@nomix-ai/nomix-harness 0.2.5 → 0.2.6

package/dist/kernel/lsp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-lsp",
   "description": "Abstract LSP capability seam (ctx.lsp) for the Nomix Harness — language-server provider registry keyed by branded id and extension mapping, order-independent per-query selection, normalized definition/references/implementation/hover requests and results, and the LspError taxonomy",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/lsp-stdio/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-lsp-stdio",
   "description": "Generic stdio language-server provider for the Nomix Harness LSP capability seam (ctx.lsp) — spawns configured servers, translates JSON-RPC, and serves transient-open goToDefinition/findReferences/goToImplementation/hover queries in the host filesystem namespace",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/manifest.json

@@ -16,9 +16,9 @@
   "@nomix-ai/nomix-client-locale": "./client-locale",
   "@nomix-ai/nomix-client-modules": "./client-modules",
   "@nomix-ai/nomix-client-runtime": "./client-runtime",
-  "@nomix-ai/nomix-client-schema-form": "./client-schema-form",
   "@nomix-ai/nomix-client-ui-agent-preset": "./client-ui-agent-preset",
   "@nomix-ai/nomix-client-ui-attachment": "./client-ui-attachment",
+  "@nomix-ai/nomix-client-ui-brand-official": "./client-ui-brand-official",
   "@nomix-ai/nomix-client-ui-commands": "./client-ui-commands",
   "@nomix-ai/nomix-client-ui-conversation": "./client-ui-conversation",
   "@nomix-ai/nomix-client-ui-deliverables": "./client-ui-deliverables",
@@ -33,6 +33,8 @@
   "@nomix-ai/nomix-client-ui-permission-presets": "./client-ui-permission-presets",
   "@nomix-ai/nomix-client-ui-plan": "./client-ui-plan",
   "@nomix-ai/nomix-client-ui-primitives": "./client-ui-primitives",
+  "@nomix-ai/nomix-client-ui-reference": "./client-ui-reference",
+  "@nomix-ai/nomix-client-ui-renderer": "./client-ui-renderer",
   "@nomix-ai/nomix-client-ui-settings-general": "./client-ui-settings-general",
   "@nomix-ai/nomix-client-ui-settings-models": "./client-ui-settings-models",
   "@nomix-ai/nomix-client-ui-settings-plugin-inventory": "./client-ui-settings-plugin-inventory",
@@ -48,8 +50,8 @@
   "@nomix-ai/nomix-client-ui-user-questions": "./client-ui-user-questions",
   "@nomix-ai/nomix-client-ui-workflow-run": "./client-ui-workflow-run",
   "@nomix-ai/nomix-client-ui-workspace": "./client-ui-workspace",
-  "@nomix-ai/nomix-client-web-react": "./client-web-react",
   "@nomix-ai/nomix-client-web": "./client-web",
+  "@nomix-ai/nomix-code-runtime-python": "./code-runtime-python",
   "@nomix-ai/nomix-code-runtime-worker-thread": "./code-runtime-worker-thread",
   "@nomix-ai/nomix-code-runtime": "./code-runtime",
   "@nomix-ai/nomix-command-compact": "./command-compact",
@@ -57,6 +59,8 @@
   "@nomix-ai/nomix-compaction-tool-result-pruner": "./compaction-tool-result-pruner",
   "@nomix-ai/nomix-compaction": "./compaction",
   "@nomix-ai/nomix-agent-instructions": "./agent-instructions",
+  "@nomix-ai/nomix-file-reference-local": "./file-reference-local",
+  "@nomix-ai/nomix-file-reference": "./file-reference",
   "@nomix-ai/nomix-session-reference": "./session-reference",
   "@nomix-ai/nomix-time-context": "./time-context",
   "@nomix-ai/nomix-tmux-context": "./tmux-context",
@@ -68,11 +72,14 @@
   "@nomix-ai/nomix-session": "./session",
   "@nomix-ai/nomix-system-prompt": "./system-prompt",
   "@nomix-ai/nomix-tools": "./tools",
+  "@nomix-ai/nomix-authorization": "./authorization",
   "@nomix-ai/nomix-credentials-local": "./credentials-local",
   "@nomix-ai/nomix-credentials": "./credentials",
   "@nomix-ai/nomix-e2b": "./e2b",
   "@nomix-ai/nomix-fs-e2b": "./fs-e2b",
   "@nomix-ai/nomix-subprocess-e2b": "./subprocess-e2b",
+  "@nomix-ai/nomix-experimental-agent-team": "./experimental-agent-team",
+  "@nomix-ai/nomix-experimental-tool-agent-team": "./experimental-tool-agent-team",
   "@nomix-ai/nomix-cordis-client-runner": "./cordis-client-runner",
   "@nomix-ai/nomix-cordis-host-runner": "./cordis-host-runner",
   "@nomix-ai/nomix-tool-cordis": "./tool-cordis",
@@ -160,6 +167,7 @@
   "@nomix-ai/nomix-shell": "./shell",
   "@nomix-ai/nomix-tool-bash-persistent": "./tool-bash-persistent",
   "@nomix-ai/nomix-tool-bash": "./tool-bash",
+  "@nomix-ai/nomix-tool-pwsh-persistent": "./tool-pwsh-persistent",
   "@nomix-ai/nomix-tool-pwsh": "./tool-pwsh",
   "@nomix-ai/nomix-skill-badge": "./skill-badge",
   "@nomix-ai/nomix-skill-filesystem": "./skill-filesystem",

