@nomix-ai/nomix-harness 0.2.4 → 0.2.6

package/dist/kernel/client-connection/lib/types/client/fixture.js

@@ -41,7 +41,7 @@ const MARKDOWN_FIXTURE = [
     '| history | rendered |',
     '| streaming | stable |',
     '',
-    '[Nomix Harness](https://github.com/ditgaldev/nomix-harness)',
+    '[DeepSeek](https://www.deepseek.com)',
     '',
     '```ts',
     'const markdown = true',
@@ -214,11 +214,11 @@ const WEB_SEARCH_RESULT = {
             publishedAt: '2026-07-01',
         },
         {
-            url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md',
+            url: 'https://www.deepseek.com/blog/harness-architecture',
             snippet: 'The capability-seam pattern splits each capability into interface, implementation, and consumer packages.',
         },
         {
-            url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/user/develop/basic/index.md',
+            url: 'https://docs.deepseek.com/harness/plugins',
             title: 'Writing a harness plugin',
             publishedAt: '2026-06-15',
         },
@@ -227,7 +227,7 @@ const WEB_SEARCH_RESULT = {
 };
 /** The `web_fetch` result view for the web-fetch turn, authored inline for the same reason. */
 const WEB_FETCH_RESULT = {
-    url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md',
+    url: 'https://www.deepseek.com/blog/harness-architecture',
     statusCode: 200,
     truncated: false,
 };
@@ -488,8 +488,8 @@ function buildAlphaLog() {
     // the real tools so they hit the keyed WebRow registration. Ordered BEFORE
     // the todo turn for the same reason turn 66 is: the standing plan retires at
     // the next turn/start, so a turn after it would empty the dock's plan strip.
-    toolTurn(70, 'web_search', '{"query":"nomix harness architecture"}', 'Search results for nomix harness architecture.');
-    toolTurn(71, 'web_fetch', '{"url":"https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md"}', '# Harness architecture\n\nEverything is a plugin.');
+    toolTurn(70, 'web_search', '{"queries":["nomix harness architecture"]}', 'Search results for nomix harness architecture.');
+    toolTurn(71, 'web_fetch', '{"url":"https://www.deepseek.com/blog/harness-architecture"}', '# Harness architecture\n\nEverything is a plugin.');
     // Turn 72: max-tokens sample — the provider ends the turn at its output cap
     // mid-sentence, so the chat flow must render the turn-max-tokens notice
     // instead of ending silently. Ordered before the todo turn for the same
@@ -596,8 +596,11 @@ function presentCall(name, argsRaw) {
         // The web tools keep a GENERIC pending card and add the `web` result card
         // only at result time (the contract's result-only web shape); their pending
         // kind matches the result kind so a call and its result read as one category.
-        case 'web_search':
-            return { card: 'generic', title: `Search ${str(args.query)}`, kind: 'search', rawInput: args };
+        case 'web_search': {
+            const queries = Array.isArray(args.queries) ? args.queries.filter((query) => typeof query === 'string' && query !== '') : [];
+            const title = queries.join(', ');
+            return { card: 'generic', title: `Search ${title}`, kind: 'search', rawInput: args };
+        }
         case 'web_fetch':
             return { card: 'generic', title: `Fetch ${str(args.url)}`, kind: 'fetch', rawInput: args };
         default:
@@ -676,28 +679,37 @@ function viewFor(event, log) {
     return undefined;
 }
 /**
- * Fixture parallel of the plan unit's double-event fold: `command/run`
- * records named `plan` with recorded input set the wanted target (`off` →
- * false, else true); `plan/mode` commits and clears it. `wanted` is exposed
- * for the prompt boundary (the fixture's step/start parallel).
+ * Fixture parallel of the plan unit's lifecycle fold. The paired
+ * `command/done` retains successful plan selections and drops failures;
+ * `plan/mode` commits one. `wanted` is exposed for the prompt boundary (the
+ * fixture's step/start parallel).
  */
 function foldPlan(log) {
     let active = false;
     let wanted = null;
+    let running = null;
     for (const event of log) {
         const item = event;
         if (item.type === 'command/run' && item.data?.['name'] === 'plan') {
             const args = item.data['args'];
             if (typeof args !== 'string')
                 continue;
-            wanted = args.trim() !== 'off';
+            running = { commandId: item.data['commandId'], wanted: args.trim() !== 'off' };
+        }
+        else if (item.type === 'command/done'
+            && item.data !== undefined
+            && running !== null
+            && item.data['commandId'] === running.commandId) {
+            wanted = item.data['kind'] === 'success' && running.wanted !== active ? running.wanted : null;
+            running = null;
         }
         else if (item.type === 'plan/mode') {
