@nexus-cortex/server 4.124.25 → 4.124.27

package/.cortex/orient

@@ -7,6 +7,16 @@
 W="$(pwd)"
 echo "== WORKSPACE MAP: $W =="
 ls -1A "$W" 2>/dev/null | head -40
+# orient v2 ships DARK (2026-09-27): every v2 section runs only with CORTEX_ORIENT_V2=1; unset = the v1 output byte-for-byte.
+V2="${CORTEX_ORIENT_V2:-0}"
+# orient v2 (2026-09-27, MiMo: the whole library lived under vendor/ and the map showed one level): one more level for the top
+# directories (skipping caches/vendored deps of the toolchain), capped so the map stays small.
+[ "$V2" = "1" ] && for d in $(ls -1A "$W" 2>/dev/null | head -40); do
+  [ -d "$W/$d" ] || continue
+  case "$d" in .git|node_modules|__pycache__|.venv|venv|.cache|.cortex|.addon-tools|dist|build|target) continue;; esac
+  n=$(ls -1A "$W/$d" 2>/dev/null | wc -l | tr -d ' ')
+  echo "  $d/ ($n): $(ls -1A "$W/$d" 2>/dev/null | head -8 | tr '\n' ' ')"
+done | head -8
 PROJECT=""
 CMDS=""
 if [ -f package.json ]; then
@@ -38,15 +48,85 @@ for b in file xxd strings ps pgrep free pdftotext tesseract gcc make git curl; d
   if command -v "$b" >/dev/null 2>&1; then HAVE="$HAVE $b"; else MISS="$MISS $b"; fi
 done
 echo "-- tooling:${TI:- (no python/node on PATH)} | have:${HAVE:- none} | missing:${MISS:- none}"
+# orient v2: the baseline the judge's workspace delta is computed against — know it before editing.
+if [ "$V2" != "1" ]; then :
+elif command -v git >/dev/null 2>&1 && git -C "$W" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  CH=$(git -C "$W" status --porcelain 2>/dev/null | wc -l | tr -d ' ')
+  if git -C "$W" rev-parse --verify -q HEAD >/dev/null 2>&1; then
+    echo "-- git: $(git -C "$W" rev-parse --abbrev-ref HEAD 2>/dev/null) @ $(git -C "$W" log -1 --format=%h 2>/dev/null), $CH changed file(s) — \`git diff\` shows your edits"
+  else
+    echo "-- git: repository with no commits yet ($CH untracked/changed path(s)) — commit a baseline before editing to diff your work"
+  fi
+else
+  echo "-- git: not a repository (no baseline to diff your edits against)"
+fi
+# Workspace baseline (CORTEX_ORIENT_BASELINE=1, dark, 2026-09-27): MiMo tb64 lost ~10-14% of tasks per run to the grader's
+# protected-file guard (a file outside the task's repair set was modified, usually vendored library code) and the workspaces are not git
+# repos, so nothing could show the agent what it had changed. Record a checksum list ONCE (never overwritten, so a re-run of orient keeps
+# the start state) and ship `.cortex/changed`, which lists modified / added / deleted files against it. POSIX cksum; capped.
+if [ "${CORTEX_ORIENT_BASELINE:-0}" = "1" ]; then
+  mkdir -p "$W/.cortex" 2>/dev/null
+  cat > "$W/.cortex/changed" 2>/dev/null <<'CHANGED'
+#!/bin/sh
+# Lists files modified / added / deleted since orient recorded .cortex/baseline.cksum (the task's start state).
