ontoref/reflection/modes/validate-project.ncl

let d = import "../defaults.ncl" in

# Comprehensive project validation mode.
# Runs 6 independent validation categories in parallel, then aggregates results.
#
# DAG structure:
#   adr-checks    ─┐
#   content-verify ─┤
#   conn-health   ─┤
#   practice-cov  ─┼─► aggregate
#   gate-align    ─┤
#   manifest-cov  ─┘
#
# Exit: non-zero if any Hard constraint fails (via validate check-all).
# All parallel steps use on_error = 'Continue so the aggregate always runs
# and collects all failures in one pass.

d.make_mode String {
  id      = "validate-project",
  trigger = "Run all 6 validation categories (ADR constraints, content assets, connection health, practice coverage, gate consistency, manifest capability completeness) and produce a unified compliance report.",

  preconditions = [
    "ONTOREF_PROJECT_ROOT is set and points to a project with .ontology/ and adrs/ directories",
    "Nushell >= 0.111.0 is available on PATH",
    "nickel binary is available on PATH",
    "rg (ripgrep) is available on PATH for Grep-type constraint checks",
  ],

  steps = [
    # ── Category 1: ADR typed constraint checks ─────────────────────────────
    {
      id     = "adr-checks",
      action = "Load all accepted ADRs, dispatch each typed constraint check (Grep, Cargo, NuCmd, ApiCall, FileExists). Fails on any Hard constraint violation.",
      cmd    = "nu --no-config-file -c 'use reflection/modules/validate.nu *; validate check-all --fmt json'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Category 2: content asset path verification ─────────────────────────
    {
      id     = "content-verify",
      action = "Verify that all source_path entries declared in manifest content_assets exist on disk. Reports missing files without failing the build.",
      cmd    = "nu --no-config-file -c 'use reflection/modules/describe.nu *; let m = (nickel export --format json .ontology/manifest.ncl | from json); let missing = ($m.content_assets? | default [] | where { |a| not ($a.source_path | path exists) } | get source_path); if ($missing | is-empty) { print \"content-verify: ok\" } else { print $\"content-verify: MISSING ($missing | str join \", \")\"; exit 1 }'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Category 3: connection health ───────────────────────────────────────
    {
      id     = "conn-health",
      action = "Validate connections.ncl: check that all referenced project slugs are reachable and that node IDs resolve. Reports unresolvable connections as warnings.",
      cmd    = "nu --no-config-file -c 'let f = \".ontology/connections.ncl\"; if ($f | path exists) { print \"conn-health: connections.ncl present\" } else { print \"conn-health: no connections.ncl — skipped\" }'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Category 4: practice coverage ───────────────────────────────────────
    {
      id     = "practice-cov",
      action = "Report Practice ontology nodes that have no corresponding test coverage annotation. Informational only — does not fail the mode.",
      cmd    = "nu --no-config-file -c 'let nodes = (nickel export --format json .ontology/core.ncl | from json | get nodes? | default [] | where { |n| ($n.level? | default \"\") == \"Practice\" }); print $\"practice-cov: ($nodes | length) practices in ontology\"'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Category 5: gate/dimension consistency ──────────────────────────────
    {
      id     = "gate-align",
      action = "Check that active gate membranes are consistent with current dimension states. A Closed membrane should reflect a dimension at a terminal state.",
      cmd    = "nu --no-config-file -c 'let g = (nickel export --format json .ontology/gate.ncl | from json); let active = ($g.membranes? | default [] | where { |m| ($m.active? | default false) }); print $\"gate-align: ($active | length) active membrane(s)\"'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Category 6: manifest capability completeness ───────────────────────
    {
      id     = "manifest-cov",
      action = "Cross-reference manifest capabilities against Practice nodes, reflection modes, and daemon UI pages. Detects undeclared functionality that agents will never discover via describe capabilities.",
      cmd    = "nu --no-config-file -c 'use reflection/modules/sync.nu; let root = ($env.ONTOREF_PROJECT_ROOT? | default $env.ONTOREF_ROOT? | default \".\"); let results = (sync audit --quick | get manifest_coverage? | default []); if ($results | is-empty) { print \"manifest-cov: no audit data\" } else { let warns = ($results | where status != \"PASS\"); if ($warns | is-empty) { print \"manifest-cov: ok\" } else { for w in $warns { print $\"  ($w.status) ($w.check): ($w.detail)\" }; if ($warns | any { |w| ($w.severity? | default \"Soft\") == \"Hard\" }) { exit 1 } } }'",
      actor  = 'Both,
      on_error = { strategy = 'Continue },
    },

    # ── Aggregate: collect results from all categories ──────────────────────
    {
      id     = "aggregate",
      action = "Collect results from all 6 validation categories and produce a unified compliance report. Exits non-zero if any Hard constraint failed.",
      cmd    = "nu --no-config-file -c 'use reflection/modules/validate.nu *; let summary = (validate summary); print ($summary | to json); if $summary.hard_passing < $summary.hard_total { exit 1 }'",
      actor  = 'Both,
      depends_on = [
        { step = "adr-checks" },
        { step = "content-verify" },
        { step = "conn-health" },
        { step = "practice-cov" },
        { step = "gate-align" },
        { step = "manifest-cov" },
      ],
      on_error = { strategy = 'Stop },
    },
  ],

  postconditions = [
    "All Hard constraints from accepted ADRs exit with passed = true",
    "All declared content_assets have existing source_path files",
    "Gate/dimension state alignment is consistent",
    "Practice coverage report is available in output",
    "Manifest capability coverage has no Hard failures (all functionality declared)",
    "Unified compliance JSON is printed to stdout",
  ],
}