@nomix-ai/nomix-harness 0.2.4 → 0.2.6

package/dist/kernel/commands/lib/typert.host.js

@@ -3,6 +3,11 @@ import { z } from 'zod'
 
 const _nomix_ai_nomix_commands_commands_execute_parameter_0$schema = z.intersection(z.string(), z.unknown())
 const _nomix_ai_nomix_commands_commands_execute_parameter_1$schema = z.string()
+const _nomix_ai_nomix_commands_commands_execute_parameter_2$schema = z.array(z.object({
+  'mediaType': z.union([z.literal("image/png"), z.literal("image/jpeg"), z.literal("image/webp"), z.literal("image/gif")]),
+  'data': z.string(),
+  'name': z.string().optional(),
+}))
 const _nomix_ai_nomix_commands_commands_execute_result$schema = z.union([z.undefined(), z.object({
   'commandId': z.intersection(z.string(), z.unknown()).readonly(),
   'result': z.union([z.object({
@@ -20,6 +25,7 @@ const _nomix_ai_nomix_commands_commands_list_result$schema = z.array(z.object({
   'description': z.string().readonly(),
   'input': z.object({
   'hint': z.string().readonly(),
+  'images': z.boolean().readonly().optional(),
 }).readonly().optional(),
 }))
 
@@ -61,6 +67,16 @@ export const TYPERT = {
             schema: _nomix_ai_nomix_commands_commands_execute_parameter_1$schema,
           },
         },
+        {
+          name: 'images',
+          wire: 'images',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@nomix-ai/nomix-commands#commands/execute:images',
+            schema: _nomix_ai_nomix_commands_commands_execute_parameter_2$schema,
+          },
+        },
       ],
       cancellation: { parameter: 'signal' },
       result: {
@@ -68,7 +84,7 @@ export const TYPERT = {
         typeSymbol: '@nomix-ai/nomix-commands#commands/execute:result',
         schema: _nomix_ai_nomix_commands_commands_execute_result$schema,
       },
-      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":297,"column":9},
+      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":329,"column":9},
     },
     {
       id: '@nomix-ai/nomix-commands#commands/list',
@@ -98,7 +114,7 @@ export const TYPERT = {
         typeSymbol: '@nomix-ai/nomix-commands#commands/list:result',
         schema: _nomix_ai_nomix_commands_commands_list_result$schema,
       },
-      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":260,"column":3},
+      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":285,"column":3},
     },
   ],
   model: {
@@ -135,9 +151,9 @@ export const TYPERT = {
           {
             "kind": "method",
             "name": "execute",
-            "signature": "@Remote async execute( agent: Agent, line: string, signal: AbortSignal, ): Promise<CommandExecution | undefined>",
+            "signature": "@Remote async execute( agent: Agent, line: string, images: readonly EncodedImageAttachment[], signal: AbortSignal, ): Promise<CommandExecution | undefined>",
             "summary": "Parse and execute a known command without sending it to the model.",
-            "jsDoc": "/**\n * Parse and execute a known command without sending it to the model.\n *\n * A resolved command's lifecycle is logged: `command/run` is appended\n * before the handler is invoked and `command/done` after settlement (a\n * thrown or aborted handler settles as `kind: 'error'`). Both are direct\n * log-only appends — no turn wraps them, and persistence drains them at\n * ordinary checkpoints. Admission misses (syntax or unknown name) log\n * nothing — they never entered a handler. A `command/run` append failure\n * fails the execution loud; a `command/done` append failure on the\n * handler-failure path is contained so the handler's own error stays the\n * reported failure.\n *\n * @param agent - exact receiving agent.\n * @param line - complete slash-command line.\n * @param signal - cancellation signal owned by the UI request.\n * @returns the settled execution (result + lifecycle pairing id), or\n *   `undefined` when syntax or name does not resolve.\n */"
+            "jsDoc": "/**\n * Parse and execute a known command without sending it to the model.\n *\n * A resolved command's lifecycle is logged: `command/run` is appended\n * before the handler is invoked and `command/done` after settlement (a\n * thrown or aborted handler settles as `kind: 'error'`). Both are direct\n * log-only appends — no turn wraps them, and persistence drains them at\n * ordinary checkpoints. Admission misses (syntax or unknown name) log\n * nothing — they never entered a handler. A `command/run` append failure\n * fails the execution loud; a `command/done` append failure on the\n * handler-failure path is contained so the handler's own error stays the\n * reported failure.\n *\n * Image admission is enforced here, not in the composer: images sent to a\n * command that does not declare `input.images`, an absent attachment store,\n * and an exceeded attachment limit each settle as an error result before\n * the handler runs, and a rejected batch publishes no durable object.\n *\n * @param agent - exact receiving agent.\n * @param line - complete slash-command line.\n * @param images - base64-encoded composer images accompanying the line, in\n *   submission order; empty for a plain invocation.\n * @param signal - cancellation signal owned by the UI request.\n * @returns the settled execution (result + lifecycle pairing id), or\n *   `undefined` when syntax or name does not resolve.\n */"
