@nexusclawhq/cli 0.2.1

package/dist/nexus-cli/src/services/workforce-remote-operations.e2e.test.js

@@ -0,0 +1,266 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const strict_1 = __importDefault(require("node:assert/strict"));
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_http_1 = __importDefault(require("node:http"));
+const node_os_1 = __importDefault(require("node:os"));
+const node_path_1 = __importDefault(require("node:path"));
+const node_test_1 = __importDefault(require("node:test"));
+const D1 = `sha256:${'1'.repeat(64)}`;
+const D2 = `sha256:${'2'.repeat(64)}`;
+const D3 = `sha256:${'3'.repeat(64)}`;
+const ENVELOPE = `sha256:${'4'.repeat(64)}`;
+(0, node_test_1.default)('remote release lifecycle recovers gate identity from approved receipt after process reset', async () => {
+    const originalHome = process.env.HOME;
+    const originalUserProfile = process.env.USERPROFILE;
+    const tempHome = node_fs_1.default.mkdtempSync(node_path_1.default.join(node_os_1.default.tmpdir(), 'nexus-workforce-remote-'));
+    process.env.HOME = tempHome;
+    process.env.USERPROFILE = tempHome;
+    const requests = [];
+    let approvalDecision = 'PENDING';
+    let generation = 0;
+    let activeReleaseSetId = 'none';
+    const server = node_http_1.default.createServer((req, res) => {
+        let body = '';
+        req.on('data', (chunk) => { body += chunk.toString(); });
+        req.on('end', () => {
+            const request = JSON.parse(body);
+            requests.push(request);
+            const input = request.variables?.input ?? {};
+            const respond = (field, value) => {
+                res.writeHead(200, { 'Content-Type': 'application/json' });
+                res.end(JSON.stringify({ data: { [field]: value } }));
+            };
+            if (request.query.includes('GetWorkforceCandidateReleaseItems')) {
+                respond('getWorkforceCandidateReleaseItems', [
+                    { itemKind: 'agent', selectorKey: 'employee.test' },
+                    { itemKind: 'code_action', selectorKey: 'action.echo' },
+                    { itemKind: 'flow', selectorKey: 'flow.decision' },
+                ]);
+            }
+            else if (request.query.includes('RunWorkforceCandidateTests')) {
+                respond('runWorkforceCandidateTests', {
+                    evidenceRunId: 'evidence-1',
+                    evidenceRunDigest: D1,
+                    passed: true,
+                    refs: [],
+                    isolationBindingId: 'binding-1',
+                    isolationSnapshotHash: D2,
+                    resetReceiptId: 'reset-1',
+                    resetReceiptDigest: D3,
+                    newAuthorizationGeneration: 2,
+                });
+            }
+            else if (request.query.includes('RequestWorkforceReleaseApproval')) {
+                respond('requestWorkforceReleaseApproval', gateReceipt('PENDING'));
+            }
+            else if (request.query.includes('GetWorkforceReleaseApprovalStatus')) {
+                respond('getWorkforceReleaseApprovalStatus', gateReceipt(approvalDecision));
+            }
+            else if (request.query.includes('EvaluateAndSealWorkforceCandidateRelease')) {
+                if (approvalDecision !== 'APPROVED'
+                    || input.approvalId !== 'approval-1'
+                    || input.expectedSourceLockDigest !== D1
+                    || input.expectedReleaseItemSetDigest !== D2
+                    || input.expectedMaterializedItemRefsDigest !== D3
+                    || JSON.stringify(input.evidenceRunIds) !== '["evidence-1"]') {
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({
+                        errors: [{ message: 'RELEASE_APPROVAL_RECEIPT_MISMATCH' }],
+                    }));
+                    return;
+                }
+                respond('evaluateAndSealWorkforceCandidateRelease', {
+                    releaseSetId: 'candidate-1',
+                    evidenceId: 'aggregate-1',
+                    eligibilityStatus: 'eligible',
+                    releaseEnvelopeDigest: ENVELOPE,
+                    alreadySealed: false,
+                });
+            }
+            else if (request.query.includes('PromoteWorkforceRelease')) {
+                strict_1.default.equal(input.expectedGeneration, generation);
+                strict_1.default.equal(input.expectedActiveReleaseSetId, activeReleaseSetId);
+                const before = activeReleaseSetId;
+                const beforeGeneration = generation;
+                activeReleaseSetId = 'candidate-1';
+                generation += 1;
+                respond('promoteWorkforceRelease', transition('promote', before, activeReleaseSetId, beforeGeneration, generation));
+            }
