@nexus-cortex/server 4.124.24 → 4.124.26

package/.cortex/orient

@@ -7,6 +7,16 @@
 W="$(pwd)"
 echo "== WORKSPACE MAP: $W =="
 ls -1A "$W" 2>/dev/null | head -40
+# orient v2 ships DARK (2026-09-27): every v2 section runs only with CORTEX_ORIENT_V2=1; unset = the v1 output byte-for-byte.
+V2="${CORTEX_ORIENT_V2:-0}"
+# orient v2 (2026-09-27, MiMo: the whole library lived under vendor/ and the map showed one level): one more level for the top
+# directories (skipping caches/vendored deps of the toolchain), capped so the map stays small.
+[ "$V2" = "1" ] && for d in $(ls -1A "$W" 2>/dev/null | head -40); do
+  [ -d "$W/$d" ] || continue
+  case "$d" in .git|node_modules|__pycache__|.venv|venv|.cache|.cortex|.addon-tools|dist|build|target) continue;; esac
+  n=$(ls -1A "$W/$d" 2>/dev/null | wc -l | tr -d ' ')
+  echo "  $d/ ($n): $(ls -1A "$W/$d" 2>/dev/null | head -8 | tr '\n' ' ')"
+done | head -8
 PROJECT=""
 CMDS=""
 if [ -f package.json ]; then
@@ -38,15 +48,59 @@ for b in file xxd strings ps pgrep free pdftotext tesseract gcc make git curl; d
   if command -v "$b" >/dev/null 2>&1; then HAVE="$HAVE $b"; else MISS="$MISS $b"; fi
 done
 echo "-- tooling:${TI:- (no python/node on PATH)} | have:${HAVE:- none} | missing:${MISS:- none}"
+# orient v2: the baseline the judge's workspace delta is computed against — know it before editing.
+if [ "$V2" != "1" ]; then :
+elif command -v git >/dev/null 2>&1 && git -C "$W" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  CH=$(git -C "$W" status --porcelain 2>/dev/null | wc -l | tr -d ' ')
+  if git -C "$W" rev-parse --verify -q HEAD >/dev/null 2>&1; then
+    echo "-- git: $(git -C "$W" rev-parse --abbrev-ref HEAD 2>/dev/null) @ $(git -C "$W" log -1 --format=%h 2>/dev/null), $CH changed file(s) — \`git diff\` shows your edits"
+  else
+    echo "-- git: repository with no commits yet ($CH untracked/changed path(s)) — commit a baseline before editing to diff your work"
+  fi
+else
+  echo "-- git: not a repository (no baseline to diff your edits against)"
+fi
 # Bare-box hint (2026-09-03, operator-simplified): a task container may ship WITHOUT the language, compiler,
 # package or library the objective needs — on purpose (the agent phase is bare; internet is usually allowed).
 # State the FACTS (package manager present, whether we are root) and ONE principled directive — no command
 # cookbook: the model bootstraps correctly on its own (pro solved a bare-box torch task with only this line).
 # Prescribing exact incantations is prompt mass that misdirects; observation + intent is enough.
+# The directive exists because some bench task containers ship WITHOUT the dependencies the task needs (operator, 09-27): they must be
+# installed efficiently — once, cached, never duplicated. Trigger unchanged from v1 (no interpreter OR no C compiler). orient v2 adds a
+# guard instead of suppressing the line: the MiMo doctrine mine found 21 sessions pip-installing into the task's frozen vendor trees.
 if [ "${CORTEX_ORIENT_BOOTSTRAP:-0}" = "1" ] && { ! command -v python3 >/dev/null 2>&1 && ! command -v python >/dev/null 2>&1 || ! command -v cc >/dev/null 2>&1; }; then
   PM=""; for m in apt-get apk dnf yum pacman zypper brew; do command -v "$m" >/dev/null 2>&1 && { PM="$m"; break; }; done
   ROOT=$([ "$(id -u 2>/dev/null)" = "0" ] && echo yes || echo no)
-  echo "-- setup: this box may be missing a tool/language/library the task needs (pkg-mgr=${PM:-none}, root=$ROOT). If so, INSTALL what you need yourself following standard practice (the system package manager, or the language's own installer); install ONCE and reuse it, and prefer a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice. Pin versions, then verify with a real run before finishing. An empty box is part of the task, not an error."
+  GUARD=""; [ "$V2" = "1" ] && GUARD=" Install into the system or a venv, never into the task's own source or vendored tree."