           }
         ],
         "types": [
@@ -219,11 +235,11 @@ export const TYPERT = {
           },
           {
             "name": "CommandInputDescriptor",
-            "declaration": "export interface CommandInputDescriptor {\n    readonly hint: string;\n}"
+            "declaration": "export interface CommandInputDescriptor {\n    readonly hint: string;\n    readonly images?: boolean;\n}"
           },
           {
             "name": "CommandInvocation",
-            "declaration": "export interface CommandInvocation {\n    readonly commandId: CommandId;\n    readonly agent: Agent;\n    readonly rawInput: string;\n    readonly signal: AbortSignal;\n}"
+            "declaration": "export interface CommandInvocation {\n    readonly commandId: CommandId;\n    readonly agent: Agent;\n    readonly rawInput: string;\n    readonly attachments: readonly ImageBlock[];\n    readonly signal: AbortSignal;\n}"
           },
           {
             "name": "CommandResult",
@@ -237,6 +253,10 @@ export const TYPERT = {
             "name": "CommandSourceMap",
             "declaration": "export interface CommandSourceMap {\n    user: { kind: 'user'; };\n}"
           },
+          {
+            "name": "CompactionId",
+            "declaration": "export type CompactionId = Branded<'CompactionId'>;"
+          },
           {
             "name": "ContentBlock",
             "declaration": "export type ContentBlock = ContentBlockMap[ContentBlockType];"
@@ -257,6 +277,10 @@ export const TYPERT = {
             "name": "ContextSnapshotSection",
             "declaration": "export interface ContextSnapshotSection {\n    readonly name: string;\n    readonly text: string;\n}"
           },
+          {
+            "name": "EncodedImageAttachment",
+            "declaration": "export interface EncodedImageAttachment {\n    mediaType: ImageMediaType;\n    data: string;\n    name?: string;\n}"
+          },
           {
             "name": "EpochHeader",
             "declaration": "export interface EpochHeader {\n    config: LlmCallConfig;\n    adapterDefaults?: LlmCallConfigAdapterDefaults;\n    system?: string;\n    tools?: ToolSchema[];\n}"
@@ -311,7 +335,7 @@ export const TYPERT = {
           },
           {
             "name": "ImageAttachmentRef",
-            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n}"
+            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n    originalDimensions?: { width: number; height: number; };\n}"
           },
           {
             "name": "ImageBlock",
@@ -359,7 +383,7 @@ export const TYPERT = {
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -399,7 +423,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; interrupted?: true; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n    'session/title': SessionTitleEventData;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; };\n}"
           },
           {
             "name": "SessionEventType",
@@ -413,10 +437,30 @@ export const TYPERT = {
             "name": "SessionId",
             "declaration": "export type SessionId = Branded<'SessionId'>;"
           },
+          {
+            "name": "SessionReferenceSource",
+            "declaration": "export interface SessionReferenceSource {\n    kind: 'session-reference';\n    form: 'recall';\n    version: 1;\n    references: { sessionId: string; label: string; capturedThroughSeq: number | null; compacted: boolean; originalMessages: number; retainedMessages: number; omittedMessages: number; omittedBytes: number; truncated: boolean; inputIndex: number; }[];\n}"
+          },
           {
             "name": "SessionSurface",
             "declaration": "export interface SessionSurface {\n    readonly nodes: readonly number[];\n    readonly replaceGeneration: number;\n}"
           },
+          {
+            "name": "SessionTitleEventData",
+            "declaration": "export interface SessionTitleEventData {\n    readonly title: string;\n    readonly messageSeqs: number[];\n    readonly source: SessionTitleSource;\n}"
+          },
+          {
+            "name": "SessionTitleModelProvenance",
+            "declaration": "export interface SessionTitleModelProvenance {\n    readonly provider: string;\n    readonly model: string;\n}"
+          },
+          {
+            "name": "SessionTitleProviderId",
+            "declaration": "export type SessionTitleProviderId = Branded<'SessionTitleProviderId'>;"
+          },
+          {
+            "name": "SessionTitleSource",
+            "declaration": "export type SessionTitleSource = { readonly kind: 'fallback'; } | { readonly kind: 'provider'; readonly provider: SessionTitleProviderId; readonly model?: SessionTitleModelProvenance; } | { readonly kind: 'user'; };"
+          },
           {
             "name": "StreamChunk",
             "declaration": "export type StreamChunk = { type: 'block-start'; index: number; blockType: ContentBlockType; } | { type: 'text-delta'; index: number; text: string; } | { type: 'reasoning-delta'; index: number; text: string; } | { type: 'tool-call-delta'; index: number; id: CallId; name?: string; argumentsDelta: string; } | { type: 'block-end'; index: number; block: ContentBlock; } | { type: 'usage'; usage: TokenUsage; } | { type: 'finish'; reason: FinishReason; replayState?: ReplayEnvelope; };"

