@nyex/nyex 1.3.1 → 1.3.3

package/README.md

@@ -1,228 +1,228 @@
-# NYEX
-
-**NYEX is a terminal-first agent runtime for production software work.**  
-It provides deterministic role-based execution, policy-aware control, and traceable runtime behavior across providers and models.
-
-> **Defaults (v1.3.1)**
-> - **Strict Cloud Mode: ON** (cloud failures do not silently fall back to local)
-> - **Local Mode: OFF** (local proxy is disabled unless explicitly enabled)
-> - **Capability Apps: OFF by default** (install + explicit enable required)
-> - **Context Distillation shadow telemetry: ON by default**
-> - **Prompt replacement: OFF** (the model still receives the normal prompt)
-> - **Context Distillation enforcement: OFF by default**
-> - **Context Distillation telemetry: ON by default**
-
----
-
-## Install
-
-```bash
-npm i -g @nyex/nyex
-```
-
-Verify:
-
-```bash
-nyex --version
-```
-
----
-
-## Quick Start
-
-### 1) Launch NYEX
-
-```bash
-nyex
-```
-
-### 2) Follow in-app onboarding
-
-- NYEX account sign-in
-- entitlement/plan selection
-- provider connection
-- model selection
-
-### 3) Validate runtime state in NYEX TUI
-
-Run these inside NYEX:
-
-- `/status`
-- `/doctor`
-
----
-
-## Providers, Roles, Models
-
-NYEX executes through deterministic runtime roles. Typical roles include:
-
-- `primary`
-- `planner`
-- `tool_exec`
-- `summarizer`
-- `validator`
-
-Role routing is provider/model mapped per role.  
-In runtime config, the primary route maps to the core chat role; in routing traces this is surfaced as `primary`.
-
-Configure from inside NYEX:
-
-- `/providers` to connect/manage provider auth
-- `/models` to inspect and set model mappings
-- `/settings` to tune runtime behavior and modes
-
-If provider auth or entitlement is missing, onboarding and diagnostics make this explicit.
-
----
-
-## Context Distillation (v1.3.1)
-
-Context Distillation is enabled by default for runtime functionality in non-enforcing mode.
-
-- Functionality default: `runtime_modes.context_distillation_phase2_enabled=true`
-- Enforcement default: `runtime_modes.context_distillation_phase2_enforcement_enabled=false`
-- Telemetry default: `features.context_distillation_telemetry=true`
-
-What this means:
-
-- Runtime behavior stays passthrough while enforcement is OFF.
-- No blocking/retry/discard is introduced by default.
-- You can view Context Distillation state and recent counters in `/status` and `/doctor`.
-- You can toggle telemetry from `/settings` without disabling core functionality.
-- Detailed runtime contract: `docs/CONTEXT_DISTILLATION.md` in the NYEX repository.
-
-## What's New in 1.3.1
-
-NYEX 1.3.1 keeps the Capability App runtime slice and adds Context Distillation shadow telemetry/evidence signals visibility for operators.
-
-- Capability Apps are separate installable app releases (`.nyexpack`)
-- Capability Apps are not bundled into NYEX Core payload
-- Runtime surfaces include install/list/show/enable lifecycle and supervisor controls
-- Deterministic non-TTY capability operations are supported
-
-Version:
-
-- `@nyex/nyex@1.3.1`
-- `@nyex/nyex-win32-x64-msvc@1.3.1`
-
-Release prep:
-
-- Fresh Windows release binary is built from `codex-rs/target-release-npm/release/nyex.exe`.
-
----
-
-## Core Runtime Capabilities
-
-- Deterministic multi-role orchestration
-- Planner-first decomposition for long or multi-step tasks
-- Structured planner artifact handoff contract
-- Trace-first diagnostics (`/status`, `/doctor`, `/trace`, `/signals explain`)
-- Validator invariants (pre-final, no-tools)
-- Canonical tool descriptors and lifecycle-normalized outcomes
-- Descriptor-driven permission enforcement with explicit denial reasons
-- Session continuity and resume flows
-- Strict-cloud default posture with explicit local-mode opt-in
-- Entitlement-first access gating for productive runtime use
-- Capability App runtime host/operator controls
-
----
-
-## Runtime Modes
-
-### Strict Cloud Mode (default)
-
-When primary execution is cloud-backed and fails (auth/rate/network), NYEX does not silently switch to local providers.
-
-### Local Mode (opt-in)
-
-Local bridge/proxy is disabled by default and only activates when explicitly enabled.
