“I want to…”

1nika: v12workflow:3  id: meeting-actions4  description: "Transcript → typed action items {owner, task, due}"5​6# A NON-thinking local model, deliberately: a thinking model can spend the7# whole `max_tokens` budget in its think block and return before the JSON8# (engine#428). Schema showcases pick a model that answers directly.9model: ollama/llama3.2:3b10​11inputs:12  transcript_path:13    type: string14    default: "examples/fixtures/meeting-transcript.txt"15    description: "Path to the raw meeting transcript"16⛨permits:17  ⛨tools: ["nika:log", "nika:read", "nika:write"]18  ⛨fs:19    # The sample transcript, named as a LITERAL. `permits:` cannot interpolate20    # (NIKA-AUTH-007), so this line does not follow `inputs.transcript_path`21    # around: pointing the var at your own file means editing this entry too,22    # or the read is refused at run with NIKA-SEC-004. That is the wall doing23    # its job — a boundary you can read is a boundary a reviewer can check.24    ⛨read: ["examples/fixtures/meeting-transcript.txt"]25    ⛨write: ["out/action-items.json"]26​27tasks:28  transcript:29    ◆invoke:30      tool: "nika:read"31      args: { path: "${{ inputs.transcript_path }}" }32​33  extract:34    with:35      transcript: ${{ tasks.transcript.output }}36    ◇infer:37      max_tokens: 900                  # a ceiling makes the cost report a number, not UNBOUNDED38      prompt: |39        Extract every action item from this meeting transcript ·40        ${{ with.transcript }}41        One entry per commitment somebody actually made. `due` only when a42        date or deadline was stated — never invent one.43      schema:                          # the contract the model must satisfy44        type: object45        additionalProperties: false46        required: [actions]47        properties:48          actions:49            type: array50            items:51              type: object52              additionalProperties: false53              required: [owner, task]54              properties:55                owner: { type: string }56                task: { type: string }57                due: { type: string }58​59  save:60    with:61      extract_actions: ${{ tasks.extract.output.actions }}62    ◆invoke:63      tool: "nika:write"64      args:65        # `.json` content is ONE interpolation of a real value — the engine66        # serializes it. Typing `{ "actions": ${{ … }} }` by hand emits67        # unquoted fields and the artifact stops being JSON.68        path: out/action-items.json69        content: "${{ with.extract_actions }}"70        create_dirs: true71​72  trace:73    after:74      extract: success75    ◆invoke:76      tool: "nika:log"77      args:78        level: info79        message: "Action items extracted to out/action-items.json"80​81outputs:82  actions:83    value: ${{ tasks.extract.output.actions }}84    description: "Typed action items, tracker-ready"85​

✔audited · 3 tasks · 3 waves · permits declared · 1 hintnika 0.107.0

1nika: v12workflow:3  id: price-watch4  description: "Watch a product price, ping me when it drops below my target"5​6const:7  product_api: "https://api.shop.example.com/v1/products/macbook-air"8  alert_below: 8999​10⛨secrets:11  ⛨alerts_webhook:12    ⛨source: env13    ⛨key: ALERTS_WEBHOOK_URL14    ⛨egress:                       # sanction the one send · the secret IS the URL15      - ⛨to: "nika:notify"16        ⛨host_from_self: true17⛨permits:18  ⛨tools: ["nika:fetch", "nika:notify"]19  ⛨net:20    # TWO hosts, for two different reasons.21    #22    # `api.shop.example.com` is what `const.product_api` names — a literal23    # `check` can read, so a mismatch here is caught before the run.24    #25    # `hooks.slack.com` is the ALERT host, and it is the entry people leave26    # out. `host_from_self:` above sanctions the FLOW (this secret may be the27    # URL) — it does not grant the capability. The host stays unknown at28    # check, so it is judged at RUN against this bound: name the escalation29    # host here or the send is refused mid-run, the first time the price30    # actually drops. Swap it for wherever YOUR webhook lives.31    ⛨http: ["api.shop.example.com", "hooks.slack.com"]32​33tasks:34  check:35    ◆invoke:36      tool: "nika:fetch"37      args:38        url: "${{ const.product_api }}"39        mode: jq40        jq: "."41    output:                           # named jq bindings over the raw response42      price: ".price"43      name: ".name"44    on_error:45      # Offline rehearsal · a sample ABOVE the target, so the gate below stays46      # closed and the dry run ends green with the alert skipped. The alert47      # path is therefore NOT exercised offline — which is exactly why the48      # `net:` bound above has to be right by reading, not by running.49      recover: { price: 949, name: "MacBook Air (offline sample)" }50​51  alert:52    with:53      price: ${{ tasks.check.price }}     # value edges · the named bindings cross the boundary here54      name: ${{ tasks.check.name }}55    when: ${{ with.price < const.alert_below }}56    ◆invoke:57      tool: "nika:notify"58      args:59        channel: webhook60        target: "${{ secrets.alerts_webhook }}"61        message: "Price drop · ${{ with.name }} is now ${{ with.price }} (target ${{ const.alert_below }})"62        severity: info63​64outputs:65  price: ${{ tasks.check.price }}66​

