Removed the macOS kernel/ subtree and replaced it with codemarie-new’s native mutation strategy. Summary:

What changed (v1.11.0)
Removed
Entire kernel/ C++ tree (~120 files)
Socket RPC bridge (kernel_bridge_client, progress/cockpit/sonic UX, raw-write router, patch gate)
macOS-only requirements and /dietcode kernel * operator commands
Added (codemarie-new / LUMI strategy)
lib/agent/native_mutation.py — Python port of NativeMutationManager:
status, search, patch, verify, coherence, refresh
Coherence tokens + workspace revision drift detection
State in {workspace}/.dietcode/mutation-state.json
lib/workspace_root.py — project workspace resolution (plugin-tree quarantine only)
lib/runtime/mutation_hooks.py — journals dietcode_kernel patch/verify into JoyZoning
Updated
dietcode_kernel tool — calls native mutation (cross-platform; no socket/binary)
/dietcode mutation status — replaces kernel doctor/cockpit
Docs — architecture.md, README.md, CHANGELOG.md, plugin.yaml
New mutation flow
dietcode_kernel(action='status')     → drift + coherence token
dietcode_kernel(action='patch', …) → governed write + receipt
dietcode_kernel(action='verify', …)  → run verify command
joyzoning lifecycle                  → journal + convergence gates
Verification
make verify passes: roadmap smoke/audit + 115 unit tests (including new tests/test_native_mutation.py).

The tool name stays dietcode_kernel for compatibility with codemarie-new’s DietcodeKernelToolHandler surface — it now means “runtime kernel” (mutation manager), not the macOS binary.

Author: CardSorting

CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## v1.11.0 — Native mutation (remove macOS kernel) (2026-06-17)
+
+Replaces the quarantined macOS `kernel/` subtree and socket bridge with the
+**codemarie-new / LUMI native mutation strategy** (`NativeMutationManager`).
+
+### Highlights
+
+- **Removed** — `kernel/` C++ tree, socket RPC bridge, patch gate, raw-write router, kernel cockpit/progress UX.
+- **Added** — `lib/agent/native_mutation.py` — Python port of coherence tokens, governed patch, verify, drift detection.
+- **`dietcode_kernel` tool** — now calls native mutation (status, search, patch, verify, coherence, refresh).
+- **Workspace** — `lib/workspace_root.py` replaces `kernel_workspace` (plugin-tree quarantine only).
+- **Doctor** — `/dietcode mutation` replaces `/dietcode kernel`.
+
+## v1.10.0 — BroccoliDB v30 distill (2026-06-17)
+
+Distills the rewritten **LUMI / codemarie-new** BroccoliDB substrate into the
+Hermes plugin while preserving Hermes-only infrastructure (RPC worker, kanban hive,
+queue, sharded Config).
+
+### Highlights
+
+- **BroccoliDB v30 core** — capabilities, orchestration runtime, Spider agent toolkit,
+  lifecycle-owned `AgentContext`, frozen `core/public-api.ts`.
+- **Hermes RPC adapter** — `agent_invoke.ts` / `agent_session.ts` map legacy ops onto
+  v30 surfaces (`ctx.graph`, `ctx.query`, `ctx.reasoning`, `ctx.tasks`).
+- **Sharded pool preserved** — plugin `BufferedDbPool` + hive schema kept; v30
+  `start()` / `health()` / `pruneExpiredShadows()` added for lifecycle compat.
+- **Distill script** — `make distill` / `scripts/distill_from_codemarie.sh`
+  (`CODEMARIE_SRC` defaults to `~/Downloads/codemarie-new`).
+
+Run after distill: `cd broccolidb && npm ci && npm run build`.
+
 ## v1.9.4 — Sonic Kernel UX (2026-06-09)
 
 Adds high-tempo kernel cockpit feedback, kinetic watch mode, fast-path indicators,

Makefile

@@ -1,11 +1,12 @@
-.PHONY: help deploy deploy-fast verify test-roadmap install
+.PHONY: help deploy deploy-fast verify test-roadmap install distill
 
 help:
 	@echo "DietCode plugin — common targets"
 	@echo ""
 	@echo "  make deploy       Sync to ~/.hermes, reinstall Hermes, enable, verify"
 	@echo "  make deploy-fast  Sync + verify only (skip Hermes pip reinstall)"
 	@echo "  make verify       Roadmap smoke, audit, operator smoke, and unit tests"
+	@echo "  make distill      Sync broccolidb core from codemarie-new (CODEMARIE_SRC)"
 	@echo "  make install      Run install.py wizard in this checkout"
 	@echo ""
 	@echo "Env: HERMES_SRC, HERMES_VENV, HERMES_HOME, DIETCODE_PLUGIN_SRC"
@@ -16,11 +17,14 @@ deploy:
 deploy-fast:
 	./scripts/hermes_deploy.sh --skip-hermes-reinstall
 
+distill:
+	./scripts/distill_from_codemarie.sh
+
 verify test-roadmap:
 	python3 scripts/roadmap_smoke.py
 	python3 scripts/roadmap_audit.py
 	python3 scripts/roadmap_operator_smoke.py
-	python3 -m unittest tests.test_roadmap_checkpoint tests.test_kernel_cockpit -q
+	python3 -m unittest tests.test_roadmap_checkpoint tests.test_native_mutation -q
 
 install:
 	python3 install.py

README.md

@@ -1,6 +1,6 @@
 # DietCode Hermes Plugin
 
-**v1.9.4 — Sonic Kernel UX**
+**v1.11.0 — Native mutation (LUMI strategy)**
 
 DietCode is a standalone Hermes Agent plugin: one installable directory that gives
 agents **governed mutation**, **repository intelligence**, and **per-project
@@ -9,8 +9,8 @@ long-horizon steering** — without forcing a single runtime path.
 BroccoliDB indexes your repo. JoyZoning owns the mutation lifecycle.
 JSDP plans bounded delivery loops. The **roadmap** tool keeps `ROADMAP.md` as a
 living steering surface unique to *your* project — not the plugin checkout.
-An optional **macOS kernel bridge** adds coherent physical patch and verify when
-you opt in.
+**`dietcode_kernel`** provides native governed patch/verify with coherence tokens
+(same strategy as codemarie-new / LUMI).
 
 ```text
 Point workspace at YOUR project → fingerprint → evidence → ROADMAP.md steering
@@ -25,12 +25,13 @@ DietCode separates three authorities that other setups often collapse:
 
 | Authority | Owner | Question it answers |
 | --- | --- | --- |
-| **Physical mutation** | Kernel bridge (optional) or raw Hermes tools | What changed on disk, with receipts? |
+| **Physical mutation** | `dietcode_kernel` (native) or raw Hermes tools | What changed on disk, with receipts? |
 | **Lifecycle & completion** | JoyZoning + convergence gates | Is this mutation reviewed, verified, converged? |
 | **Long-horizon steering** | Roadmap (`ROADMAP.md`) | What is the project becoming; what matters now? |
 
-Nothing auto-completes kanban. Raw writes stay allowed by default. The kernel
-patch gate is **closed until you enable it**. Roadmap gates can block
+Nothing auto-completes kanban. Raw Hermes writes remain allowed. Governed patches
+use `dietcode_kernel(action='patch')` with coherence tokens when `task_id` is set.
+Roadmap gates can block
 `kanban_complete` when the steering surface is stale, invalid, or unvalidated —
 mirroring how production teams treat architecture docs and CI green before merge.
 
@@ -57,15 +58,16 @@ as production-ready.
 
 **Deep reference:** [docs/roadmap.md](docs/roadmap.md)
 
-### Mutation loop (JoyZoning + optional kernel)
+### Mutation loop (JoyZoning + native runtime)
 
 ```text
 joyzoning(action='context')  → scope, convergence, roadmap brief, next_actions
+dietcode_kernel(action='status') → coherence token when task_id set
 begin → patch → verify → request_review → convergence → kanban_complete (if gates open)
 ```
 
-Kernel-enabled path adds governed RPC patch/verify with coherence receipts and
-progress telemetry (`/dietcode kernel cockpit`, watch, explain-gate).
+Native path: governed patch/verify via `dietcode_kernel` with drift detection and
+`.dietcode/mutation-state.json` (codemarie-new / LUMI strategy).
 
 ---
 
@@ -77,7 +79,7 @@ progress telemetry (`/dietcode kernel cockpit`, watch, explain-gate).
 | **BroccoliDB** | Knowledge graph, audit, refactor, structural analysis, hive sync |
 | **JoyZoning** | Mutation lifecycle, convergence, runtime journal |
 | **JSDP** | Rolling-horizon autonomous delivery helpers |
-| **Kernel bridge** | Optional macOS `dietcode_kernel` patch/verify + raw-write policy |
+| **Native mutation** | `dietcode_kernel` tool — patch, verify, coherence, drift detection |
 | **Hooks** | Session start, pre/post tool call, write transforms, gate enforcement |
 
 ---
@@ -152,13 +154,11 @@ Prime directive: *did the latest work strengthen or weaken the project's center
 
 Decision tree when stuck: [docs/roadmap.md#decision-tree](docs/roadmap.md#decision-tree-which-call-next)
 
-### Kernel (optional, macOS)
+### Native mutation
 
