActivity, agen
   const next = level === "ready"
     ? "AI agents can continue project-local work; record intent before environment changes."
     : "Review listed signals before another AI changes runtimes, dependencies, package managers, Docker, or global tools.";
+  const safeProjectLocalActions = [
+    "read status, summary, context, env map, SBOM, and timeline artifacts",
+    "continue code-only work that does not install, remove, upgrade, downgrade, or switch tools",
+    "write a plan or intent before changing runtimes, dependencies, package managers, Docker, or global tools"
+  ];
+  const reviewOnlyEnvironmentChanges = review.length
+    ? "Record intent and review signals before environment changes; strict failure remains opt-in."
+    : "Record intent before environment changes; strict failure remains opt-in.";
   return {
     level,
+    requiresHumanReview: review.length > 0,
     projectLocalWork: decision?.canContinueProjectLocalWork ? "allowed" : "review-first",
     environmentChanges: decision?.canChangeEnvironmentWithoutReview ? "allowed" : "intent-and-review-first",
+    safeProjectLocalActions,
+    reviewOnlyEnvironmentChanges,
     signals: review,
     blockers,
     next,