intentdna 1.7.4 → 1.8.0

package/dist/templates/workflow-author.dna.yaml

@@ -0,0 +1,302 @@
+# workflow-author: create real workflow assets through C3 authoring packet
+# Purpose: external-agent authoring plus deterministic dna validation and an explicit human save gate.
+
+version: "0.1.0"
+id: template_workflow_author
+name: Workflow Author
+purpose: Create a real C1 workflow asset through an external-agent interview, YAML generation, dna validate loop, explicit human save confirmation, and catalog verification.
+maturity: draft
+fit:
+  - Creating a new workflow asset when no existing asset fits the work method.
+  - Turning a repeated team or personal work method into portable C1 YAML.
+  - Dogfooding the C3 authoring-packet path before Online Builder exists.
+not_for:
+  - Runtime execution of the workflow being authored.
+  - Automatic adoption, organization binding, sync, deployment, or policy mutation.
+  - Pretending dna inferred intent from a one-line goal.
+inputs:
+  - natural-language workflow goal
+  - human interview answers
+  - C3 authoring packet
+  - dna validate diagnostics
+outputs:
+  - staged C1 workflow asset candidate
+  - deterministic validation evidence
+  - human save decision
+  - saved project asset and catalog inspection evidence
+boundaries:
+  - External agents author YAML; they do not adopt, bind, sync, deploy, upload, or make runtime decisions.
+  - The goal is opaque context for dna; dna does not parse, score, or infer intent.
+  - Candidate YAML stays under .dna/authoring until dna validate passes and the human explicitly approves save.
+  - Save copies the exact validated candidate into .dna/templates; it does not adopt or sync the asset.
+  - Online, marketplace, Supabase, and MCP have no runtime authority in this workflow.
+lineage:
+  source: P2 authoring packet dogfood asset
+  contract: docs/architecture/c3-authoring-packet.md
+type: project
+namespace: wa
+
+cascade:
+  inherits: ["species:default"]
+  priority: 100
+
+variables:
+  workflow_goal:
+    description: "Human description of the work method to author. Used only as opaque packet/interview context."
+    default: "$ARGUMENTS"
+  candidate_path:
+    description: "Fixed safe staging path for the current authoring session."
+    default: ".dna/authoring/workflow-author.candidate.dna.yaml"
+
+genes:
+  k2_authoring_boundary:
+    description: Keep probabilistic creation outside dna and deterministic validation inside dna.
+    codons:
+      - type: attract
+        target: external_agent_interview
+      - type: attract
+        target: dna_validate_loop
+      - type: repel
+        target: dna_intent_inference
+      - type: repel
+        target: automatic_policy_mutation
+
+  human_save_gate:
+    description: Block catalog save while explicit human confirmation is absent.
+    codons:
+      - type: attract
+        target: explicit_human_save_confirmation
+      - type: repel
+        target: silent_template_write
+      - type: threshold
+        condition: "human_save_confirmation_present == false"
+        action: block
+
+  validation_before_catalog:
+    description: Only the exact candidate that passed dna validate may enter the project asset catalog.
+    codons:
+      - type: attract
+        target: exact_validated_candidate_save
+      - type: repel
+        target: pre_validation_catalog_write
+      - type: threshold
+        condition: "candidate_validation_green == false"
+        action: block
+
+contexts: {}
+
+roles:
+  packet_reader:
+    description: Reads the C3 packet and reports its deterministic contract without mutating project state.
+    tool_permissions:
+      allow: [Read, Grep, Glob, Bash]
+      deny: [Edit, Write, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: []
+    instructions:
+      - Run dna workflow authoring-packet for the requested goal, passing the goal as one CLI argument.
+      - Treat goal_context.raw as opaque context, not as a parsed intent model.
+      - Return the complete asset contract, schema constraints, examples, red lines, interview protocol, and validate loop.
+    success_criteria:
+      - Packet schema is intentdna.authoring_packet.v1.
+      - No project file is written by packet generation.
+
+  external_author:
+    description: Main-session external agent that interviews the human, authors the staged candidate, revises it from diagnostics, and saves only after approval.
+    model: interactive
+    tool_permissions:
+      allow: [Read, Write, Grep, Glob]
+      deny: [Bash, Edit, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: [".dna/authoring/**", ".dna/templates/**"]
+    instructions:
+      - Ask every interview_protocol question before writing YAML.
+      - Obtain a safe asset id matching /^[a-z][a-z0-9-]{1,62}$/ from the human-confirmed answers; never derive a file path from the raw goal.
