@nomix-ai/nomix-harness 0.2.4 → 0.2.6

package/dist/kernel/bash-sandbox/lib/types/index.d.ts

@@ -7,7 +7,7 @@
  * local-executor semantics. The tool owns approval and passes a complete per-call policy.
  * @module @nomix-ai/nomix-bash-sandbox
  */
-import { Context } from '@nomix-ai/cordis';
+import { Context } from '../../../cordis/lib/index.js';
 import type { ShellExecRequest, ShellExecSpec, ShellProcess, ShellRunResult } from '../../../shell/lib/index.js';
 import type { SandboxMode } from '../../../sandbox/lib/index.js';
 import { LocalBashExecutor } from '../../../bash-local/lib/index.js';

package/dist/kernel/bash-sandbox/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-bash-sandbox`.
  * @module @nomix-ai/nomix-bash-sandbox/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "bash-sandbox-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/bash-sandbox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-bash-sandbox",
   "description": "Sandbox-consuming implementation of the Nomix Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/brand/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-brand`.
  * @module @nomix-ai/nomix-brand/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "brand-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/brand/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-brand",
   "description": "Type-only Branded<B> nominal-typing primitive for the Nomix Harness",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/client-connection/lib/client.js

@@ -5360,6 +5360,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			maxImagesPerMessage: number().int().positive(),
 			maxMessageImageBytes: number().int().positive(),
 			maxImagePixels: number().int().positive(),
+			maxImageDimension: number().int().positive(),
 			mediaTypes: array(string())
 		});
 		/** session.history response value (projections rides the tail page only). */
@@ -5707,6 +5708,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			provider: string().optional(),
 			model: string().optional(),
 			attachedSessions: number().int().nonnegative(),
+			home: string(),
 			canOpenPath: boolean()
 		});
 		object({});
@@ -6421,7 +6423,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"| history | rendered |",
 			"| streaming | stable |",
 			"",
-			"[Nomix Harness](https://github.com/ditgaldev/nomix-harness)",
+			"[DeepSeek](https://www.deepseek.com)",
 			"",
 			"```ts",
 			"const markdown = true",
@@ -6619,11 +6621,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					publishedAt: "2026-07-01"
 				},
 				{
-					url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md",
+					url: "https://www.deepseek.com/blog/harness-architecture",
 					snippet: "The capability-seam pattern splits each capability into interface, implementation, and consumer packages."
 				},
 				{
-					url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/user/develop/basic/index.md",
+					url: "https://docs.deepseek.com/harness/plugins",
 					title: "Writing a harness plugin",
 					publishedAt: "2026-06-15"
 				}
@@ -6632,7 +6634,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		};
 		/** The `web_fetch` result view for the web-fetch turn, authored inline for the same reason. */
 		const WEB_FETCH_RESULT = {
-			url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md",
+			url: "https://www.deepseek.com/blog/harness-architecture",
 			statusCode: 200,
 			truncated: false
 		};
@@ -7084,8 +7086,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			toolTurn(67, "grep", "{\"pattern\":\"SEARCH_MAX_LINES\",\"path\":\"packages/client\"}", SEARCH_MATCHES_TEXT);
 			toolTurn(68, "glob", "{\"pattern\":\"**/SearchBlock*\",\"path\":\"packages/client\"}", SEARCH_PATHS_TEXT);
 			toolTurn(69, "read", `{"file_path":${JSON.stringify(READ_SAMPLE_PATH)},"offset":${READ_SAMPLE_FIRST_LINE}}`, READ_SAMPLE_TEXT);
-			toolTurn(70, "web_search", "{\"query\":\"nomix harness architecture\"}", "Search results for nomix harness architecture.");
-			toolTurn(71, "web_fetch", "{\"url\":\"https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md\"}", "# Harness architecture\n\nEverything is a plugin.");
+			toolTurn(70, "web_search", "{\"queries\":[\"nomix harness architecture\"]}", "Search results for nomix harness architecture.");
+			toolTurn(71, "web_fetch", "{\"url\":\"https://www.deepseek.com/blog/harness-architecture\"}", "# Harness architecture\n\nEverything is a plugin.");
 			push({
 				type: "turn/start",
 				data: { turn: 72 }
@@ -7264,7 +7266,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				};
 				case "web_search": return {
 					card: "generic",
-					title: `Search ${str(args.query)}`,
+					title: `Search ${(Array.isArray(args.queries) ? args.queries.filter((query) => typeof query === "string" && query !== "") : []).join(", ")}`,
 					kind: "search",
 					rawInput: args
 				};
@@ -7357,29 +7359,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}
 		}
 		/**
-		* Fixture parallel of the plan unit's double-event fold: `command/run`
-		* records named `plan` with recorded input set the wanted target (`off` →
-		* false, else true); `plan/mode` commits and clears it. `wanted` is exposed
-		* for the prompt boundary (the fixture's step/start parallel).
+		* Fixture parallel of the plan unit's lifecycle fold. The paired
+		* `command/done` retains successful plan selections and drops failures;
+		* `plan/mode` commits one. `wanted` is exposed for the prompt boundary (the
+		* fixture's step/start parallel).
 		*/
 		function foldPlan(log) {
 			let active = false;
 			let wanted = null;
+			let running = null;
 			for (const event of log) {
 				const item = event;
 				if (item.type === "command/run" && item.data?.["name"] === "plan") {
 					const args = item.data["args"];
 					if (typeof args !== "string") continue;
-					wanted = args.trim() !== "off";
+					running = {
+						commandId: item.data["commandId"],
+						wanted: args.trim() !== "off"
+					};
+				} else if (item.type === "command/done" && item.data !== void 0 && running !== null && item.data["commandId"] === running.commandId) {
+					wanted = item.data["kind"] === "success" && running.wanted !== active ? running.wanted : null;
+					running = null;
 				} else if (item.type === "plan/mode") {
 					active = item.data?.["active"] === true;
 					wanted = null;
 				}
 			}
+			const selected = running?.wanted ?? wanted;
 			return {
 				active,
-				pending: wanted !== null && wanted !== active,
-				wanted
+				pending: selected !== null && selected !== active,
+				wanted: selected
 			};
 		}
 		/** The plan projection's wire view over the full log. */
@@ -7619,6 +7629,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				maxImagesPerMessage: 20,
 				maxMessageImageBytes: 100 * 1024 * 1024,
 				maxImagePixels: 4e7,
+				maxImageDimension: 2e3,
 				mediaTypes: [
 					"image/png",
 					"image/jpeg",
@@ -7985,6 +7996,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			let attachedSessions = options.empty ? 0 : 1;
 			const wid = (raw) => raw;
 			const fixtureEpoch = (/* @__PURE__ */ new Date(Date.now() - 3e5)).toISOString();
+			const FIXTURE_HOME = "/home/fixture";
 			const workspaces = options.empty ? [] : [{
 				workspaceId: wid("fx-ws-fixture"),
 				path: "/tmp/fixture",
@@ -7996,10 +8008,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				],
 				createdAt: fixtureEpoch,
 				updatedAt: fixtureEpoch
+			}, {
+				workspaceId: wid("fx-ws-home"),
+				path: `${FIXTURE_HOME}/Documents/project`,
+				title: "project",
+				sessionIds: [],
+				createdAt: fixtureEpoch,
+				updatedAt: fixtureEpoch
 			}];
 			let nextWorkspace = 1;
 			const archivedSessionIds = [];
-			const FIXTURE_HOME = "/home/fixture";
 			const directoryTree = new Map([
 				["/", ["home"]],
 				["/home", ["fixture"]],
@@ -8227,7 +8245,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							{
 								name: "goal",
 								description: "set or view the goal for a long-running task",
-								input: { hint: "<objective>" }
+								input: {
+									hint: "<objective>",
+									images: true
+								}
 							},
 							{
 								name: "permission",
@@ -8237,17 +8258,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							{
 								name: "plan",
 								description: "Enter or leave plan mode",
-								input: { hint: "[off|message]" }
+								input: {
+									hint: "[off|message]",
+									images: true
+								}
 							}
 						]
 					};
 				},
-				execute(id, line) {
+				execute(id, line, images = []) {
 					const missing = requireGoalSession(id);
 					if (missing !== void 0) return missing;
 					const match = /^\/(\S+)((?:\s.*)?)$/.exec(line.trim());
 					const name = match?.[1];
 					const args = match?.[2] ?? "";
+					if (images.length > 0 && name !== void 0 && [
+						"permission",
+						"goal",
+						"compact",
+						"echo",
+						"plan"
+					].includes(name)) {
+						const rejection = name !== "goal" && name !== "plan" ? `/${name} does not accept image attachments` : name === "goal" && args.trim() === "" ? "Image attachments only accompany a goal objective: /goal <objective> or /goal edit <objective>." : name === "plan" && args.trim() === "off" ? "Image attachments cannot accompany /plan off." : void 0;
+						if (rejection !== void 0) {
+							const commandId = `fx-cmd-${logOf(id).length}`;
+							append(id, {
+								type: "command/run",
+								data: {
+									commandId,
+									name,
+									args,
+									source: { kind: "user" }
+								}
+							});
+							const result = {
+								kind: "error",
+								text: rejection
+							};
+							append(id, {
+								type: "command/done",
+								data: {
+									commandId,
+									...result
+								}
+							});
+							return {
+								ok: true,
+								value: {
+									commandId,
+									result
+								}
+							};
+						}
+					}
 					if (name === "permission") {
 						const preset = args.trim();
 						const commandId = `fx-cmd-${logOf(id).length}`;
@@ -8409,6 +8472,50 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				activation: projection.goal.phase === "active" ? "armed" : "disarmed"
 			});
 			/** Canonical fixture implementation of the generated Goal Remote contract. */
+			/** Canonical fixture implementation of the generated reference-discovery Remote contracts. */
+			const referenceRemotes = {
+				files(id, query) {
+					const missing = requireGoalSession(id);
+					if (missing !== void 0) return missing;
+					const needle = query.toLocaleLowerCase();
+					return {
+						ok: true,
+						value: [
+							{
+								path: "notes",
+								kind: "directory"
+							},
+							{
+								path: "README.md",
+								kind: "file"
+							},
+							{
+								path: "notes/demo.txt",
+								kind: "file"
+							}
+						].filter((item) => item.path.toLocaleLowerCase().includes(needle))
+					};
+				},
+				sessions(id, query) {
+					const missing = requireGoalSession(id);
+					if (missing !== void 0) return missing;
+					const needle = query.toLocaleLowerCase();
+					return {
+						ok: true,
+						value: sessions.filter((item) => item.sessionId !== id).filter((item) => String(item.sessionId).toLocaleLowerCase().includes(needle) || item.cwd?.toLocaleLowerCase().includes(needle) === true).map((item) => {
+							const label = item.sessionId === sid("fx-beta") ? "Fixture child session" : String(item.sessionId);
+							const encoded = btoa(JSON.stringify(item.sessionId)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+							return {
+								sessionId: item.sessionId,
+								label,
+								...item.cwd === void 0 ? {} : { cwd: item.cwd },
+								createdAt: item.updatedAt,
+								mention: `@[${label}](nomix-session:${encoded})`
+							};
+						})
+					};
+				}
+			};
 			const goalRemotes = {
 				create(id, request) {
 					const missing = requireGoalSession(id);
@@ -9204,11 +9311,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								message: `no session ${id}`,
 								details: { sessionId: id }
 							});
-							if (options.rejectPrompt) return err(request, {
-								code: "agent-busy",
-								message: "fixture: prompt rejected before acceptance",
-								details: { reason: "fixture-prompt-rejection" }
-							});
+							if (options.rejectPrompt) {
+								if (content.some((block) => block.type === "image")) return err(request, {
+									code: "attachment-error",
+									message: "fixture: image side exceeds the deployment limit",
+									details: { reason: "IMAGE_DIMENSION_TOO_LARGE" }
+								});
+								return err(request, {
+									code: "agent-busy",
+									message: "fixture: prompt rejected before acceptance",
+									details: { reason: "fixture-prompt-rejection" }
+								});
+							}
 							summary.updatedAt = Date.now();
 							summary.blank = false;
 							const userText = content.map((b) => b.type === "text" ? b.text : "").join("");
@@ -9319,6 +9433,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							version: "0.0.0-fixture",
 							cwd: "/tmp/fixture",
 							attachedSessions,
+							home: FIXTURE_HOME,
 							canOpenPath: true
 						}),
 						pickDirectory: (request) => ok(request, { path: `${FIXTURE_HOME}/Documents/project` }),
@@ -9831,7 +9946,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					const sessionId = args.agentId;
 					switch (endpoint) {
 						case "commands/list": return Promise.resolve(commandRemotes.list(sessionId));
-						case "commands/execute": return Promise.resolve(commandRemotes.execute(sessionId, args.line));
+						case "commands/execute": return Promise.resolve(commandRemotes.execute(sessionId, args.line, args.images ?? []));
+						case "fileReferences/list": return Promise.resolve(referenceRemotes.files(sessionId, args.query ?? ""));
+						case "sessionReferenceResolver/candidates": return Promise.resolve(referenceRemotes.sessions(sessionId, args.query ?? ""));
 						case "goals/create": return Promise.resolve(goalRemotes.create(sessionId, {
 							objective: args.request?.objective,
 							...args.request?.maxGoalRounds === void 0 ? {} : { maxGoalRounds: args.request.maxGoalRounds }
@@ -10083,9 +10200,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		const ENDPOINT_SEGMENT_PATTERN = /^[A-Za-z0-9_$.-]+$/;
 		/**
 		* Create the browser-backed generic RPC caller.