package/dist/kernel/mcp-client/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-mcp-client",
   "description": "MCP client bridge: connects to MCP servers and registers their tools on ctx.tools",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/message-feedback/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-message-feedback",
   "description": "Lifecycle-bound per-message rating and note sidecar for the Nomix Harness",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/native-command/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-native-command",
   "description": "Zero-dependency no-shell execFile runner for host-native OS integrations: utf8 stdio capture, abort propagation, Windows hide",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/node-addon-landlock-run/lib/index.js

@@ -46,7 +46,7 @@ export function launcherPath(resolvePackageJson = createRequire(import.meta.url)
     const bundled = fileURLToPath(new URL(`../../../native/landlock-run/${platform}/${LAUNCHER_BIN}`, import.meta.url));
     if (bundledExists(bundled))
         return bundled;
-    const platformPackage = `@nomix-ai/node-addon-landlock-run-${process.platform}-${process.arch}`;
+    const platformPackage = `@nomix-ai/node-addon-landlock-run-${platform}`;
     try {
         return join(dirname(resolvePackageJson(`${platformPackage}/package.json`)), 'bin', LAUNCHER_BIN);
     }

package/dist/kernel/node-addon-landlock-run/package.json

@@ -1,12 +1,11 @@
 {
   "name": "@nomix-ai/node-addon-landlock-run",
   "version": "0.1.1",
-  "private": true,
   "type": "module",
   "description": "Landlock self-restrict-then-exec launcher for sandboxing subprocesses on Linux: per-platform prebuilt static binaries plus the JS seam that resolves, probes, and speaks their CLI contract",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/ditgaldev/nomix-harness.git",
+    "url": "git+https://github.com/nomix-harness/nomix-harness.git",
     "directory": "native/landlock-run/packages/entry"
   },
   "main": "lib/index.js",
@@ -32,6 +31,9 @@
     "node": ">=20"
   },
   "license": "BSD-3-Clause",
+  "publishConfig": {
+    "access": "public"
+  },
   "optionalDependencies": {
     "@nomix-ai/node-addon-landlock-run-linux-arm64": "workspace:*",
     "@nomix-ai/node-addon-landlock-run-linux-x64": "workspace:*"

package/dist/kernel/output-retention/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-output-retention",
   "description": "Zero-dependency bounded-retention primitive: ItemRetainer/TextRetainer + neutral notice helpers (what did we keep, what did we omit)",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/permission-presets/lib/index.js

@@ -35,6 +35,15 @@ function effectivePermissionPreset(events) {
 		if (event.type === "permission/preset") return event.data.preset;
 	}
 }
+const knobStateSchema = z$1.object({
+	preset: z$1.string().nullable(),
+	sandbox: z$1.union([
+		z$1.literal("read-only"),
+		z$1.literal("workspace-write"),
+		z$1.literal("danger-full-access")
+	]).nullable(),
+	approval: z$1.union([z$1.literal("ask"), z$1.literal("never")]).nullable()
+}).strict();
 /** State for the empty log: every knob at its composition default. */
 const EMPTY_KNOBS = {
 	preset: null,
@@ -143,10 +152,13 @@ var PermissionPresetService = class extends Service {
 		ctx.inject(["sessionProjections"], (projectionCtx) => {
 			projectionCtx.sessionProjections.register({
 				key: "permissions",
-				schema: selectSchema,
+				stateSchema: knobStateSchema,
 				init: () => EMPTY_KNOBS,
 				apply: applyKnobEvent,
-				view: (state) => this.selectFor(state),
+				wire: {
+					viewSchema: selectSchema,
+					view: (state) => this.selectFor(state)
+				},
 				stateVersion: 1
 			});
 		});

