@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/contract-versions.js

@@ -0,0 +1,137 @@
+"use strict";
+/**
+ * Frozen contract version literals for the agent-executable-assets surface.
+ *
+ * This file is the SINGLE owner of every version string / provider id /
+ * schema-version discriminator used by the executable-workforce authoring,
+ * release and runtime contracts. Backend and CLI MUST import from here and
+ * MUST NOT redeclare any of these literals (executable-asset design §3.1, §1).
+ *
+ * Adding or changing a value here is a contract-version change, not an ad hoc
+ * edit: it requires paired schema/test/release-evidence updates.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CODE_ACTION_CASES_SCHEMA_VERSION = exports.WORKFORCE_RELEASE_EVIDENCE_SCHEMA_VERSION = exports.EMPLOYEE_PACKAGE_V2_SCHEMA_VERSION = exports.FLOW_PACKAGE_SCHEMA_VERSION = exports.FLOW_NODE_CATALOG_SCHEMA_VERSION = exports.INVOKABLE_AUTHORING_CATALOG_SCHEMA_VERSION = exports.APPROVAL_POLICY_AUTHORING_CATALOG_SCHEMA_VERSION = exports.AI_POLICY_AUTHORING_CATALOG_SCHEMA_VERSION = exports.CONNECTOR_AUTHORING_CATALOG_SCHEMA_VERSION = exports.OBJECT_AUTHORING_CATALOG_SCHEMA_VERSION = exports.AI_CONTEXT_SIGNING_KEY_CACHE_SCHEMA_VERSION = exports.AI_CONTEXT_SIGNING_KEYRING_SCHEMA_VERSION = exports.AI_CONTEXT_SIGNING_KEY_SET_SCHEMA_VERSION = exports.AI_CONTEXT_SIGNATURE_ALG_NONE = exports.AI_CONTEXT_SIGNATURE_ALG_ED25519 = exports.AI_CONTEXT_SIGNATURE_TYP = exports.WORKSPACE_AUTHORING_CONTRACT_SCHEMA_VERSION = exports.AI_AUTHORING_CONTEXT_LOCK_SCHEMA_VERSION = exports.AI_AUTHORING_CONTEXT_SCHEMA_VERSION = exports.CLI_CONTRACT_HUMAN_HELP_POINTER = exports.COMMAND_ORDER_SCHEMA_VERSION = exports.CLI_RESULT_SCHEMA_VERSION = exports.CLI_COMMAND_REGISTRY_SCHEMA_VERSION = exports.CLI_COMMAND_CONTRACT_SCHEMA_VERSION = exports.CODE_ACTION_REVOKED_EVENT = exports.WORKFORCE_RELEASE_HEAD_CHANGED_EVENT = exports.RELEASE_SET_ELIGIBILITY_REJECTED = exports.RELEASE_SET_ELIGIBILITY_ELIGIBLE = exports.RELEASE_SET_ELIGIBILITY_STAGED = exports.APPROVAL_SUBJECT_DECIDED_EVENT = exports.FLOW_ACTION_TYPE_INVOKE_UNIT = exports.RULE_SUGAR_INVOKE_ACTION = exports.FLOWS_PAYLOAD_V1 = exports.FLOWS_PAYLOAD_V2 = exports.CODE_RUNTIME_ISOLATION_EVIDENCE_SCHEMA_VERSION = exports.SANDBOX_PAYLOAD_CIPHER_SCHEMA_VERSION = exports.SANDBOX_EXECUTION_RESULT_SCHEMA_VERSION = exports.SANDBOX_EXECUTION_TICKET_SCHEMA_VERSION = exports.WORKER_THREAD_PROVIDER_ID = exports.VERIFIED_ISOLATE_PROVIDER_ID = exports.RUNTIME_API_VERSION_V2 = exports.ACTION_CONTRACT_VERSION = exports.AGENT_CODE_TOOL_EXPORT_SCHEMA_VERSION = exports.AGENT_CODE_TOOL_CATALOG_SCHEMA_VERSION = exports.CODE_EXTENSION_GOVERNANCE_V1 = exports.CODE_EXTENSION_GOVERNANCE_V2 = exports.CONNECTOR_BINDING_REVISION_SCHEMA_VERSION = exports.BUNDLE_LOCK_SCHEMA_VERSION = exports.RUNTIME_BINDINGS_SCHEMA_VERSION = exports.BUNDLE_SCHEMA_VERSION = void 0;
+exports.APPROVAL_POLICY_PURPOSE_WORKFORCE_RELEASE = exports.APPROVAL_POLICY_PURPOSE_TOOL_CALL = exports.APPROVAL_SUBJECT_LEGACY = exports.APPROVAL_SUBJECT_FLOW_TOOL = exports.APPROVAL_SUBJECT_AGENT_TOOL = exports.APPROVAL_SUBJECT_WORKFORCE_RELEASE = exports.IDEMPOTENCY_DOMAIN_CODE_ACTION_WRITE = exports.IDEMPOTENCY_DOMAIN_RECORD_CURSOR = exports.CANONICAL_ARCHIVE_FORMAT = exports.JSZIP_VERSION = exports.AJV_VERSION = exports.TYPESCRIPT_VERSION = void 0;
+// ---- Composite workforce bundle & bindings (design §5) ----------------------
+/** Source bundle contract. */
+exports.BUNDLE_SCHEMA_VERSION = 'ai-workforce-executable-bundle/v1';
+/** Environment binding contract (portable, no secrets). */
+exports.RUNTIME_BINDINGS_SCHEMA_VERSION = 'workforce-runtime-bindings/v1';
+/** Server-generated lock contract (never hand-written). */
+exports.BUNDLE_LOCK_SCHEMA_VERSION = 'workforce-bundle.lock/v1';
+/** Append-only connector binding revision key envelope. */
+exports.CONNECTOR_BINDING_REVISION_SCHEMA_VERSION = 'nexusclaw.connector-binding-revision/v1';
+// ---- Code-extension governance & tool catalog (design §6) -------------------
+/** Manifest governance discriminant that permits Agent/Flow binding. */
+exports.CODE_EXTENSION_GOVERNANCE_V2 = 'code-extension-governance/v2';
+/** Legacy governance (kept compatible; no Agent binding). */
+exports.CODE_EXTENSION_GOVERNANCE_V1 = 'code-extension-governance/v1';
+/** Sidecar catalog contract referenced by `agentToolCatalogPath`. */
+exports.AGENT_CODE_TOOL_CATALOG_SCHEMA_VERSION = 'agent-code-tool-catalog/v1';
+/** Per-export descriptor contract inside the catalog. */
+exports.AGENT_CODE_TOOL_EXPORT_SCHEMA_VERSION = 'agent-code-tool/v1';
+// ---- Handler ABI & runtime (design §7, §12.4) -------------------------------
+/** The only TypeScript handler ABI accepted for ACTION exports. */
+exports.ACTION_CONTRACT_VERSION = 'nexus-code-action/v1';
+/** Runtime API version that selects the verified-isolate provider surface. */
+exports.RUNTIME_API_VERSION_V2 = 'runtime/v2';
+/**
+ * The only provider id permitted for runtime/v2. Frozen replacement for the
+ * unverified worker-thread provider (design §12.4). Implemented in Phase 5.
+ */
+exports.VERIFIED_ISOLATE_PROVIDER_ID = 'nexusclaw-verified-isolate-v1';
+/**
+ * Legacy worker-thread provider id, kept for compatibility evidence only.
+ * Its `securityLevel` is `unverified`; it may only run repository fixtures.
+ */
+exports.WORKER_THREAD_PROVIDER_ID = 'worker-thread-hardened-isolate';
+/**
+ * Sandbox execution ticket / result envelope versions (design §12.4).
