@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/src/services/target-context.js

@@ -0,0 +1,91 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveTargetContext = resolveTargetContext;
+exports.formatTargetSummary = formatTargetSummary;
+exports.printTargetSummary = printTargetSummary;
+const auth_store_1 = require("./auth-store");
+const workspace_contract_1 = require("./workspace-contract");
+const defaultDependencies = {
+    loadWorkspaceManifest: workspace_contract_1.loadWorkspaceManifest,
+    loadEnvironmentDescriptor: workspace_contract_1.loadEnvironmentDescriptor,
+    loadCredential: auth_store_1.loadCredential,
+};
+function selectedEnvironment(manifest, explicitEnvironmentName) {
+    return explicitEnvironmentName?.trim() || manifest.defaultEnvironment?.trim() || undefined;
+}
+function loadSelectedDescriptor(workspaceDir, manifest, environmentName, dependencies) {
+    if (!environmentName) {
+        return undefined;
+    }
+    return dependencies.loadEnvironmentDescriptor(workspaceDir, environmentName).descriptor;
+}
+function resolveTargetContext(options, dependencies = defaultDependencies) {
+    const workspaceDir = options.workspaceDir ?? '.';
+    const { manifest } = dependencies.loadWorkspaceManifest(workspaceDir);
+    const environmentName = selectedEnvironment(manifest, options.environmentName);
+    const descriptor = loadSelectedDescriptor(workspaceDir, manifest, environmentName, dependencies);
+    const targetOrg = options.targetOrg?.trim()
+        || descriptor?.target.orgAlias?.trim()
+        || manifest.defaultOrg?.trim();
+    const targetOrgSource = options.targetOrg?.trim()
+        ? 'flag(--target-org)'
+        : descriptor?.target.orgAlias?.trim()
+            ? `environment(${environmentName}).target.orgAlias`
+            : manifest.defaultOrg?.trim()
+                ? 'manifest.defaultOrg(alias)'
+                : undefined;
+    if (!targetOrg || !targetOrgSource) {
+        throw new Error('Target org is unresolved. Pass --target-org, set target.orgAlias in the selected environment, or set manifest.defaultOrg.');
+    }
+    const credential = dependencies.loadCredential(targetOrg);
+    if (!credential) {
+        throw new Error(`Credential for target org "${targetOrg}" was not found. Run nexus org login-web --alias ${targetOrg}; no default credential was used.`);
+    }
+    const descriptorWorkspaceId = descriptor?.target.workspaceId?.trim();
+    if (descriptorWorkspaceId
+        && credential.orgId
+        && descriptorWorkspaceId !== credential.orgId) {
+        throw new Error(`Target workspace mismatch before request: expected ${descriptorWorkspaceId} from environment ${environmentName}, actual ${credential.orgId} from credential ${targetOrg}.`);
+    }
+    const workspaceId = options.workspaceId?.trim()
+        || descriptorWorkspaceId
+        || credential.orgId?.trim();
+    const workspaceIdSource = options.workspaceId?.trim()
+        ? 'flag(--workspace-id)'
+        : descriptorWorkspaceId
+            ? `environment(${environmentName}).target.workspaceId`
+            : credential.orgId?.trim()
+                ? `credential(${targetOrg}).orgId`
+                : undefined;
+    if (!workspaceId || !workspaceIdSource) {
+        throw new Error(`Workspace ID is unresolved for target org "${targetOrg}". Pass --workspace-id, bind target.workspaceId in the selected environment, or re-authenticate the org credential.`);
+    }
+    if (credential.orgId && workspaceId !== credential.orgId) {
