@nomix-ai/nomix-harness 0.2.5 → 0.2.6

package/dist/kernel/cordis-host-runner/lib/typert.host.js

@@ -886,6 +886,10 @@ export const TYPERT = {
             "name": "CommandSourceMap",
             "declaration": "export interface CommandSourceMap {\n    user: { kind: 'user'; };\n}"
           },
+          {
+            "name": "CompactionId",
+            "declaration": "export type CompactionId = Branded<'CompactionId'>;"
+          },
           {
             "name": "ContentBlock",
             "declaration": "export type ContentBlock = ContentBlockMap[ContentBlockType];"
@@ -996,7 +1000,7 @@ export const TYPERT = {
           },
           {
             "name": "ImageAttachmentRef",
-            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n}"
+            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n    originalDimensions?: { width: number; height: number; };\n}"
           },
           {
             "name": "ImageBlock",
@@ -1044,7 +1048,7 @@ export const TYPERT = {
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -1084,7 +1088,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; interrupted?: true; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n    'session/title': SessionTitleEventData;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; };\n}"
           },
           {
             "name": "SessionEventType",
@@ -1098,10 +1102,30 @@ export const TYPERT = {
             "name": "SessionId",
             "declaration": "export type SessionId = Branded<'SessionId'>;"
           },
+          {
+            "name": "SessionReferenceSource",
+            "declaration": "export interface SessionReferenceSource {\n    kind: 'session-reference';\n    form: 'recall';\n    version: 1;\n    references: { sessionId: string; label: string; capturedThroughSeq: number | null; compacted: boolean; originalMessages: number; retainedMessages: number; omittedMessages: number; omittedBytes: number; truncated: boolean; inputIndex: number; }[];\n}"
+          },
           {
             "name": "SessionSurface",
             "declaration": "export interface SessionSurface {\n    readonly nodes: readonly number[];\n    readonly replaceGeneration: number;\n}"
           },
+          {
+            "name": "SessionTitleEventData",
+            "declaration": "export interface SessionTitleEventData {\n    readonly title: string;\n    readonly messageSeqs: number[];\n    readonly source: SessionTitleSource;\n}"
+          },
+          {
+            "name": "SessionTitleModelProvenance",
+            "declaration": "export interface SessionTitleModelProvenance {\n    readonly provider: string;\n    readonly model: string;\n}"
+          },
+          {
+            "name": "SessionTitleProviderId",
+            "declaration": "export type SessionTitleProviderId = Branded<'SessionTitleProviderId'>;"
+          },
+          {
+            "name": "SessionTitleSource",
+            "declaration": "export type SessionTitleSource = { readonly kind: 'fallback'; } | { readonly kind: 'provider'; readonly provider: SessionTitleProviderId; readonly model?: SessionTitleModelProvenance; } | { readonly kind: 'user'; };"
+          },
           {
             "name": "StreamChunk",
             "declaration": "export type StreamChunk = { type: 'block-start'; index: number; blockType: ContentBlockType; } | { type: 'text-delta'; index: number; text: string; } | { type: 'reasoning-delta'; index: number; text: string; } | { type: 'tool-call-delta'; index: number; id: CallId; name?: string; argumentsDelta: string; } | { type: 'block-end'; index: number; block: ContentBlock; } | { type: 'usage'; usage: TokenUsage; } | { type: 'finish'; reason: FinishReason; replayState?: ReplayEnvelope; };"
@@ -1401,6 +1425,10 @@ export const TYPERT = {
             "name": "CommandSourceMap",
             "declaration": "export interface CommandSourceMap {\n    user: { kind: 'user'; };\n}"
           },
+          {
+            "name": "CompactionId",
+            "declaration": "export type CompactionId = Branded<'CompactionId'>;"
+          },
           {
             "name": "ContentBlock",
             "declaration": "export type ContentBlock = ContentBlockMap[ContentBlockType];"
@@ -1599,7 +1627,7 @@ export const TYPERT = {
           },
           {
             "name": "ImageAttachmentRef",
-            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n}"
+            "declaration": "export interface ImageAttachmentRef {\n    attachmentId: AttachmentId;\n    mediaType: ImageMediaType;\n    bytes: number;\n    width: number;\n    height: number;\n    name?: string;\n    originalDimensions?: { width: number; height: number; };\n}"
           },
           {
             "name": "ImageBlock",
@@ -1647,7 +1675,7 @@ export const TYPERT = {
           },
           {
             "name": "MessageSourceMap",
-            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n}"
+            "declaration": "export interface MessageSourceMap {\n    user: { kind: 'user'; };\n    plugin: { kind: 'plugin'; plugin: string; } & ContextFormed;\n    model: ModelMessageSource;\n    tool: ToolMessageSource;\n    goal: GoalMessageSource;\n    'session-reference': SessionReferenceSource;\n}"