package/dist/kernel/permission-presets/lib/types/index.d.ts

@@ -72,6 +72,11 @@ export interface KnobState {
     /** Last `approval/policy` payload, or null. */
     approval: ApprovalPolicy | null;
 }
+declare module '@nomix-ai/nomix-session-projection/types' {
+    interface SessionProjectionStateMap {
+        permissions: KnobState;
+    }
+}
 /**
  * One-event knob transition (the projection unit's `apply`). Uninterested
  * events return the same reference — the registry's change gate.

package/dist/kernel/permission-presets/lib/types/index.js

@@ -36,6 +36,15 @@ export function effectivePermissionPreset(events) {
     }
     return undefined;
 }
+const knobStateSchema = zod.object({
+    preset: zod.string().nullable(),
+    sandbox: zod.union([
+        zod.literal('read-only'),
+        zod.literal('workspace-write'),
+        zod.literal('danger-full-access'),
+    ]).nullable(),
+    approval: zod.union([zod.literal('ask'), zod.literal('never')]).nullable(),
+}).strict();
 /** State for the empty log: every knob at its composition default. */
 const EMPTY_KNOBS = { preset: null, sandbox: null, approval: null };
 /**
@@ -151,10 +160,10 @@ export class PermissionPresetService extends Service {
         ctx.inject(['sessionProjections'], (projectionCtx) => {
             projectionCtx.sessionProjections.register({
                 key: 'permissions',
-                schema: selectSchema,
+                stateSchema: knobStateSchema,
                 init: () => EMPTY_KNOBS,
                 apply: applyKnobEvent,
-                view: state => this.selectFor(state),
+                wire: { viewSchema: selectSchema, view: state => this.selectFor(state) },
                 stateVersion: 1,
             });
         });

package/dist/kernel/permission-presets/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-permission-presets",
   "description": "User-facing permission presets (ctx.permissionPresets) for the Nomix Harness: one product-level Permissions select bundling the sandbox-mode and approval-policy knobs, written through to their own session events",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/persona/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-persona",
   "description": "Composition-authored deployment persona section for the Nomix Harness",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/plan-mode/lib/index.js

