super-dsh 0.1.10-e → 0.1.11-a

package/agent-codex-sdk/dist/codex-sdk-launch.js

@@ -1,41 +1,4 @@
-/**
- * codex-sdk-launch.ts — how a provider reaches the in-process Codex SDK
- * (2026-10-04 multi-provider rework).
- *
- * This is the SDK half of `agent-codex/codex-launch.ts`. That module turns a
- * provider into argv for a `codex app-server` child; this one turns the same
- * provider into the structured object the SDK's `CodexOptions.config` takes —
- * and underneath they are the same mechanism. The SDK's own type docs say it
- * "flatten[s] it into dotted paths and serialize[s] values as TOML literals so
- * they are compatible with the CLI's `--config` parsing", which is exactly the
- * `--config key=value` channel the app-server line drives by hand. A provider
- * therefore costs nothing on disk on this path either, and is scoped to the
- * process that builds the config, which is what a per-session provider choice
- * needs.
- *
- * The one transport difference is env. A spawned app-server child inherits the
- * process environment, so `codex-launch.ts` hands back ADDITIONS and its caller
- * spreads them (`env: { ...process.env, ...launch.env }`). The SDK's `env` is
- * REPLACE semantics — "When provided, the SDK will not inherit variables from
- * `process.env`" — so the caller must spread the same way before constructing
- * `Codex`. This module still hands back additions only: composing the full map
- * belongs to the caller, and keeping the addition set small is what makes the
- * synthetic-key branch legible in tests.
- *
- * The measured constraints `codex-launch.ts` encodes carry over unchanged (see
- * `docs/test-reports/2026-10-03-codex-provider-model-switch-probe.md`):
- *
- *  - a HYPHENATED id is fine in a dotted path (`model_providers.zhipu-cn.…`),
- *    so native table names survive verbatim as provider ids;
- *  - `model_catalog_json` is resolved against the process CWD when it arrives
- *    as an override, so the path is always absolute;
- *  - `env_key` is the one auth shape that never consults the auth manager, so a
- *    stored API key rides the child's environment under a synthetic variable
- *    name. That is also what makes a keyed provider usable behind a ChatGPT
- *    login, where `requires_openai_auth` is silently shadowed.
- *
- * @module agent-codex-sdk/codex-sdk-launch
- */
+import { officialCatalogForLaunch } from "./codex-oauth.js";
 import { writeProviderCatalog } from "./codex-native-config.js";
 /** The environment variable prefix for a key this adapter injects itself. */
 const SYNTHETIC_KEY_PREFIX = "SUPERD_CODEX_KEY_";
@@ -54,6 +17,10 @@ export function syntheticKeyName(providerId) {
  * @returns the structured config, the environment additions, and the provider id they pin.
  */
 export function providerSdkLaunch(worldHome, codexHome, provider) {
+    if (provider.kind === "openai-oauth") {
+        const catalog = officialCatalogForLaunch(codexHome);
+        return { config: { model_provider: "openai", openai_base_url: "", ...(catalog === undefined ? {} : { model_catalog_json: catalog }) }, env: {}, providerId: "openai" };
+    }
     // The SDK serializes these values as TOML literals itself, so unlike the argv
     // line there is no hand-quoting here: a bare object is the whole override.
     const table = {

