@nomix-ai/nomix-harness 0.2.6 → 0.2.9

package/dist/kernel/web-app/lib/index.js

@@ -1,216 +0,0 @@
-import { createRequire } from "node:module";
-import { spawn } from "node:child_process";
-import { networkInterfaces } from "node:os";
-import { fileURLToPath } from "node:url";
-import z from "../../schemastery/lib/index.mjs";
-import { addHarnessSourceSection } from "../../app-boot/lib/index.js";
-import * as FrontendStatic from "../../host-frontend-static/lib/index.js";
-import { launchEnvironmentOf } from "../../launch-environment/lib/index.js";
-import { scrubbedParentEnv } from "../../subprocess/lib/index.js";
-//#region lib/types/index.js
-/**
-* @nomix-ai/nomix-web-app — the browser-surface bundle's runtime glue plugin
-* plus the bundle patch (`cordis.patch.yml`, declared by the `nomix.bundle.patch`
-* manifest field). The plugin owns the browser-surface glue: it resolves
-* the built frontend dist (workspace knowledge of this bundle, never user
-* config), mounts the `frontend-static` fallback owner over it, registers the
-* harness-source and web-surface prompt sections, the bash-visible web runtime
-* variable, the URL line, and the default-browser handoff. App command-line
-* values arrive through the `webStartup` service expressions in the bundle
-* patch.
-* @module @nomix-ai/nomix-web-app
-*/
-/** Stable Cordis plugin name. */
-const name = "web-app";
-/** This nomix installation's root, from either this package's source or built entry. */
-const SOURCE_ROOT = fileURLToPath(new URL("../../../..", import.meta.url));
-/** Runtime service that releases Web rows after bind-dependent values resolve. */
-const WEB_RUNTIME_SERVICE = "webRuntime";
-/** Services required before the web runtime can mount. */
-const inject = ["webServer"];
-const Config = z.object({
-	openBrowser: z.boolean().default(true),
-	printUrl: z.boolean().default(true),
-	surfaceContext: z.boolean().default(true),
-	trustedHosts: z.array(String).default([])
-});
-/** Environment variable naming the canonical local URL of this Web GUI. */
-const NOMIX_WEB_URL = "NOMIX_WEB_URL";
-const LOOPBACK_HOST = "127.0.0.1";
-/** The webserver schema's all-interfaces bind literal. */
-const ALL_INTERFACES_HOST = "0.0.0.0";
-/** Whether this process was launched through SSH, including a forwarded-port session. */
-function launchedThroughSsh(ctx) {
-	const environment = launchEnvironmentOf(ctx);
-	return ["SSH_CONNECTION", "SSH_TTY"].some((name) => {
-		const value = environment.getFrom(name, ["process"])?.value;
-		return value !== void 0 && value !== "";
-	});
-}
-const BROWSER_OPENER_MODULE = import.meta.resolve("open");
-const BROWSER_OPENER_PROGRAM = `
-try {
-  const { default: open } = await import(${JSON.stringify(BROWSER_OPENER_MODULE)})
-  const launcher = await open(process.argv[1])
-  if (process.platform === 'win32') {
-    // open resolves at PowerShell spawn; keep it referenced until that launcher hands the URL to Windows.
-    const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
-      function onError(error) {
-        launcher.off('close', onClose)
-        reject(error)
-      }
-      function onClose(code) {
-        launcher.off('error', onError)
-        resolve(code)
-      }
-      launcher.ref()
-      launcher.once('error', onError)
-      launcher.once('close', onClose)
-    })
-    if (code !== 0) throw new Error('browser operating-system launcher exited with code ' + String(code))
-  }
-  process.exitCode = 0
-} catch (error) {
-  // The parent turns this exit into the manual-URL warning.
-  console.error(error)
-  process.exitCode = 1
-}
-`;
-/**
-* Resolve one LAN-trust snapshot from the active server bind.
-*
-* Derived entries are port-less IP literals: DNS rebinding needs an
-* attacker-controlled name, while an IP-literal Host is safe on any port and
-* an OS-assigned port is unknowable before bind.