+        throw new Error(`Target workspace mismatch before request: expected ${workspaceId}, actual ${credential.orgId} from credential ${targetOrg}.`);
+    }
+    return {
+        context: {
+            workspaceId,
+            targetOrg,
+            instanceUrl: credential.instanceUrl,
+            environmentName,
+            source: {
+                workspaceId: workspaceIdSource,
+                targetOrg: targetOrgSource,
+            },
+        },
+        credential,
+    };
+}
+function formatTargetSummary(context) {
+    return [
+        `Target org: ${context.targetOrg}`,
+        `Workspace: ${context.workspaceId}`,
+        ...(context.environmentName ? [`Environment: ${context.environmentName}`] : []),
+        `Instance: ${context.instanceUrl}`,
+    ].join('\n');
+}
+function printTargetSummary(context) {
+    console.log(formatTargetSummary(context));
+}
+//# sourceMappingURL=target-context.js.map

package/dist/nexus-cli/src/services/target-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-context.js","sourceRoot":"","sources":["../../../../src/services/target-context.ts"],"names":[],"mappings":";;AAkEA,oDAqFC;AAED,kDAOC;AAED,gDAEC;AApKD,6CAAkE;AAClE,6DAK8B;AA+B9B,MAAM,mBAAmB,GAA8B;IACrD,qBAAqB,EAArB,0CAAqB;IACrB,yBAAyB,EAAzB,8CAAyB;IACzB,cAAc,EAAd,2BAAc;CACf,CAAC;AAEF,SAAS,mBAAmB,CAC1B,QAA6B,EAC7B,uBAAgC;IAEhC,OAAO,uBAAuB,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAC,kBAAkB,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;AAC7F,CAAC;AAED,SAAS,sBAAsB,CAC7B,YAAoB,EACpB,QAA6B,EAC7B,eAAmC,EACnC,YAAuC;IAEvC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,YAAY,CAAC,yBAAyB,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC,UAAU,CAAC;AAC1F,CAAC;AAMD,SAAgB,oBAAoB,CAClC,OAAoC,EACpC,eAA0C,mBAAmB;IAE7D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,GAAG,CAAC;IACjD,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAC,qBAAqB,CAAC,YAAY,CAAC,CAAC;IACtE,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC;IAC/E,MAAM,UAAU,GAAG,sBAAsB,CACvC,YAAY,EACZ,QAAQ,EACR,eAAe,EACf,YAAY,CACb,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE;WACtC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;WACnC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IACjC,MAAM,eAAe,GAAG,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE;QAC/C,CAAC,CAAC,oBAAoB;QACtB,CAAC,CAAC,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,EAAE;YACnC,CAAC,CAAC,eAAe,eAAe,mBAAmB;YACnD,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,EAAE;gBAC3B,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,SAAS,CAAC;IAElB,IAAI,CAAC,SAAS,IAAI,CAAC,eAAe,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,2HAA2H,CAC5H,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,YAAY,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,MAAM,IAAI,KAAK,CACb,8BAA8B,SAAS,oDAAoD,SAAS,mCAAmC,CACxI,CAAC;IACJ,CAAC;IAED,MAAM,qBAAqB,GAAG,UAAU,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACrE,IACE,qBAAqB;WAClB,UAAU,CAAC,KAAK;WAChB,qBAAqB,KAAK,UAAU,CAAC,KAAK,EAC7C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,sDAAsD,qBAAqB,qBAAqB,eAAe,YAAY,UAAU,CAAC,KAAK,oBAAoB,SAAS,GAAG,CAC5K,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE;WAC1C,qBAAqB;WACrB,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;IAC9B,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE;QACnD,CAAC,CAAC,sBAAsB;QACxB,CAAC,CAAC,qBAAqB;YACrB,CAAC,CAAC,eAAe,eAAe,sBAAsB;YACtD,CAAC,CAAC,UAAU,CAAC,KAAK,EAAE,IAAI,EAAE;gBACxB,CAAC,CAAC,cAAc,SAAS,SAAS;gBAClC,CAAC,CAAC,SAAS,CAAC;IAElB,IAAI,CAAC,WAAW,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,8CAA8C,SAAS,qHAAqH,CAC7K,CAAC;IACJ,CAAC;IAED,IAAI,UAAU,CAAC,KAAK,IAAI,WAAW,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,sDAAsD,WAAW,YAAY,UAAU,CAAC,KAAK,oBAAoB,SAAS,GAAG,CAC9H,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE;YACP,WAAW;YACX,SAAS;YACT,WAAW,EAAE,UAAU,CAAC,WAAW;YACnC,eAAe;YACf,MAAM,EAAE;gBACN,WAAW,EAAE,iBAAiB;gBAC9B,SAAS,EAAE,eAAe;aAC3B;SACF;QACD,UAAU;KACX,CAAC;AACJ,CAAC;AAED,SAAgB,mBAAmB,CAAC,OAAsB;IACxD,OAAO;QACL,eAAe,OAAO,CAAC,SAAS,EAAE;QAClC,cAAc,OAAO,CAAC,WAAW,EAAE;QACnC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/E,aAAa,OAAO,CAAC,WAAW,EAAE;KACnC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED,SAAgB,kBAAkB,CAAC,OAAsB;IACvD,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5C,CAAC"}

package/dist/nexus-cli/src/services/target-context.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nexus-cli/src/services/target-context.test.js

@@ -0,0 +1,93 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_test_1 = __importDefault(require("node:test"));
+const target_context_1 = require("./target-context");
+const UUID_DEV = 'fb075206-b051-50e7-a333-a60fbdc02dfb';
+const UUID_UAT = '9aa752c6-e1bc-4d96-843d-c36e97ae0115';
+function manifest() {
+    return {
+        schemaVersion: 'nexus-project/v2',
+        projectName: 'target-context-test',
+        compatibleCoreVersion: '^0.1.0',
+        sourceRoots: [],
+        localPackages: [],
+        environments: [],
+        defaultEnvironment: 'dev',
+        defaultOrg: 'manifest-alias',
+    };
+}
+function descriptor(name, workspaceId, orgAlias) {
+    return {
+        schemaVersion: 'dx-environment/v1',
+        name,
+        type: 'dev-sandbox',
+        target: { workspaceId, orgAlias },
+        packageStack: { baseline: { packageName: 'foundation' } },
+    };
+}
+function credential(alias, orgId) {
+    return {
+        alias,
+        orgId,
+        instanceUrl: `https://${alias}.example.test`,
+        accessToken: 'must-not-leak',
+        username: 'developer@example.test',
+    };
+}
+function dependencies(descriptors, credentials) {
+    return {
+        loadWorkspaceManifest: () => ({
+            workspaceRoot: '/workspace',
+            manifestPath: '/workspace/nexus-project.yaml',
+            format: 'yaml',
+            migrated: false,
+            warnings: [],
+            manifest: manifest(),
+        }),
+        loadEnvironmentDescriptor: (_workspace, name) => ({
+            descriptorPath: `/workspace/env/${name}.yaml`,
+            descriptor: descriptors[name ?? ''],
+        }),
+        loadCredential: (alias) => credentials[alias] ?? null,
+    };
+}
+(0, node_test_1.default)('defaultEnvironment supplies UUID while defaultOrg remains alias-only', () => {
+    const dev = descriptor('dev', UUID_DEV, 'lan-training');
+    const resolved = (0, target_context_1.resolveTargetContext)({}, dependencies({ dev }, { 'lan-training': credential('lan-training', UUID_DEV) }));
+    strict_1.default.equal(resolved.context.workspaceId, UUID_DEV);
+    strict_1.default.equal(resolved.context.targetOrg, 'lan-training');
+    strict_1.default.equal(resolved.context.environmentName, 'dev');
+    strict_1.default.notEqual(resolved.context.workspaceId, manifest().defaultOrg);
+});
+(0, node_test_1.default)('explicit environment overrides defaultEnvironment', () => {
+    const uat = descriptor('uat', UUID_UAT, 'uat-alias');
+    const resolved = (0, target_context_1.resolveTargetContext)({ environmentName: 'uat' }, dependencies({ uat }, { 'uat-alias': credential('uat-alias', UUID_UAT) }));
+    strict_1.default.equal(resolved.context.workspaceId, UUID_UAT);
