@nomix-ai/nomix-harness 0.2.4 → 0.2.6

package/dist/kernel/web-app/lib/index.js

@@ -1,10 +1,12 @@
 import { createRequire } from "node:module";
-import { existsSync } from "node:fs";
+import { spawn } from "node:child_process";
 import { networkInterfaces } from "node:os";
 import { fileURLToPath } from "node:url";
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { addHarnessSourceSection } from "../../app-boot/lib/index.js";
 import * as FrontendStatic from "../../host-frontend-static/lib/index.js";
+import { launchEnvironmentOf } from "../../launch-environment/lib/index.js";
+import { scrubbedParentEnv } from "../../subprocess/lib/index.js";
 //#region lib/types/index.js
 /**
 * @nomix-ai/nomix-web-app — the browser-surface bundle's runtime glue plugin
@@ -13,8 +15,9 @@ import * as FrontendStatic from "../../host-frontend-static/lib/index.js";
 * the built frontend dist (workspace knowledge of this bundle, never user
 * config), mounts the `frontend-static` fallback owner over it, registers the
 * harness-source and web-surface prompt sections, the bash-visible web runtime
-* variable, and the URL line. App command-line values arrive through the
-* `webStartup` service expressions in the bundle patch.
+* variable, the URL line, and the default-browser handoff. App command-line
+* values arrive through the `webStartup` service expressions in the bundle
+* patch.
 * @module @nomix-ai/nomix-web-app
 */
 /** Stable Cordis plugin name. */
@@ -26,6 +29,7 @@ const WEB_RUNTIME_SERVICE = "webRuntime";
 /** Services required before the web runtime can mount. */
 const inject = ["webServer"];
 const Config = z.object({
+	openBrowser: z.boolean().default(true),
 	printUrl: z.boolean().default(true),
 	surfaceContext: z.boolean().default(true),
 	trustedHosts: z.array(String).default([])
@@ -35,6 +39,43 @@ const NOMIX_WEB_URL = "NOMIX_WEB_URL";
 const LOOPBACK_HOST = "127.0.0.1";
 /** The webserver schema's all-interfaces bind literal. */
 const ALL_INTERFACES_HOST = "0.0.0.0";
+/** Whether this process was launched through SSH, including a forwarded-port session. */
+function launchedThroughSsh(ctx) {
+	const environment = launchEnvironmentOf(ctx);
+	return ["SSH_CONNECTION", "SSH_TTY"].some((name) => {
+		const value = environment.getFrom(name, ["process"])?.value;
+		return value !== void 0 && value !== "";
+	});
+}
+const BROWSER_OPENER_MODULE = import.meta.resolve("open");
+const BROWSER_OPENER_PROGRAM = `
+try {
+  const { default: open } = await import(${JSON.stringify(BROWSER_OPENER_MODULE)})
+  const launcher = await open(process.argv[1])
+  if (process.platform === 'win32') {
+    // open resolves at PowerShell spawn; keep it referenced until that launcher hands the URL to Windows.
+    const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
+      function onError(error) {
+        launcher.off('close', onClose)
+        reject(error)
+      }
+      function onClose(code) {
+        launcher.off('error', onError)
+        resolve(code)
+      }
+      launcher.ref()
+      launcher.once('error', onError)
+      launcher.once('close', onClose)
+    })
+    if (code !== 0) throw new Error('browser operating-system launcher exited with code ' + String(code))
+  }
+  process.exitCode = 0
+} catch (error) {
+  // The parent turns this exit into the manual-URL warning.
+  console.error(error)
+  process.exitCode = 1
+}
+`;
 /**
 * Resolve one LAN-trust snapshot from the active server bind.
 *
@@ -64,26 +105,73 @@ function localWebUrl(ctx) {
 }
 /** Dist location is workspace knowledge of this bundle: resolved through the frontend package exports, not configured. */
 function resolveDistIndex() {
-	const packaged = fileURLToPath(new URL("../../../assets/web/index.html", import.meta.url));
-	if (existsSync(packaged)) return packaged;
 	const require = createRequire(import.meta.url);
 	try {
-		return require.resolve("@nomix-ai/nomix-web-frontend/dist/index.html");