 ```text
-/dietcode kernel cockpit          State, gates, roadmap steering merge
-/dietcode kernel watch --follow   Live operation line
-/dietcode kernel explain-gate     Patch gate diagnostics
-/dietcode kernel progress         Human summary + phase hints
+/dietcode mutation status       Workspace revision, drift, coherence state
+dietcode_kernel(action='status')   Same via tool
 ```
 
 ### Everything else
@@ -178,11 +178,8 @@ Safe defaults are seeded by `install.py`:
 
 ```yaml
 dietcode:
-  kernel:
-    bridge:
-      enabled: true
-      mutations_enabled: false    # opt in to open patch gate
-      raw_write_policy: warn
+  workspace:
+    workspace_root_source: hermes_project
   roadmap:
     enabled: true
     auto_install_skills: true
@@ -191,15 +188,6 @@ dietcode:
     stale_checkpoint_days: 7
 ```
 
-Enable kernel mutation (macOS, after build + socket):
-
-```yaml
-dietcode:
-  kernel:
-    bridge:
-      mutations_enabled: true
-```
-
 Full keys: [docs/roadmap.md#configuration-reference](docs/roadmap.md#configuration-reference) · [docs/dietcode-plugin.md](docs/dietcode-plugin.md)
 
 ---
@@ -212,20 +200,14 @@ Plugin checkout production gate:
 make verify
 ```
 
-Runs roadmap smoke, production audit, operator smoke, and 121 unit tests
-(roadmap + kernel cockpit).
+Runs roadmap smoke, production audit, operator smoke, and unit tests
+(roadmap + native mutation).
 
 Inside Hermes after install:
 
 ```text
 /dietcode doctor
-```
-
-Kernel integration (macOS):
-
-```bash
-make -C kernel kernel && make -C kernel restart-agent-server-fast
-python scripts/kernel_bridge_e2e.py
+/dietcode mutation status
 ```
 
 BroccoliDB:
@@ -257,9 +239,8 @@ make deploy-fast                        # skip Hermes pip reinstall
 - Hermes Agent with plugin support
 - Python (Hermes runtime)
 - Node.js 18+ and npm (`broccolidb/`)
-- **Kernel bridge (optional):** macOS, built `kernel/build/dietcode-kernel`, socket at `~/.dietcode/control.sock`
 
-Linux: full BroccoliDB, JoyZoning, JSDP, and roadmap; kernel bridge degrades gracefully.
+Works on macOS and Linux — native mutation uses Python + git (no macOS binary).
 
 ---
 
@@ -276,14 +257,15 @@ Linux: full BroccoliDB, JoyZoning, JSDP, and roadmap; kernel bridge degrades gra
 │   ├── agent/
 │   │   ├── roadmap/            Fingerprint, evidence, autofill, gates, cockpit
 │   │   ├── joyzoning/          Lifecycle, convergence, JSDP
-│   │   └── kernel_*            Bridge client, progress, cockpit
-│   ├── runtime/                roadmap_hooks, joyzoning_hooks, kernel_hooks
+│   │   ├── native_mutation.py  Governed patch, verify, coherence tokens
+│   │   └── joyzoning/          Lifecycle, convergence, JSDP
+│   ├── workspace_root.py       Project workspace resolution
+│   ├── runtime/                roadmap_hooks, joyzoning_hooks, mutation_hooks
 │   └── tools/                  roadmap, dietcode_kernel, broccolidb, joyzoning
 ├── optional-skills/dietcode/auto-rolling-roadmap/   ROADMAP skill (auto-installed)
-├── kernel/                     Quarantined macOS kernel subtree
 ├── broccolidb/                 Bundled TypeScript package
-├── scripts/                    Deploy, audit, smoke, kernel e2e
-├── tests/                      Roadmap + kernel cockpit unit tests
+├── scripts/                    Deploy, audit, smoke
+├── tests/                      Roadmap + native mutation unit tests
 └── docs/                       Operator and developer documentation
 ```
 
@@ -292,7 +274,8 @@ Workspace artifacts (in **your** project, not the plugin):
 ```text
 /path/to/your/project/
 ├── ROADMAP.md                  Living steering surface (12-section contract)
-└── .dietcode/roadmap-state.json   Validate/checkpoint memory
+├── .dietcode/roadmap-state.json   Validate/checkpoint memory
+└── .dietcode/mutation-state.json  Native mutation coherence state
 ```
 
 ---
@@ -304,12 +287,9 @@ Workspace artifacts (in **your** project, not the plugin):
 | **Roadmap steering (read first for agents)** | [docs/roadmap.md](docs/roadmap.md) |
 | Install, config, workflow | [docs/dietcode-plugin.md](docs/dietcode-plugin.md) |
 | Hook wiring, authority split | [docs/architecture.md](docs/architecture.md) |
-| Kernel bridge operations | [docs/kernel-bridge-operations.md](docs/kernel-bridge-operations.md) |
 | Slash commands + tools | [docs/tools-reference.md](docs/tools-reference.md) |
-| Kernel + roadmap operator UX | [docs/agent-ergonomics.md](docs/agent-ergonomics.md) |
 | BroccoliDB runtime | [docs/broccolidb.md](docs/broccolidb.md) |
 | Doc index | [docs/README.md](docs/README.md) |
-| Kernel build + RPC | [kernel/README.md](kernel/README.md) |
 | Release history | [CHANGELOG.md](CHANGELOG.md) |
 
 Agent skill (installed to workspace):  

audit.py

@@ -96,10 +96,10 @@
     "lib/agent/roadmap/gate.py",
     "lib/agent/roadmap/skill_install.py",
     "optional-skills/dietcode/auto-rolling-roadmap/SKILL.md",
-    "lib/runtime/kernel_hooks.py",
+    "lib/runtime/mutation_hooks.py",
+    "lib/agent/native_mutation.py",
+    "lib/workspace_root.py",
     "lib/agent/kernel_receipt_journal.py",
-    "lib/agent/kernel_raw_write_router.py",
-    "lib/agent/kernel_verify_bridge.py",
     "lib/agent/kernel_verify_journal.py",
     "slash_commands.py",
     "lib/tools/broccolidb.py",

broccolidb/.broccolidb/paste_store/cc/ccca685709aa9e68d44ebb8e4aa02743fbf0c32b65ab5ac93ab6b1fd3d7ec7aa

@@ -0,0 +1 @@
+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

broccolidb/.broccolidb/tasks/old-task.output

@@ -0,0 +1 @@
+old content

broccolidb/.gitignore

@@ -26,11 +26,3 @@ env/
 
 # Snapshots
 .spider/snapshots/
-
-# BroccoliDB
-broccolidb.db
-broccolidb.db-wal
-broccolidb.db-shm
-.broccolidb/
-broccolidb-failed-flush-*.json
-scratch/

broccolidb/API_STABILITY.md

@@ -0,0 +1,72 @@
+# API stability policy (v30)
+
+## Stable (semver)
+
+Exported from `broccolidb/core/public-api.ts` and documented in `docs/public-api.md`.
+
+Includes:
+
+- `AgentContext` lifecycle and capability getters
+- `OrchestrationRuntime` operator methods
+- Public error types and `GuidedError`
+- Capability and intent **types**
+- `Workspace`, `Connection` for bootstrap scripts
+
+**Guarantee:** Minor versions add backward-compatible APIs only. Patch versions fix bugs without signature changes.
+
+## Internal
+
+Everything under `broccolidb/core/**` not listed in `public-api.ts`:
+
+- Services (`SpiderService`, `GraphService`, …)
+- Orchestration internals (`MutationPlanner`, `RuntimeGraphStore`, …)
+- MCP server implementation
+- Infrastructure (`BufferedDbPool`, …)
+
+May change in any release without notice.
+
+## Deprecated for removal
+
+Documented only in `MIGRATION.md`. No new usage.
+
+- Direct `ServiceContext` mutation
+- Compatibility bridge exceptions without `deletionDate`
+- Public experimental names (sovereign, vitality, oracle in user-facing strings)
+
+## Forbidden patterns
+
+| Pattern | Why |
+|---------|-----|
+| Capabilities before `start()` | Lifecycle violation |
+| `SpiderService` on AgentContext | Bypasses capability tracing |
+| Spider mutating during audit | Forensic integrity |
+| Undocumented public `any` | Type safety |
+| Examples bypassing capabilities | Teaches misuse |
+
+## Required lifecycle
+
+```typescript
+await ctx.start();
+try { /* work */ } finally { await ctx.stop(); }
+```
+
+## Supported runtime modes
+
+`development` | `ci` | `production` | `readonly` | `recovery` | `forensic`
+
+Approval policies (separate from mode): `readonly` | `autonomous_safe` | `human_approval_required` | `ci_gate_only` | `recovery_mode` | `production_locked`
+
+## Verification
+
+- `tests/public-api-snapshot.test.ts` — export allowlist
+- `tests/no-experimental-public-names.test.ts` — naming guard
+- `tests/examples-smoke.test.ts` — golden paths execute
+- `npm run build` — types compile
+
+## Change process
+
+1. Update `public-api.ts`
+2. Update `docs/public-api.md` and this file
+3. Update `public-api-snapshot.test.ts` allowlist
+4. Add/adjust tests
+5. Entry in `CHANGELOG.md`