+    strict_1.default.equal(resolved.context.targetOrg, 'uat-alias');
+});
+(0, node_test_1.default)('explicit workspace and target org have highest precedence', () => {
+    const dev = descriptor('dev', UUID_DEV, 'descriptor-alias');
+    const resolved = (0, target_context_1.resolveTargetContext)({ workspaceId: UUID_DEV, targetOrg: 'explicit-alias' }, dependencies({ dev }, { 'explicit-alias': credential('explicit-alias', UUID_DEV) }));
+    strict_1.default.equal(resolved.context.workspaceId, UUID_DEV);
+    strict_1.default.equal(resolved.context.targetOrg, 'explicit-alias');
+    strict_1.default.equal(resolved.context.source.workspaceId, 'flag(--workspace-id)');
+    strict_1.default.equal(resolved.context.source.targetOrg, 'flag(--target-org)');
+});
+(0, node_test_1.default)('descriptor and selected credential mismatch fails closed without leaking token', () => {
+    const dev = descriptor('dev', UUID_DEV, 'lan-training');
+    strict_1.default.throws(() => (0, target_context_1.resolveTargetContext)({}, dependencies({ dev }, { 'lan-training': credential('lan-training', UUID_UAT) })), (error) => {
+        strict_1.default.match(error.message, new RegExp(UUID_DEV));
+        strict_1.default.match(error.message, new RegExp(UUID_UAT));
+        strict_1.default.doesNotMatch(error.message, /must-not-leak/);
+        return true;
+    });
+});
+(0, node_test_1.default)('missing named credential does not fall back to a default credential', () => {
+    const dev = descriptor('dev', UUID_DEV, 'missing-alias');
+    strict_1.default.throws(() => (0, target_context_1.resolveTargetContext)({}, dependencies({ dev }, { 'some-default': credential('some-default', UUID_DEV) })), /Credential for target org "missing-alias" was not found.*no default credential was used/);
+});
+//# sourceMappingURL=target-context.test.js.map

package/dist/nexus-cli/src/services/target-context.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"target-context.test.js","sourceRoot":"","sources":["../../../../src/services/target-context.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,0DAA6B;AAE7B,qDAAwD;AAIxD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AACxD,MAAM,QAAQ,GAAG,sCAAsC,CAAC;AAExD,SAAS,QAAQ;IACf,OAAO;QACL,aAAa,EAAE,kBAAkB;QACjC,WAAW,EAAE,qBAAqB;QAClC,qBAAqB,EAAE,QAAQ;QAC/B,WAAW,EAAE,EAAE;QACf,aAAa,EAAE,EAAE;QACjB,YAAY,EAAE,EAAE;QAChB,kBAAkB,EAAE,KAAK;QACzB,UAAU,EAAE,gBAAgB;KAC7B,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,WAAmB,EAAE,QAAgB;IACrE,OAAO;QACL,aAAa,EAAE,mBAAmB;QAClC,IAAI;QACJ,IAAI,EAAE,aAAa;QACnB,MAAM,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;QACjC,YAAY,EAAE,EAAE,QAAQ,EAAE,EAAE,WAAW,EAAE,YAAY,EAAE,EAAE;KAC1D,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa,EAAE,KAAa;IAC9C,OAAO;QACL,KAAK;QACL,KAAK;QACL,WAAW,EAAE,WAAW,KAAK,eAAe;QAC5C,WAAW,EAAE,eAAe;QAC5B,QAAQ,EAAE,wBAAwB;KACnC,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CAAC,WAAoD,EAAE,WAA0C;IACpH,OAAO;QACL,qBAAqB,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5B,aAAa,EAAE,YAAY;YAC3B,YAAY,EAAE,+BAA+B;YAC7C,MAAM,EAAE,MAAe;YACvB,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,QAAQ,EAAE;SACrB,CAAC;QACF,yBAAyB,EAAE,CAAC,UAAmB,EAAE,IAAa,EAAE,EAAE,CAAC,CAAC;YAClE,cAAc,EAAE,kBAAkB,IAAI,OAAO;YAC7C,UAAU,EAAE,WAAW,CAAC,IAAI,IAAI,EAAE,CAAC;SACpC,CAAC;QACF,cAAc,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,IAAI;KAC9D,CAAC;AACJ,CAAC;AAED,IAAA,mBAAI,EAAC,sEAAsE,EAAE,GAAG,EAAE;IAChF,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxD,MAAM,QAAQ,GAAG,IAAA,qCAAoB,EAAC,EAAE,EAAE,YAAY,CACpD,EAAE,GAAG,EAAE,EACP,