@nomix-ai/nomix-harness 0.2.3 → 0.2.5

package/dist/kernel/llm-retry/lib/types/index.js

@@ -5,7 +5,7 @@
  * @module @nomix-ai/nomix-llm-retry
  */
 import { randomUUID } from 'node:crypto';
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { RetryId } from "./brand.js";
 export { RetryId } from "./brand.js";
 export const name = 'llm-retry';

package/dist/kernel/llm-retry/lib/types/invariant.d.ts

@@ -1,5 +1,5 @@
 /** Package-owned durable retry-event invariants. @module @nomix-ai/nomix-llm-retry/invariant */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "llm-retry-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/llm-retry/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-llm-retry",
   "description": "Provider-routed LLM request retry policy for the Nomix Harness",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/lsp/lib/index.js

@@ -1,4 +1,4 @@
-import { Service } from "@nomix-ai/cordis";
+import { Service } from "../../cordis/lib/index.js";
 import { HarnessError } from "../../llm/lib/index.js";
 //#region lib/types/brand.js
 /**

package/dist/kernel/lsp/lib/types/index.d.ts

@@ -10,7 +10,7 @@
  * registration order. The seam exposes exactly the four operations and no JSON-RPC escape hatch.
  * @module @nomix-ai/nomix-lsp
  */
-import { Context, Service } from '@nomix-ai/cordis';
+import { Context, Service } from '../../../cordis/lib/index.js';
 import { HarnessError } from '../../../llm/lib/index.js';
 import type { LspProvider, LspQueryRequest, LspQueryResult, LspService } from './types.ts';
 export { LspProviderId } from './brand.ts';

package/dist/kernel/lsp/lib/types/index.js

@@ -10,7 +10,7 @@
  * registration order. The seam exposes exactly the four operations and no JSON-RPC escape hatch.
  * @module @nomix-ai/nomix-lsp
  */
-import { Service } from '@nomix-ai/cordis';
+import { Service } from '../../../cordis/lib/index.js';
 import { HarnessError } from '../../../llm/lib/index.js';
 export { LspProviderId } from "./brand.js";
 /**

package/dist/kernel/lsp/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-lsp`.
  * @module @nomix-ai/nomix-lsp/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "lsp-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/lsp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-lsp",
   "description": "Abstract LSP capability seam (ctx.lsp) for the Nomix Harness — language-server provider registry keyed by branded id and extension mapping, order-independent per-query selection, normalized definition/references/implementation/hover requests and results, and the LspError taxonomy",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/lsp-stdio/lib/index.js

@@ -1,4 +1,4 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { LspError, LspProviderId } from "../../lsp/lib/index.js";
 import { MAX_TIMER_DELAY_MS, deadline, timeoutOf } from "../../timeout/lib/index.js";
 import { Buffer as Buffer$1 } from "node:buffer";

package/dist/kernel/lsp-stdio/lib/types/index.d.ts

@@ -10,8 +10,8 @@
  * unregisters from `ctx.lsp` and tears down every live server.
  * @module @nomix-ai/nomix-lsp-stdio
  */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 export { canonicalizeWorkspace, readHostSource } from './host.ts';
 export { encodeMessage, MessageDecoder } from './framing.ts';
 export { negotiatePositionEncoding, normalizeHover, normalizeLocations, requestMethod, supportsOperation, supportsTransientOpen, } from './translate.ts';

package/dist/kernel/lsp-stdio/lib/types/index.js

@@ -10,7 +10,7 @@
  * unregisters from `ctx.lsp` and tears down every live server.
  * @module @nomix-ai/nomix-lsp-stdio
  */
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { LspError, LspProviderId } from '../../../lsp/lib/index.js';
 import { MAX_TIMER_DELAY_MS } from '../../../timeout/lib/index.js';
 import { abortable, abortError } from "./abort.js";

package/dist/kernel/lsp-stdio/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-lsp-stdio`.
  * @module @nomix-ai/nomix-lsp-stdio/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "lsp-stdio-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/lsp-stdio/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-lsp-stdio",
   "description": "Generic stdio language-server provider for the Nomix Harness LSP capability seam (ctx.lsp) — spawns configured servers, translates JSON-RPC, and serves transient-open goToDefinition/findReferences/goToImplementation/hover queries in the host filesystem namespace",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/manifest.json