+ */
+exports.SANDBOX_EXECUTION_TICKET_SCHEMA_VERSION = 'nexusclaw.sandbox-execution-ticket/v1';
+exports.SANDBOX_EXECUTION_RESULT_SCHEMA_VERSION = 'nexusclaw.sandbox-execution-result/v1';
+exports.SANDBOX_PAYLOAD_CIPHER_SCHEMA_VERSION = 'nexusclaw.sandbox-payload-cipher/v1';
+exports.CODE_RUNTIME_ISOLATION_EVIDENCE_SCHEMA_VERSION = 'nexusclaw.code-runtime-isolation-evidence/v1';
+// ---- Flow payload/v2 (design §15) -------------------------------------------
+/** Frozen flows payload envelope that adds `INVOKE_UNIT`. */
+exports.FLOWS_PAYLOAD_V2 = 'payload/v2';
+/** Legacy payload envelope (kept compatible; no `INVOKE_UNIT`). */
+exports.FLOWS_PAYLOAD_V1 = 'payload/v1';
+/** Rule-sugar action type that compiles to `INVOKE_UNIT`. */
+exports.RULE_SUGAR_INVOKE_ACTION = 'invoke_action';
+/** Engine-native ACTION setting for exact revision invocation. */
+exports.FLOW_ACTION_TYPE_INVOKE_UNIT = 'INVOKE_UNIT';
+/** Approval subject decision outbox event (design §6/§15.4). */
+exports.APPROVAL_SUBJECT_DECIDED_EVENT = 'approval.subject.decided.v1';
+// ---- Release registry & evidence (design §11.3) ----------------------------
+/** Release-set eligibility values; active truth lives only on the head row. */
+exports.RELEASE_SET_ELIGIBILITY_STAGED = 'staged';
+exports.RELEASE_SET_ELIGIBILITY_ELIGIBLE = 'eligible';
+exports.RELEASE_SET_ELIGIBILITY_REJECTED = 'rejected';
+/** Post-commit active-head transition event (design §11.3). */
+exports.WORKFORCE_RELEASE_HEAD_CHANGED_EVENT = 'ai.workforce.release.head.changed.v1';
+/** Append-only executable-tool emergency revocation event (design §19). */
+exports.CODE_ACTION_REVOKED_EVENT = 'ai.workforce.code-action.revoked.v1';
+// ---- CLI machine contract (design §16) --------------------------------------
+/** Machine-readable command-contract registry version. */
+exports.CLI_COMMAND_CONTRACT_SCHEMA_VERSION = 'nexusclaw.cli-command-contract/v1';
+/** Exported registry document containing every command contract. */
+exports.CLI_COMMAND_REGISTRY_SCHEMA_VERSION = 'nexusclaw.cli-command-registry/v1';
+/** The single machine result envelope emitted on `--json` stdout. */
+exports.CLI_RESULT_SCHEMA_VERSION = 'nexusclaw.cli-result/v1';
+/** Deterministic command-order DAG (implemented modes only). */
+exports.COMMAND_ORDER_SCHEMA_VERSION = 'nexusclaw.command-order/v1';
+/** Human-help and machine-help share one command-contract source (R-14). */
+exports.CLI_CONTRACT_HUMAN_HELP_POINTER = 'nexus ai help --all --json';
+// ---- AI authoring context pack (design §17.1) ------------------------------
+/** Context pack manifest version. */
+exports.AI_AUTHORING_CONTEXT_SCHEMA_VERSION = 'nexusclaw.ai-authoring-context/v2';
+/** Context pack lock (digests + signature) version. */
+exports.AI_AUTHORING_CONTEXT_LOCK_SCHEMA_VERSION = 'nexusclaw.ai-authoring-context-lock/v2';
+exports.WORKSPACE_AUTHORING_CONTRACT_SCHEMA_VERSION = 'nexusclaw.workspace-authoring-contract/v1';
+/** Context-pack JSON Web Signature type for online packs. */
+exports.AI_CONTEXT_SIGNATURE_TYP = 'NEXUSCLAW-AI-CONTEXT-V2';
+/** Online context signature algorithm. */
+exports.AI_CONTEXT_SIGNATURE_ALG_ED25519 = 'EdDSA';
+/** Offline context signature algorithm (non-authoritative). */
+exports.AI_CONTEXT_SIGNATURE_ALG_NONE = 'none';
+exports.AI_CONTEXT_SIGNING_KEY_SET_SCHEMA_VERSION = 'nexusclaw.ai-context-signing-key-set/v1';
+/** Deployment-secret keyring consumed only by the backend signing owner. */
+exports.AI_CONTEXT_SIGNING_KEYRING_SCHEMA_VERSION = 'nexusclaw.ai-context-signing-keyring/v1';
+/** Public-key-only CLI cache; bearer/session data is schema-forbidden. */
+exports.AI_CONTEXT_SIGNING_KEY_CACHE_SCHEMA_VERSION = 'nexusclaw.ai-context-signing-key-cache/v1';
+/** Authoring catalog version literals surfaced inside context packs. */
+exports.OBJECT_AUTHORING_CATALOG_SCHEMA_VERSION = 'nexusclaw.object-authoring-catalog/v1';
+exports.CONNECTOR_AUTHORING_CATALOG_SCHEMA_VERSION = 'nexusclaw.connector-authoring-catalog/v1';
+exports.AI_POLICY_AUTHORING_CATALOG_SCHEMA_VERSION = 'nexusclaw.ai-policy-authoring-catalog/v1';
+exports.APPROVAL_POLICY_AUTHORING_CATALOG_SCHEMA_VERSION = 'nexusclaw.approval-policy-authoring-catalog/v1';
+exports.INVOKABLE_AUTHORING_CATALOG_SCHEMA_VERSION = 'nexusclaw.invokable-authoring-catalog/v1';
+exports.FLOW_NODE_CATALOG_SCHEMA_VERSION = 'nexusclaw.flow-node-catalog/v1';
+exports.FLOW_PACKAGE_SCHEMA_VERSION = 'flow-package/v1';
+exports.EMPLOYEE_PACKAGE_V2_SCHEMA_VERSION = 'employee-package/v2';
+exports.WORKFORCE_RELEASE_EVIDENCE_SCHEMA_VERSION = 'ai-workforce-release-evidence/v1';
+/** Declarative action test cases file contract (design §19). */
+exports.CODE_ACTION_CASES_SCHEMA_VERSION = 'code-action-cases/v1';
+// ---- Toolchain pins (design §7.2, §9, §10) ----------------------------------
