super-dsh 0.1.11 → 0.1.12-a

package/README.md

@@ -14,7 +14,7 @@ the foreign store.
 ## Install
 
 ```bash
-dsh plugin --profile <name> add super-dsh@0.1.11
+dsh plugin --profile <name> add super-dsh@0.1.12
 ```
 
 That single package composes the whole line (`@pgmi-builds/superd-hub` plus the
@@ -22,17 +22,63 @@ six primary `@pgmi-builds/agent-*` packages and three OPTIONAL SDK halves).
 Restart the profile and the
 home under `<DSH_HOME>/agents/<label>/` on first boot.
 
+## Remote web access
+
+The shipped bundle enables `superd-web-trust` with `trustAllHosts: true`.
+Authenticated requests may use any serving Host or Origin, and the browser's
+native trusted-host / loopback checks see the page as Host-owned. No `--host`,
+`--trusted-host`, or trusted-host environment variables are needed for trust.
+Native token-to-cookie login, cookie expiry, and authority binding remain in effect.
+
+This does not change the listening address: use the native loopback listener
+behind your reverse proxy or LAN relay. Remove older manual host/trusted-host
+patches and any profile override disabling `superd-web-trust`. To restore the
+native address fence, explicitly set this row's `trustAllHosts: false`.
+
 ## Runtimes
 
 | Label | Runtime | Integration |
 |---|---|---|
 | OMP | OMP (`~/.omp`) | host `omp` binary over RPC (`omp --mode rpc`, NDJSON v1), lazy per session |
-| Codex | Codex app-server (`~/.codex`) | desktop core first, CLI and bundled core fallback |
+| Codex | Codex app-server (`~/.codex`) | CLI first, desktop core and lazy world-home fetch fallback |
 | Claude | Claude Code (`~/.claude`) | standalone adapter, joined by the hub |
 | Pi | pi coding agent (`~/.pi`) | in-process SDK |
 | Hermes | Hermes (`~/.hermes`) | gateway child |
 | Antigravity | agy SDK | Python bridge (`bridge/agy_bridge.py`) |
 
+### Foreign-agent Hub facility
+
+Super D sessions in Pi, OMP, and Codex can use the same `superd-hub` facility
+for agent roster/status, messaging, and shell execution. Tool descriptions,
+argument validation, receipts, and reply guidance come from the existing Hub.
+Replies wake the initiating session automatically; do not poll for them.
+
+Pi and OMP share one native extension. It is loaded incrementally on the first
+prompt, preserving normal extension discovery and native tools. Its per-session
+wrapper lives under the Super D world home (`hub-extensions`, mode 0600), with a
+session capability for a loopback-only HTTP listener. No global extension is
+installed in `~/.pi` or `~/.omp`. Some OMP versions present registered extension
+tools as devices: read `xd://superd-hub` for instructions and write action JSON
+to that device.
+
+Codex uses the official experimental app-server `dynamicTools` interface on
+new threads. Callbacks bind to that thread and the Super D session; existing
+native tools/plugins remain available. No global plugin is installed in
+`~/.codex`. Resuming a thread created through this integration restores its
+saved tool definition. Older threads without that definition need a new
+Super D conversation to gain the facility. A native Codex client resuming one
+of these threads does not supply Super D's callback host.
+
+Pi/OMP extension closures cannot transparently renew an already-loaded listener
+capability when the Hub row is unmounted/remounted. Restart Super D and resume
+the conversation after that operation; the tool reports this recovery path
+when its connection becomes unavailable. Whole-app restart/resume is tested.
+
+Draft creation and passive history viewing create no extension file, listener,
+or agent process. Closing a session invalidates its capability. Interrupted
+tool operations retain conservative upstream recovery guidance about unknown
+outcomes rather than encouraging blind retries.
+
 ### Codex in 0.1.11
 
 Codex discovers the local OpenAI OAuth login as a read-only provider in the
@@ -44,10 +90,12 @@ The adapter prefers the installed desktop core, then the CLI, then the bundled
 0.160.0 core (`CODEX_BIN` overrides discovery). Desktop host browser and computer
 use services are separate and are not attached by this adapter.
 
