@nomix-ai/nomix-harness 0.2.0 → 0.2.2

package/dist/bundles/web-app/cordis.patch.yml

@@ -46,35 +46,35 @@
 # window.__NOMIX_BOOT__; the modules row is simultaneously a host row.
 - insert:
     - id: code-runtime
-      name: 'cordis:nomix/code-runtime-worker-thread'
+      name: '@nomix-ai/nomix-code-runtime-worker-thread'
 
     - id: storage
-      name: 'cordis:nomix/storage'
+      name: '@nomix-ai/nomix-storage'
 
     - id: storage-json
-      name: 'cordis:nomix/storage-json'
+      name: '@nomix-ai/nomix-storage-json'
       config:
         root: !!js nomixHomePath('storages')
 
     - id: storage-domain
-      name: 'cordis:nomix/storage-domain'
+      name: '@nomix-ai/nomix-storage-domain'
       config:
         backend: json
 
     - id: message-feedback
-      name: 'cordis:nomix/message-feedback'
+      name: '@nomix-ai/nomix-message-feedback'
       config:
         maxNoteBytes: 8192
 
     # Browser Session export: `/export` command plus the shared download dialog.
     - id: session-log-download
-      name: 'cordis:nomix/session-log-export'
+      name: '@nomix-ai/nomix-session-log-export'
 
     - id: workspace
-      name: 'cordis:nomix/workspace'
+      name: '@nomix-ai/nomix-workspace'
 
     - id: session-projection-cache
-      name: 'cordis:nomix/session-projection-cache'
+      name: '@nomix-ai/nomix-session-projection-cache'
       config:
         writeEveryEvents: 200
         writeIntervalMs: 5000
@@ -82,30 +82,30 @@
     # Whole-log turn/step counts for the chat stats strip (the sessionStats
     # projection key); the projection registry itself is a base-layer row.
     - id: session-stats
-      name: 'cordis:nomix/session-stats'
+      name: '@nomix-ai/nomix-session-stats'
 
     # Resolve bind host, SSH launch, and display once at boot, then mount the
     # matching dual-face directory picker. Mount -native or -browse directly in
     # an overlay to pin the interaction.
     - id: directory-picker
-      name: 'cordis:nomix/host-directory-picker-auto'
+      name: '@nomix-ai/nomix-host-directory-picker-auto'
 
     # Read-only projection of current Loader entries for trusted client RPCs.
     - id: plugin-inventory
-      name: 'cordis:nomix/host-plugin-inventory'
+      name: '@nomix-ai/nomix-host-plugin-inventory'
 
     # The API gateway: the transport-agnostic dispatch face every client shape
     # shares. The base layer's agent-default-model service owns the default model.
     - id: api-gateway
-      name: 'cordis:nomix/host-apiproxy'
+      name: '@nomix-ai/nomix-host-apiproxy'
 
     - id: cordis-host-runner
-      name: 'cordis:nomix/cordis-host-runner'
+      name: '@nomix-ai/nomix-cordis-host-runner'
 
     # Ordinary provider for the parsed Web flags. Its plugin-level injection
     # waits for cmdlineArgs; no launcher metadata or special row kind is needed.
     - id: web-startup
-      name: 'cordis:nomix/web-app/startup'
+      name: '@nomix-ai/nomix-web-app/startup'
 
     # ── layer 2: transport/service ──────────────────────────────────────────────
 
@@ -113,7 +113,7 @@
     # webStartup provider, with these deployment fallbacks. The dist is served by
     # the web-runtime row below through the fallback seat.
     - id: webserver
-      name: 'cordis:nomix/host-webserver'
+      name: '@nomix-ai/nomix-host-webserver'
       inject: [webStartup]
       config:
         host: !!js ctx.webStartup.host ?? '127.0.0.1'
@@ -128,7 +128,7 @@
     # complete agent-preset persona suppresses the prompt section for that
     # agent while retaining the host-owned shell variable.
     - id: web-runtime
-      name: 'cordis:nomix/web-app'
+      name: '@nomix-ai/nomix-web-app'
       inject: [webStartup]
       config:
         printUrl: true
@@ -140,7 +140,7 @@
     # is a row rather than a child of web-runtime because its node half is a
     # client-side package, which a host-side bundle cannot import.
     - id: client-hmr
-      name: 'cordis:nomix/client-hmr'
+      name: '@nomix-ai/nomix-client-hmr'
 