✔audited · 3 tasks · 3 waves · permits declarednika 0.107.0

1nika: v12workflow:3  id: invoice-chaser4  description: "Ledger CSV → overdue filter → drafted reminders → human gate → drafts file"5​6model: ollama/qwen3.5:4b   # local · zero key · swap for groq/llama-3.3-70b (drafting is a fast-model job)7​8const:9  ledger_csv: "examples/fixtures/invoices.csv"10⛨permits:11  ⛨tools: ["nika:convert", "nika:jq", "nika:prompt", "nika:read", "nika:write"]12  ⛨fs:13    # Two files, both spelled out — `const.ledger_csv` in, the drafts file14    # out. A const is baked in and a run cannot move it, so the boundary is15    # exact: no glob, and nothing else on disk is reachable either way.16    ⛨read: ["examples/fixtures/invoices.csv"]17    ⛨write: ["out/reminders-to-send.md"]18​19tasks:20  ledger:21    ◆invoke:22      tool: "nika:read"23      args: { path: "${{ const.ledger_csv }}" }24​25  rows:26    with:27      csv: ${{ tasks.ledger.output }}28    ◆invoke:29      tool: "nika:convert"30      args:31        input: "${{ with.csv }}"32        from: csv33        to: json34        has_header: true35​36  overdue:37    with:38      rows: ${{ tasks.rows.output }}39    ◆invoke:40      tool: "nika:jq"41      args:42        input: "${{ with.rows }}"43        expression: 'map(select(.status == "overdue"))'44​45  drafts:46    with:47      overdue: ${{ tasks.overdue.output }}48    when: ${{ size(with.overdue) > 0 }}49    ◇infer:50      max_tokens: 900       # a ceiling makes the cost report a number, not UNBOUNDED51      prompt: |52        Draft one short, polite payment reminder per overdue invoice ·53        ${{ with.overdue }}54        Markdown · one section per client · firm but warm.55​56  approve:57    with:58      drafts: ${{ tasks.drafts.output }}59    when: ${{ with.drafts != null }}   # nothing drafted · nothing to approve60    ◆invoke:61      tool: "nika:prompt"62      args:63        message: "Save the reminder drafts for sending?"64        default: false65​66  save:67    with:68      drafts: ${{ tasks.drafts.output }}69      approved: ${{ tasks.approve.output }}70    when: ${{ with.drafts != null && with.approved == true }}   # zero overdue → drafts skipped (null) · don't write nothing71    ◆invoke:72      tool: "nika:write"73      args:74        path: out/reminders-to-send.md75        create_dirs: true76        content: "${{ with.drafts }}"77​78outputs:79  overdue:80    value: ${{ tasks.overdue.output }}81    description: "The overdue rows the reminders were drafted for"82​

1nika: v12workflow:3  id: ceo-monday-brief4  description: "news + repo pulse + KPIs → one synthesis → dated brief → a ping on every outcome"5​6model: ollama/qwen3.5:4b   # local · zero key · `--model mock/echo` rehearses the whole file7​8inputs:9  alert:10    type: bool11    default: false12    description: "Send the founders ping. OFF by default so a rehearsal touches no webhook."13  kpi_sheet:14    type: string15    default: "./examples/fixtures/ceo-kpis.csv"16    description: "The weekly numbers · columns incl. weekly_revenue"17​18const:19  watch_query: "AI workflow engines"20​21⛨secrets:22  ⛨founders_webhook:23    ⛨source: env24    ⛨key: FOUNDERS_WEBHOOK_URL25    ⛨egress:                       # sanction the one send · the secret IS the URL26      - ⛨to: "nika:notify"27        ⛨host_from_self: true28⛨permits:29  ⛨exec: ["git"]30  ⛨tools: ["nika:convert", "nika:date", "nika:fetch", "nika:jq", "nika:notify", "nika:prompt", "nika:read", "nika:write"]31  ⛨net:32    ⛨http:33      - "hn.algolia.com"          # the market-signal search · the only host this brief READS34      # `host_from_self:` above sanctions the FLOW (the secret may be the URL) —35      # it does not grant the capability. The host stays unknown at check, so it36      # is judged at RUN against this bound: name the escalation host here or the37      # send is refused mid-run, after the tokens are already spent.38      - "hooks.slack.com"         # swap for wherever FOUNDERS_WEBHOOK_URL points39  ⛨fs:40    # The sheet arrives as an INPUT, so `check` reads past it — and the wall does41    # not move when the input does: point --var kpi_sheet at anything else and the42    # run refuses it NIKA-SEC-004. That asymmetry is the point of a permits block.43    ⛨read: ["./examples/fixtures/ceo-kpis.csv"]44    # One dated brief per run, written DIRECTLY in ./briefs/. `*` matches a single45    # segment and never crosses `/`, so nothing here can steer the write into a46    # subtree — which is why this is not `./briefs/**`.47    ⛨write: ["./briefs/*-monday.md"]48​49tasks:50  # ── the human gate · FIRST, before anything untrusted enters ──51  #52  # This run holds all three legs of the lethal trifecta: a private read (the53  # numbers), untrusted ingress (a public news API), and external egress (a54  # write and a webhook). NEP-0002 asks for one blocking human decision that55  # DOMINATES every path to every egress-capable task — which forces it here,56  # at the root, not in front of the save.57  #58  # A gate placed after the fetch could never dominate: the brief still reaches59  # `save` along its own data edge, a path the human