+		return require.resolve("../../web-frontend/dist/index.html");
 	} catch {
 		/* v8 ignore next 2 -- reachable only on a checkout without a built dist; the test tree builds it */
-		throw new Error("web-app: packaged frontend asset is missing and the workspace frontend dist is not built");
+		throw new Error("web-app: frontend dist not built; run pnpm run build from the repository root first");
 	}
 }
-/** Test hook: hosts with no built frontend dist substitute the resolver; production never touches this. */
-const internals = { resolveDistIndex };
+/** Start the maintained platform opener without forwarding Harness credentials. */
+function spawnBrowserLauncher(url) {
+	return spawn(process.execPath, [
+		"--input-type=module",
+		"--eval",
+		BROWSER_OPENER_PROGRAM,
+		"--",
+		url
+	], {
+		env: scrubbedParentEnv(),
+		stdio: [
+			"ignore",
+			"inherit",
+			"pipe"
+		]
+	});
+}
+/** Hand one URL to the operating system's default browser. */
+async function openBrowser(url) {
+	const launcher = spawnBrowserLauncher(url);
+	let launcherStderr = "";
+	launcher.stderr?.setEncoding("utf8");
+	launcher.stderr?.on("data", (chunk) => {
+		launcherStderr += chunk;
+	});
+	await new Promise((resolve, reject) => {
+		function onError(error) {
+			launcher.off("close", onClose);
+			reject(error);
+		}
+		function onClose(code) {
+			launcher.off("error", onError);
+			if (code !== 0) {
+				const firstLine = launcherStderr.trim().split(/\r?\n/u)[0];
+				const reason = firstLine === void 0 || firstLine === "" ? `browser launcher exited with code ${String(code)}` : firstLine.replace(/^(?:[A-Za-z]*Error):\s*/u, "");
+				reject(new Error(reason));
+				return;
+			}
+			if (launcherStderr !== "") process.stderr.write(launcherStderr);
+			resolve();
+		}
+		launcher.once("error", onError);
+		launcher.once("close", onClose);
+	});
+}
+/** Test hooks for the built dist and native browser handoff; production never mutates them. */
+const internals = {
+	resolveDistIndex,
+	openBrowser
+};
 /**
 * Mount the Web runtime: dist serving, surface prompt, the bash runtime
-* variable, and the URL line.
+* variable, the URL line, and the default-browser handoff.
 * @param ctx - plugin context carrying the webServer service.
 * @param config - validated {@link Config}.
 */
 function apply(ctx, config) {
 	const runtime = resolveLanTrust(ctx.webServer.host, config.trustedHosts);
+	const handoffBrowser = config.openBrowser && !launchedThroughSsh(ctx);
 	ctx.provide(WEB_RUNTIME_SERVICE, runtime);
 	ctx.plugin(FrontendStatic, { distIndex: internals.resolveDistIndex() });
 	if (config.surfaceContext) {
@@ -103,16 +191,24 @@ function apply(ctx, config) {
 			});
 		});
 	}
-	if (config.printUrl) {
-		const printUrl = () => {
+	if (config.printUrl || handoffBrowser) {
+		const announceReady = () => {
+			const webUrl = localWebUrl(ctx);
 			const lanCandidate = runtime.lanAddresses[0];
 			const port = ctx.webServer.port;
-			console.log(`nomix web: ${localWebUrl(ctx)}${lanCandidate === void 0 ? "" : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
+			if (config.printUrl) console.log(`nomix web: ${webUrl}${lanCandidate === void 0 ? "" : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
+			if (handoffBrowser) {
+				console.log("nomix web: opening the default browser; pass --no-open to disable");
+				internals.openBrowser(webUrl).catch((error) => {
+					const reason = error instanceof Error ? error.message : String(error);
+					console.error(`web-app: could not open the default browser because ${reason}; visit ${webUrl} manually`);
+				});
+			}
 		};
 		const settled = ctx.get("loader")?.await();
-		if (settled === void 0) printUrl();
+		if (settled === void 0) announceReady();
 		else settled.then(() => {
-			if (ctx.get("webServer") !== void 0) printUrl();
+			if (ctx.get("webServer") !== void 0) announceReady();
 		}, () => {});
 	}
 }