     # ── browser plugin roster (nomix.client rows; node halves are layer-2 hosts) ──
 
@@ -149,12 +149,12 @@
     # the shell kernel constructs before cordis exists (adopted as a plugin
     # entry by the kernel, never fetched).
     - id: modules
-      name: 'cordis:nomix/client-modules'
+      name: '@nomix-ai/nomix-client-modules'
 
     # Owns both ends of the web transport: node half binds the gateway to the
     # webserver under /api; browser half is the fetch/SSE client.
     - id: connection
-      name: 'cordis:nomix/client-connection'
+      name: '@nomix-ai/nomix-client-connection'
       inject: [webRuntime]
       config:
         # LAN literals derived from the active bind plus --trusted-host extras.
@@ -163,115 +163,115 @@
         trustedHosts: !!js ctx.webRuntime.trustedHosts
 
     - id: api-remotes
-      name: 'cordis:nomix/api-remotes'
+      name: '@nomix-ai/nomix-api-remotes'
 
     - id: client-runtime
-      name: 'cordis:nomix/client-runtime'
+      name: '@nomix-ai/nomix-client-runtime'
 
     - id: cordis-client-runner
-      name: 'cordis:nomix/cordis-client-runner'
+      name: '@nomix-ai/nomix-cordis-client-runner'
 
     - id: ui-theme
-      name: 'cordis:nomix/client-ui-theme'
+      name: '@nomix-ai/nomix-client-ui-theme'
 
     - id: locale
-      name: 'cordis:nomix/client-locale'
+      name: '@nomix-ai/nomix-client-locale'
 
     - id: ui-layout
-      name: 'cordis:nomix/client-ui-layout'
+      name: '@nomix-ai/nomix-client-ui-layout'
 
     - id: ui-sidebar
-      name: 'cordis:nomix/client-ui-sidebar'
+      name: '@nomix-ai/nomix-client-ui-sidebar'
 
     - id: ui-settings
-      name: 'cordis:nomix/client-ui-settings'
+      name: '@nomix-ai/nomix-client-ui-settings'
 
     - id: ui-settings-general
-      name: 'cordis:nomix/client-ui-settings-general'
+      name: '@nomix-ai/nomix-client-ui-settings-general'
 
     - id: ui-settings-models
-      name: 'cordis:nomix/client-ui-settings-models'
+      name: '@nomix-ai/nomix-client-ui-settings-models'
 
     - id: ui-settings-plugin-inventory
-      name: 'cordis:nomix/client-ui-settings-plugin-inventory'
+      name: '@nomix-ai/nomix-client-ui-settings-plugin-inventory'
 
     - id: ui-conversation
-      name: 'cordis:nomix/client-ui-conversation'
+      name: '@nomix-ai/nomix-client-ui-conversation'
 
     # Tool call tree, generic fallback, and keyed business Tool views.
     - id: ui-tool
-      name: 'cordis:nomix/client-ui-tool'
+      name: '@nomix-ai/nomix-client-ui-tool'
 
     - id: ui-cordis
-      name: 'cordis:nomix/client-ui-cordis'
+      name: '@nomix-ai/nomix-client-ui-cordis'
 
     # Durable workflow lifecycle as an independent Chat node after the
     # existing generic workflow tool row.
     - id: ui-workflow-run
-      name: 'cordis:nomix/client-ui-workflow-run'
+      name: '@nomix-ai/nomix-client-ui-workflow-run'
 
     # Turn tail: the produced-files row under each closing assistant message.
     # Remove this entry to turn the surface off; the tail hole renders empty.
     - id: ui-deliverables
-      name: 'cordis:nomix/client-ui-deliverables'
+      name: '@nomix-ai/nomix-client-ui-deliverables'
 
 
     - id: ui-workspace
-      name: 'cordis:nomix/client-ui-workspace'
+      name: '@nomix-ai/nomix-client-ui-workspace'
 
     # Input triggers: the '/' | '@' pipeline (ui-input-trigger), the command surface over
     # it (ui-commands), and the two reference sources (ui-skill / ui-subagent).
     - id: ui-input-trigger
-      name: 'cordis:nomix/client-ui-input-trigger'
+      name: '@nomix-ai/nomix-client-ui-input-trigger'
 
     - id: ui-commands
-      name: 'cordis:nomix/client-ui-commands'
+      name: '@nomix-ai/nomix-client-ui-commands'
 
     - id: ui-skill
-      name: 'cordis:nomix/client-ui-skill'
+      name: '@nomix-ai/nomix-client-ui-skill'
 
