@ornexus/neocortex 4.60.49 → 4.60.50

package/dist/sbom.cdx.json

@@ -984,7 +984,7 @@
       "version": "1.26.0"
     },
     {
-      "bom-ref": "@neocortex/client@4.60.49",
+      "bom-ref": "@neocortex/client@4.60.50",
       "group": "@neocortex",
       "name": "client",
       "properties": [
@@ -993,9 +993,9 @@
           "value": "node_modules/@neocortex/client"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/client@4.60.49",
+      "purl": "pkg:npm/%40neocortex/client@4.60.50",
       "type": "library",
-      "version": "4.60.49"
+      "version": "4.60.50"
     },
     {
       "bom-ref": "@neocortex/core@0.1.0",
@@ -1012,7 +1012,7 @@
       "version": "0.1.0"
     },
     {
-      "bom-ref": "@neocortex/server@4.60.49",
+      "bom-ref": "@neocortex/server@4.60.50",
       "group": "@neocortex",
       "name": "server",
       "properties": [
@@ -1021,12 +1021,12 @@
           "value": "node_modules/@neocortex/server"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/server@4.60.49",
+      "purl": "pkg:npm/%40neocortex/server@4.60.50",
       "type": "library",
-      "version": "4.60.49"
+      "version": "4.60.50"
     },
     {
-      "bom-ref": "@neocortex/shared@4.60.49",
+      "bom-ref": "@neocortex/shared@4.60.50",
       "group": "@neocortex",
       "name": "shared",
       "properties": [
@@ -1035,9 +1035,9 @@
           "value": "node_modules/@neocortex/shared"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/shared@4.60.49",
+      "purl": "pkg:npm/%40neocortex/shared@4.60.50",
       "type": "library",
-      "version": "4.60.49"
+      "version": "4.60.50"
     },
     {
       "bom-ref": "@opentelemetry/api-logs@0.214.0",
@@ -9405,17 +9405,17 @@
       "dependsOn": [
         "@clack/prompts@1.0.1",
         "@modelcontextprotocol/sdk@1.26.0",
-        "@neocortex/client@4.60.49",
+        "@neocortex/client@4.60.50",
         "@neocortex/core@0.1.0",
-        "@neocortex/server@4.60.49",
-        "@neocortex/shared@4.60.49",
+        "@neocortex/server@4.60.50",
+        "@neocortex/shared@4.60.50",
         "better-sqlite3@12.11.1",
         "execa@9.6.1",
         "node-cache@5.1.2",
         "picocolors@1.1.1",
         "zod@4.4.3"
       ],
-      "ref": "@ornexus/neocortex@4.60.49"
+      "ref": "@ornexus/neocortex@4.60.50"
     },
     {
       "dependsOn": [
@@ -9456,7 +9456,7 @@
         "@fastify/jwt@10.2.2",
         "@fastify/rate-limit@10.3.0",
         "@fastify/static@10.1.3",
-        "@neocortex/shared@4.60.49",
+        "@neocortex/shared@4.60.50",
         "@sentry/node@10.62.0",
         "bcryptjs@3.0.3",
         "drizzle-orm@0.45.2",
@@ -9469,7 +9469,7 @@
         "stripe@20.4.1",
         "yaml@2.9.0"
       ],
-      "ref": "@neocortex/server@4.60.49"
+      "ref": "@neocortex/server@4.60.50"
     },
     {
       "dependsOn": [
@@ -9590,16 +9590,16 @@
     },
     {
       "dependsOn": [
-        "@neocortex/shared@4.60.49",
+        "@neocortex/shared@4.60.50",
         "better-sqlite3@12.11.1",
         "jose@6.2.2",
         "keytar@7.9.0"
       ],
-      "ref": "@neocortex/client@4.60.49"
+      "ref": "@neocortex/client@4.60.50"
     },
     {
       "dependsOn": [
-        "@neocortex/shared@4.60.49"
+        "@neocortex/shared@4.60.50"
       ],
       "ref": "@neocortex/core@0.1.0"
     },
@@ -10653,7 +10653,7 @@
       "ref": "@lukeed/ms@2.0.2"
     },
     {
-      "ref": "@neocortex/shared@4.60.49"
+      "ref": "@neocortex/shared@4.60.50"
     },
     {
       "ref": "@opentelemetry/api@1.9.1"
@@ -11136,8 +11136,8 @@
   "metadata": {
     "component": {
       "author": "OrNexus Team",
-      "bom-ref": "@ornexus/neocortex@4.60.49",
-      "description": "Neocortex v4.60.49 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+      "bom-ref": "@ornexus/neocortex@4.60.50",
+      "description": "Neocortex v4.60.50 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
       "externalReferences": [
         {
           "comment": "as detected from PackageJson property \"bugs.url\"",
@@ -11170,9 +11170,9 @@
           "value": ""
         }
       ],
-      "purl": "pkg:npm/%40ornexus/neocortex@4.60.49?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
+      "purl": "pkg:npm/%40ornexus/neocortex@4.60.50?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
       "type": "application",
-      "version": "4.60.49"
+      "version": "4.60.50"
     },
     "tools": {
       "components": [

