super-dsh 0.1.11-b → 0.1.12

package/README.md

@@ -14,7 +14,7 @@ the foreign store.
 ## Install
 
 ```bash
-dsh plugin --profile <name> add super-dsh@0.1.11
+dsh plugin --profile <name> add super-dsh@0.1.12
 ```
 
 That single package composes the whole line (`@pgmi-builds/superd-hub` plus the
@@ -24,21 +24,16 @@ home under `<DSH_HOME>/agents/<label>/` on first boot.
 
 ## Remote web access
 
-To use the same authenticated UI through a reverse proxy or LAN relay, enable
-this profile patch:
+The shipped bundle enables `superd-web-trust` with `trustAllHosts: true`.
+Authenticated requests may use any serving Host or Origin, and the browser's
+native trusted-host / loopback checks see the page as Host-owned. No `--host`,
+`--trusted-host`, or trusted-host environment variables are needed for trust.
+Native token-to-cookie login, cookie expiry, and authority binding remain in effect.
 
-```yaml
-- id: superd-web-trust
-  config:
-    trustAllHosts: true
-```
-
-This skips Host/Origin restrictions and enables browser ownership for every
-hostname. Native token-to-cookie login, cookie expiry, and authority binding
-remain in effect. The default is `false`, preserving declared-authority mode.
-It does not change the server's listening address: keep loopback behind Caddy
-and a LAN relay. The test launcher enables this mode without `--host` or
-`--trusted-host` and starts the relay on every test port, including 4999.
+This does not change the listening address: use the native loopback listener
+behind your reverse proxy or LAN relay. Remove older manual host/trusted-host
+patches and any profile override disabling `superd-web-trust`. To restore the
+native address fence, explicitly set this row's `trustAllHosts: false`.
 
 ## Runtimes
 

package/agent-agy/dist/agent.d.ts

@@ -101,6 +101,8 @@ export declare class AgyAgent implements Agent {
     private deliver;
     private deliverPrompt;
     private sessionIdentityCommitted;
+    private seenToolCalls;
+    private stepOpen;
     /** Stamp the single-preset selection once per session (projection seed). */
     private bootstrapSessionIdentity;
     private startTurn;

package/agent-agy/dist/agent.js

@@ -44,7 +44,7 @@ const trace = (...parts) => {
 /** Classify a bridge turn failure into the stable {message, code} UI chip. */
 export function classifyTurnError(error) {
     const text = error instanceof Error ? error.message : String(error);
-    if (/429|prepayment|quota|rate limit/i.test(text))
+    if (/429|prepayment|quota|rate limit|billing/i.test(text))
         return { message: text, code: "QUOTA" };
     if (/api key|authentication|unauthenticated|API_KEY/i.test(text))
         return { message: text, code: "AUTH" };
@@ -125,9 +125,15 @@ export class AgyAgent {
             if (!this.turnOpen)
                 return;
             if (ev.event === "tool_call") {
-                if (this.step > 0)
-                    this.closeStep();
-                this.commitStepStart();
+                if (this.seenToolCalls.has(ev.id))
+                    return;
+                this.seenToolCalls.add(ev.id);
+                // Concurrent tools share their originating step until every call resolves.
+                if (this.unpairedCalls.length === 0) {
+                    if (this.step > 0)
+                        this.closeStep();
+                    this.commitStepStart();
+                }
                 const callId = ToolCallId(ev.id || `agy-${this.dashTurn}-${this.step}`);
                 const argumentsJson = ev.args || "{}";
                 // Advertisement-before-execution (validator invariant, 2026-10-04 dev3
@@ -156,6 +162,8 @@ export class AgyAgent {
             else {
                 // ToolResult chunks: the SDK yields none today; if a future version
                 // does, pair them off immediately so no placeholder is written.
+                if (!this.unpairedCalls.some(c => c.callId === ev.id))
+                    return;
                 this.unpairedCalls = this.unpairedCalls.filter((c) => c.callId !== (ev.id || ""));
                 this.session.append("tool/result", {
                     turn: this.dashTurn, step: this.step,
@@ -254,6 +262,8 @@ export class AgyAgent {
         void this.startTurn(message);
     }
     sessionIdentityCommitted = false;
+    seenToolCalls = new Set();
+    stepOpen = false;
     /** Stamp the single-preset selection once per session (projection seed). */
     bootstrapSessionIdentity() {
         if (this.sessionIdentityCommitted)
@@ -264,6 +274,7 @@ export class AgyAgent {
         }
     }
     async startTurn(message) {
+        this.seenToolCalls.clear();
         this.bootstrapSessionIdentity();
         this.session.append("turn/start", { turn: this.dashTurn });
         this.session.append("user/message", message, { surfaceOp: "append" });
@@ -277,7 +288,13 @@ export class AgyAgent {
                 trace("onboarding: key stored");
             }
             else {
-                this.appendSystemNotice(ONBOARDING_PROMPT);
+                this.appendAssistantMessage(ONBOARDING_PROMPT);
+                this.closeStep();
+                this.closeTurn({ kind: "error", error: { code: "AUTH", message: ONBOARDING_PROMPT } });
+                this.markIdle();
+                this.endActivity();
+                this.flushFollowUps();
+                return;
             }
             this.closeTurn({ kind: "completed" });
             this.markIdle();
@@ -410,18 +427,21 @@ export class AgyAgent {
     closeTurn(reason) {
         if (!this.turnOpen)
             return;
+        this.closeStep();
         this.turnOpen = false;
         this.clearTurnDeadline();
         this.session.append("turn/end", { turn: this.dashTurn, reason });
     }
     closeStep() {
-        if (!this.turnOpen || this.step <= 0)
+        if (!this.turnOpen || !this.stepOpen)
             return;
+        this.stepOpen = false;
         this.session.append("step/end", { turn: this.dashTurn, step: this.step });
     }
     commitStepStart() {
-        if (!this.turnOpen)
+        if (!this.turnOpen || this.stepOpen)
             return;
+        this.stepOpen = true;
         this.step += 1;
         this.session.append("step/start", { turn: this.dashTurn, step: this.step });
     }

package/agent-agy/dist/agy-cli-client.d.ts

@@ -114,6 +114,9 @@ export declare class AgyCliClient {
     private dead;
     private conversationIdValue;
     private toolsSeen;
+    private toolCalls;
+    private toolResults;
+    private stepFailure?;
     private hubPreparation?;
     private hubSession?;
     private prepare;

package/agent-agy/dist/agy-cli-client.js

@@ -66,6 +66,9 @@ export class AgyCliClient {
     dead = false;
     conversationIdValue = "";
     toolsSeen = 0;
+    toolCalls = new Set();
+    toolResults = new Set();
+    stepFailure;
     hubPreparation;
     hubSession;
     async prepare() {
@@ -248,8 +251,8 @@ export class AgyCliClient {
                 const r = parsed.result;
                 if (r?.conversation_id)
                     this.conversationIdValue = r.conversation_id;
-                if (r?.status !== "SUCCESS") {
-                    this.dispatch({ event: "error", error: this.withDiagnostics(r?.error ?? `agy result status=${r?.status}`), recoverable: false });
+                if (r?.status !== "SUCCESS" || this.stepFailure !== undefined) {
+                    this.dispatch({ event: "error", error: this.withDiagnostics(r?.error ?? this.stepFailure ?? `agy result status=${r?.status}`), recoverable: false });
                 }
                 else {
                     this.dispatch({ event: "done", conversation_id: this.conversationIdValue, turn_ms: 0 });
@@ -259,6 +262,12 @@ export class AgyCliClient {
     }
     consumeStep(su) {
         const st = su.step_type;
+        if (su.conversation_id)
+            this.conversationIdValue = su.conversation_id;
+        if (st === "error_message") {
+            this.stepFailure = su.text_delta || "Antigravity reported an error without details";
+            return;
+        }
         if (st === "system_message") {
             this.onSystemMessage?.(su.text_delta ?? "");
             return;
@@ -286,15 +295,22 @@ export class AgyCliClient {
             return;
         }
         if (st === "tool") {
-            const name = su.tool_name ?? su.tool_info?.name ?? "unknown";
+            const wireName = String(su.tool_name ?? "");
+            const name = su.tool_info?.name || (/^\d+$/.test(wireName) ? "unknown" : wireName) || "unknown";
             const id = `${this.conversationIdValue}:${su.step_index ?? 0}`;
-            if (su.state === "ACTIVE") {
+            if (su.state === "ACTIVE" && !this.toolCalls.has(id)) {
+                this.toolCalls.add(id);
                 this.dispatch({
                     event: "tool_call", id, name,
                     args: JSON.stringify(su.tool_info?.parameters ?? {}),
                 });
             }
-            else if (su.state === "DONE" || su.state === "ERROR") {
+            else if ((su.state === "DONE" || su.state === "ERROR") && !this.toolResults.has(id)) {
+                if (!this.toolCalls.has(id)) {
+                    this.toolCalls.add(id);
+                    this.dispatch({ event: "tool_call", id, name, args: JSON.stringify(su.tool_info?.parameters ?? {}) });
+                }
+                this.toolResults.add(id);
                 const output = su.tool_info?.output ?? "";
                 const isError = su.state === "ERROR";
                 this.dispatch({
@@ -327,6 +343,10 @@ export class AgyCliClient {
         await this.prepare();
         this.spawnCli();
         await this.expectReady();
+        this.toolCalls.clear();
+        this.toolResults.clear();
+        this.stepFailure = undefined;
+        this.diagnostics = [];
         this.send({ event: "user", message: { content: text } });
         let full = "";
         for (;;) {

