@nexus-cortex/cli 4.124.32 → 4.124.33

package/.cortex/inventory

@@ -41,8 +41,19 @@ W = os.path.abspath(sys.argv[1])
 SKIP_DIRS = {'.git', 'node_modules', '__pycache__', '.venv', 'venv', '.cortex', '.cache', '.pytest_cache', '.mypy_cache', '.tox', '.npm',
              '.gradle', '.m2', 'site-packages', 'dist-packages', '.idea', '.vscode', '.addon-tools'}
 MAX_WALK = 60000
-out = []
-p = out.append
+# Output is bucketed per section and emitted DECISIVE-FIRST (2026-09-29): the model reads orient through `| head -50/-100` in ~93% of sessions
+# (504/541, .bench/mimo/boot-prompt-audit.py) and cut the inventory in 8/17 cw sessions — so what decides a task (how it is checked, which
+# copy of the code runs, missing deps, services, data outside the workdir) comes before the long per-file listing. Computation order is unchanged.
+SECTIONS, CUR = {}, ['header']
+EMIT = ['header', 'checked', 'python', 'node', 'services', 'outside', 'structure', 'files', 'env']
+
+
+def sec(name):
+    CUR[0] = name
+
+
+def p(line):
+    SECTIONS.setdefault(CUR[0], []).append(line)
 
 
 def rel(x):
@@ -191,6 +202,7 @@ counts = ', '.join(f'{r} {len(v)}' for r, v in sorted(by_role.items(), key=lambd
 p('by role: ' + counts)
 
 # ---------------------------------------------------------------- 1. verification + contracts (PRIORITY — never capped)
+sec('checked')
 chk = by_role.get('checker/runner', []); con = by_role.get('contract/spec', [])
 if chk or con:
     p('-- HOW THIS TASK IS CHECKED (task-shipped checkers/runners and contracts — read these before building) --')
@@ -213,6 +225,7 @@ if chk or con:
         p('  test dirs: ' + ', '.join(shown) + (f' (+{len(tests)-12} more — find . -type d -name "test*")' if len(tests) > 12 else ''))
 
 # ---------------------------------------------------------------- 2. structure: every dir with counts (capped with marker)
+sec('structure')
 p('-- STRUCTURE (dir: files directly inside) --')
 dl = sorted(d for d in dirs if d != '.')
 top = [d for d in dl if d.count('/') <= 1]
@@ -226,6 +239,7 @@ if deep:
     p(f'  ({len(deep)} deeper directories — find . -mindepth 3 -type d)')
 
 # ---------------------------------------------------------------- 3. files by role with a peek (priority roles in full, bulk capped)
+sec('files')
 CAPS = {'source': 40, 'doc': 30, 'data': 40, 'manifest/config': 30, 'test': 20, 'other': 20}
 ORDER = ['doc', 'manifest/config', 'source', 'data', 'test', 'other']
 for r in ORDER:
@@ -244,6 +258,7 @@ for r in ORDER:
                f'list: find . -type f | grep -v -e .git/ -e node_modules  (role here = {r})'))
 
 # ---------------------------------------------------------------- 4. python: which interpreter, which copy of the code runs, missing deps
+sec('python')
 def run(cmd, timeout=20):
     try:
         r = subprocess.run(cmd, capture_output=True, text=True, timeout=timeout, cwd=W)
@@ -307,6 +322,7 @@ if declared:
         p(f'  all {len(declared)} declared python dependencies are installed')
 
 # ---------------------------------------------------------------- 5. node
+sec('node')
 pj = [f for f, _ in by_role.get('manifest/config', []) if os.path.basename(f) == 'package.json' and f.count('/') <= 2 and 'node_modules' not in f]
 for f in pj[:3]:
     try:
@@ -321,6 +337,7 @@ for f in pj[:3]:
       (f', NOT installed: {", ".join(miss[:20])}' + (' …' if len(miss) > 20 else '') if miss else (', node_modules present' if os.path.isdir(nm) else ', no node_modules')))
 
 # ---------------------------------------------------------------- 6. task environment (from the container's own init env; secrets redacted)
+sec('env')
 BOILER = {'PATH', 'HOME', 'HOSTNAME', 'TERM', 'SHLVL', 'PWD', 'OLDPWD', '_', 'LANG', 'LC_ALL', 'DEBIAN_FRONTEND', 'container', 'GPG_KEY',
           'PYTHON_VERSION', 'PYTHON_SHA256', 'PYTHON_PIP_VERSION', 'PYTHON_GET_PIP_URL', 'PYTHON_GET_PIP_SHA256', 'PYTHON_SETUPTOOLS_VERSION',
           'NODE_VERSION', 'YARN_VERSION', 'LS_COLORS', 'SSL_CERT_DIR', 'SSL_CERT_FILE', 'NVIDIA_VISIBLE_DEVICES', 'NVIDIA_DRIVER_CAPABILITIES'}
@@ -349,6 +366,7 @@ if src_note is not None:
         if len(keep) > 40: p(more(len(keep) - 40, 'variables', 'cat /proc/1/environ | tr "\\0" "\\n"'))
 
 # ---------------------------------------------------------------- 7. services + paths outside the workdir
+sec('services')
 hosts = []
 try:
     for l in open('/etc/hosts'):
@@ -372,6 +390,7 @@ if hosts or ports or urlvars:
     if hosts: p('  other hosts on this network: ' + ', '.join(sorted(set(hosts))[:20]))
     if ports: p('  listening locally: ' + ', '.join(str(x) for x in sorted(set(ports))[:20]))
     for u in urlvars[:12]: p('  ' + u)
+sec('outside')
 outside = []
 for d in ('/shared', '/data', '/mnt', '/srv', '/workspace', '/input', '/inputs', '/output', '/outputs', '/reference', '/resources', '/task', '/opt/task'):
     if os.path.isdir(d) and not W.startswith(d) and not d.startswith(W):
@@ -386,5 +405,5 @@ for d in ('/shared', '/data', '/mnt', '/srv', '/workspace', '/input', '/inputs',
         if n: outside.append(f'{d} ({n}{"+" if capped else ""} files)')
 if outside:
     p('-- OUTSIDE THE WORKDIR (task data may live here) -- ' + ', '.join(outside) + ' — list: find <dir> -type f | head -100')
-print('\n'.join(out))
+print('\n'.join(line for name in EMIT for line in SECTIONS.get(name, [])))
 PYINV

package/.cortex/orient

@@ -22,8 +22,11 @@ fi
 # files with a content peek, which copy of the code imports, missing deps, task env, services, data outside the workdir) replaces the
 # workspace map and the v2 verification section; the tooling / git / baseline / setup lines below still print. Unset = unchanged output.
 INV=""; if [ "${CORTEX_INVENTORY:-0}" = "1" ]; then for c in "$(dirname "$0")/inventory" "${CORTEX_ROOT:-/nonexistent}/.cortex/inventory"; do [ -f "$c" ] && { INV="$c"; break; }; done; fi
+INV_OUT=""
 if [ -n "$INV" ]; then
-  sh "$INV" "$W" 2>/dev/null
+  # Captured here, PRINTED after the setup line below (2026-09-29): the model reads orient through `| head -50/-100` in ~93% of sessions,
+  # and with the inventory first 8/17 cw sessions lost orient's own short lines (git, the `-- baseline:` revert instruction, setup).
+  INV_OUT=$(sh "$INV" "$W" 2>/dev/null)
 else
 echo "== WORKSPACE MAP: $W =="
 ls -1A "$W" 2>/dev/null | head -40
@@ -148,7 +151,22 @@ if [ "${CORTEX_ORIENT_BOOTSTRAP:-0}" = "1" ] && { ! command -v python3 >/dev/nul
   PM=""; for m in apt-get apk dnf yum pacman zypper brew; do command -v "$m" >/dev/null 2>&1 && { PM="$m"; break; }; done
   ROOT=$([ "$(id -u 2>/dev/null)" = "0" ] && echo yes || echo no)
   GUARD=""; [ "$V2" = "1" ] && GUARD=" Install into the system or a venv, never into the task's own source or vendored tree."
+  # With the inventory on and a python interpreter present, the inventory has already checked the workspace manifests (requirements/
+  # pyproject/package.json) against what is installed. Replace the speculative "may be missing" paragraph with those facts
+  # (r-orient-deficiencies-2026-09-29 §3.3: "print only the MISSING ones … keep the generic line otherwise"); keep the install discipline
+  # (once, cached, never into the task's source/vendored tree). No manifest, no python, or no inventory = the generic line below, unchanged.
+  INV_MF=""; INV_MISS=""
+  if [ -n "$INV_OUT" ] && { command -v python3 >/dev/null 2>&1 || command -v python >/dev/null 2>&1; }; then
+    printf '%s\n' "$INV_OUT" | grep -qE "declared but NOT installed|declared python dependencies are installed|^-- NODE " && INV_MF=1
+    printf '%s\n' "$INV_OUT" | grep -qE "declared but NOT installed|^-- NODE .*NOT installed:" && INV_MISS=1
+  fi
+  if [ -n "$INV_MF" ] && [ -n "$INV_MISS" ]; then
+    echo "-- setup: the workspace manifests declare dependencies that are NOT installed (listed in the inventory below; pkg-mgr=${PM:-none}, root=$ROOT). Install what the task needs ONCE and reuse it, with a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice.$GUARD Pin versions, then verify with a real run before finishing."
+  elif [ -n "$INV_MF" ]; then
+    echo "-- setup: the declared dependencies are installed (see the inventory below). If you still need a package, install it once$( [ "$V2" = "1" ] && echo " into the system or a venv, never into the task's own source or vendored tree" )."
+  else
   echo "-- setup: this box may be missing a tool/language/library the task needs (pkg-mgr=${PM:-none}, root=$ROOT). If so, INSTALL what you need yourself following standard practice (the system package manager, or the language's own installer); install ONCE and reuse it, and prefer a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice.$GUARD Pin versions, then verify with a real run before finishing. An empty box is part of the task, not an error."
+  fi
 fi
 # orient v2 — VERIFICATION ENTRY POINTS: how this task's correctness is checked, so work is built and verified against the real
 # criteria, not the agent's own guess (MiMo K=3: in 57/79 failures the agent's own test passed on a wrong solution). Same usage-line
@@ -169,6 +187,8 @@ for f in pytest.ini tox.ini setup.cfg pyproject.toml Makefile package.json; do
 done
 TD=$(find . -maxdepth 3 -type d \( -name tests -o -name test \) 2>/dev/null | grep -vE "node_modules|/\.|site-packages" | head -4 | tr '\n' ' ')
 fi
+# The inventory (captured above) prints AFTER orient's short facts — tooling, git, baseline, setup — so a `| head -N` read keeps them.
+[ -n "$INV" ] && printf '%s\n' "$INV_OUT"
 if [ -n "$VE$TC$TD" ] && [ -z "$INV" ]; then
   echo "== VERIFICATION ENTRY POINTS (build to and verify against these — not a test you invent) =="
   for f in $VE; do

package/.env.defaults

@@ -1806,6 +1806,14 @@ CORTEX_ORIENT_BOOTSTRAP=1
 # end with the exact command to list the rest. Python-first, POSIX-sh fallback; fixture 0.37 s. Pair with CORTEX_STEER_INPUTS=full (the
 # default env-report caps of 2000-3000 chars would cut it — with a marker only under full).
 # [LEDGER 2026-09-29 in tree] DARK — built + fixture-tested; not released; efficacy UNMEASURED (TB4.0 f66-shape cell vs f66 control).
+# [LEDGER 2026-09-29 @4.124.32] released dark; MiMo cw1/cw2 validation launched. Next release: with the inventory on (python present + a
+# manifest found) orient's bootstrap `-- setup:` paragraph states the inventory's facts instead of "this box may be missing…" — missing
+# declared deps → install-once line (+ vendored-tree guard under v2); all installed → one short line; no manifest / no python → the
+# generic line unchanged (r-orient-deficiencies §3.3). Unset inventory = byte-identical (tested).
+# Next release also REORDERS for the model's own `| head -50/-100` (504/541 sessions): orient prints its short lines (tooling, git,
+# `-- baseline:`, setup) BEFORE the inventory, and the inventory emits decisive-first (checked → python → node → services → outside →
+# structure → files → env). Evidence: first 17 cw2 sessions on 4.124.32 — orient cut before its end in 8/17, losing the baseline revert
+# line (the scope pair's mechanism). Fixture: 0/4 short lines survived head -50 before, 4/4 after; line set unchanged.
 #CORTEX_INVENTORY=
 # CORTEX_STEER_INPUTS — steering-prompt input sizing (2026-09-29, r-steering-input-truncation-2026-09-29): every steering prompt sliced its
 # inputs with NO marker (judge workspace delta cut in 56% of verdicts, lift plan cut for the judge/exit planner in >=62%, the planner saw 2000

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.124.32",
+  "version": "4.124.33",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.32",
+    "@nexus-cortex/core": "4.124.33",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",