-**Known limitation:** returning a session with third-party reasoning history to
-OpenAI OAuth can be rejected by the official endpoint. Use a separate official
-session for now. Compaction before switching was proven in an isolated probe;
-automatic compaction is not included in this release.
+**Provider compatibility:** each provider defines its own message, reasoning,
+and encrypted-state formats. Selecting another provider does not guarantee
+that it can consume the existing session history. Successful continuation
+across endpoints is an observed convenience, not an adapter guarantee.
+The adapter surfaces provider errors; if the selected provider rejects the
+history, start a new session with that provider.
 
 ### Opt-in SDK halves
 

package/agent-agy/dist/agent.d.ts

@@ -35,6 +35,7 @@ import { type WithSystemHead } from "../../superd-hub/dist/index.js";
 /** The CLI stream transport the agent drives (SDK bridge moved to agent-agy-sdk). */
 export type LiveAgyClient = Pick<AgyCliClient, "conversationId" | "lastUsage" | "onThinkingDelta" | "onToolEvent" | "setApprovalHandler" | "turn" | "close"> & {
     setSystemMessageHandler?(handler: (text: string) => void): void;
+    interrupt?: () => Promise<void>;
 };
 /** Classify a bridge turn failure into the stable {message, code} UI chip. */
 export declare function classifyTurnError(error: unknown): {
@@ -100,6 +101,8 @@ export declare class AgyAgent implements Agent {
     private deliver;
     private deliverPrompt;
     private sessionIdentityCommitted;
+    private seenToolCalls;
+    private stepOpen;
     /** Stamp the single-preset selection once per session (projection seed). */
     private bootstrapSessionIdentity;
     private startTurn;
@@ -119,6 +122,7 @@ export declare class AgyAgent implements Agent {
     /** Flush ONE parked follow-up as a fresh prompt (never submit while busy). */
     private flushFollowUps;
     private pendingThinking;
+    private stopInFlight?;
     /** Calls from this turn still lacking a result (SDK 0.1.17 exposes none). */
     private unpairedCalls;
     private armTurnDeadline;

package/agent-agy/dist/agent.js

@@ -44,7 +44,7 @@ const trace = (...parts) => {
 /** Classify a bridge turn failure into the stable {message, code} UI chip. */
 export function classifyTurnError(error) {
     const text = error instanceof Error ? error.message : String(error);
-    if (/429|prepayment|quota|rate limit/i.test(text))
+    if (/429|prepayment|quota|rate limit|billing/i.test(text))
         return { message: text, code: "QUOTA" };
     if (/api key|authentication|unauthenticated|API_KEY/i.test(text))
         return { message: text, code: "AUTH" };
@@ -125,9 +125,15 @@ export class AgyAgent {
             if (!this.turnOpen)
                 return;
             if (ev.event === "tool_call") {
-                if (this.step > 0)
-                    this.closeStep();
-                this.commitStepStart();
+                if (this.seenToolCalls.has(ev.id))
+                    return;
+                this.seenToolCalls.add(ev.id);
+                // Concurrent tools share their originating step until every call resolves.
+                if (this.unpairedCalls.length === 0) {
+                    if (this.step > 0)
+                        this.closeStep();
+                    this.commitStepStart();
+                }
                 const callId = ToolCallId(ev.id || `agy-${this.dashTurn}-${this.step}`);
                 const argumentsJson = ev.args || "{}";
                 // Advertisement-before-execution (validator invariant, 2026-10-04 dev3
@@ -156,6 +162,8 @@ export class AgyAgent {
             else {
                 // ToolResult chunks: the SDK yields none today; if a future version
                 // does, pair them off immediately so no placeholder is written.
+                if (!this.unpairedCalls.some(c => c.callId === ev.id))
+                    return;
                 this.unpairedCalls = this.unpairedCalls.filter((c) => c.callId !== (ev.id || ""));
                 this.session.append("tool/result", {
                     turn: this.dashTurn, step: this.step,
@@ -254,6 +262,8 @@ export class AgyAgent {
         void this.startTurn(message);
     }
     sessionIdentityCommitted = false;
+    seenToolCalls = new Set();
+    stepOpen = false;
     /** Stamp the single-preset selection once per session (projection seed). */
     bootstrapSessionIdentity() {
         if (this.sessionIdentityCommitted)
@@ -264,6 +274,7 @@ export class AgyAgent {
         }
     }
     async startTurn(message) {
+        this.seenToolCalls.clear();
         this.bootstrapSessionIdentity();
         this.session.append("turn/start", { turn: this.dashTurn });
         this.session.append("user/message", message, { surfaceOp: "append" });
@@ -277,7 +288,13 @@ export class AgyAgent {
                 trace("onboarding: key stored");
             }
             else {
-                this.appendSystemNotice(ONBOARDING_PROMPT);
+                this.appendAssistantMessage(ONBOARDING_PROMPT);
+                this.closeStep();
+                this.closeTurn({ kind: "error", error: { code: "AUTH", message: ONBOARDING_PROMPT } });
+                this.markIdle();
+                this.endActivity();
+                this.flushFollowUps();
+                return;
             }
             this.closeTurn({ kind: "completed" });
             this.markIdle();
@@ -293,6 +310,8 @@ export class AgyAgent {
                 this.ensureStreamBridge().push({ type: "text-delta", index: full.length, text: chunk });
                 full += chunk;
             }
+            await this.stopInFlight;
+            this.stopInFlight = undefined;
             this.clearTurnDeadline();
             // SDK 0.1.17 streams ToolCall but NEVER ToolResult (verified live and
             // in SDK source: receive_chunks yields Thought/Text/ToolCall only; the
@@ -327,6 +346,8 @@ export class AgyAgent {
             this.flushFollowUps();
         }
         catch (error) {
+            await this.stopInFlight;
+            this.stopInFlight = undefined;
             this.clearTurnDeadline();
             this.abandonStreamBridge();
             const failure = classifyTurnError(error);
@@ -345,8 +366,10 @@ export class AgyAgent {
             if (this.turnOpen && this.step > 0)
                 this.closeStep();
             this.closeTurn({ kind: "error", error: failure });
+            this.cancelCause = null;
             this.markIdle();
             this.endActivity();
+            this.flushFollowUps();
         }
     }
     appendSystemNotice(text) {
@@ -404,18 +427,21 @@ export class AgyAgent {
     closeTurn(reason) {
         if (!this.turnOpen)
             return;
+        this.closeStep();
         this.turnOpen = false;
         this.clearTurnDeadline();
         this.session.append("turn/end", { turn: this.dashTurn, reason });
     }
     closeStep() {
-        if (!this.turnOpen || this.step <= 0)
+        if (!this.turnOpen || !this.stepOpen)
             return;
+        this.stepOpen = false;
         this.session.append("step/end", { turn: this.dashTurn, step: this.step });
     }
     commitStepStart() {
-        if (!this.turnOpen)
+        if (!this.turnOpen || this.stepOpen)
             return;
+        this.stepOpen = true;
         this.step += 1;
         this.session.append("step/start", { turn: this.dashTurn, step: this.step });
     }
@@ -452,6 +478,7 @@ export class AgyAgent {
         this.deliverPrompt(entry.message);
     }
     pendingThinking = [];
+    stopInFlight;
     /** Calls from this turn still lacking a result (SDK 0.1.17 exposes none). */
     unpairedCalls = [];
     armTurnDeadline() {
@@ -462,6 +489,13 @@ export class AgyAgent {
             if (!this.turnOpen)
                 return;
             trace(`turn deadline exceeded after ${AGY_TURN_DEADLINE_MS}ms — failing open turn`);
+            if (this.client.interrupt !== undefined) {
+                // Keep ownership until the old CLI stops. Its catch pairs unresolved
+                // calls and only then starts the next queued message.
+                this.cancelCause = { kind: "hook", reason: `agy turn deadline exceeded after ${AGY_TURN_DEADLINE_MS}ms` };
+                this.stopInFlight = this.client.interrupt().catch(error => trace(`deadline interrupt failed: ${String(error)}`));
+                return;
+            }
             this.abandonStreamBridge();
             if (this.step > 0)
                 this.closeStep();