package/agent-codex/dist/index.js

@@ -503,7 +503,7 @@ export class CodexProvider extends Service {
         if (record === undefined) {
             throw new CodexResumeError("SESSION_MAP_MISS", `cannot resume session "${id}": no Codex thread is recorded for this Dash session id`);
         }
-        if (record.threadId === null) {
+        if (record.threadId === null && (await readStoredEvents(persistence, id, options.signal)).some(event => event.type === "turn/start" || event.type === "user/message" || event.type === "assistant/message")) {
             // C2: never auto-start a fresh thread — the session's history is in the
             // (missing) native thread, not in a blank one.
             throw new CodexResumeError("NATIVE_THREAD_NEVER_STARTED", `cannot resume session "${id}": its Codex thread was never started (no thread id recorded)`);
@@ -518,7 +518,7 @@ export class CodexProvider extends Service {
         // `<worldHome>/.codex` home (never migrated) and pruned rollouts alike.
         // Without this gate the failure would surface only at the first turn
         // (resumeThread is zero-IO).
-        if (readRolloutHead(resolveCodexHome(), record.threadId) === undefined) {
+        if (record.threadId !== null && readRolloutHead(resolveCodexHome(), record.threadId) === undefined) {
             throw new CodexResumeError("ROLLOUT_MISSING", `cannot resume session "${id}": no rollout for Codex thread ${record.threadId} exists in the current Codex home (${resolveCodexHome()})`);
         }
         // Spawn cwd comes from the recorded pairing — re-realpath and re-verify so
@@ -545,7 +545,7 @@ export class CodexProvider extends Service {
         // rollout). No process is spawned here — lazy-spawn gate, rules §14-i.
         const client = CodexAppServerClient.create({
             cwd: spawnCwd,
-            resumeThreadId: record.threadId,
+            ...(record.threadId === null ? {} : { resumeThreadId: record.threadId }),
             approvalPolicy,
             sandboxMode,
             worldHome: this.home,

package/agent-hermes/dist/index.js

@@ -364,7 +364,9 @@ export class HermesProvider extends Service {
         if (record === undefined) {
             throw new Error(`cannot resume session "${id}": no Hermes gateway session is recorded for this Dash session id`);
         }
-        if (record.gatewayStoredSessionId === null || record.gatewayStoredSessionId === undefined) {
+        const persistence = this.requirePersistence("resume");
+        if ((record.gatewayStoredSessionId === null || record.gatewayStoredSessionId === undefined)
+            && (await readStoredEvents(persistence, id, options.signal)).some(event => event.type === "turn/start" || event.type === "user/message" || event.type === "assistant/message")) {
             throw new Error(`cannot resume session "${id}": no durable gateway session id is recorded (this record predates durable-id capture; re-create the session)`);
         }
         // Spawn cwd comes from the recorded pairing — re-realpath and re-verify.
@@ -372,7 +374,6 @@ export class HermesProvider extends Service {
         if (spawnCwd === undefined) {
             throw new Error(`cannot resume session "${id}": its recorded working directory no longer exists`);
         }
-        const persistence = this.requirePersistence("resume");
         // Preset (record-only): env override, else the recorded preset, else the
         // persisted session log, else the permission service's default.
         const envMode = envApprovalMode();
@@ -407,7 +408,7 @@ export class HermesProvider extends Service {
             this.followGatewaySessionId(id, client);
             handedOff = true;
             const agentOptions = await this.sessionAgentOptions(options.agentOptions);
-            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "resume", { enterSession: true, preparation }, stored, this.agentRuntime(client, spawnCwd, record.gatewayStoredSessionId));
+            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "resume", { enterSession: true, preparation }, stored, this.agentRuntime(client, spawnCwd, record.gatewayStoredSessionId ?? undefined));
         }
         catch (error) {
             trace(`resume ${id} THREW: ${String(error)} | stack=${error instanceof Error ? error.stack?.slice(0, 400) : "n/a"}`);

package/agent-omp/dist/index.js

@@ -24,7 +24,7 @@ import { realpathSync, statSync } from "node:fs";
 import { Service } from "@deepseek-ai/cordis";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { SessionPreparation, SessionLogOffset } from "@deepseek-ai/dsh-session";
+import { interruptedTurnClosers, SessionPreparation, SessionLogOffset } from "@deepseek-ai/dsh-session";
 import { LazyOmpRpc } from "./lazy-rpc.js";
 import { OmpAgent } from "./agent.js";
 import { OmpLlmAdapter } from "./adapter.js";
@@ -438,10 +438,13 @@ export class OmpProvider extends Service {
         // Both branches are LAZY and both resolve their launch flag at spawn.
         let rpc;
         try {
+            const closers = interruptedTurnClosers(coldRead.events);
+            if (closers.length > 0)
+                await stored.append(closers);
             // Fresh attach: seed the dsh session from the dsh log (native replay),
             // header identity folded from the stored header verbatim.
             const preparation = SessionPreparation.create(loopCtx.sessions.prepare(id, {
-                seed: [...coldRead.events],
+                seed: [...coldRead.events, ...closers],
                 meta: structuredClone(stored.header),
                 inheritedEventCount: stored.inheritedEventCount,
                 eventState: coldRead.eventState,
@@ -465,7 +468,7 @@ export class OmpProvider extends Service {
                     return ["--approval-mode", spawnPermission().approvalMode, "--resume", ompFile, ...(extension === undefined ? [] : ["-e", extension])];
                 }, spawnCwd, () => hub.dispose());
             }
-            const handle = await setupAndPublish(loopCtx, ownerCtx, id, options.agentOptions ?? {}, options.setup, preparation.session, rpc, options.parentAgent, "resume", { enterSession: true, preparation, stored: { handle: stored, written: coldRead.events.length } });
+            const handle = await setupAndPublish(loopCtx, ownerCtx, id, options.agentOptions ?? {}, options.setup, preparation.session, rpc, options.parentAgent, "resume", { enterSession: true, preparation, stored: { handle: stored, written: coldRead.events.length + closers.length } });
             return this.registerHeld(id, ompFile ?? "", handle, rpc);
         }
         catch (error) {

package/cordis.patch.yml

@@ -12,15 +12,14 @@
 #                              zero-port sibling root, mounted under /<label>
 #   - super-dsh/join           the generic hub joiner for the standalone
 #                              claude adapter (R2)
-#   - super-dsh/web-trust      the page-trust component (ported from
-#                              better-dsh web-trust, authorities leg): the
-#                              browser-side twin of the server trustedHosts
-#                              fence — declares trusted page authorities so
-#                              the Web UI treats a non-loopback page (Caddy
-#                              domain / LAN IP) as loopback-equivalent.
-#                              On/off: row `disabled: true`, or config
-#                              `trustedPageAuthorities: []` (inert). Default
-#                              derives from the trusted-hosts env.
+#   - super-dsh/web-trust      authentication-only admission (aligned with
+#                              dashr): every serving Host/Origin is accepted
+#                              after native cookie authentication, and the
+#                              browser owns its Host on any authority. No
+#                              trusted-host CLI flags or environment required.
+#                              Set trustAllHosts: false to retain the native
+#                              fence / declared-authorities mode, or disable
+#                              this row explicitly.
 #   - super-dsh/a2a            the agent-facing A2A tool face (mesh P3): the
 #                              single `superd-hub` model tool on ctx0's tools
 #                              service (dormant without tools; world trees
@@ -36,6 +35,8 @@
       name: 'super-dsh'
     - id: superd-web-trust
       name: 'super-dsh/web-trust'
+      config:
+        trustAllHosts: true
     # Native UI fusion transport (plan Task 3): the ctx0 page-level state atom
     # + five call-time patches. Composing this row IS the switch — there is no
     # environment variable in the decision (2026-09-27 user ruling: a release

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.1.11-b",
+  "version": "0.1.12",
   "description": "Super D for the DeepSeek Harness (DSH) \u2014 one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",