package/dist/kernel/web-app/lib/startup.js

@@ -3,7 +3,7 @@ import { parseCmdline } from "../../cmdline/lib/index.js";
 //#region lib/types/startup.js
 /**
 * The web app's command-line provider: it parses the `nomix --profile web` flag
-* family (`--host`, `--port`, `--trusted-host`) and its `--help`
+* family (`--host`, `--port`, `--trusted-host`, `--no-open`) and its `--help`
 * text, then provides the immutable values as {@link WEB_STARTUP_SERVICE}.
 * Ordinary rows inject that service before reading it from lazy config.
 * @module @nomix-ai/nomix-web-app/startup
@@ -19,9 +19,10 @@ const WEB_STARTUP_SERVICE = "webStartup";
 * @returns a fresh program, so one process can parse more than once (tests).
 */
 function webCommand() {
-	return new Command().name("nomix --profile web").description("Serve the Nomix Harness browser UI.").helpOption("-h, --help", "show this help").option("--host <host>", "bind host").option("--port <port>", "listen port; pass 0 to let the OS pick a free one").option("--trusted-host <authority...>", "extra authority the /api browser-trust fence accepts (host or host:port; repeatable)").addHelpText("after", `
+	return new Command().name("nomix --profile web").description("Serve the Nomix Harness browser UI.").helpOption("-h, --help", "show this help").option("--host <host>", "bind host").option("--no-open", "do not open the Web UI in the default browser").option("--port <port>", "listen port; pass 0 to let the OS pick a free one").option("--trusted-host <authority...>", "extra authority the /api browser-trust fence accepts (host or host:port; repeatable)").addHelpText("after", `
 Examples:
   nomix --profile web                          serve on the composed host and port
+  nomix --profile web --no-open                serve without opening a browser
   nomix --profile web --port 8080              serve on another port
 `);
 }
@@ -39,6 +40,7 @@ function apply(ctx) {
 		if (options.host === "0.0.0.0") program.error("error: --host 0.0.0.0 is intentionally not supported yet for safety: it would expose remote code execution to the network; use 127.0.0.1 instead");
 		if (options.port !== void 0 && !/^\d+$/.test(options.port)) program.error(`error: --port must be a number, got ${JSON.stringify(options.port)}`);
 		ctx.provide(WEB_STARTUP_SERVICE, {
+			openBrowser: options.open,
 			...options.host !== void 0 && { host: options.host },
 			...options.port !== void 0 && { port: Number(options.port) },
 			trustedHosts: options.trustedHost ?? []

package/dist/kernel/web-app/lib/types/index.d.ts

@@ -5,18 +5,21 @@
  * the built frontend dist (workspace knowledge of this bundle, never user
  * config), mounts the `frontend-static` fallback owner over it, registers the
  * harness-source and web-surface prompt sections, the bash-visible web runtime
- * variable, and the URL line. App command-line values arrive through the
- * `webStartup` service expressions in the bundle patch.
+ * variable, the URL line, and the default-browser handoff. App command-line
+ * values arrive through the `webStartup` service expressions in the bundle
+ * patch.
  * @module @nomix-ai/nomix-web-app
  */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 /** Stable Cordis plugin name. */
 export declare const name = "web-app";
 /** Services required before the web runtime can mount. */
 export declare const inject: string[];
 /** Plugin config: composed deployment settings plus per-invocation command-line values. */
 export interface Config {
+    /** Permit default-browser handoff after the Loader tree settles; an SSH launch suppresses it. */
+    openBrowser: boolean;
     /** Print the URL line on activation; a non-interactive layer can turn it off. */
     printUrl: boolean;
     /**
@@ -48,13 +51,14 @@ export interface WebRuntimeValues {
  * @returns the LAN display addresses and invocation-derived fence authorities.
  */
 export declare function resolveLanTrust(bindHost: string, extra: readonly string[]): WebRuntimeValues;
-/** Test hook: hosts with no built frontend dist substitute the resolver; production never touches this. */
+/** Test hooks for the built dist and native browser handoff; production never mutates them. */
 export declare const internals: {
     resolveDistIndex: () => string;
+    openBrowser: (url: string) => Promise<void>;
 };
 /**
  * Mount the Web runtime: dist serving, surface prompt, the bash runtime
- * variable, and the URL line.
+ * variable, the URL line, and the default-browser handoff.
  * @param ctx - plugin context carrying the webServer service.
  * @param config - validated {@link Config}.
  */