+		* @param doFetch - transport override; defaults to the page's global fetch.
 		* @returns caller that owns request correlation and response-envelope validation.
 		*/
-		function createWebConnectionRpc() {
+		function createWebConnectionRpc(doFetch) {
+			const send = doFetch ?? ((input, init) => globalThis.fetch(input, init));
 			return { async call(channel, endpoint, payload, signal) {
 				assertTarget(channel, endpoint);
 				const rpcId = RpcId(randomUuid());
@@ -10095,7 +10214,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					method: endpoint,
 					payload
 				};
-				const response = await globalThis.fetch(new URL(`${channel}/${endpoint}`, resolveBase()), {
+				const response = await send(new URL(`${channel}/${endpoint}`, resolveBase()), {
 					method: "POST",
 					headers: { "content-type": "application/json" },
 					body: JSON.stringify(message),
@@ -10143,8 +10262,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function apply(ctx) {
 			const pageLocation = typeof location === "undefined" ? void 0 : location;
 			const fixtureClient = pageLocation !== void 0 && new URLSearchParams(pageLocation.search).has("fixture") ? new FixtureApiClient() : void 0;
-			const api = fixtureClient ?? new WebApiClient();
-			const rpc = fixtureClient?.rpc ?? createWebConnectionRpc();
+			const transport = globalThis.__NOMIX_TRANSPORT__;
+			const api = fixtureClient ?? transport?.createApiClient() ?? new WebApiClient();
+			const rpc = fixtureClient?.rpc ?? createWebConnectionRpc(transport?.fetch);
 			let started = false;
 			let description;
 			const descriptionListeners = /* @__PURE__ */ new Set();

package/dist/kernel/client-connection/lib/index.js

@@ -1,6 +1,6 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { toFetchHandler } from "../../host-apiproxy/lib/index.js";
-import { Service } from "@nomix-ai/cordis";
+import { Service } from "../../cordis/lib/index.js";
 import { RpcId, clientRequestSchema } from "../../host-apiproxy/lib/types/api/index.js";
 import { randomUUID } from "node:crypto";
 import WebSocket, { WebSocketServer } from "ws";
@@ -23,10 +23,10 @@ const HOST_EVENTS_PATH = `${API_PATH}/events.host`;
 * web carrier; the fetch-shaped handler itself is transport-agnostic).
 */
 /** Default carrier cap for all HTTP RPC bodies: sized for the default
-* aggregate image limit (100 MiB) after base64 expansion plus envelope
-* headroom (~134.3 MiB required), rounded up for slack. The bridge buffers
+* aggregate image limit (200 MiB) after base64 expansion plus envelope
+* headroom (~267.7 MiB required), rounded up for slack. The bridge buffers
 * each body in memory, so this cap is also the per-request resident bound. */
-const DEFAULT_MAX_REQUEST_BODY_BYTES = 160 * 1024 * 1024;
+const DEFAULT_MAX_REQUEST_BODY_BYTES = 300 * 1024 * 1024;
 /**
 * Bridge one node:http request to the fetch-shaped handler (client close
 * aborts; SSE bodies stream out chunk by chunk).
@@ -529,7 +529,7 @@ const PRIVILEGED_METHODS = new Set([
 */
 function apply(ctx, config) {
 	const trustedHosts = config?.trustedHosts ?? [];
-	const maxRequestBodyBytes = config?.maxRequestBodyBytes ?? 167772160;
+	const maxRequestBodyBytes = config?.maxRequestBodyBytes ?? 314572800;
 	for (const entry of trustedHosts) assertTrustedAuthority(entry);
 	if (ctx.get("apiProxy") !== void 0) assertImageBodyCapacity(ctx, maxRequestBodyBytes);
 	const fetchHandler = new HostConnectionService(ctx, trustedHosts).createSharedFetchHandler(API_PATH, { async fetch(request) {