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CACzD,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;IACzD,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,CAAC,CAAC;IACtD,gBAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC;AACvE,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,mDAAmD,EAAE,GAAG,EAAE;IAC7D,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,QAAQ,GAAG,IAAA,qCAAoB,EACnC,EAAE,eAAe,EAAE,KAAK,EAAE,EAC1B,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,QAAQ,CAAC,EAAE,CAAC,CAC1E,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;AACxD,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,2DAA2D,EAAE,GAAG,EAAE;IACrE,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,IAAA,qCAAoB,EACnC,EAAE,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,gBAAgB,EAAE,EACtD,YAAY,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,gBAAgB,EAAE,UAAU,CAAC,gBAAgB,EAAE,QAAQ,CAAC,EAAE,CAAC,CACpF,CAAC;IACF,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACrD,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,CAAC;IAC3D,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IAC1E,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,oBAAoB,CAAC,CAAC;AACxE,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,gFAAgF,EAAE,GAAG,EAAE;IAC1F,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC;IACxD,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,qCAAoB,EAAC,EAAE,EAAE,YAAY,CACzC,EAAE,GAAG,EAAE,EACP,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CACzD,CAAC,EACF,CAAC,KAAY,EAAE,EAAE;QACf,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClD,gBAAM,CAAC,YAAY,CAAC,KAAK,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACpD,OAAO,IAAI,CAAC;IACd,CAAC,CACF,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAA,mBAAI,EAAC,qEAAqE,EAAE,GAAG,EAAE;IAC/E,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC;IACzD,gBAAM,CAAC,MAAM,CACX,GAAG,EAAE,CAAC,IAAA,qCAAoB,EAAC,EAAE,EAAE,YAAY,CACzC,EAAE,GAAG,EAAE,EACP,EAAE,cAAc,EAAE,UAAU,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,CACzD,CAAC,EACF,yFAAyF,CAC1F,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/dist/nexus-cli/src/services/workforce-bundle-archive.d.ts

@@ -0,0 +1,12 @@
+export declare function buildCanonicalWorkforceBundleArchive(options: {
+    readonly bundleDir: string;
+    readonly targetOrgAlias: string;
+}): Promise<{
+    archiveBytes: Uint8Array<ArrayBufferLike>;
+    archiveDigest: `sha256:${string}`;
+    packageDigest: `sha256:${string}`;
+    portableBundleDigest: `sha256:${string}`;
+    runtimeBindingsDigest: `sha256:${string}`;
+    fileCount: number;
+    declaredSurfaces: ("code" | "flow" | "employee")[];
+}>;

package/dist/nexus-cli/src/services/workforce-bundle-archive.js

@@ -0,0 +1,102 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildCanonicalWorkforceBundleArchive = buildCanonicalWorkforceBundleArchive;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const yaml = __importStar(require("js-yaml"));
+const code_authoring_1 = require("@nexusclaw/code-authoring");
+async function buildCanonicalWorkforceBundleArchive(options) {
+    const root = node_path_1.default.resolve(options.bundleDir);
+    const bindingPath = `bindings/${options.targetOrgAlias}.runtime-bindings.json`;
+    const entries = readBundleEntries(root, bindingPath);
+    const inventory = await (0, code_authoring_1.buildWorkforceBundleInventory)(entries, (entryPath, bytes) => {
+        const text = Buffer.from(bytes).toString('utf8');
+        return entryPath.endsWith('.json') ? JSON.parse(text) : yaml.load(text);
+    });