@@ -80,6 +80,14 @@ function foldPlanMode(events, end = events.length) {
 	}
 	return active;
 }
+const planUnitStateSchema = z.object({
+	active: z.boolean(),
+	wanted: z.boolean().nullable(),
+	running: z.object({
+		commandId: z.string(),
+		wanted: z.boolean()
+	}).strict().nullable()
+}).strict();
 /** Wire payload schema of the `plan` projection. */
 const planProjectionSchema = z.object({
 	active: z.boolean(),
@@ -152,40 +160,66 @@ var PlanModeController = class extends Service {
 		ctx.inject(["sessionProjections"], (projectionCtx) => {
 			projectionCtx.sessionProjections.register({
 				key: "plan",
-				schema: planProjectionSchema,
+				stateSchema: planUnitStateSchema,
 				init: () => ({
 					active: false,
-					wanted: null
+					wanted: null,
+					running: null
 				}),
 				apply: (state, event) => {
 					if (event.type === "command/run" && event.data.name === "plan") {
 						if (event.data.args === void 0) return state;
 						const wanted = event.data.args.trim() !== "off";
-						return wanted === state.wanted ? state : {
-							active: state.active,
-							wanted
+						return {
+							...state,
+							running: {
+								commandId: event.data.commandId,
+								wanted
+							}
+						};
+					}
+					if (event.type === "command/done" && event.data.commandId === state.running?.commandId) {
+						const wanted = event.data.kind === "success" && state.running.wanted !== state.active ? state.running.wanted : null;
+						return {
+							...state,
+							wanted,
+							running: null
 						};
 					}
 					if (event.type === "plan/mode") return {
+						...state,
 						active: event.data.active,
 						wanted: null
 					};
 					return state;
 				},
-				view: (state) => ({
-					active: state.active,
-					pending: state.wanted !== null && state.wanted !== state.active
-				}),
-				stateVersion: 1
+				wire: {
+					viewSchema: planProjectionSchema,
+					view: (state) => {
+						const wanted = state.running?.wanted ?? state.wanted;
+						return {
+							active: state.active,
+							pending: wanted !== null && wanted !== state.active
+						};
+					}
+				},
+				stateVersion: 2
 			});
 		});
 		ctx.inject(["commands"], (commandCtx) => {
 			commandCtx.commands.register({
 				name: "plan",
 				description: "Enter or leave plan mode",
-				input: { hint: "[off|message]" },
-				handler: ({ agent, rawInput }) => {
+				input: {
+					hint: "[off|message]",
+					images: true
+				},
+				handler: ({ agent, rawInput, attachments }) => {
 					const message = rawInput.trim();
+					if (message === "off" && attachments.length > 0) return {
+						kind: "error",
+						text: "Image attachments cannot accompany /plan off."
+					};
 					if (message === "off") switch (this.set(agent, false)) {
 						case "committed": return {
 							kind: "success",
@@ -208,11 +242,11 @@ var PlanModeController = class extends Service {
 						};
 					}
 					const outcome = this.set(agent, true);
-					if (message !== "") agent.steer(createUserMessage({
-						content: [{
+					if (message !== "" || attachments.length > 0) agent.steer(createUserMessage({
+						content: [...attachments, ...message === "" ? [] : [{
 							type: "text",
 							text: message
-						}],
+						}]],
 						source: { kind: "user" }
 					}));
 					return {

package/dist/kernel/plan-mode/lib/types/index.d.ts

@@ -25,6 +25,7 @@
 import { Context, Service } from '../../../cordis/lib/index.js';
 import type { Agent } from '../../../agent/lib/index.js';
 import type { SessionEvent } from '../../../session/lib/index.js';
+import type { CommandId } from '../../../commands/lib/index.js';
 export type * from './types.ts';
 declare module '@nomix-ai/nomix-session/types' {
     interface SessionEventMap {
@@ -70,6 +71,27 @@ export declare function resolveConfig(config: PlanModeConfig): PlanModeConfig;
  * @returns Whether plan mode is active.
  */
 export declare function foldPlanMode(events: readonly SessionEvent[], end?: number): boolean;
+/**
+ * Projection unit state: the logged mode, the latest successful `/plan`
+ * selection not yet resolved by a `plan/mode` commit, and an execution whose
+ * paired `command/done` has not settled. Plain JSON (persisted-cache
+ * precondition).
+ */
+interface PlanUnitState {
+    active: boolean;
+    /** The selection's target mode; null when no selection is outstanding. */
+    wanted: boolean | null;
+    /** The latest plan command awaiting its paired settlement. */
+    running: {
+        commandId: CommandId;
+        wanted: boolean;
+    } | null;
+}
+declare module '@nomix-ai/nomix-session-projection/types' {
+    interface SessionProjectionStateMap {
+        plan: PlanUnitState;
+    }
+}
 /**
  * `ctx.planMode`: owns logged plan state, applies and narrates selected state at step start,
  * the `plan:policy` section, the `/plan` command, and the stable exit tool.