is not standing on. And a60  # human skimming a model's summary of an attacker's page is a weak check61  # anyway — by then the payload is already inside the run. So the decision62  # taken here is the honest one: authorize the CAPABILITY ENVELOPE up front.63  approve:64    ◆invoke:65      # blocking · no `default:` · a gate with a default is not a gate, and the66      # checker enforces both directions: add `default: false` here and this67      # file turns RED with NIKA-SEC-009, because a defaulted prompt dominates68      # nothing. Leaving it blocking costs one [headless-prompt] hint instead —69      # that hint is the price of a real gate, not a defect to paper over.70      # The run pauses (exit 4, not a failure) — answer and resume with71      #   nika run <file> --resume <trace> --answer approve=true72      tool: "nika:prompt"73      args:74        message: |75          This Monday brief will:76            · fetch public news from hn.algolia.com77            · run git in this repo78            · read ${{ inputs.kpi_sheet }}79            · write ./briefs/<date>-monday.md80            · ping the founders webhook (armed: ${{ inputs.alert }})81​82          Proceed? [yes/no]83​84  # ── branch 1 · market signal · the untrusted leg ──85  news:86    with:87      go: ${{ tasks.approve.output }}88    when: ${{ with.go == true }}89    ◆invoke:90      tool: "nika:fetch"91      args:92        url: "https://hn.algolia.com/api/v1/search?query=${{ const.watch_query }}"93        mode: jq94        jq: ".hits[:10] | map(.title)"95    on_error:96      # The honest dry run · offline the host resolves nowhere and this literal97      # takes over, so the join below is exercised on both paths with the same98      # binding. It is labelled in the brief so nobody mistakes it for signal.99      recover: ["(offline rehearsal · no market signal was fetched)"]100​101  # ── branch 2 · engineering pulse ──102  pulse:103    with:104      go: ${{ tasks.approve.output }}105    when: ${{ with.go == true }}106    ▷exec:107      # Default capture (stdout), so a non-zero exit FAILS the task and the108      # recovery below is what handles it. The tempting alternative — `capture:109      # structured` — turns the exit code into data and the task reports success110      # whatever happened; that is only honest when something downstream reads111      # `exit_code`, and the checker flags the case where nothing does112      # ([swallowed-exit]). Here the failure is visible in the run (« 1113      # recovered ») and labelled in the brief, which is the same information114      # with none of the silence.115      command: ["git", "--no-pager", "shortlog", "-sn", "--since=1 week ago", "HEAD"]116    on_error:117      recover: "(no engineering pulse · git could not be read here)"118​119  # ── branch 3 · the numbers · the private leg ──120  sheet:121    with:122      go: ${{ tasks.approve.output }}123    when: ${{ with.go == true }}124    ◆invoke:125      tool: "nika:read"126      args: { path: "${{ inputs.kpi_sheet }}" }127​128  rows:129    with:130      csv: ${{ tasks.sheet.output }}131    # A SKIPPED producer hands its consumer `null`, and the consumer runs anyway.132    # Measured: without this line a « no » at the gate reaches nika:convert with133    # nothing and the run FAILS (NIKA-BUILTIN-CONVERT-002) instead of landing134    # nothing — a refusal must be a quiet no-op, never an error. Every task135    # downstream of a gated one carries its own admission test.136    when: ${{ with.csv != null }}137    ◆invoke:138      tool: "nika:convert"139      args:140        input: "${{ with.csv }}"141        from: csv142        to: json143        has_header: true144​145  revenue:146    with:147      rows: ${{ tasks.rows.output }}148    when: ${{ with.rows != null }}149    ◆invoke:150      tool: "nika:jq"151      args:152        # CSV cells arrive as STRINGS whatever they look like, so `tonumber`153        # before `add`. Money is arithmetic, never a model's opinion of it.154        input: "${{ with.rows }}"155        expression: "map(.weekly_revenue | tonumber) | add"156​157  # ── the join · three branches land here, one call ──158  brief:159    with:160      go: ${{ tasks.approve.output }}161      # Every binding is SHALLOW (`.output`, never `.output.field`). Measured:162      # a skipped producer's `.output` reads as `null` and the join survives it,163      # while a deep field of the same skipped producer is NIKA-VAR-001 ·164      # unresolved template reference — bindings resolve before `when:` decides,165      # so a deep read into a « no » path kills the run the gate was meant to166      # spare. Reach one level, gate, then reach deeper downstream.167      news: ${{ tasks.news.output }}168      pulse: ${{ tasks.pulse.output }}169      rows: ${{ tasks.rows.output }}170      revenue: ${{ tasks.revenue.output }}171    when: ${{ with.go == true }}172    ◇infer:173      max_tokens: 1200               # the cost report becomes a ceiling, not UNBOUNDED174      prompt: |175        Market signal · ${{ with.news }}176        Engineering pulse · ${{ with.pulse }}177        Weekly rows · ${{ with.rows }}178        Revenue, summed by the engine · ${{ with.revenue }}179​180        Write my Monday brief · 5 sections · market · product · numbers ·181        risks · the ONE decision this week needs.182      thinking:183        # A reasoning budget, honoured by seats that support extended thinking184        # and ignored by the ones that do not — declaring it never fails a run.185        enabled: true186        budget_tokens: 4000187​188  stamp:189    with:190      go: ${{ tasks.approve.output }}191    when: ${{ with.go == true }}192    ◆invoke:193      tool: "nika:date"194      args: { op: now }195    output:196      day: ".