             active = item.data?.['active'] === true;
             wanted = null;
         }
     }
-    return { active, pending: wanted !== null && wanted !== active, wanted };
+    const selected = running?.wanted ?? wanted;
+    return { active, pending: selected !== null && selected !== active, wanted: selected };
 }
 /** The plan projection's wire view over the full log. */
 function planViewOf(log) {
@@ -962,6 +974,7 @@ function projectionValuesOf(log) {
         maxImagesPerMessage: 20,
         maxMessageImageBytes: 100 * 1024 * 1024,
         maxImagePixels: 40_000_000,
+        maxImageDimension: 2000,
         mediaTypes: ['image/png', 'image/jpeg', 'image/webp', 'image/gif'],
     };
     return values;
@@ -1340,6 +1353,7 @@ function createFixtureWorld(options) {
     // live under one workspace, whose account carries them in attach order.
     const wid = (raw) => raw;
     const fixtureEpoch = new Date(Date.now() - 300_000).toISOString();
+    const FIXTURE_HOME = '/home/fixture';
     const workspaces = options.empty ? [] : [{
             workspaceId: wid('fx-ws-fixture'),
             path: '/tmp/fixture',
@@ -1347,6 +1361,13 @@ function createFixtureWorld(options) {
             sessionIds: [sid('fx-alpha'), sid('fx-beta'), sid('fx-gamma')],
             createdAt: fixtureEpoch,
             updatedAt: fixtureEpoch,
+        }, {
+            workspaceId: wid('fx-ws-home'),
+            path: `${FIXTURE_HOME}/Documents/project`,
+            title: 'project',
+            sessionIds: [],
+            createdAt: fixtureEpoch,
+            updatedAt: fixtureEpoch,
         }];
     let nextWorkspace = 1;
     // Registry-global archive set mirroring the host: archived sessions keep
@@ -1356,7 +1377,6 @@ function createFixtureWorld(options) {
     // deterministic content mirroring the design mock so assembled Web tests
     // and snapshots can walk it. Leaves are materialized lazily: a child listed
     // by its parent lists as empty until something is created inside it.
-    const FIXTURE_HOME = '/home/fixture';
     const directoryTree = new Map([
         ['/', ['home']],
         ['/home', ['fixture']],
@@ -1511,13 +1531,13 @@ function createFixtureWorld(options) {
                 value: [
                     { name: 'compact', description: 'fixture：压缩当前会话上下文' },
                     { name: 'echo', description: 'fixture：回显参数', input: { hint: 'text to echo' } },
-                    { name: 'goal', description: 'set or view the goal for a long-running task', input: { hint: '<objective>' } },
+                    { name: 'goal', description: 'set or view the goal for a long-running task', input: { hint: '<objective>', images: true } },
                     { name: 'permission', description: 'Switch the permission preset (sandbox mode + approval policy)', input: { hint: '<preset>' } },
-                    { name: 'plan', description: 'Enter or leave plan mode', input: { hint: '[off|message]' } },
+                    { name: 'plan', description: 'Enter or leave plan mode', input: { hint: '[off|message]', images: true } },
                 ],
             };
         },
-        execute(id, line) {
+        execute(id, line, images = []) {
             const missing = requireGoalSession(id);
             if (missing !== undefined)
                 return missing;
@@ -1526,6 +1546,29 @@ function createFixtureWorld(options) {
             const match = /^\/(\S+)((?:\s.*)?)$/.exec(line.trim());
             const name = match?.[1];
             const args = match?.[2] ?? '';
+            // Mirror the Host image policy AFTER command resolution, matching the
+            // executor's order (an unknown name answers undefined and logs no
+            // lifecycle): the declaration rejection covers every known command
+            // without `input.images`, and the two producer grammar rejections cover
+            // the declaring commands' control-only lines. The fixture stores no
+            // bytes, so an accepted batch is acknowledged and dropped.
+            const known = ['permission', 'goal', 'compact', 'echo', 'plan'];
+            if (images.length > 0 && name !== undefined && known.includes(name)) {
+                const rejection = name !== 'goal' && name !== 'plan'
+                    ? `/${name} does not accept image attachments`
+                    : name === 'goal' && args.trim() === ''
+                        ? 'Image attachments only accompany a goal objective: /goal <objective> or /goal edit <objective>.'
+                        : name === 'plan' && args.trim() === 'off'
+                            ? 'Image attachments cannot accompany /plan off.'
+                            : undefined;
+                if (rejection !== undefined) {
+                    const commandId = `fx-cmd-${logOf(id).length}`;
+                    append(id, { type: 'command/run', data: { commandId, name, args, source: { kind: 'user' } } });
+                    const result = { kind: 'error', text: rejection };