           },
           {
             "name": "ModelMessageSource",
@@ -1687,7 +1715,7 @@ export const TYPERT = {
           },
           {
             "name": "SessionEventMap",
-            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n}"
+            "declaration": "export interface SessionEventMap {\n    'turn/start': { turn: number; };\n    'turn/end': { turn: number; reason: TurnEndReason; };\n    'step/start': { turn: number; step: number; };\n    'step/end': { turn: number; step: number; };\n    'user/message': UserMessage;\n    'assistant/chunk': { turn: number; step: number; chunk: StreamChunk; };\n    'assistant/message': { turn: number; step: number; message: AssistantMessage; usage?: TokenUsage; interrupted?: true; };\n    'tool/call': { turn: number; step: number; callId: CallId; name: string; arguments: string; };\n    'tool/result': { turn: number; step: number; message: ToolResultMessage; error?: { name: string; code: string; }; meta?: JsonValue; };\n    'todo/write': { todos: TodoItem[]; };\n    'request/header': { header: EpochHeader; reason: RequestHeaderReason; };\n    'request/context': RequestContext;\n    'session/end-seed': Record<string, never>;\n    'agent/inbox/spliced': { target: InboxTarget; start: number; removedCount?: number; inserted: UserMessage[]; outcome?: 'canceled'; };\n    'command/run': { commandId: CommandId; name: string; args?: string; source: CommandSource; };\n    'command/done': { commandId: CommandId; kind: 'success' | 'error'; text?: string; sourceEventSeq?: number; };\n    'approval/asked': { id: ApprovalRequestId; toolName: string; callId?: CallId; reason?: string; };\n    'approval/decided': { id: ApprovalRequestId; outcome: ApprovalOutcome; };\n    'approval/policy': { policy: ApprovalPolicy; source?: 'delegation'; };\n    'tool/code-dispatch-start': CodeDispatchStartEventData;\n    'tool/code-dispatch': CodeDispatchEventData;\n    'goal/change': GoalChangeMeta;\n    'session/title': SessionTitleEventData;\n    'compaction/start': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; };\n    'compaction/summary': { compactionId: CompactionId; sourceCommandId?: CommandId; summary: ContentBlock[]; shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; provider: string; model: string; maxTokens?: number; usage?: TokenUsage; } & ({ rawOutput: ContentBlock[]; llmStreamCall: true; } | { rawOutput?: ContentBlock[]; llmStreamCall?: never; });\n    'compaction/end': { compactionId: CompactionId; sourceCommandId?: CommandId; turn: number | null; error?: string; };\n    'compaction/prune': { shadowedRange: { start: number; end: number; }; shadowedSeqs: number[]; shadowedTokenCount: number; };\n}"
           },
           {
             "name": "SessionEventType",
@@ -1701,10 +1729,30 @@ export const TYPERT = {
             "name": "SessionId",
             "declaration": "export type SessionId = Branded<'SessionId'>;"
           },
+          {
+            "name": "SessionReferenceSource",
+            "declaration": "export interface SessionReferenceSource {\n    kind: 'session-reference';\n    form: 'recall';\n    version: 1;\n    references: { sessionId: string; label: string; capturedThroughSeq: number | null; compacted: boolean; originalMessages: number; retainedMessages: number; omittedMessages: number; omittedBytes: number; truncated: boolean; inputIndex: number; }[];\n}"
+          },
           {
             "name": "SessionSurface",
             "declaration": "export interface SessionSurface {\n    readonly nodes: readonly number[];\n    readonly replaceGeneration: number;\n}"
           },
+          {
+            "name": "SessionTitleEventData",
+            "declaration": "export interface SessionTitleEventData {\n    readonly title: string;\n    readonly messageSeqs: number[];\n    readonly source: SessionTitleSource;\n}"
+          },
+          {
+            "name": "SessionTitleModelProvenance",
+            "declaration": "export interface SessionTitleModelProvenance {\n    readonly provider: string;\n    readonly model: string;\n}"
+          },
+          {
+            "name": "SessionTitleProviderId",
+            "declaration": "export type SessionTitleProviderId = Branded<'SessionTitleProviderId'>;"
+          },
+          {
+            "name": "SessionTitleSource",
+            "declaration": "export type SessionTitleSource = { readonly kind: 'fallback'; } | { readonly kind: 'provider'; readonly provider: SessionTitleProviderId; readonly model?: SessionTitleModelProvenance; } | { readonly kind: 'user'; };"
+          },
           {
             "name": "StreamChunk",
             "declaration": "export type StreamChunk = { type: 'block-start'; index: number; blockType: ContentBlockType; } | { type: 'text-delta'; index: number; text: string; } | { type: 'reasoning-delta'; index: number; text: string; } | { type: 'tool-call-delta'; index: number; id: CallId; name?: string; argumentsDelta: string; } | { type: 'block-end'; index: number; block: ContentBlock; } | { type: 'usage'; usage: TokenUsage; } | { type: 'finish'; reason: FinishReason; replayState?: ReplayEnvelope; };"