+/** Frozen toolchain versions; changing any changes compiler/sdk hashes. */
+exports.TYPESCRIPT_VERSION = '5.9.3';
+exports.AJV_VERSION = '8.18.0';
+exports.JSZIP_VERSION = '3.10.1';
+/** Canonical archive format (design §10.4). */
+exports.CANONICAL_ARCHIVE_FORMAT = 'zip-store-v1';
+/** HMAC key-derivation domains (design §8.2, §13.3). */
+exports.IDEMPOTENCY_DOMAIN_RECORD_CURSOR = 'record_cursor/v1';
+exports.IDEMPOTENCY_DOMAIN_CODE_ACTION_WRITE = 'code_action_write/v1';
+// ---- Approval subject types (design §11.5, R-12.15) -------------------------
+/** Approval subject that can satisfy the release gate. */
+exports.APPROVAL_SUBJECT_WORKFORCE_RELEASE = 'workforce_release';
+/** Approval subject for a single Agent/Flow tool call (L3). */
+exports.APPROVAL_SUBJECT_AGENT_TOOL = 'agent_tool';
+exports.APPROVAL_SUBJECT_FLOW_TOOL = 'flow_tool';
+/** Legacy approval subject; can never satisfy release gate. */
+exports.APPROVAL_SUBJECT_LEGACY = 'legacy';
+/** Approval policy purposes (exactly two per bundle, design §5.3). */
+exports.APPROVAL_POLICY_PURPOSE_TOOL_CALL = 'tool_call';
+exports.APPROVAL_POLICY_PURPOSE_WORKFORCE_RELEASE = 'workforce_release';
+//# sourceMappingURL=contract-versions.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/contract-versions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract-versions.js","sourceRoot":"","sources":["../../src/agent-executable-assets/contract-versions.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;;AAEH,gFAAgF;AAEhF,8BAA8B;AACjB,QAAA,qBAAqB,GAAG,mCAA4C,CAAC;AAClF,2DAA2D;AAC9C,QAAA,+BAA+B,GAC1C,+BAAwC,CAAC;AAC3C,2DAA2D;AAC9C,QAAA,0BAA0B,GAAG,0BAAmC,CAAC;AAC9E,2DAA2D;AAC9C,QAAA,yCAAyC,GACpD,yCAAkD,CAAC;AAErD,gFAAgF;AAEhF,wEAAwE;AAC3D,QAAA,4BAA4B,GAAG,8BAAuC,CAAC;AACpF,6DAA6D;AAChD,QAAA,4BAA4B,GAAG,8BAAuC,CAAC;AACpF,qEAAqE;AACxD,QAAA,sCAAsC,GACjD,4BAAqC,CAAC;AACxC,yDAAyD;AAC5C,QAAA,qCAAqC,GAAG,oBAA6B,CAAC;AAEnF,gFAAgF;AAEhF,mEAAmE;AACtD,QAAA,uBAAuB,GAAG,sBAA+B,CAAC;AACvE,8EAA8E;AACjE,QAAA,sBAAsB,GAAG,YAAqB,CAAC;AAC5D;;;GAGG;AACU,QAAA,4BAA4B,GACvC,+BAAwC,CAAC;AAC3C;;;GAGG;AACU,QAAA,yBAAyB,GACpC,gCAAyC,CAAC;AAC5C;;GAEG;AACU,QAAA,uCAAuC,GAClD,uCAAgD,CAAC;AACtC,QAAA,uCAAuC,GAClD,uCAAgD,CAAC;AACtC,QAAA,qCAAqC,GAChD,qCAA8C,CAAC;AACpC,QAAA,8CAA8C,GACzD,8CAAuD,CAAC;AAE1D,gFAAgF;AAEhF,6DAA6D;AAChD,QAAA,gBAAgB,GAAG,YAAqB,CAAC;AACtD,mEAAmE;AACtD,QAAA,gBAAgB,GAAG,YAAqB,CAAC;AACtD,6DAA6D;AAChD,QAAA,wBAAwB,GAAG,eAAwB,CAAC;AACjE,kEAAkE;AACrD,QAAA,4BAA4B,GAAG,aAAsB,CAAC;AACnE,gEAAgE;AACnD,QAAA,8BAA8B,GACzC,6BAAsC,CAAC;AAEzC,+EAA+E;AAE/E,+EAA+E;AAClE,QAAA,8BAA8B,GAAG,QAAiB,CAAC;AACnD,QAAA,gCAAgC,GAAG,UAAmB,CAAC;AACvD,QAAA,gCAAgC,GAAG,UAAmB,CAAC;AACpE,+DAA+D;AAClD,QAAA,oCAAoC,GAC/C,sCAA+C,CAAC;AAClD,2EAA2E;AAC9D,QAAA,yBAAyB,GACpC,qCAA8C,CAAC;AAEjD,gFAAgF;AAEhF,0DAA0D;AAC7C,QAAA,mCAAmC,GAC9C,mCAA4C,CAAC;AAC/C,oEAAoE;AACvD,QAAA,mCAAmC,GAC9C,mCAA4C,CAAC;AAC/C,qEAAqE;AACxD,QAAA,yBAAyB,GAAG,yBAAkC,CAAC;AAC5E,gEAAgE;AACnD,QAAA,4BAA4B,GAAG,4BAAqC,CAAC;AAClF,4EAA4E;AAC/D,QAAA,+BAA+B,GAC1C,4BAAqC,CAAC;AAExC,+EAA+E;AAE/E,qCAAqC;AACxB,QAAA,mCAAmC,GAC9C,mCAA4C,CAAC;AAC/C,uDAAuD;AAC1C,QAAA,wCAAwC,GACnD,wCAAiD,CAAC;AACvC,QAAA,2CAA2C,GACtD,2CAAoD,CAAC;AACvD,6DAA6D;AAChD,QAAA,wBAAwB,GAAG,yBAAkC,CAAC;AAC3E,0CAA0C;AAC7B,QAAA,gCAAgC,GAAG,OAAgB,CAAC;AACjE,+DAA+D;AAClD,QAAA,6BAA6B,GAAG,MAAe,CAAC;AAChD,QAAA,yCAAyC,GACpD,yCAAkD,CAAC;AACrD,4EAA4E;AAC/D,QAAA,yCAAyC,GACpD,yCAAkD,CAAC;AACrD,0EAA0E;AAC7D,QAAA,2CAA2C,GACtD,2CAAoD,CAAC;AACvD,wEAAwE;AAC3D,QAAA,uCAAuC,GAClD,uCAAgD,CAAC;AACtC,QAAA,0CAA0C,GACrD,0CAAmD,CAAC;AACzC,QAAA,0CAA0C,GACrD,0CAAmD,CAAC;AACzC,QAAA,gDAAgD,GAC3D,gDAAyD,CAAC;AAC/C,QAAA,0CAA0C,GACrD,0CAAmD,CAAC;AACzC,QAAA,gCAAgC,GAC3C,gCAAyC,CAAC;AAC/B,QAAA,2BAA2B,GAAG,iBAA0B,CAAC;AACzD,QAAA,kCAAkC,GAC7C,qBAA8B,CAAC;AACpB,QAAA,yCAAyC,GACpD,kCAA2C,CAAC;AAC9C,gEAAgE;AACnD,QAAA,gCAAgC,GAAG,sBAA+B,CAAC;AAEhF,gFAAgF;AAEhF,2EAA2E;AAC9D,QAAA,kBAAkB,GAAG,OAAgB,CAAC;AACtC,QAAA,WAAW,GAAG,QAAiB,CAAC;AAChC,QAAA,aAAa,GAAG,QAAiB,CAAC;AAE/C,+CAA+C;AAClC,QAAA,wBAAwB,GAAG,cAAuB,CAAC;AAEhE,wDAAwD;AAC3C,QAAA,gCAAgC,GAAG,kBAA2B,CAAC;AAC/D,QAAA,oCAAoC,GAAG,sBAA+B,CAAC;AAEpF,gFAAgF;AAEhF,0DAA0D;AAC7C,QAAA,kCAAkC,GAAG,mBAA4B,CAAC;AAC/E,+DAA+D;AAClD,QAAA,2BAA2B,GAAG,YAAqB,CAAC;AACpD,QAAA,0BAA0B,GAAG,WAAoB,CAAC;AAC/D,+DAA+D;AAClD,QAAA,uBAAuB,GAAG,QAAiB,CAAC;AAEzD,sEAAsE;AACzD,QAAA,iCAAiC,GAAG,WAAoB,CAAC;AACzD,QAAA,yCAAyC,GACpD,mBAA4B,CAAC"}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/error-catalog.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Frozen stable error catalog — primary code to CLI exit mapping.
+ *
+ * Verbatim from executable-asset design §20. Implementations may preserve an
+ * existing lower-layer code in `causeCode`, but CANNOT choose another primary
+ * exit for a given primary code. Adding a primary code requires a contract
+ * version change, not an ad hoc string.
+ *
+ * Messages may localize; codes/ruleIds/jsonPaths remain stable English
+ * identifiers.