-* @param bindHost - the active webserver bind host.
-* @param extra - explicit `--trusted-host` values, in argument order.
-* @returns the LAN display addresses and invocation-derived fence authorities.
-*/
-function resolveLanTrust(bindHost, extra) {
-	const lanAddresses = bindHost === ALL_INTERFACES_HOST ? Object.values(networkInterfaces()).flat().filter((iface) => iface !== void 0 && iface.family === "IPv4" && !iface.internal).map((iface) => iface.address) : [];
-	return {
-		lanAddresses,
-		trustedHosts: [...lanAddresses, ...extra]
-	};
-}
-/** Model-visible orientation and acceptance boundary for sessions created through `nomix web`. */
-function webSurfacePrompt(webUrl) {
-	return `You are interacting with the user through the Nomix Harness Web GUI at ${webUrl}. When the user refers to "this page", "this GUI", or "this app" without naming another target, they mean this GUI. The browser provides no implicit DOM, route, or screenshot context. The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while \`pnpm run dev:web\` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. Starting another server does not update this GUI. The apps/web Vite entry builds the shell but is not a standalone application because only nomix web injects window.__NOMIX_BOOT__. Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL.`;
-}
-/** Resolve the canonical loopback URL from the active Web server. */
-function localWebUrl(ctx) {
-	const port = ctx.get("webServer")?.port;
-	if (port === void 0) throw new Error("web-app: webServer service missing while resolving Web runtime");
-	return `http://${LOOPBACK_HOST}:${String(port)}`;
-}
-/** Dist location is workspace knowledge of this bundle: resolved through the frontend package exports, not configured. */
-function resolveDistIndex() {
-	const require = createRequire(import.meta.url);
-	try {
-		return require.resolve("../../web-frontend/dist/index.html");
-	} catch {
-		/* v8 ignore next 2 -- reachable only on a checkout without a built dist; the test tree builds it */
-		throw new Error("web-app: frontend dist not built; run pnpm run build from the repository root first");
-	}
-}
-/** Start the maintained platform opener without forwarding Harness credentials. */
-function spawnBrowserLauncher(url) {
-	return spawn(process.execPath, [
-		"--input-type=module",
-		"--eval",
-		BROWSER_OPENER_PROGRAM,
-		"--",
-		url
-	], {
-		env: scrubbedParentEnv(),
-		stdio: [
-			"ignore",
-			"inherit",
-			"pipe"
-		]
-	});
-}
-/** Hand one URL to the operating system's default browser. */
-async function openBrowser(url) {
-	const launcher = spawnBrowserLauncher(url);
-	let launcherStderr = "";
-	launcher.stderr?.setEncoding("utf8");
-	launcher.stderr?.on("data", (chunk) => {
-		launcherStderr += chunk;
-	});
-	await new Promise((resolve, reject) => {
-		function onError(error) {
-			launcher.off("close", onClose);
-			reject(error);
-		}
-		function onClose(code) {
-			launcher.off("error", onError);
-			if (code !== 0) {
-				const firstLine = launcherStderr.trim().split(/\r?\n/u)[0];
-				const reason = firstLine === void 0 || firstLine === "" ? `browser launcher exited with code ${String(code)}` : firstLine.replace(/^(?:[A-Za-z]*Error):\s*/u, "");
-				reject(new Error(reason));
-				return;
-			}
-			if (launcherStderr !== "") process.stderr.write(launcherStderr);
-			resolve();
-		}
-		launcher.once("error", onError);
-		launcher.once("close", onClose);
-	});
-}
-/** Test hooks for the built dist and native browser handoff; production never mutates them. */
-const internals = {
-	resolveDistIndex,
-	openBrowser
-};
-/**
-* Mount the Web runtime: dist serving, surface prompt, the bash runtime
-* variable, the URL line, and the default-browser handoff.
-* @param ctx - plugin context carrying the webServer service.