     - id: ui-subagent
-      name: 'cordis:nomix/client-ui-subagent'
+      name: '@nomix-ai/nomix-client-ui-subagent'
 
     # Background jobs: the session-header list over the jobsBySession mirror.
     - id: ui-jobs
-      name: 'cordis:nomix/client-ui-jobs'
+      name: '@nomix-ai/nomix-client-ui-jobs'
 
     # Goal surface: GoalBar in the input dock over the goal session projection.
     - id: ui-goal
-      name: 'cordis:nomix/client-ui-goal'
+      name: '@nomix-ai/nomix-client-ui-goal'
 
     # Per-message feedback: Like/Dislike plus an optional note in the
     # assistant-message action strip, over the messageFeedback Remote.
     - id: ui-message-feedback
-      name: 'cordis:nomix/client-ui-message-feedback'
+      name: '@nomix-ai/nomix-client-ui-message-feedback'
 
     # Model selection: the /model popupSelect + composer seat over session.models.
     - id: ui-model-selection
-      name: 'cordis:nomix/client-ui-model-selection'
+      name: '@nomix-ai/nomix-client-ui-model-selection'
 
     - id: ui-permission
-      name: 'cordis:nomix/client-ui-permission-presets'
+      name: '@nomix-ai/nomix-client-ui-permission-presets'
 
     # The agent-preset row in General settings: the default preset for
     # sessions created later. Absent a roster it renders nothing.
     - id: ui-agent-preset
-      name: 'cordis:nomix/client-ui-agent-preset'
+      name: '@nomix-ai/nomix-client-ui-agent-preset'
 
     # Plugin configuration: the host-plane sections a user owns, as expandable
     # cards. A namespace this deployment does not expose renders nothing.
     - id: ui-settings-plugins
-      name: 'cordis:nomix/client-ui-settings-plugins'
+      name: '@nomix-ai/nomix-client-ui-settings-plugins'
 
     # Plan control: the composer plan seat over the plan projection + /plan channel.
     - id: ui-plan
-      name: 'cordis:nomix/client-ui-plan'
+      name: '@nomix-ai/nomix-client-ui-plan'
 
     - id: ui-user-questions
-      name: 'cordis:nomix/client-ui-user-questions'
+      name: '@nomix-ai/nomix-client-ui-user-questions'
 
     - id: ui-trajectory
-      name: 'cordis:nomix/client-ui-trajectory'
+      name: '@nomix-ai/nomix-client-ui-trajectory'
 
 # ── the agent plane moves behind agent presets ─────────────────────────────
 #
@@ -419,6 +419,6 @@
 # never reaches that patch still finds a person's presets.
 - insert:
     - id: agent-presets
-      name: 'cordis:nomix/agent-presets'
+      name: '@nomix-ai/nomix-agent-presets'
       config:
         default: standard

package/dist/cli/plugins.js

@@ -3,7 +3,7 @@ import { definePlugin } from "./public-plugin.js";
 /** Side-effect-free catalog of plugins compiled into the Nomix npm package. */
 /** Create a descriptor for any built-in plugin id listed in the packaged manifest. */
 function builtin(id) {
-	return definePlugin(id, `cordis:nomix/${id}`);
+	return definePlugin(id, `@nomix-ai/nomix-${id}`);
 }
 /** Frequently used built-ins with stable, typed discovery paths. */
 const builtins = {

package/dist/kernel/acp/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-acp",
   "description": "Automation-only Agent Client Protocol server for driving Nomix Harness agents over JSON-RPC stdio",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent",
   "description": "Agent interface, registry, initiator scope, and event vocabulary for the Nomix Harness",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-default-model/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-default-model",
   "description": "Default model selection shared by Agent entry points",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-instructions/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-instructions",
   "description": "Workspace context loader for AGENTS.md/CLAUDE.md instruction files",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-loop/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-loop",
   "description": "The concrete agent loop plugin for the Nomix Harness",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-presets/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-presets",
   "description": "Per-session agent composition from preset cordis.yml files for the Nomix Harness",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/agent-tool-presentation/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-agent-tool-presentation",
   "description": "Agent-plane presentation selector: composes one agent's tools as Code Mode, native, or both",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/anonymous-user-id/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-anonymous-user-id",
   "description": "Shared anonymous user identity for Nomix Harness telemetry and feedback correlation",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/api-gateway/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-api-gateway",
   "description": "Typert Remote Host dispatcher and Client API endpoint",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/api-remotes/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-api-remotes",
   "description": "Remote BFF assembly and Host Agent/Session lookup policy",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/app-boot/lib/index.js