package/install.ps1

@@ -17,7 +17,7 @@ param(
     [string]$ServerUrl = ('https://{0}.{1}.{2}' -f 'api','neocortex','sh')
 )
 
-$VERSION = "4.60.49"
+$VERSION = "4.60.50"
 
 # =============================================================================
 # CONFIGURACOES

package/install.sh

@@ -4,7 +4,7 @@
 # Development Orchestrator
 
 # Versao do instalador
-VERSION="4.60.49"
+VERSION="4.60.50"
 
 # Flags
 MIGRATION_DETECTED=false

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ornexus/neocortex",
-  "version": "4.60.49",
-  "description": "Neocortex v4.60.49 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+  "version": "4.60.50",
+  "description": "Neocortex v4.60.50 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
   "keywords": [
     "claude",
     "claude-code",

package/packages/client/dist/adapters/platform-detector.d.ts

@@ -16,6 +16,7 @@
  *
  * Story 42.8
  */
+import type { NativeHostAttestationV1 } from '../continuity/native-agent-types.js';
 /** Supported platform target identifiers */
 export type TargetId = 'claude-code' | 'cursor' | 'vscode' | 'gemini' | 'codex' | 'opencode' | 'github-copilot-cli' | 'kimi' | 'antigravity' | 'openclaw' | 'grok' | 'runner' | 'unknown';
 /** Context provided to the platform detector */
@@ -23,7 +24,15 @@ export interface DetectionContext {
     readonly cwd: string;
     readonly env: Readonly<Record<string, string | undefined>>;
     readonly targetFlag?: string;
+    /** Version observed from the host executable; never inferred from a flag. */
+    readonly nativeHostVersion?: string | null;
 }
+/**
+ * Build a bounded Codex host attestation independently from platform selection.
+ * Explicit target flags can select a fallback target, but never become trusted
+ * native-host evidence.
+ */
+export declare function detectNativeHostAttestation(context: DetectionContext, detection?: DetectionResult): NativeHostAttestationV1 | undefined;
 /** Result of platform detection */
 export interface DetectionResult {
     readonly targetId: TargetId;