-* @param config - validated {@link Config}.
-*/
-function apply(ctx, config) {
-	const runtime = resolveLanTrust(ctx.webServer.host, config.trustedHosts);
-	const handoffBrowser = config.openBrowser && !launchedThroughSsh(ctx);
-	ctx.provide(WEB_RUNTIME_SERVICE, runtime);
-	ctx.plugin(FrontendStatic, { distIndex: internals.resolveDistIndex() });
-	if (config.surfaceContext) {
-		ctx.inject(["systemPrompt"], (promptCtx) => {
-			addHarnessSourceSection(promptCtx, SOURCE_ROOT);
-			promptCtx.systemPrompt.section({
-				name: "app:web-surface",
-				order: -98,
-				text: () => webSurfacePrompt(localWebUrl(promptCtx))
-			});
-		});
-		ctx.inject(["shellEnv"], (runtimeCtx) => {
-			runtimeCtx.shellEnv.register({
-				name: "web-runtime",
-				variables: { [NOMIX_WEB_URL]: { description: "Canonical local URL of the Nomix Harness Web GUI serving this session." } },
-				resolve: () => ({ [NOMIX_WEB_URL]: localWebUrl(runtimeCtx) })
-			});
-		});
-	}
-	if (config.printUrl || handoffBrowser) {
-		const announceReady = () => {
-			const webUrl = localWebUrl(ctx);
-			const lanCandidate = runtime.lanAddresses[0];
-			const port = ctx.webServer.port;
-			if (config.printUrl) console.log(`nomix web: ${webUrl}${lanCandidate === void 0 ? "" : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
-			if (handoffBrowser) {
-				console.log("nomix web: opening the default browser; pass --no-open to disable");
-				internals.openBrowser(webUrl).catch((error) => {
-					const reason = error instanceof Error ? error.message : String(error);
-					console.error(`web-app: could not open the default browser because ${reason}; visit ${webUrl} manually`);
-				});
-			}
-		};
-		const settled = ctx.get("loader")?.await();
-		if (settled === void 0) announceReady();
-		else settled.then(() => {
-			if (ctx.get("webServer") !== void 0) announceReady();
-		}, () => {});
-	}
-}
-//#endregion
-export { Config, apply, inject, internals, name, resolveLanTrust };

package/dist/kernel/web-app/lib/startup.js

@@ -1,52 +0,0 @@
-import { Command } from "commander";
-import { parseCmdline } from "../../cmdline/lib/index.js";
-//#region lib/types/startup.js
-/**
-* The web app's command-line provider: it parses the `nomix --profile web` flag
-* family (`--host`, `--port`, `--trusted-host`, `--no-open`) and its `--help`
-* text, then provides the immutable values as {@link WEB_STARTUP_SERVICE}.
-* Ordinary rows inject that service before reading it from lazy config.
-* @module @nomix-ai/nomix-web-app/startup
-*/
-/** Stable Cordis plugin name. */
-const name = "web-startup";
-/** Services required before the flags can be resolved. */
-const inject = ["cmdlineArgs"];
-/** Service provided by this ordinary plugin and injected by flag-configured rows. */
-const WEB_STARTUP_SERVICE = "webStartup";
-/**
-* This app's command: its flags, its description, and its help text.
-* @returns a fresh program, so one process can parse more than once (tests).
-*/
-function webCommand() {
-	return new Command().name("nomix --profile web").description("Serve the Nomix Harness browser UI.").helpOption("-h, --help", "show this help").option("--host <host>", "bind host").option("--no-open", "do not open the Web UI in the default browser").option("--port <port>", "listen port; pass 0 to let the OS pick a free one").option("--trusted-host <authority...>", "extra authority the /api browser-trust fence accepts (host or host:port; repeatable)").addHelpText("after", `
-Examples:
-  nomix --profile web                          serve on the composed host and port
-  nomix --profile web --no-open                serve without opening a browser
-  nomix --profile web --port 8080              serve on another port
-`);
-}
-/**
-* Parse and provide the Web invocation as an ordinary Cordis service. The
-* command's action publishes the flags this invocation named; `--host 0.0.0.0`
-* or a non-numeric `--port` is a usage error, so on rejection (and on `--help`)
-* nothing is provided.