+ */
+import type { CliExitCode } from './cli-contract.types';
+/** Every stable primary error code on the executable-workforce surface. */
+export declare const EXECUTABLE_ASSET_ERROR_CODES: readonly ["CLI_MODE_UNMATCHED", "CLI_MODE_AMBIGUOUS", "AI_CONTEXT_SELECTOR_INVALID", "CLI_COMMAND_NOT_IMPLEMENTED", "IDEMPOTENCY_RESULT_TOO_LARGE", "IDEMPOTENCY_RESULT_EXPIRED", "MIGRATION_V2_REFERENCES_EXIST", "AI_CONTEXT_STALE", "AI_CONTEXT_TAMPERED", "AI_CONTEXT_SIGNATURE_INVALID", "AI_CONTEXT_SIGNING_KEY_UNKNOWN", "AI_CONTEXT_TARGET_MISMATCH", "PACKAGE_DIGEST_MISMATCH", "PACKAGE_UPLOAD_DIGEST_MISMATCH", "CODE_RECORD_CONFLICT", "CODE_RECORD_CURSOR_INVALID", "CODE_AI_CURRENCY_MISMATCH", "CODE_RUNTIME_PROVIDER_MISMATCH", "CODE_REVISION_CHECKSUM_MISMATCH", "FLOW_LOCK_MISMATCH", "FLOW_APPROVAL_CONTEXT_MISMATCH", "FLOW_ACTIVE_BINDING_CONFLICT", "BUNDLE_LOCK_STALE", "BUNDLE_PLAN_DIGEST_MISMATCH", "BUNDLE_CANDIDATE_EVIDENCE_INVALID", "RELEASE_ITEM_DIGEST_MISMATCH", "RELEASE_CONTENT_SEALED", "RELEASE_ENVELOPE_MISMATCH", "RELEASE_APPROVAL_CONTEXT_MISMATCH", "RELEASE_CAS_CONFLICT", "IDEMPOTENCY_KEY_CONFLICT", "AUTHENTICATION_REQUIRED", "CAPABILITY_FORBIDDEN", "DEVELOPER_ACCESS_DENIED", "STEP_UP_REQUIRED", "STEP_UP_EXPIRED", "STEP_UP_ACTOR_MISMATCH", "RELEASE_APPROVAL_SUBJECT_MISMATCH", "RELEASE_APPROVAL_SELF_APPROVAL_FORBIDDEN", "CODE_PRINCIPAL_MISSING", "CODE_WORKSPACE_MISMATCH", "CODE_OBJECT_PERMISSION_DENIED", "CODE_FIELD_NOT_VISIBLE", "CODE_ROW_ACCESS_DENIED", "FLOW_PRINCIPAL_MISSING", "AI_CONTEXT_V1_RUNTIME_INCOMPATIBLE", "CODE_CAPABILITY_UNDECLARED", "CODE_CAPABILITY_NOT_ALLOWED", "CODE_RISK_UNDERDECLARED", "CODE_L4_BLOCKED", "CODE_CONNECTOR_OPERATION_UNDECLARED", "CODE_CONNECTOR_CREDENTIAL_INACTIVE", "CONNECTOR_STATIC_BINDING_UNRESOLVED", "CONNECTOR_MTLS_UNSUPPORTED", "CODE_CONNECTOR_TARGET_BLOCKED", "CODE_AI_POLICY_UNDECLARED", "CODE_AI_MODEL_ROUTING_REVISION_MISSING", "CODE_AI_PRICING_UNAVAILABLE", "CODE_AI_BUDGET_EXCEEDED", "CODE_AI_RECURSION_BLOCKED", "CODE_RUNTIME_DISABLED", "CODE_RUNTIME_PROVIDER_UNAVAILABLE", "CODE_RUNTIME_ISOLATION_UNVERIFIED", "CODE_REVISION_REVOKED", "CODE_MEMORY_LIMIT", "CODE_GOVERNOR_LIMIT", "APPROVAL_POLICY_GOVERNED_UPDATE_REQUIRED", "APPROVAL_SUBJECT_RECALL_FORBIDDEN", "APPROVAL_SUBJECT_DELEGATION_FORBIDDEN", "RELEASE_APPROVAL_PENDING", "RELEASE_APPROVAL_REJECTED", "RELEASE_APPROVAL_EXPIRED", "RELEASE_APPROVAL_ALREADY_CONSUMED", "RELEASE_NOT_ELIGIBLE", "RELEASE_GATE_BLOCKED", "ROLLBACK_TARGET_INCOMPLETE", "TOOL_EXPORT_REVOKED", "PACKAGE_UPLOAD_SESSION_EXPIRED", "PACKAGE_STAGED_ARTIFACT_EXPIRED", "CANDIDATE_ISOLATION_CAPACITY_UNAVAILABLE", "CODE_CONNECTOR_RESPONSE_INVALID", "CODE_CONNECTOR_COMPLETION_UNKNOWN", "CODE_AI_METERING_FAILED", "CODE_TIMEOUT", "CODE_EXECUTION_COMPLETION_UNKNOWN", "CODE_HOST_SCOPE_EXPIRED", "IDEMPOTENCY_RESULT_PENDING", "ACTION_TEST_OUTCOME_MISMATCH", "ACTION_TEST_OUTPUT_MISMATCH", "ACTION_TEST_ERROR_MISMATCH", "ACTION_TEST_MUTATION_MISMATCH", "ACTION_TEST_USAGE_MISMATCH", "CODE_TEST_CALL_ORDER_MISMATCH", "FLOW_TEST_ASSERTION_MISMATCH", "FLOW_TEST_FAULT_ASSERTION_MISMATCH", "LOCAL_TEST_RUNNER_PROTOCOL_INVALID", "LOCAL_TEST_RUNNER_PROCESS_FAILED", "CODE_AI_OUTPUT_SCHEMA_INVALID", "PACKAGE_INVENTORY_MISSING", "PACKAGE_PATH_ESCAPE", "PACKAGE_SYMLINK_FORBIDDEN", "PACKAGE_SECRET_FILE_FORBIDDEN", "PACKAGE_ARCHIVE_NON_CANONICAL", "PACKAGE_ARCHIVE_LIMIT_EXCEEDED", "PACKAGE_ARCHIVE_COLLISION", "CODE_ABI_INVALID", "CODE_DEFAULT_EXPORT_REQUIRED", "CODE_IMPORT_FORBIDDEN", "CODE_TYPECHECK_FAILED", "CODE_STATIC_ANALYSIS_FAILED", "CODE_SCHEMA_TS_TYPE_UNSUPPORTED", "CODE_CAPABILITY_CALL_MUST_BE_INLINE", "CODE_CONCURRENT_HOST_CALL_FORBIDDEN", "CODE_SCHEMA_INVALID", "CODE_INPUT_SCHEMA_INVALID", "CODE_OUTPUT_SCHEMA_INVALID", "CODE_SCHEMA_REF_FORBIDDEN", "CODE_TEST_FIXTURE_INVALID", "CODE_TEST_EXPECTATION_INVALID", "CODE_IDEMPOTENCY_REQUIRED", "CODE_IDEMPOTENCY_VALUE_INVALID", "CODE_CONNECTOR_BINDING_UNRESOLVED", "CODE_AI_POLICY_UNRESOLVED", "FLOW_V2_SCHEMA_INVALID", "FLOW_UNIT_UNRESOLVED", "FLOW_INPUT_MAPPING_INVALID", "FLOW_FAULT_PATH_INVALID", "BUNDLE_LOCK_REQUIRED", "BUNDLE_BINDING_UNRESOLVED", "BUNDLE_APPROVAL_POLICY_UNRESOLVED"];
+export type ExecutableAssetErrorCode = (typeof EXECUTABLE_ASSET_ERROR_CODES)[number];
+/** Frozen primary-code → exit mapping (design §20). */
+export declare const ERROR_CODE_TO_EXIT: Readonly<Record<ExecutableAssetErrorCode, CliExitCode>>;
+/**
+ * Exit precedence when multiple diagnostics are present (design §16.2):
+ * `70 > 3 > 2 > 4 > 5 > 6 > 1`. A handler/context may preserve only `causeCode`,
+ * never remap a primary code by command or environment.
