nexus-agents 12.2.1 → 12.3.0

package/dist/{chunk-LIXEB5EN.js → chunk-LJ2QVML4.js}

@@ -26,7 +26,7 @@ import {
   toolSuccess,
   withProgressHeartbeat,
   wrapToolWithTimeout
-} from "./chunk-T6C4BD24.js";
+} from "./chunk-VBO6SHQY.js";
 import {
   getToolMemory
 } from "./chunk-3TETLWLB.js";
@@ -9996,4 +9996,4 @@ export {
   CONSENSUS_VOTE_TOOL_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-LIXEB5EN.js.map
+//# sourceMappingURL=chunk-LJ2QVML4.js.map

package/dist/{chunk-T6C4BD24.js → chunk-VBO6SHQY.js}

@@ -35,7 +35,7 @@ import {
 
 // src/version.ts
 import semver from "semver";
-var VERSION = true ? "12.2.1" : "dev";
+var VERSION = true ? "12.3.0" : "dev";
 var NODE_ENGINE_RANGE = ">=24";
 function isNodeVersionSupported(version) {
   return semver.satisfies(version, NODE_ENGINE_RANGE);
@@ -2615,4 +2615,4 @@ export {
   DEFAULT_CONSENSUS_CONFIG,
   ConsensusMetricsSchema
 };
-//# sourceMappingURL=chunk-T6C4BD24.js.map
+//# sourceMappingURL=chunk-VBO6SHQY.js.map

package/dist/cli.js

@@ -203,7 +203,7 @@ import {
   validateWorkflow,
   withPanelWorkspace,
   wrapInMarkdownFence
-} from "./chunk-5G3UAVUK.js";
+} from "./chunk-77KDH7HO.js";
 import "./chunk-XIKYDLXZ.js";
 import {
   fenceExternalContent,
@@ -225,7 +225,7 @@ import {
   recordVoteDecisionCost,
   registerConsensusVoteTool,
   toRecordDecision
-} from "./chunk-LIXEB5EN.js";
+} from "./chunk-LJ2QVML4.js";
 import {
   allOf,
   anyOf
@@ -267,7 +267,7 @@ import {
   renderPlanAsResearch,
   runImprovementReview,
   scanForSecrets
-} from "./chunk-UVHJW6FI.js";
+} from "./chunk-2KTKBUPW.js";
 import {
   NODE_ENGINE_RANGE,
   VERSION,
@@ -281,7 +281,7 @@ import {
   stagePolicyFirewallForRollout,
   toSdkCallback,
   wrapToolWithTimeout
-} from "./chunk-T6C4BD24.js";
+} from "./chunk-VBO6SHQY.js";
 import "./chunk-KMGKOF5P.js";
 import "./chunk-4GDMHCKX.js";
 import "./chunk-I2THTVA4.js";
@@ -21087,7 +21087,7 @@ function startImprovementReviewScheduler(options) {
   let running = false;
   const runOnce = async () => {
     try {
-      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-6OJ4I66W.js");
+      const { runImprovementReview: runImprovementReview2, ImprovementReviewInputSchema: ImprovementReviewInputSchema2 } = await import("./improvement-review-PMTD4DVK.js");
       const input = ImprovementReviewInputSchema2.parse({ fileIssues });
       const result = await runImprovementReview2(input, { logger: logger22 });
       logger22.info("Scheduled improvement_review complete", {

package/dist/{consensus-vote-O23FRFQT.js → consensus-vote-NHMTEXE7.js}

@@ -10,9 +10,9 @@ import {
   resetCorrelationTracker,
   runConsensusForGoal,
   unwrapVoteOrThrow
-} from "./chunk-LIXEB5EN.js";
+} from "./chunk-LJ2QVML4.js";
 import "./chunk-EZNIYU5T.js";
-import "./chunk-T6C4BD24.js";
+import "./chunk-VBO6SHQY.js";
 import "./chunk-3TETLWLB.js";
 import "./chunk-RGB5OTRZ.js";
 import "./chunk-47X2J6KX.js";
@@ -60,4 +60,4 @@ export {
   runConsensusForGoal,
   unwrapVoteOrThrow
 };
-//# sourceMappingURL=consensus-vote-O23FRFQT.js.map
+//# sourceMappingURL=consensus-vote-NHMTEXE7.js.map

package/dist/{improvement-review-6OJ4I66W.js → improvement-review-PMTD4DVK.js}

@@ -10,8 +10,8 @@ import {
   loadSelfEvalSignals,
   registerImprovementReviewTool,
   runImprovementReview
-} from "./chunk-UVHJW6FI.js";
-import "./chunk-T6C4BD24.js";
+} from "./chunk-2KTKBUPW.js";
+import "./chunk-VBO6SHQY.js";
 import "./chunk-TYLE7Z2S.js";
 import "./chunk-JHTL4P4L.js";
 import "./chunk-ZKWBLGZN.js";
@@ -39,4 +39,4 @@ export {
   registerImprovementReviewTool,
   runImprovementReview
 };
-//# sourceMappingURL=improvement-review-6OJ4I66W.js.map
+//# sourceMappingURL=improvement-review-PMTD4DVK.js.map

package/dist/index.d.ts

@@ -35300,6 +35300,18 @@ declare function runBenchmark<TInstance, TPrediction, TEvalResult>(adapter: Benc
  * @module pipeline/task-contract
  */
 
+/** Explicit capability requirement specification (Task T05, Conformance Case C35). */
+declare const CapabilityRequirementSchema: z.ZodObject<{
+    id: z.ZodString;
+    operation: z.ZodString;
+    resourceRef: z.ZodOptional<z.ZodString>;
+    scope: z.ZodOptional<z.ZodString>;
+    mode: z.ZodDefault<z.ZodEnum<{
+        advisory: "advisory";
+        enforcing: "enforcing";
+    }>>;
+}, z.core.$strip>;
+type CapabilityRequirement = z.infer<typeof CapabilityRequirementSchema>;
 /** All valid task lifecycle statuses. */
 declare const TASK_STATUSES: readonly ["intake", "clarifying", "planning", "approved", "executing", "validating", "done", "failed"];
 /** All valid pipeline stage types. */
@@ -35323,7 +35335,15 @@ declare const ArtifactRefSchema: z.ZodObject<{
         vote: "vote";
     }>;
 }, z.core.$strip>;
-/** Unified task lifecycle contract. */
+/**
+ * Unified task lifecycle contract.
+ *
+ * Capability representations note:
+ * - `requiredCapabilities` and `capabilityGaps` track inferred or observed tool/expert
+ *   capabilities from LLM task analysis.
+ * - `capabilityRequirements` specifies explicit, declarative requirements with execution
+ *   enforcement modes ('enforcing' | 'advisory') for worker dispatch gates.
+ */
 declare const TaskContractSchema: z.ZodObject<{
     id: z.ZodString;
     description: z.ZodString;
@@ -35379,6 +35399,28 @@ declare const TaskContractSchema: z.ZodObject<{
     updatedAt: z.ZodNumber;
     completedAt: z.ZodOptional<z.ZodNumber>;
     error: z.ZodOptional<z.ZodString>;
+    contractVersion: z.ZodOptional<z.ZodString>;
+    capabilityRequirements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        operation: z.ZodString;
+        resourceRef: z.ZodOptional<z.ZodString>;
+        scope: z.ZodOptional<z.ZodString>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            advisory: "advisory";
+            enforcing: "enforcing";
+        }>>;
+    }, z.core.$strip>>>;
+    evidenceObligations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        artifactRef: z.ZodString;
+        claim: z.ZodOptional<z.ZodString>;
+        required: z.ZodDefault<z.ZodBoolean>;
+        mode: z.ZodDefault<z.ZodEnum<{
+            advisory: "advisory";
+            enforcing: "enforcing";
+        }>>;
+        receiptIssuer: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
 }, z.core.$strip>;
 /** Pipeline stage specification. */
 declare const StageSpecSchema: z.ZodObject<{
@@ -35834,6 +35876,66 @@ interface ResolvedPipelineDeps {
  */
 declare function resolvePipelineDeps(deps?: PipelineDeps): ResolvedPipelineDeps;
 
+declare const READINESS_LEVELS: readonly ["advertised", "authorized", "bound-to-worker", "probed", "used"];
+type ReadinessLevel = (typeof READINESS_LEVELS)[number];
+interface WorkerIdentityFields {
+    readonly workerId: string;
+    readonly sessionId: string;
+    readonly adapterId: string;
+    readonly toolSchemaDigest: string;
+    readonly grantDigest: string;
+    readonly subjectRevision: string;
+    readonly policyVersion: string;
+}
+interface WorkerBoundaryContext extends WorkerIdentityFields {
+    readonly approvedScratchDir?: string | undefined;
+    readonly advertisedOperations: readonly string[];
+    readonly authorizedOperations: readonly string[];
+}
+interface WorkerProbeExecutionOptions {
+    readonly isScratchProbe: boolean;
+    readonly scratchDir?: string | undefined;
+    readonly signal?: AbortSignal | undefined;
+}
+type WorkerProbeOutcome = {
+    readonly ok: true;
+    readonly latencyMs?: number | undefined;
+} | {
+    readonly ok: false;
+    readonly errorClass: string;
+    readonly message: string;
+};
+type WorkerResourceProbe = (requirement: CapabilityRequirement, context: WorkerBoundaryContext, options: WorkerProbeExecutionOptions) => Promise<WorkerProbeOutcome> | WorkerProbeOutcome;
+interface ReadinessProof extends WorkerIdentityFields {
+    readonly proofId: string;
+    readonly requirementId: string;
+    readonly operation: string;
+    readonly resourceRef?: string | undefined;
+    readonly scope?: string | undefined;
+    readonly level: ReadinessLevel;
+    readonly issuedAt: number;
+    readonly expiresAt: number;
+    readonly probedInScratch?: boolean | undefined;
+    readonly narrowerThanTargetWrite?: boolean | undefined;
+}
+interface WorkerReadinessConfig {
+    readonly context: WorkerBoundaryContext;
+    readonly probe: WorkerResourceProbe;
+    readonly cache?: ReadinessProofCache | undefined;
+    readonly now?: number | (() => number) | undefined;
+    readonly proofTtlMs?: number | undefined;
+    readonly probeTimeoutMs?: number | undefined;
+    readonly totalTimeoutMs?: number | undefined;
+    readonly signal?: AbortSignal | undefined;
+}
+declare class ReadinessProofCache {
+    private readonly store;
+    private readonly revokedIds;
+    putProof(p: ReadinessProof): void;
+    revokeProof(proofId: string): void;
+    getValidProof(ctx: WorkerBoundaryContext, req: CapabilityRequirement, now: number): ReadinessProof | undefined;
+}
+
 /** Compiled pipeline ready for execution. */
 interface CompiledPipeline {
     readonly graph: CompiledGraph;
@@ -35882,6 +35984,11 @@ interface PipelineExecuteOptions {
      * which bypassed per-repo routing (#2889).
      */
     readonly runsDir?: string;
+    /**
+     * Worker boundary readiness configuration (Task T06 / #5129).
+     * When provided, verifies capability requirements on the actual worker before execution.
+     */
+    readonly workerReadiness?: WorkerReadinessConfig;
 }
 /** Compile result type. */
 type CompileResult = {

package/dist/index.js

@@ -543,7 +543,7 @@ import {
   withLogging,
   withRetry,
   withRetryWrapper
-} from "./chunk-5G3UAVUK.js";
+} from "./chunk-77KDH7HO.js";
 import {
   AST_RULE_LANGUAGES,
   AST_RULE_SEVERITIES,
@@ -603,7 +603,7 @@ import {
   generateProposalId,
   parseAgentPairKey,
   registerConsensusVoteTool
-} from "./chunk-LIXEB5EN.js";
+} from "./chunk-LJ2QVML4.js";
 import {
   allOf
 } from "./chunk-EZNIYU5T.js";
@@ -657,7 +657,7 @@ import {
 import {
   ImprovementReviewInputSchema,
   registerImprovementReviewTool
-} from "./chunk-UVHJW6FI.js";
+} from "./chunk-2KTKBUPW.js";
 import {
   ConsensusAlgorithmSchema,
   ConsensusEngineConfigSchema,
@@ -694,7 +694,7 @@ import {
   toolSuccess,
   toolSuccessStructured,
   validateToolInput
-} from "./chunk-T6C4BD24.js";
+} from "./chunk-VBO6SHQY.js";
 import {
   FALLBACK_SCANNER_DATA,
   buildPlanFromAnalysis,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nexus-agents",
-  "version": "12.2.1",
+  "version": "12.3.0",
   "description": "Governance substrate for AI coding agents — adversarial PR review, drift-detected rules, tamper-evident audit, and closed-loop outcome routing for Claude, Codex, Gemini, and OpenCode",
   "mcpName": "io.github.nexus-substrate/nexus-agents",
   "license": "MIT",