+    const archive = await (0, code_authoring_1.buildCanonicalZip)(inventory.archiveEntries);
+    const bundle = JSON.parse(node_fs_1.default.readFileSync(node_path_1.default.join(root, 'workforce.bundle.json'), 'utf8'));
+    const declaredSurfaces = [
+        'employee',
+        ...(bundle.codePackages?.length ? ['code'] : []),
+        ...(bundle.flowPackages?.length ? ['flow'] : []),
+    ].sort();
+    return {
+        archiveBytes: archive.bytes,
+        archiveDigest: archive.archiveDigest,
+        packageDigest: inventory.portableBundleDigest,
+        portableBundleDigest: inventory.portableBundleDigest,
+        runtimeBindingsDigest: inventory.runtimeBindingsDigest,
+        fileCount: archive.entryCount,
+        declaredSurfaces,
+    };
+}
+function readBundleEntries(root, selectedBindingPath) {
+    if (!node_fs_1.default.statSync(root).isDirectory()) {
+        throw new Error('BUNDLE_WORKSPACE_NOT_DIRECTORY');
+    }
+    const entries = [];
+    const visit = (directory) => {
+        for (const name of node_fs_1.default.readdirSync(directory).sort()) {
+            const absolute = node_path_1.default.join(directory, name);
+            const relative = node_path_1.default.relative(root, absolute).split(node_path_1.default.sep).join('/');
+            if (relative === '.nexusclaw' ||
+                relative.startsWith('.nexusclaw/') ||
+                relative.includes('/.nexusclaw/')) {
+                continue;
+            }
+            const stat = node_fs_1.default.lstatSync(absolute);
+            if (stat.isSymbolicLink() || (!stat.isDirectory() && !stat.isFile())) {
+                throw new Error(`PACKAGE_NON_REGULAR_FILE:${relative}`);
+            }
+            if (stat.isDirectory()) {
+                visit(absolute);
+            }
+            else if (!relative.startsWith('bindings/') ||
+                relative === selectedBindingPath) {
+                entries.push({ path: relative, bytes: node_fs_1.default.readFileSync(absolute) });
+            }
+        }
+    };
+    visit(root);
+    if (!entries.some((entry) => entry.path === selectedBindingPath)) {
+        throw new Error(`WORKFORCE_RUNTIME_BINDINGS_MISSING:${selectedBindingPath}`);
+    }
+    return entries;
+}
+//# sourceMappingURL=workforce-bundle-archive.js.map

package/dist/nexus-cli/src/services/workforce-bundle-archive.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workforce-bundle-archive.js","sourceRoot":"","sources":["../../../../src/services/workforce-bundle-archive.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AASA,oFAiCC;AA1CD,sDAAyB;AACzB,0DAA6B;AAC7B,8CAAgC;AAChC,8DAImC;AAE5B,KAAK,UAAU,oCAAoC,CAAC,OAG1D;IACC,MAAM,IAAI,GAAG,mBAAI,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC7C,MAAM,WAAW,GACf,YAAY,OAAO,CAAC,cAAc,wBAAwB,CAAC;IAC7D,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,MAAM,IAAA,8CAA6B,EACnD,OAAO,EACP,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,OAAO,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1E,CAAC,CACF,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,IAAA,kCAAiB,EAAC,SAAS,CAAC,cAAc,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CACvB,iBAAE,CAAC,YAAY,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CACR,CAAC;IAC5D,MAAM,gBAAgB,GAAG;QACvB,UAAmB;QACnB,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,GAAG,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC,IAAI,EAAE,CAAC;IACT,OAAO;QACL,YAAY,EAAE,OAAO,CAAC,KAAK;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,SAAS,CAAC,oBAAoB;QAC7C,oBAAoB,EAAE,SAAS,CAAC,oBAAoB;QACpD,qBAAqB,EAAE,SAAS,CAAC,qBAAqB;QACtD,SAAS,EAAE,OAAO,CAAC,UAAU;QAC7B,gBAAgB;KACjB,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CACxB,IAAY,EACZ,mBAA2B;IAE3B,IAAI,CAAC,iBAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,MAAM,KAAK,GAAG,CAAC,SAAiB,EAAQ,EAAE;QACxC,KAAK,MAAM,IAAI,IAAI,iBAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YACpD,MAAM,QAAQ,GAAG,mBAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAC5C,MAAM,QAAQ,GAAG,mBAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,mBAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACzE,IACE,QAAQ,KAAK,YAAY;gBACzB,QAAQ,CAAC,UAAU,CAAC,aAAa,CAAC;gBAClC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,EACjC,CAAC;gBACD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,iBAAE,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;YACpC,IAAI,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;gBACrE,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,EAAE,CAAC,CAAC;YAC1D,CAAC;YACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBACvB,KAAK,CAAC,QAAQ,CAAC,CAAC;YAClB,CAAC;iBAAM,IACL,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;gBACjC,QAAQ,KAAK,mBAAmB,EAChC,CAAC;gBACD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrE,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,mBAAmB,CAAC,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,sCAAsC,mBAAmB,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/nexus-cli/src/services/workforce-bundle-archive.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/nexus-cli/src/services/workforce-bundle-archive.test.js

@@ -0,0 +1,54 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = __importDefault(require("node:test"));
+const workforce_bundle_archive_1 = require("./workforce-bundle-archive");
+(0, node_test_1.default)('bundle archive selects one target overlay and produces the shared portable digest', async () => {
+    const root = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-workforce-'));
+    node_fs_1.default.mkdirSync(node_path_1.default.join(root, 'employee'), { recursive: true });
+    node_fs_1.default.mkdirSync(node_path_1.default.join(root, 'bindings'), { recursive: true });
+    node_fs_1.default.mkdirSync(node_path_1.default.join(root, '.nexusclaw'), { recursive: true });
+    node_fs_1.default.writeFileSync(node_path_1.default.join(root, 'workforce.bundle.json'), JSON.stringify({
+        schemaVersion: 'ai-workforce-executable-bundle/v1',
+        name: 'sales_agent',
+        version: '1.0.0',
+        agentApiName: 'sales_agent',
+        employeePackage: {
+            path: 'employee/employee-package.json',
+            employeePackageName: 'sales_agent',
+            evalCasesPath: 'employee/employee-eval-cases.json',
+        },
+        codePackages: [],
+        flowPackages: [],
+        toolBindings: [],
+        flowBindings: [],
+        requiredRuntimeBindings: [],
+        releasePolicy: {},
+    }));
+    node_fs_1.default.writeFileSync(node_path_1.default.join(root, 'employee/employee-package.json'), '{"schemaVersion":"v2"}');
+    node_fs_1.default.writeFileSync(node_path_1.default.join(root, 'employee/employee-eval-cases.json'), '{"schemaVersion":"employee-eval-cases/v1","cases":[]}');
+    for (const alias of ['prod', 'staging']) {
+        node_fs_1.default.writeFileSync(node_path_1.default.join(root, `bindings/${alias}.runtime-bindings.json`), JSON.stringify({
+            schemaVersion: 'workforce-runtime-bindings/v1',
+            targetOrgAlias: alias,
+            bindings: [],
+        }));
+    }
+    node_fs_1.default.writeFileSync(node_path_1.default.join(root, '.nexusclaw/local.json'), '{}');
+    const result = await (0, workforce_bundle_archive_1.buildCanonicalWorkforceBundleArchive)({
+        bundleDir: root,
+        targetOrgAlias: 'prod',
+    });
+    strict_1.default.match(result.archiveDigest, /^sha256:[0-9a-f]{64}$/);
+    strict_1.default.match(result.portableBundleDigest, /^sha256:[0-9a-f]{64}$/);
+    strict_1.default.deepEqual(result.declaredSurfaces, ['employee']);
+    strict_1.default.equal(result.fileCount, 4);
+    node_fs_1.default.rmSync(root, { recursive: true, force: true });
+});
+//# sourceMappingURL=workforce-bundle-archive.test.js.map

package/dist/nexus-cli/src/services/workforce-bundle-archive.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workforce-bundle-archive.test.js","sourceRoot":"","sources":["../../../../src/services/workforce-bundle-archive.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,sDAAyB;AACzB,sDAAyB;AACzB,0DAA6B;AAC7B,0DAA6B;AAC7B,yEAAkF;AAElF,IAAA,mBAAI,EAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACnG,MAAM,IAAI,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;IACxE,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/D,iBAAE,CAAC,SAAS,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACjE,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC;QACxE,aAAa,EAAE,mCAAmC;QAClD,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,OAAO;QAChB,YAAY,EAAE,aAAa;QAC3B,eAAe,EAAE;YACf,IAAI,EAAE,gCAAgC;YACtC,mBAAmB,EAAE,aAAa;YAClC,aAAa,EAAE,mCAAmC;SACnD;QACD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,EAAE;QAChB,uBAAuB,EAAE,EAAE;QAC3B,aAAa,EAAE,EAAE;KAClB,CAAC,CAAC,CAAC;IACJ,iBAAE,CAAC,aAAa,CACd,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,gCAAgC,CAAC,EACjD,wBAAwB,CACzB,CAAC;IACF,iBAAE,CAAC,aAAa,CACd,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,mCAAmC,CAAC,EACpD,uDAAuD,CACxD,CAAC;IACF,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACxC,iBAAE,CAAC,aAAa,CACd,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,KAAK,wBAAwB,CAAC,EAC1D,IAAI,CAAC,SAAS,CAAC;YACb,aAAa,EAAE,+BAA+B;YAC9C,cAAc,EAAE,KAAK;YACrB,QAAQ,EAAE,EAAE;SACb,CAAC,CACH,CAAC;IACJ,CAAC;IACD,iBAAE,CAAC,aAAa,CAAC,mBAAI,CAAC,IAAI,CAAC,IAAI,EAAE,uBAAuB,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,IAAA,+DAAoC,EAAC;QACxD,SAAS,EAAE,IAAI;QACf,cAAc,EAAE,MAAM;KACvB,CAAC,CAAC;IACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC5D,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,EAAE,uBAAuB,CAAC,CAAC;IACnE,gBAAM,CAAC,SAAS,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IACxD,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IAClC,iBAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AACpD,CAAC,CAAC,CAAC"}

package/dist/nexus-cli/src/services/workforce-bundle-local.d.ts

@@ -0,0 +1,26 @@
+export interface InitLocalBundleOptions {
+    readonly bundleName: string;
+    readonly workspaceDir: string;
+    readonly outDir: string;
+    readonly contextManifestPath: string;
+    readonly workforceApprovalPolicyApiName: string;
+    readonly toolApprovalPolicyApiName: string;
+}
+export declare function initLocalBundle(options: InitLocalBundleOptions): Promise<{
+    bundleRoot: string;
+    bundlePath: string;
+    employeePackagePath: string;
+    approvalPolicies: {
+        workforceRelease: string;
+        toolCall: string;
+    };
+}>;
+export declare function validateLocalBundle(options: {
+    readonly bundleDir: string;
+    readonly contextManifestPath: string;
+}): Promise<{
+    valid: true;
+    bundleName: string;
+    agentApiName: string;
+    employeePackagePath: string;
+}>;