package/dist/kernel/web-app/lib/types/index.js

@@ -5,17 +5,20 @@
  * the built frontend dist (workspace knowledge of this bundle, never user
  * config), mounts the `frontend-static` fallback owner over it, registers the
  * harness-source and web-surface prompt sections, the bash-visible web runtime
- * variable, and the URL line. App command-line values arrive through the
- * `webStartup` service expressions in the bundle patch.
+ * variable, the URL line, and the default-browser handoff. App command-line
+ * values arrive through the `webStartup` service expressions in the bundle
+ * patch.
  * @module @nomix-ai/nomix-web-app
  */
-import { existsSync } from 'node:fs';
+import { spawn } from 'node:child_process';
 import { createRequire } from 'node:module';
 import { networkInterfaces } from 'node:os';
 import { fileURLToPath } from 'node:url';
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { addHarnessSourceSection } from '../../../app-boot/lib/index.js';
 import * as FrontendStatic from '../../../host-frontend-static/lib/index.js';
+import { launchEnvironmentOf } from '../../../launch-environment/lib/index.js';
+import { scrubbedParentEnv } from '../../../subprocess/lib/index.js';
 /** Stable Cordis plugin name. */
 export const name = 'web-app';
 /** This nomix installation's root, from either this package's source or built entry. */
@@ -25,6 +28,7 @@ const WEB_RUNTIME_SERVICE = 'webRuntime';
 /** Services required before the web runtime can mount. */
 export const inject = ['webServer'];
 export const Config = z.object({
+    openBrowser: z.boolean().default(true),
     printUrl: z.boolean().default(true),
     surfaceContext: z.boolean().default(true),
     trustedHosts: z.array(String).default([]),
@@ -36,6 +40,43 @@ const NOMIX_WEB_URL = 'NOMIX_WEB_URL';
 const LOOPBACK_HOST = '127.0.0.1';
 /** The webserver schema's all-interfaces bind literal. */
 const ALL_INTERFACES_HOST = '0.0.0.0';
+/** Whether this process was launched through SSH, including a forwarded-port session. */
+function launchedThroughSsh(ctx) {
+    const environment = launchEnvironmentOf(ctx);
+    return ['SSH_CONNECTION', 'SSH_TTY'].some((name) => {
+        const value = environment.getFrom(name, ['process'])?.value;
+        return value !== undefined && value !== '';
+    });
+}
+const BROWSER_OPENER_MODULE = import.meta.resolve('open');
+const BROWSER_OPENER_PROGRAM = `
+try {
+  const { default: open } = await import(${JSON.stringify(BROWSER_OPENER_MODULE)})
+  const launcher = await open(process.argv[1])
+  if (process.platform === 'win32') {
+    // open resolves at PowerShell spawn; keep it referenced until that launcher hands the URL to Windows.
+    const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
+      function onError(error) {
+        launcher.off('close', onClose)
+        reject(error)
+      }
+      function onClose(code) {
+        launcher.off('error', onError)
+        resolve(code)
+      }
+      launcher.ref()
+      launcher.once('error', onError)
+      launcher.once('close', onClose)
+    })
+    if (code !== 0) throw new Error('browser operating-system launcher exited with code ' + String(code))
+  }
+  process.exitCode = 0
+} catch (error) {
+  // The parent turns this exit into the manual-URL warning.
+  console.error(error)
+  process.exitCode = 1
+}
+`;
 /**
  * Resolve one LAN-trust snapshot from the active server bind.
  *
@@ -76,28 +117,68 @@ function localWebUrl(ctx) {
 }
 /** Dist location is workspace knowledge of this bundle: resolved through the frontend package exports, not configured. */
 function resolveDistIndex() {
-    const packaged = fileURLToPath(new URL('../../../assets/web/index.html', import.meta.url));
-    if (existsSync(packaged))
-        return packaged;
     const require = createRequire(import.meta.url);
     try {
-        return require.resolve('@nomix-ai/nomix-web-frontend/dist/index.html');
+        return require.resolve('../../../web-frontend/dist/index.html');
     }
     catch {
         /* v8 ignore next 2 -- reachable only on a checkout without a built dist; the test tree builds it */
-        throw new Error('web-app: packaged frontend asset is missing and the workspace frontend dist is not built');
+        throw new Error('web-app: frontend dist not built; run pnpm run build from the repository root first');
     }
 }
-/** Test hook: hosts with no built frontend dist substitute the resolver; production never touches this. */
-export const internals = { resolveDistIndex };
+/** Start the maintained platform opener without forwarding Harness credentials. */
+function spawnBrowserLauncher(url) {
+    return spawn(process.execPath, [
+        '--input-type=module',
+        '--eval', BROWSER_OPENER_PROGRAM,
+        '--', url,
+    ], {
+        env: scrubbedParentEnv(),
+        stdio: ['ignore', 'inherit', 'pipe'],
+    });
+}
+/** Hand one URL to the operating system's default browser. */
+async function openBrowser(url) {
+    const launcher = spawnBrowserLauncher(url);
+    let launcherStderr = '';
+    launcher.stderr?.setEncoding('utf8');
