# SPDX-License-Identifier: Apache-2.0
# yaml-language-server: $schema=https://nika.sh/spec/v1/workflow.schema.json
#
# 15 · Compose self-check — the loop checks the draft, never runs it.
#
# 10 taught parent→child composition (`invoke: { workflow: }`). This
# file is the other compose: `nika:compose` inside an `agent:` whitelist
# (ADR-096). The model drafts a nine-key workflow as YAML, gets the
# full `nika check` verdict back as JSON, repairs until `valid`, then
# calls `nika:done`. Checking never executes the draft (« generation
# is not permission »).
#
# Demonstrates ·
#   - `nika:compose` is loop-only · a standalone `invoke:` is
#     `NIKA-BUILTIN-COMPOSE-001`
#   - `tools: [nika:done, nika:compose]` · `nika:done` FIRST so
#     `--model mock/echo` closes at turn one (same law as 06)
#   - PURE permits · those two tools · no fs / net / exec
#   - the draft is an artifact + its certificate, not a child run
#
# Do not confuse with [`10-compose-pipeline`](10-compose-pipeline.nika.yaml).
# Next door · [`16-inspect-self`](16-inspect-self.nika.yaml) is the run
# reading its own DAG.
#
# Run · nika try 15-compose-self-check
#   (offline · mock/echo · zero keys)

nika: compose-self-check

model: mock/echo

permits:
  tools: ["nika:done", "nika:compose"]

tasks:
  draft:
    agent:
      tools:
        # `nika:done` first is deliberate: a real model ignores order,
        # but the offline rehearsal (`--model mock/echo`) invokes the
        # first granted tool. Done-first closes the loop at turn one.
        # A synthesized `nika:compose` with an empty `workflow_yaml`
        # would still return a check JSON, but the mock has nothing to
        # draft — finish, do not pretend.
        - "nika:done"
        - "nika:compose"
      max_turns: 8
      max_tokens_total: 8000
      system: |
        You draft Nika workflows. The language is the nine-key envelope
        (`nika: <kebab-id>` plus model, inputs, const, secrets, permits,
        run, tasks, outputs). Four verbs: infer, exec, invoke, agent.
        Interpolation is CEL in the dollar-double-brace form (lesson 01).
        Fetch is the tool `nika:fetch` under invoke.

        After each draft, call nika:compose with workflow_yaml set to
        the complete YAML. Repair from the JSON verdict until valid is
        true. Then call nika:done. Checking never runs the draft.
      prompt: |
        Draft the smallest complete nine-key hello: one infer that
        says hello in one short sentence, model mock/echo, permits {}.
        Check it with nika:compose until valid. Then nika:done.
        Do not execute the draft.

outputs:
  draft: ${{ tasks.draft.output }}

the path · 15

Compose self-check — the loop checks the draft, never runs it.

run itnika try 15-compose-self-check

15-compose-self-check.nika.yamlsource

1# SPDX-License-Identifier: Apache-2.02# yaml-language-server: $schema=https://nika.sh/spec/v1/workflow.schema.json3#4# 15 · Compose self-check — the loop checks the draft, never runs it.5#6# 10 taught parent→child composition (`invoke: { workflow: }`). This7# file is the other compose: `nika:compose` inside an `agent:` whitelist8# (ADR-096). The model drafts a nine-key workflow as YAML, gets the9# full `nika check` verdict back as JSON, repairs until `valid`, then10# calls `nika:done`. Checking never executes the draft (« generation11# is not permission »).12#13# Demonstrates ·14#   - `nika:compose` is loop-only · a standalone `invoke:` is15#     `NIKA-BUILTIN-COMPOSE-001`16#   - `tools: [nika:done, nika:compose]` · `nika:done` FIRST so17#     `--model mock/echo` closes at turn one (same law as 06)18#   - PURE permits · those two tools · no fs / net / exec19#   - the draft is an artifact + its certificate, not a child run20#21# Do not confuse with [`10-compose-pipeline`](10-compose-pipeline.nika.yaml).22# Next door · [`16-inspect-self`](16-inspect-self.nika.yaml) is the run23# reading its own DAG.24#25# Run · nika try 15-compose-self-check26#   (offline · mock/echo · zero keys)2728nika: compose-self-check2930model: mock/echo3132⛨permits:33  ⛨tools: ["nika:done", "nika:compose"]3435tasks:36  draft:37    ✦agent:38      tools:39        # `nika:done` first is deliberate: a real model ignores order,40        # but the offline rehearsal (`--model mock/echo`) invokes the41        # first granted tool. Done-first closes the loop at turn one.42        # A synthesized `nika:compose` with an empty `workflow_yaml`43        # would still return a check JSON, but the mock has nothing to44        # draft — finish, do not pretend.45        - "nika:done"46        - "nika:compose"47      max_turns: 848      max_tokens_total: 800049      system: |50        You draft Nika workflows. The language is the nine-key envelope51        (`nika: <kebab-id>` plus model, inputs, const, secrets, permits,52        run, tasks, outputs). Four verbs: infer, exec, invoke, agent.53        Interpolation is CEL in the dollar-double-brace form (lesson 01).54        Fetch is the tool `nika:fetch` under invoke.5556        After each draft, call nika:compose with workflow_yaml set to57        the complete YAML. Repair from the JSON verdict until valid is58        true. Then call nika:done. Checking never runs the draft.59      prompt: |60        Draft the smallest complete nine-key hello: one infer that61        says hello in one short sentence, model mock/echo, permits {}.62        Check it with nika:compose until valid. Then nika:done.63        Do not execute the draft.6465outputs:66  draft: ${{ tasks.draft.output }}67

nika-spec@332f5232d · sha256 fa740e4214bfb6be…