@nomix-ai/nomix-harness 0.2.5 → 0.2.6

package/dist/kernel/client-connection/lib/client.js

@@ -5360,6 +5360,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			maxImagesPerMessage: number().int().positive(),
 			maxMessageImageBytes: number().int().positive(),
 			maxImagePixels: number().int().positive(),
+			maxImageDimension: number().int().positive(),
 			mediaTypes: array(string())
 		});
 		/** session.history response value (projections rides the tail page only). */
@@ -5707,6 +5708,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			provider: string().optional(),
 			model: string().optional(),
 			attachedSessions: number().int().nonnegative(),
+			home: string(),
 			canOpenPath: boolean()
 		});
 		object({});
@@ -6421,7 +6423,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			"| history | rendered |",
 			"| streaming | stable |",
 			"",
-			"[Nomix Harness](https://github.com/ditgaldev/nomix-harness)",
+			"[DeepSeek](https://www.deepseek.com)",
 			"",
 			"```ts",
 			"const markdown = true",
@@ -6619,11 +6621,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					publishedAt: "2026-07-01"
 				},
 				{
-					url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md",
+					url: "https://www.deepseek.com/blog/harness-architecture",
 					snippet: "The capability-seam pattern splits each capability into interface, implementation, and consumer packages."
 				},
 				{
-					url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/user/develop/basic/index.md",
+					url: "https://docs.deepseek.com/harness/plugins",
 					title: "Writing a harness plugin",
 					publishedAt: "2026-06-15"
 				}
@@ -6632,7 +6634,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		};
 		/** The `web_fetch` result view for the web-fetch turn, authored inline for the same reason. */
 		const WEB_FETCH_RESULT = {
-			url: "https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md",
+			url: "https://www.deepseek.com/blog/harness-architecture",
 			statusCode: 200,
 			truncated: false
 		};
@@ -7084,8 +7086,8 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			toolTurn(67, "grep", "{\"pattern\":\"SEARCH_MAX_LINES\",\"path\":\"packages/client\"}", SEARCH_MATCHES_TEXT);
 			toolTurn(68, "glob", "{\"pattern\":\"**/SearchBlock*\",\"path\":\"packages/client\"}", SEARCH_PATHS_TEXT);
 			toolTurn(69, "read", `{"file_path":${JSON.stringify(READ_SAMPLE_PATH)},"offset":${READ_SAMPLE_FIRST_LINE}}`, READ_SAMPLE_TEXT);
-			toolTurn(70, "web_search", "{\"query\":\"nomix harness architecture\"}", "Search results for nomix harness architecture.");
-			toolTurn(71, "web_fetch", "{\"url\":\"https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md\"}", "# Harness architecture\n\nEverything is a plugin.");
+			toolTurn(70, "web_search", "{\"queries\":[\"nomix harness architecture\"]}", "Search results for nomix harness architecture.");
+			toolTurn(71, "web_fetch", "{\"url\":\"https://www.deepseek.com/blog/harness-architecture\"}", "# Harness architecture\n\nEverything is a plugin.");
 			push({
 				type: "turn/start",
 				data: { turn: 72 }
@@ -7264,7 +7266,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				};
 				case "web_search": return {
 					card: "generic",
-					title: `Search ${str(args.query)}`,
+					title: `Search ${(Array.isArray(args.queries) ? args.queries.filter((query) => typeof query === "string" && query !== "") : []).join(", ")}`,
 					kind: "search",
 					rawInput: args
 				};
@@ -7357,29 +7359,37 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			}
 		}
 		/**
-		* Fixture parallel of the plan unit's double-event fold: `command/run`
-		* records named `plan` with recorded input set the wanted target (`off` →
-		* false, else true); `plan/mode` commits and clears it. `wanted` is exposed
-		* for the prompt boundary (the fixture's step/start parallel).
+		* Fixture parallel of the plan unit's lifecycle fold. The paired
+		* `command/done` retains successful plan selections and drops failures;
+		* `plan/mode` commits one. `wanted` is exposed for the prompt boundary (the
+		* fixture's step/start parallel).
