@nexusclawhq/cli 0.2.3 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,16 @@
 # Changelog
 
+## 0.3.0 - 2026-07-24
+
+- Add `nexus workforce *` — a full AI-workforce training/governance command plane (18 sub-groups, 111 commands) that drives the digital-employee lifecycle from the CLI without the UI: learning loops (A + B), cognition mutate, config writes (constitution / prompt / guardrail / knowledge / provider / permission), eval, ops, orchestration, and observation. Every command is a thin authenticated GraphQL client over existing backend mutations; no write path bypasses the release gate or `BehaviorLearningCaptureService`.
+- Add transparent step-up (MFA) bootstrap: step-up-gated mutations (provider CUD, etc.) auto-extract the `STEP_UP_REQUIRED` challenge, complete `POST /mfa/step-up/verify`, and retry with the `x-step-up-token` header. New `nexus org step-up` command lists factors and issues a token explicitly.
+- Add `getCurrentUser` GraphQL wrapper so `dispatchAgentTask` resolves the caller's own userId (backend enforces `userId === caller`).
+- Register all 111 workforce commands in the machine-contract registry with four new permission profiles (`WORKFORCE_READ` / `WORKFORCE_EXECUTE` / `WORKFORCE_WRITE` / `WORKFORCE_PUBLISH`), exempt from `requiresCanDevelop` since they are a training/governance plane, not a code-authoring surface. Requires `@nexusclaw/shared` ≥ 0.1.1.
+
+## 0.2.4 - 2026-07-22
+
+- Keep the active `org login-web` callback listener alive when a stale browser tab, favicon, empty callback, missing state, or mismatched state reaches `localhost:1717`; all such requests remain fail-closed and cannot exchange a code or save credentials.
+
 ## 0.2.3 - 2026-07-22
 
 - Add a bounded `--timeout-seconds` option to `org login-web` (default 300, allowed 60-1800) so slower LAN and interactive browser authorization flows do not lose their localhost callback listener.

package/README.md

@@ -11,3 +11,8 @@ nexus org login-web --instance-url https://your-nexusclaw.example --alias dev
 Remote DX commands resolve one fail-closed target from `--workspace-id`, `--target-org`, the selected environment descriptor, and the authenticated org credential. `defaultOrg` is always an org alias and is never sent as a workspace ID.
 
 Node.js 18 or newer is required. Credentials are encrypted under `~/.nexusclaw` by default; set `NEXUS_CLI_HOME` to use an isolated credential directory in CI.
+
+## AI workforce training & governance (`workforce`)
+
+`nexus workforce *` drives the full digital-employee lifecycle from the CLI without the UI — learning loops, cognition, config writes, eval, ops, orchestration, and observation. See [`docs/workforce-cli.md`](./docs/workforce-cli.md) for the command reference, the step-up (MFA) bootstrap, known non-implemented items (skills / distill-run), and the governance-contract registration gap.
+

package/dist/build-info.json

@@ -1,8 +1,8 @@
 {
   "packageName": "@nexusclawhq/cli",
-  "version": "0.2.3",
-  "gitSha": "615c2a3ed760a4cd95a48c356d41107d5ab6706e",
-  "ciRunId": "29902195365",
-  "contentDigest": "sha256:8d187eb03ee148c921759ed19d3a90e507801dd8e2d93d4e6bea63af43311c9b",
-  "generatedAt": "2026-07-22T08:04:08.624Z"
+  "version": "0.3.0",
+  "gitSha": "985eb3ccfa9dd2d313cbe6f08f30c3e7ff134459",
+  "ciRunId": null,
+  "contentDigest": "sha256:8dc8f974281eec5f9f379b7280eb85ba217e396ab5335b11996d9a72cd88700d",
+  "generatedAt": "2026-07-24T03:46:12.764Z"
 }

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/agent-executable-assets/cli-contract.types.d.ts

@@ -42,7 +42,7 @@ export interface CliPermissionRuleV1 {
     }>;
 }
 /** Exact permission profile enum (design §16.1). */
-export type CliPermissionProfileId = 'LOCAL' | 'CONTEXT_READ' | 'BUNDLE_READ' | 'CANDIDATE_TEST' | 'BUNDLE_STAGE' | 'BUNDLE_GATE' | 'BUNDLE_PROMOTE' | 'BUNDLE_REVOKE';
+export type CliPermissionProfileId = 'LOCAL' | 'CONTEXT_READ' | 'BUNDLE_READ' | 'CANDIDATE_TEST' | 'BUNDLE_STAGE' | 'BUNDLE_GATE' | 'BUNDLE_PROMOTE' | 'BUNDLE_REVOKE' | 'WORKFORCE_READ' | 'WORKFORCE_EXECUTE' | 'WORKFORCE_WRITE' | 'WORKFORCE_PUBLISH';
 /** Exact effect enum; `['none']` cannot coexist with another effect. */
 export type CliEffectKind = 'none' | 'local_write' | 'remote_read' | 'remote_compute' | 'remote_write' | 'promote';
 export interface CliArgumentContract {

package/dist/nexus-cli/node_modules/@nexusclaw/shared/dist/ai-employee-cognition/cognitive-policy.types.d.ts

@@ -105,9 +105,27 @@ export interface MemoryPolicyV1 {
     allowLegacyReadThrough: boolean;
     restrictedSensitivityRequiresHuman: true;
 }
+/**
+ * The four autonomy modes an AI employee's proactive policy may declare.
+ *
+ * - `A0_disabled` — no proactive behavior (also the only legal value for a
+ *   legacy agent with no success contract, and for any candidate whose
+ *   cognitive policy has not yet been promoted to the active release head).
+ * - `A1_recommend` / `A2_confirm` — P0 proactive reach.
+ * - `A3_bounded_execute` — P0+ only; runtime feature gate must reject it
+ *   until Phase 12 release-gate evidence is complete.
+ *
+ * This alias is the single source of truth shared by `ProactivePolicyV1.mode`
+ * and by the cognitive-policy read model's `effectiveAutonomy` projection.
+ * The read model derives `effectiveAutonomy` from the release-head-pinned
+ * AgentVersion's `proactivePolicy.mode`; it is never a second activation path
+ * (design.md §3.2 / §11.3: autonomy activates only with the full workforce
+ * release head CAS).
+ */
+export type EffectiveAutonomyV1 = 'A0_disabled' | 'A1_recommend' | 'A2_confirm' | 'A3_bounded_execute';
 export interface ProactivePolicyV1 {
     schemaVersion: 'proactive-policy/v1';
-    mode: 'A0_disabled' | 'A1_recommend' | 'A2_confirm' | 'A3_bounded_execute';
+    mode: EffectiveAutonomyV1;
     allowedWakeSources: ProactiveWakeSignalV1['source'][];
     actionAllowlist: Array<{
         kind: 'tool';