package/dist/kernel/plan-mode/lib/types/index.js

@@ -92,6 +92,14 @@ export function foldPlanMode(events, end = events.length) {
     }
     return active;
 }
+const planUnitStateSchema = zod.object({
+    active: zod.boolean(),
+    wanted: zod.boolean().nullable(),
+    running: zod.object({
+        commandId: zod.string(),
+        wanted: zod.boolean(),
+    }).strict().nullable(),
+}).strict();
 /** Wire payload schema of the `plan` projection. */
 const planProjectionSchema = zod.object({
     active: zod.boolean(),
@@ -172,37 +180,45 @@ export class PlanModeController extends Service {
                 return (pending?.active ?? foldPlanMode(context.agent.session.events)) ? this.section : '';
             },
         });
-        // The plan projection unit (session-projection RFC): a pure double-event
-        // fold serving clients the whole {active, pending} value. `command/run`
-        // records the user's logged /plan selection (the handler calls `set()`
-        // before any failing path, so a failed handler cannot leave the recorded
-        // command without its plan selection); `plan/mode` records that selection
-        // and clears it. Pending is thereby a pure
+        // The plan projection unit (session-projection RFC): a pure event fold
+        // serving clients the whole {active, pending} value. `command/run`
+        // records the user's logged /plan selection, its paired `command/done`
+        // keeps only successful selections, and `plan/mode` records that
+        // selection and clears it. Pending is thereby a pure
         // replay quantity: host restarts, other tabs, and cold reads all recover
         // it from the log alone. The unit child activates only when a projection
         // registry is composed (headless assemblies stay unaffected).
         ctx.inject(['sessionProjections'], (projectionCtx) => {
             projectionCtx.sessionProjections.register({
                 key: 'plan',
-                schema: planProjectionSchema,
-                init: () => ({ active: false, wanted: null }),
+                stateSchema: planUnitStateSchema,
+                init: () => ({ active: false, wanted: null, running: null }),
                 apply: (state, event) => {
                     if (event.type === 'command/run' && event.data.name === 'plan') {
                         if (event.data.args === undefined)
                             return state;
                         const wanted = event.data.args.trim() !== 'off';
-                        return wanted === state.wanted ? state : { active: state.active, wanted };
+                        return { ...state, running: { commandId: event.data.commandId, wanted } };
+                    }
+                    if (event.type === 'command/done' && event.data.commandId === state.running?.commandId) {
+                        const wanted = event.data.kind === 'success' && state.running.wanted !== state.active
+                            ? state.running.wanted
+                            : null;
+                        return { ...state, wanted, running: null };
                     }
                     if (event.type === 'plan/mode') {
-                        return { active: event.data.active, wanted: null };
+                        return { ...state, active: event.data.active, wanted: null };
                     }
                     return state;
                 },
-                view: state => ({
-                    active: state.active,
-                    pending: state.wanted !== null && state.wanted !== state.active,
-                }),
-                stateVersion: 1,
+                wire: {
+                    viewSchema: planProjectionSchema,
+                    view: (state) => {
+                        const wanted = state.running?.wanted ?? state.wanted;
+                        return { active: state.active, pending: wanted !== null && wanted !== state.active };
+                    },
+                },
+                stateVersion: 2,
             });
         });
         // The command child activates only when a command registry is composed.
@@ -210,9 +226,12 @@ export class PlanModeController extends Service {
             commandCtx.commands.register({
                 name: 'plan',
                 description: 'Enter or leave plan mode',
-                input: { hint: '[off|message]' },
-                handler: ({ agent, rawInput }) => {
+                input: { hint: '[off|message]', images: true },
+                handler: ({ agent, rawInput, attachments }) => {
                     const message = rawInput.trim();
+                    if (message === 'off' && attachments.length > 0) {
+                        return { kind: 'error', text: 'Image attachments cannot accompany /plan off.' };
+                    }
                     if (message === 'off') {
                         switch (this.set(agent, false)) {
                             case 'committed':
@@ -231,8 +250,15 @@ export class PlanModeController extends Service {
                         }
                     }
                     const outcome = this.set(agent, true);
-                    if (message !== '')
-                        agent.steer(createUserMessage({ content: [{ type: 'text', text: message }], source: { kind: 'user' } }));
+                    if (message !== '' || attachments.length > 0) {
+                        agent.steer(createUserMessage({
+                            content: [
+                                ...attachments,
+                                ...(message === '' ? [] : [{ type: 'text', text: message }]),
+                            ],
+                            source: { kind: 'user' },
+                        }));
+                    }
                     return {
                         kind: 'success',
                         text: outcome === 'committed'