package/agent-codex-sdk/dist/index.js

@@ -1,3 +1,4 @@
+import { OPENAI_OAUTH_ID, readEffectiveProviderStore } from "./codex-oauth.js";
 /**
  * agent-codex provider — Codex provider plugin for DeepSeek Harness
  * (Super D, SDK line).
@@ -30,7 +31,6 @@ import { CodexLlmAdapter, routeIds } from "./adapter.js";
 import { registerCodexPreset } from "./agent-preset-codex.js";
 import { readRolloutHead, resolveCodexHome } from "./codex-store.js";
 import { CodexResumeError, sessionRecord, upsertSession } from "./session-map.js";
-import { readProviderStore } from "./codex-providers.js";
 import { readNativeSelection } from "./codex-native-config.js";
 import { CodexProvidersGateway, syncFromNative } from "./codex-provider-gateway.js";
 import { seedRoute } from "./codex-route.js";
@@ -157,12 +157,12 @@ export class CodexProvider extends Service {
      */
     syncNow() {
         try {
-            const { store, added, updated } = syncFromNative(this.home, resolveCodexHome());
+            const { added, updated } = syncFromNative(this.home, resolveCodexHome());
             if (added.length > 0 || updated.length > 0) {
                 this.runtime.ctx.logger.info(`codex-provider: config.toml sync — added ${added.join(", ") || "none"}, refreshed ${updated.join(", ") || "none"}`);
             }
             this.syncedAt = Date.now();
-            this.#applyRoutes(store.providers);
+            this.#applyRoutes(readEffectiveProviderStore(this.home, resolveCodexHome()).providers);
         }
         catch (error) {
             this.runtime.ctx.logger.warn(`codex-provider: provider sync failed: ${String(error)}`);
@@ -171,7 +171,7 @@ export class CodexProvider extends Service {
     /** Re-register the `ctx.llm` routes from the current store (panel mutation path). */
     refreshRoutes() {
         try {
-            this.#applyRoutes(readProviderStore(this.home).providers);
+            this.#applyRoutes(readEffectiveProviderStore(this.home, resolveCodexHome()).providers);
         }
         catch (error) {
             this.runtime.ctx.logger.warn(`codex-provider: route refresh failed: ${String(error)}`);
@@ -186,14 +186,14 @@ export class CodexProvider extends Service {
     nativeProviderId() {
         const native = readNativeSelection(resolveCodexHome());
         const wanted = native.providerId;
-        if (wanted === undefined)
-            return undefined;
-        const providers = readProviderStore(this.home).providers;
-        return providers.find((entry) => entry.id === wanted)?.id ?? undefined;
+        if (wanted === undefined || wanted === "openai")
+            return readEffectiveProviderStore(this.home, resolveCodexHome()).providers.some(entry => entry.kind === "openai-oauth") ? OPENAI_OAUTH_ID : undefined;
+        const providers = readEffectiveProviderStore(this.home, resolveCodexHome()).providers;
+        return providers.find((entry) => entry.kind !== "openai-oauth" && entry.id === wanted)?.id ?? undefined;
     }
     /** The store entry a DSH route id names. */
     providerEntry(providerId) {
-        return readProviderStore(this.home).providers.find((entry) => entry.id === providerId);
+        return readEffectiveProviderStore(this.home, resolveCodexHome()).providers.find((entry) => entry.id === providerId);
     }
     /**
      * The factory's session-level route fallback — always ONE coherent pair.
@@ -215,8 +215,13 @@ export class CodexProvider extends Service {
     sessionAgentOptions(requested) {
         const native = readNativeSelection(resolveCodexHome());
         const wanted = requested?.provider !== undefined && typeof requested.model === "string" ? requested : undefined;
+        const requestedEntry = wanted === undefined ? undefined : this.providerEntry(wanted.provider);
+        // An explicitly selected native identity must survive unavailable auth or
+        // metadata. Its launch fails honestly instead of seeding a third-party route.
+        if (wanted?.provider === OPENAI_OAUTH_ID && (requestedEntry === undefined || requestedEntry.kind === "openai-oauth"))
+            return { ...wanted };
         const serves = wanted !== undefined
-            && this.providerEntry(wanted.provider)?.models.some((model) => model.id === wanted.model) === true;
+            && requestedEntry?.models.some((model) => model.id === wanted.model) === true;
         if (wanted !== undefined && serves)
             return { ...wanted, provider: wanted.provider, model: wanted.model };
         const provider = this.nativeProviderId();
@@ -272,6 +277,8 @@ export class CodexProvider extends Service {
             // the user's home (the per-provider model catalog is ours).
             launchFor: (providerId) => {
                 const entry = this.providerEntry(providerId);
+                if (entry === undefined && providerId === OPENAI_OAUTH_ID)
+                    throw new Error("OpenAI OAuth authentication is unavailable; sign in using Codex");
                 return entry === undefined ? undefined : providerSdkLaunch(this.home, codexHome, entry);
             },
             contextWindowFor: (providerId, model) => {
@@ -374,7 +381,7 @@ export class CodexProvider extends Service {
      * picker would be noise.
      */
     #registerModelCatalog() {
-        this.#applyRoutes(readProviderStore(this.home).providers);
+        this.#applyRoutes(readEffectiveProviderStore(this.home, resolveCodexHome()).providers);
     }
     /** Register or atomically re-point the codex routes at the given providers. */
     #applyRoutes(providers) {

package/agent-codex-sdk/dist/sdk-runtime.js

@@ -52,8 +52,8 @@ export const SDK_PACKAGE = "@openai/codex-sdk";
 /** The native binary package the SDK resolves at run time; pinned with the SDK. */
 export const SDK_BINARY_PACKAGE = "@openai/codex";
 /**
- * Pin of BOTH packages — the same 0.154.0 the app-server (primary) line pins,
- * so the two Codex faces agree on the wire behaviour they bridge.
+ * Pin of BOTH SDK runtime packages; the optional SDK line keeps its tested 0.154.0 pair,
+ * while the primary app-server line independently discovers installed native cores.
  */
 export const SDK_PACKAGE_VERSION = "0.154.0";
 /** The entry `loadCodexSdk` imports, relative to the runtime dir. */
@@ -110,7 +110,7 @@ const LOCK_STALE_MS = 30 * 60 * 1000;
 export function sdkInstallArgv(packageVersion = SDK_PACKAGE_VERSION) {
     return [
         "install",
-        "--exact",
+        "--save-exact",
         "--ignore-scripts",
         "--omit=dev",
         `${SDK_PACKAGE}@${packageVersion}`,

package/agent-hermes/dist/agent.js

@@ -291,6 +291,12 @@ export class HermesAgent {
      */
     #remoteQueue = [];
     #bridgedToolResults = new Set();
+    /** callIds already advertised by an appended assistant/message frame — the
+     *  strict validator refuses any `tool/call` whose callId no assistant frame
+     *  advertised (2026-10-04 dev3 case C: the hermes wire never delivers the
+     *  tool_use-bearing intermediate assistant messages, so execution frames
+     *  arrived with no advertisement anchor). */
+    #advertisedToolCalls = new Set();
     /** Fires when the agent has been idle past HERMES_IDLE_EXIT_MS (tears down the client). */
     #onIdleExit;
     #idleExitTimer = undefined;
@@ -495,7 +501,8 @@ export class HermesAgent {
             return;
         this.session.append("turn/start", { turn: this.#dashTurn });
         await this.#emitRequestContext();
-        this.#titleSourceSeq ??= this.session.append("user/message", message, { surfaceOp: "append" }).seq;
+        const event = this.session.append("user/message", message, { surfaceOp: "append" });
+        this.#titleSourceSeq ??= event.seq;
         this.#armTurnDeadline();
         void this.#client
             .prompt(userMessageText(message))
@@ -525,6 +532,12 @@ export class HermesAgent {
         await this.#handshake(`session.create`, () => this.#client.createSession({
             cwd: sessionCtx?.cwd ?? process.cwd(),
             ...(route?.model !== undefined ? { model: route.model } : {}),
+            // The route's provider slug MUST ride with the model: without it the
+            // gateway pins the session to its default provider (deepseek) and any
+            // foreign-family model id (z-ai/glm-*, anthropic/*, …) dies at
+            // session.create with `Model … is not served by provider 'deepseek'`
+            // (-32602). The gateway normalizes aliases (`z-ai` → `zai`) itself.
+            ...(route?.provider !== undefined ? { provider: route.provider } : {}),
             ...(sessionCtx?.title !== undefined && sessionCtx.title !== "" ? { title: sessionCtx.title } : {}),
         }));
     }
@@ -892,13 +905,40 @@ export class HermesAgent {
                     break;
                 const callId = String(event.toolCallId ?? "");
                 const name = String(event.toolName ?? "");
+                const argumentsJson = String(event.argumentsJson ?? JSON.stringify(event.args ?? {}));
                 this.#commitStepStart();
+                // Advertisement-before-execution (validator invariant): the hermes wire
+                // never delivers the tool_use-bearing intermediate assistant messages,
+                // so unless a real assistant frame already advertised this callId,
+                // bridge a minimal assistant/message carrying the tool-call block —
+                // arguments copied verbatim into both frames (validator: lifecycle
+                // arguments ≡ advertised, strict string equality; 2026-10-04 dev3
+                // case C). A live stream bridge is left untouched — the final real
+                // assistant message settles it.
+                if (!this.#advertisedToolCalls.has(callId)) {
+                    const advertisement = createAssistantMessage({
+                        content: [{ type: "tool-call", id: ToolCallId(callId), name, arguments: argumentsJson }],
+                        source: {
+                            provider: String(this.options.provider ?? ""),
+                            model: String(this.options.model ?? ""),
+                        },
+                    });
+                    this.session.append("assistant/message", {
+                        turn: this.#dashTurn,
+                        step: this.#step,
+                        message: advertisement,
+                        stream: [],
+                    }, {
+                        surfaceOp: "append",
+                    });
+                    this.#advertisedToolCalls.add(callId);
+                }
                 this.session.append("tool/call", {
                     turn: this.#dashTurn,
                     step: this.#step,
                     callId: ToolCallId(callId),
                     name,
-                    arguments: String(event.argumentsJson ?? JSON.stringify(event.args ?? {})),
+                    arguments: argumentsJson,
                 });
                 break;
             }
@@ -1016,6 +1056,10 @@ export class HermesAgent {
     }
     #appendAssistantMessage(message, usage) {
         const content = convertContent(message.content);
+        for (const block of content) {
+            if (block.type === "tool-call")
+                this.#advertisedToolCalls.add(block.id);
+        }
         const assistant = createAssistantMessage({
             content,
             source: {

package/agent-hermes/dist/hermes-client.js

@@ -61,7 +61,7 @@
  * (keep the spawned stdio transport the only transport).
  */
 import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { delimiter, resolve } from "node:path";
 import { createInterface } from "node:readline";
@@ -124,6 +124,46 @@ export function resolveHermesPython(root) {
 export function resolveHermesRoot() {
     return process.env.SUPERD_HERMES_ROOT?.trim() || resolve(homedir(), ".hermes/hermes-agent");
 }
+/** Parse one `.env` body into entries: `#` comments, optional `export ` prefix,
+ *  optional single/double quotes, `KEY=VALUE` on one line each. Unparsable
+ *  lines are skipped (best effort — the gateway tolerates partial envs). */
+export function parseDotEnv(text) {
+    const out = {};
+    for (const rawLine of text.split(/\r?\n/)) {
+        const line = rawLine.trim();
+        if (line === "" || line.startsWith("#"))
+            continue;
+        const body = line.startsWith("export ") ? line.slice("export ".length).trim() : line;
+        const eq = body.indexOf("=");
+        if (eq <= 0)
+            continue;
+        const key = body.slice(0, eq).trim();
+        if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            continue;
+        let value = body.slice(eq + 1).trim();
+        if (value.length >= 2 && ((value.startsWith('"') && value.endsWith('"')) || (value.startsWith("'") && value.endsWith("'")))) {
+            value = value.slice(1, -1);
+        }
+        out[key] = value;
+    }
+    return out;
+}
+/** The native home's `.env` (`~/.hermes/.env`), parsed once per call. The omp
+ *  and pi runtimes load their own native `.env` on startup; the hermes gateway
+ *  child does NOT (and the harness env deliberately carries no provider
+ *  keys), so without this the spawned gateway sees zero provider credentials
+ *  — every provider request dies as quota/auth regardless of model. */
+export function loadHermesDotEnv() {
+    const path = resolve(resolveHermesRoot(), "..", ".env");
+    if (!existsSync(path))
+        return {};
+    try {
+        return parseDotEnv(readFileSync(path, "utf8"));
+    }
+    catch {
+        return {};
+    }
+}
 function asRecord(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
         return null;
@@ -197,6 +237,14 @@ export class HermesGatewayClient {
         const root = resolveHermesRoot();
         const python = resolveHermesPython(root);
         const env = { ...(opts.env ?? process.env) };
+        // Native `.env` fill (dotenv convention: existing env WINS). The omp and
+        // pi runtimes load their own native `.env`; the hermes gateway child does
+        // not, and the harness env carries no provider keys — without this fill
+        // every provider request dies as quota/auth regardless of model.
+        for (const [dotKey, dotValue] of Object.entries(loadHermesDotEnv())) {
+            if (env[dotKey] === undefined || env[dotKey] === "")
+                env[dotKey] = dotValue;
+        }
         const prevPath = env.PYTHONPATH?.trim();
         env.PYTHONPATH = prevPath ? `${root}${delimiter}${prevPath}` : root;
         env.HERMES_PYTHON_SRC_ROOT = root;

package/agent-omp/dist/agent.js

@@ -171,14 +171,23 @@ function userMessageFromOmp(message) {
         source: { kind: "user" },
     });
 }
-/** Extract every tool call an OMP assistant message names, in order, for approval correlation. */
-function toolCalls(blocks) {
+/** Extract every tool call an OMP assistant message names, in order, for approval correlation.
+ *  `arguments` is the ADVERTISED args原文 (same normalization `convertContent` applies): dsh's
+ *  strict validator requires `tool/call.arguments` ≡ the assistant frame's advertised arguments
+ *  byte-for-byte, while `tool_execution_*` events carry runtime-parsed (schema-stripped) args —
+ *  models that add unknown fields (e.g. an intent string) make the two diverge and the stored
+ *  log fail to load (2026-10-04 dev3 case A). Exported for the regression test. */
+export function toolCalls(blocks) {
     if (blocks === undefined)
         return [];
     const result = [];
     for (const block of blocks) {
         if (block.type === "toolCall" && typeof block.id === "string") {
-            result.push({ callId: block.id, name: typeof block.name === "string" ? block.name : "" });
+            result.push({
+                callId: block.id,
+                name: typeof block.name === "string" ? block.name : "",
+                arguments: typeof block.arguments === "string" ? block.arguments : JSON.stringify(block.arguments ?? {}),
+            });
         }
     }
     return result;
@@ -954,12 +963,16 @@ export class OmpAgent {
             case "tool_execution_start": {
                 const callId = String(event.toolCallId ?? "");
                 const name = String(event.toolName ?? "");
+                // Advertised args win (strict validator: tool/call.arguments ≡ the
+                // assistant frame's advertised arguments); execution args are the
+                // fallback for calls no assistant frame ever carried.
+                const advertised = this.#pendingToolCalls.find((pending) => pending.callId === callId);
                 this.session.append("tool/call", {
                     turn: this.#dashTurn,
                     step: this.#step,
                     callId: ToolCallId(callId),
                     name,
-                    arguments: JSON.stringify(event.args ?? {}),
+                    arguments: advertised?.arguments ?? JSON.stringify(event.args ?? {}),
                 });
                 // The assistant's pending tool call is now materialized as a running call.
                 this.#pendingToolCalls = this.#pendingToolCalls.filter((pending) => pending.callId !== callId);

package/agent-omp-sdk/dist/agent.d.ts

@@ -43,6 +43,17 @@ export declare function ompFailure(message: OmpMessage): {
 } | undefined;
 /** Map OMP's usage accounting into Dash `TokenUsage` (disjoint field names). */
 export declare function convertUsage(usage: unknown): TokenUsage | undefined;
+/** Extract every tool call an OMP assistant message names, in order, for approval correlation.
+ *  `arguments` is the ADVERTISED args原文 (same normalization `convertContent` applies): dsh's
+ *  strict validator requires `tool/call.arguments` ≡ the assistant frame's advertised arguments
+ *  byte-for-byte, while `tool_execution_*` events carry runtime-parsed (schema-stripped) args —
+ *  models that add unknown fields (e.g. an intent string) make the two diverge and the stored
+ *  log fail to load (2026-10-04 dev3 case A). Exported for the regression test. */
+export declare function toolCalls(blocks: OmpContentBlock[] | undefined): {
+    callId: string;
+    name: string;
+    arguments: string;
+}[];
 export declare class OmpAgent implements Agent {
     #private;
     readonly id: SessionId;

package/agent-omp-sdk/dist/agent.js

@@ -171,14 +171,23 @@ function userMessageFromOmp(message) {
         source: { kind: "user" },
     });
 }
-/** Extract every tool call an OMP assistant message names, in order, for approval correlation. */
-function toolCalls(blocks) {
+/** Extract every tool call an OMP assistant message names, in order, for approval correlation.
+ *  `arguments` is the ADVERTISED args原文 (same normalization `convertContent` applies): dsh's
+ *  strict validator requires `tool/call.arguments` ≡ the assistant frame's advertised arguments
+ *  byte-for-byte, while `tool_execution_*` events carry runtime-parsed (schema-stripped) args —
+ *  models that add unknown fields (e.g. an intent string) make the two diverge and the stored
+ *  log fail to load (2026-10-04 dev3 case A). Exported for the regression test. */
+export function toolCalls(blocks) {
     if (blocks === undefined)
         return [];
     const result = [];
     for (const block of blocks) {
         if (block.type === "toolCall" && typeof block.id === "string") {
-            result.push({ callId: block.id, name: typeof block.name === "string" ? block.name : "" });
+            result.push({
+                callId: block.id,
+                name: typeof block.name === "string" ? block.name : "",
+                arguments: typeof block.arguments === "string" ? block.arguments : JSON.stringify(block.arguments ?? {}),
+            });
         }
     }
     return result;
@@ -954,12 +963,16 @@ export class OmpAgent {
             case "tool_execution_start": {
                 const callId = String(event.toolCallId ?? "");
                 const name = String(event.toolName ?? "");
+                // Advertised args win (strict validator: tool/call.arguments ≡ the
+                // assistant frame's advertised arguments); execution args are the
+                // fallback for calls no assistant frame ever carried.
+                const advertised = this.#pendingToolCalls.find((pending) => pending.callId === callId);
                 this.session.append("tool/call", {
                     turn: this.#dashTurn,
                     step: this.#step,
                     callId: ToolCallId(callId),
                     name,
-                    arguments: JSON.stringify(event.args ?? {}),
+                    arguments: advertised?.arguments ?? JSON.stringify(event.args ?? {}),
                 });
                 // The assistant's pending tool call is now materialized as a running call.
                 this.#pendingToolCalls = this.#pendingToolCalls.filter((pending) => pending.callId !== callId);

package/agent-pi/dist/agent.js

@@ -206,6 +206,11 @@ export class PiAgent {
      */
     #remoteQueue = [];
     #bridgedToolResults = new Set();
+    /** callIds already advertised by an appended assistant/message frame — the
+     *  strict validator refuses any `tool/call` whose callId no assistant frame
+     *  advertised, and requires the execution arguments to equal the advertised
+     *  string (2026-10-04 dev3 omp/hermes repair: same write-side family). */
+    #advertisedToolCalls = new Set();
     /** The last title already mirrored into the log (dedupe). */
     #mirroredTitle = null;
     /** The open compaction lifecycle's id (`compaction/start` … `compaction/end`). */
@@ -750,7 +755,30 @@ export class PiAgent {
             case "tool_execution_start": {
                 const callId = String(event.toolCallId ?? "");
                 const name = String(event.toolName ?? "");
+                const argumentsJson = typeof event.args === "string" ? event.args : JSON.stringify(event.args ?? {});
                 this.#commitStepStart();
+                // Advertisement-before-execution (validator invariant, 2026-10-04 dev3
+                // omp/hermes repair family): unless a real assistant frame advertised
+                // this callId, bridge a minimal assistant/message carrying the
+                // tool-call block — arguments copied verbatim into both frames.
+                if (!this.#advertisedToolCalls.has(callId)) {
+                    const advertisement = createAssistantMessage({
+                        content: [{ type: "tool-call", id: ToolCallId(callId), name, arguments: argumentsJson }],
+                        source: {
+                            provider: String(this.options.provider ?? ""),
+                            model: String(this.options.model ?? ""),
+                        },
+                    });
+                    this.session.append("assistant/message", {
+                        turn: this.#dashTurn,
+                        step: this.#step,
+                        message: advertisement,
+                        stream: [],
+                    }, {
+                        surfaceOp: "append",
+                    });
+                    this.#advertisedToolCalls.add(callId);
+                }
                 this.session.append("tool/call", {
                     turn: this.#dashTurn,
                     step: this.#step,
@@ -758,7 +786,7 @@ export class PiAgent {
                     name,
                     // The DSH payload requires the RAW JSON string the model produced;
                     // the projection stringified pi's parsed args object.
-                    arguments: typeof event.args === "string" ? event.args : JSON.stringify(event.args ?? {}),
+                    arguments: argumentsJson,
                 });
                 break;
             }
@@ -882,6 +910,10 @@ export class PiAgent {
     }
     #appendAssistantMessage(message) {
         const content = convertContent(message.content);
+        for (const block of content) {
+            if (block.type === "tool-call")
+                this.#advertisedToolCalls.add(block.id);
+        }
         // pi reports usage on every assistant message — same-event attachment,
         // no lag.
         const usage = convertUsage(message.usage);

package/client/index.js

@@ -1738,14 +1738,14 @@ function modelOption(raw) {
 	};
 }
 function providerAuthKind(raw) {
-	return raw === "env" ? "env" : raw === "authToken" ? "authToken" : "apiKey";
+	return raw === "oauth" ? "oauth" : raw === "env" ? "env" : raw === "authToken" ? "authToken" : "apiKey";
 }
 function providerOption(raw) {
 	if (typeof raw !== "object" || raw === null) return void 0;
 	const record = raw;
 	const id = nonEmpty(record.id);
 	const label = nonEmpty(record.label);
-	const baseUrl = nonEmpty(record.baseUrl);
+	const baseUrl = nonEmpty(record.baseUrl) ?? (record.authKind === "oauth" ? "" : void 0);
 	if (id === void 0 || label === void 0 || baseUrl === void 0) return void 0;
 	const models = Array.isArray(record.models) ? record.models.map(modelOption).filter((entry) => entry !== void 0) : [];
 	const envName = nonEmpty(record.envName);
@@ -2650,6 +2650,10 @@ function ProvidersPanel({ agent, namespace }) {
 						style: chip,
 						children: "token"
 					}),
+					provider.authKind === "oauth" && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						style: chip,
+						children: "native OAuth"
+					}),
 					!provider.hasKey && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						style: chip,
 						children: "no key"
@@ -2668,13 +2672,13 @@ function ProvidersPanel({ agent, namespace }) {
 					}),
 					provider.models.length === 0 && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						style: chipWarn,
-						children: "no models yet — add one"
+						children: provider.authKind === "oauth" ? "model cache unavailable — open Codex to refresh" : "no models yet — add one"
 					}),
 					busy === `remove:${provider.id}` && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
 						style: chip,
 						children: "removing…"
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					provider.authKind !== "oauth" && /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						style: buttonStyle,
 						disabled: busy !== null,
@@ -2682,8 +2686,7 @@ function ProvidersPanel({ agent, namespace }) {
 							openEdit(provider);
 						},
 						children: "Edit"
-					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 						type: "button",
 						style: {
 							...buttonStyle,
@@ -2695,7 +2698,7 @@ function ProvidersPanel({ agent, namespace }) {
 							run(`remove:${provider.id}`, () => removeProvider(agent.key, namespace, provider.id));
 						},
 						children: "Delete"
-					})
+					})] })
 				]
 			}, provider.id)),
 			editing === null && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", { children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "super-dsh",
-  "version": "0.1.10-e",
-  "description": "Super D for the DeepSeek Harness (DSH) \u2014 one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
+  "version": "0.1.11-a",
+  "description": "Super D for the DeepSeek Harness (DSH) — one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -80,8 +80,6 @@
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.84.2",
-    "@openai/codex": "0.154.0",
-    "ws": "^8.21.0",
     "zod": "4.4.3",
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
@@ -100,7 +98,8 @@
     "@deepseek-ai/dsh-tools": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-user-approval": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-user-questions": ">=0.1.5-0 <0.3.0-0"
+    "@deepseek-ai/dsh-user-questions": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-0 <0.3.0-0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -147,6 +146,9 @@
     },
     "@deepseek-ai/dsh-user-questions": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
     }
   },
   "publishConfig": {

package/superd-hub/dist/client/agent-settings.d.ts

@@ -108,7 +108,7 @@ export interface ProviderModelOption {
  * addition on save, which is why the form offers kinds per view
  * (`authKindOptions`) instead of one fixed list.
  */
-export type ProviderAuthKind = 'apiKey' | 'env' | 'authToken';
+export type ProviderAuthKind = 'apiKey' | 'env' | 'authToken' | 'oauth';
 /** One configured provider, listed but never carrying its key. */
 export interface ProviderOption {
     readonly id: string;

package/superd-hub/dist/client/agent-settings.js

@@ -138,7 +138,7 @@ function modelOption(raw) {
 function providerAuthKind(raw) {
     // An unstated or unknown kind reads as the shared conservative default,
     // never as the other face's shape.
-    return raw === 'env' ? 'env' : raw === 'authToken' ? 'authToken' : 'apiKey';
+    return raw === 'oauth' ? 'oauth' : raw === 'env' ? 'env' : raw === 'authToken' ? 'authToken' : 'apiKey';
 }
 function providerOption(raw) {
     if (typeof raw !== 'object' || raw === null)
@@ -146,7 +146,7 @@ function providerOption(raw) {
     const record = raw;
     const id = nonEmpty(record.id);
     const label = nonEmpty(record.label);
-    const baseUrl = nonEmpty(record.baseUrl);
+    const baseUrl = nonEmpty(record.baseUrl) ?? (record.authKind === 'oauth' ? '' : undefined);
     if (id === undefined || label === undefined || baseUrl === undefined)
         return undefined;
     const models = Array.isArray(record.models)

package/superd-hub/dist/connection-trust.d.ts

@@ -0,0 +1,8 @@
+import type { HostConnectionHandle } from '@deepseek-ai/dsh-client-connection';
+/**
+ * Use the native index authenticator as a cookie-only admission delegate.
+ * A fixed, query-free index path prevents token exchange or redirects here;
+ * original Host and Cookie headers preserve the native authority binding and
+ * lifetime. No upstream private fields or cookie-format copies are needed.
+ */
+export declare function installAuthenticationOnlyAdmission(connection: HostConnectionHandle): () => void;