@nexus-cortex/cli 4.124.6 → 4.124.8

package/.env.defaults

@@ -1183,7 +1183,21 @@ CORTEX_ENDTURN_GATE=true
 #CORTEX_FRAME_CANDIDATES=
 #CORTEX_FRAME_WAIT_CAP_S=
 #CORTEX_FRAME_SCREEN_LINES=
+# [LEDGER 2026-09-22 @4.124.7] R182 KEYSTROKE GUARD (CORTEX_FRAME_KEY_GUARD, default on; operator: "block harmful keystroke patterns, not just a
+# contract instruction"): before the menu step every generator candidate is classified — pane killers (C-d at an IDLE prompt, exit/logout, exec,
+# tmux kill-*, kill -9 -1, pkill/killall of bash|tmux) and destructive commands (rm -rf on /, ~, /app, /root…; mkfs; dd/redirect to a block
+# device; fork bomb; shutdown/reboot; chmod/chown -R /; mv of a root) are REMOVED from the menu, never sent, and the writer is told which and why.
+# C-d while a command is running stays allowed (EOF to a REPL/cat/heredoc). Templates are never blocked. All-blocked turn → nothing sent, a
+# re-plan note. Banked on frame_turn as `guard`. Frame-only; the E1/E2 cells stay on 4.124.4/.5.
+# [LEDGER 2026-09-22 @4.124.8] R183 (operator: "isn't there going to be some legitimate use for destructive commands?" + "use Jev to verify or
+# override a questionable command"): the guard splits HARD (pane killers, rm -rf of system roots/home, real block devices, shutdown, chmod -R /
+# — refused outright) from SOFT (rm -rf of /app or ./*, mkfs on a file/image, mv /app, git reset --hard/clean -f/force push — destructive but a task
+# can ask for it). Soft with Jev on: `intended_<id>` noul (does the TASK TEXT or the note authorize it) ≥ 0.6 runs it; Jev off: runs only with a
+# justifying `why` (≥ 20 chars) — the writer is told to resend with the reason. Chooser: `unsafe` names the concrete cases (Jev scored the
+# freecad C-d at unsafe 0.34 under the old wording — the miss that started R180); new `questionable` ("would c1 lose work already produced?")
+# ≥ 0.5 → restrict to templates + full screen unless `why` justifies c1. Banked guard outcomes: blocked / held / allowed_by_why / allowed_by_jev.
 #CORTEX_FRAME_CONTRACT_EXTRA=
+#CORTEX_FRAME_KEY_GUARD=
 # (no lever) R169 HB-NEARDUP-SCRATCH-STEM — REFUTED before shipping (2026-09-17, pilot-12 trajectory replay). The distiller's 16
 # "repeated-identical-retry" candidates were re-read: the two stuck sessions (coq-block-bound base arm: `cat > /tmp/tN.v <<EOF` with a
 # DIFFERENT proof body each attempt; rs-archive-clone: 191 distinct `python3 -c` bodies) are unconverged EXPLORATION, not retries —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.124.6",
+  "version": "4.124.8",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.6",
+    "@nexus-cortex/core": "4.124.8",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",