@nanobpm/nano-workforce 0.76.0 → 0.77.0

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+# [0.77.0](https://github.com/nanobpm/nano-workforce/compare/v0.76.0...v0.77.0) (2026-08-17)
+
+
+### Features
+
+* bind the app to all interfaces so a remote worker fleet can reach it ([#224](https://github.com/nanobpm/nano-workforce/issues/224)) ([#255](https://github.com/nanobpm/nano-workforce/issues/255)) ([5968717](https://github.com/nanobpm/nano-workforce/commit/5968717416e13ff739b797822eb0d44ff51cc9cb)), closes [12778/#828](https://github.com/nanobpm/nano-workforce/issues/828) [12801/#252](https://github.com/nanobpm/nano-workforce/issues/252) [#228](https://github.com/nanobpm/nano-workforce/issues/228)
+
 # [0.76.0](https://github.com/nanobpm/nano-workforce/compare/v0.75.0...v0.76.0) (2026-08-17)
 
 

package/app/manifest-network.test.ts

@@ -0,0 +1,22 @@
+// Guard for the app's network posture (nano.app.json). nano-workforce drives a distributed LAN
+// worker fleet: remote `senior:*` agents must reach the capability hooks (`/app/api/hooks/abandon`,
+// `/app/api/hooks/blackboard`) over the app's hostname. Urban's runtime bind default is loopback
+// (secure by default), which silently makes those hooks unreachable off-box — the failure mode
+// behind the wedged review agents (jwulf/c8ctl-plugin-nano#76, issue #224): an agent parked on a
+// wait-answer escalation it could not resolve because the abandon endpoint refused hostname
+// connections. The manifest must therefore declare `network.bind: "all"` so nwf is reachable by
+// its fleet out of the box. The LOCAL agentic-channel token is loopback-guarded independently
+// (#228) so binding wide does not expose it.
+import { test } from "node:test";
+import { assert, assertEquals } from "#test-assert";
+import { readFileSync } from "node:fs";
+
+test("nano.app.json binds to all interfaces so a remote worker fleet can reach the capability hooks", () => {
+  const manifest = JSON.parse(readFileSync(new URL("../nano.app.json", import.meta.url), "utf8"));
+  assert(manifest.network, "nano.app.json must declare a network block (fleet reachability)");
+  assertEquals(
+    manifest.network.bind,
+    "all",
+    "network.bind must be \"all\": loopback silently makes the capability hooks unreachable off-box for the distributed fleet",
+  );
+});

package/nano.app.json

@@ -4,6 +4,7 @@
   "id": "nano-workforce",
   "name": "Nano Workforce",
   "codename": "nano-workforce",
+  "network": { "bind": "all" },
   "data": {
     "default": "app",
     "sources": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanobpm/nano-workforce",
-  "version": "0.76.0",
+  "version": "0.77.0",
   "description": "Nano Workforce — an Agent Graph Orchestration application for Agentic SDLC: durable BPMN processes that coordinate a graph of AI agents across the software delivery lifecycle.",
   "type": "module",
   "main": "main.ts",