+            else if (request.query.includes('RollbackWorkforceRelease')) {
+                strict_1.default.equal(input.expectedGeneration, generation);
+                strict_1.default.equal(input.expectedActiveReleaseSetId, activeReleaseSetId);
+                const before = activeReleaseSetId;
+                const beforeGeneration = generation;
+                activeReleaseSetId = input.releaseSetId;
+                generation += 1;
+                respond('rollbackWorkforceRelease', transition('rollback', before, activeReleaseSetId, beforeGeneration, generation));
+            }
+            else if (request.query.includes('RevokeExecutableToolExport')) {
+                respond('revokeExecutableToolExport', {
+                    schemaVersion: 'nexusclaw.code-action-revoked/v1',
+                    eventType: 'ai.workforce.code-action.revoked.v1',
+                    workspaceId: 'workspace-1',
+                    assertedReleaseSetId: input.releaseSetId,
+                    exportId: input.exportId,
+                    toolName: input.toolName,
+                    publishedChecksum: input.publishedChecksum,
+                    reason: input.reason,
+                    revokedBy: 'user-1',
+                    revokedAt: new Date().toISOString(),
+                    requestFingerprint: D1,
+                });
+            }
+            else {
+                res.writeHead(500);
+                res.end();
+            }
+        });
+    });
+    await new Promise((resolve) => server.listen(0, '127.0.0.1', resolve));
+    const address = server.address();
+    strict_1.default.ok(address && typeof address !== 'string');
+    try {
+        const first = freshModules();
+        first.auth.saveCredential({
+            alias: 'test',
+            instanceUrl: `http://127.0.0.1:${address.port}`,
+            accessToken: 'token',
+            username: 'tester',
+            orgId: 'workspace-1',
+        });
+        const identity = {
+            targetOrg: 'test',
+            candidateReleaseSetId: 'candidate-1',
+            expectedSourceLockDigest: D1,
+            expectedReleaseItemSetDigest: D2,
+            expectedMaterializedItemRefsDigest: D3,
+        };
+        const evidence = await first.ops.runRemoteBundleCandidateTests({
+            ...identity,
+            suite: 'all',
+        });
+        strict_1.default.equal(evidence.passed, true);
+        const pending = await first.ops.requestRemoteReleaseApproval({
+            ...identity,
+            evidenceRunIds: [evidence.evidenceRunId],
+        });
+        strict_1.default.equal(pending.decision, 'PENDING');
+        clearLifecycleModules();
+        approvalDecision = 'APPROVED';
+        const restarted = freshModules();
+        const approved = await restarted.ops.readRemoteReleaseApproval({
+            targetOrg: 'test',
+            candidateReleaseSetId: 'candidate-1',
+            approvalId: pending.approvalId,
+        });
+        const sealed = await restarted.ops.sealRemoteCandidate({
+            targetOrg: 'test',
+            candidateReleaseSetId: approved.candidateReleaseSetId,
+            evidenceRunIds: approved.evidenceRunIds,
+            expectedSourceLockDigest: approved.expectedSourceLockDigest,
+            expectedReleaseItemSetDigest: approved.expectedReleaseItemSetDigest,
+            expectedMaterializedItemRefsDigest: approved.expectedMaterializedItemRefsDigest,
+            approvalId: approved.approvalId,
+        });
+        strict_1.default.equal(sealed.eligibilityStatus, 'eligible');
+        await strict_1.default.rejects(restarted.ops.sealRemoteCandidate({
+            ...identity,
+            evidenceRunIds: ['tampered'],
+            approvalId: approved.approvalId,
+        }), /RELEASE_APPROVAL_RECEIPT_MISMATCH/);
+        const promoted = await restarted.ops.promoteRemoteRelease({
+            targetOrg: 'test',
+            candidateReleaseSetId: 'candidate-1',
+            expectedActiveReleaseSetId: 'none',
+            expectedGeneration: 0,
+            expectedReleaseEnvelopeDigest: sealed.releaseEnvelopeDigest,
+            approvalId: approved.approvalId,
+            stepUpChallengeId: 'step-up-1',
+        });
+        strict_1.default.equal(promoted.afterGeneration, 1);
+        const rolledBack = await restarted.ops.rollbackRemoteRelease({
+            targetOrg: 'test',
+            releaseSetId: 'none',
+            expectedActiveReleaseSetId: 'candidate-1',
+            expectedGeneration: 1,
+            reason: 'rehearsal',
+            stepUpChallengeId: 'step-up-2',
+        });
+        strict_1.default.equal(rolledBack.afterReleaseSetId, null);
+        const revoked = await restarted.ops.revokeRemoteAction({
+            targetOrg: 'test',
+            releaseSetId: 'candidate-1',
+            exportId: 'action.echo',