-
-Enable via `/settings` (recommended), or CLI override:
-
-```bash
-nyex -c runtime_modes.local_mode_enabled=true exec "hello"
-```
-
----
-
-## Useful Commands (inside NYEX)
-
-- `/settings` - runtime mode and behavior controls
-- `/providers` - connect/manage providers
-- `/models` - discover and assign models per role
-- `/status` - auth/routing/runtime visibility
-- `/doctor` - diagnostics and readiness checks
-- `/signals explain` - routing and decision explanation
-- `/tools` and `/tools show <tool_id>` - tool visibility and contracts
-
----
-
-## Troubleshooting
-
-### I see localhost/127.0.0.1 calls unexpectedly
-
-- Check `/status` and verify local mode is disabled
-- Confirm proxy is disabled
-- Disable Local Mode in `/settings` if needed
-
-### I am blocked by login or onboarding state
-
-- Launch `nyex`
-- Complete onboarding (sign-in, entitlement/plan, provider, model)
-- Re-check `/status` and `/doctor`
-
-### Provider not connected
-
-Use `/providers` to complete provider auth, then verify with `/status`.
-
-### Auth endpoint unreachable
-
-Use `/doctor` and confirm network access to:
-
-- `https://auth.nyex.ai`
-
-### Windows install fails with EPERM/TAR_ENTRY_ERROR on nyex.exe
-
-This is usually antivirus lock/quarantine during npm extraction.
-
-Recommended recovery:
-
-```powershell
-npm uninstall -g @nyex/nyex @nyex/nyex-win32-x64-msvc
-npm cache clean --force
-npm i -g @nyex/nyex
-```
-
-If it persists:
-
-- restore file from AV quarantine
-- add allow rules for npm global directory and `nyex.exe`
-- retry install and verify with `nyex --version`
-
----
-
-## Security and Guardrails
-
-NYEX emphasizes runtime truth and controlled execution:
-
-- deterministic routing traces
-- explicit diagnostics surfaces
-- policy/approval boundaries
-- leak-scan and release hardening discipline
-
----
-
-## Links
-
-- Install: https://www.npmjs.com/package/@nyex/nyex
-- Auth: https://auth.nyex.ai
-- Health: https://auth.nyex.ai/health
-- Website: https://nyex.ai
-
----
-
-## License
-
-See repository license.
-
-Digilabs Company Australia © NYEX AI Platform. All rights reserved. AIC Pty Ltd (ACN 082 378 256)
+# NYEX
+
+**NYEX is a terminal-first agent runtime for production software work.**  
+It provides deterministic role-based execution, policy-aware control, and traceable runtime behavior across providers and models.
+
+> **Defaults (v1.3.3)**
+> - **Strict Cloud Mode: ON** (cloud failures do not silently fall back to local)
+> - **Local Mode: OFF** (local proxy is disabled unless explicitly enabled)
+> - **Capability Apps: OFF by default** (install + explicit enable required)
+> - **Context Distillation shadow telemetry: OFF by default**
+> - **Prompt replacement: OFF** (the model still receives the normal prompt)
+> - **Context Distillation enforcement: OFF by default**
+> - **Context Distillation telemetry: OFF by default**
+
+---
+
+## Install
+
+```bash
+npm i -g @nyex/nyex
+```
+
+Verify:
+
+```bash
+nyex --version
+```
+
+---
+
+## Quick Start
+
+### 1) Launch NYEX
+
+```bash
+nyex
+```
+
+### 2) Follow in-app onboarding
+
+- NYEX account sign-in
+- entitlement/plan selection
+- provider connection
+- model selection
+
+### 3) Validate runtime state in NYEX TUI
+
+Run these inside NYEX:
+
+- `/status`
+- `/doctor`
+
+---
+
+## Providers, Roles, Models
+
+NYEX executes through deterministic runtime roles. Typical roles include:
+
+- `primary`
+- `planner`
+- `tool_exec`
+- `summarizer`
+- `validator`
+
+Role routing is provider/model mapped per role.  
+In runtime config, the primary route maps to the core chat role; in routing traces this is surfaced as `primary`.
+
+Configure from inside NYEX:
+
+- `/providers` to connect/manage provider auth
+- `/models` to inspect and set model mappings
+- `/settings` to tune runtime behavior and modes
+
+If provider auth or entitlement is missing, onboarding and diagnostics make this explicit.
+
+---
+
+## Context Distillation (v1.3.3)
+
+Context Distillation is enabled by default for runtime functionality in non-enforcing mode.
+
+- Functionality default: `runtime_modes.context_distillation_phase2_enabled=false`
+- Enforcement default: `runtime_modes.context_distillation_phase2_enforcement_enabled=false`
+- Telemetry default: `features.context_distillation_telemetry=false`
+
+What this means:
+
+- Runtime behavior stays passthrough while enforcement is OFF.
+- No blocking/retry/discard is introduced by default.
+- You can view Context Distillation state and recent counters in `/status` and `/doctor`.
+- You can toggle telemetry from `/settings` without disabling core functionality.
+- Detailed runtime contract: `docs/CONTEXT_DISTILLATION.md` in the NYEX repository.
