@nexus-cortex/cli 4.124.35 → 4.124.37

package/.env.defaults

@@ -887,12 +887,14 @@ CORTEX_ENDTURN_GATE=true
 #CORTEX_TURN_STATUS=
 # CORTEX_EFFORT_RAMP — HB-EFFORT-RAMP (DARK, 2026-09-30). TB4.0 t4cw traces: the action model hit the 65,536-token output wall right
 # after reading the task (photonic r2 call 3, protein r1 call 6), trying to solve the routing plan / hidden rule in its head before writing
-# code; it only started acting once forced to low. The first N MAIN action calls of a turn (0 = initial request; retry/synthesis calls
-# don't count) run at the ramp level, then the configured effort. off (default) | <level>[:<calls>] (low:8) | on (= low:8). DeepSeek
-# levels are low | high | max (medium = high). Precedence: R153 backoff > effort pulse > ramp > request param > card. Events: effort_ramp
-# {phase start|end}. CAUTION: GLOBAL low was harmful on TB4.0 (e6: 3/29 vs high 10/29) — this lever only covers the opening calls.
-# [LEDGER 2026-09-30 @4.124.34] DARK — BUILT + tested (effortLevers.test.ts; effortLevers.integration.test.ts both loops: calls 0..N-1 at
-# the ramp level, then the configured effort; unset = untouched). NO bench arm yet.
+# code; it only started acting once forced to low. A window of MAIN action calls (counted from 1 per turn, 1 = initial request; retry/
+# synthesis calls don't count) runs at the ramp level, then the configured effort returns. off (default) | <level>:<from>-<to> (low:2-8)
+# | <level>:<n> (calls 2..n+1) | on (= low:2-8). The initial call is NEVER ramped: with the window at call 1 the 4.124.35 smoke skipped
+# the boot prompt's orient step in 2 of 3 runs (0 of 1 without). DeepSeek levels are low | high | max (medium = high). Precedence: R153
+# backoff > effort pulse > ramp > request param > card. Events: effort_ramp {phase start|end}. CAUTION: GLOBAL low was harmful on TB4.0
+# (e6: 3/29 vs high 10/29) — this lever covers only the window.
+# [LEDGER 2026-09-30 @4.124.36] DARK — BUILT + tested (effortLevers.test.ts; effortLevers.integration.test.ts both loops: low:2-3 → call 1
+# configured, calls 2-3 low, then configured; unset = untouched). NO bench arm yet (c21 arm C runs low:2-8).
 #CORTEX_EFFORT_RAMP=
 # CORTEX_COMPUTE_NUDGE / _TOKENS / _COOLDOWN / _MAX — HB-COMPUTE-NUDGE (DARK, 2026-09-30). Same traces: steps that DID act often carried
 # 35K-52K reasoning tokens first; photonic r2's productive stretch began when it ran the task's checker. After a round whose response
@@ -947,6 +949,19 @@ CORTEX_ENDTURN_GATE=true
 # unchanged low | medium | high) | legacy: the pre-R153c steps. reasoning_exhaustion events now carry {ladder, provider}.
 # [LEDGER 2026-09-30 @4.124.34] ON (bug fix) — unit-tested (effortLevers.test.ts). NO bench arm.
 #CORTEX_REASONING_EXHAUST_LADDER=
+# CORTEX_KILL_GUARD — HB-KILL-GUARD (2026-09-30, DEFAULT ON). The Bash tool runs every command as `bash -c "<command>"`, so a model's
+# `pkill -f "<pattern>"` always matches its OWN shell, and `pkill -f node` / `killall node` / `kill $(pgrep -f node)` reaches the harness
+# server. TB4.0 c21ba cumulative-layout-shift r3 (4.124.36): `pkill -f "next-server"; pkill -f "next start"; ...` → the tool shell got
+# SIGTERM and the run ended NonZeroAgentExitCodeError 29 min in. on (default): pkill / killall / pgrep wrappers first on the Bash tool's
+# PATH (foreground + run_in_background spawns); targets resolved with the real pgrep, then PROTECTED pids dropped — the calling shell +
+# its ancestors, the harness server (CORTEX_SERVER_PID) + its ancestors, and every process descended from those ancestors other than
+# through the server (bench adapter request, process recorder); anything the model started stays killable. Skips are reported on stderr
+# ("[harness] pkill: left N protected process(es) alone"). Not covered: `kill <literal pid>`, `ps | xargs kill`, TmuxSession panes.
+# off: no wrappers, spawn env unchanged.
+# [LEDGER 2026-09-30 @next] ON (bug fix) — tested on live processes (executors killGuard.test.ts 7/7: self-match shell survives, harness
+# server + adapter sibling survive a matching pattern, killall spares the sibling, pgrep hides the harness, the c21ba command shape through
+# the real Bash tool); ShellTool/BashOutput/KillShell suites unchanged (145 tests).
+#CORTEX_KILL_GUARD=
 # (no lever) R154 HB-IMAGE-REJECTION-HEAL (4.109.0, 2026-09-16): retro-console-soc generated a 128x128 8-bit GRAYSCALE PNG, called
 # ReadImage, and DeepSeek answered the next continuation with `400 .messages[290].image[0]: You have uploaded an unsupported image`;
 # the exception escaped after the tool batch, the already-executed guard left the loop, and the R29a synthesis failed on the same block —

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.124.35",
+  "version": "4.124.37",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
   "bin": {
-    "cortex": "./bin/cortex.js"
+    "cortex": "bin/cortex.js"
   },
   "scripts": {
     "build": "cp ../../.env.defaults ./.env.defaults && tsc",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.35",
+    "@nexus-cortex/core": "4.124.37",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",