package/packages/client/dist/adapters/platform-detector.js

@@ -1 +1 @@
-import{existsSync as l}from"node:fs";import{join as u}from"node:path";const g=new Set(["claude-code","cursor","vscode","gemini","codex","opencode","github-copilot-cli","kimi","antigravity","openclaw","grok","runner","unknown"]),m=Object.freeze({claude:"claude-code","claude-code":"claude-code",cursor:"cursor",vscode:"vscode","vscode-copilot":"vscode",gemini:"gemini","gemini-cli":"gemini",codex:"codex","codex-cli":"codex",opencode:"opencode","copilot-cli":"github-copilot-cli","github-copilot-cli":"github-copilot-cli",kimi:"kimi",antigravity:"antigravity",openclaw:"openclaw","open-claw":"openclaw",grok:"grok","grok-build":"grok",runner:"runner",unknown:"unknown"});function S(o){return g.has(o)}function I(o){return m[o.trim().toLowerCase()]??null}const E=o=>l(o);function _(o,i=E){if(o.targetFlag){const e=I(o.targetFlag);return e?{targetId:e,confidence:1,reason:`Explicit --target=${e} flag`,reasonCode:"platform-target-explicit"}:{targetId:"unknown",confidence:0,reason:"Explicit platform target is not recognized",reasonCode:"platform-target-invalid-override"}}const a=e=>o.env[e]!==void 0,c=[],r=(e,d,n)=>{n.some(a)&&c.push({targetId:e,signal:d})};r("claude-code","Claude Code runtime",["CLAUDE_CODE","CLAUDE_AGENT"]),r("codex","Codex runtime",["CODEX_THREAD_ID","CODEX_SESSION_ID","CODEX_SANDBOX_NETWORK_DISABLED"]),r("opencode","OpenCode runtime",["OPENCODE","OPENCODE_SESSION_ID"]),r("cursor","Cursor runtime",["CURSOR_SESSION_ID","CURSOR_TRACE_ID"]),r("gemini","Gemini CLI runtime",["GEMINI_CLI"]),r("github-copilot-cli","GitHub Copilot CLI runtime",["COPILOT_CLI"]),r("kimi","Kimi Code runtime",["KIMI_SESSION_ID","KIMI_CODE_SESSION_ID"]),r("antigravity","Antigravity runtime",["ANTIGRAVITY_SESSION_ID","ANTIGRAVITY_AGENT"]),r("openclaw","OpenClaw runtime",["OPENCLAW_SESSION_ID","OPENCLAW_GATEWAY"]),r("grok","Grok Build runtime",["GROK_SESSION_ID","GROK_AGENT","GROK_HOME"]);const t=[...new Map(c.map(e=>[e.targetId,e])).values()];if(t.length>1)return{targetId:"unknown",confidence:0,reason:`Conflicting runtime platform signals: ${t.map(({targetId:e})=>e).sort().join(", ")}`,reasonCode:"platform-target-ambiguous"};if(t.length===1){const e=t[0],n={"claude-code":"CLAUDE.md",codex:"AGENTS.md",cursor:".cursor",gemini:"GEMINI.md",vscode:".vscode",grok:"AGENTS.md"}[e.targetId],s=n?i(u(o.cwd,n)):!1;return{targetId:e.targetId,confidence:s?.98:.95,reason:`${e.signal} signal${s?` corroborated by ${n}`:""}`,reasonCode:"platform-target-runtime-signal"}}return a("VSCODE_PID")||o.env.TERM_PROGRAM==="vscode"?{targetId:"vscode",confidence:.75,reason:"VS Code runtime signal without a stronger agent runtime signal",reasonCode:"platform-target-runtime-signal"}:["AGENTS.md",".cursor",".cursorrules","CLAUDE.md",".vscode","GEMINI.md"].some(e=>i(u(o.cwd,e)))?{targetId:"unknown",confidence:0,reason:"Filesystem marker found without platform-owned runtime evidence",reasonCode:"platform-target-filesystem-only"}:{targetId:"unknown",confidence:0,reason:"No platform runtime signals detected",reasonCode:"platform-target-unknown"}}export{_ as detectPlatform,S as isValidTargetId,I as normalizeTargetId};