@@ -1,5 +1,6 @@
 {
   "@nomix-ai/nomix-web-frontend": "./web-frontend",
+  "@nomix-ai/node-addon-landlock-run": "./node-addon-landlock-run",
   "@nomix-ai/nomix-acp": "./acp",
   "@nomix-ai/nomix-api-gateway": "./api-gateway",
   "@nomix-ai/nomix-api-remotes": "./api-remotes",
@@ -209,5 +210,14 @@
   "@nomix-ai/nomix-tool-workflow": "./tool-workflow",
   "@nomix-ai/nomix-workflow-worker-thread": "./workflow-worker-thread",
   "@nomix-ai/nomix-workflow": "./workflow",
-  "@nomix-ai/nomix-workspace": "./workspace"
+  "@nomix-ai/nomix-workspace": "./workspace",
+  "@nomix-ai/cordis": "./cordis",
+  "@nomix-ai/cosmokit": "./cosmokit",
+  "@nomix-ai/cordis-plugin-group": "./cordis-plugin-group",
+  "@nomix-ai/cordis-plugin-hmr": "./cordis-plugin-hmr",
+  "@nomix-ai/cordis-plugin-include": "./cordis-plugin-include",
+  "@nomix-ai/cordis-plugin-loader": "./cordis-plugin-loader",
+  "@nomix-ai/cordis-plugin-logger-console": "./cordis-plugin-logger-console",
+  "@nomix-ai/schemastery": "./schemastery",
+  "@nomix-ai/cordis-plugin-timer": "./cordis-plugin-timer"
 }

package/dist/kernel/mcp-client/lib/index.js

@@ -1,4 +1,4 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { MAX_TIMER_DELAY_MS } from "../../timeout/lib/index.js";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { ListToolsResultSchema, ToolListChangedNotificationSchema } from "@modelcontextprotocol/sdk/types.js";

package/dist/kernel/mcp-client/lib/types/connection.d.ts

@@ -14,7 +14,7 @@
  *
  * @module
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 import type { Config } from './index.ts';
 /** Automatic reconnect policy for one MCP server connection. */
 export interface ReconnectConfig {

package/dist/kernel/mcp-client/lib/types/index.d.ts

@@ -12,8 +12,8 @@
  *
  * @module @nomix-ai/nomix-mcp-client
  */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 import type { ReconnectConfig } from './connection.ts';
 export type { McpResult } from './tools.ts';
 export type { ReconnectConfig, ResolvedReconnectPolicy } from './connection.ts';

package/dist/kernel/mcp-client/lib/types/index.js

@@ -12,7 +12,7 @@
  *
  * @module @nomix-ai/nomix-mcp-client
  */
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { MAX_TIMER_DELAY_MS } from '../../../timeout/lib/index.js';
 import { RECONNECT_DEFAULTS, resolveReconnectPolicy, startConnection } from "./connection.js";
 /** Cordis plugin name used by loader diagnostics. */

package/dist/kernel/mcp-client/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-mcp-client`.
  * @module @nomix-ai/nomix-mcp-client/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "mcp-client-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/mcp-client/lib/types/tools.d.ts

@@ -12,7 +12,7 @@
  * @module
  */
 import type { Client } from '@modelcontextprotocol/sdk/client/index.js';
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 import type { JsonValue } from '../../../tools/lib/index.js';
 /** Resolved options relevant to tool bridging. */
 export interface ToolBridgeOptions {

package/dist/kernel/mcp-client/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-mcp-client",
   "description": "MCP client bridge: connects to MCP servers and registers their tools on ctx.tools",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/message-feedback/lib/index.js

