@ornexus/neocortex 4.60.54 → 4.60.56

package/dist/sbom.cdx.json

@@ -984,7 +984,7 @@
       "version": "1.26.0"
     },
     {
-      "bom-ref": "@neocortex/client@4.60.54",
+      "bom-ref": "@neocortex/client@4.60.56",
       "group": "@neocortex",
       "name": "client",
       "properties": [
@@ -993,9 +993,9 @@
           "value": "node_modules/@neocortex/client"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/client@4.60.54",
+      "purl": "pkg:npm/%40neocortex/client@4.60.56",
       "type": "library",
-      "version": "4.60.54"
+      "version": "4.60.56"
     },
     {
       "bom-ref": "@neocortex/core@0.1.0",
@@ -1012,7 +1012,7 @@
       "version": "0.1.0"
     },
     {
-      "bom-ref": "@neocortex/server@4.60.54",
+      "bom-ref": "@neocortex/server@4.60.56",
       "group": "@neocortex",
       "name": "server",
       "properties": [
@@ -1021,12 +1021,12 @@
           "value": "node_modules/@neocortex/server"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/server@4.60.54",
+      "purl": "pkg:npm/%40neocortex/server@4.60.56",
       "type": "library",
-      "version": "4.60.54"
+      "version": "4.60.56"
     },
     {
-      "bom-ref": "@neocortex/shared@4.60.54",
+      "bom-ref": "@neocortex/shared@4.60.56",
       "group": "@neocortex",
       "name": "shared",
       "properties": [
@@ -1035,9 +1035,9 @@
           "value": "node_modules/@neocortex/shared"
         }
       ],
-      "purl": "pkg:npm/%40neocortex/shared@4.60.54",
+      "purl": "pkg:npm/%40neocortex/shared@4.60.56",
       "type": "library",
-      "version": "4.60.54"
+      "version": "4.60.56"
     },
     {
       "bom-ref": "@opentelemetry/api-logs@0.214.0",
@@ -9405,17 +9405,17 @@
       "dependsOn": [
         "@clack/prompts@1.0.1",
         "@modelcontextprotocol/sdk@1.26.0",
-        "@neocortex/client@4.60.54",
+        "@neocortex/client@4.60.56",
         "@neocortex/core@0.1.0",
-        "@neocortex/server@4.60.54",
-        "@neocortex/shared@4.60.54",
+        "@neocortex/server@4.60.56",
+        "@neocortex/shared@4.60.56",
         "better-sqlite3@12.11.1",
         "execa@9.6.1",
         "node-cache@5.1.2",
         "picocolors@1.1.1",
         "zod@4.4.3"
       ],
-      "ref": "@ornexus/neocortex@4.60.54"
+      "ref": "@ornexus/neocortex@4.60.56"
     },
     {
       "dependsOn": [
@@ -9456,7 +9456,7 @@
         "@fastify/jwt@10.2.2",
         "@fastify/rate-limit@10.3.0",
         "@fastify/static@10.1.3",
-        "@neocortex/shared@4.60.54",
+        "@neocortex/shared@4.60.56",
         "@sentry/node@10.62.0",
         "bcryptjs@3.0.3",
         "drizzle-orm@0.45.2",
@@ -9469,7 +9469,7 @@
         "stripe@20.4.1",
         "yaml@2.9.0"
       ],
-      "ref": "@neocortex/server@4.60.54"
+      "ref": "@neocortex/server@4.60.56"
     },
     {
       "dependsOn": [
@@ -9590,16 +9590,16 @@
     },
     {
       "dependsOn": [
-        "@neocortex/shared@4.60.54",
+        "@neocortex/shared@4.60.56",
         "better-sqlite3@12.11.1",
         "jose@6.2.2",
         "keytar@7.9.0"
       ],
-      "ref": "@neocortex/client@4.60.54"
+      "ref": "@neocortex/client@4.60.56"
     },
     {
       "dependsOn": [
-        "@neocortex/shared@4.60.54"
+        "@neocortex/shared@4.60.56"
       ],
       "ref": "@neocortex/core@0.1.0"
     },
@@ -10653,7 +10653,7 @@
       "ref": "@lukeed/ms@2.0.2"
     },
     {
-      "ref": "@neocortex/shared@4.60.54"
+      "ref": "@neocortex/shared@4.60.56"
     },
     {
       "ref": "@opentelemetry/api@1.9.1"
@@ -11136,8 +11136,8 @@
   "metadata": {
     "component": {
       "author": "OrNexus Team",
-      "bom-ref": "@ornexus/neocortex@4.60.54",
-      "description": "Neocortex v4.60.54 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+      "bom-ref": "@ornexus/neocortex@4.60.56",
+      "description": "Neocortex v4.60.56 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
       "externalReferences": [
         {
           "comment": "as detected from PackageJson property \"bugs.url\"",
@@ -11170,9 +11170,9 @@
           "value": ""
         }
       ],
-      "purl": "pkg:npm/%40ornexus/neocortex@4.60.54?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
+      "purl": "pkg:npm/%40ornexus/neocortex@4.60.56?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2FOrNexus-AI%2Fneocortex.git",
       "type": "application",
-      "version": "4.60.54"
+      "version": "4.60.56"
     },
     "tools": {
       "components": [

package/install.ps1

@@ -17,7 +17,7 @@ param(
     [string]$ServerUrl = ('https://{0}.{1}.{2}' -f 'api','neocortex','sh')
 )
 
-$VERSION = "4.60.54"
+$VERSION = "4.60.56"
 
 # =============================================================================
 # CONFIGURACOES

package/install.sh

@@ -4,7 +4,7 @@
 # Development Orchestrator
 
 # Versao do instalador
-VERSION="4.60.54"
+VERSION="4.60.56"
 
 # Flags
 MIGRATION_DETECTED=false

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ornexus/neocortex",
-  "version": "4.60.54",
-  "description": "Neocortex v4.60.54 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
+  "version": "4.60.56",
+  "description": "Neocortex v4.60.56 - Orquestrador de Desenvolvimento de Epics & Stories para Claude Code",
   "keywords": [
     "claude",
     "claude-code",
@@ -63,6 +63,9 @@
     "packages/shared/dist/nx-invoke-signature.js",
     "packages/shared/dist/command-registry-contract.js",
     "packages/shared/dist/strict-readonly.js",
+    "packages/shared/dist/frontmatter-context-contract.js",
+    "packages/shared/dist/yolo/spec-envelope.js",
+    "packages/shared/dist/yolo/change-evidence.js",
     "packages/shared/dist/invocation/",
     "packages/shared/dist/state/",
     "packages/shared/dist/continuity/goal-operation-authority.js",

