the language
shell
One shell line, run via /bin/sh -c — the EXPLICIT dangerous door (pipes · redirects · globs). The blocklist applies here; interpolating untrusted values here is on the author. Exactly one of command|shell. One of 59 words the served contract declares, projected from workflow.schema.json, the same file your editor validates against.
- 1surfaceexec
- optionaleverywherea choice, never a miss
- stringtypethe declared shape
- schemathe sourcenever prose
the contract
1 declarationDescriptions are the schema's own; the deeper invariants (value languages and regexes) ride the same projection. A miss is a nika check finding before anything runs.
- exec
stringOne shell line, run via /bin/sh -c — the EXPLICIT dangerous door (pipes · redirects · globs). The blocklist applies here; interpolating untrusted values here is on the author. Exactly one of command|shell.inside exec:
in a real file
a crafted check-green file artifact: exec: shell: "cat report.md | tr -d '\r'" cwd: "./dist" env: LC_ALL: "C"a verbatim slice, real line numbers from hash.nika.yaml, nika check green; the drift gate re-proves this copy on every test run.
cross-references
no skeleton carries it and no registered code names it; the schema row is the whole story today.
accepted by
defined by
The whole grammar in one place: the four verbs · the standard library · the spec. Try it in the playground. Read the reference →