@ryubyte/dsh-a2a 0.1.4 → 0.1.5

package/README.en.md

@@ -32,7 +32,8 @@ It turns a DSH instance into a full A2A peer in both directions:
 Configuration is driven by **`a2a.json`** (per profile, UI-editable) — manage
 agents without touching the composition. The file is resolved from the active
 profile, not the launch directory: the plugin parses `--profile <name>` from
-the process command line and reads/writes `~/.dsh/profiles/<name>/a2a.json`.
+the process command line (the `dsh web` alias is recognized as the `web`
+profile too) and reads/writes `~/.dsh/profiles/<name>/a2a.json`.
 
 ## Screenshots
 
@@ -232,7 +233,10 @@ const server = new A2AServer({
   that half; nothing crashes.
 - **`baseUrl` is optional in server mode**: when omitted the AgentCard
   advertises the webserver's real listen address, so ephemeral ports never
-  publish a stale URL. Set it explicitly only when a reverse proxy fronts the
+  publish a stale URL. When bound to `127.0.0.1` that loopback address is
+  advertised; when bound to `0.0.0.0` the plugin derives the machine's LAN
+  address (reachable by remote Agents), falling back to `127.0.0.1` only when
+  none exists. Set it explicitly only when a reverse proxy fronts the
   instance.
 - Client-mode connection lifecycle hooks (`onReady` / `onDispose`) feed a
   **process-wide shared registry**; multiple instances (client + server) share

package/README.md

@@ -29,7 +29,7 @@
 
 ### 运行时配置（a2a.json）
 
-配置以 **`a2a.json`（按 profile 存放，UI 可编辑）为准**，无需改动组合配置即可管理 Agent。文件定位不依赖启动目录：插件解析进程命令行里的 `--profile <name>`，读写 `~/.dsh/profiles/<name>/a2a.json`。
+配置以 **`a2a.json`（按 profile 存放，UI 可编辑）为准**，无需改动组合配置即可管理 Agent。文件定位不依赖启动目录：插件解析进程命令行里的 `--profile <name>`（`dsh web` 别名同样识别为 `web` profile），读写 `~/.dsh/profiles/<name>/a2a.json`。
 
 ## 截图
 
@@ -192,7 +192,7 @@ const server = new A2AServer({
 ## 工作原理
 
 - 插件在 `ctx.inject(...)` / `ctx.effect(...)` 内读取 `ctx.webServer` 与 `ctx.tools`（原生 Cordis 模式，与 `dsh-client-hmr` 等 bundle 一致）；缺少任一半的组合只会闲置该半区，不会崩溃。
-- **server 模式 `baseUrl` 可选**：省略时 AgentCard 公布 webServer 的真实监听地址，临时端口不会发布过期 URL；仅在反向代理前置时才需显式设置。
+- **server 模式 `baseUrl` 可选**：省略时 AgentCard 公布 webServer 的真实监听地址，临时端口不会发布过期 URL。绑定 `127.0.0.1` 时公布该回环地址；绑定 `0.0.0.0` 时自动推导本机 LAN 地址（供远程 Agent 可达），无法推导才退回 `127.0.0.1`。仅在反向代理前置时才需显式设置。
 - 客户端模式的连接生命周期钩子（`onReady` / `onDispose`）上报到**进程级共享注册表**；多个实例（client + server）共用，`/a2a/api` 每个进程注册一次。
 - 所有注册 fiber 作用域化：插件停止 / 更新时由 Cordis 自动清理。
 - 禁用（`enabled:false`）的 Agent 显示为灰化占位卡，**不自动连接**，直到重新启用。

package/lib/index.js

@@ -1,6 +1,6 @@
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { homedir, networkInterfaces } from "node:os";
 import { dirname, join } from "node:path";
-import { homedir } from "node:os";
 //#region src/protocol.ts
 /**
 * A2A (Agent2Agent) Protocol v1.0 — TypeScript type definitions.
@@ -1479,6 +1479,30 @@ function profileNameFromArgv() {
 	}
 }
 /**
+* Best-effort profile-name fallback for launchers that resolve a profile
+* WITHOUT writing `--profile` back into argv.
+*
+* The dsh `web` subcommand is a hardcoded alias for `--profile web`: the
+* launcher resolves the name internally and boots the web profile, but the
+* process argv keeps the original tokens (`node …/dsh web [flags]`) — there
+* is no `--profile` flag and no environment variable naming the profile. So
+* when {@link profileNameFromArgv} finds nothing, check whether the first
+* non-flag token after argv[0] is a known dsh subcommand alias:
+*
+*   - `web`            → boot profile `web` (alias, never followed by a name)
+*   - `--profile <n>`  → already handled above
+*   - anything else    → unknown/not a profile alias (e.g. `plugin`, which
+*                        is a management mode, not a boot; returns undefined)
+*
+* Returns undefined when argv carries no recognizable alias, letting the
+* caller fall through to the cwd-based resolution steps.
+*/
+function profileNameFromDshAlias() {
+	const argv = process.argv ?? [];
+	if (argv.includes("--profile") || argv.some((a) => a.startsWith("--profile="))) return void 0;
+	if (argv[2] === "web") return "web";
+}
+/**
 * Resolve the a2a.json path for the current process, without depending on
 * the launch directory. The plugin must work no matter where `dsh` was
 * started from (dsh does NOT chdir into the profile directory), so this
@@ -1488,7 +1512,9 @@ function profileNameFromArgv() {
 *
 * Order:
 *   0. `$DSH_HOME/profiles/<argv --profile>/a2a.json` — the active profile
-*      as named on the command line (most authoritative; works from ANY cwd)
+*      as named on the command line (most authoritative; works from ANY cwd).
+*      Also matches the `dsh web` alias, which boots profile `web` without
+*      writing `--profile` into argv.
 *   1. `cwd/a2a.json` — explicit when launched inside a profile dir
 *   2. outward from cwd: the nearest ancestor holding `a2a.json` — covers
 *      launching from e.g. a repo checkout whose parent chain includes the
@@ -1506,7 +1532,7 @@ function resolveConfigPath() {
 	const cwd = process.cwd();
 	const home = process.env.DSH_HOME ?? join(homedir(), ".dsh");
 	const base = cwd.split(/[\\/]/).pop() ?? "";
-	const profileName = profileNameFromArgv();
+	const profileName = profileNameFromArgv() ?? profileNameFromDshAlias();
 	if (profileName && profileName !== "." && profileName !== ".." && !profileName.includes("/") && !profileName.includes("\\")) {
 		const argvFile = join(home, "profiles", profileName, A2A_CONFIG_FILENAME);
 		if (existsSync(argvFile)) return argvFile;
@@ -2015,7 +2041,7 @@ function apply(ctx, config = {}) {
 		ctx.inject(["webServer"], (ctx) => {
 			ctx.effect(() => {
 				const webServer = ctx.webServer;
-				const baseUrl = mergedConfig.baseUrl ?? `http://${webServer.host === "0.0.0.0" ? "127.0.0.1" : webServer.host}:${webServer.port}`;
+				const baseUrl = mergedConfig.baseUrl ?? inferBaseUrl(webServer.host, webServer.port);
 				const endpointPath = mergedConfig.endpointPath ?? DEFAULT_ENDPOINT;
 				let execute = mergedConfig.execute;
 				let executorKind = execute ? "custom" : "none";
@@ -2281,6 +2307,57 @@ function inboundSessionCwd(configPath) {
 		return process.cwd();
 	}
 }
+/**
+* Derive the public base URL advertised in the AgentCard from the real wire
+* listen address, when the operator did not pin `baseUrl` in config.
+*
+* The A2A AgentCard must carry a URL a REMOTE caller can reach. When the web
+* server binds only loopback (`127.0.0.1`), that address is correct. But when
+* it binds every interface (`0.0.0.0`), advertising `127.0.0.1` is wrong for
+* every non-local caller — it points at the caller's own loopback. In that
+* case pick the machine's best-known LAN address (the primary non-loopback
+* IPv4 of the interface that routes to the default gateway), and only fall
+* back to loopback when no such address exists. IPv6 link-local is skipped
+* (not reachable without a scope id).
+*
+* @param host - the web server's configured bind host ('127.0.0.1' | '0.0.0.0').
+* @param port - the OS-assigned (or configured) listen port.
+* @returns a scheme+host+port URL for Agents to call back into this DSH.
+*/
+function inferBaseUrl(host, port) {
+	return `http://${host === "0.0.0.0" ? primaryLanAddress() ?? "127.0.0.1" : host || "127.0.0.1"}:${port}`;
+}
+/**
+* Best single LAN IPv4 for this machine: the address of the non-loopback
+* interface whose route reaches the default gateway (the address a remote
+* peer on the same subnet would use to reach us). Returns undefined when the
+* machine has no non-loopback IPv4 (e.g. offline / containers).
+*
+* Prefers IPv4 (A2A URLs here are v4-style), skips link-local (169.254.0.0/16)
+* and CGNAT (100.64.0.0/10) ranges, which are useless to advertise.
+*/
+function primaryLanAddress() {
+	try {
+		const ifaces = networkInterfaces();
+		let candidate;
+		for (const name of Object.keys(ifaces)) {
+			const addrs = ifaces[name] ?? [];
+			for (const a of addrs) {
+				if (a.family !== "IPv4" || a.internal) continue;
+				const ip = a.address;
+				if (ip.startsWith("169.254.")) continue;
+				const first = Number(ip.split(".")[0]);
+				const second = Number(ip.split(".")[1]);
+				if (first === 100 && second >= 64 && second <= 127) continue;
+				if (!candidate) candidate = ip;
+				if (name === "en0" || name === "eth0" || name === "ens3" || name === "ens5") return ip;
+			}
+		}
+		return candidate;
+	} catch {
+		return;
+	}
+}
 /** Drain the request body from a Node IncomingMessage. */
 async function readBody(req) {
 	return new Promise((resolve, reject) => {
@@ -2321,4 +2398,4 @@ function toServerReq(req) {
 	};
 }
 //#endregion
-export { A2AClient, A2AError, A2AServer, A2A_ERROR_CODES, A2A_METHODS, DashboardRegistry, Role, TaskState, TaskStore, apply, createDshAgentExecutor, defaultExecutor, defaultSkills, fetchAgentCard, getSharedRegistry, inject, isTerminal, name, notConfiguredExecutor, registerAgentTools, shellExecutor };
+export { A2AClient, A2AError, A2AServer, A2A_ERROR_CODES, A2A_METHODS, DashboardRegistry, Role, TaskState, TaskStore, apply, createDshAgentExecutor, defaultExecutor, defaultSkills, fetchAgentCard, getSharedRegistry, inferBaseUrl, inject, isTerminal, name, notConfiguredExecutor, registerAgentTools, shellExecutor };

package/lib/types/a2a-config.d.ts

@@ -68,6 +68,26 @@ export interface PersistedA2AConfig {
  * guessing from cwd's basename.
  */
 export declare function profileNameFromArgv(): string | undefined;
+/**
+ * Best-effort profile-name fallback for launchers that resolve a profile
+ * WITHOUT writing `--profile` back into argv.
+ *
+ * The dsh `web` subcommand is a hardcoded alias for `--profile web`: the
+ * launcher resolves the name internally and boots the web profile, but the
+ * process argv keeps the original tokens (`node …/dsh web [flags]`) — there
+ * is no `--profile` flag and no environment variable naming the profile. So
+ * when {@link profileNameFromArgv} finds nothing, check whether the first
+ * non-flag token after argv[0] is a known dsh subcommand alias:
+ *
+ *   - `web`            → boot profile `web` (alias, never followed by a name)
+ *   - `--profile <n>`  → already handled above
+ *   - anything else    → unknown/not a profile alias (e.g. `plugin`, which
+ *                        is a management mode, not a boot; returns undefined)
+ *
+ * Returns undefined when argv carries no recognizable alias, letting the
+ * caller fall through to the cwd-based resolution steps.
+ */
+export declare function profileNameFromDshAlias(): string | undefined;
 /**
  * Resolve the a2a.json path for the current process, without depending on
  * the launch directory. The plugin must work no matter where `dsh` was
@@ -78,7 +98,9 @@ export declare function profileNameFromArgv(): string | undefined;
  *
  * Order:
  *   0. `$DSH_HOME/profiles/<argv --profile>/a2a.json` — the active profile
- *      as named on the command line (most authoritative; works from ANY cwd)
+ *      as named on the command line (most authoritative; works from ANY cwd).
+ *      Also matches the `dsh web` alias, which boots profile `web` without
+ *      writing `--profile` into argv.
  *   1. `cwd/a2a.json` — explicit when launched inside a profile dir
  *   2. outward from cwd: the nearest ancestor holding `a2a.json` — covers
  *      launching from e.g. a repo checkout whose parent chain includes the

package/lib/types/a2a-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"a2a-config.d.ts","sourceRoot":"","sources":["../../src/a2a-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAaxD;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAqC1C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,kBAAkB,CAW/C;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAatG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,GAAG,eAAe,CAmBpG"}
+{"version":3,"file":"a2a-config.d.ts","sourceRoot":"","sources":["../../src/a2a-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAElD,eAAO,MAAM,mBAAmB,aAAa,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,qBAAqB;IACpC,0DAA0D;IAC1D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;CACzG;AAED,MAAM,WAAW,kBAAkB;IACjC,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IACpC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,oBAAoB,EAAE,CAAC;IAChC,MAAM,CAAC,EAAE,qBAAqB,CAAC;IAC/B,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,GAAG,SAAS,CAaxD;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,uBAAuB,IAAI,MAAM,GAAG,SAAS,CAW5D;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAuC1C;AAED,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,kBAAkB,CAW/C;AAED,iFAAiF;AACjF,wBAAgB,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAatG;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,eAAe,EAAE,SAAS,EAAE,kBAAkB,GAAG,eAAe,CAmBpG"}

package/lib/types/index.d.ts

@@ -125,4 +125,22 @@ export declare const name = "a2a";
  */
 export declare const inject: readonly ["webServer", "tools"];
 export declare function apply(ctx: Context, config?: A2APluginConfig): void;
+/**
+ * Derive the public base URL advertised in the AgentCard from the real wire
+ * listen address, when the operator did not pin `baseUrl` in config.
+ *
+ * The A2A AgentCard must carry a URL a REMOTE caller can reach. When the web
+ * server binds only loopback (`127.0.0.1`), that address is correct. But when
+ * it binds every interface (`0.0.0.0`), advertising `127.0.0.1` is wrong for
+ * every non-local caller — it points at the caller's own loopback. In that
+ * case pick the machine's best-known LAN address (the primary non-loopback
+ * IPv4 of the interface that routes to the default gateway), and only fall
+ * back to loopback when no such address exists. IPv6 link-local is skipped
+ * (not reachable without a scope id).
+ *
+ * @param host - the web server's configured bind host ('127.0.0.1' | '0.0.0.0').
+ * @param port - the OS-assigned (or configured) listen port.
+ * @returns a scheme+host+port URL for Agents to call back into this DSH.
+ */
+export declare function inferBaseUrl(host: string, port: number): string;
 //# sourceMappingURL=index.d.ts.map

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAKjE,OAAO,EAAa,KAAK,aAAa,EAA0B,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAY5G,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAEpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACjJ,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,YAAY,EACV,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9E,GAAG,MAAM,IAAI,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,IAAI;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAClD;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,mDAAmD;QACnD,SAAS,EAAE,gBAAgB,CAAC;QAC5B,mEAAmE;QACnE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;QAC7C,6DAA6D;QAC7D,YAAY,CAAC,EAAE,mBAAmB,CAAC;QACnC,0CAA0C;QAC1C,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,IAAI,CAAA;SAAE,CAAC;QAC9C;;;;;WAKG;QACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC5B;CACF;AAQD,eAAO,MAAM,IAAI,QAAQ,CAAC;AAE1B;;;;;GAKG;AACH,eAAO,MAAM,MAAM,iCAAkC,CAAC;AAEtD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,QA0jB/D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAMjE,OAAO,EAAa,KAAK,aAAa,EAA0B,KAAK,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAY5G,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,QAAQ,GAAG,QAAQ,GAAG,MAAM,CAAC;IAEpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,OAAO,CAAC;IAEpB,8DAA8D;IAC9D,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;IACnC,yEAAyE;IACzE,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,eAAe,EAAE,qBAAqB,EAAE,aAAa,EAAE,aAAa,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AACjJ,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,aAAa,CAAC;AAChG,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACtE,YAAY,EACV,iBAAiB,EACjB,WAAW,EACX,aAAa,EACb,aAAa,GACd,MAAM,gBAAgB,CAAC;AAExB;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB;IAC/B,mDAAmD;IACnD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;QACzB,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAC9E,GAAG,MAAM,IAAI,CAAC;CAChB;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,wBAAwB;IACvC,gBAAgB,IAAI;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,eAAe,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrF;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;CAClD;AAED,OAAO,QAAQ,qBAAqB,CAAC;IACnC,UAAU,OAAO;QACf,mDAAmD;QACnD,SAAS,EAAE,gBAAgB,CAAC;QAC5B,mEAAmE;QACnE,iBAAiB,CAAC,EAAE,wBAAwB,CAAC;QAC7C,6DAA6D;QAC7D,YAAY,CAAC,EAAE,mBAAmB,CAAC;QACnC,0CAA0C;QAC1C,KAAK,EAAE;YAAE,QAAQ,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,IAAI,CAAA;SAAE,CAAC;QAC9C;;;;;WAKG;QACH,MAAM,CAAC,EAAE,iBAAiB,CAAC;KAC5B;CACF;AAQD,eAAO,MAAM,IAAI,QAAQ,CAAC;AAE1B;;;;;GAKG;AACH,eAAO,MAAM,MAAM,iCAAkC,CAAC;AAEtD,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,eAAoB,QAyjB/D;AA2FD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAM/D"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@ryubyte/dsh-a2a",
   "description": "Agent2Agent (A2A) protocol v1.0 plugin for DeepSeek Harness (DSH): outbound client (remote AgentCard skills as ctx.tools), inbound server (A2A JSON-RPC + AgentCard endpoint), and a settings dashboard of live A2A connections",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "type": "module",
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",

package/src/a2a-config.ts

@@ -85,6 +85,38 @@ export function profileNameFromArgv(): string | undefined {
   return undefined;
 }
 
+/**
+ * Best-effort profile-name fallback for launchers that resolve a profile
+ * WITHOUT writing `--profile` back into argv.
+ *
+ * The dsh `web` subcommand is a hardcoded alias for `--profile web`: the
+ * launcher resolves the name internally and boots the web profile, but the
+ * process argv keeps the original tokens (`node …/dsh web [flags]`) — there
+ * is no `--profile` flag and no environment variable naming the profile. So
+ * when {@link profileNameFromArgv} finds nothing, check whether the first
+ * non-flag token after argv[0] is a known dsh subcommand alias:
+ *
+ *   - `web`            → boot profile `web` (alias, never followed by a name)
+ *   - `--profile <n>`  → already handled above
+ *   - anything else    → unknown/not a profile alias (e.g. `plugin`, which
+ *                        is a management mode, not a boot; returns undefined)
+ *
+ * Returns undefined when argv carries no recognizable alias, letting the
+ * caller fall through to the cwd-based resolution steps.
+ */
+export function profileNameFromDshAlias(): string | undefined {
+  const argv = process.argv ?? [];
+  // Only the `dsh <subcommand>` alias form counts: when a `--profile` flag is
+  // present, the flag parser owns the name and this fallback must yield.
+  if (argv.includes('--profile') || argv.some((a) => a.startsWith('--profile='))) return undefined;
+  // `dsh web …` puts the subcommand at argv[2] (argv[0]=node, argv[1]=script).
+  // The dsh launcher rejects parent flags before a subcommand, so the alias
+  // must be the FIRST user token — a later `web` is an app argument, not a
+  // profile alias.
+  if (argv[2] === 'web') return 'web';
+  return undefined;
+}
+
 /**
  * Resolve the a2a.json path for the current process, without depending on
  * the launch directory. The plugin must work no matter where `dsh` was
@@ -95,7 +127,9 @@ export function profileNameFromArgv(): string | undefined {
  *
  * Order:
  *   0. `$DSH_HOME/profiles/<argv --profile>/a2a.json` — the active profile
- *      as named on the command line (most authoritative; works from ANY cwd)
+ *      as named on the command line (most authoritative; works from ANY cwd).
+ *      Also matches the `dsh web` alias, which boots profile `web` without
+ *      writing `--profile` into argv.
  *   1. `cwd/a2a.json` — explicit when launched inside a profile dir
  *   2. outward from cwd: the nearest ancestor holding `a2a.json` — covers
  *      launching from e.g. a repo checkout whose parent chain includes the
@@ -114,8 +148,10 @@ export function resolveConfigPath(): string {
   const home = process.env.DSH_HOME ?? join(homedir(), '.dsh');
   const base = cwd.split(/[\\/]/).pop() ?? '';
 
-  // 0. Active profile from argv — authoritative regardless of cwd.
-  const profileName = profileNameFromArgv();
+  // 0. Active profile from argv — authoritative regardless of cwd. Also
+  //    handles the `dsh web` alias, which boots profile `web` without putting
+  //    `--profile` in argv.
+  const profileName = profileNameFromArgv() ?? profileNameFromDshAlias();
   if (profileName && profileName !== '.' && profileName !== '..' && !profileName.includes('/') && !profileName.includes('\\')) {
     const argvFile = join(home, 'profiles', profileName, A2A_CONFIG_FILENAME);
     if (existsSync(argvFile)) return argvFile;

package/src/index.ts

@@ -24,6 +24,7 @@
 import type { Context } from '@deepseek-ai/cordis';
 import type { IncomingMessage, ServerResponse } from 'node:http';
 import { mkdirSync } from 'node:fs';
+import { networkInterfaces } from 'node:os';
 import { dirname, join } from 'node:path';
 import { registerAgentTools } from './outbound.js';
 import { fetchAgentCard, pickInterface } from './card.js';
@@ -508,10 +509,9 @@ export function apply(ctx: Context, config: A2APluginConfig = {}) {
       ctx.effect(() => {
         const webServer = ctx.webServer;
         // Derive the advertised base URL from the real listen address when the
-        // config doesn't pin one; avoids advertising a stale port.
-        const baseUrl =
-          mergedConfig.baseUrl ??
-          `http://${webServer.host === '0.0.0.0' ? '127.0.0.1' : webServer.host}:${webServer.port}`;
+        // config doesn't pin one; avoids advertising a stale port. When bound
+        // to 0.0.0.0, advertise a reachable LAN address, not loopback.
+        const baseUrl = mergedConfig.baseUrl ?? inferBaseUrl(webServer.host, webServer.port);
         const endpointPath = mergedConfig.endpointPath ?? DEFAULT_ENDPOINT;
 
         // ── executor precedence ───────────────────────────────────────────────
@@ -817,6 +817,66 @@ function inboundSessionCwd(configPath: string): string {
   }
 }
 
+/**
+ * Derive the public base URL advertised in the AgentCard from the real wire
+ * listen address, when the operator did not pin `baseUrl` in config.
+ *
+ * The A2A AgentCard must carry a URL a REMOTE caller can reach. When the web
+ * server binds only loopback (`127.0.0.1`), that address is correct. But when
+ * it binds every interface (`0.0.0.0`), advertising `127.0.0.1` is wrong for
+ * every non-local caller — it points at the caller's own loopback. In that
+ * case pick the machine's best-known LAN address (the primary non-loopback
+ * IPv4 of the interface that routes to the default gateway), and only fall
+ * back to loopback when no such address exists. IPv6 link-local is skipped
+ * (not reachable without a scope id).
+ *
+ * @param host - the web server's configured bind host ('127.0.0.1' | '0.0.0.0').
+ * @param port - the OS-assigned (or configured) listen port.
+ * @returns a scheme+host+port URL for Agents to call back into this DSH.
+ */
+export function inferBaseUrl(host: string, port: number): string {
+  const hostname =
+    host === '0.0.0.0'
+      ? primaryLanAddress() ?? '127.0.0.1'
+      : host || '127.0.0.1';
+  return `http://${hostname}:${port}`;
+}
+
+/**
+ * Best single LAN IPv4 for this machine: the address of the non-loopback
+ * interface whose route reaches the default gateway (the address a remote
+ * peer on the same subnet would use to reach us). Returns undefined when the
+ * machine has no non-loopback IPv4 (e.g. offline / containers).
+ *
+ * Prefers IPv4 (A2A URLs here are v4-style), skips link-local (169.254.0.0/16)
+ * and CGNAT (100.64.0.0/10) ranges, which are useless to advertise.
+ */
+function primaryLanAddress(): string | undefined {
+  try {
+    const ifaces = networkInterfaces();
+    let candidate: string | undefined;
+    for (const name of Object.keys(ifaces)) {
+      const addrs = ifaces[name] ?? [];
+      for (const a of addrs) {
+        if (a.family !== 'IPv4' || a.internal) continue;
+        const ip = a.address;
+        if (ip.startsWith('169.254.')) continue;
+        const first = Number(ip.split('.')[0]);
+        const second = Number(ip.split('.')[1]);
+        // CGNAT 100.64.0.0/10: first octet 100, second in [64..127]. The rest
+        // of 100.x.y.z is ordinary public space — keep it.
+        if (first === 100 && second >= 64 && second <= 127) continue;
+        if (!candidate) candidate = ip;
+        // Prefer addresses that match a default-route interface if visible.
+        if (name === 'en0' || name === 'eth0' || name === 'ens3' || name === 'ens5') return ip;
+      }
+    }
+    return candidate;
+  } catch {
+    return undefined;
+  }
+}
+
 /** Drain the request body from a Node IncomingMessage. */
 async function readBody(req: IncomingMessage): Promise<string> {
   return new Promise<string>((resolve, reject) => {