+cd "$(dirname "$0")/.." || exit 0
+B=.cortex/baseline.cksum
+[ -f "$B" ] || { echo "no baseline recorded (.cortex/baseline.cksum missing)"; exit 0; }
+T=$(mktemp 2>/dev/null || echo /tmp/cortex-now.$$)
+find . \( -path ./.git -o -path ./.cortex -o -name node_modules -o -name __pycache__ -o -name .venv -o -name venv -o -name .cache -o -name .pytest_cache -o -name .mypy_cache \) -prune -o -type f -size -20M -print 2>/dev/null | head -20000 | tr '\n' '\0' | xargs -0 cksum 2>/dev/null > "$T"
+awk 'function k(  f) { f=$0; sub(/^[0-9]+[ \t]+[0-9]+[ \t]+/, "", f); return f }
+  NR==FNR { b[k()]=$1" "$2; next } { n[k()]=$1" "$2 } END {
+  for (f in n) { if (!(f in b)) print "added     " f; else if (b[f] != n[f]) print "modified  " f }
+  for (f in b) if (!(f in n)) print "deleted   " f }' "$B" "$T" | sort -k2
+rm -f "$T"
+CHANGED
+  if [ ! -f "$W/.cortex/baseline.cksum" ]; then
+    ( cd "$W" && find . \( -path ./.git -o -path ./.cortex -o -name node_modules -o -name __pycache__ -o -name .venv -o -name venv -o -name .cache -o -name .pytest_cache -o -name .mypy_cache \) -prune -o -type f -size -20M -print 2>/dev/null | head -20000 | tr '\n' '\0' | xargs -0 cksum 2>/dev/null > .cortex/baseline.cksum )
+  fi
+  BN=$(wc -l < "$W/.cortex/baseline.cksum" 2>/dev/null | tr -d ' ')
+  echo "-- baseline: ${BN:-0} files recorded at start; \`sh .cortex/changed\` lists files you modified/added/deleted. Before finishing, run it and revert every change the task did not require."
+fi
 # Bare-box hint (2026-09-03, operator-simplified): a task container may ship WITHOUT the language, compiler,
 # package or library the objective needs — on purpose (the agent phase is bare; internet is usually allowed).
 # State the FACTS (package manager present, whether we are root) and ONE principled directive — no command
 # cookbook: the model bootstraps correctly on its own (pro solved a bare-box torch task with only this line).
 # Prescribing exact incantations is prompt mass that misdirects; observation + intent is enough.
+# The directive exists because some bench task containers ship WITHOUT the dependencies the task needs (operator, 09-27): they must be
+# installed efficiently — once, cached, never duplicated. Trigger unchanged from v1 (no interpreter OR no C compiler). orient v2 adds a
+# guard instead of suppressing the line: the MiMo doctrine mine found 21 sessions pip-installing into the task's frozen vendor trees.
 if [ "${CORTEX_ORIENT_BOOTSTRAP:-0}" = "1" ] && { ! command -v python3 >/dev/null 2>&1 && ! command -v python >/dev/null 2>&1 || ! command -v cc >/dev/null 2>&1; }; then
   PM=""; for m in apt-get apk dnf yum pacman zypper brew; do command -v "$m" >/dev/null 2>&1 && { PM="$m"; break; }; done
   ROOT=$([ "$(id -u 2>/dev/null)" = "0" ] && echo yes || echo no)
-  echo "-- setup: this box may be missing a tool/language/library the task needs (pkg-mgr=${PM:-none}, root=$ROOT). If so, INSTALL what you need yourself following standard practice (the system package manager, or the language's own installer); install ONCE and reuse it, and prefer a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice. Pin versions, then verify with a real run before finishing. An empty box is part of the task, not an error."
+  GUARD=""; [ "$V2" = "1" ] && GUARD=" Install into the system or a venv, never into the task's own source or vendored tree."
+  echo "-- setup: this box may be missing a tool/language/library the task needs (pkg-mgr=${PM:-none}, root=$ROOT). If so, INSTALL what you need yourself following standard practice (the system package manager, or the language's own installer); install ONCE and reuse it, and prefer a fast cached installer for the language (uv for Python, bun for JS) — do not re-download a large dependency twice.$GUARD Pin versions, then verify with a real run before finishing. An empty box is part of the task, not an error."
+fi
+# orient v2 — VERIFICATION ENTRY POINTS: how this task's correctness is checked, so work is built and verified against the real
+# criteria, not the agent's own guess (MiMo K=3: in 57/79 failures the agent's own test passed on a wrong solution). Same usage-line
+# logic as the judge/planner env report (R193), plus probe/test scripts, test config and test directories. Read-only, capped.