[:10]"                  # nika:date returns the ISO string itself · slice YYYY-MM-DD197​198  save:199    with:200      go: ${{ tasks.approve.output }}   # every effect re-reads the decision · a « no » lands nothing201      day: ${{ tasks.stamp.day }}202      brief: ${{ tasks.brief.output }}203    when: ${{ with.go == true }}204    ◆invoke:205      tool: "nika:write"206      args:207        path: "./briefs/${{ with.day }}-monday.md"208        content: "${{ with.brief }}"209        create_dirs: true210​211  # ── the ping · a TASK, not a cleanup hook ──212  #213  # `after: {save: terminal}` admits all four settled states, so this fires214  # whether the brief landed, failed, or was skipped by a « no » at the gate.215  # It is deliberately not an `on_finally:` hook: cleanup errors are LOGGED and216  # DO NOT PROPAGATE (03 §on_finally · best-effort lane), so a webhook that217  # dies there dies in silence — measured: an unresolved secret in a cleanup218  # hook leaves the run green with nothing sent. An alert you cannot trust to219  # fail loudly is not an alert.220  alert:221    after:222      save: terminal223    with:224      armed: ${{ inputs.alert }}225      outcome: ${{ tasks.save.status }}   # observe WHAT happened · same pass-set as the after edge226      day: ${{ tasks.stamp.day }}227    when: ${{ with.armed == true }}       # OFF by default · a rehearsal touches no webhook228    ◆invoke:229      tool: "nika:notify"230      args:231        channel: webhook232        target: "${{ secrets.founders_webhook }}"233        message: "Monday brief · ${{ with.outcome }} · briefs/${{ with.day }}-monday.md"234        severity: info235​236outputs:237  brief: ${{ tasks.brief.output }}238  revenue:239    value: ${{ tasks.revenue.output }}240    description: "Total weekly revenue, summed by jq — the number nobody guessed"241​

1nika: v12workflow:3  id: competitor-radar4  description: "sitemap → what changed this window → parallel page reads → one brief"5​6model: ollama/qwen3.5:4b   # local · zero key · swap for anthropic/claude-sonnet-4-6 for a sharper read7​8run:9  clock: system            # `pages` declares a `timeout:` · name the clock it rides10​11inputs:12  sitemap_url:13    type: string14    default: "https://nika.sh/sitemap.xml"15    description: "Whose sitemap to read · must agree with the host in permits.net.http"16  window_days:17    type: integer18    default: 719    description: "How far back « recently » reaches"20  max_pages:21    type: integer22    default: 623    description: "Politeness cap · the fan-out never exceeds this many fetches"24​25⛨permits:26  ⛨tools: ["nika:date", "nika:emit", "nika:fetch", "nika:jq", "nika:write"]27  ⛨net:28    # ONE host covers BOTH fetches, and that is a claim worth being explicit29    # about: `map` reads the sitemap, then `pages` fetches whatever `.loc`30    # values came back — runtime URLs this file never sees. A sitemap is31    # single-host by protocol, so the site's own host is the honest wall: if32    # their sitemap ever points somewhere else, that fetch is refused instead33    # of followed. Change `inputs.sitemap_url` and this line changes with it.34    ⛨http: ["nika.sh"]35  ⛨fs:36    # ONE file, named exactly, because the path IS a literal — there is no37    # uuid or date in it, so there is nothing for a wildcard to stand in for.38    # A bound is only as wide as the uncertainty it has to cover.39    #40    # `create_dirs: true` below makes the missing `./radar/` without needing41    # a grant of its own: measured, with only this line, the directory is42    # created and the brief lands. (Builtins that take an `output_dir:`43    # instead — `nika:image_generate` and family — are the opposite case:44    # `check` judges the directory ARGUMENT while the run gates each final45    # file path, so those need the directory AND its children. The bound46    # follows what the builtin names.)47    ⛨write: ["./radar/competitor-brief.md"]48​49tasks:50  # ── how far back does « recently » reach ───────────────────────────51  # Three date ops rather than a hardcoded string, because a radar that ships52  # with a date baked in is wrong the day after you write it. `format` to53  # %Y-%m-%d puts the cutoff in the same shape sitemaps use for `lastmod`,54  # which is what makes the string comparison below sound.55  now:56    ◆invoke:57      tool: "nika:date"58      args: { op: now }59​60  cutoff:61    with:62      now: ${{ tasks.now.output }}63    ◆invoke:64      tool: "nika:date"65      args:66        op: subtract67        base: "${{ with.now }}"68        duration: "${{ inputs.window_days }}d"69​70  cutoff_day:71    with:72      cutoff: ${{ tasks.cutoff.output }}73    ◆invoke:74      tool: "nika:date"75      args:76        op: format77        