-* @param ctx - plugin context carrying the command line.
-*/
-function apply(ctx) {
-	const program = webCommand();
-	program.action(() => {
-		const options = program.opts();
-		if (options.host === "0.0.0.0") program.error("error: --host 0.0.0.0 is intentionally not supported yet for safety: it would expose remote code execution to the network; use 127.0.0.1 instead");
-		if (options.port !== void 0 && !/^\d+$/.test(options.port)) program.error(`error: --port must be a number, got ${JSON.stringify(options.port)}`);
-		ctx.provide(WEB_STARTUP_SERVICE, {
-			openBrowser: options.open,
-			...options.host !== void 0 && { host: options.host },
-			...options.port !== void 0 && { port: Number(options.port) },
-			trustedHosts: options.trustedHost ?? []
-		});
-	});
-	parseCmdline(ctx, program);
-}
-//#endregion
-export { WEB_STARTUP_SERVICE, apply, inject, name };

package/dist/kernel/web-app/lib/types/index.d.ts

@@ -1,66 +0,0 @@
-/**
- * @nomix-ai/nomix-web-app — the browser-surface bundle's runtime glue plugin
- * plus the bundle patch (`cordis.patch.yml`, declared by the `nomix.bundle.patch`
- * manifest field). The plugin owns the browser-surface glue: it resolves
- * the built frontend dist (workspace knowledge of this bundle, never user
- * config), mounts the `frontend-static` fallback owner over it, registers the
- * harness-source and web-surface prompt sections, the bash-visible web runtime
- * variable, the URL line, and the default-browser handoff. App command-line
- * values arrive through the `webStartup` service expressions in the bundle
- * patch.
- * @module @nomix-ai/nomix-web-app
- */
-import type { Context } from '../../../cordis/lib/index.js';
-import z from '../../../schemastery/lib/index.mjs';
-/** Stable Cordis plugin name. */
-export declare const name = "web-app";
-/** Services required before the web runtime can mount. */
-export declare const inject: string[];
-/** Plugin config: composed deployment settings plus per-invocation command-line values. */
-export interface Config {
-    /** Permit default-browser handoff after the Loader tree settles; an SSH launch suppresses it. */
-    openBrowser: boolean;
-    /** Print the URL line on activation; a non-interactive layer can turn it off. */
-    printUrl: boolean;
-    /**
-     * Register the model-visible surface context (the `app:web-surface` prompt
-     * section and the `NOMIX_WEB_URL` bash variable). A one-shot non-interactive
-     * layer can turn it off when its user is not in the GUI, so the
-     * orientation text would be false.
-     */
-    surfaceContext: boolean;
-    /** Explicit `--trusted-host` authorities from this invocation. */
-    trustedHosts: string[];
-}
-export declare const Config: z<Config>;
-/** Bind-dependent Web values shared by the trust fence and URL display. */
-export interface WebRuntimeValues {
-    /** LAN IPv4 literals sampled once when the server binds all interfaces. */
-    lanAddresses: string[];
-    /** LAN literals followed by explicit invocation authorities. */
-    trustedHosts: string[];
-}
-/**
- * Resolve one LAN-trust snapshot from the active server bind.
- *
- * Derived entries are port-less IP literals: DNS rebinding needs an
- * attacker-controlled name, while an IP-literal Host is safe on any port and
- * an OS-assigned port is unknowable before bind.
- * @param bindHost - the active webserver bind host.
- * @param extra - explicit `--trusted-host` values, in argument order.
- * @returns the LAN display addresses and invocation-derived fence authorities.