+    launcher.stderr?.on('data', (chunk) => { launcherStderr += chunk; });
+    await new Promise((resolve, reject) => {
+        function onError(error) {
+            launcher.off('close', onClose);
+            reject(error);
+        }
+        function onClose(code) {
+            launcher.off('error', onError);
+            if (code !== 0) {
+                const firstLine = launcherStderr.trim().split(/\r?\n/u)[0];
+                const reason = firstLine === undefined || firstLine === ''
+                    ? `browser launcher exited with code ${String(code)}`
+                    : firstLine.replace(/^(?:[A-Za-z]*Error):\s*/u, '');
+                reject(new Error(reason));
+                return;
+            }
+            if (launcherStderr !== '')
+                process.stderr.write(launcherStderr);
+            resolve();
+        }
+        launcher.once('error', onError);
+        launcher.once('close', onClose);
+    });
+}
+/** Test hooks for the built dist and native browser handoff; production never mutates them. */
+export const internals = { resolveDistIndex, openBrowser };
 /**
  * Mount the Web runtime: dist serving, surface prompt, the bash runtime
- * variable, and the URL line.
+ * variable, the URL line, and the default-browser handoff.
  * @param ctx - plugin context carrying the webServer service.
  * @param config - validated {@link Config}.
  */
 export function apply(ctx, config) {
     const runtime = resolveLanTrust(ctx.webServer.host, config.trustedHosts);
+    // The loopback URL belongs to this host. Under SSH, the operator reaches it
+    // through a local forwarding address that this process cannot derive.
+    const handoffBrowser = config.openBrowser && !launchedThroughSsh(ctx);
     // Release dependent rows only after bind-dependent trust has been sampled once.
     ctx.provide(WEB_RUNTIME_SERVICE, runtime);
     ctx.plugin(FrontendStatic, { distIndex: internals.resolveDistIndex() });
@@ -120,30 +201,42 @@ export function apply(ctx, config) {
             });
         });
     }
-    if (config.printUrl) {
-        // The URL line is a readiness signal: supervisors (and the keyless CLI
-        // smoke) RPC as soon as they observe it, so it must not print while
-        // sibling rows (the /api route owner) are still mounting. Await Loader
-        // settlement first; a hand-built tree without a Loader prints at once.
-        const printUrl = () => {
+    if (config.printUrl || handoffBrowser) {
+        // The URL line and browser handoff are readiness signals: supervisors RPC
+        // as soon as they observe the line, while a browser requests the page as
+        // soon as it opens. Neither may run while sibling rows such as the /api
+        // route owner are still mounting. Await Loader settlement first; a
+        // hand-built tree without a Loader is already the complete tree.
+        const announceReady = () => {
+            const webUrl = localWebUrl(ctx);
             // Reuse the exact LAN snapshot provided to the /api trust fence.
             const lanCandidate = runtime.lanAddresses[0];
             const port = ctx.webServer.port;
-            console.log(`nomix web: ${localWebUrl(ctx)}${lanCandidate === undefined ? '' : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
+            if (config.printUrl) {
+                console.log(`nomix web: ${webUrl}${lanCandidate === undefined ? '' : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
+            }
+            if (handoffBrowser) {
+                console.log('nomix web: opening the default browser; pass --no-open to disable');
+                void internals.openBrowser(webUrl).catch((error) => {
+                    const reason = error instanceof Error ? error.message : String(error);
+                    console.error(`web-app: could not open the default browser because ${reason}; visit ${webUrl} manually`);
+                });
+            }
         };
         // This row's own activation can precede a sibling failure. The app owns
-        // readiness by waiting for its Loader tree, or prints at once in a
+        // readiness by waiting for its Loader tree, or announces at once in a
         // hand-built context without Loader.
         const settled = ctx.get('loader')?.await();
         if (settled === undefined)
-            printUrl();
+            announceReady();
         else {
             void settled.then(() => {
                 // The tree can be disposed while the boot was in flight (early
-                // SIGTERM); a URL line for a dead server would only mislead, and
-                // reading the torn-down port would turn a clean shutdown into a crash.
+                // SIGTERM); a URL line or browser tab for a dead server would only
+                // mislead, and reading the torn-down port would turn a clean shutdown
+                // into a crash.
                 if (ctx.get('webServer') !== undefined)
-                    printUrl();
+                    announceReady();
                 // Loader reports a failed boot; this row only stays quiet.
             }, () => { });
         }

package/dist/kernel/web-app/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-web-app`.
  * @module @nomix-ai/nomix-web-app/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "web-app-invariant";
 /** Service required before the companion can register. */

package/dist/kernel/web-app/lib/types/startup.d.ts

@@ -1,11 +1,11 @@
 /**
  * The web app's command-line provider: it parses the `nomix --profile web` flag
- * family (`--host`, `--port`, `--trusted-host`) and its `--help`
+ * family (`--host`, `--port`, `--trusted-host`, `--no-open`) and its `--help`
  * text, then provides the immutable values as {@link WEB_STARTUP_SERVICE}.
  * Ordinary rows inject that service before reading it from lazy config.
  * @module @nomix-ai/nomix-web-app/startup
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Stable Cordis plugin name. */
 export declare const name = "web-startup";
 /** Services required before the flags can be resolved. */
@@ -14,6 +14,8 @@ export declare const inject: string[];
 export declare const WEB_STARTUP_SERVICE = "webStartup";
 /** What the web rows read from {@link WEB_STARTUP_SERVICE}. */
 export interface WebStartupValues {
+    /** Whether this invocation opens the default browser after startup. */
+    openBrowser: boolean;
     /** `--host`, absent when the invocation did not name one. */
     host?: string;
     /** `--port`, absent when the invocation did not name one. */