+      - Write and revise only {{candidate_path}} until deterministic validation is green.
+      - After APPROVE_SAVE, copy the exact validated YAML to .dna/templates/<asset-id>.dna.yaml without changing its contents.
+      - Do not adopt, bind, sync, deploy, upload, or claim runtime authority.
+    success_criteria:
+      - Candidate structure reflects the interview answers rather than a canned example clone.
+      - Saved YAML is byte-equivalent to the validated candidate.
+
+  dna_validator:
+    description: Runs deterministic validation, catalog checks, and dry-run sync previews without rewriting YAML.
+    tool_permissions:
+      allow: [Read, Grep, Glob, Bash]
+      deny: [Edit, Write, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: []
+    instructions:
+      - Run dna validate on the staged candidate and report exact diagnostics.
+      - Never edit the candidate or infer what the human intended.
+      - After save, run dna assets show, dna assets inspect, dna sync --dry-run, and dna sync --codex --dry-run.
+    success_criteria:
+      - Validation evidence records exit code and diagnostics.
+      - Catalog and both harness previews refer to the saved asset.
+
+  human_reviewer:
+    description: Human owner who decides whether the validated candidate reflects the real work method and may be saved.
+    model: human
+    tool_permissions:
+      allow: []
+      deny: [Read, Write, Edit, Bash, Grep, Glob, NotebookEdit]
+    scope:
+      read: []
+      write: []
+    instructions:
+      - Review the candidate and deterministic validation evidence.
+      - Respond APPROVE_SAVE, REQUEST_CHANGES, or REJECT.
+      - Keep adoption, organization binding, and runtime sync as later explicit decisions.
+
+workflow:
+  name: workflow-author
+  description: Author a real workflow asset through C3 packet, external-agent interview and YAML work, deterministic validate retries, explicit human save confirmation, and catalog verification.
+  steps:
+    - id: packet
+      role: packet_reader
+      description: Emit and read the complete C3 authoring packet for the opaque workflow goal.
+      prompt: |
+        Run dna workflow authoring-packet for {{workflow_goal}} in JSON mode.
+        Pass the entire goal as one CLI argument.
+        Return the complete packet without parsing, scoring, or inferring intent.
+      handoff:
+        produces:
+          - type: summary
+            name: authoring_packet
+            description: Complete packet schema, red lines, examples, interview protocol, and validate loop.
+
+    - id: interview
+      role: external_author
+      depends_on: [packet]
+      description: Interview the human for the real workflow shape and a safe asset id.
+      prompt: |
+        Ask the packet interview_protocol questions for {{workflow_goal}}.
+        Confirm goal, steps, roles, verification, boundaries, failure handling, and a safe asset id matching /^[a-z][a-z0-9-]{1,62}$/.
+        Do not write YAML until the human answers are concrete enough to define the workflow.
+      handoff:
+        consumes:
+          - type: summary
+            name: authoring_packet
+            from: packet
+            description: Complete C3 packet.
+        produces:
+          - type: summary
+            name: interview_answers
+            description: Human-confirmed workflow shape, safe asset id, roles, boundaries, and validation needs.
+
+    - id: draft-yaml
+      role: external_author
+      depends_on: [interview]
+      description: Write or revise one staged C1 workflow asset candidate.
+      prompt: |
+        Write {{candidate_path}} from interview_answers and the packet contract.
+        Keep maturity draft, declare boundaries, and use the safe asset id from the interview.
+        On a retry, change only what the dna validate diagnostics or explicit human correction require.
+        Do not write under .dna/templates in this step.
+      handoff:
+        consumes:
+          - type: summary
+            name: interview_answers
+            from: interview
+            description: Human-confirmed workflow shape and safe asset id.
+        produces:
+          - type: file
+            path: "{{candidate_path}}"
+            description: Staged C1 workflow asset candidate outside the project asset catalog.
+
+    - id: validate
+      role: dna_validator
+      depends_on: [draft-yaml]
+      description: Validate the staged candidate and return exact diagnostics for bounded revision.
+      prompt: |
+        Run dna validate "{{candidate_path}}".
+        If invalid, return the exact diagnostics to draft-yaml and do not continue to human review or save.
+        If valid, record green validation evidence without changing the candidate.
+      checkpoints:
+        - assert: authoring_candidate_validated
+          command: "dna validate \"{{candidate_path}}\""
+          message: "Candidate workflow asset must pass dna validate before human save review."