+            toolName: 'employee.action.echo',
+            publishedChecksum: D1,
+            reason: 'emergency',
+            stepUpChallengeId: 'step-up-3',
+        });
+        strict_1.default.equal(revoked.eventType, 'ai.workforce.code-action.revoked.v1');
+        strict_1.default.ok(requests.every((request) => request.variables?.input?.targetWorkspaceId === 'workspace-1'));
+    }
+    finally {
+        await new Promise((resolve, reject) => server.close((error) => error ? reject(error) : resolve()));
+        clearLifecycleModules();
+        if (originalHome === undefined)
+            delete process.env.HOME;
+        else
+            process.env.HOME = originalHome;
+        if (originalUserProfile === undefined)
+            delete process.env.USERPROFILE;
+        else
+            process.env.USERPROFILE = originalUserProfile;
+        node_fs_1.default.rmSync(tempHome, { recursive: true, force: true });
+    }
+});
+function gateReceipt(decision) {
+    return {
+        schemaVersion: 'nexusclaw.workforce-release-gate-receipt/v1',
+        approvalId: 'approval-1',
+        candidateReleaseSetId: 'candidate-1',
+        evidenceRunIds: ['evidence-1'],
+        expectedSourceLockDigest: D1,
+        expectedReleaseItemSetDigest: D2,
+        expectedMaterializedItemRefsDigest: D3,
+        governanceContextDigest: D1,
+        decision,
+        decisionVersion: decision === 'APPROVED' ? 2 : 1,
+        expiresAt: new Date(Date.now() + 60_000).toISOString(),
+        consumedAt: null,
+        receiptDigest: D2,
+    };
+}
+function transition(operation, before, after, beforeGeneration, afterGeneration) {
+    return {
+        schemaVersion: 'nexusclaw.workforce-release-transition/v1',
+        operation,
+        beforeReleaseSetId: before === 'none' ? null : before,
+        afterReleaseSetId: after === 'none' ? null : after,
+        beforeGeneration,
+        afterGeneration,
+        receiptId: `${operation}-receipt`,
+        outboxId: `${operation}-outbox`,
+        alreadyApplied: false,
+    };
+}
+function clearLifecycleModules() {
+    for (const modulePath of [
+        './workforce-remote-operations',
+        './api-client',
+        './auth-store',
+    ]) {
+        delete require.cache[require.resolve(modulePath)];
+    }
+}
+function freshModules() {
+    clearLifecycleModules();
+    return {
+        ops: require('./workforce-remote-operations'),
+        auth: require('./auth-store'),
+    };
+}
+//# sourceMappingURL=workforce-remote-operations.e2e.test.js.map

package/dist/nexus-cli/src/services/workforce-remote-operations.e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workforce-remote-operations.e2e.test.js","sourceRoot":"","sources":["../../../../src/services/workforce-remote-operations.e2e.test.ts"],"names":[],"mappings":";;;;;AAAA,gEAAwC;AACxC,sDAAyB;AACzB,0DAA6B;AAC7B,sDAAyB;AACzB,0DAA6B;AAC7B,0DAA6B;AAE7B,MAAM,EAAE,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AAC/C,MAAM,EAAE,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AAC/C,MAAM,EAAE,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AAC/C,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EAAW,CAAC;AAErD,IAAA,mBAAI,EAAC,2FAA2F,EAAE,KAAK,IAAI,EAAE;IAC3G,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;IACtC,MAAM,mBAAmB,GAAG,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACpD,MAAM,QAAQ,GAAG,iBAAE,CAAC,WAAW,CAAC,mBAAI,CAAC,IAAI,CAAC,iBAAE,CAAC,MAAM,EAAE,EAAE,yBAAyB,CAAC,CAAC,CAAC;IACnF,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC;IAC5B,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,QAAQ,CAAC;IACnC,MAAM,QAAQ,GAA+B,EAAE,CAAC;IAChD,IAAI,gBAAgB,GAAG,SAAS,CAAC;IACjC,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,kBAAkB,GAAG,MAAM,CAAC;IAChC,MAAM,MAAM,GAAG,mBAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;YACjB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAwB,CAAC;YACxD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC;YAC7C,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,KAAc,EAAE,EAAE;gBAChD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;YACxD,CAAC,CAAC;YACF,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,mCAAmC,EAAE;oBAC3C,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE;oBACnD,EAAE,QAAQ,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE;oBACvD,EAAE,QAAQ,EAAE,MAAM,EAAE,WAAW,EAAE,eAAe,EAAE;iBACnD,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,4BAA4B,EAAE;oBACpC,aAAa,EAAE,YAAY;oBAC3B,iBAAiB,EAAE,EAAE;oBACrB,MAAM,EAAE,IAAI;oBACZ,IAAI,EAAE,EAAE;oBACR,kBAAkB,EAAE,WAAW;oBAC/B,qBAAqB,EAAE,EAAE;oBACzB,cAAc,EAAE,SAAS;oBACzB,kBAAkB,EAAE,EAAE;oBACtB,0BAA0B,EAAE,CAAC;iBAC9B,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,iCAAiC,CAAC,EAAE,CAAC;gBACrE,OAAO,CAAC,iCAAiC,EAAE,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;YACrE,