package/dist/kernel/commands/lib/typert.remote-client.d.ts

@@ -3,23 +3,24 @@ import type {
   RemoteResult,
   TypertRemoteContribution,
 } from '../../typert-protocol/lib/index.js'
+import type { EncodedImageAttachment } from '../../attachment/lib/types/types.js'
 import type { CommandDescriptor, CommandExecution } from './types/types.js'
 import type { SessionId } from '../../session/lib/types/types.js'
 
 declare module '@nomix-ai/nomix-typert-protocol' {
   interface TypertRemoteNamespace$636f6d6d616e6473 {
-    execute: (agentId: SessionId, line: string, signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
+    execute: (agentId: SessionId, line: string, images: readonly EncodedImageAttachment[], signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
     list: (agentId: SessionId) => Promise<RemoteResult<readonly CommandDescriptor[]>>
   }
   interface TypertRemoteMap {
-    'commands/execute': (agentId: SessionId, line: string, signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
+    'commands/execute': (agentId: SessionId, line: string, images: readonly EncodedImageAttachment[], signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
     'commands/list': (agentId: SessionId) => Promise<RemoteResult<readonly CommandDescriptor[]>>
   }
   interface TypertRemoteNamespaceMap {
     'commands': TypertRemoteNamespace$636f6d6d616e6473
   }
   interface TypertRemoteScopeMap {
-    'agent:commands/execute': (line: string, signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
+    'agent:commands/execute': (line: string, images: readonly EncodedImageAttachment[], signal?: AbortSignal) => Promise<RemoteResult<CommandExecution | undefined>>
     'agent:commands/list': () => Promise<RemoteResult<readonly CommandDescriptor[]>>
   }
 }

package/dist/kernel/commands/lib/typert.remote-client.js

@@ -3,6 +3,11 @@ import { z } from 'zod'
 
 const _nomix_ai_nomix_commands_commands_execute_parameter_0$schema = z.intersection(z.string(), z.unknown())
 const _nomix_ai_nomix_commands_commands_execute_parameter_1$schema = z.string()
+const _nomix_ai_nomix_commands_commands_execute_parameter_2$schema = z.array(z.object({
+  'mediaType': z.union([z.literal("image/png"), z.literal("image/jpeg"), z.literal("image/webp"), z.literal("image/gif")]),
+  'data': z.string(),
+  'name': z.string().optional(),
+}))
 const _nomix_ai_nomix_commands_commands_execute_result$schema = z.union([z.undefined(), z.object({
   'commandId': z.intersection(z.string(), z.unknown()).readonly(),
   'result': z.union([z.object({
@@ -20,6 +25,7 @@ const _nomix_ai_nomix_commands_commands_list_result$schema = z.array(z.object({
   'description': z.string().readonly(),
   'input': z.object({
   'hint': z.string().readonly(),
+  'images': z.boolean().readonly().optional(),
 }).readonly().optional(),
 }))
 