@@ -2,7 +2,7 @@ import { createRequire } from "node:module";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync, writeFileSync } from "node:fs";
 import { parseEnv } from "node:util";
-import { basename, dirname, extname, isAbsolute, join, resolve } from "node:path";
+import { basename, dirname, extname, isAbsolute, join, relative, resolve, sep } from "node:path";
 import * as yaml from "js-yaml";
 import { Context, Service } from "@nomix-ai/cordis";
 import Loader, { EntryGroup, EntryTree, isJsExpr } from "@nomix-ai/cordis-plugin-loader";
@@ -317,9 +317,9 @@ var Include = class extends EntryTree {
 * first from the nomix installation (the launcher's own package), then from the
 * profile directory. The Loader's `baseUrl` is the profile directory, whose
 * `node_modules` pnpm manages for out-of-tree plugins, while the maintained
-* flat fallback directory `$NOMIX_HOME/profiles/node_modules` (one symlink per
-* package the installation's app and bundles depend on) makes every in-box
-* plugin Node-resolvable from any profile through the ordinary parent-walk.
+* flat fallback directory `$NOMIX_HOME/profiles/node_modules` links both the
+* installation's dependency closure and aggregate-package kernel entries,
+* making every in-box plugin Node-resolvable through the ordinary parent-walk.
 * @module @nomix-ai/nomix-app-boot/profile
 */
 /** Directory under the Harness home holding every profile. */
@@ -405,18 +405,15 @@ function ensureSymlink(link, target) {
 	}
 }
 /**
-* Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`: one
-* symlink per package in the nomix app's resolvable dependency CLOSURE (BFS
-* over `dependencies` from the app manifest), each resolved from its own
-* real location. Node's parent-directory walk from any profile finds this
-* directory after the profile's own `node_modules`, so every in-box plugin
-* resolves without pnpm ever managing it — the exact "bundles come from the
-* installation" contract. The closure (not just direct dependencies) is
-* required for out-of-tree plugins: their peer dependencies name Service
-* Definition packages (`nomix-compaction`, `nomix-invariants`, ...) that the app
-* reaches only through its Service Provider packages. Symlinked packages
-* resolve their own dependencies from their real directories (Node's default
-* symlink-following), so each package needs only its one flat link.
+* Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`. It
+* links the nomix app's resolvable dependency closure and every package listed
+* by an aggregate distribution's `dist/kernel/manifest.json`. Node's
+* parent-directory walk from any profile therefore resolves in-box plugins
+* without pnpm managing them. The dependency closure is required for
+* out-of-tree plugin peers; the kernel manifest supplies package identities
+* that are embedded rather than installed as standalone npm dependencies.
+* Symlinked packages resolve their own dependencies from their real
+* directories, so each package needs only one flat link.
 * Idempotent: correct links are kept and moved installations are
 * re-pointed; a stale link to a vanished package stays until its name is
 * reused (dangling links are invisible to resolution).
@@ -447,6 +444,23 @@ function healProfilesModuleFallback(installAnchor, home = resolveNomixHome()) {
 			manifest: JSON.parse(readFileSync(manifestPath, "utf8"))
 		});
 	}
+	const kernelRoot = join(dirname(installAnchor), "dist", "kernel");
+	const kernelManifestPath = join(kernelRoot, "manifest.json");
+	if (existsSync(kernelManifestPath)) {
+		const packaged = JSON.parse(readFileSync(kernelManifestPath, "utf8"));
+		if (packaged === null || typeof packaged !== "object" || Array.isArray(packaged)) throw new Error("nomix: packaged kernel manifest must hold a JSON object");
+		for (const [packageName, targetRelative] of Object.entries(packaged)) {
+			if (!packageName.startsWith("@nomix-ai/nomix-") || typeof targetRelative !== "string") throw new Error(`nomix: invalid packaged kernel manifest entry ${JSON.stringify(packageName)}`);
+			const target = resolve(kernelRoot, targetRelative);
+			const fromKernel = relative(kernelRoot, target);
+			if (fromKernel === "" || isAbsolute(fromKernel) || fromKernel === ".." || fromKernel.startsWith(`..${sep}`)) throw new Error(`nomix: packaged kernel target escapes dist/kernel for ${packageName}`);
+			const targetManifestPath = join(target, "package.json");
+			if (!existsSync(targetManifestPath)) throw new Error(`nomix: packaged kernel target for ${packageName} has no package.json`);
+			const targetManifest = JSON.parse(readFileSync(targetManifestPath, "utf8"));
+			if (targetManifest.name !== packageName) throw new Error(`nomix: packaged kernel target for ${packageName} declares ${JSON.stringify(targetManifest.name)}`);
+			links.set(packageName, target);
+		}
+	}
 	for (const [packageName, target] of links) {
 		const link = join(modulesDir, packageName);
 		mkdirSync(dirname(link), { recursive: true });