+  echo "-- setup: this box may be missing a tool/language/library the task needs (pkg-mgr=${PM:-none}, root=$ROOT). If so, INSTALL what you need yourself following standard practice (the system package manager, or the language's own installer); install ONCE and reuse it, and prefer a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice.$GUARD Pin versions, then verify with a real run before finishing. An empty box is part of the task, not an error."
+fi
+# orient v2 — VERIFICATION ENTRY POINTS: how this task's correctness is checked, so work is built and verified against the real
+# criteria, not the agent's own guess (MiMo K=3: in 57/79 failures the agent's own test passed on a wrong solution). Same usage-line
+# logic as the judge/planner env report (R193), plus probe/test scripts, test config and test directories. Read-only, capped.
+VE=""; TC=""; TD=""
+if [ "$V2" = "1" ]; then
+VE=$(find . -maxdepth 3 \( -iname "*check*" -o -iname "*verif*" -o -iname "*validat*" -o -iname "*grade*" -o -iname "*probe*" -o -name "test_*.py" -o -name "*_test.py" -o -iname "run_tests*" \) \( -name "*.py" -o -name "*.sh" \) 2>/dev/null | grep -vE "node_modules|/\.|site-packages|/vendor/.*/tests?/" | head -6)
+TC=""
+for f in pytest.ini tox.ini setup.cfg pyproject.toml Makefile package.json; do
+  [ -f "$f" ] || continue
+  case "$f" in
+    pytest.ini|tox.ini) TC="$TC $f";;
+    setup.cfg) grep -q "tool:pytest" "$f" 2>/dev/null && TC="$TC setup.cfg[tool:pytest]";;
+    pyproject.toml) grep -q "tool.pytest" "$f" 2>/dev/null && TC="$TC pyproject.toml[tool.pytest]";;
+    Makefile) grep -qE "^(test|check)[a-z_-]*:" "$f" 2>/dev/null && TC="$TC make:$(grep -oE '^(test|check)[a-z_-]*' "$f" | head -3 | tr '\n' ',' | sed 's/,$//')";;
+    package.json) grep -q '"test"' "$f" 2>/dev/null && TC="$TC npm-test";;
+  esac
+done
+TD=$(find . -maxdepth 3 -type d \( -name tests -o -name test \) 2>/dev/null | grep -vE "node_modules|/\.|site-packages" | head -4 | tr '\n' ' ')
+fi
+if [ -n "$VE$TC$TD" ]; then
+  echo "== VERIFICATION ENTRY POINTS (build to and verify against these — not a test you invent) =="
+  for f in $VE; do
+    echo "  $f"
+    { grep -n -m3 -iE "usage|^ *Run:|add_argument|sys\.argv|getopts" "$f" 2>/dev/null; } | head -3 | cut -c1-150 | sed 's/^/      /'
+  done
+  [ -n "$TC" ] && echo "  test config:$TC"
+  [ -n "$TD" ] && echo "  test dirs: $TD"
 fi
 if [ -f README.md ]; then
   echo "-- README head --"
@@ -55,7 +109,7 @@ fi
 # Capability index — harness-owned steering (item 9b): the skills shipped with
 # the install, reachable through plain bash reads (works under any tool frame).
 SK="${CORTEX_ROOT:-$HOME}/.cortex/skills"
-if [ -d "$SK" ]; then
+if [ -d "$SK" ] && [ "$V2" != "1" ]; then
   echo "== CAPABILITY GUIDES (load one with: cat <path>/SKILL.md) =="
   for d in "$SK"/*/; do
     [ -d "$d" ] || continue
@@ -64,6 +118,11 @@ if [ -d "$SK" ]; then
     case "$desc" in ">"|"|"|"") desc="guide";; esac
     echo "  $SK/$n — $desc"
   done | head -14
+elif [ -d "$SK" ]; then
+  # orient v2: one line (was 12 full paths + descriptions ≈ half the output, mostly irrelevant to the task at hand).
+  NAMES=$(for d in "$SK"/*/; do [ -d "$d" ] && basename "$d"; done | tr '\n' ' ')
+  echo "== CAPABILITY GUIDES: $NAMES(read one: cat $SK/<name>/SKILL.md)"
+  [ -f "$SK/verify-work/SKILL.md" ] && echo "  before finishing, verify-work: cat $SK/verify-work/SKILL.md"
 fi
 echo "note: when your tool list is limited, additional tools may be discoverable via the SearchTools tool."
 # Mechanical CORTEX.md (items 9c + 10): machine-authored sections live between

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/server",
-  "version": "4.124.24",
+  "version": "4.124.26",
   "description": "Thin Express server wrapper for Nexus Cortex core library",
   "type": "module",
   "main": "dist/index.js",
@@ -20,8 +20,8 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.24",
-    "@nexus-cortex/executors": "4.124.24",
+    "@nexus-cortex/core": "4.124.26",
+    "@nexus-cortex/executors": "4.124.26",
     "chalk": "^5.3.0",
     "cors": "^2.8.5",
     "dotenv": "^16.4.5",