Build Operation Plane developer tooling, conformance runner, and diagnostic redaction CLI

[mdheller]

Purpose

Make sourceos-devtools the developer/operator tooling surface for Workspace Operation Plane contracts and SourceOS-local operation adapters.

Required tools

• Operation contract conformance runner.
• State-machine fixture validator.
• Operation adapter scaffolder.
• Local operation replay fixture generator.
• Redacted diagnostic export CLI.
• Terminal/browser/agent-machine sample fixtures.
• Developer checks for WorkspaceOperation, OperationTask, OperationEvent, Artifact, DecisionCard, and PolicyGateRecord fixtures.

First commands to expose

• sourceos operation validate-fixture
• sourceos operation replay-fixture
• sourceos operation scaffold-adapter
• sourceos diagnostics redact
• sourceos operation conformance

Integration targets

• SocioProphet/prophet-core-contracts#1
• SourceOS-Linux/sourceos-spec#87
• SociOS-Linux/workstation-contracts#28
• SocioProphet/socioprophet-standards-storage#79
• SocioProphet/workspace-inventory#4

Acceptance criteria

• Tooling can validate the initial contract fixtures from prophet-core-contracts.
• Redaction CLI removes cookies, bearer tokens, OAuth tokens, API keys, secrets, sensitive IDs, model prompts, and policy-marked snippets.
• Adapter scaffolder can generate starter skeletons for terminal command, browser capture, and local agent execution.
• Documentation explains how agents and developers run checks from ~/dev/<repo>.

Hard rule

Devtools may validate and scaffold Operation Plane work, but it must not become the policy authority or runtime source of truth.

[mdheller]

Progress update: initial Operation Plane conformance runner added

Added the first implementation slice for sourceos-devtools#19.

Added runner

• tools/sourceos_operation_conformance.py

Capabilities:

• validates operation-centered fixture bundles
• checks task/artifact/decision/policy-gate references
• checks retry/idempotency consistency
• checks artifact activation/admission consistency
• checks pending decision options
• checks blocking gate responsible actor/remediation
• supports --contracts-dir, --examples-dir, --schemas-dir, and --structural-only
• optionally runs JSON Schema validation when jsonschema is installed

Added docs

• docs/operation-conformance-runner.md

Added local smoke fixture

• tests/fixtures/workspace-operation/minimal-operation.json

Added CI

• .github/workflows/operation-conformance.yml

The CI path is self-contained and runs structural validation against the local smoke fixture without requiring a checkout of prophet-core-contracts.

Remaining work

• Add first-class CLI wrapper such as sourceos operation conformance.
• Add adapter scaffolding command.
• Add diagnostic redaction CLI.
• Emit machine-readable validation reports.
• Add fixture-generation helpers for terminal, browser, local agent-machine, sync, and release operations.
• Add optional dependency packaging for full JSON Schema validation.

Boundary check: this repo now validates/scaffolds Operation Plane work; it still does not own runtime, policy authority, or canonical schemas.