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;gBACvE,OAAO,CAAC,mCAAmC,EAAE,WAAW,CAAC,gBAAgB,CAAC,CAAC,CAAC;YAC9E,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,0CAA0C,CAAC,EAAE,CAAC;gBAC9E,IACE,gBAAgB,KAAK,UAAU;uBAC5B,KAAK,CAAC,UAAU,KAAK,YAAY;uBACjC,KAAK,CAAC,wBAAwB,KAAK,EAAE;uBACrC,KAAK,CAAC,4BAA4B,KAAK,EAAE;uBACzC,KAAK,CAAC,kCAAkC,KAAK,EAAE;uBAC/C,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,cAAc,CAAC,KAAK,gBAAgB,EAC5D,CAAC;oBACD,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC;wBACrB,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;qBAC3D,CAAC,CAAC,CAAC;oBACJ,OAAO;gBACT,CAAC;gBACD,OAAO,CAAC,0CAA0C,EAAE;oBAClD,YAAY,EAAE,aAAa;oBAC3B,UAAU,EAAE,aAAa;oBACzB,iBAAiB,EAAE,UAAU;oBAC7B,qBAAqB,EAAE,QAAQ;oBAC/B,aAAa,EAAE,KAAK;iBACrB,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CAAC;gBAC7D,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACnD,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC;gBACpC,kBAAkB,GAAG,aAAa,CAAC;gBACnC,UAAU,IAAI,CAAC,CAAC;gBAChB,OAAO,CAAC,yBAAyB,EAAE,UAAU,CAC3C,SAAS,EACT,MAAM,EACN,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,CACX,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CAAC;gBAC9D,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACnD,gBAAM,CAAC,KAAK,CAAC,KAAK,CAAC,0BAA0B,EAAE,kBAAkB,CAAC,CAAC;gBACnE,MAAM,MAAM,GAAG,kBAAkB,CAAC;gBAClC,MAAM,gBAAgB,GAAG,UAAU,CAAC;gBACpC,kBAAkB,GAAG,KAAK,CAAC,YAAY,CAAC;gBACxC,UAAU,IAAI,CAAC,CAAC;gBAChB,OAAO,CAAC,0BAA0B,EAAE,UAAU,CAC5C,UAAU,EACV,MAAM,EACN,kBAAkB,EAClB,gBAAgB,EAChB,UAAU,CACX,CAAC,CAAC;YACL,CAAC;iBAAM,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC;gBAChE,OAAO,CAAC,4BAA4B,EAAE;oBACpC,aAAa,EAAE,kCAAkC;oBACjD,SAAS,EAAE,qCAAqC;oBAChD,WAAW,EAAE,aAAa;oBAC1B,oBAAoB,EAAE,KAAK,CAAC,YAAY;oBACxC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;oBAC1C,MAAM,EAAE,KAAK,CAAC,MAAM;oBACpB,SAAS,EAAE,QAAQ;oBACnB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;oBACnC,kBAAkB,EAAE,EAAE;iBACvB,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;gBACnB,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;IACjC,gBAAM,CAAC,EAAE,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC;IAElD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,YAAY,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC;YACxB,KAAK,EAAE,MAAM;YACb,WAAW,EAAE,oBAAoB,OAAO,CAAC,IAAI,EAAE;YAC/C,WAAW,EAAE,OAAO;YACpB,QAAQ,EAAE,QAAQ;YAClB,KAAK,EAAE,aAAa;SACrB,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG;YACf,SAAS,EAAE,MAAM;YACjB,qBAAqB,EAAE,aAAa;YACpC,wBAAwB,EAAE,EAAE;YAC5B,4BAA4B,EAAE,EAAE;YAChC,kCAAkC,EAAE,EAAE;SACvC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,6BAA6B,CAAC;YAC7D,GAAG,QAAQ;YACX,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,4BAA4B,CAAC;YAC3D,GAAG,QAAQ;YACX,cAAc,EAAE,CAAC,QAAQ,CAAC,aAAa,CAAC;SACzC,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;QAE1C,qBAAqB,EAAE,CAAC;QACxB,gBAAgB,GAAG,UAAU,CAAC;QAC9B,MAAM,SAAS,GAAG,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAC7D,SAAS,EAAE,MAAM;YACjB,qBAAqB,EAAE,aAAa;YACpC,UAAU,EAAE,OAAO,CAAC,UAAU;SAC/B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;YACrD,SAAS,EAAE,MAAM;YACjB,qBAAqB,EAAE,QAAQ,CAAC,qBAAqB;YACrD,cAAc,EAAE,QAAQ,CAAC,cAAc;YACvC,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;YAC3D,4BAA4B,EAAE,QAAQ,CAAC,4BAA4B;YACnE,kCAAkC,EAChC,QAAQ,CAAC,kCAAkC;YAC7C,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,MAAM,CAAC,iBAAiB,EAAE,UAAU,CAAC,CAAC;QAEnD,MAAM,gBAAM,CAAC,OAAO,CAClB,SAAS,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAChC,GAAG,QAAQ;YACX,cAAc,EAAE,CAAC,UAAU,CAAC;YAC5B,UAAU,EAAE,QAAQ,CAAC,UAAU;SAChC,CAAC,EACF,mCAAmC,CACpC,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC;YACxD,SAAS,EAAE,MAAM;YACjB,qBAAqB,EAAE,aAAa;YACpC,0BAA0B,EAAE,MAAM;YAClC,kBAAkB,EAAE,CAAC;YACrB,6BAA6B,EAAE,MAAM,CAAC,qBAAqB;YAC3D,UAAU,EAAE,QAAQ,CAAC,UAAU;YAC/B,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC;QAC1C,MAAM,UAAU,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC;YAC3D,SAAS,EAAE,MAAM;YACjB,YAAY,EAAE,MAAM;YACpB,0BAA0B,EAAE,aAAa;YACzC,kBAAkB,EAAE,CAAC;YACrB,MAAM,EAAE,WAAW;YACnB,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,UAAU,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,kBAAkB,CAAC;YACrD,SAAS,EAAE,MAAM;YACjB,YAAY,EAAE,aAAa;YAC3B,QAAQ,EAAE,aAAa;YACvB,QAAQ,EAAE,sBAAsB;YAChC,iBAAiB,EAAE,EAAE;YACrB,MAAM,EAAE,WAAW;YACnB,iBAAiB,EAAE,WAAW;SAC/B,CAAC,CAAC;QACH,gBAAM,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;QACvE,gBAAM,CAAC,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,KAAK,aAAa,CAAC,CAAC,CAAC;IACxG,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CAC1C,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAC3D,CAAC;QACF,qBAAqB,EAAE,CAAC;QACxB,IAAI,YAAY,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;;YACnD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,YAAY,CAAC;QACrC,IAAI,mBAAmB,