@@ -1,7 +1,7 @@
 import { Buffer } from "node:buffer";
 import { randomUUID } from "node:crypto";
-import { Service } from "@nomix-ai/cordis";
-import s from "@nomix-ai/schemastery";
+import { Service } from "../../cordis/lib/index.js";
+import s from "../../schemastery/lib/index.mjs";
 import { deriveEventMessage, isAppendSurfaceEvent } from "../../session/lib/types/surface.js";
 import { Remote, TypertRemoteService } from "../../typert-protocol/lib/index.js";
 import { z } from "zod";

package/dist/kernel/message-feedback/lib/types/index.d.ts

@@ -2,8 +2,8 @@
  * Durable, lifecycle-bound feedback for finalized assistant messages.
  * @module @nomix-ai/nomix-message-feedback
  */
-import { Context, Service } from '@nomix-ai/cordis';
-import s from '@nomix-ai/schemastery';
+import { Context, Service } from '../../../cordis/lib/index.js';
+import s from '../../../schemastery/lib/index.mjs';
 import { TypertRemoteService } from '../../../typert-protocol/lib/index.js';
 import type { MessageFeedbackDeleteRequest, MessageFeedbackDeleteResult, MessageFeedbackListRequest, MessageFeedbackListResult, MessageFeedbackPutRequest, MessageFeedbackPutResult } from './types.ts';
 export type * from './types.ts';

package/dist/kernel/message-feedback/lib/types/index.js

@@ -38,8 +38,8 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
 };
 import { Buffer } from 'node:buffer';
 import { randomUUID } from 'node:crypto';
-import { Service } from '@nomix-ai/cordis';
-import s from '@nomix-ai/schemastery';
+import { Service } from '../../../cordis/lib/index.js';
+import s from '../../../schemastery/lib/index.mjs';
 import { deriveEventMessage, isAppendSurfaceEvent } from '../../../session/lib/types/surface.js';
 import { TypertRemoteService, Remote } from '../../../typert-protocol/lib/index.js';
 import { messageFeedbackDomainSpec } from "./spec.js";

package/dist/kernel/message-feedback/lib/types/invariant.d.ts

@@ -1,5 +1,5 @@
 /** Package-owned invariant companion. @module @nomix-ai/nomix-message-feedback/invariant */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "message-feedback-invariant";
 /** Services required before the companion can reserve and check package ownership. */

package/dist/kernel/message-feedback/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-message-feedback",
   "description": "Lifecycle-bound per-message rating and note sidecar for the Nomix Harness",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/native-command/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-native-command`.
  * @module @nomix-ai/nomix-native-command/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "native-command-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/native-command/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-native-command",
   "description": "Zero-dependency no-shell execFile runner for host-native OS integrations: utf8 stdio capture, abort propagation, Windows hide",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/node-addon-landlock-run/lib/index.d.ts