+VE=""; TC=""; TD=""
+if [ "$V2" = "1" ]; then
+VE=$(find . -maxdepth 3 \( -iname "*check*" -o -iname "*verif*" -o -iname "*validat*" -o -iname "*grade*" -o -iname "*probe*" -o -name "test_*.py" -o -name "*_test.py" -o -iname "run_tests*" \) \( -name "*.py" -o -name "*.sh" \) 2>/dev/null | grep -vE "node_modules|/\.|site-packages|/vendor/.*/tests?/" | head -6)
+TC=""
+for f in pytest.ini tox.ini setup.cfg pyproject.toml Makefile package.json; do
+  [ -f "$f" ] || continue
+  case "$f" in
+    pytest.ini|tox.ini) TC="$TC $f";;
+    setup.cfg) grep -q "tool:pytest" "$f" 2>/dev/null && TC="$TC setup.cfg[tool:pytest]";;
+    pyproject.toml) grep -q "tool.pytest" "$f" 2>/dev/null && TC="$TC pyproject.toml[tool.pytest]";;
+    Makefile) grep -qE "^(test|check)[a-z_-]*:" "$f" 2>/dev/null && TC="$TC make:$(grep -oE '^(test|check)[a-z_-]*' "$f" | head -3 | tr '\n' ',' | sed 's/,$//')";;
+    package.json) grep -q '"test"' "$f" 2>/dev/null && TC="$TC npm-test";;
+  esac
+done
+TD=$(find . -maxdepth 3 -type d \( -name tests -o -name test \) 2>/dev/null | grep -vE "node_modules|/\.|site-packages" | head -4 | tr '\n' ' ')
+fi
+if [ -n "$VE$TC$TD" ]; then
+  echo "== VERIFICATION ENTRY POINTS (build to and verify against these — not a test you invent) =="
+  for f in $VE; do
+    echo "  $f"
+    { grep -n -m3 -iE "usage|^ *Run:|add_argument|sys\.argv|getopts" "$f" 2>/dev/null; } | head -3 | cut -c1-150 | sed 's/^/      /'
+  done
+  [ -n "$TC" ] && echo "  test config:$TC"
+  [ -n "$TD" ] && echo "  test dirs: $TD"
 fi
 if [ -f README.md ]; then
   echo "-- README head --"
@@ -55,7 +135,7 @@ fi
 # Capability index — harness-owned steering (item 9b): the skills shipped with
 # the install, reachable through plain bash reads (works under any tool frame).
 SK="${CORTEX_ROOT:-$HOME}/.cortex/skills"
-if [ -d "$SK" ]; then
+if [ -d "$SK" ] && [ "$V2" != "1" ]; then
   echo "== CAPABILITY GUIDES (load one with: cat <path>/SKILL.md) =="
   for d in "$SK"/*/; do
     [ -d "$d" ] || continue
@@ -64,6 +144,11 @@ if [ -d "$SK" ]; then
     case "$desc" in ">"|"|"|"") desc="guide";; esac
     echo "  $SK/$n — $desc"
   done | head -14
+elif [ -d "$SK" ]; then
+  # orient v2: one line (was 12 full paths + descriptions ≈ half the output, mostly irrelevant to the task at hand).
+  NAMES=$(for d in "$SK"/*/; do [ -d "$d" ] && basename "$d"; done | tr '\n' ' ')
+  echo "== CAPABILITY GUIDES: $NAMES(read one: cat $SK/<name>/SKILL.md)"
+  [ -f "$SK/verify-work/SKILL.md" ] && echo "  before finishing, verify-work: cat $SK/verify-work/SKILL.md"
 fi
 echo "note: when your tool list is limited, additional tools may be discoverable via the SearchTools tool."
 # Mechanical CORTEX.md (items 9c + 10): machine-authored sections live between

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nexus-cortex/server",
-  "version": "4.124.25",
+  "version": "4.124.27",
   "description": "Thin Express server wrapper for Nexus Cortex core library",
   "type": "module",
   "main": "dist/index.js",
@@ -20,8 +20,8 @@
     "prepack": "node ../../scripts/copy-pkg-cortex-scaffold.mjs"
   },
   "dependencies": {
-    "@nexus-cortex/core": "4.124.25",
-    "@nexus-cortex/executors": "4.124.25",
+    "@nexus-cortex/core": "4.124.27",
+    "@nexus-cortex/executors": "4.124.27",
     "chalk": "^5.3.0",
     "cors": "^2.8.5",
     "dotenv": "^16.4.5",