@@ -58,6 +64,16 @@ export const TYPERT_REMOTE = {
             schema: _nomix_ai_nomix_commands_commands_execute_parameter_1$schema,
           },
         },
+        {
+          name: 'images',
+          wire: 'images',
+          source: 'json',
+          codec: {
+            mode: 'strict',
+            typeSymbol: '@nomix-ai/nomix-commands#commands/execute:images',
+            schema: _nomix_ai_nomix_commands_commands_execute_parameter_2$schema,
+          },
+        },
       ],
       cancellation: { parameter: 'signal' },
       result: {
@@ -65,7 +81,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@nomix-ai/nomix-commands#commands/execute:result',
         schema: _nomix_ai_nomix_commands_commands_execute_result$schema,
       },
-      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":297,"column":9},
+      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":329,"column":9},
     },
     {
       id: '@nomix-ai/nomix-commands#commands/list',
@@ -95,7 +111,7 @@ export const TYPERT_REMOTE = {
         typeSymbol: '@nomix-ai/nomix-commands#commands/list:result',
         schema: _nomix_ai_nomix_commands_commands_list_result$schema,
       },
-      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":260,"column":3},
+      sourceLocation: {"file":"packages/interaction/commands/src/index.ts","line":285,"column":3},
     },
   ],
 }

package/dist/kernel/commands/lib/types/index.d.ts

@@ -2,8 +2,10 @@
  * Plugin-owned human-command registry shared by interactive UI adapters.
  * @module @nomix-ai/nomix-commands
  */
-import { Context } from '@nomix-ai/cordis';
+import { Context } from '../../../cordis/lib/index.js';
 import type { Agent } from '../../../agent/lib/index.js';
+import type { EncodedImageAttachment } from '../../../attachment/lib/types/types.js';
+import type { ImageBlock } from '../../../llm/lib/index.js';
 import { TypertRemoteService } from '../../../typert-protocol/lib/index.js';
 import { CommandId } from './brand.ts';
 import type { CommandDescriptor, CommandExecution, CommandInputDescriptor, CommandResult } from './types.ts';
@@ -18,6 +20,14 @@ export interface CommandInvocation {
     readonly agent: Agent;
     /** Exact text following the registered command name, including separator whitespace. */
     readonly rawInput: string;
+    /**
+     * Durably admitted image blocks accompanying this invocation, in submission
+     * order; empty unless the definition declares `input.images`. The handler
+     * owns their model-visible use — the registry never schedules them itself —
+     * and a handler whose grammar cannot use them in this invocation returns an
+     * error so the dispatching composer retains the originals.
+     */
+    readonly attachments: readonly ImageBlock[];
     /** Cancellation signal owned by the dispatching UI request. */
     readonly signal: AbortSignal;
 }
@@ -101,13 +111,22 @@ export declare class CommandRuntime extends TypertRemoteService {
      * handler-failure path is contained so the handler's own error stays the
      * reported failure.
      *
+     * Image admission is enforced here, not in the composer: images sent to a
+     * command that does not declare `input.images`, an absent attachment store,
+     * and an exceeded attachment limit each settle as an error result before
+     * the handler runs, and a rejected batch publishes no durable object.
+     *
      * @param agent - exact receiving agent.
      * @param line - complete slash-command line.
+     * @param images - base64-encoded composer images accompanying the line, in
+     *   submission order; empty for a plain invocation.
      * @param signal - cancellation signal owned by the UI request.
      * @returns the settled execution (result + lifecycle pairing id), or
      *   `undefined` when syntax or name does not resolve.
      */
-    execute(agent: Agent, line: string, signal: AbortSignal): Promise<CommandExecution | undefined>;
+    execute(agent: Agent, line: string, images: readonly EncodedImageAttachment[], signal: AbortSignal): Promise<CommandExecution | undefined>;
+    /** Contained `command/done` error append for a thrown handler or admission failure. */
+    private settleThrown;
     /** Mint the next pairing id (monotonic; instance-token-prefixed so a resumed log never repeats one). */
     private mintCommandId;
     /**