package/dist/kernel/cordis-host-runner/lib/types/sandbox.d.ts

@@ -70,9 +70,15 @@ export declare function parseErrorMessage(half: 'code.host' | 'code.client', con
 /**
  * Parse one half's source without running it: the define-time precheck that
  * keeps unparseable code out of the registry, so a model fixes it and defines
- * again instead of discovering the failure at run time. Compiling through `vm`
- * rather than `new Function` is what makes the two agree — same wrapper, same
- * compiler, and the same source-line-and-caret prelude in the failure.
+ * again instead of discovering the failure at run time. `new Function` is the
+ * gate — hosts without a real `node:vm` (the browser worker) still refuse
+ * unparseable code — and `vm.Script` is only the best-effort prettifier: on a
+ * Node host its failure carries the source-line-and-caret prelude the
+ * teaching text builds on, and where the vm is a stub the message stays bare.
+ * The two parsers' syntax faces differ at the margin (`new.target` parses in
+ * a function body but not at the vm wrapper's top level), an accepted cost of
+ * a vm-free gate; and under a page CSP without `'unsafe-eval'`, `new Function`
+ * throws `EvalError`, which propagates unwrapped.
  * @param code - the model-written function body.
  * @param half - which define argument carried it, for the error text.
  * @throws when the body does not parse, with the offending line and a teaching hint.