package/agent-agy/dist/agy-cli-client.d.ts

@@ -15,6 +15,7 @@
  *
  * Same surface as AgyBridgeClient so AgyAgent needs no changes.
  */
+import type { ForeignHubBinding } from "@pgmi-builds/superd-hub/foreign-hub";
 import { type AgyAuthMode, type AgySettingsMutation } from "./agy-auth.js";
 export interface AgyCliOptions {
     /** Key or a resolver (onboarding-saved keys become visible at first spawn). */
@@ -49,6 +50,9 @@ export interface AgyCliOptions {
     authMode?: AgyAuthMode;
     spawnAttempts?: number;
     trace?: (...parts: unknown[]) => void;
+    hubBinding?: ForeignHubBinding;
+    hubStagingDirectory?: string;
+    prepareHub?: () => Promise<string | undefined>;
 }
 export type CliEvent = {
     event: "ready";
@@ -110,6 +114,12 @@ export declare class AgyCliClient {
     private dead;
     private conversationIdValue;
     private toolsSeen;
+    private toolCalls;
+    private toolResults;
+    private stepFailure?;
+    private hubPreparation?;
+    private hubSession?;
+    private prepare;
     onThinkingDelta?: (text: string) => void;
     onToolEvent?: (ev: {
         event: "tool_call";
@@ -163,5 +173,7 @@ export declare class AgyCliClient {
     private readyReceived;
     private expectReady;
     ping(): Promise<void>;
+    /** Stop one CLI execution, preserving its conversation and Hub capability. */
+    interrupt(): Promise<void>;
     close(): Promise<void>;
 }