 		*/
 		function foldPlan(log) {
 			let active = false;
 			let wanted = null;
+			let running = null;
 			for (const event of log) {
 				const item = event;
 				if (item.type === "command/run" && item.data?.["name"] === "plan") {
 					const args = item.data["args"];
 					if (typeof args !== "string") continue;
-					wanted = args.trim() !== "off";
+					running = {
+						commandId: item.data["commandId"],
+						wanted: args.trim() !== "off"
+					};
+				} else if (item.type === "command/done" && item.data !== void 0 && running !== null && item.data["commandId"] === running.commandId) {
+					wanted = item.data["kind"] === "success" && running.wanted !== active ? running.wanted : null;
+					running = null;
 				} else if (item.type === "plan/mode") {
 					active = item.data?.["active"] === true;
 					wanted = null;
 				}
 			}
+			const selected = running?.wanted ?? wanted;
 			return {
 				active,
-				pending: wanted !== null && wanted !== active,
-				wanted
+				pending: selected !== null && selected !== active,
+				wanted: selected
 			};
 		}
 		/** The plan projection's wire view over the full log. */
@@ -7619,6 +7629,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				maxImagesPerMessage: 20,
 				maxMessageImageBytes: 100 * 1024 * 1024,
 				maxImagePixels: 4e7,
+				maxImageDimension: 2e3,
 				mediaTypes: [
 					"image/png",
 					"image/jpeg",
@@ -7985,6 +7996,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 			let attachedSessions = options.empty ? 0 : 1;
 			const wid = (raw) => raw;
 			const fixtureEpoch = (/* @__PURE__ */ new Date(Date.now() - 3e5)).toISOString();
+			const FIXTURE_HOME = "/home/fixture";
 			const workspaces = options.empty ? [] : [{
 				workspaceId: wid("fx-ws-fixture"),
 				path: "/tmp/fixture",
@@ -7996,10 +8008,16 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				],
 				createdAt: fixtureEpoch,
 				updatedAt: fixtureEpoch
+			}, {
+				workspaceId: wid("fx-ws-home"),
+				path: `${FIXTURE_HOME}/Documents/project`,
+				title: "project",
+				sessionIds: [],
+				createdAt: fixtureEpoch,
+				updatedAt: fixtureEpoch
 			}];
 			let nextWorkspace = 1;
 			const archivedSessionIds = [];
-			const FIXTURE_HOME = "/home/fixture";
 			const directoryTree = new Map([
 				["/", ["home"]],
 				["/home", ["fixture"]],
@@ -8227,7 +8245,10 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							{
 								name: "goal",
 								description: "set or view the goal for a long-running task",
-								input: { hint: "<objective>" }
+								input: {
+									hint: "<objective>",
+									images: true
+								}
 							},
 							{
 								name: "permission",
@@ -8237,17 +8258,59 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							{
 								name: "plan",
 								description: "Enter or leave plan mode",
-								input: { hint: "[off|message]" }
+								input: {
+									hint: "[off|message]",
+									images: true
+								}
 							}
 						]
 					};
 				},
-				execute(id, line) {
+				execute(id, line, images = []) {
 					const missing = requireGoalSession(id);
 					if (missing !== void 0) return missing;
 					const match = /^\/(\S+)((?:\s.*)?)$/.exec(line.trim());
 					const name = match?.[1];
 					const args = match?.[2] ?? "";
+					if (images.length > 0 && name !== void 0 && [
+						"permission",
+						"goal",
+						"compact",
+						"echo",
+						"plan"
+					].includes(name)) {
+						const rejection = name !== "goal" && name !== "plan" ? `/${name} does not accept image attachments` : name === "goal" && args.trim() === "" ? "Image attachments only accompany a goal objective: /goal <objective> or /goal edit <objective>." : name === "plan" && args.trim() === "off" ? "Image attachments cannot accompany /plan off." : void 0;
+						if (rejection !== void 0) {
+							const commandId = `fx-cmd-${logOf(id).length}`;
+							append(id, {
+								type: "command/run",
+								data: {
+									commandId,
+									name,
+									args,
+									source: { kind: "user" }
+								}
+							});
+							const result = {
+								kind: "error",
+								text: rejection
+							};
+							append(id, {
+								type: "command/done",
+								data: {
+									commandId,
+									...result
+								}
+							});
+							return {
+								ok: true,
+								value: {
+									commandId,
+									result
+								}
+							};
+						}
+					}
 					if (name === "permission") {
 						const preset = args.trim();
 						const commandId = `fx-cmd-${logOf(id).length}`;
@@ -8409,6 +8472,50 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 				activation: projection.goal.phase === "active" ? "armed" : "disarmed"
 			});
 			/** Canonical fixture implementation of the generated Goal Remote contract. */
+			/** Canonical fixture implementation of the generated reference-discovery Remote contracts. */
+			const referenceRemotes = {
+				files(id, query) {
+					const missing = requireGoalSession(id);
+					if (missing !== void 0) return missing;
+					const needle = query.toLocaleLowerCase();
+					return {
+						ok: true,
+						value: [
+							{
+								path: "notes",
+								kind: "directory"
+							},
+							{
+								path: "README.md",
+								kind: "file"
+							},
+							{
+								path: "notes/demo.txt",
+								kind: "file"
+							}
+						].filter((item) => item.path.toLocaleLowerCase().includes(needle))
+					};
+				},
+				sessions(id, query) {
+					const missing = requireGoalSession(id);
+					if (missing !== void 0) return missing;
+					const needle = query.toLocaleLowerCase();
+					return {
+						ok: true,
+						value: sessions.filter((item) => item.sessionId !== id).filter((item) => String(item.sessionId).toLocaleLowerCase().includes(needle) || item.cwd?.toLocaleLowerCase().includes(needle) === true).map((item) => {
+							const label = item.sessionId === sid("fx-beta") ? "Fixture child session" : String(item.sessionId);
+							const encoded = btoa(JSON.stringify(item.sessionId)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/u, "");
+							return {
+								sessionId: item.sessionId,
+								label,
+								...item.cwd === void 0 ? {} : { cwd: item.cwd },
+								createdAt: item.updatedAt,
+								mention: `@[${label}](nomix-session:${encoded})`
+							};
+						})
+					};
+				}
+			};
 			const goalRemotes = {
 				create(id, request) {
 					const missing = requireGoalSession(id);
@@ -9204,11 +9311,18 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 								message: `no session ${id}`,
 								details: { sessionId: id }
 							});
-							if (options.rejectPrompt) return err(request, {
-								code: "agent-busy",
-								message: "fixture: prompt rejected before acceptance",
-								details: { reason: "fixture-prompt-rejection" }
-							});
+							if (options.rejectPrompt) {
+								if (content.some((block) => block.type === "image")) return err(request, {
+									code: "attachment-error",
+									message: "fixture: image side exceeds the deployment limit",
+									details: { reason: "IMAGE_DIMENSION_TOO_LARGE" }
+								});
+								return err(request, {
+									code: "agent-busy",
+									message: "fixture: prompt rejected before acceptance",
+									details: { reason: "fixture-prompt-rejection" }
+								});
+							}
 							summary.updatedAt = Date.now();
 							summary.blank = false;
 							const userText = content.map((b) => b.type === "text" ? b.text : "").join("");
@@ -9319,6 +9433,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 							version: "0.0.0-fixture",
 							cwd: "/tmp/fixture",
 							attachedSessions,
+							home: FIXTURE_HOME,
 							canOpenPath: true
 						}),
 						pickDirectory: (request) => ok(request, { path: `${FIXTURE_HOME}/Documents/project` }),
@@ -9831,7 +9946,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					const sessionId = args.agentId;
 					switch (endpoint) {
 						case "commands/list": return Promise.resolve(commandRemotes.list(sessionId));
-						case "commands/execute": return Promise.resolve(commandRemotes.execute(sessionId, args.line));
+						case "commands/execute": return Promise.resolve(commandRemotes.execute(sessionId, args.line, args.images ?? []));
+						case "fileReferences/list": return Promise.resolve(referenceRemotes.files(sessionId, args.query ?? ""));
+						case "sessionReferenceResolver/candidates": return Promise.resolve(referenceRemotes.sessions(sessionId, args.query ?? ""));
 						case "goals/create": return Promise.resolve(goalRemotes.create(sessionId, {
 							objective: args.request?.objective,
 							...args.request?.maxGoalRounds === void 0 ? {} : { maxGoalRounds: args.request.maxGoalRounds }
@@ -10083,9 +10200,11 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		const ENDPOINT_SEGMENT_PATTERN = /^[A-Za-z0-9_$.-]+$/;
 		/**
 		* Create the browser-backed generic RPC caller.
+		* @param doFetch - transport override; defaults to the page's global fetch.
 		* @returns caller that owns request correlation and response-envelope validation.
 		*/
-		function createWebConnectionRpc() {
+		function createWebConnectionRpc(doFetch) {
+			const send = doFetch ?? ((input, init) => globalThis.fetch(input, init));
 			return { async call(channel, endpoint, payload, signal) {
 				assertTarget(channel, endpoint);
 				const rpcId = RpcId(randomUuid());
@@ -10095,7 +10214,7 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 					method: endpoint,
 					payload
 				};
-				const response = await globalThis.fetch(new URL(`${channel}/${endpoint}`, resolveBase()), {
+				const response = await send(new URL(`${channel}/${endpoint}`, resolveBase()), {
 					method: "POST",
 					headers: { "content-type": "application/json" },
 					body: JSON.stringify(message),
@@ -10143,8 +10262,9 @@ Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.
 		function apply(ctx) {
 			const pageLocation = typeof location === "undefined" ? void 0 : location;
 			const fixtureClient = pageLocation !== void 0 && new URLSearchParams(pageLocation.search).has("fixture") ? new FixtureApiClient() : void 0;
-			const api = fixtureClient ?? new WebApiClient();
-			const rpc = fixtureClient?.rpc ?? createWebConnectionRpc();
+			const transport = globalThis.__NOMIX_TRANSPORT__;
+			const api = fixtureClient ?? transport?.createApiClient() ?? new WebApiClient();
+			const rpc = fixtureClient?.rpc ?? createWebConnectionRpc(transport?.fetch);
 			let started = false;
 			let description;
 			const descriptionListeners = /* @__PURE__ */ new Set();

package/dist/kernel/client-connection/lib/index.js

@@ -23,10 +23,10 @@ const HOST_EVENTS_PATH = `${API_PATH}/events.host`;
 * web carrier; the fetch-shaped handler itself is transport-agnostic).
 */
 /** Default carrier cap for all HTTP RPC bodies: sized for the default
-* aggregate image limit (100 MiB) after base64 expansion plus envelope
-* headroom (~134.3 MiB required), rounded up for slack. The bridge buffers
+* aggregate image limit (200 MiB) after base64 expansion plus envelope
+* headroom (~267.7 MiB required), rounded up for slack. The bridge buffers
 * each body in memory, so this cap is also the per-request resident bound. */
-const DEFAULT_MAX_REQUEST_BODY_BYTES = 160 * 1024 * 1024;
+const DEFAULT_MAX_REQUEST_BODY_BYTES = 300 * 1024 * 1024;
 /**
 * Bridge one node:http request to the fetch-shaped handler (client close
 * aborts; SSE bodies stream out chunk by chunk).
@@ -529,7 +529,7 @@ const PRIVILEGED_METHODS = new Set([
 */
 function apply(ctx, config) {
 	const trustedHosts = config?.trustedHosts ?? [];
-	const maxRequestBodyBytes = config?.maxRequestBodyBytes ?? 167772160;
+	const maxRequestBodyBytes = config?.maxRequestBodyBytes ?? 314572800;
 	for (const entry of trustedHosts) assertTrustedAuthority(entry);
 	if (ctx.get("apiProxy") !== void 0) assertImageBodyCapacity(ctx, maxRequestBodyBytes);
 	const fetchHandler = new HostConnectionService(ctx, trustedHosts).createSharedFetchHandler(API_PATH, { async fetch(request) {

package/dist/kernel/client-connection/lib/types/client/fixture.js

@@ -41,7 +41,7 @@ const MARKDOWN_FIXTURE = [
     '| history | rendered |',
     '| streaming | stable |',
     '',
-    '[Nomix Harness](https://github.com/ditgaldev/nomix-harness)',
+    '[DeepSeek](https://www.deepseek.com)',
     '',
     '```ts',
     'const markdown = true',
@@ -214,11 +214,11 @@ const WEB_SEARCH_RESULT = {
             publishedAt: '2026-07-01',
         },
         {
-            url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md',
+            url: 'https://www.deepseek.com/blog/harness-architecture',
             snippet: 'The capability-seam pattern splits each capability into interface, implementation, and consumer packages.',
         },
         {
-            url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/user/develop/basic/index.md',
+            url: 'https://docs.deepseek.com/harness/plugins',
             title: 'Writing a harness plugin',
             publishedAt: '2026-06-15',
         },
@@ -227,7 +227,7 @@ const WEB_SEARCH_RESULT = {
 };
 /** The `web_fetch` result view for the web-fetch turn, authored inline for the same reason. */
 const WEB_FETCH_RESULT = {
-    url: 'https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md',
+    url: 'https://www.deepseek.com/blog/harness-architecture',
     statusCode: 200,
     truncated: false,
 };
@@ -488,8 +488,8 @@ function buildAlphaLog() {
     // the real tools so they hit the keyed WebRow registration. Ordered BEFORE
     // the todo turn for the same reason turn 66 is: the standing plan retires at
     // the next turn/start, so a turn after it would empty the dock's plan strip.
-    toolTurn(70, 'web_search', '{"query":"nomix harness architecture"}', 'Search results for nomix harness architecture.');
-    toolTurn(71, 'web_fetch', '{"url":"https://github.com/ditgaldev/nomix-harness/blob/master/docs/architecture.md"}', '# Harness architecture\n\nEverything is a plugin.');
+    toolTurn(70, 'web_search', '{"queries":["nomix harness architecture"]}', 'Search results for nomix harness architecture.');
+    toolTurn(71, 'web_fetch', '{"url":"https://www.deepseek.com/blog/harness-architecture"}', '# Harness architecture\n\nEverything is a plugin.');
     // Turn 72: max-tokens sample — the provider ends the turn at its output cap
     // mid-sentence, so the chat flow must render the turn-max-tokens notice
     // instead of ending silently. Ordered before the todo turn for the same
@@ -596,8 +596,11 @@ function presentCall(name, argsRaw) {
         // The web tools keep a GENERIC pending card and add the `web` result card
         // only at result time (the contract's result-only web shape); their pending
         // kind matches the result kind so a call and its result read as one category.
-        case 'web_search':
-            return { card: 'generic', title: `Search ${str(args.query)}`, kind: 'search', rawInput: args };
+        case 'web_search': {
+            const queries = Array.isArray(args.queries) ? args.queries.filter((query) => typeof query === 'string' && query !== '') : [];
+            const title = queries.join(', ');
+            return { card: 'generic', title: `Search ${title}`, kind: 'search', rawInput: args };
+        }
         case 'web_fetch':
             return { card: 'generic', title: `Fetch ${str(args.url)}`, kind: 'fetch', rawInput: args };
         default:
@@ -676,28 +679,37 @@ function viewFor(event, log) {
     return undefined;
 }
 /**
- * Fixture parallel of the plan unit's double-event fold: `command/run`
- * records named `plan` with recorded input set the wanted target (`off` →
- * false, else true); `plan/mode` commits and clears it. `wanted` is exposed
- * for the prompt boundary (the fixture's step/start parallel).
+ * Fixture parallel of the plan unit's lifecycle fold. The paired
+ * `command/done` retains successful plan selections and drops failures;
+ * `plan/mode` commits one. `wanted` is exposed for the prompt boundary (the
+ * fixture's step/start parallel).
  */
 function foldPlan(log) {
     let active = false;
     let wanted = null;
+    let running = null;
     for (const event of log) {
         const item = event;
         if (item.type === 'command/run' && item.data?.['name'] === 'plan') {
             const args = item.data['args'];
             if (typeof args !== 'string')
                 continue;
-            wanted = args.trim() !== 'off';
+            running = { commandId: item.data['commandId'], wanted: args.trim() !== 'off' };
+        }
+        else if (item.type === 'command/done'
+            && item.data !== undefined
+            && running !== null
+            && item.data['commandId'] === running.commandId) {
+            wanted = item.data['kind'] === 'success' && running.wanted !== active ? running.wanted : null;
+            running = null;
         }
         else if (item.type === 'plan/mode') {
             active = item.data?.['active'] === true;
             wanted = null;
         }
     }
-    return { active, pending: wanted !== null && wanted !== active, wanted };
+    const selected = running?.wanted ?? wanted;
+    return { active, pending: selected !== null && selected !== active, wanted: selected };
 }
 /** The plan projection's wire view over the full log. */
 function planViewOf(log) {
@@ -962,6 +974,7 @@ function projectionValuesOf(log) {
         maxImagesPerMessage: 20,
         maxMessageImageBytes: 100 * 1024 * 1024,
         maxImagePixels: 40_000_000,
+        maxImageDimension: 2000,
         mediaTypes: ['image/png', 'image/jpeg', 'image/webp', 'image/gif'],
     };
     return values;
@@ -1340,6 +1353,7 @@ function createFixtureWorld(options) {
     // live under one workspace, whose account carries them in attach order.
     const wid = (raw) => raw;
     const fixtureEpoch = new Date(Date.now() - 300_000).toISOString();
+    const FIXTURE_HOME = '/home/fixture';
     const workspaces = options.empty ? [] : [{
             workspaceId: wid('fx-ws-fixture'),
             path: '/tmp/fixture',
@@ -1347,6 +1361,13 @@ function createFixtureWorld(options) {
             sessionIds: [sid('fx-alpha'), sid('fx-beta'), sid('fx-gamma')],
             createdAt: fixtureEpoch,
             updatedAt: fixtureEpoch,
+        }, {
+            workspaceId: wid('fx-ws-home'),
+            path: `${FIXTURE_HOME}/Documents/project`,
+            title: 'project',
+            sessionIds: [],
+            createdAt: fixtureEpoch,
+            updatedAt: fixtureEpoch,
         }];
     let nextWorkspace = 1;
     // Registry-global archive set mirroring the host: archived sessions keep
@@ -1356,7 +1377,6 @@ function createFixtureWorld(options) {
     // deterministic content mirroring the design mock so assembled Web tests
     // and snapshots can walk it. Leaves are materialized lazily: a child listed
     // by its parent lists as empty until something is created inside it.
-    const FIXTURE_HOME = '/home/fixture';
     const directoryTree = new Map([
         ['/', ['home']],
         ['/home', ['fixture']],
@@ -1511,13 +1531,13 @@ function createFixtureWorld(options) {
                 value: [
                     { name: 'compact', description: 'fixture：压缩当前会话上下文' },
                     { name: 'echo', description: 'fixture：回显参数', input: { hint: 'text to echo' } },
-                    { name: 'goal', description: 'set or view the goal for a long-running task', input: { hint: '<objective>' } },
+                    { name: 'goal', description: 'set or view the goal for a long-running task', input: { hint: '<objective>', images: true } },
                     { name: 'permission', description: 'Switch the permission preset (sandbox mode + approval policy)', input: { hint: '<preset>' } },
-                    { name: 'plan', description: 'Enter or leave plan mode', input: { hint: '[off|message]' } },
+                    { name: 'plan', description: 'Enter or leave plan mode', input: { hint: '[off|message]', images: true } },
                 ],
             };
         },
-        execute(id, line) {
+        execute(id, line, images = []) {
             const missing = requireGoalSession(id);
             if (missing !== undefined)
                 return missing;
@@ -1526,6 +1546,29 @@ function createFixtureWorld(options) {
             const match = /^\/(\S+)((?:\s.*)?)$/.exec(line.trim());
             const name = match?.[1];
             const args = match?.[2] ?? '';
+            // Mirror the Host image policy AFTER command resolution, matching the
+            // executor's order (an unknown name answers undefined and logs no
+            // lifecycle): the declaration rejection covers every known command
+            // without `input.images`, and the two producer grammar rejections cover
+            // the declaring commands' control-only lines. The fixture stores no
+            // bytes, so an accepted batch is acknowledged and dropped.
+            const known = ['permission', 'goal', 'compact', 'echo', 'plan'];
+            if (images.length > 0 && name !== undefined && known.includes(name)) {
+                const rejection = name !== 'goal' && name !== 'plan'
+                    ? `/${name} does not accept image attachments`
+                    : name === 'goal' && args.trim() === ''
+                        ? 'Image attachments only accompany a goal objective: /goal <objective> or /goal edit <objective>.'
+                        : name === 'plan' && args.trim() === 'off'
+                            ? 'Image attachments cannot accompany /plan off.'
+                            : undefined;
+                if (rejection !== undefined) {
+                    const commandId = `fx-cmd-${logOf(id).length}`;
+                    append(id, { type: 'command/run', data: { commandId, name, args, source: { kind: 'user' } } });
+                    const result = { kind: 'error', text: rejection };
+                    append(id, { type: 'command/done', data: { commandId, ...result } });
+                    return { ok: true, value: { commandId, result } };
+                }
+            }
             if (name === 'permission') {
                 const preset = args.trim();
                 const commandId = `fx-cmd-${logOf(id).length}`;
@@ -1607,6 +1650,46 @@ function createFixtureWorld(options) {
         activation: projection.goal.phase === 'active' ? 'armed' : 'disarmed',
     });
     /** Canonical fixture implementation of the generated Goal Remote contract. */
+    /** Canonical fixture implementation of the generated reference-discovery Remote contracts. */
+    const referenceRemotes = {
+        files(id, query) {
+            const missing = requireGoalSession(id);
+            if (missing !== undefined)
+                return missing;
+            const needle = query.toLocaleLowerCase();
+            const items = [
+                { path: 'notes', kind: 'directory' },
+                { path: 'README.md', kind: 'file' },
+                { path: 'notes/demo.txt', kind: 'file' },
+            ].filter(item => item.path.toLocaleLowerCase().includes(needle));
+            return { ok: true, value: items };
+        },
+        sessions(id, query) {
+            const missing = requireGoalSession(id);
+            if (missing !== undefined)
+                return missing;
+            const needle = query.toLocaleLowerCase();
+            const value = sessions
+                .filter(item => item.sessionId !== id)
+                .filter(item => String(item.sessionId).toLocaleLowerCase().includes(needle)
+                || item.cwd?.toLocaleLowerCase().includes(needle) === true)
+                .map((item) => {
+                const label = item.sessionId === sid('fx-beta') ? 'Fixture child session' : String(item.sessionId);
+                const encoded = btoa(JSON.stringify(item.sessionId))
+                    .replaceAll('+', '-')
+                    .replaceAll('/', '_')
+                    .replace(/=+$/u, '');
+                return {
+                    sessionId: item.sessionId,
+                    label,
+                    ...item.cwd === undefined ? {} : { cwd: item.cwd },
+                    createdAt: item.updatedAt,
+                    mention: `@[${label}](nomix-session:${encoded})`,
+                };
+            });
+            return { ok: true, value };
+        },
+    };
     const goalRemotes = {
         create(id, request) {
             const missing = requireGoalSession(id);
@@ -2169,6 +2252,13 @@ function createFixtureWorld(options) {
                     return err(request, { code: 'session-not-found', message: `no session ${id}`, details: { sessionId: id } });
                 }
                 if (options.rejectPrompt) {
+                    if (content.some(block => block.type === 'image')) {
+                        return err(request, {
+                            code: 'attachment-error',
+                            message: 'fixture: image side exceeds the deployment limit',
+                            details: { reason: 'IMAGE_DIMENSION_TOO_LARGE' },
+                        });
+                    }
                     return err(request, {
                         code: 'agent-busy',
                         message: 'fixture: prompt rejected before acceptance',
@@ -2279,7 +2369,7 @@ function createFixtureWorld(options) {
         },
         host: {
             describe: request => ok(request, {
-                version: '0.0.0-fixture', cwd: '/tmp/fixture', attachedSessions, canOpenPath: true,
+                version: '0.0.0-fixture', cwd: '/tmp/fixture', attachedSessions, home: FIXTURE_HOME, canOpenPath: true,
             }),
             // Deterministic native pick: the keyless lanes drive the full
             // pick-then-adopt path without an OS chooser (design-mock content,
@@ -2744,7 +2834,9 @@ function createFixtureWorld(options) {
             const sessionId = args.agentId;
             switch (endpoint) {
                 case 'commands/list': return Promise.resolve(commandRemotes.list(sessionId));
-                case 'commands/execute': return Promise.resolve(commandRemotes.execute(sessionId, args.line));
+                case 'commands/execute': return Promise.resolve(commandRemotes.execute(sessionId, args.line, args.images ?? []));
+                case 'fileReferences/list': return Promise.resolve(referenceRemotes.files(sessionId, args.query ?? ''));
+                case 'sessionReferenceResolver/candidates': return Promise.resolve(referenceRemotes.sessions(sessionId, args.query ?? ''));
                 case 'goals/create': return Promise.resolve(goalRemotes.create(sessionId, {
                     objective: args.request?.objective,
                     ...args.request?.maxGoalRounds === undefined ? {} : { maxGoalRounds: args.request.maxGoalRounds },