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;;YACjE,OAAO,CAAC,GAAG,CAAC,WAAW,GAAG,mBAAmB,CAAC;QACnD,iBAAE,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,SAAS,WAAW,CAAC,QAAgB;IACnC,OAAO;QACL,aAAa,EAAE,6CAA6C;QAC5D,UAAU,EAAE,YAAY;QACxB,qBAAqB,EAAE,aAAa;QACpC,cAAc,EAAE,CAAC,YAAY,CAAC;QAC9B,wBAAwB,EAAE,EAAE;QAC5B,4BAA4B,EAAE,EAAE;QAChC,kCAAkC,EAAE,EAAE;QACtC,uBAAuB,EAAE,EAAE;QAC3B,QAAQ;QACR,eAAe,EAAE,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChD,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE;QACtD,UAAU,EAAE,IAAI;QAChB,aAAa,EAAE,EAAE;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CACjB,SAAiC,EACjC,MAAc,EACd,KAAa,EACb,gBAAwB,EACxB,eAAuB;IAEvB,OAAO;QACL,aAAa,EAAE,2CAA2C;QAC1D,SAAS;QACT,kBAAkB,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM;QACrD,iBAAiB,EAAE,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK;QAClD,gBAAgB;QAChB,eAAe;QACf,SAAS,EAAE,GAAG,SAAS,UAAU;QACjC,QAAQ,EAAE,GAAG,SAAS,SAAS;QAC/B,cAAc,EAAE,KAAK;KACtB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB;IAC5B,KAAK,MAAM,UAAU,IAAI;QACvB,+BAA+B;QAC/B,cAAc;QACd,cAAc;KACf,EAAE,CAAC;QACF,OAAO,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IACpD,CAAC;AACH,CAAC;AAED,SAAS,YAAY;IACnB,qBAAqB,EAAE,CAAC;IACxB,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,+BAA+B,CAAmD;QAC/F,IAAI,EAAE,OAAO,CAAC,cAAc,CAAkC;KAC/D,CAAC;AACJ,CAAC"}

package/dist/nexus-cli/src/services/workforce-remote-operations.js

@@ -0,0 +1,156 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runRemoteCandidateTests = runRemoteCandidateTests;
+exports.runRemoteBundleCandidateTests = runRemoteBundleCandidateTests;
+exports.requestRemoteReleaseApproval = requestRemoteReleaseApproval;
+exports.readRemoteReleaseApproval = readRemoteReleaseApproval;
+exports.sealRemoteCandidate = sealRemoteCandidate;
+exports.promoteRemoteRelease = promoteRemoteRelease;
+exports.rollbackRemoteRelease = rollbackRemoteRelease;
+exports.revokeRemoteAction = revokeRemoteAction;
+const node_crypto_1 = require("node:crypto");
+const api_client_1 = require("./api-client");
+const auth_store_1 = require("./auth-store");
+async function runRemoteCandidateTests(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).runWorkforceCandidateTests({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+        selectors: options.selectors,
+        expectedSourceLockDigest: options.expectedSourceLockDigest,
+        expectedReleaseItemSetDigest: options.expectedReleaseItemSetDigest,
+        expectedMaterializedItemRefsDigest: options.expectedMaterializedItemRefsDigest,
+    }, (0, node_crypto_1.randomUUID)());
+}
+const ACTION_SUITES = ['contract', 'compile', 'sandbox', 'permission', 'unit'];
+const FLOW_SUITES = ['schema', 'mapping', 'action', 'permission', 'fault'];
+const EMPLOYEE_SUITES = ['routing', 'knowledge', 'permission', 'eval'];
+async function runRemoteBundleCandidateTests(options) {
+    const target = targetIdentity(options.targetOrg);
+    const client = (0, api_client_1.createApiClient)(options.targetOrg);
+    const items = await client.getWorkforceCandidateReleaseItems({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+    });
+    const selectors = [];
+    if (options.suite === 'action' || options.suite === 'all') {
+        const actions = items.filter((item) => item.itemKind === 'code_action');
+        if (actions.length === 0)
+            throw new Error('CODE_TEST_FIXTURE_INVALID');
+        selectors.push(...actions.map((item) => ({
+            kind: 'action',
+            exportId: item.selectorKey,
+            suites: ACTION_SUITES,
+        })));
+    }
+    if (options.suite === 'flow' || options.suite === 'all') {
+        const flows = items.filter((item) => item.itemKind === 'flow');
+        if (flows.length === 0)
+            throw new Error('FLOW_UNIT_UNRESOLVED');
+        selectors.push(...flows.map((item) => ({
+            kind: 'flow',
+            flowApiName: item.selectorKey,
+            suites: FLOW_SUITES,
+        })));
+    }
+    if (options.suite === 'employee' || options.suite === 'all') {
+        if (!items.some((item) => item.itemKind === 'agent')) {
+            throw new Error('EMPLOYEE_TEST_FIXTURE_INVALID');
+        }
+        selectors.push({ kind: 'employee', suites: EMPLOYEE_SUITES });
+    }
+    return runRemoteCandidateTests({ ...options, selectors });
+}
+async function requestRemoteReleaseApproval(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).requestWorkforceReleaseApproval({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+        evidenceRunIds: exactNonEmpty(options.evidenceRunIds, 'EVIDENCE_RUN_IDS_INVALID'),
+        expectedSourceLockDigest: options.expectedSourceLockDigest,
+        expectedReleaseItemSetDigest: options.expectedReleaseItemSetDigest,
+        expectedMaterializedItemRefsDigest: options.expectedMaterializedItemRefsDigest,
