@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/json-value.js

@@ -0,0 +1,108 @@
+"use strict";
+/**
+ * JSON-only recursive types and runtime guards.
+ *
+ * The executable-workforce contracts exchange exclusively JSON-serializable
+ * values (design §8.1). These types and guards are the single owner of "what a
+ * JSON value is" for the whole surface: runtime input/output, ToolCall redacted
+ * previews, AI generate payloads, connector call bodies and context-pack files.
+ *
+ * Everything rejected here MUST stay rejected: `undefined`, `bigint`,
+ * `function`, `symbol`, `NaN`/`Infinity`, prototype-polluted objects, and
+ * cycles. `false`, `0` and `""` are LEGAL present values and must never be
+ * confused with absence (design §9 / R-04 rule 5).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isJsonValue = isJsonValue;
+exports.cloneJsonValue = cloneJsonValue;
+exports.stableStringify = stableStringify;
+const PROTOTYPE_KEYS = new Set([
+    '__proto__',
+    'prototype',
+    'constructor',
+]);
+/**
+ * Type guard: is `value` a finite, cycle-free JSON value with no forbidden
+ * primitives and no prototype-pollution keys?
+ *
+ * Detects cycles via a `WeakSet` of seen containers. Rejects:
+ * - `undefined`, `bigint`, `symbol`, `function`
+ * - `NaN`, `Infinity`, `-Infinity`
+ * - objects whose own keys include `__proto__` / `prototype` / `constructor`
+ * - arrays/objects that contain themselves (direct or transitive)
+ */
+function isJsonValue(value, seen) {
+    switch (typeof value) {
+        case 'string':
+        case 'boolean':
+            return true;
+        case 'number':
+            return Number.isFinite(value);
+        case 'object':
+            break;
+        default:
+            // undefined, bigint, symbol, function
+            return value === null;
+    }
+    if (value === null) {
+        return true;
+    }
+    const obj = value;
+    // Cycle defence.
+    const seenSet = seen ?? new WeakSet();
+    if (seenSet.has(obj)) {
+        return false;
+    }
+    seenSet.add(obj);
+    try {
+        if (Array.isArray(value)) {
+            for (const item of value) {
+                if (!isJsonValue(item, seenSet)) {
+                    return false;
+                }
+            }
+            return true;
+        }
+        for (const key of Object.keys(obj)) {
+            if (PROTOTYPE_KEYS.has(key)) {
+                return false;
+            }
+            if (!isJsonValue(obj[key], seenSet)) {
+                return false;
+            }
+        }
+        return true;
+    }
+    finally {
+        // Do not retain across unrelated calls; callers pass a fresh set per root.
+    }
+}
+/**
+ * Deep-clone a value that has already passed {@link isJsonValue}. Structured
+ * clone semantics for the JSON subset only; throws if non-JSON slips through.
+ */
+function cloneJsonValue(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+/**
+ * Canonical string form for hashing/transport. Uses JSON.stringify with stable
+ * key ordering via a replacer; for true RFC 8785 canonicalization use
+ * {@link canonicalHash} in `canonical-hash.ts` (which owns the JCS algorithm).
+ */
+function stableStringify(value) {
+    return JSON.stringify(sortKeys(value));
+}
+function sortKeys(value) {
+    if (Array.isArray(value)) {
+        return value.map(sortKeys);
+    }
+    if (value !== null && typeof value === 'object') {
+        const sorted = {};
+        for (const key of Object.keys(value).sort()) {
+            sorted[key] = sortKeys(value[key]);
+        }
+        return sorted;
+    }
+    return value;
+}
+//# sourceMappingURL=json-value.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/json-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json-value.js","sourceRoot":"","sources":["../../src/agent-executable-assets/json-value.