@@ -0,0 +1,71 @@
+/** The launcher binary's file name inside each platform package's `bin/`. */
+export declare const LAUNCHER_BIN = "landlock-run";
+/**
+ * The exit code for every launcher-level failure (usage error, unenforcing
+ * kernel, unopenable grant root, failed exec). After a successful `exec`, the
+ * wrapped command may also return 125, so consumers also require a matching
+ * launcher-owned fatal diagnostic to attribute launcher failure. Part of the
+ * CLI contract.
+ */
+export declare const LAUNCHER_FAILURE_EXIT = 125;
+/**
+ * The probe's verdict on this host: `full` when the running kernel enforces
+ * every access the launcher can govern, `partial` when an older Landlock ABI
+ * governs only a subset (still confined for everything it supports), and
+ * `unusable` when nothing can be enforced — a kernel without Landlock, a
+ * disabled LSM, or a missing binary, all indistinguishable on purpose
+ * because the consumer's answer is the same: do not trust this launcher.
+ */
+export type LandlockEnforcement = 'full' | 'partial' | 'unusable';
+/**
+ * Filesystem grants for one confined run. Everything not granted is denied —
+ * Landlock rulesets are allow-lists.
+ */
+export interface LauncherGrants {
+    /** Roots granted read + execute beneath (the launcher's `--ro`). */
+    readonly readOnly?: readonly string[];
+    /** Roots granted full filesystem access beneath (the launcher's `--rw`). */
+    readonly readWrite?: readonly string[];
+}
+/**
+ * Path of the launcher binary for this host. An aggregate Harness installation
+ * resolves its embedded `dist/native/landlock-run/<platform>-<arch>` binary;
+ * a source workspace falls back to the matching platform package. Unsupported
+ * platforms return a deterministic nonexistent path. {@link probe} remains
+ * the availability signal, so a missing binary and an unenforcing kernel both
+ * report `unusable`.
+ * @param resolvePackageJson - test hook over `require.resolve` (the default
+ *   covers real installs); receives the platform package's `package.json`
+ *   specifier and returns its absolute path, throwing when unresolvable.
+ * @param bundledExists - test hook for the aggregate binary existence check.
+ * @returns the absolute launcher path to probe and exec.
+ */
+export declare function launcherPath(resolvePackageJson?: (specifier: string) => string, bundledExists?: (path: string) => boolean): string;
+/**
+ * The launcher grant arguments for one set of filesystem grants — everything
+ * before the `--` argv separator. A caller spawns
+ * `[launcherPath(), ...grantArgs(grants), '--', ...command]`; the flag
+ * spellings stay private to this package.
+ * @param grants - the read-only and read-write roots to allow.
+ * @returns the `--ro <path>` / `--rw <path>` argument list, read-only roots
+ *   first, in the caller's order.
+ */
+export declare function grantArgs(grants: LauncherGrants): string[];
+/**
+ * Functional probe: `landlock-run --probe` builds and enforces a maximal
+ * ruleset in a short-lived child and exits 0 only when the running kernel
+ * actually enforces it — `--version`-style checks would miss a kernel that
+ * has the syscalls but refuses enforcement. The probe's one report line is
+ * part of the CLI contract and distinguishes complete from per-ABI-subset
+ * enforcement; a zero exit without the partial marker reads as `full`. A
+ * failed or timed-out spawn (missing binary, wrong architecture, unenforcing
+ * kernel) probes `unusable`. Synchronous by design: consumers run it once
+ * and cache the verdict.
+ * @param launcher - the launcher path to probe; defaults to
+ *   {@link launcherPath}'s resolution for this host.
+ * @param options - `timeoutMs` bounds the probe child (default 2000).
+ * @returns the enforcement verdict for this host.
+ */
+export declare function probe(launcher?: string, options?: {
+    timeoutMs?: number;
+}): LandlockEnforcement;

package/dist/kernel/node-addon-landlock-run/lib/index.js

@@ -0,0 +1,101 @@
+/**
+ * The JavaScript API over the prebuilt `landlock-run` launcher: resolve the
+ * binary for this host, build its grant argv, and run its functional probe.
+ *
+ * This module owns the launcher's CLI contract (`docs/cli-contract.md`) so
+ * consumers never parse launcher output or spell launcher flags themselves —
+ * the contract and the binaries version together in one package family,
+ * which makes probe-parsing drift against the binary structurally
+ * impossible. Policy stays with the consumer: this package does not know
+ * what a "sandbox mode" is, only which paths are granted read or write.
+ *
+ * Deliberately no environment-variable overrides anywhere in this module:
+ * which binary confines a process must never be decidable by the ambient
+ * environment. Test injection is by function parameter.
+ */
+import { spawnSync } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { createRequire } from 'node:module';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+/** The launcher binary's file name inside each platform package's `bin/`. */
+export const LAUNCHER_BIN = 'landlock-run';
+/**
+ * The exit code for every launcher-level failure (usage error, unenforcing
+ * kernel, unopenable grant root, failed exec). After a successful `exec`, the
+ * wrapped command may also return 125, so consumers also require a matching
+ * launcher-owned fatal diagnostic to attribute launcher failure. Part of the
+ * CLI contract.
+ */
+export const LAUNCHER_FAILURE_EXIT = 125;
+/**
+ * Path of the launcher binary for this host. An aggregate Harness installation
+ * resolves its embedded `dist/native/landlock-run/<platform>-<arch>` binary;
+ * a source workspace falls back to the matching platform package. Unsupported
+ * platforms return a deterministic nonexistent path. {@link probe} remains
+ * the availability signal, so a missing binary and an unenforcing kernel both
+ * report `unusable`.
+ * @param resolvePackageJson - test hook over `require.resolve` (the default
+ *   covers real installs); receives the platform package's `package.json`
+ *   specifier and returns its absolute path, throwing when unresolvable.
+ * @param bundledExists - test hook for the aggregate binary existence check.
+ * @returns the absolute launcher path to probe and exec.
+ */
+export function launcherPath(resolvePackageJson = createRequire(import.meta.url).resolve, bundledExists = existsSync) {
+    const platform = `${process.platform}-${process.arch}`;
+    const bundled = fileURLToPath(new URL(`../../../native/landlock-run/${platform}/${LAUNCHER_BIN}`, import.meta.url));
+    if (bundledExists(bundled))
+        return bundled;
+    const platformPackage = `@nomix-ai/node-addon-landlock-run-${process.platform}-${process.arch}`;
+    try {
+        return join(dirname(resolvePackageJson(`${platformPackage}/package.json`)), 'bin', LAUNCHER_BIN);
+    }
+    catch {
+        // Unresolvable platform package: no such package exists for this host, or
+        // it was not installed. Fall back to the path pnpm's layout WOULD use —
+        // absolute, inside this package's boundary (never cwd-relative: a
+        // spawnable relative path here would hand cwd control over which binary
+        // confines), and nonexistent exactly when the package is absent.
+        return fileURLToPath(new URL(`../node_modules/${platformPackage}/bin/${LAUNCHER_BIN}`, import.meta.url));
+    }
+}
+/**
+ * The launcher grant arguments for one set of filesystem grants — everything
+ * before the `--` argv separator. A caller spawns
+ * `[launcherPath(), ...grantArgs(grants), '--', ...command]`; the flag
+ * spellings stay private to this package.
+ * @param grants - the read-only and read-write roots to allow.
+ * @returns the `--ro <path>` / `--rw <path>` argument list, read-only roots
+ *   first, in the caller's order.
+ */
+export function grantArgs(grants) {
+    return [
+        ...(grants.readOnly ?? []).flatMap(root => ['--ro', root]),
+        ...(grants.readWrite ?? []).flatMap(root => ['--rw', root]),
+    ];
+}
+/**
+ * Functional probe: `landlock-run --probe` builds and enforces a maximal
+ * ruleset in a short-lived child and exits 0 only when the running kernel
+ * actually enforces it — `--version`-style checks would miss a kernel that
+ * has the syscalls but refuses enforcement. The probe's one report line is
+ * part of the CLI contract and distinguishes complete from per-ABI-subset
+ * enforcement; a zero exit without the partial marker reads as `full`. A
+ * failed or timed-out spawn (missing binary, wrong architecture, unenforcing
+ * kernel) probes `unusable`. Synchronous by design: consumers run it once
+ * and cache the verdict.
+ * @param launcher - the launcher path to probe; defaults to
+ *   {@link launcherPath}'s resolution for this host.
+ * @param options - `timeoutMs` bounds the probe child (default 2000).
+ * @returns the enforcement verdict for this host.
+ */
+export function probe(launcher = launcherPath(), options = {}) {
+    const result = spawnSync(launcher, ['--probe'], {
+        timeout: options.timeoutMs ?? 2000,
+        encoding: 'utf8',
+        stdio: ['ignore', 'pipe', 'ignore'],
+    });
+    if (result.status !== 0)
+        return 'unusable';
+    return /partially enforced/.test(result.stdout) ? 'partial' : 'full';
+}

package/dist/kernel/node-addon-landlock-run/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@nomix-ai/node-addon-landlock-run",
+  "version": "0.1.1",
+  "private": true,
+  "type": "module",
+  "description": "Landlock self-restrict-then-exec launcher for sandboxing subprocesses on Linux: per-platform prebuilt static binaries plus the JS seam that resolves, probes, and speaks their CLI contract",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ditgaldev/nomix-harness.git",
+    "directory": "native/landlock-run/packages/entry"
+  },
+  "main": "lib/index.js",
+  "types": "lib/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./lib/index.d.ts",
+      "default": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "README.md",
+    "lib/",
+    "!lib/*.tsbuildinfo",
+    "src/main.c"
+  ],
+  "scripts": {
+    "build:js": "tsc -b",
+    "prepack": "node ../../scripts/verify-entry-lib.mjs"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "license": "BSD-3-Clause",
+  "optionalDependencies": {
+    "@nomix-ai/node-addon-landlock-run-linux-arm64": "workspace:*",
+    "@nomix-ai/node-addon-landlock-run-linux-x64": "workspace:*"
+  }
+}

package/dist/kernel/output-retention/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-output-retention`.
  * @module @nomix-ai/nomix-output-retention/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "output-retention-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/output-retention/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-output-retention",
   "description": "Zero-dependency bounded-retention primitive: ItemRetainer/TextRetainer + neutral notice helpers (what did we keep, what did we omit)",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/permission-presets/lib/index.js

@@ -1,5 +1,5 @@
-import { Service } from "@nomix-ai/cordis";
-import z from "@nomix-ai/schemastery";
+import { Service } from "../../cordis/lib/index.js";
+import z from "../../schemastery/lib/index.mjs";
 import { z as z$1 } from "zod";
 import { SANDBOX_MODES, effectiveSandboxMode, setSandboxMode } from "../../sandbox-policy/lib/index.js";
 import { APPROVAL_POLICIES, effectiveApprovalPolicy, setApprovalPolicy } from "../../user-approval/lib/index.js";

package/dist/kernel/permission-presets/lib/types/index.d.ts

@@ -9,8 +9,8 @@
  *
  * @module nomix-permission-presets
  */
-import { Context, Service } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import { Context, Service } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 import type { Session, SessionEvent } from '../../../session/lib/index.js';
 import type { SandboxMode } from '../../../sandbox/lib/index.js';
 import type { ApprovalPolicy } from '../../../user-approval/lib/index.js';

package/dist/kernel/permission-presets/lib/types/index.js

@@ -9,8 +9,8 @@
  *
  * @module nomix-permission-presets
  */
-import { Service } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import { Service } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 import { z as zod } from 'zod';
 import { SANDBOX_MODES, effectiveSandboxMode, setSandboxMode } from '../../../sandbox-policy/lib/index.js';
 import { APPROVAL_POLICIES, effectiveApprovalPolicy, setApprovalPolicy } from '../../../user-approval/lib/index.js';

package/dist/kernel/permission-presets/lib/types/invariant.d.ts

@@ -1,5 +1,5 @@
 /** Package-owned permission-preset event invariants. @module @nomix-ai/nomix-permission-presets/invariant */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "permission-presets-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/permission-presets/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-permission-presets",
   "description": "User-facing permission presets (ctx.permissionPresets) for the Nomix Harness: one product-level Permissions select bundling the sandbox-mode and approval-policy knobs, written through to their own session events",
-  "version": "0.2.3",
+  "version": "0.2.5",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/persona/lib/index.js

@@ -1,4 +1,4 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { PERSONA_ORDER, PERSONA_SECTION } from "../../system-prompt/lib/index.js";
 //#region lib/types/index.js
 /**

package/dist/kernel/persona/lib/types/index.d.ts

@@ -12,8 +12,8 @@
  * change an agent's tools but never its identity.
  * @module @nomix-ai/nomix-persona
  */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 import { PERSONA_ORDER, PERSONA_SECTION } from '../../../system-prompt/lib/index.js';
 export { PERSONA_ORDER, PERSONA_SECTION };
 /** Cordis plugin name. */

package/dist/kernel/persona/lib/types/index.js

@@ -12,7 +12,7 @@
  * change an agent's tools but never its identity.
  * @module @nomix-ai/nomix-persona
  */
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 // Imported rather than restated: the registry declares the slot this row
 // replaces, and two hardcoded copies would drift into a preset whose persona
 // silently lands beside the deployment's instead of shadowing it.

package/dist/kernel/persona/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-persona`.
  * @module @nomix-ai/nomix-persona/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "persona-invariant";
 /** Service required before the companion can reserve package ownership. */