input: "${{ with.cutoff }}"78        format: "%Y-%m-%d"79​80  # ── what they publish, and when it last moved ──────────────────────81  map:82    ◆invoke:83      tool: "nika:fetch"84      args:85        url: "${{ inputs.sitemap_url }}"86        mode: sitemap                  # → [{loc, lastmod, changefreq, priority}, …]87​88  # `lastmod` is optional in the sitemap protocol, so `// ""` sends an entry89  # without one outside the window instead of crashing the filter. Newest90  # first, then the politeness cap — the fan-out width is decided here and91  # nowhere else.92  recent:93    with:94      entries: ${{ tasks.map.output }}95      cutoff: ${{ tasks.cutoff_day.output }}96    ◆invoke:97      tool: "nika:jq"98      args:99        input: { entries: "${{ with.entries }}", cutoff: "${{ with.cutoff }}" }100        expression: >-101          .cutoff as $c102          | .entries103          | map(select((.lastmod // "") >= $c))104          | sort_by(.lastmod) | reverse105          | .[:${{ inputs.max_pages }}]106          | map(.loc)107​108  # ── read them all at once ──────────────────────────────────────────109  pages:110    with:111      urls: ${{ tasks.recent.output }}112    for_each: ${{ with.urls }}113    max_parallel: 4                    # be a good guest · four in flight, no more114    fail_fast: false                   # one dead page must not kill the radar115    on_error:116      recover: null                    # that page yields null at its index · the batch lives117    timeout: "30s"                     # somebody else's server, somebody else's bad day118    retry:119      max_attempts: 3120      backoff_strategy: exponential121      jitter: true                     # a swarm that retries in lockstep is a small DDoS122    ◆invoke:123      tool: "nika:fetch"124      args:125        url: "${{ item }}"126        mode: article                  # readability extraction · the prose, not the chrome127​128  # ── the fan-in · a for_each output is an array in ITEM ORDER ───────129  # which is what lets `transpose` put each page's text back beside its own130  # URL. The `select` is where the pages that never answered leave.131  readable:132    with:133      urls: ${{ tasks.recent.output }}134      pages: ${{ tasks.pages.output }}135    ◆invoke:136      tool: "nika:jq"137      args:138        input: ["${{ with.urls }}", "${{ with.pages }}"]139        expression: >-140          transpose141          | map(select(.[1] != null))142          | map({ url: .[0], text: .[1] })143​144  digest:145    with:146      readable: ${{ tasks.readable.output }}147      cutoff: ${{ tasks.cutoff_day.output }}148    when: ${{ size(with.readable) > 0 }}   # a quiet week costs nothing149    ◇infer:150      max_tokens: 1500                     # one page · a ceiling, not a hope151      prompt: |152        These are the pages a competitor published or changed since153        ${{ with.cutoff }} ·154        ${{ with.readable }}155        Write the Monday brief · what they shipped · what it signals · what156        we should watch. One page, plain words, no filler.157​158  save:159    with:160      digest: ${{ tasks.digest.output }}161    when: ${{ with.digest != null }}   # a skipped task reads null downstream · gate on the VALUE162    ◆invoke:163      tool: "nika:write"164      args:165        path: "./radar/competitor-brief.md"166        content: "${{ with.digest }}"167        create_dirs: true168​169  # The « it is ready » signal, as a LOCAL journal event. No webhook, no170  # secret, no host: the brief is on disk and the event says so. A radar that171  # needed an outbound credential to tell you it had finished would be a172  # strictly larger blast radius for no extra information.173  record:174    with:175      urls: ${{ tasks.recent.output }}176      readable: ${{ tasks.readable.output }}177      cutoff: ${{ tasks.cutoff_day.output }}178    ◆invoke:179      tool: "nika:emit"180      args:181        event_type: "competitor.radar.scan"182        payload:183          since: ${{ with.cutoff }}184          selected: ${{ with.urls }}185          read_ok: ${{ with.readable }}186​187outputs:188  since:189    value: ${{ tasks.cutoff_day.output }}190    description: "The computed window start · what « recently » meant on this run"191  pages:192    value: ${{ tasks.recent.output }}193    description: "The URLs the sitemap said had changed inside that window"194  brief:195    value: ${{ tasks.digest.output }}196    description: "The Monday brief · null when the week was quiet"197​

1nika: v12workflow:3  id: support-triage4  description: "Ticket queue → typed triage → urgent escalation → triage board"5​6# A NON-thinking local model, deliberately: a thinking model can spend the7# whole `max_tokens` budget in its think block and return before the JSON8# (engine#428). Schema showcases pick a model that answers directly.9model: ollama/llama3.2:3b   # local · zero key · swap for groq/llama-3.3-70b (triage wants speed)10​11const:12  queue_path: "examples/fixtures/support-queue.json"13​14⛨secrets:15  ⛨oncall_webhook:16    ⛨source: env17    ⛨key: ONCALL_WEBHOOK_URL18    ⛨egress:                       # sanction the one send · the secret IS the URL19      - ⛨to: "nika:notify"20        ⛨host_from_self: true21⛨permits:22  ⛨tools: ["nika:jq", "nika:notify", "nika:read", "nika:uuid", "nika:write"]23  ⛨fs:24    ⛨read: ["examples/fixtures/support-queue.json"]25    # One board per batch id. `*` matches a single segment and never crosses26    # `/`, so the uuid can never steer the write out of out/ — `out/**` would27    # let it.28    ⛨write: ["out/triage-*.json"]29  ⛨net:30    # `host_from_self:` above sanctions the FLOW (the secret may be the URL) —31    # it does not grant the capability. The host stays unknown at check, so it32    # is judged at RUN against this bound: name the escalation host here or the33    # send is refused mid-run, after the tokens are already spent.34    ⛨http: ["hooks.slack.com"]35​36tasks:37  batch:38    ◆invoke:39      tool: "nika:uuid"40      args: { version: v7 }41​42  queue:43    ◆invoke:44      tool: "nika:read"45      args: { path: "${{ const.queue_path }}" }46​47  triage:48    with:49      queue: ${{ tasks.queue.output }}50    ◇infer:51      max_tokens: 1500                 # the whole queue in one call · a ceiling, not UNBOUNDED52      prompt: |53        Triage every ticket in this queue ·54        ${{ with.queue }}55        For each · classify category and urgency, draft a 2-sentence first reply.56      schema:57        type: object58        additionalProperties: false    # a deterministic shape across providers59        required: [tickets]60        properties:61          tickets:62            type: array63            items:64              type: object65              additionalProperties: false66              required: [id, category, urgency, first_reply]67              properties:68                id: { type: string }69                category: { type: string, enum: [billing, bug, how-to, account, other] }70                urgency: { type: string, enum: [low, normal, high, critical] }71                first_reply: { type: string }72​73  urgent:74    with:75      tickets: ${{ tasks.triage.output.tickets }}76    ◆invoke:77      tool: "nika:jq"78      args:79        input: "${{ with.tickets }}"80        expression: 'map(select(.urgency == "high" or .urgency == "critical"))'81​82  escalate:83    with:84      urgent: ${{ tasks.urgent.output }}85      batch: ${{ tasks.batch.output }}86    when: ${{ size(with.urgent) > 0 }}87    ◆invoke:88      tool: "nika:notify"89      args:90        channel: webhook91        target: "${{ secrets.oncall_webhook }}"92        message: "Urgent tickets in triage batch ${{ with.batch }} · ${{ with.urgent }}"93        severity: warning94​95  board:96    with:97      tickets: ${{ tasks.triage.output.tickets }}98      batch: ${{ tasks.batch.output }}99    ◆invoke:100      tool: "nika:write"101      args:102        # A `.json` artifact takes ONE interpolated value as `content:` and103        # lets the engine serialize it. Typing `{ "tickets": ${{ … }} }` by104        # hand emits unquoted fields and the board stops being JSON.105        path: "out/triage-${{ with.batch }}.json"106        content: "${{ with.tickets }}"107        create_dirs: true108​109outputs:110  tickets:111    value: ${{ tasks.triage.output.tickets }}112    description: "The classified queue with drafted first replies"113​

1nika: v12workflow:3  id: resume-screener4  description: "glob CVs → local-model rubric per candidate → deterministic shortlist"5​6model: ollama/qwen3.5:4b   # PII stays on the machine · the whole screen is offline7​8const:9  role: "Senior Rust engineer"10  shortlist_size: 511  # The committed rehearsal inbox. Point this at ./hiring/inbox (or wherever12  # your exports land) and change `permits.fs.read` to match, same edit.13  cv_glob: "./examples/fixtures/cvs/*.md"14​15⛨permits:16  ⛨tools: ["nika:glob", "nika:jq", "nika:read", "nika:write"]17  # NO `net:` category. That absence is the whole sovereignty claim: with no18  # host granted, a CV that talks the model into exfiltrating itself still19  # has nowhere to go — the boundary refuses before the request is made.20  ⛨fs:21    # TWO entries, and both earn their place. `nika:glob` opens the ROOT of22    # its pattern before it lists anything, and a directory grant does not23    # cover its children while a child grant does not cover the directory —24    # so each is named. Measured: with only the second line, the run dies25    # `NIKA-SEC-004 · ./examples/…/cvs resolves outside permits.fs.read`26    # before a single CV is read.27    #28    # `*` is one segment and never crosses `/`, which is the right width29    # here: CVs land flat in the inbox. `cvs/**` would also work and would30    # additionally hand over every sub-tree someone drops in there.31    ⛨read:32      - "./examples/fixtures/cvs"      # the directory the glob opens33      - "./examples/fixtures/cvs/*"    # the CVs one level inside it34    # One brief, one path. Nothing else on this machine is writable by this35    # workflow — not `./hiring/**`, not a sibling of the brief.36    ⛨write: ["./hiring/shortlist-brief.md"]37​38tasks:39  # ── the pool is discovered at runtime · the count is never written down ──40  pool:41    ◆invoke:42      tool: "nika:glob"43      args: { pattern: "${{ const.cv_glob }}" }44​45  cvs:46    with:47      paths: ${{ tasks.pool.output }}48    for_each: ${{ with.paths }}49    max_parallel: 850    fail_fast: false                   # one unreadable CV must not stop the batch51    on_error:52      recover: null                    # null holds the index so the zip below stays aligned53    ◆invoke:54      tool: "nika:read"55      args: { path: "${{ item }}" }56​57  # A for_each output is an array in ITEM ORDER, so `transpose` pairs each58  # path with its own text. The `select` is where the unreadable CVs leave.59  pairs:60    with:61      paths: ${{ tasks.pool.output }}62      texts: ${{ tasks.cvs.output }}63    ◆invoke:64      tool: "nika:jq"65      args:66        input: ["${{ with.paths }}", "${{ with.texts }}"]67        expression: >-68          transpose69          | map(select(.[1] != null))70          | map({ path: .[0], text: .[1] })71​72  # ── one rubric, applied identically to everyone ────────────────────73  # `with.cv_path` reads `${{ item.path }}` — a pre-fan-out import that is74  # re-evaluated per iteration, which is how a loop-local reaches the prompt75  # under a name that means something.76  screened:77    with:78      pairs: ${{ tasks.pairs.output }}79      cv_path: ${{ item.path }}80    for_each: ${{ with.pairs }}81    max_parallel: 2                    # a local model shares one GPU · don't thrash it82    fail_fast: false83    on_error:84      recover: null85    ◇infer:86      max_tokens: 1200                 # a rubric row, not an essay87      prompt: |88        Role · ${{ const.role }}89        Candidate file · ${{ with.cv_path }}90        CV ·91        ${{ item.text }}92        Score this candidate against the role. Quote evidence from the CV93        for every rating: no rating without a quote.94      # `additionalProperties: false` on EVERY object node — the top level and95      # each nested one. Without it a provider is free to add keys, and the96      # jq below would be sorting a shape that changes between runs.97      schema:98        type: object99        additionalProperties: false100        required: [file, fit, strengths, concerns]101        properties:102          file: { type: string }103          fit: { type: string, enum: [strong, possible, weak] }104          years_relevant: { type: integer }105          strengths: { type: array, items: { type: string } }106          concerns: { type: array, items: { type: string } }107​108  # ── the model judged · jq decides ──────────────────────────────────109  # Ranking lives HERE, not in a prompt, so the order is reproducible: same110  # scores in, same order out. `.fit != "strong"` sorts false (0) before true111  # (1), which puts the strong candidates first; `// 0` covers the candidates112  # whose CV never stated a number.113  ranked:114    with:115      screened: ${{ tasks.screened.output }}116    ◆invoke:117      tool: "nika:jq"118      args:119        input: "${{ with.screened }}"120        expression: >-121          map(select(. != null))122          | map(select(.fit != "weak"))123          | sort_by(.fit != "strong", -(.years_relevant // 0))124​125  shortlist:126    with:127      ranked: ${{ tasks.ranked.output }}128    ◆invoke:129      tool: "nika:jq"130      args:131        input: "${{ with.ranked }}"132        expression: ".[:${{ const.shortlist_size }}]"133​134  brief:135    with:136      shortlist: ${{ tasks.shortlist.output }}137    when: ${{ size(with.shortlist) > 0 }}   # nobody cleared the bar · spend nothing138    ◇infer:139      max_tokens: 2000140      prompt: |141        Write the screening brief for these shortlisted candidates ·142        ${{ with.shortlist }}143        One paragraph each · lead with the evidence quotes · end with the144        suggested interview focus.145​146  save:147    with:148      brief: ${{ tasks.brief.output }}149    when: ${{ with.brief != null }}    # a skipped task reads null downstream · gate on the VALUE150    ◆invoke:151      tool: "nika:write"152      args:153        path: "./hiring/shortlist-brief.md"154        content: "${{ with.brief }}"155        create_dirs: true156​157outputs:158  ranked:159    value: ${{ tasks.ranked.output }}160    description: "Everyone who was not scored weak · strong first, then by relevant years"161  shortlist:162    value: ${{ tasks.shortlist.output }}163    description: "The top `const.shortlist_size` of the ranking · what the brief covers"164​

1nika: v12workflow:3  id: standup-digest4  description: "Read yesterday's commits, write today's standup note"5​6model: ollama/qwen3.5:4b   # local · zero key · swap for groq/llama-3.3-70b (a fast one-liner job)7​8⛨permits:9  ⛨tools: ["nika:date", "nika:write"]10  ⛨exec: ["git"]              # the ONE program this workflow may run11  ⛨fs: { write: ["out/standup-note.md"] }12​13tasks:14  # No deps between these two → the engine runs them in parallel.15  today:16    ◆invoke:17      tool: "nika:date"18      args: { op: now }19​20  history:21    ▷exec:22      command: ["git", "log", "--since=yesterday", "--oneline", "--no-merges"]23​24  digest:25    with:26      today: ${{ tasks.today.output }}27      history: ${{ tasks.history.output }}28    ◇infer:29      max_tokens: 400          # a standup note is short · the ceiling says so30      prompt: |31        Date · ${{ with.today }}32        Commits since yesterday ·33        ${{ with.history }}34​35        Write my standup note · 3 bullets · done / doing / blocked.36        Plain words · no fluff. If there are no commits, say so in one line.37​38  save:39    with:40      digest: ${{ tasks.digest.output }}41    ◆invoke:42      tool: "nika:write"43      args:44        path: out/standup-note.md45        create_dirs: true46        content: "${{ with.digest }}"47​48outputs:49  note: ${{ tasks.digest.output }}50​