+ */
+export declare const EXIT_PRECEDENCE: ReadonlyArray<CliExitCode>;
+/** Resolve the dominant exit code across a set of error codes. */
+export declare function resolveExitCode(codes: ReadonlyArray<ExecutableAssetErrorCode>): CliExitCode;

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/error-catalog.js

@@ -0,0 +1,295 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXIT_PRECEDENCE = exports.ERROR_CODE_TO_EXIT = exports.EXECUTABLE_ASSET_ERROR_CODES = void 0;
+exports.resolveExitCode = resolveExitCode;
+/** Every stable primary error code on the executable-workforce surface. */
+exports.EXECUTABLE_ASSET_ERROR_CODES = [
+    // exit 64 — argv/mode/contract usage before network
+    'CLI_MODE_UNMATCHED',
+    'CLI_MODE_AMBIGUOUS',
+    'AI_CONTEXT_SELECTOR_INVALID',
+    // exit 70 — internal invariant / planned dispatch / oversized idempotency
+    'CLI_COMMAND_NOT_IMPLEMENTED',
+    'IDEMPOTENCY_RESULT_TOO_LARGE',
+    'IDEMPOTENCY_RESULT_EXPIRED',
+    'MIGRATION_V2_REFERENCES_EXIST',
+    // exit 2 — stale/hash/digest/CAS/idempotency fingerprint conflict
+    'AI_CONTEXT_STALE',
+    'AI_CONTEXT_TAMPERED',
+    'AI_CONTEXT_SIGNATURE_INVALID',
+    'AI_CONTEXT_SIGNING_KEY_UNKNOWN',
+    'AI_CONTEXT_TARGET_MISMATCH',
+    'PACKAGE_DIGEST_MISMATCH',
+    'PACKAGE_UPLOAD_DIGEST_MISMATCH',
+    'CODE_RECORD_CONFLICT',
+    'CODE_RECORD_CURSOR_INVALID',
+    'CODE_AI_CURRENCY_MISMATCH',
+    'CODE_RUNTIME_PROVIDER_MISMATCH',
+    'CODE_REVISION_CHECKSUM_MISMATCH',
+    'FLOW_LOCK_MISMATCH',
+    'FLOW_APPROVAL_CONTEXT_MISMATCH',
+    'FLOW_ACTIVE_BINDING_CONFLICT',
+    'BUNDLE_LOCK_STALE',
+    'BUNDLE_PLAN_DIGEST_MISMATCH',
+    'BUNDLE_CANDIDATE_EVIDENCE_INVALID',
+    'RELEASE_ITEM_DIGEST_MISMATCH',
+    'RELEASE_CONTENT_SEALED',
+    'RELEASE_ENVELOPE_MISMATCH',
+    'RELEASE_APPROVAL_CONTEXT_MISMATCH',
+    'RELEASE_CAS_CONFLICT',
+    'IDEMPOTENCY_KEY_CONFLICT',
+    // exit 3 — authentication/authorization/workspace/step-up/principal
+    'AUTHENTICATION_REQUIRED',
+    'CAPABILITY_FORBIDDEN',
+    'DEVELOPER_ACCESS_DENIED',
+    'STEP_UP_REQUIRED',
+    'STEP_UP_EXPIRED',
+    'STEP_UP_ACTOR_MISMATCH',
+    'RELEASE_APPROVAL_SUBJECT_MISMATCH',
+    'RELEASE_APPROVAL_SELF_APPROVAL_FORBIDDEN',
+    'CODE_PRINCIPAL_MISSING',
+    'CODE_WORKSPACE_MISMATCH',
+    'CODE_OBJECT_PERMISSION_DENIED',
+    'CODE_FIELD_NOT_VISIBLE',
+    'CODE_ROW_ACCESS_DENIED',
+    'FLOW_PRINCIPAL_MISSING',
+    // exit 4 — policy/release-gate/approval/runtime/offline blocked
+    'AI_CONTEXT_V1_RUNTIME_INCOMPATIBLE',
+    'CODE_CAPABILITY_UNDECLARED',
+    'CODE_CAPABILITY_NOT_ALLOWED',
+    'CODE_RISK_UNDERDECLARED',
+    'CODE_L4_BLOCKED',
+    'CODE_CONNECTOR_OPERATION_UNDECLARED',
+    'CODE_CONNECTOR_CREDENTIAL_INACTIVE',
+    'CONNECTOR_STATIC_BINDING_UNRESOLVED',
+    'CONNECTOR_MTLS_UNSUPPORTED',
+    'CODE_CONNECTOR_TARGET_BLOCKED',
+    'CODE_AI_POLICY_UNDECLARED',
+    'CODE_AI_MODEL_ROUTING_REVISION_MISSING',
+    'CODE_AI_PRICING_UNAVAILABLE',
+    'CODE_AI_BUDGET_EXCEEDED',
+    'CODE_AI_RECURSION_BLOCKED',
+    'CODE_RUNTIME_DISABLED',
+    'CODE_RUNTIME_PROVIDER_UNAVAILABLE',
+    'CODE_RUNTIME_ISOLATION_UNVERIFIED',
+    'CODE_REVISION_REVOKED',
+    'CODE_MEMORY_LIMIT',
+    'CODE_GOVERNOR_LIMIT',
+    'APPROVAL_POLICY_GOVERNED_UPDATE_REQUIRED',
+    'APPROVAL_SUBJECT_RECALL_FORBIDDEN',
+    'APPROVAL_SUBJECT_DELEGATION_FORBIDDEN',
+    'RELEASE_APPROVAL_PENDING',
+    'RELEASE_APPROVAL_REJECTED',
+    'RELEASE_APPROVAL_EXPIRED',
+    'RELEASE_APPROVAL_ALREADY_CONSUMED',
+    'RELEASE_NOT_ELIGIBLE',
+    'RELEASE_GATE_BLOCKED',
+    'ROLLBACK_TARGET_INCOMPLETE',
+    'TOOL_EXPORT_REVOKED',
+    // exit 5 — retryable transport/timeout/pending
+    'PACKAGE_UPLOAD_SESSION_EXPIRED',
+    'PACKAGE_STAGED_ARTIFACT_EXPIRED',
+    'CANDIDATE_ISOLATION_CAPACITY_UNAVAILABLE',
+    'CODE_CONNECTOR_RESPONSE_INVALID',
+    'CODE_CONNECTOR_COMPLETION_UNKNOWN',
+    'CODE_AI_METERING_FAILED',
+    'CODE_TIMEOUT',
+    'CODE_EXECUTION_COMPLETION_UNKNOWN',
+    'CODE_HOST_SCOPE_EXPIRED',
+    'IDEMPOTENCY_RESULT_PENDING',
+    // exit 6 — deterministic local/candidate test assertion failures
+    'ACTION_TEST_OUTCOME_MISMATCH',
+    'ACTION_TEST_OUTPUT_MISMATCH',
+    'ACTION_TEST_ERROR_MISMATCH',
+    'ACTION_TEST_MUTATION_MISMATCH',
+    'ACTION_TEST_USAGE_MISMATCH',
+    'CODE_TEST_CALL_ORDER_MISMATCH',
+    'FLOW_TEST_ASSERTION_MISMATCH',
+    'FLOW_TEST_FAULT_ASSERTION_MISMATCH',
+    'LOCAL_TEST_RUNNER_PROTOCOL_INVALID',
+    'LOCAL_TEST_RUNNER_PROCESS_FAILED',
+    'CODE_AI_OUTPUT_SCHEMA_INVALID',
+    // exit 1 — validation/schema/compiler/static/preflight failures
+    'PACKAGE_INVENTORY_MISSING',
+    'PACKAGE_PATH_ESCAPE',
+    'PACKAGE_SYMLINK_FORBIDDEN',
+    'PACKAGE_SECRET_FILE_FORBIDDEN',
+    'PACKAGE_ARCHIVE_NON_CANONICAL',
+    'PACKAGE_ARCHIVE_LIMIT_EXCEEDED',
+    'PACKAGE_ARCHIVE_COLLISION',
+    'CODE_ABI_INVALID',
+    'CODE_DEFAULT_EXPORT_REQUIRED',
+    'CODE_IMPORT_FORBIDDEN',
+    'CODE_TYPECHECK_FAILED',
+    'CODE_STATIC_ANALYSIS_FAILED',
+    'CODE_SCHEMA_TS_TYPE_UNSUPPORTED',
+    'CODE_CAPABILITY_CALL_MUST_BE_INLINE',
+    'CODE_CONCURRENT_HOST_CALL_FORBIDDEN',
+    'CODE_SCHEMA_INVALID',
+    'CODE_INPUT_SCHEMA_INVALID',
+    'CODE_OUTPUT_SCHEMA_INVALID',
+    'CODE_SCHEMA_REF_FORBIDDEN',
+    'CODE_TEST_FIXTURE_INVALID',
+    'CODE_TEST_EXPECTATION_INVALID',
+    'CODE_IDEMPOTENCY_REQUIRED',
+    'CODE_IDEMPOTENCY_VALUE_INVALID',
+    'CODE_CONNECTOR_BINDING_UNRESOLVED',
+    'CODE_AI_POLICY_UNRESOLVED',
+    'FLOW_V2_SCHEMA_INVALID',
+    'FLOW_UNIT_UNRESOLVED',
+    'FLOW_INPUT_MAPPING_INVALID',
+    'FLOW_FAULT_PATH_INVALID',
+    'BUNDLE_LOCK_REQUIRED',
+    'BUNDLE_BINDING_UNRESOLVED',
+    'BUNDLE_APPROVAL_POLICY_UNRESOLVED',
+];
+/** Frozen primary-code → exit mapping (design §20). */
+exports.ERROR_CODE_TO_EXIT = {
+    CLI_MODE_UNMATCHED: 64,
+    CLI_MODE_AMBIGUOUS: 64,
+    AI_CONTEXT_SELECTOR_INVALID: 64,
+    CLI_COMMAND_NOT_IMPLEMENTED: 70,
+    IDEMPOTENCY_RESULT_TOO_LARGE: 70,
+    IDEMPOTENCY_RESULT_EXPIRED: 70,
+    MIGRATION_V2_REFERENCES_EXIST: 70,
+    AI_CONTEXT_STALE: 2,
+    AI_CONTEXT_TAMPERED: 2,
+    AI_CONTEXT_SIGNATURE_INVALID: 2,
+    AI_CONTEXT_SIGNING_KEY_UNKNOWN: 2,
+    AI_CONTEXT_TARGET_MISMATCH: 2,
+    PACKAGE_DIGEST_MISMATCH: 2,
+    PACKAGE_UPLOAD_DIGEST_MISMATCH: 2,
+    CODE_RECORD_CONFLICT: 2,
+    CODE_RECORD_CURSOR_INVALID: 2,
+    CODE_AI_CURRENCY_MISMATCH: 2,
+    CODE_RUNTIME_PROVIDER_MISMATCH: 2,
+    CODE_REVISION_CHECKSUM_MISMATCH: 2,
+    FLOW_LOCK_MISMATCH: 2,
+    FLOW_APPROVAL_CONTEXT_MISMATCH: 2,
+    FLOW_ACTIVE_BINDING_CONFLICT: 2,
+    BUNDLE_LOCK_STALE: 2,
+    BUNDLE_PLAN_DIGEST_MISMATCH: 2,
+    BUNDLE_CANDIDATE_EVIDENCE_INVALID: 2,
+    RELEASE_ITEM_DIGEST_MISMATCH: 2,
+    RELEASE_CONTENT_SEALED: 2,
+    RELEASE_ENVELOPE_MISMATCH: 2,
+    RELEASE_APPROVAL_CONTEXT_MISMATCH: 2,
+    RELEASE_CAS_CONFLICT: 2,
+    IDEMPOTENCY_KEY_CONFLICT: 2,
+    AUTHENTICATION_REQUIRED: 3,
+    CAPABILITY_FORBIDDEN: 3,
+    DEVELOPER_ACCESS_DENIED: 3,
+    STEP_UP_REQUIRED: 3,
+    STEP_UP_EXPIRED: 3,
+    STEP_UP_ACTOR_MISMATCH: 3,
+    RELEASE_APPROVAL_SUBJECT_MISMATCH: 3,
+    RELEASE_APPROVAL_SELF_APPROVAL_FORBIDDEN: 3,
+    CODE_PRINCIPAL_MISSING: 3,
+    CODE_WORKSPACE_MISMATCH: 3,
+    CODE_OBJECT_PERMISSION_DENIED: 3,
+    CODE_FIELD_NOT_VISIBLE: 3,
+    CODE_ROW_ACCESS_DENIED: 3,
+    FLOW_PRINCIPAL_MISSING: 3,
+    AI_CONTEXT_V1_RUNTIME_INCOMPATIBLE: 4,
+    CODE_CAPABILITY_UNDECLARED: 4,
+    CODE_CAPABILITY_NOT_ALLOWED: 4,
+    CODE_RISK_UNDERDECLARED: 4,
+    CODE_L4_BLOCKED: 4,
+    CODE_CONNECTOR_OPERATION_UNDECLARED: 4,
+    CODE_CONNECTOR_CREDENTIAL_INACTIVE: 4,
+    CONNECTOR_STATIC_BINDING_UNRESOLVED: 4,
+    CONNECTOR_MTLS_UNSUPPORTED: 4,
+    CODE_CONNECTOR_TARGET_BLOCKED: 4,
+    CODE_AI_POLICY_UNDECLARED: 4,
+    CODE_AI_MODEL_ROUTING_REVISION_MISSING: 4,
+    CODE_AI_PRICING_UNAVAILABLE: 4,
+    CODE_AI_BUDGET_EXCEEDED: 4,
+    CODE_AI_RECURSION_BLOCKED: 4,
+    CODE_RUNTIME_DISABLED: 4,
+    CODE_RUNTIME_PROVIDER_UNAVAILABLE: 4,
+    CODE_RUNTIME_ISOLATION_UNVERIFIED: 4,
+    CODE_REVISION_REVOKED: 4,
+    CODE_MEMORY_LIMIT: 4,
+    CODE_GOVERNOR_LIMIT: 4,
+    APPROVAL_POLICY_GOVERNED_UPDATE_REQUIRED: 4,
+    APPROVAL_SUBJECT_RECALL_FORBIDDEN: 4,
+    APPROVAL_SUBJECT_DELEGATION_FORBIDDEN: 4,
+    RELEASE_APPROVAL_PENDING: 4,
+    RELEASE_APPROVAL_REJECTED: 4,
+    RELEASE_APPROVAL_EXPIRED: 4,
+    RELEASE_APPROVAL_ALREADY_CONSUMED: 4,
+    RELEASE_NOT_ELIGIBLE: 4,
+    RELEASE_GATE_BLOCKED: 4,
+    ROLLBACK_TARGET_INCOMPLETE: 4,
+    TOOL_EXPORT_REVOKED: 4,
+    PACKAGE_UPLOAD_SESSION_EXPIRED: 5,
+    PACKAGE_STAGED_ARTIFACT_EXPIRED: 5,
+    CANDIDATE_ISOLATION_CAPACITY_UNAVAILABLE: 5,
+    CODE_CONNECTOR_RESPONSE_INVALID: 5,
+    CODE_CONNECTOR_COMPLETION_UNKNOWN: 5,
+    CODE_AI_METERING_FAILED: 5,
+    CODE_TIMEOUT: 5,
+    CODE_EXECUTION_COMPLETION_UNKNOWN: 5,
+    CODE_HOST_SCOPE_EXPIRED: 5,
+    IDEMPOTENCY_RESULT_PENDING: 5,
+    ACTION_TEST_OUTCOME_MISMATCH: 6,
+    ACTION_TEST_OUTPUT_MISMATCH: 6,
+    ACTION_TEST_ERROR_MISMATCH: 6,
+    ACTION_TEST_MUTATION_MISMATCH: 6,
+    ACTION_TEST_USAGE_MISMATCH: 6,
+    CODE_TEST_CALL_ORDER_MISMATCH: 6,
+    FLOW_TEST_ASSERTION_MISMATCH: 6,
+    FLOW_TEST_FAULT_ASSERTION_MISMATCH: 6,
+    LOCAL_TEST_RUNNER_PROTOCOL_INVALID: 6,
+    LOCAL_TEST_RUNNER_PROCESS_FAILED: 6,
+    CODE_AI_OUTPUT_SCHEMA_INVALID: 6,
+    PACKAGE_INVENTORY_MISSING: 1,
+    PACKAGE_PATH_ESCAPE: 1,
+    PACKAGE_SYMLINK_FORBIDDEN: 1,
+    PACKAGE_SECRET_FILE_FORBIDDEN: 1,
+    PACKAGE_ARCHIVE_NON_CANONICAL: 1,
+    PACKAGE_ARCHIVE_LIMIT_EXCEEDED: 1,
+    PACKAGE_ARCHIVE_COLLISION: 1,
+    CODE_ABI_INVALID: 1,
+    CODE_DEFAULT_EXPORT_REQUIRED: 1,
+    CODE_IMPORT_FORBIDDEN: 1,
+    CODE_TYPECHECK_FAILED: 1,
+    CODE_STATIC_ANALYSIS_FAILED: 1,
+    CODE_SCHEMA_TS_TYPE_UNSUPPORTED: 1,
+    CODE_CAPABILITY_CALL_MUST_BE_INLINE: 1,
+    CODE_CONCURRENT_HOST_CALL_FORBIDDEN: 1,
+    CODE_SCHEMA_INVALID: 1,
+    CODE_INPUT_SCHEMA_INVALID: 1,
+    CODE_OUTPUT_SCHEMA_INVALID: 1,
+    CODE_SCHEMA_REF_FORBIDDEN: 1,
+    CODE_TEST_FIXTURE_INVALID: 1,
+    CODE_TEST_EXPECTATION_INVALID: 1,
+    CODE_IDEMPOTENCY_REQUIRED: 1,
+    CODE_IDEMPOTENCY_VALUE_INVALID: 1,
+    CODE_CONNECTOR_BINDING_UNRESOLVED: 1,
+    CODE_AI_POLICY_UNRESOLVED: 1,
+    FLOW_V2_SCHEMA_INVALID: 1,
+    FLOW_UNIT_UNRESOLVED: 1,
+    FLOW_INPUT_MAPPING_INVALID: 1,
+    FLOW_FAULT_PATH_INVALID: 1,
+    BUNDLE_LOCK_REQUIRED: 1,
+    BUNDLE_BINDING_UNRESOLVED: 1,
+    BUNDLE_APPROVAL_POLICY_UNRESOLVED: 1,
+};
+/**
+ * Exit precedence when multiple diagnostics are present (design §16.2):
+ * `70 > 3 > 2 > 4 > 5 > 6 > 1`. A handler/context may preserve only `causeCode`,
+ * never remap a primary code by command or environment.
+ */
+exports.EXIT_PRECEDENCE = [70, 3, 2, 4, 5, 6, 1];
+/** Resolve the dominant exit code across a set of error codes. */
+function resolveExitCode(codes) {
+    const exits = new Set(codes.map((c) => exports.ERROR_CODE_TO_EXIT[c]));
+    for (const candidate of exports.EXIT_PRECEDENCE) {
+        if (exits.has(candidate)) {
+            return candidate;
+        }
+    }
+    return 1;
+}
+//# sourceMappingURL=error-catalog.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/error-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error-catalog.js","sourceRoot":"","sources":["../../src/agent-executable-assets/error-catalog.ts"],"names":[],"mappings":";;;AA2SA,0CAUC;AAxSD,2EAA2E;AAC9D,QAAA,4BAA4B,GAAG;IAC1C,oDAAoD;IACpD,oBAAoB;IACpB,oBAAoB;IACpB,6BAA6B;IAC7B,0EAA0E;IAC1E,6BAA6B;IAC7B,8BAA8B;IAC9B,4BAA4B;IAC5B,+BAA+B;IAC/B,kEAAkE;IAClE,kBAAkB;IAClB,qBAAqB;IACrB,8BAA8B;IAC9B,gCAAgC;IAChC,4BAA4B;IAC5B,yBAAyB;IACzB,gCAAgC;IAChC,sBAAsB;IACtB,4BAA4B;IAC5B,2BAA2B;IAC3B,gCAAgC;IAChC,iCAAiC;IACjC,oBAAoB;IACpB,gCAAgC;IAChC,8BAA8B;IAC9B,mBAAmB;IACnB,6BAA6B;IAC7B,mCAAmC;IACnC,8BAA8B;IAC9B,wBAAwB;IACxB,2BAA2B;IAC3B,mCAAmC;IACnC,sBAAsB;IACtB,0BAA0B;IAC1B,oEAAoE;IACpE,yBAAyB;IACzB,sBAAsB;IACtB,yBAAyB;IACzB,kBAAkB;IAClB,iBAAiB;IACjB,wBAAwB;IACxB,mCAAmC;IACnC,0CAA0C;IAC1C,wBAAwB;IACxB,yBAAyB;IACzB,+BAA+B;IAC/B,wBAAwB;IACxB,wBAAwB;IACxB,wBAAwB;IACxB,gEAAgE;IAChE,oCAAoC;IACpC,4BAA4B;IAC5B,6BAA6B;IAC7B,yBAAyB;IACzB,iBAAiB;IACjB,qCAAqC;IACrC,oCAAoC;IACpC,qCAAqC;IACrC,4BAA4B;IAC5B,+BAA+B;IAC/B,2BAA2B;IAC3B,wCAAwC;IACxC,6BAA6B;IAC7B,yBAAyB;IACzB,2BAA2B;IAC3B,uBAAuB;IACvB,mCAAmC;IACnC,mCAAmC;IACnC,uBAAuB;IACvB,mBAAmB;IACnB,qBAAqB;IACrB,0CAA0C;IAC1C,mCAAmC;IACnC,uCAAuC;IACvC,0BAA0B;IAC1B,2BAA2B;IAC3B,0BAA0B;IAC1B,mCAAmC;IACnC,sBAAsB;IACtB,sBAAsB;IACtB,4BAA4B;IAC5B,qBAAqB;IACrB,+CAA+C;IAC/C,gCAAgC;IAChC,iCAAiC;IACjC,0CAA0C;IAC1C,iCAAiC;IACjC,mCAAmC;IACnC,yBAAyB;IACzB,cAAc;IACd,mCAAmC;IACnC,yBAAyB;IACzB,4BAA4B;IAC5B,iEAAiE;IACjE,8BAA8B;IAC9B,6BAA6B;IAC7B,4BAA4B;IAC5B,+BAA+B;IAC/B,4BAA4B;IAC5B,+BAA+B;IAC/B,8BAA8B;IAC9B,oCAAoC;IACpC,oCAAoC;IACpC,kCAAkC;IAClC,+BAA+B;IAC/B,gEAAgE;IAChE,2BAA2B;IAC3B,qBAAqB;IACrB,2BAA2B;IAC3B,+BAA+B;IAC/B,+BAA+B;IAC/B,gCAAgC;IAChC,2BAA2B;IAC3B,kBAAkB;IAClB,8BAA8B;IAC9B,uBAAuB;IACvB,uBAAuB;IACvB,6BAA6B;IAC7B,iCAAiC;IACjC,qCAAqC;IACrC,qCAAqC;IACrC,qBAAqB;IACrB,2BAA2B;IAC3B,4BAA4B;IAC5B,2BAA2B;IAC3B,2BAA2B;IAC3B,+BAA+B;IAC/B,2BAA2B;IAC3B,gCAAgC;IAChC,mCAAmC;IACnC,2BAA2B;IAC3B,wBAAwB;IACxB,sBAAsB;IACtB,4BAA4B;IAC5B,yBAAyB;IACzB,sBAAsB;IACtB,2BAA2B;IAC3B,mCAAmC;CAC3B,CAAC;AAIX,uDAAuD;AAC1C,QAAA,kBAAkB,GAA4D;IACzF,kBAAkB,EAAE,EAAE;IACtB,kBAAkB,EAAE,EAAE;IACtB,2BAA2B,EAAE,EAAE;IAC/B,2BAA2B,EAAE,EAAE;IAC/B,4BAA4B,EAAE,EAAE;IAChC,0BAA0B,EAAE,EAAE;IAC9B,6BAA6B,EAAE,EAAE;IACjC,gBAAgB,EAAE,CAAC;IACnB,mBAAmB,EAAE,CAAC;IACtB,4BAA4B,EAAE,CAAC;IAC/B,8BAA8B,EAAE,CAAC;IACjC,0BAA0B,EAAE,CAAC;IAC7B,uBAAuB,EAAE,CAAC;IAC1B,8BAA8B,EAAE,CAAC;IACjC,oBAAoB,EAAE,CAAC;IACvB,0BAA0B,EAAE,CAAC;IAC7B,yBAAyB,EAAE,CAAC;IAC5B,8BAA8B,EAAE,CAAC;IACjC,+BAA+B,EAAE,CAAC;IAClC,kBAAkB,EAAE,CAAC;IACrB,8BAA8B,EAAE,CAAC;IACjC,4BAA4B,EAAE,CAAC;IAC/B,iBAAiB,EAAE,CAAC;IACpB,2BAA2B,EAAE,CAAC;IAC9B,iCAAiC,EAAE,CAAC;IACpC,4BAA4B,EAAE,CAAC;IAC/B,sBAAsB,EAAE,CAAC;IACzB,yBAAyB,EAAE,CAAC;IAC5B,iCAAiC,EAAE,CAAC;IACpC,oBAAoB,EAAE,CAAC;IACvB,wBAAwB,EAAE,CAAC;IAC3B,uBAAuB,EAAE,CAAC;IAC1B,oBAAoB,EAAE,CAAC;IACvB,uBAAuB,EAAE,CAAC;IAC1B,gBAAgB,EAAE,CAAC;IACnB,eAAe,EAAE,CAAC;IAClB,sBAAsB,EAAE,CAAC;IACzB,iCAAiC,EAAE,CAAC;IACpC,wCAAwC,EAAE,CAAC;IAC3C,sBAAsB,EAAE,CAAC;IACzB,uBAAuB,EAAE,CAAC;IAC1B,6BAA6B,EAAE,CAAC;IAChC,sBAAsB,EAAE,CAAC;IACzB,sBAAsB,EAAE,CAAC;IACzB,sBAAsB,EAAE,CAAC;IACzB,kCAAkC,EAAE,CAAC;IACrC,0BAA0B,EAAE,CAAC;IAC7B,2BAA2B,EAAE,CAAC;IAC9B,uBAAuB,EAAE,CAAC;IAC1B,eAAe,EAAE,CAAC;IAClB,mCAAmC,EAAE,CAAC;IACtC,kCAAkC,EAAE,CAAC;IACrC,mCAAmC,EAAE,CAAC;IACtC,0BAA0B,EAAE,CAAC;IAC7B,6BAA6B,EAAE,CAAC;IAChC,yBAAyB,EAAE,CAAC;IAC5B,sCAAsC,EAAE,CAAC;IACzC,2BAA2B,EAAE,CAAC;IAC9B,uBAAuB,EAAE,CAAC;IAC1B,yBAAyB,EAAE,CAAC;IAC5B,qBAAqB,EAAE,CAAC;IACxB,iCAAiC,EAAE,CAAC;IACpC,iCAAiC,EAAE,CAAC;IACpC,qBAAqB,EAAE,CAAC;IACxB,iBAAiB,EAAE,CAAC;IACpB,mBAAmB,EAAE,CAAC;IACtB,wCAAwC,EAAE,CAAC;IAC3C,iCAAiC,EAAE,CAAC;IACpC,qCAAqC,EAAE,CAAC;IACxC,wBAAwB,EAAE,CAAC;IAC3B,yBAAyB,EAAE,CAAC;IAC5B,wBAAwB,EAAE,CAAC;IAC3B,iCAAiC,EAAE,CAAC;IACpC,oBAAoB,EAAE,CAAC;IACvB,oBAAoB,EAAE,CAAC;IACvB,0BAA0B,EAAE,CAAC;IAC7B,mBAAmB,EAAE,CAAC;IACtB,8BAA8B,EAAE,CAAC;IACjC,+BAA+B,EAAE,CAAC;IAClC,wCAAwC,EAAE,CAAC;IAC3C,+BAA+B,EAAE,CAAC;IAClC,iCAAiC,EAAE,CAAC;IACpC,uBAAuB,EAAE,CAAC;IAC1B,YAAY,EAAE,CAAC;IACf,iCAAiC,EAAE,CAAC;IACpC,uBAAuB,EAAE,CAAC;IAC1B,0BAA0B,EAAE,CAAC;IAC7B,4BAA4B,EAAE,CAAC;IAC/B,2BAA2B,EAAE,CAAC;IAC9B,0BAA0B,EAAE,CAAC;IAC7B,6BAA6B,EAAE,CAAC;IAChC,0BAA0B,EAAE,CAAC;IAC7B,6BAA6B,EAAE,CAAC;IAChC,4BAA4B,EAAE,CAAC;IAC/B,kCAAkC,EAAE,CAAC;IACrC,kCAAkC,EAAE,CAAC;IACrC,gCAAgC,EAAE,CAAC;IACnC,6BAA6B,EAAE,CAAC;IAChC,yBAAyB,EAAE,CAAC;IAC5B,mBAAmB,EAAE,CAAC;IACtB,yBAAyB,EAAE,CAAC;IAC5B,6BAA6B,EAAE,CAAC;IAChC,6BAA6B,EAAE,CAAC;IAChC,8BAA8B,EAAE,CAAC;IACjC,yBAAyB,EAAE,CAAC;IAC5B,gBAAgB,EAAE,CAAC;IACnB,4BAA4B,EAAE,CAAC;IAC/B,qBAAqB,EAAE,CAAC;IACxB,qBAAqB,EAAE,CAAC;IACxB,2BAA2B,EAAE,CAAC;IAC9B,+BAA+B,EAAE,CAAC;IAClC,mCAAmC,EAAE,CAAC;IACtC,mCAAmC,EAAE,CAAC;IACtC,mBAAmB,EAAE,CAAC;IACtB,yBAAyB,EAAE,CAAC;IAC5B,0BAA0B,EAAE,CAAC;IAC7B,yBAAyB,EAAE,CAAC;IAC5B,yBAAyB,EAAE,CAAC;IAC5B,6BAA6B,EAAE,CAAC;IAChC,yBAAyB,EAAE,CAAC;IAC5B,8BAA8B,EAAE,CAAC;IACjC,iCAAiC,EAAE,CAAC;IACpC,yBAAyB,EAAE,CAAC;IAC5B,sBAAsB,EAAE,CAAC;IACzB,oBAAoB,EAAE,CAAC;IACvB,0BAA0B,EAAE,CAAC;IAC7B,uBAAuB,EAAE,CAAC;IAC1B,oBAAoB,EAAE,CAAC;IACvB,yBAAyB,EAAE,CAAC;IAC5B,iCAAiC,EAAE,CAAC;CACrC,CAAC;AAEF;;;;GAIG;AACU,QAAA,eAAe,GAA+B,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;AAElF,kEAAkE;AAClE,SAAgB,eAAe,CAC7B,KAA8C;IAE9C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,0BAAkB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,KAAK,MAAM,SAAS,IAAI,uBAAe,EAAE,CAAC;QACxC,IAAI,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/executable-package-validation.types.d.ts

@@ -0,0 +1,134 @@
+import type { CliDiagnosticV1 } from './cli-contract.types';
+import type { Sha256Digest } from './workforce-lock.types';
+export declare const EXECUTABLE_PACKAGE_VALIDATION_INPUT_VERSION: "nexusclaw.validate-executable-package-artifact-input/v1";
+export declare const EXECUTABLE_PACKAGE_VALIDATION_RESULT_VERSION: "nexusclaw.validate-executable-package-artifact-result/v1";
+export interface ValidateExecutablePackageArtifactInputV1 {
+    readonly schemaVersion: typeof EXECUTABLE_PACKAGE_VALIDATION_INPUT_VERSION;
+    readonly targetWorkspaceId: string;
+    readonly stagedArtifactId: string;
+    readonly expectedArchiveDigest: Sha256Digest;
+    readonly expectedPackageDigest: Sha256Digest;
+    readonly contextManifestContentDigest: Sha256Digest;
+}
+export interface ValidateExecutablePackageArtifactResultV1 {
+    readonly schemaVersion: typeof EXECUTABLE_PACKAGE_VALIDATION_RESULT_VERSION;
+    readonly valid: boolean;
+    readonly stagedArtifactId: string;
+    readonly archiveDigest: Sha256Digest;
+    readonly packageDigest: Sha256Digest;
+    readonly contextManifestContentDigest: Sha256Digest;
+    readonly diagnostics: ReadonlyArray<CliDiagnosticV1>;
+}
+/** Pure JSON Schema contract; no GraphQLJSON, filesystem path or byte field. */
+export declare const validateExecutablePackageArtifactInputSchema: {
+    readonly $id: "nexusclaw.validate-executable-package-artifact-input/v1";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "targetWorkspaceId", "stagedArtifactId", "expectedArchiveDigest", "expectedPackageDigest", "contextManifestContentDigest"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "nexusclaw.validate-executable-package-artifact-input/v1";
+        };
+        readonly targetWorkspaceId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly stagedArtifactId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly expectedArchiveDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly expectedPackageDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly contextManifestContentDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+    };
+};
+export declare const validateExecutablePackageArtifactResultSchema: {
+    readonly $id: "nexusclaw.validate-executable-package-artifact-result/v1";
+    readonly type: "object";
+    readonly additionalProperties: false;
+    readonly required: readonly ["schemaVersion", "valid", "stagedArtifactId", "archiveDigest", "packageDigest", "contextManifestContentDigest", "diagnostics"];
+    readonly properties: {
+        readonly schemaVersion: {
+            readonly const: "nexusclaw.validate-executable-package-artifact-result/v1";
+        };
+        readonly valid: {
+            readonly type: "boolean";
+        };
+        readonly stagedArtifactId: {
+            readonly type: "string";
+            readonly minLength: 1;
+        };
+        readonly archiveDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly packageDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly contextManifestContentDigest: {
+            readonly type: "string";
+            readonly pattern: "^sha256:[a-f0-9]{64}$";
+        };
+        readonly diagnostics: {
+            readonly type: "array";
+            readonly items: {
+                readonly type: "object";
+                readonly additionalProperties: false;
+                readonly required: readonly ["code", "severity", "phase", "message", "retryable"];
+                readonly properties: {
+                    readonly code: {
+                        readonly type: "string";
+                    };
+                    readonly severity: {
+                        readonly enum: readonly ["error", "warning", "info"];
+                    };
+                    readonly phase: {
+                        readonly type: "string";
+                    };
+                    readonly artifactId: {
+                        readonly type: "string";
+                    };
+                    readonly file: {
+                        readonly type: "string";
+                    };
+                    readonly line: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly column: {
+                        readonly type: "integer";
+                        readonly minimum: 1;
+                    };
+                    readonly jsonPath: {
+                        readonly type: "string";
+                    };
+                    readonly ruleId: {
+                        readonly type: "string";
+                    };
+                    readonly message: {
+                        readonly type: "string";
+                    };
+                    readonly fixHint: {
+                        readonly type: "string";
+                    };
+                    readonly retryable: {
+                        readonly type: "boolean";
+                    };
+                    readonly docsRef: {
+                        readonly type: "string";
+                    };
+                };
+            };
+        };
+    };
+};