package/agent-agy/dist/agy-cli-client.js

@@ -16,6 +16,9 @@
  * Same surface as AgyBridgeClient so AgyAgent needs no changes.
  */
 import { spawn } from "node:child_process";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+import { prepareAgyNativePlugin } from "@pgmi-builds/superd-hub/foreign-agy";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { authChildEnv, authSettingsMutation, nativeSettingsPath, } from "./agy-auth.js";
@@ -63,6 +66,27 @@ export class AgyCliClient {
     dead = false;
     conversationIdValue = "";
     toolsSeen = 0;
+    toolCalls = new Set();
+    toolResults = new Set();
+    stepFailure;
+    hubPreparation;
+    hubSession;
+    async prepare() {
+        if (this.dead)
+            throw new Error("agy client is closed");
+        this.hubPreparation ??= (async () => {
+            if (this.opts.hubBinding === undefined)
+                return;
+            this.hubSession = await (this.opts.prepareHub?.() ?? prepareAgyNativePlugin(this.opts.hubBinding, join(this.realHome(), ".gemini", "antigravity-cli"), this.opts.hubStagingDirectory, async (directory) => {
+                const exec = promisify(execFile);
+                await exec(this.opts.agyBin ?? "agy", ["plugin", "install", directory], { timeout: 60_000 });
+                await exec(this.opts.agyBin ?? "agy", ["plugin", "enable", "superd-hub"], { timeout: 60_000 });
+            }));
+        })();
+        await this.hubPreparation;
+        if (this.dead)
+            throw new Error("agy client is closed");
+    }
     onThinkingDelta;
     onToolEvent;
     setApprovalHandler(_handler) {
@@ -90,6 +114,8 @@ export class AgyCliClient {
     spawnCli() {
         if (this.child || this.dead)
             return;
+        this.pending.length = 0;
+        this.buffer = "";
         const mode = this.opts.authMode ?? "apiKey";
         // Only key mode patches settings (`modelProvider: "gemini"`); ADC and OAuth
         // need the DEFAULT backend, where that key must be ABSENT — the binary
@@ -107,8 +133,9 @@ export class AgyCliClient {
             "--input-format=stream-json", "--output-format=stream-json",
             "--disable-slash-commands",
         ];
-        if (this.opts.conversationId)
-            args.push(`--conversation=${this.opts.conversationId}`);
+        const conversationId = this.conversationIdValue || this.opts.conversationId;
+        if (conversationId)
+            args.push(`--conversation=${conversationId}`);
         if (this.opts.model)
             args.push(`--model=${this.opts.model}`);
         if (this.opts.effort)
@@ -127,6 +154,9 @@ export class AgyCliClient {
                 // ADC, the key for key mode, and the auto-update pin on EVERY mode.
                 // NO_PROXY keeps the dev3 loopback bridge reachable.
                 const env = { ...process.env, NO_PROXY: "127.0.0.1,localhost", ...authChildEnv(mode, key) };
+                delete env.SUPERD_HUB_SESSION;
+                if (this.hubSession !== undefined)
+                    env.SUPERD_HUB_SESSION = this.hubSession;
                 // No HOME override, ever: the settings we just maintained live at
                 // `$HOME/.gemini`, ADC at `$HOME/.config/gcloud`, and the sign-in token
                 // in the keyring — isolating HOME destroys all three. That was the
@@ -155,6 +185,8 @@ export class AgyCliClient {
         });
         child.on("exit", (code) => {
             this.child = undefined;
+            this.readyReceived = false;
+            this.buffer = "";
             // The CLI reports its refusals on stderr / as non-JSON stdout lines and
             // then exits non-zero. Those lines ARE the diagnosis ("--effort is not
             // supported for model …", "Eligibility check failed: …"), so the exit
@@ -206,6 +238,8 @@ export class AgyCliClient {
                 continue;
             }
             if (parsed.event === "init") {
+                if (typeof parsed.conversation_id === "string")
+                    this.conversationIdValue = parsed.conversation_id;
                 const init = parsed.init;
                 this.toolsSeen = Array.isArray(init?.tools) ? init.tools.length : 0;
                 this.dispatch({ event: "ready", tools: this.toolsSeen, permissionMode: init?.permission_mode });
@@ -217,8 +251,8 @@ export class AgyCliClient {
                 const r = parsed.result;
                 if (r?.conversation_id)
                     this.conversationIdValue = r.conversation_id;
-                if (r?.status !== "SUCCESS") {
