.cargo/config.toml

@@ -39,18 +39,6 @@ overflow-checks = true
 lto = false
 incremental = true
 
-[profile.ci-test]
-# Pre-commit: no debug info, no incremental — shared .rlib between test + docs hooks
-inherits = "test"
-debug = 0
-incremental = false
-
-[profile.ci]
-# CI pipeline: line-tables-only for actionable backtraces on remote failures
-inherits = "test"
-debug = "line-tables-only"
-incremental = false
-
 [profile.bench]
 # Benchmark profile - same as release
 opt-level = 3

.config/nextest.toml

@@ -1,7 +0,0 @@
-[profile.ci-test]
-fail-fast = true
-retries = 0
-
-[profile.ci]
-fail-fast = false
-retries = 1

.ontology/workflow.ncl

@@ -1,43 +0,0 @@
-let W = import "../reflection/schemas/workflow.ncl" in
-let D = import "../reflection/defaults/workflow.ncl" in
-
-{
-  layers = [
-    {
-      id          = "commit-fast",
-      trigger     = 'OnCommit,
-      validations = [
-        "rust-fmt",
-        "rust-clippy",
-        "nextest-ci-test",
-        "deny-subset",
-        "manifest-coverage",
-      ],
-      builds        = [],
-      distributions = [],
-      providers     = [W.pre_commit "pre-commit"],
-    },
-
-    {
-      id          = "ci-standard",
-      trigger     = 'OnPR,
-      validations = [
-        "rust-clippy-all",
-        "nextest-ci",
-        "deny-subset",
-        "nickel-typecheck",
-        "nushell-check",
-      ],
-      builds        = ["release-native"],
-      distributions = [],
-      providers     = [
-        W.woodpecker ".woodpecker/ci.yml",
-        W.justfile   "ci-standard",
-      ],
-    },
-  ],
-
-  validations   = D.validations,
-  builds        = D.builds,
-  distributions = {},
-}

.ontoref/config.ncl

@@ -6,7 +6,7 @@
 
   log = {
     level     = "info",
-    path      = ".ontoref/logs/actions.jsonl",
+    path      = ".ontoref/logs",
     rotation  = "daily",
     compress  = false,
     archive   = ".ontoref/logs/archive",

.ontoref/logs

@@ -15,12 +15,3 @@
 {"ts":"2026-03-14T18:29:31+0000","author":"unknown","actor":"agent","level":"read","action":"describe capabilities"}
 {"ts":"2026-03-14T18:29:32+0000","author":"unknown","actor":"agent","level":"read","action":"constraint"}
 {"ts":"2026-03-14T23:56:57+0000","author":"unknown","actor":"agent","level":"read","action":"adr list"}
-{"test": 1}
-{"ts":"2026-04-08T22:52:37+0100","author":"unknown","actor":"agent","level":"read","action":"migrate pending"}
-{"ts":"2026-04-08T22:54:36+0100","author":"unknown","actor":"developer","level":"read","action":"migrate pending"}
-{"ts":"2026-04-08T22:55:11+0100","author":"unknown","actor":"agent","level":"read","action":"migrate pending"}
-{"ts":"2026-04-08T22:58:49+0100","author":"unknown","actor":"agent","level":"read","action":"migrate show 0014"}
-{"ts":"2026-04-08T23:00:03+0100","author":"unknown","actor":"agent","level":"read","action":"migrate pending"}
-{"ts":"2026-04-08T23:00:07+0100","author":"unknown","actor":"agent","level":"read","action":"migrate list"}
-{"ts":"2026-04-08T23:00:55+0100","author":"unknown","actor":"agent","level":"write","action":"workflow generate"}
-{"ts":"2026-04-08T23:01:00+0100","author":"unknown","actor":"agent","level":"read","action":"workflow validate"}

.ontoref/logs/actions.jsonl

@@ -1,2 +0,0 @@
-{"ts":"2026-04-09T00:04:21+0100","author":"unknown","actor":"developer","level":"read","action":"describe project"}
-{"ts":"2026-04-09T00:04:22+0100","author":"unknown","actor":"developer","level":"read","action":"describe state"}

.woodpecker/ci.yml

@@ -1,45 +1,84 @@
-# Generated by ore workflow generate — layer: ci-standard
+# Woodpecker CI Pipeline
-# Source: .ontology/workflow.ncl
+# Equivalent to GitHub Actions CI workflow
-# Do not edit manually — regenerate with: ore workflow generate --layer ci-standard
+# Generated by dev-system/ci
 
 when:
   event: [push, pull_request, manual]
+  branch:
+    - main
+    - develop
 
 steps:
-  rust-clippy-all:
+  # === LINTING ===
+
+  lint-rust:
     image: rust:latest
     commands:
-      - cargo clippy --all-targets --all-features -- -D warnings
+      - curl --proto '=https' --tlsv1.2 -sSf https://just.systems/install.sh | bash -s -- --to /usr/local/bin
+      - rustup component add clippy
+      - cargo fmt --all -- --check
+      - cargo clippy --all-targets -- -D warnings
 
-  nickel-typecheck:
+  lint-bash:
+    image: koalaman/shellcheck-alpine:stable
+    commands:
+      - apk add --no-cache curl bash
+      - find . -name '*.sh' -type f ! -path './target/*' -exec shellcheck {} +
+
+  lint-nickel:
     image: rust:latest
     commands:
       - cargo install nickel-lang-cli --locked
-      - nickel typecheck
+      - find . -name '*.ncl' -type f ! -path './target/*' -exec nickel typecheck {} \;
 
-  nushell-check:
+  lint-nushell:
     image: rust:latest
     commands:
       - cargo install nu --locked
-      - find . -name '*.nu' ! -path '*/target/*' -print0 | xargs -0 -I\{\} nu --ide-check 100 \{\}
+      - find . -name '*.nu' -type f ! -path './target/*' -exec nu --ide-check 100 {} \;
 
-  nextest-ci:
+  lint-markdown:
+    image: node:alpine
+    commands:
+      - npm install -g markdownlint-cli2
+      - markdownlint-cli2 '**/*.md' '#node_modules' '#target'
+
+  # === TESTING ===
+
+  test:
     image: rust:latest
     commands:
-      - cargo install cargo-nextest --locked
+      - cargo test --workspace --all-features
-      - cargo nextest run --all-features --workspace --profile ci --cargo-profile ci
+    depends_on:
-    depends_on: ["rust-clippy-all", "nickel-typecheck", "nushell-check"]
+      - lint-rust
-    environment:
+      - lint-bash
-      RUST_BACKTRACE: 1
+      - lint-nickel
+      - lint-nushell
+      - lint-markdown
 
-  deny-subset:
+  # === BUILD ===
+
+  build:
+    image: rust:latest
+    commands:
+      - cargo build --release
+    depends_on:
+      - test
+
+  # === SECURITY ===
+
+  security-audit:
+    image: rust:latest
+    commands:
+      - cargo install cargo-audit --locked
+      - cargo audit --deny warnings
+    depends_on:
+      - lint-rust
+
+  license-check:
     image: rust:latest
     commands:
       - cargo install cargo-deny --locked
       - cargo deny check licenses advisories
-
+    depends_on:
-  build-release-native:
+      - lint-rust
-    image: rust:latest
-    commands:
-      - cargo build --release --workspace
-    depends_on: ["rust-clippy-all", "nickel-typecheck", "nushell-check"]

justfiles/workflow.just

@@ -1,11 +0,0 @@
-# Generated by ore workflow generate
-# Source: .ontology/workflow.ncl
-
-# layer: ci-standard
-ci-standard:
-    cargo clippy --all-targets --all-features -- -D warnings
-    cargo nextest run --all-features --workspace --profile ci --cargo-profile ci
-    cargo deny check licenses advisories
-    nickel typecheck
-    nu --ide-check 100
-    cargo build --release --workspace