- */
-export declare function resolveLanTrust(bindHost: string, extra: readonly string[]): WebRuntimeValues;
-/** Test hooks for the built dist and native browser handoff; production never mutates them. */
-export declare const internals: {
-    resolveDistIndex: () => string;
-    openBrowser: (url: string) => Promise<void>;
-};
-/**
- * Mount the Web runtime: dist serving, surface prompt, the bash runtime
- * variable, the URL line, and the default-browser handoff.
- * @param ctx - plugin context carrying the webServer service.
- * @param config - validated {@link Config}.
- */
-export declare function apply(ctx: Context, config: Config): void;
-//# sourceMappingURL=index.d.ts.map

package/dist/kernel/web-app/lib/types/index.js

@@ -1,245 +0,0 @@
-/**
- * @nomix-ai/nomix-web-app — the browser-surface bundle's runtime glue plugin
- * plus the bundle patch (`cordis.patch.yml`, declared by the `nomix.bundle.patch`
- * manifest field). The plugin owns the browser-surface glue: it resolves
- * the built frontend dist (workspace knowledge of this bundle, never user
- * config), mounts the `frontend-static` fallback owner over it, registers the
- * harness-source and web-surface prompt sections, the bash-visible web runtime
- * variable, the URL line, and the default-browser handoff. App command-line
- * values arrive through the `webStartup` service expressions in the bundle
- * patch.
- * @module @nomix-ai/nomix-web-app
- */
-import { spawn } from 'node:child_process';
-import { createRequire } from 'node:module';
-import { networkInterfaces } from 'node:os';
-import { fileURLToPath } from 'node:url';
-import z from '../../../schemastery/lib/index.mjs';
-import { addHarnessSourceSection } from '../../../app-boot/lib/index.js';
-import * as FrontendStatic from '../../../host-frontend-static/lib/index.js';
-import { launchEnvironmentOf } from '../../../launch-environment/lib/index.js';
-import { scrubbedParentEnv } from '../../../subprocess/lib/index.js';
-/** Stable Cordis plugin name. */
-export const name = 'web-app';
-/** This nomix installation's root, from either this package's source or built entry. */
-const SOURCE_ROOT = fileURLToPath(new URL('../../../..', import.meta.url));
-/** Runtime service that releases Web rows after bind-dependent values resolve. */
-const WEB_RUNTIME_SERVICE = 'webRuntime';
-/** Services required before the web runtime can mount. */
-export const inject = ['webServer'];
-export const Config = z.object({
-    openBrowser: z.boolean().default(true),
-    printUrl: z.boolean().default(true),
-    surfaceContext: z.boolean().default(true),
-    trustedHosts: z.array(String).default([]),
-});
-/** Environment variable naming the canonical local URL of this Web GUI. */
-const NOMIX_WEB_URL = 'NOMIX_WEB_URL';
-// Display-only mirror of the webserver schema's loopback host: the address the
-// local URL always prints. Not a source of truth — the schema is.
-const LOOPBACK_HOST = '127.0.0.1';
-/** The webserver schema's all-interfaces bind literal. */
-const ALL_INTERFACES_HOST = '0.0.0.0';
-/** Whether this process was launched through SSH, including a forwarded-port session. */
-function launchedThroughSsh(ctx) {
-    const environment = launchEnvironmentOf(ctx);
-    return ['SSH_CONNECTION', 'SSH_TTY'].some((name) => {
-        const value = environment.getFrom(name, ['process'])?.value;
-        return value !== undefined && value !== '';
-    });
-}
-const BROWSER_OPENER_MODULE = import.meta.resolve('open');
-const BROWSER_OPENER_PROGRAM = `
-try {
-  const { default: open } = await import(${JSON.stringify(BROWSER_OPENER_MODULE)})
-  const launcher = await open(process.argv[1])
-  if (process.platform === 'win32') {
-    // open resolves at PowerShell spawn; keep it referenced until that launcher hands the URL to Windows.
-    const code = launcher.exitCode ?? await new Promise((resolve, reject) => {
-      function onError(error) {
-        launcher.off('close', onClose)
-        reject(error)
-      }
-      function onClose(code) {
-        launcher.off('error', onError)
-        resolve(code)
-      }
-      launcher.ref()
-      launcher.once('error', onError)
-      launcher.once('close', onClose)
-    })
-    if (code !== 0) throw new Error('browser operating-system launcher exited with code ' + String(code))
-  }
-  process.exitCode = 0
-} catch (error) {
-  // The parent turns this exit into the manual-URL warning.
-  console.error(error)
-  process.exitCode = 1
-}
-`;
-/**
- * Resolve one LAN-trust snapshot from the active server bind.
- *
- * Derived entries are port-less IP literals: DNS rebinding needs an
- * attacker-controlled name, while an IP-literal Host is safe on any port and
- * an OS-assigned port is unknowable before bind.
- * @param bindHost - the active webserver bind host.
- * @param extra - explicit `--trusted-host` values, in argument order.
- * @returns the LAN display addresses and invocation-derived fence authorities.
- */
-export function resolveLanTrust(bindHost, extra) {
-    const lanAddresses = bindHost === ALL_INTERFACES_HOST
-        ? Object.values(networkInterfaces()).flat()
-            .filter((iface) => iface !== undefined && iface.family === 'IPv4' && !iface.internal)
-            .map(iface => iface.address)
-        : [];
-    return { lanAddresses, trustedHosts: [...lanAddresses, ...extra] };
-}
-/** Model-visible orientation and acceptance boundary for sessions created through `nomix web`. */
-function webSurfacePrompt(webUrl) {
-    const updateContract = 'The client-plugin HMR receiver is active, but client-plugin changes reload without a refresh only while '
-        + '`pnpm run dev:web` is also running from this same checkout to rebuild their bundles; verify that watcher before promising automatic updates. '
-        + 'Every other change — the apps/web shell and plain packages — requires rebuilding the affected Web artifacts and verifying this existing URL after a page refresh. ';
-    return `You are interacting with the user through the Nomix Harness Web GUI at ${webUrl}. `
-        + 'When the user refers to "this page", "this GUI", or "this app" without naming another target, they mean this GUI. '
-        + 'The browser provides no implicit DOM, route, or screenshot context. '
-        + updateContract
-        + 'Starting another server does not update this GUI. '
-        + 'The apps/web Vite entry builds the shell but is not a standalone application because only nomix web injects window.__NOMIX_BOOT__. '
-        + 'Do not start a replacement server unless the user asks; if one is needed, use a managed background job and verify its exact URL.';
-}
-/** Resolve the canonical loopback URL from the active Web server. */
-function localWebUrl(ctx) {
-    const port = ctx.get('webServer')?.port;
-    if (port === undefined)
-        throw new Error('web-app: webServer service missing while resolving Web runtime');
-    return `http://${LOOPBACK_HOST}:${String(port)}`;
-}
-/** Dist location is workspace knowledge of this bundle: resolved through the frontend package exports, not configured. */
-function resolveDistIndex() {
-    const require = createRequire(import.meta.url);
-    try {
-        return require.resolve('../../../web-frontend/dist/index.html');
-    }
-    catch {
-        /* v8 ignore next 2 -- reachable only on a checkout without a built dist; the test tree builds it */
-        throw new Error('web-app: frontend dist not built; run pnpm run build from the repository root first');
-    }
-}
-/** Start the maintained platform opener without forwarding Harness credentials. */
-function spawnBrowserLauncher(url) {
-    return spawn(process.execPath, [
-        '--input-type=module',
-        '--eval', BROWSER_OPENER_PROGRAM,
-        '--', url,
-    ], {
-        env: scrubbedParentEnv(),
-        stdio: ['ignore', 'inherit', 'pipe'],
-    });
-}
-/** Hand one URL to the operating system's default browser. */
-async function openBrowser(url) {
-    const launcher = spawnBrowserLauncher(url);
-    let launcherStderr = '';
-    launcher.stderr?.setEncoding('utf8');
-    launcher.stderr?.on('data', (chunk) => { launcherStderr += chunk; });
-    await new Promise((resolve, reject) => {
-        function onError(error) {
-            launcher.off('close', onClose);
-            reject(error);
-        }
-        function onClose(code) {
-            launcher.off('error', onError);
-            if (code !== 0) {
-                const firstLine = launcherStderr.trim().split(/\r?\n/u)[0];
-                const reason = firstLine === undefined || firstLine === ''
-                    ? `browser launcher exited with code ${String(code)}`
-                    : firstLine.replace(/^(?:[A-Za-z]*Error):\s*/u, '');
-                reject(new Error(reason));
-                return;
-            }
-            if (launcherStderr !== '')
-                process.stderr.write(launcherStderr);
-            resolve();
-        }
-        launcher.once('error', onError);
-        launcher.once('close', onClose);
-    });
-}
-/** Test hooks for the built dist and native browser handoff; production never mutates them. */
-export const internals = { resolveDistIndex, openBrowser };
-/**
- * Mount the Web runtime: dist serving, surface prompt, the bash runtime
- * variable, the URL line, and the default-browser handoff.
- * @param ctx - plugin context carrying the webServer service.
- * @param config - validated {@link Config}.
- */
-export function apply(ctx, config) {
-    const runtime = resolveLanTrust(ctx.webServer.host, config.trustedHosts);
-    // The loopback URL belongs to this host. Under SSH, the operator reaches it
-    // through a local forwarding address that this process cannot derive.
-    const handoffBrowser = config.openBrowser && !launchedThroughSsh(ctx);
-    // Release dependent rows only after bind-dependent trust has been sampled once.
-    ctx.provide(WEB_RUNTIME_SERVICE, runtime);
-    ctx.plugin(FrontendStatic, { distIndex: internals.resolveDistIndex() });
-    if (config.surfaceContext) {
-        ctx.inject(['systemPrompt'], (promptCtx) => {
-            addHarnessSourceSection(promptCtx, SOURCE_ROOT);
-            promptCtx.systemPrompt.section({
-                name: 'app:web-surface',
-                order: -98,
-                text: () => webSurfacePrompt(localWebUrl(promptCtx)),
-            });
-        });
-        ctx.inject(['shellEnv'], (runtimeCtx) => {
-            runtimeCtx.shellEnv.register({
-                name: 'web-runtime',
-                variables: {
-                    [NOMIX_WEB_URL]: { description: 'Canonical local URL of the Nomix Harness Web GUI serving this session.' },
-                },
-                resolve: () => ({ [NOMIX_WEB_URL]: localWebUrl(runtimeCtx) }),
-            });
-        });
-    }
-    if (config.printUrl || handoffBrowser) {
-        // The URL line and browser handoff are readiness signals: supervisors RPC
-        // as soon as they observe the line, while a browser requests the page as
-        // soon as it opens. Neither may run while sibling rows such as the /api
-        // route owner are still mounting. Await Loader settlement first; a
-        // hand-built tree without a Loader is already the complete tree.
-        const announceReady = () => {
-            const webUrl = localWebUrl(ctx);
-            // Reuse the exact LAN snapshot provided to the /api trust fence.
-            const lanCandidate = runtime.lanAddresses[0];
-            const port = ctx.webServer.port;
-            if (config.printUrl) {
-                console.log(`nomix web: ${webUrl}${lanCandidate === undefined ? '' : ` (LAN: http://${lanCandidate}:${String(port)})`}`);
-            }
-            if (handoffBrowser) {
-                console.log('nomix web: opening the default browser; pass --no-open to disable');
-                void internals.openBrowser(webUrl).catch((error) => {
-                    const reason = error instanceof Error ? error.message : String(error);
-                    console.error(`web-app: could not open the default browser because ${reason}; visit ${webUrl} manually`);
-                });
-            }
-        };
-        // This row's own activation can precede a sibling failure. The app owns
-        // readiness by waiting for its Loader tree, or announces at once in a
-        // hand-built context without Loader.
