@nexus-cortex/cli 4.124.27 → 4.124.30

package/.cortex/orient

@@ -85,6 +85,30 @@ CHANGED
   fi
   BN=$(wc -l < "$W/.cortex/baseline.cksum" 2>/dev/null | tr -d ' ')
   echo "-- baseline: ${BN:-0} files recorded at start; \`sh .cortex/changed\` lists files you modified/added/deleted. Before finishing, run it and revert every change the task did not require."
+elif [ "${CORTEX_ORIENT_BASELINE:-0}" = "auto" ] && ! { command -v git >/dev/null 2>&1 && git -C "$W" rev-parse --is-inside-work-tree >/dev/null 2>&1; }; then
+  # auto (general work, 2026-09-27): a git repo already has `git status`, so skip it; otherwise keep the baseline OUTSIDE the project
+  # (the user's ~/.cortex, else /tmp), keyed by the workspace path, so nothing is written into the tree being worked on.
+  KEY=$(printf %s "$W" | cksum | cut -d' ' -f1)
+  BD="${HOME:-/tmp}/.cortex/baselines/$KEY"
+  mkdir -p "$BD" 2>/dev/null && [ -w "$BD" ] || { BD="${TMPDIR:-/tmp}/cortex-baselines/$KEY"; mkdir -p "$BD" 2>/dev/null; }
+  { printf '#!/bin/sh\n# Lists files modified / added / deleted in %s since orient recorded its start state.\nW=%s\nB=%s\n' "$W" "'$W'" "'$BD/baseline.cksum'"
+    cat <<'CHANGED'
+cd "$W" || exit 0
+[ -f "$B" ] || { echo "no baseline recorded ($B missing)"; exit 0; }
+T=$(mktemp 2>/dev/null || echo /tmp/cortex-now.$$)
+find . \( -path ./.git -o -path ./.cortex -o -name node_modules -o -name __pycache__ -o -name .venv -o -name venv -o -name .cache -o -name .pytest_cache -o -name .mypy_cache \) -prune -o -type f -size -20M -print 2>/dev/null | head -20000 | tr '\n' '\0' | xargs -0 cksum 2>/dev/null > "$T"
+awk 'function k(  f) { f=$0; sub(/^[0-9]+[ \t]+[0-9]+[ \t]+/, "", f); return f }
+  NR==FNR { b[k()]=$1" "$2; next } { n[k()]=$1" "$2 } END {
+  for (f in n) { if (!(f in b)) print "added     " f; else if (b[f] != n[f]) print "modified  " f }
+  for (f in b) if (!(f in n)) print "deleted   " f }' "$B" "$T" | sort -k2
+rm -f "$T"
+CHANGED
+  } > "$BD/changed" 2>/dev/null
+  if [ ! -f "$BD/baseline.cksum" ]; then
+    ( cd "$W" && find . \( -path ./.git -o -path ./.cortex -o -name node_modules -o -name __pycache__ -o -name .venv -o -name venv -o -name .cache -o -name .pytest_cache -o -name .mypy_cache \) -prune -o -type f -size -20M -print 2>/dev/null | head -20000 | tr '\n' '\0' | xargs -0 cksum 2>/dev/null > "$BD/baseline.cksum" )
+  fi
+  BN=$(wc -l < "$BD/baseline.cksum" 2>/dev/null | tr -d ' ')
+  echo "-- baseline: ${BN:-0} files recorded at start (not a git repo); \`sh $BD/changed\` lists files you modified/added/deleted. Before finishing, run it and revert changes to existing files the task did not require."
 fi
 # Bare-box hint (2026-09-03, operator-simplified): a task container may ship WITHOUT the language, compiler,
 # package or library the objective needs — on purpose (the agent phase is bare; internet is usually allowed).

package/.env.defaults

@@ -1124,6 +1124,20 @@ CORTEX_ENDTURN_GATE=true
 # P<0.0001 vs per-task control rates; 4 always-pass tasks lost. The judge quotes a failing blind check (specFrac 0.17-0.25, below the veto
 # fraction) as its own named check → ordinary veto → the agent reshapes correct output to the invented check. KEEP DARK; redesign so check
 # text never reaches the judge/writer (r-mimo64-val-2026-09-27.md §2).
+# CORTEX_JUDGE_SPEC_TEXT — R174e (2026-09-27, in tree): shown (default) | hidden. Hidden removes the spec checks' TEXT from the judge prompt and
+# the writer's veto message: spec evidence acts only through the averaged fraction gate (R174d); a judge CHECK line that echoes a spec
+# check is not run as a named check (closes the namedFailed bypass the sp arm hit); a fraction hold over a MEETS gives the writer a neutral
+# "re-verify each stated requirement against the task's own entry points; change nothing the task did not ask for" lead.
+# [LEDGER 2026-09-27 in tree] DARK — unit-tested; efficacy UNMEASURED (needs a MiMo cell: spec tests on + hidden vs the 4.124.27 base).
+#CORTEX_JUDGE_SPEC_TEXT=
+# CORTEX_ENDTURN_REQ_COVERAGE — EndTurn Stage 4f requirement coverage (2026-09-27, in tree). Evidence: MiMo tb64 sweep, 186 failing hidden tests
+# in 111 failed sessions (.bench/mimo/fail-criteria-sweep-v2.jsonl, reasoning-first labels): 101 check a requirement the task states (72) or
+# implies (29), and the agent's own verification covered it only partially; 85 assert details the task never gives (AST shape, exact source
+# lines, hashes) — out of reach for any verification lever. Stage 4f extracts the task's OWN requirement clauses deterministically (bullets +
+# must/exactly/do-not/preserve/remain/unchanged/only sentences; 3–12 per MiMo task) and, once per turn, rejects a finish whose `requirements`
+# attestation leaves clauses uncovered, quoting them verbatim — no model, no invented check (the R174 lesson). Needs CORTEX_ENDTURN_REQUIREMENTS.
+# Banks `req_coverage` {clauses, uncovered, nudged}. [LEDGER 2026-09-27 in tree] DARK — unit + gate tests; efficacy UNMEASURED (MiMo cell).
+#CORTEX_ENDTURN_REQ_COVERAGE=
 #CORTEX_JUDGE_SPEC_TESTS_SAMPLES=
 #CORTEX_JUDGE_SPEC_VETO_FRAC=
 # CORTEX_JUDGE_VETO_MIN_REMAINING / _GAP_HOLD_MIN_INTERVAL_MS / _GAP_HOLD_PLAN_MAX_SIMILARITY — R173c (4.121.0, 2026-09-20, cell g1
@@ -1766,6 +1780,8 @@ CORTEX_ORIENT_BOOTSTRAP=1
 # the MiMo validation cell (4.124.26, orient-v2 arm vs spec-tests arm vs the 4.124.20 K=3 control 59.9%) decides it.
 # [LEDGER 2026-09-27 @4.124.26] MiMo tb64 validation arm o2: 43/64 = 67.2% vs control 59.9% (K=3), +7.3 pts, P=0.019 vs per-task control
 # rates (one run). Positive single run — replicate (K=2 more) before flipping the default (r-mimo64-val-2026-09-27.md).
+# [LEDGER 2026-09-27 @4.124.27] NOT REPLICATED: five sweep arms on o2 + edit-scope pair pooled 194/320 = 60.6% (control 59.9%); o2's 43/64 was
+# most likely a high draw (the pair could offset it — no o2-only replicate). Stays DARK.
 #CORTEX_ORIENT_V2=
 # CORTEX_ORIENT_BASELINE / CORTEX_LIFT_PLAN_SCOPE — edit-scope pair (2026-09-27, r-mimo64-val-2026-09-27.md §8). MiMo tb64: the grader's
 # protected-file guard rejected 4-9 sessions per run (31 across 5 runs, ~10-14% of tasks) — a file outside the task's repair set was
@@ -1775,6 +1791,13 @@ CORTEX_ORIENT_BOOTSTRAP=1
 # are modified; ends with the changed-files check.
 # [LEDGER 2026-09-27 @4.124.27] DARK (both default off) — fixture-tested (dash; start state kept across orient re-runs; spaces in names);
 # efficacy UNMEASURED: the MiMo reasoning sweep carries both ON with an o2+both base arm.
+# [LEDGER 2026-09-27 in tree] general-work variants (operator: "how will this work in interactive sessions or other benchmarks"):
+# CORTEX_LIFT_PLAN_SCOPE=adaptive (named files bind; tests/runners/fixtures/data in scope only when the task asks; revert EXISTING files only)
+# and CORTEX_ORIENT_BASELINE=auto (skip git repos; baseline stored outside the project in ~/.cortex/baselines, else /tmp). true / 1 are
+# unchanged = what the MiMo sweep measures. Scope only reaches headless sessions: the lift planner is skipped on a TTY unless
+# CORTEX_LIFT_PLAN_INTERACTIVE=true. DARK; validate adaptive/auto on TB2.1 or TB4.0 (build-style tasks) before any default.
+# [LEDGER 2026-09-27 @4.124.27] MiMo sweep (r-mimo64-sweep-2026-09-27.md): with SCOPE=true + BASELINE=1 on the o2 config, protected-file rejects
+# fell to 13/320 (4.1%) vs 31/320 (9.7%) in the five prior runs — mechanism works; pass rate unchanged (5 arms pooled 60.6% vs control 59.9%). DARK.
 #CORTEX_ORIENT_BASELINE=
 #CORTEX_LIFT_PLAN_SCOPE=
 # [LEDGER 2026-09-02 @4.89.0] code default 30 (4.88.0) — 20 made the break rung (2N=24) unreachable; preserves 40%/80% density semantics.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.124.27",
+  "version": "4.124.30",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.27",
+    "@nexus-cortex/core": "4.124.30",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",