+          action: block
+      handoff:
+        consumes:
+          - type: file
+            path: "{{candidate_path}}"
+            from: draft-yaml
+            description: Staged candidate YAML.
+        produces:
+          - type: test_result
+            name: validate_result
+            description: Deterministic dna validate exit code and diagnostics.
+
+    - id: human-save-review
+      role: human_reviewer
+      depends_on: [validate]
+      description: Ask the human whether the exact validated candidate may enter the project asset catalog.
+      prompt: |
+        Review {{candidate_path}}, interview_answers, and validate_result.
+        Respond with APPROVE_SAVE, REQUEST_CHANGES, or REJECT.
+        APPROVE_SAVE authorizes only the exact catalog save; it does not authorize adoption, binding, sync, deployment, or upload.
+      handoff:
+        consumes:
+          - type: file
+            path: "{{candidate_path}}"
+            from: draft-yaml
+            description: Exact validated candidate YAML.
+          - type: test_result
+            name: validate_result
+            from: validate
+            description: Green deterministic validation evidence.
+        produces:
+          - type: summary
+            name: human_save_decision
+            description: Explicit APPROVE_SAVE, REQUEST_CHANGES, or REJECT decision.
+
+    - id: save-asset
+      role: external_author
+      depends_on: [human-save-review]
+      description: Save the exact validated candidate only after APPROVE_SAVE.
+      prompt: |
+        Require human_save_decision == APPROVE_SAVE.
+        Read {{candidate_path}} and write the exact same YAML bytes to .dna/templates/<safe-asset-id>.dna.yaml using the safe id from interview_answers.
+        Do not alter maturity, adopt, bind, sync, deploy, or upload.
+      handoff:
+        consumes:
+          - type: file
+            path: "{{candidate_path}}"
+            from: draft-yaml
+            description: Exact candidate that passed dna validate.
+          - type: summary
+            name: human_save_decision
+            from: human-save-review
+            description: Explicit human save decision.
+        produces:
+          - type: file
+            name: saved_workflow_asset
+            description: Project-local .dna/templates/<safe-asset-id>.dna.yaml copied from the validated candidate.
+
+    - id: catalog-check
+      role: dna_validator
+      depends_on: [save-asset]
+      description: Confirm catalog visibility and preview both supported harness surfaces.
+      prompt: |
+        Run dna validate on the saved asset, then dna assets show <safe-asset-id> and dna assets inspect <safe-asset-id>.
+        Run dna sync --dry-run and dna sync --codex --dry-run.
+        Report equivalent workflow projection or any explicitly unsupported adapter difference; do not perform live sync.
+      handoff:
+        consumes:
+          - type: file
+            name: saved_workflow_asset
+            from: save-asset
+            description: Human-approved project-local workflow asset.
+        produces:
+          - type: test_result
+            name: catalog_and_sync_preview
+            description: Saved-asset validation, catalog visibility, and Claude/Codex dry-run evidence.
+
+  retry_policy:
+    max_retries: 3
+    retry_from: draft-yaml
+    backoff: none

package/dist/templates/workflow-blocked-scope-triage.dna.yaml

@@ -0,0 +1,242 @@
+# workflow-blocked-scope-triage: reusable blocked/skipped/deferred scope review
+# Source: extracted from Flutter rewrite dogfood modules with blocked and skipped work
+# Purpose: make blocked scope classification explicit before manager review, adoption, rollout, or sync
+
+version: "0.1.0"
+id: template_workflow_blocked_scope_triage
+name: Workflow Blocked Scope Triage
+purpose: Classify blocked, skipped, deferred, removed, or outside-scope work before completion, adoption, rollout, or sync.
+maturity: reviewed
+fit:
+  - Workflow evidence with skipped tests, blocked items, or human approval requirements.
+  - Manager review before treating deferred scope as accepted.
+not_for:
+  - Hiding unimplemented work as completion.
+  - Automatic policy mutation from evidence.