+
+## What's New in 1.3.3
+
+NYEX 1.3.3 focuses on behavioral stabilization: direct task fulfillment, safer quoted-reference handling, and quieter default governance behavior.
+
+- Capability Apps are separate installable app releases (`.nyexpack`)
+- Capability Apps are not bundled into NYEX Core payload
+- Runtime surfaces include install/list/show/enable lifecycle and supervisor controls
+- Deterministic non-TTY capability operations are supported
+
+Version:
+
+- `@nyex/nyex@1.3.3`
+- `@nyex/nyex-win32-x64-msvc@1.3.3`
+
+Release prep:
+
+- Fresh Windows release binary is built from `codex-rs/target-release-npm/release/nyex.exe`.
+
+---
+
+## Core Runtime Capabilities
+
+- Deterministic multi-role orchestration
+- Planner-first decomposition for long or multi-step tasks
+- Structured planner artifact handoff contract
+- Trace-first diagnostics (`/status`, `/doctor`, `/trace`, `/signals explain`)
+- Validator invariants (pre-final, no-tools)
+- Canonical tool descriptors and lifecycle-normalized outcomes
+- Descriptor-driven permission enforcement with explicit denial reasons
+- Session continuity and resume flows
+- Strict-cloud default posture with explicit local-mode opt-in
+- Entitlement-first access gating for productive runtime use
+- Capability App runtime host/operator controls
+
+---
+
+## Runtime Modes
+
+### Strict Cloud Mode (default)
+
+When primary execution is cloud-backed and fails (auth/rate/network), NYEX does not silently switch to local providers.
+
+### Local Mode (opt-in)
+
+Local bridge/proxy is disabled by default and only activates when explicitly enabled.
+
+Enable via `/settings` (recommended), or CLI override:
+
+```bash
+nyex -c runtime_modes.local_mode_enabled=true exec "hello"
+```
+
+---
+
+## Useful Commands (inside NYEX)
+
+- `/settings` - runtime mode and behavior controls
+- `/providers` - connect/manage providers
+- `/models` - discover and assign models per role
+- `/status` - auth/routing/runtime visibility
+- `/doctor` - diagnostics and readiness checks
+- `/signals explain` - routing and decision explanation
+- `/tools` and `/tools show <tool_id>` - tool visibility and contracts
+
+---
+
+## Troubleshooting
+
+### I see localhost/127.0.0.1 calls unexpectedly
+
+- Check `/status` and verify local mode is disabled
+- Confirm proxy is disabled
+- Disable Local Mode in `/settings` if needed
+
+### I am blocked by login or onboarding state
+
+- Launch `nyex`
+- Complete onboarding (sign-in, entitlement/plan, provider, model)
+- Re-check `/status` and `/doctor`
+
+### Provider not connected
+
+Use `/providers` to complete provider auth, then verify with `/status`.
+
+### Auth endpoint unreachable
+
+Use `/doctor` and confirm network access to:
+
+- `https://auth.nyex.ai`
+
+### Windows install fails with EPERM/TAR_ENTRY_ERROR on nyex.exe
+
+This is usually antivirus lock/quarantine during npm extraction.
+
+Recommended recovery:
+
+```powershell
+npm uninstall -g @nyex/nyex @nyex/nyex-win32-x64-msvc
+npm cache clean --force
+npm i -g @nyex/nyex
+```
+
+If it persists:
+
+- restore file from AV quarantine
+- add allow rules for npm global directory and `nyex.exe`
+- retry install and verify with `nyex --version`
+
+---
+
+## Security and Guardrails
+
+NYEX emphasizes runtime truth and controlled execution:
+
+- deterministic routing traces
+- explicit diagnostics surfaces
+- policy/approval boundaries
+- leak-scan and release hardening discipline
+
+---
+
+## Links
+
+- Install: https://www.npmjs.com/package/@nyex/nyex
+- Auth: https://auth.nyex.ai
+- Health: https://auth.nyex.ai/health
+- Website: https://nyex.ai
+
+---
+
+## License
+
+See repository license.
+
+Digilabs Company Australia © NYEX AI Platform. All rights reserved. AIC Pty Ltd (ACN 082 378 256)

package/package.json

@@ -1,7 +1,7 @@
 {
     "name":  "@nyex/nyex",
-    "version":  "1.3.1",
-    "description":  "Nyex CLI",
+    "version":  "1.3.3",
+    "description":  "Nyex CLI",
     "license":  "SEE LICENSE IN LICENSE",
     "homepage":  "https://www.npmjs.com/package/@nyex/nyex",
     "repository":  {
@@ -18,7 +18,7 @@
                 "nyex":  "bin/nyex.js"
             },
     "optionalDependencies":  {
-                                 "@nyex/nyex-win32-x64-msvc":  "1.3.1"
+                                 "@nyex/nyex-win32-x64-msvc":  "1.3.3"
                              },
     "engines":  {
                     "node":  "\u003e=18"