package/dist/kernel/commands/lib/types/index.js

@@ -36,12 +36,15 @@ var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn,
     if (target) Object.defineProperty(target, contextIn.name, descriptor);
     done = true;
 };
+import { AttachmentError, admitEncodedImages } from '../../../attachment/lib/index.js';
 import { NamedEntries, ScopedLayers } from '../../../scope/lib/index.js';
 import { TypertRemoteService, Remote } from '../../../typert-protocol/lib/index.js';
 import { CommandId } from "./brand.js";
 export { CommandId } from "./brand.js";
 export const name = 'commands';
 const COMMAND_NAME = /^[a-z][a-z0-9_-]*$/u;
+/** Shared frozen attachments value for image-free invocations. */
+const NO_ATTACHMENTS = Object.freeze([]);
 /** All command registrations owned by one global or scoped layer. */
 class CommandLayer {
     commands;
@@ -81,6 +84,10 @@ function abortError(signal) {
         return signal.reason;
     return new Error(typeof signal.reason === 'string' ? signal.reason : 'command aborted');
 }
+/** The signal's normalized abort error when it is already aborted. */
+function cancellationOf(signal) {
+    return signal.aborted ? abortError(signal) : undefined;
+}
 /** Render arbitrary thrown values without trusting their string coercion. */
 function renderThrown(value) {
     try {
@@ -135,7 +142,13 @@ function normalizeDefinition(definition) {
         if (rawInput.hint.trim().length === 0) {
             throw new TypeError(`command "${definition.name}" input hint must not be empty`);
         }
-        input = Object.freeze({ hint: rawInput.hint });
+        if ('images' in rawInput && rawInput.images !== undefined && typeof rawInput.images !== 'boolean') {
+            throw new TypeError(`command "${definition.name}" input images flag must be a boolean`);
+        }
+        input = Object.freeze({
+            hint: rawInput.hint,
+            ...('images' in rawInput && rawInput.images === true) ? { images: true } : {},
+        });
     }
     const normalized = Object.freeze({
         name: definition.name,
@@ -248,13 +261,20 @@ let CommandRuntime = (() => {
          * handler-failure path is contained so the handler's own error stays the
          * reported failure.
          *
+         * Image admission is enforced here, not in the composer: images sent to a
+         * command that does not declare `input.images`, an absent attachment store,
+         * and an exceeded attachment limit each settle as an error result before
+         * the handler runs, and a rejected batch publishes no durable object.
+         *
          * @param agent - exact receiving agent.
          * @param line - complete slash-command line.
+         * @param images - base64-encoded composer images accompanying the line, in
+         *   submission order; empty for a plain invocation.
          * @param signal - cancellation signal owned by the UI request.
          * @returns the settled execution (result + lifecycle pairing id), or
          *   `undefined` when syntax or name does not resolve.
          */
-        async execute(agent, line, signal) {
+        async execute(agent, line, images, signal) {
             const parsed = parseCommand(line);
             if (parsed === undefined)
                 return undefined;
@@ -270,32 +290,69 @@ let CommandRuntime = (() => {
                 ...command.definition.recordInput === false ? {} : { args: parsed.rawInput },
                 source: { kind: 'user' },
             });
-            const invocation = Object.freeze({ commandId, agent, rawInput: parsed.rawInput, signal });
+            const settle = (result) => {
+                this.appendLifecycle(agent.session, 'command/done', {
+                    commandId, kind: result.kind,
+                    ...result.text === undefined ? {} : { text: result.text },
+                    ...result.kind === 'success' && result.sourceEventSeq !== undefined
+                        ? { sourceEventSeq: result.sourceEventSeq }
+                        : {},
+                });
+                return Object.freeze({ commandId, result: Object.freeze(result) });
+            };
+            let attachments = NO_ATTACHMENTS;
+            if (images.length > 0) {
+                if (command.definition.input?.images !== true) {
+                    return settle({ kind: 'error', text: `/${parsed.name} does not accept image attachments` });
+                }
+                const store = this.ctx.get('attachments');
+                if (store === undefined) {
+                    return settle({ kind: 'error', text: `/${parsed.name}: image attachments are unavailable because no attachment store is composed` });
+                }
+                try {
+                    const refs = await admitEncodedImages(store, images);
+                    attachments = Object.freeze(refs.map(ref => Object.freeze({ type: 'image', attachment: ref })));
+                }
+                catch (error) {
+                    if (error instanceof AttachmentError) {
+                        return settle({ kind: 'error', text: error.message });
+                    }
+                    this.settleThrown(agent.session, parsed.name, commandId, error);
+                    throw error;
+                }
+                // Cancellation must be honored BEFORE the handler runs: admission may
+                // await slow storage, and a handler entered after the caller cancelled
+                // would mutate state the retrying caller then duplicates. (The committed
+                // image objects stay unreferenced and are deferred-GC territory.)
+                const cancelledDuringAdmission = cancellationOf(signal);
+                if (cancelledDuringAdmission !== undefined) {
+                    this.settleThrown(agent.session, parsed.name, commandId, cancelledDuringAdmission);
+                    throw cancelledDuringAdmission;
+                }
+            }
+            const invocation = Object.freeze({ commandId, agent, rawInput: parsed.rawInput, attachments, signal });
             let result;
             try {
                 const output = command.definition.handler(invocation);
                 result = normalizeResult(parsed.name, await withAbort(Promise.resolve(output), signal));
             }
             catch (error) {
-                try {
-                    this.appendLifecycle(agent.session, 'command/done', {
-                        commandId, kind: 'error',
-                        text: error instanceof Error ? error.message : renderThrown(error),
-                    });
-                }
-                catch (appendError) {
-                    this.ctx.logger.warn(`command "${parsed.name}": command/done append failed: ${renderThrown(appendError)}`);
-                }
+                this.settleThrown(agent.session, parsed.name, commandId, error);
                 throw error;
             }
-            this.appendLifecycle(agent.session, 'command/done', {
-                commandId, kind: result.kind,
-                ...result.text === undefined ? {} : { text: result.text },
-                ...result.kind === 'success' && result.sourceEventSeq !== undefined
-                    ? { sourceEventSeq: result.sourceEventSeq }
-                    : {},
-            });
-            return Object.freeze({ commandId, result });
+            return settle(result);
+        }
+        /** Contained `command/done` error append for a thrown handler or admission failure. */
+        settleThrown(session, command, commandId, error) {
+            try {
+                this.appendLifecycle(session, 'command/done', {
+                    commandId, kind: 'error',
+                    text: error instanceof Error ? error.message : renderThrown(error),
+                });
+            }
+            catch (appendError) {
+                this.ctx.logger.warn(`command "${command}": command/done append failed: ${renderThrown(appendError)}`);
+            }
         }
         /** Mint the next pairing id (monotonic; instance-token-prefixed so a resumed log never repeats one). */
         mintCommandId() {

package/dist/kernel/commands/lib/types/invariant.d.ts

@@ -3,7 +3,7 @@
  * command lifecycle events pair by commandId within one session log.
  * @module @nomix-ai/nomix-commands/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "commands-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/commands/lib/types/types.d.ts

@@ -11,6 +11,14 @@ import type { CommandId } from './brand.ts';
 export interface CommandInputDescriptor {
     /** Placeholder shown before the user supplies free-form input. */
     readonly hint: string;
+    /**
+     * Whether composer image attachments may accompany an invocation. Absent or
+     * false = the executor rejects an invocation carrying images and capable
+     * composers refuse the submission before dispatch. A declaring command's
+     * handler receives the admitted durable blocks and owns every further
+     * grammar decision, including rejecting sub-commands that cannot use them.
+     */
+    readonly images?: boolean;
 }
 /** Expected command outcome rendered directly by the dispatching UI. */
 export type CommandResult = {

package/dist/kernel/commands/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-commands",
   "description": "Plugin-owned human command registry for Nomix Harness UIs",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },
@@ -54,8 +54,10 @@
   "license": "MIT",
   "peerDependencies": {
     "@nomix-ai/nomix-agent": "workspace:^",
+    "@nomix-ai/nomix-attachment": "workspace:^",
     "@nomix-ai/nomix-brand": "workspace:^",
     "@nomix-ai/nomix-invariants": "workspace:^",
+    "@nomix-ai/nomix-llm": "workspace:^",
     "@nomix-ai/nomix-scope": "workspace:^",
     "@nomix-ai/nomix-session": "workspace:^",
     "@nomix-ai/nomix-typert-protocol": "workspace:^",
@@ -66,8 +68,10 @@
   },
   "devDependencies": {
     "@nomix-ai/nomix-agent": "workspace:^",
+    "@nomix-ai/nomix-attachment": "workspace:^",
     "@nomix-ai/nomix-brand": "workspace:^",
     "@nomix-ai/nomix-invariants": "workspace:^",
+    "@nomix-ai/nomix-llm": "workspace:^",
     "@nomix-ai/nomix-scope": "workspace:^",
     "@nomix-ai/nomix-session": "workspace:^",
     "@nomix-ai/nomix-typert-protocol": "workspace:^",

package/dist/kernel/compaction/lib/index.js

@@ -1,4 +1,4 @@
-import { Service } from "@nomix-ai/cordis";
+import { Service } from "../../cordis/lib/index.js";
 //#region lib/types/brand.js
 /**
 * Brand an implementation-minted compaction identity.

package/dist/kernel/compaction/lib/types/index.d.ts

@@ -6,7 +6,7 @@
  * [compaction Agent Note](../../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md).
  * @module @nomix-ai/nomix-compaction
  */
-import { Context, Service } from '@nomix-ai/cordis';
+import { Context, Service } from '../../../cordis/lib/index.js';
 import type { Session } from '../../../session/lib/index.js';
 import type { CommandId } from '../../../commands/lib/types/brand.js';
 import type { CompactionResult } from './types.ts';

package/dist/kernel/compaction/lib/types/index.js

@@ -6,7 +6,7 @@
  * [compaction Agent Note](../../../../.agents/notes/implemented/feature/2026-06-18-compaction-capability-seam.md).
  * @module @nomix-ai/nomix-compaction
  */
-import { Service } from '@nomix-ai/cordis';
+import { Service } from '../../../cordis/lib/index.js';
 export { CompactionId } from "./brand.js";
 export { toolPairingBalancedAfter, toolPairingBalancedBefore } from "./tool-pairing.js";
 // The checkpoint source constructor and predicate are declared on the cordis-free

package/dist/kernel/compaction/lib/types/invariant.d.ts

@@ -1,5 +1,5 @@
 /** Package-owned compaction log-stream invariants. @module @nomix-ai/nomix-compaction/invariant */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "compaction-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/compaction/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-compaction",
   "description": "Abstract compaction service seam (ctx.compaction) for the Nomix Harness",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/compaction-basic/lib/index.js

@@ -1,4 +1,4 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { CompactionEngine, CompactionId, ManualCompactionError, compactCheckpointSource, toolPairingBalancedAfter, toolPairingBalancedBefore } from "../../compaction/lib/index.js";
 import { BlockAssembler, CONTEXT_WINDOW_EXCEEDED_CODE, LlmError, assertNever, contentHasImage, createUserMessage, deepFreeze, errorChain } from "../../llm/lib/index.js";
 import { randomUUID } from "node:crypto";

package/dist/kernel/compaction-basic/lib/types/index.d.ts

@@ -3,8 +3,8 @@
  *
  * @module @nomix-ai/nomix-compaction-basic
  */
-import { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 import { CompactionEngine } from '../../../compaction/lib/index.js';
 import type { CompactionResult, CompactionTrigger } from '../../../compaction/lib/index.js';
 import type { Agent } from '../../../agent/lib/index.js';

package/dist/kernel/compaction-basic/lib/types/index.js

@@ -3,7 +3,7 @@
  *
  * @module @nomix-ai/nomix-compaction-basic
  */
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { CompactionEngine, ManualCompactionError } from '../../../compaction/lib/index.js';
 import { CONTEXT_WINDOW_EXCEEDED_CODE, assertNever } from '../../../llm/lib/index.js';
 import { resolveCompactSpec, resolveConfig, resolveTargetPolicy, TargetPressureConfigError, } from "./config.js";

package/dist/kernel/compaction-basic/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-compaction-basic`.
  * @module @nomix-ai/nomix-compaction-basic/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "compaction-basic-invariant";
 /** Service required before the companion can reserve package ownership. */

package/dist/kernel/compaction-basic/lib/types/summarizer.d.ts

@@ -3,7 +3,7 @@
  *
  * @module @nomix-ai/nomix-compaction-basic/summarizer
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 import type { ContentBlock, Message, TokenUsage, ToolSchema } from '../../../llm/lib/index.js';
 import type { Agent } from '../../../agent/lib/index.js';
 interface SummaryConfig {

package/dist/kernel/compaction-basic/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-compaction-basic",
   "description": "Token-meter-driven compaction policy and LLM summarization backend for the Nomix Harness",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/compaction-tool-result-pruner/lib/index.js

@@ -1,5 +1,5 @@
-import { Service } from "@nomix-ai/cordis";
-import z from "@nomix-ai/schemastery";
+import { Service } from "../../cordis/lib/index.js";
+import z from "../../schemastery/lib/index.mjs";
 import { deepFreeze, freezeMessage } from "../../llm/lib/index.js";
 //#region lib/types/config.js
 /** Configuration resolution for deterministic tool-result pruning. */