@nexus-cortex/cli 4.124.7 → 4.124.9

package/.env.defaults

@@ -1189,8 +1189,22 @@ CORTEX_ENDTURN_GATE=true
 # device; fork bomb; shutdown/reboot; chmod/chown -R /; mv of a root) are REMOVED from the menu, never sent, and the writer is told which and why.
 # C-d while a command is running stays allowed (EOF to a REPL/cat/heredoc). Templates are never blocked. All-blocked turn → nothing sent, a
 # re-plan note. Banked on frame_turn as `guard`. Frame-only; the E1/E2 cells stay on 4.124.4/.5.
+# [LEDGER 2026-09-22 @4.124.8] R183 (operator: "isn't there going to be some legitimate use for destructive commands?" + "use Jev to verify or
+# override a questionable command"): the guard splits HARD (pane killers, rm -rf of system roots/home, real block devices, shutdown, chmod -R /
+# — refused outright) from SOFT (rm -rf of /app or ./*, mkfs on a file/image, mv /app, git reset --hard/clean -f/force push — destructive but a task
+# can ask for it). Soft with Jev on: `intended_<id>` noul (does the TASK TEXT or the note authorize it) ≥ 0.6 runs it; Jev off: runs only with a
+# justifying `why` (≥ 20 chars) — the writer is told to resend with the reason. Chooser: `unsafe` names the concrete cases (Jev scored the
+# freecad C-d at unsafe 0.34 under the old wording — the miss that started R180); new `questionable` ("would c1 lose work already produced?")
+# ≥ 0.5 → restrict to templates + full screen unless `why` justifies c1. Banked guard outcomes: blocked / held / allowed_by_why / allowed_by_jev.
+# [LEDGER 2026-09-22 @4.124.9] R184 MENU DIVERSITY (operator: "fix the chooser then!"). E2 field, 3371 frame turns: the writer gave ONE candidate
+# on 89% (2 on 10%, 3 on 0.8%) — Jev chose c1 85%, a template 12%, c2/c3 on 93 turns; the chooser had no menu. CORTEX_FRAME_MIN_CANDIDATES (1..3;
+# unset = 2 when the chooser is on and the cap allows): fewer distinct candidates (normalized keystrokes) → the turn is handed back UNEXECUTED
+# with "MENU NEEDS ALTERNATIVES: 2–3 genuinely different actions", once per turn, at most 5 re-asks per session, then fail-open (single candidates
+# run as given). Turn-0 contract gains a THE MENU clause when min ≥ 2. Banked on frame_turn: distinctCandidates, diversityReasks, diversityReask.
+# Cost bound: ≤ 5 extra writer calls per session. E3 (chooser with a real menu) is the next cell; E1/E2 cells stay on 4.124.4/.5.
 #CORTEX_FRAME_CONTRACT_EXTRA=
 #CORTEX_FRAME_KEY_GUARD=
+#CORTEX_FRAME_MIN_CANDIDATES=
 # (no lever) R169 HB-NEARDUP-SCRATCH-STEM — REFUTED before shipping (2026-09-17, pilot-12 trajectory replay). The distiller's 16
 # "repeated-identical-retry" candidates were re-read: the two stuck sessions (coq-block-bound base arm: `cat > /tmp/tN.v <<EOF` with a
 # DIFFERENT proof body each attempt; rs-archive-clone: 191 distinct `python3 -c` bodies) are unconverged EXPLORATION, not retries —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/cli",
-  "version": "4.124.7",
+  "version": "4.124.9",
   "description": "Nexus Cortex CLI - Terminal interface for multi-provider LLM orchestration",
   "main": "dist/index.js",
   "type": "module",
@@ -19,7 +19,7 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.7",
+    "@nexus-cortex/core": "4.124.9",
     "chalk": "^4.1.2",
     "cli-spinners": "^2.9.0",
     "commander": "^11.0.0",