package/dist/kernel/cordis-host-runner/lib/types/sandbox.js

@@ -181,24 +181,52 @@ export function parseErrorMessage(half, context) {
 /**
  * Parse one half's source without running it: the define-time precheck that
  * keeps unparseable code out of the registry, so a model fixes it and defines
- * again instead of discovering the failure at run time. Compiling through `vm`
- * rather than `new Function` is what makes the two agree — same wrapper, same
- * compiler, and the same source-line-and-caret prelude in the failure.
+ * again instead of discovering the failure at run time. `new Function` is the
+ * gate — hosts without a real `node:vm` (the browser worker) still refuse
+ * unparseable code — and `vm.Script` is only the best-effort prettifier: on a
+ * Node host its failure carries the source-line-and-caret prelude the
+ * teaching text builds on, and where the vm is a stub the message stays bare.
+ * The two parsers' syntax faces differ at the margin (`new.target` parses in
+ * a function body but not at the vm wrapper's top level), an accepted cost of
+ * a vm-free gate; and under a page CSP without `'unsafe-eval'`, `new Function`
+ * throws `EvalError`, which propagates unwrapped.
  * @param code - the model-written function body.
  * @param half - which define argument carried it, for the error text.
  * @throws when the body does not parse, with the offending line and a teaching hint.
  */
 export function precheckCode(code, half) {
+    const wrapped = `(async () => {\n${code}\n})()`;
     try {
-        // Compile-only: constructing the Script parses the source and runs nothing.
-        new Script(`(async () => {\n${code}\n})()`, { filename: `cordis-dyn-${half}.js` });
+        // Compile-only: constructing the function parses the source and runs nothing.
+        // oxlint-disable-next-line typescript/no-implied-eval -- parse gate over model-written code; nothing is invoked
+        new Function(wrapped);
     }
     catch (error) {
         if (!isSyntaxError(error))
             throw error;
-        throw new Error(parseErrorMessage(half, syntaxErrorContext(error)));
+        throw new Error(parseErrorMessage(half, prettyParseContext(wrapped, half, error)));
     }
 }
+/**
+ * Best-effort vm recompile of a body `new Function` already refused, for the
+ * source-line-and-caret prelude only.
+ * @param wrapped - the wrapped source that failed to parse.
+ * @param half - which define argument carried it, for the vm filename.
+ * @param refusal - the gate's own `SyntaxError`, the fallback context source.
+ * @returns the vm prelude when a real vm produced one, else the bare refusal.
+ */
+function prettyParseContext(wrapped, half, refusal) {
+    try {
+        new Script(wrapped, { filename: `cordis-dyn-${half}.js` });
+    }
+    catch (vmError) {
+        if (isSyntaxError(vmError))
+            return syntaxErrorContext(vmError);
+        // A stubbed vm (the browser worker) refuses Script itself; the gate's
+        // error is the only context there is.
+    }
+    return String(refusal);
+}
 /**
  * Evaluate a host half as the body of an async function inside the sandbox. `vmTimeoutMs` only
  * bounds the SYNCHRONOUS portion; an async body escapes it — acceptable under the module's

package/dist/kernel/cordis-host-runner/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-cordis-host-runner",
   "description": "Dynamic package definition registry, host-half sandbox lifecycle, and invoke handler table for model-mounted dual-half packages",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/cordis-plugin-group/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-group",
   "description": "Nested plugin group for cordis",
   "version": "1.0.1",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cordis-plugin-hmr/lib/types/index.js

@@ -517,7 +517,7 @@ class Hmr extends Service {
         ]),
         debounce: z.natural().role('ms').default(100),
     });
-    // [deepseek-harness] vendored modification: removed `.i18n({ 'en-US': enUS, 'zh-CN': zhCN })`
+    // [nomix-harness] vendored modification: removed `.i18n({ 'en-US': enUS, 'zh-CN': zhCN })`
     // and the corresponding `./locales/*.yml` imports, to avoid a runtime YAML import hook
     // (@cordisjs/unyaml) that we don't vendor. See vendor/README.md.
 })(Hmr || (Hmr = {}));

package/dist/kernel/cordis-plugin-hmr/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-hmr",
   "description": "Hot Module Replacement Plugin for Cordis",
   "version": "1.0.16",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cordis-plugin-include/lib/index.js

@@ -22,7 +22,7 @@ const JsExpr = new yaml.Type("tag:yaml.org,2002:js", {
 /**
 * The entry-list YAML dialect: `!!js` scalars round-trip as expression nodes
 * the Loader evaluates at entry activation. Exported so config tooling
-* (`dsh --dump-config`) parses and prints exactly the dialect this include
+* (`nomix --dump-config`) parses and prints exactly the dialect this include
 * mounts.
 */
 const entryListSchema = yaml.JSON_SCHEMA.extend(JsExpr);
@@ -42,7 +42,7 @@ function retryableWriteError(error) {
 /**
 * Apply patch lists to an entry list — THE patch semantics of this include,
 * shared by mounting (`applyPatches`) and offline config tooling
-* (`dsh --dump-config`) so a dump can never drift from what boots. The input
+* (`nomix --dump-config`) so a dump can never drift from what boots. The input
 * is never mutated and the result is always detached from it (even with no
 * patches): patching or mounting shared entry objects would bake earlier
 * values into the cached parse, so repeated application (config hot-reloads)

package/dist/kernel/cordis-plugin-include/lib/types/index.d.ts

@@ -4,14 +4,14 @@ import * as yaml from 'js-yaml';
 /**
  * The entry-list YAML dialect: `!!js` scalars round-trip as expression nodes
  * the Loader evaluates at entry activation. Exported so config tooling
- * (`dsh --dump-config`) parses and prints exactly the dialect this include
+ * (`nomix --dump-config`) parses and prints exactly the dialect this include
  * mounts.
  */
 export declare const entryListSchema: yaml.Schema;
 /**
  * Apply patch lists to an entry list — THE patch semantics of this include,
  * shared by mounting (`applyPatches`) and offline config tooling
- * (`dsh --dump-config`) so a dump can never drift from what boots. The input
+ * (`nomix --dump-config`) so a dump can never drift from what boots. The input
  * is never mutated and the result is always detached from it (even with no
  * patches): patching or mounting shared entry objects would bake earlier
  * values into the cached parse, so repeated application (config hot-reloads)

package/dist/kernel/cordis-plugin-include/lib/types/index.js

@@ -23,7 +23,7 @@ const JsExpr = new yaml.Type('tag:yaml.org,2002:js', {
 /**
  * The entry-list YAML dialect: `!!js` scalars round-trip as expression nodes
  * the Loader evaluates at entry activation. Exported so config tooling
- * (`dsh --dump-config`) parses and prints exactly the dialect this include
+ * (`nomix --dump-config`) parses and prints exactly the dialect this include
  * mounts.
  */
 export const entryListSchema = yaml.JSON_SCHEMA.extend(JsExpr);
@@ -43,7 +43,7 @@ function retryableWriteError(error) {
 /**
  * Apply patch lists to an entry list — THE patch semantics of this include,
  * shared by mounting (`applyPatches`) and offline config tooling
- * (`dsh --dump-config`) so a dump can never drift from what boots. The input
+ * (`nomix --dump-config`) so a dump can never drift from what boots. The input
  * is never mutated and the result is always detached from it (even with no
  * patches): patching or mounting shared entry objects would bake earlier
  * values into the cached parse, so repeated application (config hot-reloads)

package/dist/kernel/cordis-plugin-include/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-include",
   "description": "Include files in cordis configurations",
   "version": "1.0.6",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cordis-plugin-loader/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-loader",
   "description": "Plugin loader for cordis",
   "version": "1.0.2",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cordis-plugin-logger-console/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-logger-console",
   "description": "Console logger exporter for cordis",
   "version": "1.0.1",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cordis-plugin-timer/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cordis-plugin-timer",
   "description": "Timer service for cordis",
   "version": "1.1.3",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/cosmokit/package.json

@@ -2,7 +2,9 @@
   "name": "@nomix-ai/cosmokit",
   "description": "A collection of common utilities",
   "version": "1.8.2",
-  "private": true,
+  "publishConfig": {
+    "access": "public"
+  },
   "repository": {
     "type": "git",
     "url": "git+https://github.com/ditgaldev/nomix-harness.git",