+import{existsSync as m}from"node:fs";import{join as l}from"node:path";const g=/^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;function C(n,d=O(n)){if(d.targetId!=="codex")return;const r=["CODEX_THREAD_ID","CODEX_SESSION_ID","CODEX_SANDBOX_NETWORK_DISABLED"].some(c=>n.env[c]!==void 0),i=r&&n.env.CODEX_REMOTE_PAYLOAD!==void 0,o=i?"codex-desktop":r?"codex-cli":"unknown",t=n.nativeHostVersion?.trim()??"",s=g.test(t)?t:null,e=!!n.targetFlag&&!r;return Object.freeze({schemaVersion:1,platformTarget:"codex",hostKind:o,hostVersion:s,origin:e?"explicit-override":i?"host-observed":r?"environment":"unknown",confidence:e||o==="unknown"?"unknown":i?"observed":"inferred",publicSafe:!0})}const I=new Set(["claude-code","cursor","vscode","gemini","codex","opencode","github-copilot-cli","kimi","antigravity","openclaw","grok","runner","unknown"]),E=Object.freeze({claude:"claude-code","claude-code":"claude-code",cursor:"cursor",vscode:"vscode","vscode-copilot":"vscode",gemini:"gemini","gemini-cli":"gemini",codex:"codex","codex-cli":"codex",opencode:"opencode","copilot-cli":"github-copilot-cli","github-copilot-cli":"github-copilot-cli",kimi:"kimi",antigravity:"antigravity",openclaw:"openclaw","open-claw":"openclaw",grok:"grok","grok-build":"grok",runner:"runner",unknown:"unknown"});function D(n){return I.has(n)}function f(n){return E[n.trim().toLowerCase()]??null}const p=n=>m(n);function O(n,d=p){if(n.targetFlag){const e=f(n.targetFlag);return e?{targetId:e,confidence:1,reason:`Explicit --target=${e} flag`,reasonCode:"platform-target-explicit"}:{targetId:"unknown",confidence:0,reason:"Explicit platform target is not recognized",reasonCode:"platform-target-invalid-override"}}const r=e=>n.env[e]!==void 0,i=[],o=(e,c,a)=>{a.some(r)&&i.push({targetId:e,signal:c})};o("claude-code","Claude Code runtime",["CLAUDE_CODE","CLAUDE_AGENT"]),o("codex","Codex runtime",["CODEX_THREAD_ID","CODEX_SESSION_ID","CODEX_SANDBOX_NETWORK_DISABLED"]),o("opencode","OpenCode runtime",["OPENCODE","OPENCODE_SESSION_ID"]),o("cursor","Cursor runtime",["CURSOR_SESSION_ID","CURSOR_TRACE_ID"]),o("gemini","Gemini CLI runtime",["GEMINI_CLI"]),o("github-copilot-cli","GitHub Copilot CLI runtime",["COPILOT_CLI"]),o("kimi","Kimi Code runtime",["KIMI_SESSION_ID","KIMI_CODE_SESSION_ID"]),o("antigravity","Antigravity runtime",["ANTIGRAVITY_SESSION_ID","ANTIGRAVITY_AGENT"]),o("openclaw","OpenClaw runtime",["OPENCLAW_SESSION_ID","OPENCLAW_GATEWAY"]),o("grok","Grok Build runtime",["GROK_SESSION_ID","GROK_AGENT","GROK_HOME"]);const t=[...new Map(i.map(e=>[e.targetId,e])).values()];if(t.length>1)return{targetId:"unknown",confidence:0,reason:`Conflicting runtime platform signals: ${t.map(({targetId:e})=>e).sort().join(", ")}`,reasonCode:"platform-target-ambiguous"};if(t.length===1){const e=t[0],a={"claude-code":"CLAUDE.md",codex:"AGENTS.md",cursor:".cursor",gemini:"GEMINI.md",vscode:".vscode",grok:"AGENTS.md"}[e.targetId],u=a?d(l(n.cwd,a)):!1;return{targetId:e.targetId,confidence:u?.98:.95,reason:`${e.signal} signal${u?` corroborated by ${a}`:""}`,reasonCode:"platform-target-runtime-signal"}}return r("VSCODE_PID")||n.env.TERM_PROGRAM==="vscode"?{targetId:"vscode",confidence:.75,reason:"VS Code runtime signal without a stronger agent runtime signal",reasonCode:"platform-target-runtime-signal"}:["AGENTS.md",".cursor",".cursorrules","CLAUDE.md",".vscode","GEMINI.md"].some(e=>d(l(n.cwd,e)))?{targetId:"unknown",confidence:0,reason:"Filesystem marker found without platform-owned runtime evidence",reasonCode:"platform-target-filesystem-only"}:{targetId:"unknown",confidence:0,reason:"No platform runtime signals detected",reasonCode:"platform-target-unknown"}}export{C as detectNativeHostAttestation,O as detectPlatform,D as isValidTargetId,f as normalizeTargetId};