+inputs:
+  - progress or verification evidence
+  - diagnosis or baseline reference
+  - blocked item owner and reason
+outputs:
+  - blocked scope triage artifact
+  - manager-readable next review path
+  - explicit remaining versus deferred classification
+lineage:
+  source: Flutter rewrite dogfood modules
+  reference: src/templates/flutter-rewrite.dna.yaml
+type: project
+namespace: wbst
+
+cascade:
+  inherits: ["species:default"]
+  priority: 100
+
+variables:
+  evidence_path:
+    description: "Progress or verification evidence path"
+    default: ".dna/fix-progress/$ARGUMENTS.json"
+  triage_path:
+    description: "Blocked scope triage artifact path"
+    default: ".dna/blocked-scope/$ARGUMENTS.triage.json"
+  reference_path:
+    description: "Optional behavior, diagnosis, or review reference path"
+    default: "docs/behavior/$ARGUMENTS.md"
+
+evidence:
+  - label: Flutter rewrite dogfood blocked evidence
+    kind: reference
+    path: /Users/samuel/lawark/lwk_flutter_v2-rewrite/.dna/fix-progress
+    description: Module progress JSON and logs where chat and device recorded blocked or intentionally skipped items.
+  - label: Flutter rewrite blocked item rules
+    kind: reference
+    path: src/templates/flutter-rewrite.dna.yaml
+    description: Dogfood workflow rules that separate remaining UNIMPLEMENTED skipped tests from blocked TEST_BUG, INFRA, REMOVED, or explicitly approved blocked items.
+
+genes:
+  blocked_scope_is_explicit:
+    description: Blocked, skipped, removed, infra, and deferred work must be classified before completion or rollout
+    codons:
+      - type: attract
+        target: explicit_blocked_item_classification
+      - type: repel
+        target: silent_skip_as_pass
+      - type: threshold
+        condition: "blocked_scope_triage_written == true"
+        action: block
+
+  remaining_not_blocked:
+    description: Diagnosis-backed UNIMPLEMENTED skipped work is remaining work, not blocked scope
+    codons:
+      - type: attract
+        target: remaining_unimplemented_skipped_count
+      - type: repel
+        target: unimplemented_marked_blocked
+      - type: threshold
+        condition: "remaining_items_not_hidden == true"
+        action: block
+
+  manager_approval_for_defer:
+    description: Deferred or intentionally blocked scope requires a manager-readable reason and next review path
+    codons:
+      - type: attract
+        target: manager_readable_blocked_reason
+      - type: attract
+        target: next_review_command
+      - type: repel
+        target: automatic_defer
+      - type: sense
+        signal: blocked_scope_without_owner
+        response: request_manager_review
+
+contexts: {}
+
+roles:
+  scope_triager:
+    description: Reads progress, tests, diagnosis, and references to classify blocked, skipped, and deferred scope.
+    tool_permissions:
+      allow: [Read, Grep, Glob]
+      deny: [Edit, Write, Bash, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: []
+    instructions:
+      - Read {{evidence_path}} and {{reference_path}} before classifying blocked or skipped items.
+      - Separate REMAINING from BLOCKED, DEFERRED, TEST_BUG, INFRA, REMOVED, and USER_APPROVED_BLOCKED.
+      - Treat diagnosis-backed UNIMPLEMENTED skipped tests as REMAINING, not BLOCKED.
+      - Do not turn historical blocked notes into current verdicts without fresh evidence.
+      - Keep Obsidian/wiki as internal memory only; use machine evidence and reviewed artifacts for workflow decisions.
+
+  triage_reviewer:
+    description: Reviews scope triage for hidden remaining work, unsupported deferrals, and stale evidence.
+    tool_permissions:
+      allow: [Read, Grep, Glob]
+      deny: [Edit, Write, Bash, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: []
+    instructions:
+      - Reject triage that marks actionable BUG or UNIMPLEMENTED work as blocked.
+      - Reject PASS if any diagnosis-backed UNIMPLEMENTED skipped test remains.
+      - Require owner, reason, evidence path, and next review command for each blocked or deferred item.
+      - Return APPROVE, REQUEST_CHANGES, or BLOCKED with concise reasons.
+
+  triage_recorder:
+    description: Writes durable blocked scope triage evidence without mutating workflow assets or runtime sync artifacts.
+    tool_permissions:
+      allow: [Read, Write, Grep, Glob]
+      deny: [Edit, Bash, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: [".dna/blocked-scope/**"]
+    instructions:
+      - Write {{triage_path}} as JSON with status, remaining_items, blocked_items, deferred_items, evidence_paths, next_commands, reviewer_verdict, and updated_at.
+      - Include counts for remaining_count, blocked_count, deferred_count, and remaining_unimplemented_skipped_count.
+      - State whether manager review, continued fixing, adoption, evolution preview, rollout, or sync is allowed.
+      - Do not edit app code, tests, workflow templates, organization profiles, evolution markers, or runtime artifacts.