-                    this.dispatch({ event: "error", error: this.withDiagnostics(r?.error ?? `agy result status=${r?.status}`), recoverable: false });
+                if (r?.status !== "SUCCESS" || this.stepFailure !== undefined) {
+                    this.dispatch({ event: "error", error: this.withDiagnostics(r?.error ?? this.stepFailure ?? `agy result status=${r?.status}`), recoverable: false });
                 }
                 else {
                     this.dispatch({ event: "done", conversation_id: this.conversationIdValue, turn_ms: 0 });
@@ -228,6 +262,12 @@ export class AgyCliClient {
     }
     consumeStep(su) {
         const st = su.step_type;
+        if (su.conversation_id)
+            this.conversationIdValue = su.conversation_id;
+        if (st === "error_message") {
+            this.stepFailure = su.text_delta || "Antigravity reported an error without details";
+            return;
+        }
         if (st === "system_message") {
             this.onSystemMessage?.(su.text_delta ?? "");
             return;
@@ -255,26 +295,28 @@ export class AgyCliClient {
             return;
         }
         if (st === "tool") {
-            const name = su.tool_name ?? su.tool_info?.name ?? "unknown";
+            const wireName = String(su.tool_name ?? "");
+            const name = su.tool_info?.name || (/^\d+$/.test(wireName) ? "unknown" : wireName) || "unknown";
             const id = `${this.conversationIdValue}:${su.step_index ?? 0}`;
-            if (su.state === "ACTIVE") {
+            if (su.state === "ACTIVE" && !this.toolCalls.has(id)) {
+                this.toolCalls.add(id);
                 this.dispatch({
                     event: "tool_call", id, name,
                     args: JSON.stringify(su.tool_info?.parameters ?? {}),
                 });
-                this.onToolEvent?.({ event: "tool_call", id, name, args: JSON.stringify(su.tool_info?.parameters ?? {}) });
             }
-            else if (su.state === "DONE" || su.state === "ERROR") {
+            else if ((su.state === "DONE" || su.state === "ERROR") && !this.toolResults.has(id)) {
+                if (!this.toolCalls.has(id)) {
+                    this.toolCalls.add(id);
+                    this.dispatch({ event: "tool_call", id, name, args: JSON.stringify(su.tool_info?.parameters ?? {}) });
+                }
+                this.toolResults.add(id);
                 const output = su.tool_info?.output ?? "";
                 const isError = su.state === "ERROR";
                 this.dispatch({
                     event: "tool_result", id, name, is_error: isError,
                     result: output || (isError ? "tool failed" : "[agy CLI reported no output summary]"),
                 });
-                this.onToolEvent?.({
-                    event: "tool_result", id, name, is_error: isError,
-                    result: output || (isError ? "tool failed" : "[agy CLI reported no output summary]"),
-                });
             }
         }
     }
@@ -298,8 +340,13 @@ export class AgyCliClient {
     }
     /** One turn. First call spawns the CLI (lazy per §14-i) and keeps it resident. */
     async *turn(text) {
+        await this.prepare();
         this.spawnCli();
         await this.expectReady();
+        this.toolCalls.clear();
+        this.toolResults.clear();
+        this.stepFailure = undefined;
+        this.diagnostics = [];
         this.send({ event: "user", message: { content: text } });
         let full = "";
         for (;;) {
@@ -343,13 +390,34 @@ export class AgyCliClient {
         }
     }
     async ping() {
+        await this.prepare();
         this.spawnCli();
         await this.expectReady();
     }
+    /** Stop one CLI execution, preserving its conversation and Hub capability. */
+    async interrupt() {
+        const child = this.child;
+        if (child === undefined)
+            return;
+        this.readyReceived = false;
+        const exited = new Promise(resolve => child.once("exit", () => resolve()));
+        child.kill("SIGTERM");
+        const timer = setTimeout(() => child.kill("SIGKILL"), 2000);
+        timer.unref();
+        try {
+            await exited;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
     async close() {
-        if (!this.child)
+        if (this.dead)
             return;
         this.dead = true;
+        await this.opts.hubBinding?.dispose();
+        if (!this.child)
+            return;
         const child = this.child;
         try {
             child.stdin.end();