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;AA6BH,kCA4CC;AAMD,wCAEC;AAOD,0CAEC;AA7ED,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC;IAC7B,WAAW;IACX,WAAW;IACX,aAAa;CACd,CAAC,CAAC;AAEH;;;;;;;;;GASG;AACH,SAAgB,WAAW,CAAC,KAAc,EAAE,IAAsB;IAChE,QAAQ,OAAO,KAAK,EAAE,CAAC;QACrB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAChC,KAAK,QAAQ;YACX,MAAM;QACR;YACE,sCAAsC;YACtC,OAAO,KAAK,KAAK,IAAI,CAAC;IAC1B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,GAAG,GAAG,KAAqC,CAAC;IAClD,iBAAiB;IACjB,MAAM,OAAO,GAAG,IAAI,IAAI,IAAI,OAAO,EAAU,CAAC;IAC9C,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC,WAAW,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;oBAChC,OAAO,KAAK,CAAC;gBACf,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACnC,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC5B,OAAO,KAAK,CAAC;YACf,CAAC;YACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE,CAAC;gBACpC,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,2EAA2E;IAC7E,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAgB,cAAc,CAAsB,KAAQ;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,SAAgB,eAAe,CAAC,KAAgB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,QAAQ,CAAC,KAAgB;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAChD,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAE,KAAoB,CAAC,GAAG,CAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence-validation.d.ts

@@ -0,0 +1,34 @@
+import type { ReleaseEvidenceRefV1, WorkforceReleaseEvidencePayloadV1 } from './release-evidence.types';
+import type { Sha256Digest } from './workforce-lock.types';
+export interface WorkforceReleaseEvidenceExpectationV1 {
+    sourceWorkspaceId: string;
+    executionWorkspaceId: string;
+    releaseSetId: string;
+    agentApiName: string;
+    sourceLockDigest: Sha256Digest;
+    releaseItemSetDigest: Sha256Digest;
+    materializedItemRefsDigest: Sha256Digest;
+    previousReleaseSetId: string | null;
+    containsCodeAction: boolean;
+    containsFlow: boolean;
+    candidateIsolationBindingId: string;
+    candidateIsolationSnapshotHash: Sha256Digest;
+    requestedExecution: CandidateEvidenceExecutionIdentityV1;
+    executedExecution: CandidateEvidenceExecutionIdentityV1;
+}
+export interface CandidateEvidenceExecutionIdentityV1 {
+    sourceLockDigest: Sha256Digest;
+    releaseItemSetDigest: Sha256Digest;
+    materializedItemRefsDigest: Sha256Digest;
+    runtimeProviderId: string;
+    runtimeIsolationEvidenceDigest: Sha256Digest | null;
+    candidateIsolationBindingId: string;
+    candidateIsolationSnapshotHash: Sha256Digest;
+    principalDataScopeDigest: Sha256Digest;
+    principalObjectPermissionDigest: Sha256Digest;
+    principalFieldPermissionDigest: Sha256Digest;
+}
+export declare function validateWorkforceReleaseEvidencePayload(payload: WorkforceReleaseEvidencePayloadV1, expected: WorkforceReleaseEvidenceExpectationV1): {
+    payloadHash: Sha256Digest;
+    rawEvidenceRefs: ReleaseEvidenceRefV1[];
+};

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence-validation.js

@@ -0,0 +1,135 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateWorkforceReleaseEvidencePayload = validateWorkforceReleaseEvidencePayload;
+const canonical_hash_1 = require("./canonical-hash");
+function validateWorkforceReleaseEvidencePayload(payload, expected) {
+    assertIdentity(payload, expected);
+    const refs = normalizeRefs(payload.refs);
+    const required = [
+        'agent_eval',
+        'golden_baseline',
+        'permission_negative',
+        'governor',
+        'mutation_isolation',
+        'rollback_rehearsal',
+        'audit_lineage',
+        ...(expected.containsCodeAction
+            ? ['action_test', 'runtime_readiness']
+            : []),
+        ...(expected.containsFlow ? ['flow_test'] : []),
+        ...(expected.previousReleaseSetId
+            ? ['previous_release_baseline']
+            : []),
+    ];
+    required.sort();
+    const actual = refs.map((ref) => ref.kind).sort();
+    if (JSON.stringify(actual) !== JSON.stringify(required)) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_KIND_MATRIX_MISMATCH');
+    }
+    const golden = refs.find((ref) => ref.kind === 'golden_baseline');
+    if ((0, canonical_hash_1.canonicalJsonDigest)(golden) !==
+        (0, canonical_hash_1.canonicalJsonDigest)(payload.baseline.goldenEvalSuiteRef) ||
+        (expected.previousReleaseSetId === null
+            ? payload.baseline.kind !== 'first_release_golden' ||
+                payload.baseline.previousReleaseSetId !== null
+            : payload.baseline.kind !== 'previous_release_plus_golden' ||
+                payload.baseline.previousReleaseSetId !==
+                    expected.previousReleaseSetId)) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_BASELINE_MISMATCH');
+    }
+    const runtimeRef = refs.find((ref) => ref.kind === 'runtime_readiness');
+    if (expected.containsCodeAction
+        ? !runtimeRef ||
+            payload.runtime.required !== true ||
+            payload.runtime.runtimeProviderId !==
+                'nexusclaw-verified-isolate-v1' ||
+            payload.runtime.runtimeIsolationEvidenceId !==
+                runtimeRef.evidenceId ||
+            payload.runtime.runtimeIsolationEvidenceDigest !== runtimeRef.digest
+        : runtimeRef !== undefined ||
+            payload.runtime.required !== false ||
+            payload.runtime.runtimeProviderId !== null ||
+            payload.runtime.runtimeIsolationEvidenceId !== null ||
+            payload.runtime.runtimeIsolationEvidenceDigest !== null) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_RUNTIME_MISMATCH');
+    }
+    const requestedDigest = (0, canonical_hash_1.canonicalJsonDigest)(expected.requestedExecution);
+    const executedDigest = (0, canonical_hash_1.canonicalJsonDigest)(expected.executedExecution);
+    if (payload.requestedExecutedParity.requestedDigest !== requestedDigest ||
+        payload.requestedExecutedParity.executedDigest !== executedDigest ||
+        requestedDigest !== executedDigest ||
+        payload.requestedExecutedParity.passed !== true ||
+        payload.simulationPassRate !== 1 ||
+        payload.productionMutationCount !== 0) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_EXECUTION_MISMATCH');
+    }
+    const monitoring = payload.successMonitoring;
+    if (!monitoring?.agentVersionId.trim() ||
+        !/^sha256:[a-f0-9]{64}$/.test(monitoring.cognitivePolicyDigest) ||
+        !/^sha256:[a-f0-9]{64}$/.test(monitoring.modelPolicyDigest) ||
+        monitoring.minimumSampleSize < 1 ||
+        !Number.isSafeInteger(monitoring.minimumSampleSize) ||
+        monitoring.metricCodes.length === 0 ||
+        new Set(monitoring.metricCodes).size !== monitoring.metricCodes.length ||
+        monitoring.metricCodes.some((code, index) => !code.trim() || code !== [...monitoring.metricCodes].sort()[index]) ||
+        monitoring.observationWindows.length === 0 ||
+        monitoring.insufficientEvidenceBehavior !== 'insufficient_evidence_only' ||
+        monitoring.thresholdBreachBehavior !== 'rollback_recommendation_requires_approval' ||
+        monitoring.baselineKind !== payload.baseline.kind) {
+        throw new Error('WORKFORCE_RELEASE_SUCCESS_MONITORING_INVALID');
+    }
+    if (payload.gateDecision === 'eligible'
+        ? payload.rejectionCodes.length !== 0
+        : payload.rejectionCodes.length === 0) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_DECISION_MISMATCH');
+    }
+    const rejectionCodes = [...payload.rejectionCodes].sort();
+    if (new Set(rejectionCodes).size !== rejectionCodes.length ||
+        rejectionCodes.some((code) => !code.trim()) ||
+        rejectionCodes.some((code, index) => code !== payload.rejectionCodes[index])) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_REJECTION_CODES_INVALID');
+    }
+    return {
+        payloadHash: (0, canonical_hash_1.canonicalJsonDigest)(payload),
+        rawEvidenceRefs: refs,
+    };
+}
+function assertIdentity(payload, expected) {
+    if (payload.schemaVersion !== 'ai-workforce-release-evidence/v1' ||
+        payload.sourceWorkspaceId !== expected.sourceWorkspaceId ||
+        payload.executionWorkspaceId !== expected.executionWorkspaceId ||
+        payload.sourceWorkspaceId === payload.executionWorkspaceId ||
+        payload.releaseSetId !== expected.releaseSetId ||
+        payload.agentApiName !== expected.agentApiName ||
+        payload.sourceLockDigest !== expected.sourceLockDigest ||
+        payload.releaseItemSetDigest !== expected.releaseItemSetDigest ||
+        payload.materializedItemRefsDigest !==
+            expected.materializedItemRefsDigest ||
+        payload.candidateIsolationBindingId !==
+            expected.candidateIsolationBindingId ||
+        payload.candidateIsolationSnapshotHash !==
+            expected.candidateIsolationSnapshotHash ||
+        payload.approval.decision !== 'APPROVED' ||
+        !payload.approval.approvalId.trim() ||
+        !Number.isSafeInteger(payload.approval.decisionVersion) ||
+        payload.approval.decisionVersion < 1) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_IDENTITY_MISMATCH');
+    }
+}
+function normalizeRefs(values) {
+    const refs = values.map((value) => ({ ...value }));
+    refs.sort((left, right) => `${left.kind}\0${left.evidenceId}\0${left.digest}`.localeCompare(`${right.kind}\0${right.evidenceId}\0${right.digest}`));
+    if (refs.some((ref, index) => !ref.evidenceId.trim() ||
+        !ref.producer.trim() ||
+        !/^sha256:[0-9a-f]{64}$/.test(ref.digest) ||
+        !Number.isFinite(Date.parse(ref.createdAt)) ||
+        (0, canonical_hash_1.canonicalJsonDigest)(ref) !==
+            (0, canonical_hash_1.canonicalJsonDigest)(values[index])) ||
+        new Set(refs.map((ref) => ref.kind)).size !== refs.length ||
+        new Set(refs.map((ref) => `${ref.evidenceId}:${ref.digest}`)).size !==
+            refs.length) {
+        throw new Error('WORKFORCE_RELEASE_EVIDENCE_REFS_INVALID');
+    }
+    return refs;
+}
+//# sourceMappingURL=release-evidence-validation.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-evidence-validation.js","sourceRoot":"","sources":["../../src/agent-executable-assets/release-evidence-validation.ts"],"names":[],"mappings":";;AAuCA,0FAmHC;AA1JD,qDAAuD;AAuCvD,SAAgB,uCAAuC,CACrD,OAA0C,EAC1C,QAA+C;IAK/C,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAClC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACzC,MAAM,QAAQ,GAAG;QACf,YAAY;QACZ,iBAAiB;QACjB,qBAAqB;QACrB,UAAU;QACV,oBAAoB;QACpB,oBAAoB;QACpB,eAAe;QACf,GAAG,CAAC,QAAQ,CAAC,kBAAkB;YAC7B,CAAC,CAAE,CAAC,aAAa,EAAE,mBAAmB,CAAW;YACjD,CAAC,CAAC,EAAE,CAAC;QACP,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAE,CAAC,WAAW,CAAW,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,QAAQ,CAAC,oBAAoB;YAC/B,CAAC,CAAE,CAAC,2BAA2B,CAAW;YAC1C,CAAC,CAAC,EAAE,CAAC;KACsB,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChB,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,iBAAiB,CAAE,CAAC;IACnE,IACE,IAAA,oCAAmB,EAAC,MAA8B,CAAC;QACjD,IAAA,oCAAmB,EACjB,OAAO,CAAC,QAAQ,CAAC,kBAA0C,CAC5D;QACH,CAAC,QAAQ,CAAC,oBAAoB,KAAK,IAAI;YACrC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,sBAAsB;gBAChD,OAAO,CAAC,QAAQ,CAAC,oBAAoB,KAAK,IAAI;YAChD,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,KAAK,8BAA8B;gBACxD,OAAO,CAAC,QAAQ,CAAC,oBAAoB;oBACnC,QAAQ,CAAC,oBAAoB,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC;IACxE,IACE,QAAQ,CAAC,kBAAkB;QACzB,CAAC,CAAC,CAAC,UAAU;YACX,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI;YACjC,OAAO,CAAC,OAAO,CAAC,iBAAiB;gBAC/B,+BAA+B;YACjC,OAAO,CAAC,OAAO,CAAC,0BAA0B;gBACxC,UAAU,CAAC,UAAU;YACvB,OAAO,CAAC,OAAO,CAAC,8BAA8B,KAAK,UAAU,CAAC,MAAM;QACtE,CAAC,CAAC,UAAU,KAAK,SAAS;YACxB,OAAO,CAAC,OAAO,CAAC,QAAQ,KAAK,KAAK;YAClC,OAAO,CAAC,OAAO,CAAC,iBAAiB,KAAK,IAAI;YAC1C,OAAO,CAAC,OAAO,CAAC,0BAA0B,KAAK,IAAI;YACnD,OAAO,CAAC,OAAO,CAAC,8BAA8B,KAAK,IAAI,EAC3D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,eAAe,GAAG,IAAA,oCAAmB,EACzC,QAAQ,CAAC,kBAA0C,CACpD,CAAC;IACF,MAAM,cAAc,GAAG,IAAA,oCAAmB,EACxC,QAAQ,CAAC,iBAAyC,CACnD,CAAC;IACF,IACE,OAAO,CAAC,uBAAuB,CAAC,eAAe,KAAK,eAAe;QACnE,OAAO,CAAC,uBAAuB,CAAC,cAAc,KAAK,cAAc;QACjE,eAAe,KAAK,cAAc;QAClC,OAAO,CAAC,uBAAuB,CAAC,MAAM,KAAK,IAAI;QAC/C,OAAO,CAAC,kBAAkB,KAAK,CAAC;QAChC,OAAO,CAAC,uBAAuB,KAAK,CAAC,EACrC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAC7C,IACE,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,EAAE;QAClC,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,qBAAqB,CAAC;QAC/D,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,iBAAiB,CAAC;QAC3D,UAAU,CAAC,iBAAiB,GAAG,CAAC;QAChC,CAAC,MAAM,CAAC,aAAa,CAAC,UAAU,CAAC,iBAAiB,CAAC;QACnD,UAAU,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC;QACnC,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,WAAW,CAAC,MAAM;QACtE,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,KAAK,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC;QAChH,UAAU,CAAC,kBAAkB,CAAC,MAAM,KAAK,CAAC;QAC1C,UAAU,CAAC,4BAA4B,KAAK,4BAA4B;QACxE,UAAU,CAAC,uBAAuB,KAAK,2CAA2C;QAClF,UAAU,CAAC,YAAY,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,EACjD,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,IACE,OAAO,CAAC,YAAY,KAAK,UAAU;QACjC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QACrC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;IACD,MAAM,cAAc,GAAG,CAAC,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,IACE,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM;QACtD,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAC3C,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,OAAO,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAC5E,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IACD,OAAO;QACL,WAAW,EAAE,IAAA,oCAAmB,EAAC,OAA+B,CAAC;QACjE,eAAe,EAAE,IAAI;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CACrB,OAA0C,EAC1C,QAA+C;IAE/C,IACE,OAAO,CAAC,aAAa,KAAK,kCAAkC;QAC5D,OAAO,CAAC,iBAAiB,KAAK,QAAQ,CAAC,iBAAiB;QACxD,OAAO,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB;QAC9D,OAAO,CAAC,iBAAiB,KAAK,OAAO,CAAC,oBAAoB;QAC1D,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QAC9C,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,YAAY;QAC9C,OAAO,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QACtD,OAAO,CAAC,oBAAoB,KAAK,QAAQ,CAAC,oBAAoB;QAC9D,OAAO,CAAC,0BAA0B;YAChC,QAAQ,CAAC,0BAA0B;QACrC,OAAO,CAAC,2BAA2B;YACjC,QAAQ,CAAC,2BAA2B;QACtC,OAAO,CAAC,8BAA8B;YACpC,QAAQ,CAAC,8BAA8B;QACzC,OAAO,CAAC,QAAQ,CAAC,QAAQ,KAAK,UAAU;QACxC,CAAC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,EAAE;QACnC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAC;QACvD,OAAO,CAAC,QAAQ,CAAC,eAAe,GAAG,CAAC,EACpC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IAClE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CACpB,MAA2C;IAE3C,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC;IACnD,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxB,GAAG,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,UAAU,KAAK,IAAI,CAAC,MAAM,EAAE,CAAC,aAAa,CAC9D,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,KAAK,KAAK,CAAC,MAAM,EAAE,CACtD,CACF,CAAC;IACF,IACE,IAAI,CAAC,IAAI,CACP,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE,CACb,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE;QACtB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE;QACpB,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;QACzC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAA,oCAAmB,EAAC,GAA2B,CAAC;YAC9C,IAAA,oCAAmB,EAAC,MAAM,CAAC,KAAK,CAAyB,CAAC,CAC/D;QACD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,MAAM;QACzD,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI;YAChE,IAAI,CAAC,MAAM,EACb,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC7D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence.types.d.ts

@@ -0,0 +1,232 @@
+/**
+ * Release registry, evidence, candidate isolation and lineage contracts.
+ *
+ * The narrow four-table release truth (`release_sets` / `release_set_items` /
+ * `release_evidence` / `release_heads`) is owned by the backend deployment
+ * bounded context (design §11.3, §3.5). This file defines the shared contract
+ * surface imported by backend runtime modules and the CLI. The release SET only
+ * has eligibility `staged|eligible|rejected`; the HEAD row is the sole active
+ * truth. Evidence is separate from the source lock.
+ */
+import type { Sha256Digest } from './workforce-lock.types';
+import type { ActionRiskLevel } from './code-action.types';
+/**
+ * Discriminated asset kinds carried by a release set item. Each kind is
+ * self-registered by its owner's sealed revision resolver at module boot; the
+ * registry rejects unknown/duplicate kinds. `code_action` requires verified
+ * isolate readiness before it may become eligible (design §12.4).
+ */
+export type WorkforceReleaseItemKindV1 = 'agent' | 'code_action' | 'flow' | 'ai_policy' | 'approval_policy' | 'knowledge' | 'connector_binding' | 'prompt_template' | 'prompt_policy' | 'guardrail' | 'sop' | 'workflow' | 'tool_permission' | 'approval_policy_template' | 'employee_template';
+export type ReleaseSetEligibility = 'staged' | 'eligible' | 'rejected';
+/** Exact reference to one immutable owner revision inside a release set item. */
+export interface ExactReleaseItemRefV1 {
+    readonly sourceWorkspaceId: string;
+    readonly itemKind: WorkforceReleaseItemKindV1;
+    readonly canonicalKey: string;
+    readonly revisionRef: string;
+    readonly checksum: Sha256Digest;
+    readonly descriptorHash: Sha256Digest | null;
+}
+export type ReleaseEvidenceRefKindV1 = 'action_test' | 'flow_test' | 'agent_eval' | 'golden_baseline' | 'previous_release_baseline' | 'permission_negative' | 'runtime_readiness' | 'governor' | 'mutation_isolation' | 'rollback_rehearsal' | 'audit_lineage';
+export interface ReleaseEvidenceRefV1 {
+    readonly kind: ReleaseEvidenceRefKindV1;
+    readonly evidenceId: string;
+    readonly digest: Sha256Digest;
+    readonly producer: string;
+    readonly createdAt: string;
+}
+export interface WorkforceReleaseEvidencePayloadV1 {
+    readonly schemaVersion: 'ai-workforce-release-evidence/v1';
+    readonly sourceWorkspaceId: string;
+    readonly executionWorkspaceId: string;
+    readonly releaseSetId: string;
+    readonly agentApiName: string;
+    readonly gateDecision: 'eligible' | 'rejected';
+    readonly approval: {
+        readonly approvalId: string;
+        readonly decision: 'APPROVED';
+        readonly decisionVersion: number;
+    };
+    readonly rejectionCodes: ReadonlyArray<string>;
+    readonly sourceLockDigest: Sha256Digest;
+    readonly releaseItemSetDigest: Sha256Digest;
+    readonly materializedItemRefsDigest: Sha256Digest;
+    readonly baseline: {
+        readonly kind: 'first_release_golden';
+        readonly previousReleaseSetId: null;
+        readonly goldenEvalSuiteRef: ReleaseEvidenceRefV1;
+    } | {
+        readonly kind: 'previous_release_plus_golden';
+        readonly previousReleaseSetId: string;
+        readonly goldenEvalSuiteRef: ReleaseEvidenceRefV1;
+    };
+    readonly refs: ReadonlyArray<ReleaseEvidenceRefV1>;
+    readonly requestedExecutedParity: {
+        readonly passed: boolean;
+        readonly requestedDigest: Sha256Digest;
+        readonly executedDigest: Sha256Digest;
+    };
+    readonly simulationPassRate: number;
+    readonly productionMutationCount: 0;
+    readonly runtime: {
+        readonly required: false;
+        readonly runtimeProviderId: null;
+        readonly runtimeIsolationEvidenceId: null;
+        readonly runtimeIsolationEvidenceDigest: null;
+    } | {
+        readonly required: true;
+        readonly runtimeProviderId: 'nexusclaw-verified-isolate-v1';
+        readonly runtimeIsolationEvidenceId: string;
+        readonly runtimeIsolationEvidenceDigest: Sha256Digest;
+    };
+    readonly candidateIsolationBindingId: string;
+    readonly candidateIsolationSnapshotHash: Sha256Digest;
+    /**
+     * Immutable post-publication success observation contract. This is evidence
+     * metadata only; raw runtime logs remain in their existing owners.
+     */
+    readonly successMonitoring: {
+        readonly agentVersionId: string;
+        readonly cognitivePolicyDigest: Sha256Digest;
+        readonly modelPolicyDigest: Sha256Digest;
+        readonly baselineKind: 'previous_release_plus_golden' | 'first_release_golden';
+        readonly metricCodes: ReadonlyArray<string>;
+        readonly observationWindows: ReadonlyArray<string>;
+        readonly minimumSampleSize: number;
+        readonly rollbackCriteria: ReadonlyArray<{
+            readonly metricCode: string;
+            readonly comparator: string;
+            readonly threshold: number;
+            readonly minimumSampleSize: number;
+        }>;
+        readonly insufficientEvidenceBehavior: 'insufficient_evidence_only';
+        readonly thresholdBreachBehavior: 'rollback_recommendation_requires_approval';
+    };
+}
+/** Sealed aggregate; produced once by an explicit gate, never mutated. */
+export interface WorkforceReleaseEnvelopeV1 {
+    readonly releaseSetId: string;
+    readonly sourceLockDigest: Sha256Digest;
+    readonly releaseItemSetDigest: Sha256Digest;
+    readonly materializedItemRefsDigest: Sha256Digest;
+    readonly evidencePayloadHash: Sha256Digest;
+    readonly approvalId: string;
+    readonly previousReleaseSetId?: string;
+    readonly releaseEnvelopeDigest: Sha256Digest;
+}
+/**
+ * Typed result of `bundle deploy` (stage). Always returns the three expected
+ * digests consumed by candidate test / gate / promote. A resumed agent may
+ * recover the same values only through `nexus ai context describe/export
+ * --candidate-release-set-id`, never by guessing or reading database ids.
+ */
+export interface CandidateStageReceiptV1 {
+    readonly candidateReleaseSetId: string;
+    readonly sourceLockDigest: Sha256Digest;
+    readonly releaseItemSetDigest: Sha256Digest;
+    readonly materializedItemRefsDigest: Sha256Digest;
+    readonly stagedAt: string;
+}
+/**
+ * Direct code/Flow test `--suite <literal>` maps to one same-named nested
+ * selector; `all` maps to that selector kind's complete ordered suite list.
+ * Bundle `--suite action|flow|employee|all` selects kinds and mechanically
+ * assigns every selected kind its complete blocking suite list (design §16.4).
+ * No handler/model chooses a default suite.
+ */
+export type CodeTestSuiteSelector = 'contract' | 'compile' | 'sandbox' | 'permission' | 'unit' | 'all';
+export type FlowTestSuiteSelector = 'schema' | 'mapping' | 'action' | 'permission' | 'fault' | 'all';
+export type BundleTestSuiteKind = 'action' | 'flow' | 'employee' | 'all';
+export interface CandidateTestSuiteSelectorV1 {
+    readonly kind: 'code' | 'flow' | 'bundle';
+    readonly selector: CodeTestSuiteSelector | FlowTestSuiteSelector | BundleTestSuiteKind;
+}
+/**
+ * Server-owned authorization generation + exclusive execution-workspace lease.
+ * Agent Test alone selects this; the public API/CLI accepts NO isolated
+ * workspace selector. The pair `(sourceWorkspaceId, executionWorkspaceId)` is
+ * time-bounded and backed by a dedicated-SANDBOX authorization generation.
+ */
+export interface CandidateIsolationBinding {
+    readonly isolationBindingId: string;
+    readonly sourceWorkspaceId: string;
+    readonly executionWorkspaceId: string;
+    readonly workspaceMode: 'isolated-test';
+    readonly authorizationGeneration: string;
+    readonly leaseId: string;
+    readonly leaseExpiresAt: string;
+    readonly isolationSnapshotHash: Sha256Digest;
+}
+/**
+ * Input for running isolated candidate tests. NOTE: there is no
+ * `executionWorkspaceId` field here — the server selects it via
+ * {@link CandidateIsolationBinding}; callers cannot choose it.
+ */
+export interface CandidateTestRunInputV1 {
+    readonly candidateReleaseSetId: string;
+    readonly exportId?: string;
+    readonly flowApiName?: string;
+    readonly expectedSourceLockDigest: Sha256Digest;
+    readonly expectedReleaseItemSetDigest: Sha256Digest;
+    readonly expectedMaterializedItemRefsDigest: Sha256Digest;
+    readonly suite: CandidateTestSuiteSelectorV1;
+}
+/**
+ * Server-owned runtime context. Active requires source === execution workspace;
+ * candidate difference requires an exact time-bounded
+ * {@link CandidateIsolationBinding}. A boolean or arbitrary workspace cannot
+ * forge a candidate (R-09.4).
+ */
+export interface ReleaseExecutionSnapshotV1 {
+    readonly schemaVersion: 'nexusclaw.release-execution-snapshot/v1';
+    readonly mode: 'active_snapshot' | 'candidate_test';
+    readonly sourceWorkspaceId: string;
+    readonly executionWorkspaceId: string;
+    readonly releaseSetId: string;
+    readonly sourceDigest: Sha256Digest;
+    readonly itemDigest: Sha256Digest;
+    readonly materializedDigest: Sha256Digest;
+    readonly envelopeDigest: Sha256Digest | null;
+    readonly isolationBinding?: CandidateIsolationBinding;
+}
+/**
+ * Minimal lineage consumed by existing audit/outcome/learning owners. Does NOT
+ * create a new audit table; existing event/record payloads are enriched with
+ * these fields. Missing executable revision makes evidence ineligible for
+ * learning release gate.
+ */
+export interface AgentAssetLineage {
+    readonly workspaceId: string;
+    readonly executionId: string;
+    readonly toolCallId?: string;
+    readonly correlationId: string;
+    readonly releaseSetId: string;
+    readonly agentVersionId: string;
+    readonly assetCanonicalKey?: string;
+    readonly assetVersion?: string;
+    readonly assetChecksum?: Sha256Digest;
+    readonly runtimeProvider?: string;
+}
+/**
+ * Canonical non-secret receipt returned by `approval-request` and
+ * `approval-status`, so `gate` is recoverable after local state loss. Contains
+ * approval/candidate/evidence ids, all three expected digests, governance
+ * digest, decision/version/expiry/consumption and its canonical receipt digest.
+ */
+export interface WorkforceReleaseGateReceiptV1 {
+    readonly schemaVersion: 'nexusclaw.workforce-release-gate-receipt/v1';
+    readonly approvalId: string;
+    readonly candidateReleaseSetId: string;
+    readonly evidenceRunIds: ReadonlyArray<string>;
+    readonly expectedSourceLockDigest: Sha256Digest;
+    readonly expectedReleaseItemSetDigest: Sha256Digest;
+    readonly expectedMaterializedItemRefsDigest: Sha256Digest;
+    readonly governanceContextDigest: Sha256Digest;
+    readonly decision: 'pending' | 'approved' | 'rejected' | 'expired';
+    readonly decisionVersion: 0 | 1;
+    readonly expiresAt: string;
+    readonly consumedAt: string | null;
+    readonly receiptDigest: Sha256Digest;
+}
+/** Convenience alias — Flow binding risk floor (no L4 in v1). */
+export type _FlowBindingRiskLevelAlias = Exclude<ActionRiskLevel, 'L4'>;

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=release-evidence.types.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/release-evidence.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release-evidence.types.js","sourceRoot":"","sources":["../../src/agent-executable-assets/release-evidence.types.ts"],"names":[],"mappings":""}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/workforce-bundle.types.d.ts

@@ -0,0 +1,98 @@
+/**
+ * Composite workforce executable bundle & runtime bindings contracts.
+ *
+ * Frozen verbatim from executable-asset design §5.1 (source bundle) and §5.2
+ * (runtime bindings). The bundle is the source composite surface; bindings are
+ * the environment overlay. Neither contains source code, secrets, URLs, or
+ * credential material (R-01).
+ */
+import { BUNDLE_SCHEMA_VERSION, RUNTIME_BINDINGS_SCHEMA_VERSION } from './contract-versions';
+import type { ActionRiskLevel } from './code-action.types';
+/**
+ * Source composite bundle. `ai-workforce-executable-bundle/v1`.
+ *
+ * Identity rules (design §5.1):
+ * - exactly one `agentApiName`, MUST exactly equal Employee Package
+ *   `agent.apiName`; every `toolBindings[].agentApiName` and
+ *   `flowBindings[].agentApiName` MUST equal it; no `employeeKey`/`agentKey`/
+ *   `packageKey`/`topicKey` alias is accepted.
+ * - `version`/package versions are exact semver — no range/tag/latest.
+ * - `minimumSimulationPassRate` is the literal JSON number `1`.
+ * - executable Flow containing `INVOKE_UNIT` MUST have a `flowBindings[]` entry
+ *   with `principalMode:'bound_agent'`.
+ */
+export interface AiWorkforceExecutableBundleV1 {
+    readonly schemaVersion: typeof BUNDLE_SCHEMA_VERSION;
+    readonly name: string;
+    /** Exact semver. */
+    readonly version: string;
+    /** Exactly one Employee Package agent.apiName; the bundle's identity. */
+    readonly agentApiName: string;
+    readonly employeePackage: {
+        readonly path: string;
+        readonly employeePackageName: string;
+        /** Explicit immutable candidate-eval asset; never inferred from name/head. */
+        readonly evalCasesPath: string;
+    };
+    readonly codePackages: ReadonlyArray<{
+        readonly path: string;
+        readonly packageName: string;
+        readonly packageVersion: string;
+    }>;
+    readonly flowPackages: ReadonlyArray<{
+        readonly path: string;
+        readonly packageName: string;
+        readonly packageVersion: string;
+    }>;
+    readonly toolBindings: ReadonlyArray<{
+        readonly employeeToolBindingId: string;
+        readonly agentApiName: string;
+        readonly topicId: string;
+        readonly toolName: `custom.${string}.${string}`;
+        readonly codeExport: {
+            readonly packageName: string;
+            readonly packageVersion: string;
+            readonly exportId: string;
+        };
+    }>;
+    readonly flowBindings: ReadonlyArray<{
+        readonly flowApiName: string;
+        readonly flowPackageName: string;
+        readonly agentApiName: string;
+        readonly principalMode: 'bound_agent';
+        readonly bindingRiskLevel: Exclude<ActionRiskLevel, 'L4'>;
+    }>;
+    readonly requiredRuntimeBindings: ReadonlyArray<{
+        readonly bindingKey: string;
+        readonly kind: 'connector' | 'ai_policy';
+    }>;
+    readonly releasePolicy: {
+        readonly requireCandidateTests: true;
+        readonly requireRegressionBaseline: true;
+        readonly requireHumanApproval: true;
+        readonly workforceReleaseApprovalPolicyApiName: string;
+        readonly defaultToolApprovalPolicyApiName: string;
+        readonly minimumSimulationPassRate: 1;
+        readonly mutationPolicy: 'sandbox-only';
+    };
+}
+/**
+ * Portable runtime bindings overlay. `workforce-runtime-bindings/v1`.
+ * Maps stable `bindingKey` to workspace resource apiName only — never to id,
+ * URL, token, header, certificate bytes, or provider key. The server resolves
+ * within the authenticated workspace and writes the resolved snapshot to the
+ * lock (design §5.2).
+ */
+export interface WorkforceRuntimeBindingsV1 {
+    readonly schemaVersion: typeof RUNTIME_BINDINGS_SCHEMA_VERSION;
+    readonly targetOrgAlias: string;
+    readonly bindings: ReadonlyArray<{
+        readonly bindingKey: string;
+        readonly kind: 'connector';
+        readonly connectorApiName: string;
+    } | {
+        readonly bindingKey: string;
+        readonly kind: 'ai_policy';
+        readonly policyKey: string;
+    }>;
+}

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/workforce-bundle.types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=workforce-bundle.types.js.map

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/workforce-bundle.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workforce-bundle.types.js","sourceRoot":"","sources":["../../src/agent-executable-assets/workforce-bundle.types.ts"],"names":[],"mappings":""}