+
+  manager_reviewer:
+    description: Produces a manager-readable route from the triage artifact.
+    tool_permissions:
+      allow: [Read, Grep, Glob]
+      deny: [Edit, Write, Bash, NotebookEdit]
+    scope:
+      read: ["**/*", ".dna/**", "docs/**"]
+      write: []
+    instructions:
+      - Read {{triage_path}} and summarize whether work is PASS, CONTINUE, REQUEST_CHANGES, or BLOCKED.
+      - Name the evidence paths and explain any deferred or blocked scope in plain language.
+      - If remaining work exists, route back to fix/review before adoption, evolution mutation, rollout, or sync.
+      - End with an explicit mutation boundary.
+
+workflows:
+  blocked-scope-triage:
+    name: Blocked Scope Triage
+    description: Classify blocked, skipped, and deferred work before manager review, adoption, rollout, or runtime sync.
+    steps:
+      - id: classify-scope
+        role: scope_triager
+        description: Classify remaining, blocked, skipped, and deferred scope from evidence.
+        prompt: |
+          Classify blocked, skipped, and deferred scope for $ARGUMENTS.
+          Read {{evidence_path}} and {{reference_path}}.
+          Separate REMAINING from BLOCKED, DEFERRED, TEST_BUG, INFRA, REMOVED, and USER_APPROVED_BLOCKED.
+          Treat diagnosis-backed UNIMPLEMENTED skipped tests as REMAINING, not BLOCKED.
+        handoff:
+          produces:
+            - type: summary
+              name: scope_classification
+              description: Remaining, blocked, deferred, and skipped item classification with evidence paths.
+      - id: review-triage
+        role: triage_reviewer
+        depends_on: [classify-scope]
+        description: Review the scope triage for hidden work and unsupported blocked claims.
+        prompt: |
+          Review scope triage for $ARGUMENTS.
+          Reject hidden remaining work, stale evidence, unsupported deferrals, or actionable work marked as blocked.
+          Return APPROVE, REQUEST_CHANGES, or BLOCKED.
+        handoff:
+          consumes:
+            - type: summary
+              name: scope_classification
+              from: classify-scope
+              description: Scope classification.
+          produces:
+            - type: summary
+              name: triage_review_verdict
+              description: Review verdict and required changes.
+      - id: record-triage
+        role: triage_recorder
+        depends_on: [review-triage]
+        description: Write durable triage evidence for manager review.
+        prompt: |
+          Write {{triage_path}} for $ARGUMENTS.
+          Include status, remaining_items, blocked_items, deferred_items, evidence_paths, next_commands, reviewer_verdict, counts, and updated_at.
+          State whether adoption, evolution preview, rollout, or sync is allowed.
+        checkpoints:
+          - assert: triage_artifact_written
+            command: "test -s \"{{triage_path}}\""
+            message: "Blocked scope triage artifact must exist before manager route."
+            action: block
+        handoff:
+          consumes:
+            - type: summary
+              name: triage_review_verdict
+              from: review-triage
+              description: Triage review verdict.
+          produces:
+            - type: file
+              path: "{{triage_path}}"
+              description: Durable blocked scope triage JSON.
+      - id: manager-route
+        role: manager_reviewer
+        depends_on: [record-triage]
+        description: Produce manager-readable next action from blocked scope triage.
+        prompt: |
+          Read {{triage_path}} for $ARGUMENTS.
+          State PASS, CONTINUE, REQUEST_CHANGES, or BLOCKED, with evidence and next command.
+          Do not approve adoption, evolution mutation, rollout, or sync while remaining work is hidden.
+        handoff:
+          consumes:
+            - type: file
+              path: "{{triage_path}}"
+              from: record-triage
+              description: Blocked scope triage artifact.
+          produces:
+            - type: summary
+              name: manager_triage_route
+              description: Manager-readable route to continue, approve, request changes, or block.
+
+controllers:
+  blocked-scope-triage:
+    name: Blocked Scope Triage
+    description: "Classify, review, record, and route blocked/skipped/deferred scope before adoption or sync."
+    kind: sequential
+    workflow: blocked-scope-triage
+    max_rounds: 1
+    progress_artifact_path: ".dna/blocked-scope/$ARGUMENTS.controller.json"
+    roles:
+      scope_triager: scope_triager
+      triage_reviewer: triage_reviewer
+      triage_recorder: triage_recorder
+      manager_reviewer: manager_reviewer
+    stop_format: configured_stop_report