-        const settled = ctx.get('loader')?.await();
-        if (settled === undefined)
-            announceReady();
-        else {
-            void settled.then(() => {
-                // The tree can be disposed while the boot was in flight (early
-                // SIGTERM); a URL line or browser tab for a dead server would only
-                // mislead, and reading the torn-down port would turn a clean shutdown
-                // into a crash.
-                if (ctx.get('webServer') !== undefined)
-                    announceReady();
-                // Loader reports a failed boot; this row only stays quiet.
-            }, () => { });
-        }
-    }
-}
-//# sourceMappingURL=index.js.map

package/dist/kernel/web-app/lib/types/invariant.d.ts

@@ -1,16 +0,0 @@
-/**
- * Package-owned invariant companion for `@nomix-ai/nomix-web-app`.
- * @module @nomix-ai/nomix-web-app/invariant
- */
-import type { Context } from '../../../cordis/lib/index.js';
-/** Cordis companion plugin name. */
-export declare const name = "web-app-invariant";
-/** Service required before the companion can register. */
-export declare const inject: string[];
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export declare const apply: (ctx: Context) => Promise<() => void>;
-//# sourceMappingURL=invariant.d.ts.map

package/dist/kernel/web-app/lib/types/invariant.js

@@ -1,23 +0,0 @@
-/**
- * Package-owned invariant companion for `@nomix-ai/nomix-web-app`.
- * @module @nomix-ai/nomix-web-app/invariant
- */
-const PACKAGE_NAME = '@nomix-ai/nomix-web-app';
-/** Cordis companion plugin name. */
-export const name = 'web-app-invariant';
-/** Service required before the companion can register. */
-export const inject = ['invariants'];
-/**
- * No runtime invariant: every contribution (frontend-static child plugin,
- * prompt section, bashEnv registration) is registry-disposed with the fiber,
- * and each owning registry's package carries that relation's invariant; the
- * package holds no mutable state of its own to audit.
- */
-const install = () => { };
-/**
- * Register this package's invariant companion.
- * @param ctx - Cordis context carrying the invariant service.
- * @returns the installed registration's disposer after setup succeeds.
- */
-export const apply = (ctx) => Promise.resolve(ctx.invariants.register(PACKAGE_NAME, install));
-//# sourceMappingURL=invariant.js.map

package/dist/kernel/web-app/lib/types/startup.d.ts

@@ -1,34 +0,0 @@
-/**
- * The web app's command-line provider: it parses the `nomix --profile web` flag
- * family (`--host`, `--port`, `--trusted-host`, `--no-open`) and its `--help`
- * text, then provides the immutable values as {@link WEB_STARTUP_SERVICE}.
- * Ordinary rows inject that service before reading it from lazy config.
- * @module @nomix-ai/nomix-web-app/startup
- */
-import type { Context } from '../../../cordis/lib/index.js';
-/** Stable Cordis plugin name. */
-export declare const name = "web-startup";
-/** Services required before the flags can be resolved. */
-export declare const inject: string[];
-/** Service provided by this ordinary plugin and injected by flag-configured rows. */
-export declare const WEB_STARTUP_SERVICE = "webStartup";
-/** What the web rows read from {@link WEB_STARTUP_SERVICE}. */
-export interface WebStartupValues {
-    /** Whether this invocation opens the default browser after startup. */
-    openBrowser: boolean;
-    /** `--host`, absent when the invocation did not name one. */
-    host?: string;
-    /** `--port`, absent when the invocation did not name one. */
-    port?: number;
-    /** Explicit `--trusted-host` authorities, in argument order. */
-    trustedHosts: string[];
-}
-/**
- * Parse and provide the Web invocation as an ordinary Cordis service. The
- * command's action publishes the flags this invocation named; `--host 0.0.0.0`
- * or a non-numeric `--port` is a usage error, so on rejection (and on `--help`)
- * nothing is provided.
- * @param ctx - plugin context carrying the command line.
- */
-export declare function apply(ctx: Context): void;
-//# sourceMappingURL=startup.d.ts.map