package/dist/kernel/credentials/lib/index.js

@@ -10,27 +10,106 @@ import { Service } from "../../cordis/lib/index.js";
 * @module @nomix-ai/nomix-credentials
 */
 const REF_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+/** Both halves of a {@link CredentialKey}; the `/` between them is what keeps it out of {@link REF_PATTERN}. */
+const KEY_SEGMENT_PATTERN = /^[a-z][a-z0-9-]*$/;
 /**
 * Brand a raw string as a {@link CredentialRef}.
 * @param value - candidate reference; a POSIX shell identifier such as `DEEPSEEK_API_KEY`.
 * @returns the branded reference.
 */
 function credentialRef(value) {
-	if (!REF_PATTERN.test(value)) throw new TypeError(`credential ref "${value}" must match ${String(REF_PATTERN)}`);
+	if (!isCredentialRefName(value)) throw new TypeError(`credential ref "${value}" must match ${String(REF_PATTERN)}`);
 	return value;
 }
 /**
-* Abstract credential service. Providers implement the four operations over
-* their source layers; one seam-wide rule binds them all: an empty stored
-* value is absent everywhere — `resolve` skips it, `describe` reports it
-* unconfigured — so a blank never masquerades as a configured secret.
+* Whether a raw string could name a reference at all. Consumers that receive
+* environment-variable names from somewhere else — a provider library's own
+* ambient discovery, a hook payload — ask this before resolving, because a name
+* outside the grammar has no reference to miss and should read as "not set"
+* rather than as a thrown error.
+* @param value - candidate reference.
+* @returns true when {@link credentialRef} would accept it.
+*/
+function isCredentialRefName(value) {
+	return REF_PATTERN.test(value);
+}
+/**
+* Whether a raw string could be a {@link credentialKey} segment at all.
+* Consumers whose addressing units come from somewhere else — a settings dict
+* key, a library's own provider id — ask this before building a key, because a
+* unit outside the grammar can never have stored a record and should read as
+* "nothing stored" rather than as a thrown error.
+* @param value - candidate segment.
+* @returns true when {@link credentialKey} would accept it as either segment.
+*/
+function isCredentialKeySegment(value) {
+	return KEY_SEGMENT_PATTERN.test(value);
+}
+/**
+* Brand a scope and an id as a {@link CredentialKey}.
+* @param scope - the owning plugin's registered name, such as `llm-pi-ai`.
+* @param id - that plugin's own addressing unit, such as a provider route key.
+* @returns the branded key.
+* @throws TypeError when either segment is not a lowercase hyphenated identifier.
+*/
+function credentialKey(scope, id) {
+	for (const segment of [scope, id]) if (!KEY_SEGMENT_PATTERN.test(segment)) throw new TypeError(`credential key segment "${segment}" must match ${String(KEY_SEGMENT_PATTERN)}`);
+	return `${scope}/${id}`;
+}
+/**
+* Brand a stored `<scope>/<id>` string as a {@link CredentialKey}. This is the
+* read half of {@link credentialKey}, for a provider admitting keys off disk.
+* @param value - candidate key in its joined form.
+* @returns the branded key.
+* @throws TypeError when the value is not exactly two valid segments.
+*/
+function parseCredentialKey(value) {
+	const segments = value.split("/");
+	const [scope, id] = segments;
+	if (segments.length !== 2 || scope === void 0 || id === void 0) throw new TypeError(`credential key "${value}" must be "<scope>/<id>"`);
+	return credentialKey(scope, id);
+}
+/**
+* The owning plugin's name for one key. A record whose scope names no
+* currently registered owner is an orphan, which a configuration surface must
+* report as such rather than as a working credential.
+* @param key - the key to read.
+* @returns the scope segment.
+*/
+function credentialKeyScope(key) {
+	return key.slice(0, key.indexOf("/"));
+}
+/**
+* The owning plugin's own addressing unit for one key — the half that plugin
+* chose, such as a provider route.
+* @param key - the key to read.
+* @returns the id segment.
+*/
+function credentialKeyId(key) {
+	return key.slice(key.indexOf("/") + 1);
+}
+/**
+* Abstract credential service over two key spaces that answer two questions.
+*
+* A {@link CredentialRef} answers "what is behind this environment-variable
+* name", layered over the process environment, the provider-managed store, and
