# nexuscrm-worker

App-blind, process-local worker orchestration for NexusCRM L0.

The module owns execution opportunities: coalesced local wake, cross-process
generation probes, exact future due timers with overdue-loop suppression,
bounded continuation, periodic reconciliation, capacity, graceful drain, panic
containment, and common process observations.

It does not own durable acceptance, work identity, queue schema, claim order,
leases, heartbeat persistence, effect execution, retry, poison, or uncertain
remote outcomes. Those facts stay in the domain source and its store.

If an attempt returns an error, ignores cancellation beyond the configured
shutdown bound, or a mutating Source operation has an unknown durable outcome,
the controller becomes permanently unusable and Run returns an error. The
caller must fail the process; replay is safe only when the Source explicitly
proves that no durable transition committed.

The module is stdlib-only and lives in the NexusCRM repository release
boundary. External L0 consumers may adopt a published version without
depending on `backend` or transport packages.

Current status: mechanism and test vocabulary only. No production work family
has switched claim ownership in this change.