package/packages/client/dist/cli.js

@@ -10,6 +10,7 @@ Commands:
   activate       Activate license key
   refresh-memory Create/repair canonical NEOCORTEX.md links and wrappers
   story-checkpoint Root-owned direct-*yolo commit/checkpoint boundary
+  native-agent   Reserve and observe authorized native child dispatches
   config         Inspect or change managed subagent approval mode
   cache-status   Show cache and circuit breaker status
   update         Update to latest version (use 'neocortex update' instead)
@@ -112,5 +113,5 @@ Invocation payload boundary:
 
 License:
   Licensed under BSL-1.1 (Business Source License 1.1)
-`.trim(),p=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function u(){const a=process.argv.slice(2),o=a[0];o&&p.has(o.toLowerCase())&&process.exit(0),(!o||o==="--help"||o==="-h")&&(console.log(l),process.exit(0)),(o==="--version"||o==="-v")&&(console.log(d()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
-`),process.exit(0));const n=a.slice(1);switch(o){case"invoke":{const{invokeCliHandler:r}=await import("./commands/invoke.js"),t=await r(n);process.exit(t);break}case"activate":{const{activate:r}=await import("./commands/activate.js");let t,i,c=!1;for(let e=0;e<n.length;e++){const s=n[e];s==="--server-url"?i=n[++e]:s==="--non-interactive"?c=!0:s==="--help"||s==="-h"?(console.log(l),process.exit(0)):s.startsWith("-")||(t=s)}t||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const e=await r({licenseKey:t,serverUrl:i,nonInteractive:c});e.success?(console.log(e.message),process.exit(0)):(console.error(e.message),process.exit(1))}catch(e){const s=e instanceof Error?e.message:String(e);console.error(`Activation failed: ${s}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:r}=await import("./commands/config.js"),t=await r(n);process.exit(t);break}case"refresh-memory":{const{refreshMemoryCliHandler:r}=await import("./commands/refresh-memory.js"),t=await r(n);process.exit(t);break}case"story-checkpoint":{const{storyCheckpointCliHandler:r}=await import("./commands/story-checkpoint.js"),t=await r(n);process.exit(t);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${o}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}u().catch(a=>{console.error(`Fatal error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)});
+`.trim(),p=new Set(["pm","install","postinstall","preinstall","prepublish","postpublish","preuninstall","postuninstall","preprepare","prepare","postprepare"]);async function u(){const a=process.argv.slice(2),r=a[0];r&&p.has(r.toLowerCase())&&process.exit(0),(!r||r==="--help"||r==="-h")&&(console.log(l),process.exit(0)),(r==="--version"||r==="-v")&&(console.log(d()),process.stderr.write(`Licensed under BSL-1.1 (Business Source License 1.1)
+`),process.exit(0));const s=a.slice(1);switch(r){case"invoke":{const{invokeCliHandler:o}=await import("./commands/invoke.js"),e=await o(s);process.exit(e);break}case"activate":{const{activate:o}=await import("./commands/activate.js");let e,i,c=!1;for(let t=0;t<s.length;t++){const n=s[t];n==="--server-url"?i=s[++t]:n==="--non-interactive"?c=!0:n==="--help"||n==="-h"?(console.log(l),process.exit(0)):n.startsWith("-")||(e=n)}e||(console.error("Error: License key is required."),console.error("Usage: neocortex-client activate <license-key>"),console.error("Example: neocortex-client activate NX-PRO-ABC-123"),process.exit(1));try{const t=await o({licenseKey:e,serverUrl:i,nonInteractive:c});t.success?(console.log(t.message),process.exit(0)):(console.error(t.message),process.exit(1))}catch(t){const n=t instanceof Error?t.message:String(t);console.error(`Activation failed: ${n}`),process.exit(1)}break}case"cache-status":{console.log("Cache status requires an active client session."),console.log("Use this command within a running Neocortex client context."),process.exit(0);break}case"config":{const{configCliHandler:o}=await import("./commands/config.js"),e=await o(s);process.exit(e);break}case"refresh-memory":{const{refreshMemoryCliHandler:o}=await import("./commands/refresh-memory.js"),e=await o(s);process.exit(e);break}case"story-checkpoint":{const{storyCheckpointCliHandler:o}=await import("./commands/story-checkpoint.js"),e=await o(s);process.exit(e);break}case"native-agent":{const{nativeAgentCliHandler:o}=await import("./commands/native-agent.js"),e=await o(s);process.exit(e);break}case"update":{console.log("To update Neocortex, run:"),console.log("  neocortex update"),console.log(""),console.log("Or manually:"),console.log("  npm install -g @ornexus/neocortex@latest"),process.exit(0);break}default:console.error(`Unknown command: ${r}`),console.error('Run "neocortex-client --help" for usage information.'),process.exit(1)}}u().catch(a=>{console.error(`Fatal error: ${a instanceof Error?a.message:String(a)}`),process.exit(1)});