package/dist/kernel/app-boot/lib/types/profile.d.ts

@@ -16,9 +16,9 @@
  * first from the nomix installation (the launcher's own package), then from the
  * profile directory. The Loader's `baseUrl` is the profile directory, whose
  * `node_modules` pnpm manages for out-of-tree plugins, while the maintained
- * flat fallback directory `$NOMIX_HOME/profiles/node_modules` (one symlink per
- * package the installation's app and bundles depend on) makes every in-box
- * plugin Node-resolvable from any profile through the ordinary parent-walk.
+ * flat fallback directory `$NOMIX_HOME/profiles/node_modules` links both the
+ * installation's dependency closure and aggregate-package kernel entries,
+ * making every in-box plugin Node-resolvable through the ordinary parent-walk.
  * @module @nomix-ai/nomix-app-boot/profile
  */
 import type { EntryOptions } from '@nomix-ai/cordis-plugin-loader';
@@ -98,18 +98,15 @@ export declare const DEFAULT_PROFILE_BUNDLES: readonly string[];
  */
 export declare function initProfile(dir: string, bundles: readonly string[]): void;
 /**
- * Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`: one
- * symlink per package in the nomix app's resolvable dependency CLOSURE (BFS
- * over `dependencies` from the app manifest), each resolved from its own
- * real location. Node's parent-directory walk from any profile finds this
- * directory after the profile's own `node_modules`, so every in-box plugin
- * resolves without pnpm ever managing it — the exact "bundles come from the
- * installation" contract. The closure (not just direct dependencies) is
- * required for out-of-tree plugins: their peer dependencies name Service
- * Definition packages (`nomix-compaction`, `nomix-invariants`, ...) that the app
- * reaches only through its Service Provider packages. Symlinked packages
- * resolve their own dependencies from their real directories (Node's default
- * symlink-following), so each package needs only its one flat link.
+ * Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`. It
+ * links the nomix app's resolvable dependency closure and every package listed
+ * by an aggregate distribution's `dist/kernel/manifest.json`. Node's
+ * parent-directory walk from any profile therefore resolves in-box plugins
+ * without pnpm managing them. The dependency closure is required for
+ * out-of-tree plugin peers; the kernel manifest supplies package identities
+ * that are embedded rather than installed as standalone npm dependencies.
+ * Symlinked packages resolve their own dependencies from their real
+ * directories, so each package needs only one flat link.
  * Idempotent: correct links are kept and moved installations are
  * re-pointed; a stale link to a vanished package stays until its name is
  * reused (dangling links are invisible to resolution).

package/dist/kernel/app-boot/lib/types/profile.js

@@ -16,14 +16,14 @@
  * first from the nomix installation (the launcher's own package), then from the
  * profile directory. The Loader's `baseUrl` is the profile directory, whose
  * `node_modules` pnpm manages for out-of-tree plugins, while the maintained
- * flat fallback directory `$NOMIX_HOME/profiles/node_modules` (one symlink per
- * package the installation's app and bundles depend on) makes every in-box
- * plugin Node-resolvable from any profile through the ordinary parent-walk.
+ * flat fallback directory `$NOMIX_HOME/profiles/node_modules` links both the
+ * installation's dependency closure and aggregate-package kernel entries,
+ * making every in-box plugin Node-resolvable through the ordinary parent-walk.
  * @module @nomix-ai/nomix-app-boot/profile
  */
 import { createRequire } from 'node:module';
 import { existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, symlinkSync, unlinkSync, writeFileSync, } from 'node:fs';
-import { basename, dirname, join } from 'node:path';
+import { basename, dirname, isAbsolute, join, relative, resolve, sep } from 'node:path';
 import { applyEntryPatches } from '@nomix-ai/cordis-plugin-include';
 import { resolveNomixHome } from '../../../home-paths/lib/index.js';
 import { rejectLegacyManifestSection } from "./legacy-branding.js";
@@ -136,18 +136,15 @@ function ensureSymlink(link, target) {
     }
 }
 /**
- * Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`: one
- * symlink per package in the nomix app's resolvable dependency CLOSURE (BFS
- * over `dependencies` from the app manifest), each resolved from its own
- * real location. Node's parent-directory walk from any profile finds this
- * directory after the profile's own `node_modules`, so every in-box plugin
- * resolves without pnpm ever managing it — the exact "bundles come from the
- * installation" contract. The closure (not just direct dependencies) is
- * required for out-of-tree plugins: their peer dependencies name Service
- * Definition packages (`nomix-compaction`, `nomix-invariants`, ...) that the app
- * reaches only through its Service Provider packages. Symlinked packages
- * resolve their own dependencies from their real directories (Node's default
- * symlink-following), so each package needs only its one flat link.
+ * Maintain the flat module fallback `$NOMIX_HOME/profiles/node_modules`. It
+ * links the nomix app's resolvable dependency closure and every package listed
+ * by an aggregate distribution's `dist/kernel/manifest.json`. Node's
+ * parent-directory walk from any profile therefore resolves in-box plugins
+ * without pnpm managing them. The dependency closure is required for
+ * out-of-tree plugin peers; the kernel manifest supplies package identities
+ * that are embedded rather than installed as standalone npm dependencies.
+ * Symlinked packages resolve their own dependencies from their real
+ * directories, so each package needs only one flat link.
  * Idempotent: correct links are kept and moved installations are
  * re-pointed; a stale link to a vanished package stays until its name is
  * reused (dangling links are invisible to resolution).
@@ -184,6 +181,33 @@ export function healProfilesModuleFallback(installAnchor, home = resolveNomixHom
             queue.push({ anchor: manifestPath, manifest: JSON.parse(readFileSync(manifestPath, 'utf8')) });
         }
     }
+    const kernelRoot = join(dirname(installAnchor), 'dist', 'kernel');
+    const kernelManifestPath = join(kernelRoot, 'manifest.json');
+    if (existsSync(kernelManifestPath)) {
+        const packaged = JSON.parse(readFileSync(kernelManifestPath, 'utf8'));
+        if (packaged === null || typeof packaged !== 'object' || Array.isArray(packaged)) {
+            throw new Error('nomix: packaged kernel manifest must hold a JSON object');
+        }
+        for (const [packageName, targetRelative] of Object.entries(packaged)) {
+            if (!packageName.startsWith('@nomix-ai/nomix-') || typeof targetRelative !== 'string') {
+                throw new Error(`nomix: invalid packaged kernel manifest entry ${JSON.stringify(packageName)}`);
+            }
+            const target = resolve(kernelRoot, targetRelative);
+            const fromKernel = relative(kernelRoot, target);
+            if (fromKernel === '' || isAbsolute(fromKernel) || fromKernel === '..' || fromKernel.startsWith(`..${sep}`)) {
+                throw new Error(`nomix: packaged kernel target escapes dist/kernel for ${packageName}`);
+            }
+            const targetManifestPath = join(target, 'package.json');
+            if (!existsSync(targetManifestPath)) {
+                throw new Error(`nomix: packaged kernel target for ${packageName} has no package.json`);
+            }
+            const targetManifest = JSON.parse(readFileSync(targetManifestPath, 'utf8'));
+            if (targetManifest.name !== packageName) {
+                throw new Error(`nomix: packaged kernel target for ${packageName} declares ${JSON.stringify(targetManifest.name)}`);
+            }
+            links.set(packageName, target);
+        }
+    }
     for (const [packageName, target] of links) {
         const link = join(modulesDir, packageName);
         mkdirSync(dirname(link), { recursive: true });

package/dist/kernel/app-boot/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-app-boot",
   "description": "Shared boot glue for the app bins: .env loading, fail-loud Loader guards, snapshot-aware config resolution, and the Loader boot sequence",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/atomic-write/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-atomic-write",
   "description": "Zero-dependency atomic file replacement: exclusive-create random-suffix temp + rename carrying the caller-stated permissions (writeFileAtomic)",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/attachment/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-attachment",
   "description": "Durable immutable attachment storage seam for the Nomix Harness",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },

package/dist/kernel/attachment-local/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-attachment-local",
   "description": "Private content-addressed NOMIX_HOME attachment storage",
-  "version": "0.2.0",
+  "version": "0.2.2",
   "publishConfig": {
     "access": "public"
   },