package/dist/kernel/web-app/lib/types/startup.js

@@ -1,6 +1,6 @@
 /**
  * The web app's command-line provider: it parses the `nomix --profile web` flag
- * family (`--host`, `--port`, `--trusted-host`) and its `--help`
+ * family (`--host`, `--port`, `--trusted-host`, `--no-open`) and its `--help`
  * text, then provides the immutable values as {@link WEB_STARTUP_SERVICE}.
  * Ordinary rows inject that service before reading it from lazy config.
  * @module @nomix-ai/nomix-web-app/startup
@@ -23,11 +23,13 @@ function webCommand() {
         .description('Serve the Nomix Harness browser UI.')
         .helpOption('-h, --help', 'show this help')
         .option('--host <host>', 'bind host')
+        .option('--no-open', 'do not open the Web UI in the default browser')
         .option('--port <port>', 'listen port; pass 0 to let the OS pick a free one')
         .option('--trusted-host <authority...>', 'extra authority the /api browser-trust fence accepts (host or host:port; repeatable)')
         .addHelpText('after', `
 Examples:
   nomix --profile web                          serve on the composed host and port
+  nomix --profile web --no-open                serve without opening a browser
   nomix --profile web --port 8080              serve on another port
 `);
 }
@@ -49,6 +51,7 @@ export function apply(ctx) {
             program.error(`error: --port must be a number, got ${JSON.stringify(options.port)}`);
         }
         ctx.provide(WEB_STARTUP_SERVICE, {
+            openBrowser: options.open,
             ...options.host !== undefined && { host: options.host },
             ...options.port !== undefined && { port: Number(options.port) },
             trustedHosts: options.trustedHost ?? [],

package/dist/kernel/web-app/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@nomix-ai/nomix-web-app",
   "description": "The nomix browser-surface bundle: the web patch layer over nomix-base plus the runtime glue plugin (frontend dist serving, web-surface prompt, bash runtime variables, URL line)",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "publishConfig": {
     "access": "public"
   },
@@ -51,8 +51,11 @@
     "@nomix-ai/nomix-client-hmr": "workspace:^",
     "@nomix-ai/nomix-client-locale": "workspace:^",
     "@nomix-ai/nomix-client-modules": "workspace:^",
+    "@nomix-ai/nomix-client-ui-renderer": "workspace:^",
     "@nomix-ai/nomix-client-runtime": "workspace:^",
     "@nomix-ai/nomix-client-ui-agent-preset": "workspace:^",
+    "@nomix-ai/nomix-client-ui-attachment": "workspace:^",
+    "@nomix-ai/nomix-client-ui-brand-official": "workspace:^",
     "@nomix-ai/nomix-client-ui-commands": "workspace:^",
     "@nomix-ai/nomix-client-ui-conversation": "workspace:^",
     "@nomix-ai/nomix-client-ui-cordis": "workspace:^",
@@ -74,6 +77,7 @@
     "@nomix-ai/nomix-client-ui-sidebar": "workspace:^",
     "@nomix-ai/nomix-client-ui-skill": "workspace:^",
     "@nomix-ai/nomix-client-ui-input-trigger": "workspace:^",
+    "@nomix-ai/nomix-client-ui-reference": "workspace:^",
     "@nomix-ai/nomix-client-ui-subagent": "workspace:^",
     "@nomix-ai/nomix-client-ui-jobs": "workspace:^",
     "@nomix-ai/nomix-client-ui-theme": "workspace:^",
@@ -93,16 +97,22 @@
     "@nomix-ai/nomix-host-directory-picker-native": "workspace:^",
     "@nomix-ai/nomix-host-plugin-inventory": "workspace:^",
     "@nomix-ai/nomix-host-webserver": "workspace:^",
+    "@nomix-ai/nomix-file-reference": "workspace:^",
+    "@nomix-ai/nomix-file-reference-local": "workspace:^",
+    "@nomix-ai/nomix-launch-environment": "workspace:^",
     "@nomix-ai/nomix-message-feedback": "workspace:^",
     "@nomix-ai/nomix-session-projection-cache": "workspace:^",
+    "@nomix-ai/nomix-session-reference": "workspace:^",
     "@nomix-ai/nomix-session-log-export": "workspace:^",
     "@nomix-ai/nomix-session-stats": "workspace:^",
     "@nomix-ai/nomix-storage": "workspace:^",
     "@nomix-ai/nomix-storage-domain": "workspace:^",
     "@nomix-ai/nomix-storage-json": "workspace:^",
+    "@nomix-ai/nomix-subprocess": "workspace:^",
     "@nomix-ai/nomix-workspace": "workspace:^",
     "@nomix-ai/schemastery": "workspace:^",
-    "commander": "^15.0.0"
+    "commander": "^15.0.0",
+    "open": "^11.0.0"
   },
   "peerDependencies": {
     "@nomix-ai/cordis-plugin-loader": "workspace:^",

package/dist/kernel/web-fetch-http/lib/index.js

@@ -1,4 +1,4 @@
-import z from "@nomix-ai/schemastery";
+import z from "../../schemastery/lib/index.mjs";
 import { WebError } from "../../web/lib/index.js";
 import { deadline, timeoutOf } from "../../timeout/lib/index.js";
 //#region lib/types/policy.js
@@ -367,7 +367,7 @@ function translateAbortOrNetwork(error, signal) {
 */
 const MAX_NODE_TIMER_DELAY_MS = 2147483647;
 /** Default `User-Agent`: an explicit product agent, never a browser disguise. */
-const DEFAULT_USER_AGENT = "nomix-harness/0.1.0 (+https://github.com/ditgaldev/nomix-harness)";
+const DEFAULT_USER_AGENT = "nomix-harness/0.0.1 (+https://github.com/deepseek-ai)";
 /** Cordis plugin name used by loader diagnostics. */
 const name = "web-fetch-http";
 /** The web seam this provider registers into. */

package/dist/kernel/web-fetch-http/lib/types/index.d.ts

@@ -6,12 +6,12 @@
  *
  * @module @nomix-ai/nomix-web-fetch-http
  */
-import type { Context } from '@nomix-ai/cordis';
-import z from '@nomix-ai/schemastery';
+import type { Context } from '../../../cordis/lib/index.js';
+import z from '../../../schemastery/lib/index.mjs';
 export { LOCAL_FETCH_PROVIDER_ID, HttpFetchProvider, } from './provider.ts';
 export type { HttpFetchLimits } from './provider.ts';
 /** Default `User-Agent`: an explicit product agent, never a browser disguise. */
-export declare const DEFAULT_USER_AGENT = "nomix-harness/0.1.0 (+https://github.com/ditgaldev/nomix-harness)";
+export declare const DEFAULT_USER_AGENT = "nomix-harness/0.0.1 (+https://github.com/deepseek-ai)";
 /** Cordis plugin name used by loader diagnostics. */
 export declare const name = "web-fetch-http";
 /** The web seam this provider registers into. */

package/dist/kernel/web-fetch-http/lib/types/index.js

@@ -6,12 +6,12 @@
  *
  * @module @nomix-ai/nomix-web-fetch-http
  */
-import z from '@nomix-ai/schemastery';
+import z from '../../../schemastery/lib/index.mjs';
 import { HttpFetchProvider } from "./provider.js";
 const MAX_NODE_TIMER_DELAY_MS = 2_147_483_647;
 export { LOCAL_FETCH_PROVIDER_ID, HttpFetchProvider, } from "./provider.js";
 /** Default `User-Agent`: an explicit product agent, never a browser disguise. */
-export const DEFAULT_USER_AGENT = 'nomix-harness/0.1.0 (+https://github.com/ditgaldev/nomix-harness)';
+export const DEFAULT_USER_AGENT = 'nomix-harness/0.0.1 (+https://github.com/deepseek-ai)';
 /** Cordis plugin name used by loader diagnostics. */
 export const name = 'web-fetch-http';
 /** The web seam this provider registers into. */

package/dist/kernel/web-fetch-http/lib/types/invariant.d.ts

@@ -2,7 +2,7 @@
  * Package-owned invariant companion for `@nomix-ai/nomix-web-fetch-http`.
  * @module @nomix-ai/nomix-web-fetch-http/invariant
  */
-import type { Context } from '@nomix-ai/cordis';
+import type { Context } from '../../../cordis/lib/index.js';
 /** Cordis companion plugin name. */
 export declare const name = "web-fetch-http-invariant";
 /** Service required before the companion can reserve package ownership. */