package/packages/client/dist/commands/invoke.d.ts

@@ -15,6 +15,7 @@ import { type RunnerBootstrapPolicyDecision } from '../continuity/runner-bootstr
 import { type RunnerSchedulerBootstrapOptions, type RunnerSchedulerBootstrapResult } from '../runner/scheduler.js';
 import { type ContinuityProcessingSummaryCursorTarget } from '../continuity/continuity-client-state-store.js';
 import type { ProjectEvidenceEnvelope } from '../evidence/types.js';
+import { detectNativeHostAttestation } from '../adapters/platform-detector.js';
 import { type InvokeEffectContext, type StrictReadOnlyInvokeEnvelope } from '../../../shared/dist/strict-readonly.js';
 import { type InvokeInputEvidenceV1, type InvokeInputEnvelopeV2, type InvokeInputSourceV2, type InvocationMalformedInputReasonV1, type InvocationAdmissionResultV1, type ProjectIdentityMigrationRequestV1 } from '../../../shared/dist/invocation/index.js';
 import { type P205TransientExecutionAuthority } from '../git/git-lifecycle-store.js';
@@ -426,6 +427,8 @@ export interface StateSnapshot {
      * adapter is unavailable for non-continuity commands.
      */
     readonly continuity?: unknown;
+    /** Request-only bounded native child observations from the private Git store. */
+    readonly nativeAgentDispatches?: unknown;
     /**
      * P158.06 -- optional client-side deterministic graph retrieval enrichment.
      * This is request-only metadata for server validation/consumption; it never
@@ -461,6 +464,7 @@ interface InvokeRequestBodyBase {
     readonly projectRoot: string;
     readonly stateSnapshot: StateSnapshot;
     readonly platformTarget?: string;
+    readonly nativeHostAttestation?: ReturnType<typeof detectNativeHostAttestation>;
     readonly projectId?: string;
     readonly projectIdentityMigration?: ProjectIdentityMigrationRequestV1;
     /** Public-safe proof that the transmitted/materialized args are byte-faithful. */