package/agent-agy/dist/index.js

@@ -18,6 +18,7 @@
  * `sessionPersistence` service (hermes create/resume transaction shape).
  */
 import { realpathSync, statSync } from "node:fs";
+import { bindForeignHub } from "@pgmi-builds/superd-hub/foreign-hub";
 import { join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
 import { installModelSelection } from "@deepseek-ai/dsh-agent";
@@ -149,6 +150,8 @@ export class AgyProvider extends Service {
     hasAuthEvidence() {
         if (this.resolveApiKey() !== undefined)
             return true;
+        if (hasSigninCredential(this.opts.realHome ?? process.env.HOME ?? ""))
+            return true;
         return hasAdcEvidence(process.env, process.env.HOME ?? "");
     }
     /** Default model id: adapter state → native TUI default (slug-normalized) → catalog head. */
@@ -260,7 +263,8 @@ export class AgyProvider extends Service {
         trace(`create id=${id} spawnCwd=${spawnCwd}`);
         // Full-lazy (§14-i): construct the client (spawns NOTHING); the bridge
         // child materializes on the first real prompt.
-        const client = this.createLiveClient(spawnCwd, agentOptionsModel(options.agentOptions), options.agentOptions?.reasoningEffort);
+        const agentRef = {};
+        const client = this.createLiveClient(spawnCwd, agentOptionsModel(options.agentOptions), options.agentOptions?.reasoningEffort, bindForeignHub("agy", id, this.home, () => agentRef.current));
         const preparation = SessionPreparation.create(loopCtx.sessions.prepare(id, {
             ...(options.seed === undefined ? {} : { seed: options.seed }),
             ...(meta === undefined ? {} : { meta }),
@@ -273,7 +277,7 @@ export class AgyProvider extends Service {
             upsertSession(this.home, String(id), { conversationId: null, cwd: spawnCwd, createdAt: Date.now(), preset: null });
             handedOff = true;
             const agentOptions = await this.sessionAgentOptions(options.agentOptions);
-            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "startup", { enterSession: true, preparation }, stored, this.agentRuntime(spawnCwd), () => this.followConversationId(id, client));
+            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "startup", { enterSession: true, preparation }, stored, this.agentRuntime(spawnCwd), () => this.followConversationId(id, client), agentRef);
         }
         catch (error) {
             trace(`create ${id} THREW: ${String(error)}`);
@@ -318,7 +322,8 @@ export class AgyProvider extends Service {
                 }
                 return verified;
             })();
-        const client = this.createLiveClient(spawnCwd, agentOptionsModel(options.agentOptions), options.agentOptions?.reasoningEffort);
+        const agentRef = {};
+        const client = this.createLiveClient(spawnCwd, agentOptionsModel(options.agentOptions), options.agentOptions?.reasoningEffort, bindForeignHub("agy", id, this.home, () => agentRef.current), blank ? undefined : record.conversationId);
         let handle;
         let stored;
         let preparation;
@@ -340,7 +345,7 @@ export class AgyProvider extends Service {
             handle = undefined;
             handedOff = true;
             const agentOptions = await this.sessionAgentOptions(options.agentOptions);
-            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "resume", { enterSession: true, preparation }, stored, this.agentRuntime(spawnCwd), () => this.followConversationId(id, client));
+            return await setupAndPublish(loopCtx, ownerCtx, id, agentOptions, options.setup, preparation.session, client, options.parentAgent, "resume", { enterSession: true, preparation }, stored, this.agentRuntime(spawnCwd), () => this.followConversationId(id, client), agentRef);
         }
         catch (error) {
             trace(`resume ${id} THREW: ${String(error)}`);
@@ -363,8 +368,8 @@ export class AgyProvider extends Service {
      * environment for free while the SDK is an opt-in extra. Auth-form selection
      * still rides the agy-auth ladder.
      */
-    createLiveClient(cwd, modelId, reasoningEffort) {
-        return new AgyCliClient(this.cliOptions(cwd, modelId, reasoningEffort));
+    createLiveClient(cwd, modelId, reasoningEffort, hubBinding, conversationId) {
+        return new AgyCliClient({ ...this.cliOptions(cwd, modelId, reasoningEffort), conversationId, hubBinding, hubStagingDirectory: join(this.home, "hub-native-agy") });
     }
     /**
      * The auth form this machine should use: an explicitly selected, actually
@@ -457,7 +462,7 @@ async function appendUnstoredSuffix(stored, session) {
     stored.storedCount += suffix.length;
 }
 /** Shared create/resume transaction (module-level: Cordis tracing proxy). */
-async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, session, client, parentAgent, source, opts, stored, runtimeInfo, onTurnDone) {
+async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, session, client, parentAgent, source, opts, stored, runtimeInfo, onTurnDone, agentRef) {
     const runtime = { ...runtimeInfo, onTurnDone };
     let detachSession;
     let detachAgent;
@@ -465,6 +470,7 @@ async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, sessi
     let idleExit;
     try {
         agent = new AgyAgent(loopCtx, id, agentOptions, session, client, () => idleExit?.(), runtime);
+        agentRef.current = agent;
         // Pin THIS session to the agy route (static resolution — synchronous).
         try {
             const selection = { provider: agentOptions.provider ?? "agy", model: agentOptions.model ?? "" };

package/agent-agy/package.json

@@ -30,7 +30,8 @@
     "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0"
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
+    "@pgmi-builds/superd-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -51,6 +52,9 @@
     "@deepseek-ai/dsh-session-persistence": {
       "optional": true
     },
+    "@pgmi-builds/superd-hub": {
+      "optional": true
+    },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
     }