+* `.env` files. One seam-wide rule binds that half: an empty stored value is
+* absent everywhere — `resolve` skips it, `describe` reports it unconfigured —
+* so a blank never masquerades as a configured secret.
+*
+* A {@link CredentialKey} answers "what credential does this plugin hold for
+* this id". Nothing can layer here — an authorization grant has no
+* environment to be read from — so presence of the record is the whole fact,
+* and {@link modifyRecord} is the only write path because a correct write
+* depends on the current value (a token refresh is read-decide-replace under
+* one lock).
 */
 var CredentialProvider = class extends Service {
 	constructor(ctx) {
 		super(ctx, "credentials");
 	}
 	/**
-	* Fan `credentials/updated` out with contained listener failures: every
+	* Fan `credentials/reference-updated` out with contained listener failures: every
 	* listener runs, and a sync throw or async rejection is logged without
 	* changing the committed operation's outcome — except `INVARIANT`-coded
 	* failures, which rethrow after every listener ran (the rethrow reaches the
@@ -41,27 +120,39 @@ var CredentialProvider = class extends Service {
 	* @param ref - the reference whose stored value changed.
 	*/
 	notifyUpdated(ref) {
+		this.fanOut("credentials/reference-updated", ref);
+	}
+	/**
+	* Fan `credentials/record-updated` out on exactly the terms
+	* {@link notifyUpdated} documents, for the record half of the seam.
+	* @param key - the record whose stored value changed.
+	*/
+	notifyRecordUpdated(key) {
+		this.fanOut("credentials/record-updated", key);
+	}
+	/** The contained dispatch both notifications run through; see {@link notifyUpdated}. */
+	fanOut(event, subject) {
 		let invariantFailure;
-		const args = ["credentials/updated", ref];
+		const args = [event, subject];
 		for (const listener of this.ctx.events.dispatch("emit", args)) try {
-			const returned = listener(ref);
+			const returned = listener(subject);
 			if (returned != null && typeof returned.then === "function") Promise.resolve(returned).then(void 0, (error) => {
-				this.warnListenerFailure(ref, error);
+				this.warnListenerFailure(event, subject, error);
 			});
 		} catch (error) {
 			if (error?.code === "INVARIANT") {
 				invariantFailure ??= error;
 				continue;
 			}
-			this.warnListenerFailure(ref, error);
+			this.warnListenerFailure(event, subject, error);
 		}
 		if (invariantFailure !== void 0) throw invariantFailure;
 	}
 	/** Contained-listener diagnostic shared by the sync and async failure paths. */
-	warnListenerFailure(ref, error) {
-		this.ctx.logger.warn("credentials: a credentials/updated listener for \"%s\" failed", ref);
+	warnListenerFailure(event, subject, error) {
+		this.ctx.logger.warn("credentials: a %s listener for \"%s\" failed", event, subject);
 		this.ctx.logger.warn(error);
 	}
 };
 //#endregion
-export { CredentialProvider, CredentialProvider as default, credentialRef };
+export { CredentialProvider, CredentialProvider as default, credentialKey, credentialKeyId, credentialKeyScope, credentialRef, isCredentialKeySegment, isCredentialRefName, parseCredentialKey };

package/dist/kernel/credentials/lib/invariant.js

@@ -9,7 +9,7 @@ const name = "credentials-invariant";
 /** Service required before the companion can reserve package ownership. */
 const inject = ["invariants"];
 /**
-* Install the commit-event lifecycle contract: `credentials/updated` names a
+* Install the commit-event lifecycle contract: `credentials/reference-updated` names a
 * committed provider-source change, so it can only fire while a credentials
 * service is live — an emission after disposal means a provider leaked work
 * past its teardown quiescence. The value relation itself (`describe`
@@ -17,8 +17,8 @@ const inject = ["invariants"];
 * each provider's own suite.
 */
 const install = (ctx, fail) => {
-	ctx.on("credentials/updated", (ref) => {
-		if (ctx.get("credentials") === void 0) fail(`credentials/updated for "${ref}" emitted without a live credentials service`);
+	ctx.on("credentials/reference-updated", (ref) => {
+		if (ctx.get("credentials") === void 0) fail(`credentials/reference-updated for "${ref}" emitted without a live credentials service`);
 	});
 };
 /**