+    }, (0, node_crypto_1.randomUUID)());
+}
+async function readRemoteReleaseApproval(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).getWorkforceReleaseApprovalStatus({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+        approvalId: options.approvalId,
+    });
+}
+async function sealRemoteCandidate(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).evaluateAndSealWorkforceCandidateRelease({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+        evidenceRunIds: exactNonEmpty(options.evidenceRunIds, 'EVIDENCE_RUN_IDS_INVALID'),
+        expectedSourceLockDigest: options.expectedSourceLockDigest,
+        expectedReleaseItemSetDigest: options.expectedReleaseItemSetDigest,
+        expectedMaterializedItemRefsDigest: options.expectedMaterializedItemRefsDigest,
+        approvalId: options.approvalId,
+    }, (0, node_crypto_1.randomUUID)());
+}
+async function promoteRemoteRelease(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).promoteWorkforceRelease({
+        targetWorkspaceId: target.workspaceId,
+        candidateReleaseSetId: options.candidateReleaseSetId,
+        expectedActiveReleaseSetId: options.expectedActiveReleaseSetId,
+        expectedGeneration: exactGeneration(options.expectedGeneration),
+        expectedReleaseEnvelopeDigest: options.expectedReleaseEnvelopeDigest,
+        approvalId: options.approvalId,
+        stepUpChallengeId: options.stepUpChallengeId,
+    }, (0, node_crypto_1.randomUUID)());
+}
+async function rollbackRemoteRelease(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).rollbackWorkforceRelease({
+        targetWorkspaceId: target.workspaceId,
+        releaseSetId: options.releaseSetId,
+        expectedActiveReleaseSetId: options.expectedActiveReleaseSetId,
+        expectedGeneration: exactGeneration(options.expectedGeneration),
+        reason: nonBlank(options.reason, 'ROLLBACK_REASON_REQUIRED'),
+        stepUpChallengeId: options.stepUpChallengeId,
+    }, (0, node_crypto_1.randomUUID)());
+}
+async function revokeRemoteAction(options) {
+    const target = targetIdentity(options.targetOrg);
+    return (0, api_client_1.createApiClient)(options.targetOrg).revokeExecutableToolExport({
+        targetWorkspaceId: target.workspaceId,
+        releaseSetId: options.releaseSetId,
+        exportId: options.exportId,
+        toolName: options.toolName,
+        publishedChecksum: options.publishedChecksum,
+        reason: nonBlank(options.reason, 'REVOCATION_REASON_REQUIRED'),
+        stepUpChallengeId: options.stepUpChallengeId,
+    }, (0, node_crypto_1.randomUUID)());
+}
+function targetIdentity(alias) {
+    const credential = (0, auth_store_1.loadCredential)(nonBlank(alias, 'TARGET_ORG_REQUIRED'));
+    if (!credential?.orgId)
+        throw new Error('TARGET_ORG_CREDENTIAL_REQUIRED');
+    return { workspaceId: credential.orgId };
+}
+function exactNonEmpty(values, code) {
+    const normalized = [...new Set(values.map((value) => nonBlank(value, code)))]
+        .sort();
+    if (normalized.length === 0 || normalized.length !== values.length) {
+        throw new Error(code);
+    }
+    return normalized;
+}
+function exactGeneration(value) {
+    if (!Number.isSafeInteger(value) || value < 0) {
+        throw new Error('EXPECTED_GENERATION_INVALID');
+    }
+    return value;
+}
+function nonBlank(value, code) {
+    const normalized = value?.trim();
+    if (!normalized)
+        throw new Error(code);
+    return normalized;
+}
+//# sourceMappingURL=workforce-remote-operations.js.map

package/dist/nexus-cli/src/services/workforce-remote-operations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workforce-remote-operations.js","sourceRoot":"","sources":["../../../../src/services/workforce-remote-operations.ts"],"names":[],"mappings":";;AAcA,0DAkBC;AAMD,sEAqCC;AAED,oEAgBC;AAED,8DAWC;AAED,kDAoBC;AAED,oDAsBC;AAED,sDAoBC;AAED,gDAsBC;AAtMD,6CAAyC;AACzC,6CAAgF;AAChF,6CAA8C;AAYvC,KAAK,UAAU,uBAAuB,CAC3C,OAEC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,0BAA0B,CAClE;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,4BAA4B,EAAE,OAAO,CAAC,4BAA4B;QAClE,kCAAkC,EAChC,OAAO,CAAC,kCAAkC;KAC7C,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAED,MAAM,aAAa,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;AACxF,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAU,CAAC;AACpF,MAAM,eAAe,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,CAAU,CAAC;AAEzE,KAAK,UAAU,6BAA6B,CACjD,OAEC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,iCAAiC,CAAC;QAC3D,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;KACrD,CAAC,CAAC;IACH,MAAM,SAAS,GAAiC,EAAE,CAAC;IACnD,IAAI,OAAO,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1D,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC;QACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QACvE,SAAS,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,EAAE,QAAiB;YACvB,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,MAAM,EAAE,aAAa;SACtB,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,MAAM,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QACxD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACrC,IAAI,EAAE,MAAe;YACrB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,MAAM,EAAE,WAAW;SACpB,CAAC,CAAC,CAAC,CAAC;IACP,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK,EAAE,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,OAAO,CAAC,EAAE,CAAC;YACrD,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACnD,CAAC;QACD,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,uBAAuB,CAAC,EAAE,GAAG,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;AAC5D,CAAC;AAEM,KAAK,UAAU,4BAA4B,CAChD,OAAkF;IAElF,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,+BAA+B,CACvE;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,0BAA0B,CAAC;QACjF,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,4BAA4B,EAAE,OAAO,CAAC,4BAA4B;QAClE,kCAAkC,EAChC,OAAO,CAAC,kCAAkC;KAC7C,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,yBAAyB,CAAC,OAI/C;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,iCAAiC,CAAC;QAC1E,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,CAAC,CAAC;AACL,CAAC;AAEM,KAAK,UAAU,mBAAmB,CACvC,OAGC;IAED,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,wCAAwC,CAChF;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,cAAc,EAAE,aAAa,CAAC,OAAO,CAAC,cAAc,EAAE,0BAA0B,CAAC;QACjF,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;QAC1D,4BAA4B,EAAE,OAAO,CAAC,4BAA4B;QAClE,kCAAkC,EAChC,OAAO,CAAC,kCAAkC;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU;KAC/B,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,oBAAoB,CAAC,OAQ1C;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,uBAAuB,CAC/D;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,kBAAkB,EAAE,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC/D,6BAA6B,EAAE,OAAO,CAAC,6BAA6B;QACpE,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,qBAAqB,CAAC,OAO3C;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,wBAAwB,CAChE;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,0BAA0B,EAAE,OAAO,CAAC,0BAA0B;QAC9D,kBAAkB,EAAE,eAAe,CAAC,OAAO,CAAC,kBAAkB,CAAC;QAC/D,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,0BAA0B,CAAC;QAC5D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,kBAAkB,CAAC,OAQxC;IACC,MAAM,MAAM,GAAG,cAAc,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IACjD,OAAO,IAAA,4BAAe,EAAC,OAAO,CAAC,SAAS,CAAC,CAAC,0BAA0B,CAClE;QACE,iBAAiB,EAAE,MAAM,CAAC,WAAW;QACrC,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,4BAA4B,CAAC;QAC9D,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;KAC7C,EACD,IAAA,wBAAU,GAAE,CACb,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,KAAa;IACnC,MAAM,UAAU,GAAG,IAAA,2BAAc,EAAC,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,CAAC;IAC1E,IAAI,CAAC,UAAU,EAAE,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC1E,OAAO,EAAE,WAAW,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,SAAS,aAAa,CAAC,MAAyB,EAAE,IAAY;IAC5D,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;SAC1E,IAAI,EAAE,CAAC;IACV,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,UAAU,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACnE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa,EAAE,IAAY;IAC3C,MAAM,UAAU,GAAG,KAAK,EAAE,IAAI,EAAE,CAAC;IACjC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/nexus-cli/src/services/workspace-contract.d.ts

@@ -0,0 +1,140 @@
+export type WorkspaceManifestSchemaVersion = 'dx-workspace/v1' | 'nexus-project/v2' | 'workspace-template/v1';
+export type WorkspaceSourceRootKind = 'metadata-runtime' | 'code-extension' | 'local-package';
+export interface WorkspaceSourceRootDefinition {
+    path: string;
+    kind: WorkspaceSourceRootKind;
+    writeTarget?: boolean;
+    metadataKinds?: string[];
+    sourceOfTruthMode?: 'source-wins' | 'runtime-wins' | 'require-explicit';
+    orphanPolicy?: 'delete' | 'keep' | 'prompt';
+}
+export interface WorkspacePackageRef {
+    packageName: string;
+    version?: string;
+    packageType?: string;
+    source?: 'local' | 'registry' | 'workspace';
+    directory?: string;
+}
+export interface WorkspaceLocalPackageRef {
+    name: string;
+    path: string;
+    packageClass?: 'metadata' | 'seed-data' | 'asset' | 'code-extension';
+}
+export interface WorkspaceRegistryDescriptor {
+    url?: string;
+    channel?: string;
+    rootDirectory?: string;
+}
+export interface WorkspaceEnvironmentRef {
+    name: string;
+    path: string;
+}
+export interface WorkspaceManifestV1 {
+    schemaVersion: WorkspaceManifestSchemaVersion;
+    projectName: string;
+    apiVersion?: string;
+    compatibleCoreVersion: string;
+    packageDirectories?: Array<{
+        path: string;
+        default?: boolean;
+    }>;
+    sourceRoot?: string;
+    sourceRoots: WorkspaceSourceRootDefinition[];
+    localPackages: WorkspaceLocalPackageRef[];
+    registry?: WorkspaceRegistryDescriptor;
+    defaultOrg?: string;
+    defaultEnvironment?: string;
+    environments: WorkspaceEnvironmentRef[];
+    packageRefs?: Array<string | WorkspacePackageRef>;
+    starterTemplate?: string;
+    features?: Record<string, boolean>;
+}
+export interface EnvironmentPackageStack {
+    baseline: WorkspacePackageRef;
+    genericOverlay?: WorkspacePackageRef | null;
+    industryOverlay?: WorkspacePackageRef | null;
+    extensionPacks?: WorkspacePackageRef[];
+    demoPack?: WorkspacePackageRef | null;
+    environmentProfile?: WorkspacePackageRef | null;
+}
+export interface EnvironmentDescriptorV1 {
+    schemaVersion: 'dx-environment/v1';
+    name: string;
+    type: 'dev-sandbox' | 'uat-sandbox' | 'prod-install' | 'custom';
+    target: {
+        workspaceId?: string;
+        orgAlias?: string;
+        sandboxId?: string;
+        installMode?: 'workspace' | 'sandbox' | 'production';
+    };
+    releaseChannel?: string;
+    packageStack: EnvironmentPackageStack;
+    codePackages?: WorkspacePackageRef[];
+    runtimePolicyRef?: string;
+    installPolicy?: {
+        validateBeforeApply?: boolean;
+        allowDestructiveChanges?: boolean;
+        rebuildSourceBaseline?: boolean;
+    };
+    promotePolicy?: {
+        sandboxId?: string;
+        promoteFrontend?: boolean;
+        promoteBackend?: boolean;
+        reason?: string;
+        sourceEnvironment?: string;
+        allowPartialFailure?: boolean;
+    };
+}
+export interface WorkspaceContractLoadResult {
+    workspaceRoot: string;
+    manifestPath: string;
+    format: 'json' | 'yaml';
+    migrated: boolean;
+    warnings: string[];
+    manifest: WorkspaceManifestV1;
+}
+export declare const NEXUS_APP_SOURCE_ROOT = "nexus-app/main/default";
+export declare const NEXUS_APP_METADATA_ROOTS: readonly ["applications", "tabs", "objects", "layouts", "pages", "nwc", "classes", "triggers", "flows", "permissionsets", "profiles", "permissionSetGroups", "roles", "groups", "queues", "labels", "customMetadata", "customSettings", "staticresources", "namedCredentials", "remoteSiteSettings", "notificationTemplates", "isolated"];
+export declare const NEXUS_APP_REQUIRED_ROOTS: readonly ["applications", "tabs", "objects", "layouts", "pages", "nwc", "classes", "triggers", "flows", "permissionsets", "profiles"];
+export declare function findWorkspaceRoot(startDir?: string): string;
+export declare function getWorkspaceManifestPath(startDir?: string): string | null;
+export declare function validateWorkspaceManifest(manifest: WorkspaceManifestV1): {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+};
+export declare function validateWorkspaceSourceLayout(workspaceRoot: string, manifest: WorkspaceManifestV1): {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+};
+export declare function loadWorkspaceManifest(startDir?: string): WorkspaceContractLoadResult;
+export declare function renderWorkspaceManifestYaml(manifest: WorkspaceManifestV1): string;
+export declare function saveWorkspaceManifest(workspaceRoot: string, manifest: WorkspaceManifestV1, preferredFormat?: 'json' | 'yaml'): void;
+export interface ManifestDriftResult {
+    inSync: boolean;
+    yamlMissing: boolean;
+    jsonMissing: boolean;
+    message: string;
+}
+export declare function checkManifestSingleSource(workspaceRoot: string): ManifestDriftResult;
+export declare function syncWorkspaceManifestJson(workspaceRoot: string): {
+    yamlPath: string;
+    jsonPath: string;
+};
+export declare function upsertWorkspacePackageRef(startDir: string, packageRef: WorkspacePackageRef): WorkspaceManifestV1;
+export declare function removeWorkspacePackageRef(startDir: string, packageName: string): WorkspaceManifestV1;
+export declare function getMetadataSourceRoots(startDir?: string): WorkspaceSourceRootDefinition[];
+export declare function getCodeSourceRoots(startDir?: string): WorkspaceSourceRootDefinition[];
+export declare function resolvePreferredMetadataRoot(startDir?: string): WorkspaceSourceRootDefinition;
+export declare function resolvePhysicalSourcePath(workspaceRoot: string, trackedPath: string, preferredRoot?: WorkspaceSourceRootDefinition): string;
+export declare function normalizeTrackedMetadataPath(workspaceRoot: string, absolutePath: string): string | null;
+export declare function loadEnvironmentDescriptor(startDir?: string, environmentNameOrPath?: string): {
+    descriptorPath: string;
+    descriptor: EnvironmentDescriptorV1;
+};
+export declare function validateEnvironmentDescriptor(descriptor: EnvironmentDescriptorV1): {
+    valid: boolean;
+    errors: string[];
+    warnings: string[];
+};