package/dist/kernel/plan-mode/lib/types/types.d.ts

@@ -10,9 +10,10 @@
 /**
  * The plan projection's wire value. `active` is the logged state in force
  * (the last `plan/mode`, inactive before the first); `pending` is true while
- * a logged `/plan` selection (`command/run`) targets a state other than
- * `active` and no later `plan/mode` event has recorded that state. Capability
- * absence (plan-mode not composed) is the key's absence, never a value.
+ * a logged `/plan` selection targets a state other than `active`, has not
+ * failed through its paired `command/done`, and no later `plan/mode` event has
+ * recorded that state. Capability absence (plan-mode not composed) is the
+ * key's absence, never a value.
  */
 export interface PlanProjection {
     active: boolean;
@@ -20,7 +21,7 @@ export interface PlanProjection {
 }
 declare module '@nomix-ai/nomix-session-projection/types' {
     interface SessionProjectionMap {
-        /** Plan collaboration state folded from `command/run` (name `plan`) and `plan/mode` events. */
+        /** Plan collaboration state folded from the plan command lifecycle and `plan/mode` events. */
         plan: PlanProjection;
     }
 }

package/dist/kernel/plan-mode/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-plan-mode",
   "description": "Logged per-agent plan mode with deployment guidance, a direct slash command, and a user-reviewed exit",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/pwsh-local/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-pwsh-local",
   "description": "Local PowerShell implementation of the Nomix Harness bash executor seam",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/pwsh-sandbox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-pwsh-sandbox",
   "description": "Sandbox-consuming implementation of the Nomix Harness PowerShell executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/repeat-tool-reminder/lib/index.js

@@ -119,7 +119,7 @@ new RegExp(String.raw`\b(?:input|prompt|request|messages?)\b.{0,40}` + String.ra
 *
 * @module @nomix-ai/nomix-llm/retry-policy
 */
-const DEFAULT_MAX_RETRIES = 2;
+const DEFAULT_MAX_RETRIES = 5;
 const DEFAULT_INITIAL_DELAY_MS = 500;
 const DEFAULT_MAX_DELAY_MS = 1e4;
 const DEFAULT_JITTER_RATIO = .1;

package/dist/kernel/repeat-tool-reminder/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-repeat-tool-reminder",
   "description": "Repeat-tool-call guard plugin: advisory reminders when an agent loops on identical tool calls",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/sandbox/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-sandbox",
   "description": "Abstract process-sandbox seam (ctx.sandbox) for the Nomix Harness: same-world confinement vocabulary and the SandboxProvider contract",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/sandbox-local/lib/index.js

@@ -26,6 +26,7 @@ function bwrapProfileArgs(policy) {
 		"/",
 		"--dev",
 		"/dev",
+		"--unshare-pid",
 		"--proc",
 		"/proc",
 		"--die-with-parent"
@@ -98,14 +99,10 @@ function seatbeltProfileArgs(policy) {
 /** Probe whether `bwrap` can create the profile; the provider caches the bounded result. */
 function defaultProbeBwrap(timeoutMs) {
 	return spawnSync("bwrap", [
-		"--ro-bind",
-		"/",
-		"/",
-		"--dev",
-		"/dev",
-		"--proc",
-		"/proc",
-		"--die-with-parent",
+		...bwrapProfileArgs({
+			mode: "read-only",
+			workspaceRoot: "/"
+		}),
 		"--",
 		"true"
 	], {
@@ -520,18 +517,16 @@ var LocalSandboxProvider = class extends SandboxProvider {
 	}
 	/**
 	* The windows-acl runner argv prefix: the built lib/runner.js entry when
-	* present beside this package (production), else the sibling package source
-	* through tsx (development). Relative URLs work in both workspace output and
-	* the flattened npm kernel without requiring an internal package install.
+	* present (production), else the package source through tsx (development).
 	* The prefix stays `[node, runner, ...]` — a future native-exe runner keeps
 	* the same argv contract and only swaps these entries.
 	*/
 	windowsAclRunnerInvocation() {
 		const override = this.internals.windowsAclRunnerArgs;
 		if (override !== void 0) return override;
-		const builtEntry = this.internals.windowsAclRunnerEntry ?? fileURLToPath(new URL("../../sandbox-windows-acl/lib/runner.js", import.meta.url));
+		const builtEntry = this.internals.windowsAclRunnerEntry ?? fileURLToPath(import.meta.resolve("../../sandbox-windows-acl/lib/runner.js"));
 		if (existsSync(builtEntry)) return [process.execPath, builtEntry];
-		const sourceEntry = fileURLToPath(new URL("../../sandbox-windows-acl/src/runner.ts", import.meta.url));
+		const sourceEntry = fileURLToPath(import.meta.resolve("../../sandbox-windows-acl/src/runner.ts"));
 		return [
 			process.execPath,
 			"--import",