package/packages/client/dist/commands/invoke.d.ts

@@ -16,6 +16,8 @@ import { type RunnerSchedulerBootstrapOptions, type RunnerSchedulerBootstrapResu
 import { type ContinuityProcessingSummaryCursorTarget } from '../continuity/continuity-client-state-store.js';
 import type { ProjectEvidenceEnvelope } from '../evidence/types.js';
 import { detectNativeHostAttestation } from '../adapters/platform-detector.js';
+import type { YoloSpecEnvelopeV1 } from '../../../shared/dist/yolo/spec-envelope.js';
+import type { YoloChangeEvidenceV1 } from '../../../shared/dist/yolo/change-evidence.js';
 import { type InvokeEffectContext, type StrictReadOnlyInvokeEnvelope } from '../../../shared/dist/strict-readonly.js';
 import { type InvokeInputEvidenceV1, type InvokeInputEnvelopeV2, type InvokeInputSourceV2, type InvocationMalformedInputReasonV1, type InvocationAdmissionResultV1, type ProjectIdentityMigrationRequestV1 } from '../../../shared/dist/invocation/index.js';
 import { type P205TransientExecutionAuthority } from '../git/git-lifecycle-store.js';
@@ -50,6 +52,10 @@ export interface InvokeOptions {
     readonly environment?: NodeJS.ProcessEnv;
     /** P205.05 exact outer transport policy; never inferred from response metadata. */
     readonly strictReadOnly?: boolean;
+    /** Explicit P222.16 beta; never inferred from Codex being installed. */
+    readonly privateExecutionBeta?: boolean;
+    /** Test-only parent for the root-owned private YOLO clone; CLI leaves unset. */
+    readonly privateExecutionWorkspaceParent?: string;
 }
 /**
  * Normalize the project root received from wrappers/CLI flags.
@@ -93,6 +99,8 @@ export interface InvokeWatchOptions {
     readonly sleep?: (ms: number, signal?: AbortSignal) => Promise<void>;
     /** Keep watch polling on the physical read-only SQLite path. */
     readonly strictReadOnly?: boolean;
+    /** Do not echo free-form local summaries or cursor fields during private execution. */
+    readonly protectedOutput?: boolean;
 }
 type InvokeWatchTargetResolutionState = 'inactive' | 'pending' | 'resolved' | 'unresolved' | 'malformed' | 'ambiguous' | 'multiple' | 'unsafe' | 'unavailable';
 type InvokeWatchSnapshotStatus = 'not_requested' | 'pending' | 'available' | 'empty' | 'unavailable' | 'unsafe';
@@ -231,6 +239,7 @@ export interface InvokeCliParsedOptions {
     readonly serverUrl?: string;
     readonly platformTarget?: string;
     readonly strictReadOnly: boolean;
+    readonly privateExecutionBeta: boolean;
 }
 type InvokeCommandLevelWatchCommand = 'goal' | 'loop' | 'jobs';
 type InvokeCommandLevelWatchOperation = 'create' | 'start' | 'resume' | 'run-once' | 'watch';
@@ -465,6 +474,24 @@ interface InvokeRequestBodyBase {
     readonly stateSnapshot: StateSnapshot;
     readonly platformTarget?: string;
     readonly nativeHostAttestation?: ReturnType<typeof detectNativeHostAttestation>;
+    readonly privateExecution?: {
+        readonly schemaVersion: 1;
+        readonly hostKind: 'codex-cli';
+        readonly hostVersion: string;
+        readonly sandboxProof: {
+            readonly schemaVersion: 5;
+            readonly trust: 'client-self-attested';
+            readonly credentialKind: 'chatgpt-subscription';
+            readonly authIsolation: 'passed';
+            readonly workspaceWrite: 'passed';
+            readonly gitControlWriteDenied: 'passed';
+            readonly gitLifecycleReadDenied: 'passed';
+            readonly mcpIsolation: 'passed';
+            readonly environmentIsolation: 'passed';
+            readonly networkDenied: 'passed';
+            readonly observedAtMs: number;
+        };
+    };
     readonly projectId?: string;
     readonly projectIdentityMigration?: ProjectIdentityMigrationRequestV1;
     /** Public-safe proof that the transmitted/materialized args are byte-faithful. */
@@ -473,6 +500,8 @@ interface InvokeRequestBodyBase {
     readonly registryVersion: string;
     readonly registryChecksum: string;
     readonly strictReadOnly?: StrictReadOnlyInvokeEnvelope;
+    readonly yoloSpecEnvelope?: YoloSpecEnvelopeV1;
+    readonly yoloChangeEvidence?: YoloChangeEvidenceV1;
 }
 export type InvokeRequestBody = InvokeRequestBodyBase & ({
     readonly args: string;
@@ -620,6 +649,9 @@ export declare function watchContinuityProcessingSummaries(options: InvokeWatchO
 export declare function resolveInvokeCommandLevelWatch(args: string): InvokeCommandLevelWatchResolution;
 export declare function resolveInvokeWatchTarget(metadata: Record<string, unknown> | undefined, args: string): InvokeWatchTarget;
 export declare function sendInvokeRequest(serverUrl: string, body: InvokeRequestBody, authToken: string, retryOptions?: InvokePhysicalRetryOptions): Promise<SendResult>;
+/** P222.16: one physical signed attempt; a consumed lease is never retried. */
+export declare function sendPrivateExecutionConsumeRequest(serverUrl: string, body: Record<string, unknown>, authToken: string): Promise<unknown>;
+export declare function sendPrivateExecutionCancelRequest(serverUrl: string, body: Record<string, unknown>, authToken: string): Promise<boolean>;
 export declare function sendEpicClaimAcknowledgement(serverUrl: string, authToken: string, input: {
     readonly claimId: string;
     readonly projectId: string;