✔audited · 4 tasks · 3 waves · permits declarednika 0.107.0

1nika: v12workflow:3  id: release-notes4  description: "git log → typed release notes → CHANGELOG insert → team ping"5​6# A NON-thinking local model, deliberately: a thinking model can spend the7# whole `max_tokens` budget in its think block and return before the JSON8# (engine#428). Schema showcases pick a model that answers directly.9model: ollama/llama3.2:3b10​11inputs:12  announce:13    type: bool14    default: false15    description: "Actually send the team ping (needs TEAM_WEBHOOK_URL)"16​17const:18  since_tag: "v0.80.0"19  changelog_src: "examples/fixtures/CHANGELOG.md" # point this at YOUR CHANGELOG.md20  changelog_out: "out/CHANGELOG.md"                        # the working copy this run edits21​22⛨secrets:23  ⛨team_webhook:24    ⛨source: env25    ⛨key: TEAM_WEBHOOK_URL26    ⛨egress:                       # sanction the one send · the secret IS the URL27      - ⛨to: "nika:notify"28        ⛨host_from_self: true29⛨permits:30  ⛨tools: ["nika:edit", "nika:notify", "nika:read", "nika:write"]31  ⛨exec: ["git"]                   # the ONE program this workflow may run32  ⛨fs:33    # The workflow never edits your changelog in place — it copies it and34    # edits the copy, so you move the result when the diff looks right.35    #36    # The working copy appears in BOTH lists, and that is not redundancy:37    # `nika:edit` reads the file before it writes it, so a write-only grant38    # is refused with NIKA-SEC-004 · outside permits.fs.read. Every in-place39    # builtin owes both halves.40    ⛨read: ["examples/fixtures/CHANGELOG.md", "out/CHANGELOG.md"]41    ⛨write: ["out/CHANGELOG.md"]42  ⛨net:43    # `host_from_self:` above sanctions the FLOW (the secret may be the URL) —44    # it does not grant the capability. The host stays unknown at check, so it45    # is judged at RUN against this bound: name the announce host here or the46    # send is refused mid-run, after the tokens are already spent.47    ⛨http: ["hooks.slack.com"]48​49tasks:50  history:51    ▷exec:52      command: ["git", "log", "${{ const.since_tag }}..HEAD", "--oneline", "--no-merges"]53    on_error:54      # No such tag here (or not a repo at all) → a sample log takes over and55      # the rest of the chain is exercised exactly as it would be on the day.56      recover: |57        a1b2c3d feat(api): pagination cursors on every list endpoint58        d4e5f6a fix(auth): refresh tokens no longer rotate on read59        7g8h9i0 refactor(store): drop the legacy write path60​61  notes:62    with:63      history: ${{ tasks.history.output }}64    ◇infer:65      max_tokens: 100066      prompt: |67        Write release notes from these commits ·68        ${{ with.history }}69        Tone · plain, direct, no marketing fluff.70      schema:71        type: object72        additionalProperties: false73        required: [headline, body]74        properties:75          headline: { type: string }76          breaking: { type: array, items: { type: string } }77          body: { type: string }78​79  # Copy-then-edit · `nika:edit` is strictly in place and throws when `find:`80  # matches nothing (NIKA-BUILTIN-EDIT-001), so its target must exist and must81  # carry the anchor. Read yours, write the working copy, edit THAT.82  existing:83    ◆invoke:84      tool: "nika:read"85      args: { path: "${{ const.changelog_src }}" }86​87  copy:88    with:89      existing: ${{ tasks.existing.output }}90    ◆invoke:91      tool: "nika:write"92      args:93        path: "${{ const.changelog_out }}"94        content: "${{ with.existing }}"95        create_dirs: true96        overwrite: true97​98  changelog:99    with:100      notes_headline: ${{ tasks.notes.output.headline }}101      notes_body: ${{ tasks.notes.output.body }}102    after:103      copy: success              # state, no data · the anchor is on disk before we edit104    ◆invoke:105      tool: "nika:edit"106      args:107        path: "${{ const.changelog_out }}"108        find: "# Changelog"      # a LITERAL string · not a regex109        count: 1                 # the top anchor only · never every occurrence110        replace: |111          # Changelog112​113          ## ${{ const.since_tag }}..HEAD · ${{ with.notes_headline }}114​115          ${{ with.notes_body }}116​117  announce:118    with:119      notes_headline: ${{ tasks.notes.output.headline }}120    when: ${{ inputs.announce == true }}   # OFF by default · a rehearsal must not ping the team121    after:122      changelog: success123    ◆invoke:124      tool: "nika:notify"125      args:126        channel: webhook127        target: "${{ secrets.team_webhook }}"128        message: "Release notes ready · ${{ with.notes_headline }}"129        severity: info130​131outputs:132  headline: ${{ tasks.notes.output.headline }}133  body: ${{ tasks.notes.output.body }}134​