Skip to content

framework-wave.md

Latest commit

 

History

History
49 lines (33 loc) · 3.76 KB

framework-wave.md

File metadata and controls

49 lines (33 loc) · 3.76 KB

Composable shell companion — framework wave (shipped)

WINDO’s core remains deliberate elevation + auditability. This document is the repository checklist for the phased “oh-my-* style” layer: optional modules, recipes, prompt bridge, curated extras, dev scaffolding, session summary, and advisory keybindings—without weakening the security model in SECURITY.md.

Planning may have started outside the repo; this file is the canonical map from that wave to shipped commands and docs.

Principles (unchanged)

  • Composable: opt-in per feature; defaults stay minimal.
  • Trust-bounded: verified remote content; no high-privilege fetches for install/extras (see SECURITY.md).
  • Inspectable: --json, windo doctor, manifests, and json-schema.md.

Tier 1 — “Framework feel”

# Plan item Shipped as Notes
1 Local windo modules windo modules list | enable | disable | doctor | verify Module root: %USERPROFILE%\Documents\windo\modules\<id>\ (not under .pwsh_secure; prefs in windo_prefs.json). Optional per-file SHA256 in module.json → verify. Profile stub loads enabled modules after the WINDO block; failures are warnings only.
2 Recipes (data-only templates) windo recipes, windo recipes run, windo run --recipe Bundled data in the installer; reviewed and versioned with $WindoVersion. v3.6.9+ expands this into a read-only operator atlas for identity, services, network, storage, security, OS, power, time, drivers, and tool posture.
3 Prompt bridge (no bundled theme) windo prompt [ --export ] Documents WINDO_LAST_REQUEST_ID, WINDO_VERSION; Oh My Posh segment guidance—see modules-and-extras.md.

Tier 2 — Community-shaped, low supply-chain risk

# Plan item Shipped as Notes
4 Curated extras index extras/index.json + windo extras search / windo extras fetch Index URL override: WINDO_EXTRAS_INDEX_URL (surfaced in windo config --json). Fetch non-elevated only; SHA256 when published.
5 Dev scaffolding windo dev init-module Creates module.json, Load.ps1, README.md; builtins remain centralized ($WindoBuiltinVerbs in windo_install.ps1).

Tier 3 — Power-user quality of life

# Plan item Shipped as Notes
6 Session / dashboard summary windo session [ --json ] Tasks, integrity, last command / RequestId; v3.2.1+ lastAudit / recentAudit tail.
7 PSReadLine advisory windo keybindings doctor Heuristic conflict hints; not authoritative—see json-schema.md keybindings.

Explicitly out of scope (this wave)

  • Arbitrary unsigned remote plugin execution by default.
  • Auto-elevating installs or silent network fetches from elevated sessions.
  • Replacing Oh My Posh or PSReadLine as products.

Related docs

After the wave — AI / agent CLI hygiene (v3.2.5+)

Not part of the original tier list, but aligned with the same trust-bounded philosophy: ai-bridge.md and windo ai status / windo ai doctor (read-only env name visibility; no API calls, no secret storage). v3.2.6+ adds Ollama-oriented guidance and env/advisory signals; optional ollama-list / ollama-ps / ollama-version recipes.