fix: wire Nix base-path packaging

Author: zhuziqi97

flake.nix

@@ -46,6 +46,7 @@
       # nix_validation_required filter.
       daemonWorkspacePaths = [
         "packages/release"
+        "packages/path-config"
         "packages/contracts"
         "packages/registry-protocol"
         "packages/agui-adapter"
@@ -61,6 +62,7 @@
       # nix_validation_required filter.
       webWorkspacePaths = [
         "packages/release"
+        "packages/path-config"
         "packages/components"
         "packages/contracts"
         "packages/host"
@@ -178,6 +180,30 @@
       checks = {
         daemon = daemon;
         web = web;
+        moduleBasePath =
+          let
+            evaluated = nixpkgs.lib.nixosSystem {
+              inherit system;
+              modules = [
+                self.nixosModules.default
+                ({...}: {
+                  system.stateVersion = "25.11";
+                  services.open-design = {
+                    enable = true;
+                    webFrontend = {
+                      enable = true;
+                      basePath = "/open-design/";
+                    };
+                  };
+                })
+              ];
+            };
+            webBasePath = evaluated.config.services.open-design.webFrontend.package.passthru.webBasePath;
+          in
+            assert webBasePath == "/open-design";
+            pkgs.runCommand "open-design-nixos-module-base-path" {} ''
+              touch $out
+            '';
       };
 
       formatter = pkgs.nixpkgs-fmt;

nix/README.md

@@ -123,9 +123,11 @@ before serving the static package and proxying `/api`, `/artifacts`, and
 preserve or strip the prefix, but must route the complete browser-visible
 prefix consistently.
 
-The Web package is compiled with its path at build time. The default flake
-package is root-based; for a non-root deployment override it with a Web package
-built with the matching `OD_WEB_BASE_PATH` value, for example by overriding the
+The Web package is compiled with its path at build time. The NixOS and Home
+Manager modules derive their default `webFrontend.package` with the normalized
+`basePath`, so the configuration above is self-contained. If you provide a
+custom `webFrontend.package` (or serve `packages.<system>.web` directly), build
+it with the matching `OD_WEB_BASE_PATH` value, for example by overriding the
 derivation's `env` in a flake overlay. The daemon checks the generated Web
 manifest and fails early when the package and service setting disagree.
 Packaged desktop remains root-path only.

nix/home-manager.nix

@@ -24,6 +24,23 @@
   cfg = config.services.open-design;
   webBasePath = lib.removeSuffix "/" cfg.webFrontend.basePath;
 
+  flakePackages =
+    if flake ? packages.${pkgs.stdenv.hostPlatform.system}
+    then flake.packages.${pkgs.stdenv.hostPlatform.system}
+    else {};
+  defaultWebPackage =
+    flakePackages.web or (throw
+      "open-design: no web package available for ${pkgs.stdenv.hostPlatform.system}; set services.open-design.webFrontend.package explicitly");
+  webPackageForBasePath = basePath:
+    defaultWebPackage.overrideAttrs (old: {
+      env = (old.env or {}) // {
+        OD_WEB_BASE_PATH = lib.removeSuffix "/" basePath;
+      };
+      passthru = (old.passthru or {}) // {
+        webBasePath = lib.removeSuffix "/" basePath;
+      };
+    });
+
   commonOpts = moduleCommon {
     inherit lib pkgs flake;
     defaultDataDir = "${config.home.homeDirectory}/.od";
@@ -189,6 +206,11 @@ in {
 
   config = lib.mkIf cfg.enable (lib.mkMerge [
     {
+      # The flake web output is root-based by default. Derive the module's
+      # default package with the configured browser prefix; an explicit
+      # package override remains authoritative for custom builds.
+      services.open-design.webFrontend.package = lib.mkDefault (webPackageForBasePath cfg.webFrontend.basePath);
+
       home.packages = [cfg.package];
 
       # Ensure the data directory exists ahead of first daemon launch.

nix/nixos.nix

@@ -23,6 +23,23 @@
   cfg = config.services.open-design;
   webBasePath = lib.removeSuffix "/" cfg.webFrontend.basePath;
 
+  flakePackages =
+    if flake ? packages.${pkgs.stdenv.hostPlatform.system}
+    then flake.packages.${pkgs.stdenv.hostPlatform.system}
+    else {};
+  defaultWebPackage =
+    flakePackages.web or (throw
+      "open-design: no web package available for ${pkgs.stdenv.hostPlatform.system}; set services.open-design.webFrontend.package explicitly");
+  webPackageForBasePath = basePath:
+    defaultWebPackage.overrideAttrs (old: {
+      env = (old.env or {}) // {
+        OD_WEB_BASE_PATH = lib.removeSuffix "/" basePath;
+      };
+      passthru = (old.passthru or {}) // {
+        webBasePath = lib.removeSuffix "/" basePath;
+      };
+    });
+
   commonOpts = moduleCommon {
     inherit lib pkgs flake;
     defaultDataDir = "/var/lib/open-design";
@@ -201,6 +218,11 @@ in {
 
   config = lib.mkIf cfg.enable (lib.mkMerge [
     {
+      # The flake web output is root-based by default. Derive the module's
+      # default package with the configured browser prefix; an explicit
+      # package override remains authoritative for custom builds.
+      services.open-design.webFrontend.package = lib.mkDefault (webPackageForBasePath cfg.webFrontend.basePath);
+
       users.users.${cfg.user} = {
         isSystemUser = true;
         group = cfg.group;

nix/package-web.nix

@@ -84,6 +84,7 @@ in
     passthru = {
       inherit nodejs;
       pnpmDeps = finalAttrs.pnpmDeps;
+      inherit webBasePath;
     };
 
     meta = with lib; {