+                    append(id, { type: 'command/done', data: { commandId, ...result } });
+                    return { ok: true, value: { commandId, result } };
+                }
+            }
             if (name === 'permission') {
                 const preset = args.trim();
                 const commandId = `fx-cmd-${logOf(id).length}`;
@@ -1607,6 +1650,46 @@ function createFixtureWorld(options) {
         activation: projection.goal.phase === 'active' ? 'armed' : 'disarmed',
     });
     /** Canonical fixture implementation of the generated Goal Remote contract. */
+    /** Canonical fixture implementation of the generated reference-discovery Remote contracts. */
+    const referenceRemotes = {
+        files(id, query) {
+            const missing = requireGoalSession(id);
+            if (missing !== undefined)
+                return missing;
+            const needle = query.toLocaleLowerCase();
+            const items = [
+                { path: 'notes', kind: 'directory' },
+                { path: 'README.md', kind: 'file' },
+                { path: 'notes/demo.txt', kind: 'file' },
+            ].filter(item => item.path.toLocaleLowerCase().includes(needle));
+            return { ok: true, value: items };
+        },
+        sessions(id, query) {
+            const missing = requireGoalSession(id);
+            if (missing !== undefined)
+                return missing;
+            const needle = query.toLocaleLowerCase();
+            const value = sessions
+                .filter(item => item.sessionId !== id)
+                .filter(item => String(item.sessionId).toLocaleLowerCase().includes(needle)
+                || item.cwd?.toLocaleLowerCase().includes(needle) === true)
+                .map((item) => {
+                const label = item.sessionId === sid('fx-beta') ? 'Fixture child session' : String(item.sessionId);
+                const encoded = btoa(JSON.stringify(item.sessionId))
+                    .replaceAll('+', '-')
+                    .replaceAll('/', '_')
+                    .replace(/=+$/u, '');
+                return {
+                    sessionId: item.sessionId,
+                    label,
+                    ...item.cwd === undefined ? {} : { cwd: item.cwd },
+                    createdAt: item.updatedAt,
+                    mention: `@[${label}](nomix-session:${encoded})`,
+                };
+            });
+            return { ok: true, value };
+        },
+    };
     const goalRemotes = {
         create(id, request) {
             const missing = requireGoalSession(id);
@@ -2169,6 +2252,13 @@ function createFixtureWorld(options) {
                     return err(request, { code: 'session-not-found', message: `no session ${id}`, details: { sessionId: id } });
                 }
                 if (options.rejectPrompt) {
+                    if (content.some(block => block.type === 'image')) {
+                        return err(request, {
+                            code: 'attachment-error',
+                            message: 'fixture: image side exceeds the deployment limit',
+                            details: { reason: 'IMAGE_DIMENSION_TOO_LARGE' },
+                        });
+                    }
                     return err(request, {
                         code: 'agent-busy',
                         message: 'fixture: prompt rejected before acceptance',
@@ -2279,7 +2369,7 @@ function createFixtureWorld(options) {
         },
         host: {
             describe: request => ok(request, {
-                version: '0.0.0-fixture', cwd: '/tmp/fixture', attachedSessions, canOpenPath: true,
+                version: '0.0.0-fixture', cwd: '/tmp/fixture', attachedSessions, home: FIXTURE_HOME, canOpenPath: true,
             }),
             // Deterministic native pick: the keyless lanes drive the full
             // pick-then-adopt path without an OS chooser (design-mock content,
@@ -2744,7 +2834,9 @@ function createFixtureWorld(options) {
             const sessionId = args.agentId;
             switch (endpoint) {
                 case 'commands/list': return Promise.resolve(commandRemotes.list(sessionId));
-                case 'commands/execute': return Promise.resolve(commandRemotes.execute(sessionId, args.line));
+                case 'commands/execute': return Promise.resolve(commandRemotes.execute(sessionId, args.line, args.images ?? []));
+                case 'fileReferences/list': return Promise.resolve(referenceRemotes.files(sessionId, args.query ?? ''));
+                case 'sessionReferenceResolver/candidates': return Promise.resolve(referenceRemotes.sessions(sessionId, args.query ?? ''));
                 case 'goals/create': return Promise.resolve(goalRemotes.create(sessionId, {
                     objective: args.request?.objective,
                     ...args.request?.maxGoalRounds === undefined ? {} : { maxGoalRounds: args.request.maxGoalRounds },

package/dist/kernel/client-connection/lib/types/client/index.d.ts

@@ -3,14 +3,16 @@
  * the shared API client, and lets the runtime object layer start the stream
  * controller with its sinks.
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../../cordis/lib/index.js';
 import type { HostDescription, IApiClient } from './api.ts';
 import { type ConnectionConfig, type ConnectionSinks, type ConnectionState } from './connection.ts';
+import { type RpcFetch } from './rpc.ts';
 import type { ClientConnectionRpc } from '../rpc.ts';
 export type { ApiProxy, SessionsApi, SessionSearchItem, SessionSummary, PromptContentPart, HostApi, EventsApi, MuxFrame, HostFrame, ApprovalResponsePayload, QuestionResponsePayload, HistoryEntry, ToolEventView, DirectoryEntry, DirectoryListing, ToolCallView, ToolResultView, WorkspaceApi, WorkspaceId, WorkspaceView, SkillsApi, SkillEntry, ModelCatalogFailure, ModelCatalogModel, ModelProviderGroup, ModelReasoning, MessageId, ModelReasoningEffort, ModelSelection, QueueAction, QueuedInboxItem, SessionModels, SubagentsApi, SubagentAddress, SubagentCatalog, SubagentListEntry, SubagentPromptReceipt, JobView, RpcRequest, RpcResponse, RpcResult, RpcError, RpcErrorCode, ClientRequest, ServerResponse, ServerRequest, ClientResponse, RpcMessage, RpcReceipt, HostDescription, IApiClient, SessionId, SessionEvent, ContentBlock, StreamChunk, GoalsApi, GoalRef, SettingsApi, SettingsNamespaceView, SettingsPathOpView, SettingsSecretView, CredentialsApi, CredentialView, ConfigurableProviderView, DiscoveredModelView, LlmApi, } from './api.ts';
 export { RpcId, AbstractApiClient, transportError, } from './api.ts';
 export type { ConnectionConfig, ConnectionSinks, ConnectionState };
 export type { ClientConnectionRpc } from '../rpc.ts';
+export type { RpcFetch } from './rpc.ts';
 /** Observable Host description published by each completed connection handshake. */
 export interface HostDescriptionSource {
     /** Latest connected-generation description; absent before connect and while reconnecting. */
@@ -20,6 +22,24 @@ export interface HostDescriptionSource {
 }
 /** Required services (none — this is the wire root). */
 export declare const inject: string[];
+/**
+ * Carrier override installed on the page global before plugin boot. The served
+ * web app leaves it unset and gets HTTP + WebSocket; a shell that owns a
+ * different physical transport (the worker preview's postMessage tunnel)
+ * provides both halves here instead of forking this plugin.
+ */
+export interface ClientTransportHooks {
+    /** Build the API carrier: unary calls plus the two downstream event streams. */
+    createApiClient(): IApiClient;
+    /** Transport for generic unary RPC channels (the Typert gateway). */
+    fetch: RpcFetch;
+    /**
+     * Bundle transport for the module system, present when the carrier also owns
+     * bundle bytes (the worker tunnel). Absent in the served web app, whose
+     * bundles load over HTTP.
+     */
+    loadBundle?(url: string): Promise<void>;
+}
 /**
  * The ctx.connection service API: the API client plus a one-shot
  * controller starter (the runtime plugin supplies sinks when its object layer
@@ -30,7 +50,7 @@ export interface ConnectionHandle {
     readonly api: IApiClient;
     /** Whether the current page authority is loopback; non-browser contexts default to true. */
     readonly isLoopback: boolean;
-    /** Generation-scoped Host facts, including native path-open capability. */
+    /** Generation-scoped Host facts, including the account home and native path-open capability. */
     readonly hostDescription: HostDescriptionSource;
     /** Generic logical RPC channels over the same Connection transport. */
     readonly rpc: ClientConnectionRpc;

package/dist/kernel/client-connection/lib/types/client/index.js

@@ -14,8 +14,9 @@ export function apply(ctx) {
     const pageLocation = typeof location === 'undefined' ? undefined : location;
     const fixture = pageLocation !== undefined && new URLSearchParams(pageLocation.search).has('fixture');
     const fixtureClient = fixture ? new FixtureApiClient() : undefined;
-    const api = fixtureClient ?? new WebApiClient();
-    const rpc = fixtureClient?.rpc ?? createWebConnectionRpc();
+    const transport = globalThis.__NOMIX_TRANSPORT__;
+    const api = fixtureClient ?? transport?.createApiClient() ?? new WebApiClient();
+    const rpc = fixtureClient?.rpc ?? createWebConnectionRpc(transport?.fetch);
     let started = false;
     let description;
     const descriptionListeners = new Set();

package/dist/kernel/client-connection/lib/types/client/rpc.d.ts

@@ -1,8 +1,11 @@
 /** Browser caller for generic Connection unary RPC channels. */
 import type { ClientConnectionRpc } from '../rpc.ts';
+/** Transport this caller posts through; same signature as the global `fetch`. */
+export type RpcFetch = (input: URL, init: RequestInit) => Promise<Response>;
 /**
  * Create the browser-backed generic RPC caller.
+ * @param doFetch - transport override; defaults to the page's global fetch.
  * @returns caller that owns request correlation and response-envelope validation.
  */
-export declare function createWebConnectionRpc(): ClientConnectionRpc;
+export declare function createWebConnectionRpc(doFetch?: RpcFetch): ClientConnectionRpc;
 //# sourceMappingURL=rpc.d.ts.map

package/dist/kernel/client-connection/lib/types/client/rpc.js

@@ -6,9 +6,11 @@ const CHANNEL_PATTERN = /^\/[A-Za-z0-9._~-]+$/;
 const ENDPOINT_SEGMENT_PATTERN = /^[A-Za-z0-9_$.-]+$/;
 /**
  * Create the browser-backed generic RPC caller.
+ * @param doFetch - transport override; defaults to the page's global fetch.
  * @returns caller that owns request correlation and response-envelope validation.
  */
-export function createWebConnectionRpc() {
+export function createWebConnectionRpc(doFetch) {
+    const send = doFetch ?? ((input, init) => globalThis.fetch(input, init));
     return {
         async call(channel, endpoint, payload, signal) {
             assertTarget(channel, endpoint);
@@ -19,7 +21,7 @@ export function createWebConnectionRpc() {
                 method: endpoint,
                 payload,
             };
-            const response = await globalThis.fetch(new URL(`${channel}/${endpoint}`, resolveBase()), {
+            const response = await send(new URL(`${channel}/${endpoint}`, resolveBase()), {
                 method: 'POST',
                 headers: { 'content-type': 'application/json' },
                 body: JSON.stringify(message),

package/dist/kernel/client-connection/lib/types/http-bridge.d.ts

@@ -4,8 +4,8 @@
  */
 import type { IncomingMessage, ServerResponse } from 'node:http';
 /** Default carrier cap for all HTTP RPC bodies: sized for the default
- * aggregate image limit (100 MiB) after base64 expansion plus envelope
- * headroom (~134.3 MiB required), rounded up for slack. The bridge buffers
+ * aggregate image limit (200 MiB) after base64 expansion plus envelope
+ * headroom (~267.7 MiB required), rounded up for slack. The bridge buffers
  * each body in memory, so this cap is also the per-request resident bound. */
 export declare const DEFAULT_MAX_REQUEST_BODY_BYTES: number;
 /** Transport-independent request handler consumed by the Host HTTP bridge. */

package/dist/kernel/client-connection/lib/types/http-bridge.js

@@ -3,10 +3,10 @@
  * web carrier; the fetch-shaped handler itself is transport-agnostic).
  */
 /** Default carrier cap for all HTTP RPC bodies: sized for the default
- * aggregate image limit (100 MiB) after base64 expansion plus envelope
- * headroom (~134.3 MiB required), rounded up for slack. The bridge buffers
+ * aggregate image limit (200 MiB) after base64 expansion plus envelope
+ * headroom (~267.7 MiB required), rounded up for slack. The bridge buffers
  * each body in memory, so this cap is also the per-request resident bound. */
-export const DEFAULT_MAX_REQUEST_BODY_BYTES = 160 * 1024 * 1024;
+export const DEFAULT_MAX_REQUEST_BODY_BYTES = 300 * 1024 * 1024;
 /**
  * Bridge one node:http request to the fetch-shaped handler (client close
  * aborts; SSE bodies stream out chunk by chunk).

package/dist/kernel/client-connection/lib/types/index.d.ts

@@ -1,6 +1,6 @@
 /** Host HTTP bridge for browser-client RPC. */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 export type { ConnectionRpcAuthority, ConnectionRpcEndpointMatcher, ConnectionRpcHandler, ConnectionRpcHandlerOptions, HostConnectionHandle, HostConnectionRpc, } from './rpc.ts';
 export { HostConnectionService } from './rpc-host.ts';
 export { API_PATH, HOST_EVENTS_PATH, MUX_EVENTS_PATH } from './api-path.ts';
@@ -19,7 +19,7 @@ export interface ConnectionConfig {
      * that is not a bare, canonical authority fails the plugin load.
      */
     trustedHosts?: string[];
-    /** Maximum buffered JSON body for every `/api` request. */
+    /** Maximum buffered JSON body for every `/api` request. Default: 300 MiB. */
     maxRequestBodyBytes?: number;
 }
 export declare const Config: z<ConnectionConfig>;

package/dist/kernel/client-connection/lib/types/index.js

@@ -1,4 +1,4 @@
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { toFetchHandler } from '../../../host-apiproxy/lib/index.js';
 import { API_PATH, HOST_EVENTS_PATH, MUX_EVENTS_PATH } from "./api-path.js";
 import { bridge, DEFAULT_MAX_REQUEST_BODY_BYTES } from "./http-bridge.js";

package/dist/kernel/client-connection/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-client-connection`.
  * @module @nomix-ai/nomix-client-connection/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "client-connection-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/client-connection/lib/types/rpc-host.d.ts

@@ -1,5 +1,5 @@
 /** Host registry and HTTP adapter for generic Connection RPC channels. */
-import { Context, Service } from '@nomix-ai/cordis';
+import { Context, Service } from '../../../cordis/lib/index.js';
 import { type FetchHandler } from './http-bridge.ts';
 import type { HostConnectionHandle, HostConnectionRpc } from './rpc.ts';
 declare module '@nomix-ai/cordis' {

package/dist/kernel/client-connection/lib/types/rpc-host.js

@@ -1,5 +1,5 @@
 /** Host registry and HTTP adapter for generic Connection RPC channels. */
-import { Service } from '@nomix-ai/cordis';
+import { Service } from '../../../cordis/lib/index.js';
 import { clientRequestSchema, RpcId, } from '../../../host-apiproxy/lib/types/api/index.js';
 import { bridge } from "./http-bridge.js";
 import { isTrustedApiRequest } from "./api-request-trust.js";

package/dist/kernel/client-connection/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-client-connection",
   "description": "Wire consumer layer: HTTP-up/WebSocket-down client, ConnectionController dual streams with reconnect, and fixture api",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },
@@ -38,12 +38,6 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@nomix-ai/nomix-attachment": "workspace:^",
-    "@nomix-ai/nomix-host-apiproxy": "workspace:^",
-    "@nomix-ai/nomix-commands": "workspace:^",
-    "@nomix-ai/nomix-llm": "workspace:^",
-    "@nomix-ai/nomix-session": "workspace:^",
-    "@nomix-ai/nomix-tools": "workspace:^",
     "@nomix-ai/schemastery": "workspace:^",
     "ws": "^8.21.0"
   },
@@ -56,12 +50,24 @@
   "peerDependencies": {
     "@nomix-ai/nomix-host-webserver": "workspace:^",
     "@nomix-ai/nomix-invariants": "workspace:^",
-    "@nomix-ai/cordis": "workspace:^"
+    "@nomix-ai/cordis": "workspace:^",
+    "@nomix-ai/nomix-attachment": "workspace:^",
+    "@nomix-ai/nomix-host-apiproxy": "workspace:^",
+    "@nomix-ai/nomix-commands": "workspace:^",
+    "@nomix-ai/nomix-llm": "workspace:^",
+    "@nomix-ai/nomix-session": "workspace:^",
+    "@nomix-ai/nomix-tools": "workspace:^"
   },
   "devDependencies": {
     "@nomix-ai/nomix-host-webserver": "workspace:^",
     "@nomix-ai/nomix-invariants": "workspace:^",
     "@types/ws": "^8.18.1",
-    "@nomix-ai/cordis": "workspace:^"
+    "@nomix-ai/cordis": "workspace:^",
+    "@nomix-ai/nomix-attachment": "workspace:^",
+    "@nomix-ai/nomix-host-apiproxy": "workspace:^",
+    "@nomix-ai/nomix-commands": "workspace:^",
+    "@nomix-ai/nomix-llm": "workspace:^",
+    "@nomix-ai/nomix-session": "workspace:^",
+    "@nomix-ai/nomix-tools": "workspace:^"
   }
 }

package/dist/kernel/client-hmr/lib/index.js

@@ -1,5 +1,5 @@
 import { statSync } from "node:fs";
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 //#region lib/types/events.js
 /**
 * Wire protocol of the `/plugins/events` dev SSE channel — single source for

package/dist/kernel/client-hmr/lib/types/client/index.d.ts

@@ -61,7 +61,7 @@
  * fiberless (the next rebuilt frame retries from scratch); an apply failure
  * leaves a FAILED fiber for the shell's status projection. Both log loudly.
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../../cordis/lib/index.js';
 export type { PluginsEventFrame } from '../events.ts';
 export { EVENTS_ENDPOINT } from '../events.ts';
 /** Cordis plugin name. */

package/dist/kernel/client-hmr/lib/types/index.d.ts

@@ -1,5 +1,5 @@
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 export type { PluginsEventFrame } from './events.ts';
 export { EVENTS_ENDPOINT } from './events.ts';
 /** Cordis plugin name. */

package/dist/kernel/client-hmr/lib/types/index.js

@@ -9,7 +9,7 @@
  * chain stays idle.
  */
 import { statSync } from 'node:fs';
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { EVENTS_ENDPOINT } from "./events.js";
 export { EVENTS_ENDPOINT } from "./events.js";
 /** Cordis plugin name. */

package/dist/kernel/client-hmr/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-client-hmr`.
  * @module @nomix-ai/nomix-client-hmr/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "client-hmr-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/client-hmr/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-client-hmr",
   "description": "Dev-only hot-reload driver for script-loaded client entries: SSE rebuilt frames → invalidate/prefetch → fiber swap through the vendored Loader entry",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },