@nomix-ai/nomix-harness 0.2.5 → 0.2.6

package/dist/config/agent-presets/minimal/agent.cordis.yml

@@ -3,7 +3,8 @@
 # The persona is the complete system prompt, so global identity, Web orientation,
 # tool guidance, and later assembly listeners cannot add prompt text. Runtime
 # context snapshots are suppressed for this preset, and the model composes only
-# persistent `bash` and `str_replace_editor`. Context compaction is absent.
+# the persistent shell (`bash` on POSIX, `pwsh` on win32) and
+# `str_replace_editor`. Context compaction is absent.
 
 - id: persona
   name: '@nomix-ai/nomix-persona'
@@ -15,6 +16,8 @@
 # The PTY registry is an agent-owned service, so it lives in an entry-local
 # realm. The backend still consumes the host sandbox policy and subprocess
 # implementation, while the tool registers into this agent's scoped catalog.
+# Exactly one shell stack mounts per host: the bash stack gates off win32 and
+# its pwsh twin gates off POSIX, mirroring the one-shot shell rows.
 - id: persistent-shell
   name: cordis:group
   group: true
@@ -26,11 +29,13 @@
 
     - id: terminal-bash
       name: '@nomix-ai/nomix-terminal-bash'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
 
     - id: persistent-bash
       name: '@nomix-ai/nomix-tool-bash-persistent'
+      disabled: !!js process.platform === 'win32'
       config:
         timeoutMs: 300000
         description: |-
@@ -43,6 +48,27 @@
           * Please avoid commands that may produce a very large amount of output.
           * Please run long lived commands in the background, e.g. 'sleep 10 &' or start a server in the background.
 
+    - id: terminal-pwsh
+      name: '@nomix-ai/nomix-terminal-bash'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        shellDialect: pwsh
+        timeoutMs: 300000
+
+    - id: persistent-pwsh
+      name: '@nomix-ai/nomix-tool-pwsh-persistent'
+      disabled: !!js process.platform !== 'win32'
+      config:
+        timeoutMs: 300000
+        description: |-
+          Run commands in a PowerShell shell
+          * When invoking this tool, the contents of the "command" parameter does NOT need to be XML-escaped.
+          * You don't have access to the internet via this tool.
+          * State is persistent across command calls and discussions with the user.
+          * Use native Windows paths (C:\...) and $env:NAME variables; this is PowerShell, not bash.
+          * Please avoid commands that may produce a very large amount of output.
+          * Please run long lived commands in the background, e.g. 'Start-Job' or start a server with Start-Process.
+
 # The bare local filesystem shadows the host's sandboxed provider only for this
 # preset. The editor shares that realm and requires absolute paths.
 - id: filesystem

package/dist/config/agent-presets/standard/agent.cordis.yml

@@ -197,9 +197,10 @@
         toolName: subagent_fork
         backgroundMode: continuable
 
-    # Production nomix does not install these optional providers. An opting-in
-    # Profile mounts each provider once on the host plane; copy this preset,
-    # then remove `disabled` from the matching tool row.
+    # Production nomix does not install these optional providers. Install the
+    # matching Bundle in this Profile and restart the Host, then copy this
+    # preset and remove `disabled` from the matching tool row. Host availability
+    # alone grants no tool.
     - id: tool-subagent-codex
       name: '@nomix-ai/nomix-tool-subagent'
       disabled: true

package/dist/kernel/acp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-acp",
   "description": "Automation-only Agent Client Protocol server for driving Nomix Harness agents over JSON-RPC stdio",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent",
   "description": "Agent interface, registry, initiator scope, and event vocabulary for the Nomix Harness",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-default-model/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-default-model",
   "description": "Default model selection shared by Agent entry points",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-instructions/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-instructions",
   "description": "Workspace context loader for AGENTS.md/CLAUDE.md instruction files",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-loop/lib/index.js

@@ -613,18 +613,41 @@ var ReactLoopAgent = class {
 			const { request, preparedCall } = await this.buildRequest(turn, step, assembly.tools, system, this.session.deriveMessages(), signal);
 			const assembler = new BlockAssembler();
 			const chunkSeqs = [];
-			const stream = preparedCall?.stream(request) ?? this.loopCtx.llm.stream(request);
-			signal.throwIfAborted();
-			for await (const chunk of stream) {
+			try {
+				const stream = preparedCall?.stream(request) ?? this.loopCtx.llm.stream(request);
 				signal.throwIfAborted();
-				chunkSeqs.push(this.session.append("assistant/chunk", {
-					turn,
-					step,
-					chunk
-				}).seq);
-				assembler.push(chunk);
+				for await (const chunk of stream) {
+					signal.throwIfAborted();
+					chunkSeqs.push(this.session.append("assistant/chunk", {
+						turn,
+						step,
+						chunk
+					}).seq);
+					assembler.push(chunk);
+				}
+				signal.throwIfAborted();
+			} catch (error) {
+				if (signal.aborted) {
+					const content = assembler.interruptedBlocks();
+					if (content.length > 0) this.session.append("assistant/message", {
+						turn,
+						step,
+						message: createAssistantMessage({
+							content,
+							source: {
+								provider: request.provider,
+								model: request.model
+							}
+						}),
+						interrupted: true,
+						...assembler.usage === void 0 ? {} : { usage: assembler.usage }
+					}, {
+						surfaceOp: "append",
+						sourceEventSeqs: chunkSeqs
+					});
+				}
+				throw error;
 			}
-			signal.throwIfAborted();
 			const finish = assembler.finish;
 			if (finish.kind === "error" || finish.kind === "aborted") {
 				const action = await this.dispatch.waterfall("agent/request-error", {

package/dist/kernel/agent-loop/lib/types/agent.js

@@ -301,14 +301,34 @@ export class ReactLoopAgent {
             const { request, preparedCall } = await this.buildRequest(turn, step, assembly.tools, system, this.session.deriveMessages(), signal);
             const assembler = new BlockAssembler();
             const chunkSeqs = [];
-            const stream = preparedCall?.stream(request) ?? this.loopCtx.llm.stream(request);
-            signal.throwIfAborted();
-            for await (const chunk of stream) {
+            try {
+                const stream = preparedCall?.stream(request) ?? this.loopCtx.llm.stream(request);
                 signal.throwIfAborted();
-                chunkSeqs.push(this.session.append('assistant/chunk', { turn, step, chunk }).seq);
-                assembler.push(chunk);
+                for await (const chunk of stream) {
+                    signal.throwIfAborted();
+                    chunkSeqs.push(this.session.append('assistant/chunk', { turn, step, chunk }).seq);
+                    assembler.push(chunk);
+                }
+                signal.throwIfAborted();
+            }
+            catch (error) {
+                if (signal.aborted) {
+                    const content = assembler.interruptedBlocks();
+                    if (content.length > 0) {
+                        this.session.append('assistant/message', {
+                            turn,
+                            step,
+                            message: createAssistantMessage({
+                                content,
+                                source: { provider: request.provider, model: request.model },
+                            }),
+                            interrupted: true,
+                            ...assembler.usage === undefined ? {} : { usage: assembler.usage },
+                        }, { surfaceOp: 'append', sourceEventSeqs: chunkSeqs });
+                    }
+                }
+                throw error;
             }
-            signal.throwIfAborted();
             const finish = assembler.finish;
             if (finish.kind === 'error' || finish.kind === 'aborted') {
                 const action = await this.dispatch.waterfall('agent/request-error', {

package/dist/kernel/agent-loop/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-loop",
   "description": "The concrete agent loop plugin for the Nomix Harness",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-presets/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-presets",
   "description": "Per-session agent composition from preset cordis.yml files for the Nomix Harness",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-tool-presentation/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-tool-presentation",
   "description": "Agent-plane presentation selector: composes one agent's tools as Code Mode, native, or both",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/anonymous-user-id/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-anonymous-user-id",
   "description": "Shared anonymous user identity for Nomix Harness telemetry and feedback correlation",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/api-gateway/lib/client.js

@@ -95,9 +95,15 @@ window.__ModuleLoader__.load({
 			async mountContribution(callerCtx, contribution) {
 				this.validateContribution(contribution);
 				const disposeRemote = callerCtx.typert.remotes.register(contribution);
+				const groups = /* @__PURE__ */ new Map();
+				for (const descriptor of contribution.descriptors) {
+					const group = groups.get(descriptor.namespace);
+					if (group === void 0) groups.set(descriptor.namespace, [descriptor]);
+					else group.push(descriptor);
+				}
 				const installed = [];
 				try {
-					for (const descriptor of contribution.descriptors) installed.push(await this.install(descriptor));
+					for (const [namespace, descriptors] of groups) installed.push(await this.installNamespace(namespace, descriptors));
 				} catch (error) {
 					for (const dispose of installed.reverse()) await dispose();
 					await disposeRemote();
@@ -135,64 +141,42 @@ window.__ModuleLoader__.load({
 					else service.assertMethodAvailable(method);
 				}
 			}
-			async install(descriptor) {
-				const token = {
-					active: true,
-					abort: new AbortController()
-				};
-				const installed = [];
-				try {
-					if (descriptor.invocation.kind === "direct") installed.push(await this.installDirect(descriptor, token));
-					const projection = scopedProjection(descriptor);
-					if (projection !== void 0) installed.push(await this.installScoped(descriptor, projection, token));
-				} catch (error) {
-					token.active = false;
-					token.abort.abort();
-					for (const dispose of installed.reverse()) await dispose();
-					throw error;
-				}
-				return async () => {
-					/* v8 ignore next -- Cordis effect disposers are idempotent and invoke this cleanup at most once. */
-					if (!token.active) return;
-					token.active = false;
-					token.abort.abort();
-					for (const dispose of installed.reverse()) await dispose();
-				};
-			}
-			async installDirect(descriptor, token) {
-				const namespace = await this.namespace(descriptor.namespace);
-				try {
-					namespace.service.installDirect(descriptor, token);
-				} catch (error) {
-					await this.disposeNamespace(descriptor.namespace, namespace);
-					throw error;
-				}
-				return async () => {
-					namespace.service.remove("direct", descriptor.method, token);
-					await this.disposeNamespace(descriptor.namespace, namespace);
-				};
-			}
-			async installScoped(descriptor, projection, token) {
-				const namespace = await this.namespace(descriptor.namespace);
-				try {
-					namespace.service.installScoped(descriptor, projection, token);
-				} catch (error) {
-					await this.disposeNamespace(descriptor.namespace, namespace);
-					throw error;
-				}
+			/**
+			* Mount one namespace's descriptor group with no visibility gap: a fresh
+			* namespace installs its whole group synchronously inside its fiber's
+			* apply, so a plugin parked on the namespace service never observes it
+			* without the methods the same contribution carries; an existing namespace
+			* takes the group in one synchronous step.
+			* @param name - Remote namespace.
+			* @param descriptors - Every contribution descriptor naming that namespace.
+			* @returns disposer unmounting the group and the namespace once empty.
+			*/
+			async installNamespace(name, descriptors) {
+				let namespace = this.namespaces.get(name);
+				let installed;
+				if (namespace === void 0) ({namespace, installed} = await this.createNamespace(name, descriptors));
+				else installed = installMethods(namespace.service, descriptors);
+				const handle = namespace;
 				return async () => {
-					namespace.service.remove("scoped", descriptor.method, token);
-					await this.disposeNamespace(descriptor.namespace, namespace);
+					for (const method of [...installed].reverse()) {
+						/* v8 ignore next -- Cordis effect disposers are idempotent and invoke this cleanup at most once. */
+						if (!method.token.active) continue;
+						method.token.active = false;
+						method.token.abort.abort();
+						if (method.scoped) handle.service.remove("scoped", method.descriptor.method, method.token);
+						if (method.direct) handle.service.remove("direct", method.descriptor.method, method.token);
+					}
+					await this.disposeNamespace(name, handle);
 				};
 			}
-			async namespace(name) {
-				let namespace = this.namespaces.get(name);
-				if (namespace !== void 0) return namespace;
+			async createNamespace(name, descriptors) {
 				let service;
+				let installed;
 				const fiber = this.ownerCtx.plugin({
 					name: remoteServiceKey(name),
 					apply: (ctx) => {
 						service = new RemoteNamespaceService(ctx, name, (direct, scoped, caller, args) => this.invokeMethod(direct, scoped, caller, args));
+						installed = installMethods(service, descriptors);
 					}
 				});
 				try {
@@ -201,14 +185,17 @@ window.__ModuleLoader__.load({
 					await fiber.dispose();
 					throw error;
 				}
-				/* v8 ignore next -- a settled namespace fiber synchronously constructs its Service. */
-				if (service === void 0) throw new Error(`client api: namespace ${JSON.stringify(name)} did not start`);
-				namespace = {
+				/* v8 ignore next 3 -- a settled namespace fiber synchronously constructs its Service and installs the group. */
+				if (service === void 0 || installed === void 0) throw new Error(`client api: namespace ${JSON.stringify(name)} did not start`);
+				const namespace = {
 					service,
 					dispose: fiber.dispose
 				};
 				this.namespaces.set(name, namespace);
-				return namespace;
+				return {
+					namespace,
+					installed
+				};
 			}
 			async disposeNamespace(name, namespace) {
 				if (!namespace.service.empty || this.namespaces.get(name) !== namespace) return;
@@ -339,6 +326,48 @@ window.__ModuleLoader__.load({
 				Reflect.deleteProperty(this, method);
 			}
 		};
+		/**
+		* Install one descriptor group on a namespace service, unwinding the partial
+		* group when a descriptor is refused.
+		* @param service - Namespace service taking the methods.
+		* @param descriptors - Descriptor group of one contribution.
+		* @returns per-descriptor records for the group disposer.
+		*/
+		function installMethods(service, descriptors) {
+			const installed = [];
+			try {
+				for (const descriptor of descriptors) {
+					const method = {
+						descriptor,
+						token: {
+							active: true,
+							abort: new AbortController()
+						},
+						direct: false,
+						scoped: false
+					};
+					installed.push(method);
+					if (descriptor.invocation.kind === "direct") {
+						service.installDirect(descriptor, method.token);
+						method.direct = true;
+					}
+					const projection = scopedProjection(descriptor);
+					if (projection !== void 0) {
+						service.installScoped(descriptor, projection, method.token);
+						method.scoped = true;
+					}
+				}
+			} catch (error) {
+				for (const method of [...installed].reverse()) {
+					method.token.active = false;
+					method.token.abort.abort();
+					if (method.scoped) service.remove("scoped", method.descriptor.method, method.token);
+					if (method.direct) service.remove("direct", method.descriptor.method, method.token);
+				}
+				throw error;
+			}
+			return installed;
+		}
 		const REMOTE_NAMESPACE_FIELDS = new Set([
 			"ctx",
 			"empty",

package/dist/kernel/api-gateway/lib/types/client/index.js

@@ -96,10 +96,19 @@ class ClientRemoteService extends Service {
     async mountContribution(callerCtx, contribution) {
         this.validateContribution(contribution);
         const disposeRemote = callerCtx.typert.remotes.register(contribution);
+        const groups = new Map();
+        for (const descriptor of contribution.descriptors) {
+            const group = groups.get(descriptor.namespace);
+            if (group === undefined)
+                groups.set(descriptor.namespace, [descriptor]);
+            else
+                group.push(descriptor);
+        }
         const installed = [];
         try {
-            for (const descriptor of contribution.descriptors)
-                installed.push(await this.install(descriptor));
+            for (const [namespace, descriptors] of groups) {
+                installed.push(await this.installNamespace(namespace, descriptors));
+            }
         }
         catch (error) {
             for (const dispose of installed.reverse())
@@ -156,71 +165,51 @@ class ClientRemoteService extends Service {
             }
         }
     }
-    async install(descriptor) {
-        const token = { active: true, abort: new AbortController() };
-        const installed = [];
-        try {
-            if (descriptor.invocation.kind === 'direct') {
-                installed.push(await this.installDirect(descriptor, token));
-            }
-            const projection = scopedProjection(descriptor);
-            if (projection !== undefined)
-                installed.push(await this.installScoped(descriptor, projection, token));
-        }
-        catch (error) {
-            token.active = false;
-            token.abort.abort();
-            for (const dispose of installed.reverse())
-                await dispose();
-            throw error;
-        }
-        return async () => {
-            /* v8 ignore next -- Cordis effect disposers are idempotent and invoke this cleanup at most once. */
-            if (!token.active)
-                return;
-            token.active = false;
-            token.abort.abort();
-            for (const dispose of installed.reverse())
-                await dispose();
-        };
-    }
-    async installDirect(descriptor, token) {
-        const namespace = await this.namespace(descriptor.namespace);
-        try {
-            namespace.service.installDirect(descriptor, token);
-        }
-        catch (error) {
-            await this.disposeNamespace(descriptor.namespace, namespace);
-            throw error;
-        }
-        return async () => {
-            namespace.service.remove('direct', descriptor.method, token);
-            await this.disposeNamespace(descriptor.namespace, namespace);
-        };
-    }
-    async installScoped(descriptor, projection, token) {
-        const namespace = await this.namespace(descriptor.namespace);
-        try {
-            namespace.service.installScoped(descriptor, projection, token);
+    /**
+     * Mount one namespace's descriptor group with no visibility gap: a fresh
+     * namespace installs its whole group synchronously inside its fiber's
+     * apply, so a plugin parked on the namespace service never observes it
+     * without the methods the same contribution carries; an existing namespace
+     * takes the group in one synchronous step.
+     * @param name - Remote namespace.
+     * @param descriptors - Every contribution descriptor naming that namespace.
+     * @returns disposer unmounting the group and the namespace once empty.
+     */
+    async installNamespace(name, descriptors) {
+        let namespace = this.namespaces.get(name);
+        let installed;
+        if (namespace === undefined) {
+            ({ namespace, installed } = await this.createNamespace(name, descriptors));
         }
-        catch (error) {
-            await this.disposeNamespace(descriptor.namespace, namespace);
-            throw error;
+        else {
+            installed = installMethods(namespace.service, descriptors);
         }
+        const handle = namespace;
         return async () => {
-            namespace.service.remove('scoped', descriptor.method, token);
-            await this.disposeNamespace(descriptor.namespace, namespace);
+            for (const method of [...installed].reverse()) {
+                /* v8 ignore next -- Cordis effect disposers are idempotent and invoke this cleanup at most once. */
+                if (!method.token.active)
+                    continue;
+                method.token.active = false;
+                method.token.abort.abort();
+                if (method.scoped)
+                    handle.service.remove('scoped', method.descriptor.method, method.token);
+                if (method.direct)
+                    handle.service.remove('direct', method.descriptor.method, method.token);
+            }
+            await this.disposeNamespace(name, handle);
         };
     }
-    async namespace(name) {
-        let namespace = this.namespaces.get(name);
-        if (namespace !== undefined)
-            return namespace;
+    async createNamespace(name, descriptors) {
         let service;
+        let installed;
         const fiber = this.ownerCtx.plugin({
             name: remoteServiceKey(name),
             apply: (ctx) => {
                 service = new RemoteNamespaceService(ctx, name, (direct, scoped, caller, args) => this.invokeMethod(direct, scoped, caller, args));
+                // Same synchronous window as the service registration: a dependent the
+                // new service unparks runs only after the methods exist.
+                installed = installMethods(service, descriptors);
             },
         });
         try {
@@ -230,12 +219,13 @@ class ClientRemoteService extends Service {
             await fiber.dispose();
             throw error;
         }
-        /* v8 ignore next -- a settled namespace fiber synchronously constructs its Service. */
-        if (service === undefined)
+        /* v8 ignore next 3 -- a settled namespace fiber synchronously constructs its Service and installs the group. */
+        if (service === undefined || installed === undefined) {
             throw new Error(`client api: namespace ${JSON.stringify(name)} did not start`);
-        namespace = { service, dispose: fiber.dispose };
+        }
+        const namespace = { service, dispose: fiber.dispose };
         this.namespaces.set(name, namespace);
-        return namespace;
+        return { namespace, installed };
     }
     async disposeNamespace(name, namespace) {
         if (!namespace.service.empty || this.namespaces.get(name) !== namespace)
@@ -392,6 +382,48 @@ class RemoteNamespaceService extends Service {
         Reflect.deleteProperty(this, method);
     }
 }
+/**
+ * Install one descriptor group on a namespace service, unwinding the partial
+ * group when a descriptor is refused.
+ * @param service - Namespace service taking the methods.
+ * @param descriptors - Descriptor group of one contribution.
+ * @returns per-descriptor records for the group disposer.
+ */
+function installMethods(service, descriptors) {
+    const installed = [];
+    try {
+        for (const descriptor of descriptors) {
+            const method = {
+                descriptor,
+                token: { active: true, abort: new AbortController() },
+                direct: false,
+                scoped: false,
+            };
+            installed.push(method);
+            if (descriptor.invocation.kind === 'direct') {
+                service.installDirect(descriptor, method.token);
+                method.direct = true;
+            }
+            const projection = scopedProjection(descriptor);
+            if (projection !== undefined) {
+                service.installScoped(descriptor, projection, method.token);
+                method.scoped = true;
+            }
+        }
+    }
+    catch (error) {
+        for (const method of [...installed].reverse()) {
+            method.token.active = false;
+            method.token.abort.abort();
+            if (method.scoped)
+                service.remove('scoped', method.descriptor.method, method.token);
+            if (method.direct)
+                service.remove('direct', method.descriptor.method, method.token);
+        }
+        throw error;
+    }
+    return installed;
+}
 const REMOTE_NAMESPACE_FIELDS = new Set(['ctx', 'empty', 'invokeRemote', 'methods', 'name', 'namespace']);
 function remoteServiceKey(namespace) {
     return `remote.${namespace}`;

package/dist/kernel/api-gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-api-gateway",
   "description": "Typert Remote Host dispatcher and Client API endpoint",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },