super-dsh 0.1.11 → 0.1.12

package/agent-omp/dist/agent.js

@@ -1,3 +1,4 @@
+import { ToolCallRecovery } from "@deepseek-ai/dsh-session";
 import { agentEvents } from "@deepseek-ai/dsh-agent";
 import { Inbox } from "./inbox.js";
 import { LlmAttemptId, ToolCallId, QUOTA_EXCEEDED_CODE, createAssistantMessage, createSystemMessage, createToolResultMessage, createUserMessage } from "@deepseek-ai/dsh-llm";
@@ -265,6 +266,8 @@ export class OmpAgent {
     #step = 0;
     #lastTurn = 0;
     #turnOpen = false;
+    #turnCommitted = false;
+    #stepOpen = false;
     #cancelCause = null;
     /** Terminal model failure of the open turn (`message_end` stopReason "error"); consumed by `agent_end`. */
     #pendingFailure = null;
@@ -486,7 +489,7 @@ export class OmpAgent {
         catch (error) {
             trace(`#startTurn cold start failed: ${String(error)}`);
             if (this.#turnOpen) {
-                this.session.append("turn/start", { turn: this.#dashTurn });
+                this.#commitTurnStart();
                 this.session.append("user/message", message, { surfaceOp: "append" });
                 this.#closeTurn({ kind: "error", error: { message: String(error), code: "UNKNOWN" } });
             }
@@ -495,7 +498,7 @@ export class OmpAgent {
         }
         if (this.#disposed)
             return;
-        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#commitTurnStart();
         this.session.append("user/message", message, { surfaceOp: "append" });
         void this.#rpc.prompt(userMessageText(message)).catch((error) => this.#fail(error));
     }
@@ -709,12 +712,35 @@ export class OmpAgent {
             return;
         this.#reserveTurn();
         this.#localUserPending = localUser;
-        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#commitTurnStart();
         this.session.append("user/message", message, { surfaceOp: "append" });
     }
+    #commitTurnStart() {
+        if (this.#turnCommitted)
+            return;
+        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#turnCommitted = true;
+    }
     #closeTurn(reason) {
         if (!this.#turnOpen)
             return;
+        this.#commitTurnStart();
+        if (this.#stepOpen) {
+            const events = this.session.snapshotEvents();
+            const start = events.findLastIndex(event => event.type === "step/start");
+            const recovery = new ToolCallRecovery();
+            for (const event of events.slice(start))
+                recovery.observe(event);
+            for (const result of recovery.results()) {
+                this.session.append("tool/result", result.data, {
+                    surfaceOp: "append",
+                    ...(result.sourceEventSeqs === undefined ? {} : { sourceEventSeqs: result.sourceEventSeqs }),
+                });
+            }
+            this.session.append("step/end", { turn: this.#dashTurn, step: this.#step });
+            this.#stepOpen = false;
+        }
+        this.#turnCommitted = false;
         this.#turnOpen = false;
         this.#localUserPending = false;
         this.session.append("turn/end", { turn: this.#dashTurn, reason });
@@ -751,9 +777,12 @@ export class OmpAgent {
             return;
         this.#mirroredTitle = title;
         try {
+            const input = this.session.snapshotEvents().find(event => event.type === "user/message" && event.data.source.kind === "user");
+            if (input === undefined)
+                return;
             this.session.append("session/title", {
                 title,
-                messageSeqs: [],
+                messageSeqs: [input.seq],
                 source: { kind: "provider", provider: "omp" },
             });
         }
@@ -773,6 +802,7 @@ export class OmpAgent {
             return;
         this.#step += 1;
         this.session.append("step/start", { turn: this.#dashTurn, step: this.#step });
+        this.#stepOpen = true;
     }
     /**
      * Bridge an OMP `message_start(role=user)` that was NOT appended locally.
@@ -986,8 +1016,9 @@ export class OmpAgent {
                 break;
             case "turn_end":
                 trace("event turn_end");
-                if (this.#turnOpen) {
+                if (this.#turnOpen && this.#stepOpen) {
                     this.session.append("step/end", { turn: this.#dashTurn, step: this.#step });
+                    this.#stepOpen = false;
                 }
                 break;
             case "agent_end": {

package/agent-omp/dist/index.js

@@ -19,11 +19,12 @@
  *     exact transcript it rendered before the restart. The OMP transcript is
  *     replayed (`get_messages`) only when no Dash log was persisted.
  */
+import { bindForeignHub } from '@pgmi-builds/superd-hub/foreign-hub';
 import { realpathSync, statSync } from "node:fs";
 import { Service } from "@deepseek-ai/cordis";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { SessionPreparation, SessionLogOffset } from "@deepseek-ai/dsh-session";
+import { interruptedTurnClosers, SessionPreparation, SessionLogOffset } from "@deepseek-ai/dsh-session";
 import { LazyOmpRpc } from "./lazy-rpc.js";
 import { OmpAgent } from "./agent.js";
 import { OmpLlmAdapter } from "./adapter.js";
@@ -311,6 +312,13 @@ export class OmpProvider extends Service {
         }
         llm.registerAdapter(providers, new OmpLlmAdapter());
     }
+    hubFor(sessionId) {
+        const fromBoot = this.runtime.ctx.get("dshHomePath");
+        const home = typeof fromBoot === "function" ? fromBoot() : fromBoot;
+        if (typeof home !== "string" || home === "")
+            throw new Error("OMP world has no boot home path");
+        return bindForeignHub('omp', sessionId, home, () => this.runtime.ctx.agents.get(sessionId));
+    }
     async createAgent(ownerCtx, options) {
         const loopCtx = this.runtime.ctx;
         const id = options.sessionId;
@@ -347,7 +355,11 @@ export class OmpProvider extends Service {
         }));
         const session = preparation.session;
         const spawnPermission = () => resolveSpawnPermission(session.snapshotEvents(), defaultPermissionPreset(loopCtx), envApprovalMode());
-        const rpc = new LazyOmpRpc(() => ["--approval-mode", spawnPermission().approvalMode], cwd);
+        const hub = this.hubFor(id);
+        const rpc = new LazyOmpRpc(async () => {
+            const extension = await hub.extensionPath();
+            return ["--approval-mode", spawnPermission().approvalMode, ...(extension === undefined ? [] : ["-e", extension])];
+        }, cwd, () => hub.dispose());
         // The prepared header is the single source of truth for the row the
         // first-spawn adoption writes: v2 folds header identity across
         // live/listed/loaded observations, so created_at/cwd must be copied from
@@ -426,10 +438,13 @@ export class OmpProvider extends Service {
         // Both branches are LAZY and both resolve their launch flag at spawn.
         let rpc;
         try {
+            const closers = interruptedTurnClosers(coldRead.events);
+            if (closers.length > 0)
+                await stored.append(closers);
             // Fresh attach: seed the dsh session from the dsh log (native replay),
             // header identity folded from the stored header verbatim.
             const preparation = SessionPreparation.create(loopCtx.sessions.prepare(id, {
-                seed: [...coldRead.events],
+                seed: [...coldRead.events, ...closers],
                 meta: structuredClone(stored.header),
                 inheritedEventCount: stored.inheritedEventCount,
                 eventState: coldRead.eventState,
@@ -438,14 +453,22 @@ export class OmpProvider extends Service {
             trace(`resume id=${id} seeded from dsh session log (${coldRead.events.length} events), approval=resolve-at-spawn (row fallback ${rowPreset() ?? "none"})${freshOmp ? " fresh-omp" : ""}`);
             const spawnPermission = () => resolveSpawnPermission(preparation.session.snapshotEvents(), rowPreset(), envApprovalMode());
             if (ompFile === undefined) {
-                const lazy = new LazyOmpRpc(() => ["--approval-mode", spawnPermission().approvalMode], spawnCwd);
+                const hub = this.hubFor(id);
+                const lazy = new LazyOmpRpc(async () => {
+                    const extension = await hub.extensionPath();
+                    return ["--approval-mode", spawnPermission().approvalMode, ...(extension === undefined ? [] : ["-e", extension])];
+                }, spawnCwd, () => hub.dispose());
                 lazy.onSpawned((client) => { void adoptSpawnedChild(id, stored.header, client, spawnPermission().preset); });
                 rpc = lazy;
             }
             else {
-                rpc = new LazyOmpRpc(() => ["--approval-mode", spawnPermission().approvalMode, "--resume", ompFile], spawnCwd);
+                const hub = this.hubFor(id);
+                rpc = new LazyOmpRpc(async () => {
+                    const extension = await hub.extensionPath();
+                    return ["--approval-mode", spawnPermission().approvalMode, "--resume", ompFile, ...(extension === undefined ? [] : ["-e", extension])];
+                }, spawnCwd, () => hub.dispose());
             }
-            const handle = await setupAndPublish(loopCtx, ownerCtx, id, options.agentOptions ?? {}, options.setup, preparation.session, rpc, options.parentAgent, "resume", { enterSession: true, preparation, stored: { handle: stored, written: coldRead.events.length } });
+            const handle = await setupAndPublish(loopCtx, ownerCtx, id, options.agentOptions ?? {}, options.setup, preparation.session, rpc, options.parentAgent, "resume", { enterSession: true, preparation, stored: { handle: stored, written: coldRead.events.length + closers.length } });
             return this.registerHeld(id, ompFile ?? "", handle, rpc);
         }
         catch (error) {

package/agent-omp/dist/lazy-rpc.js

@@ -2,6 +2,7 @@ import { OmpRpcClient } from "./rpc-client.js";
 /** Synthetic state for a not-yet-spawned child: quiescent by definition. */
 const IDLE_STATE = { isStreaming: false };
 export class LazyOmpRpc {
+    onClose;
     #spawnArgs;
     #cwd;
     #client;
@@ -18,7 +19,8 @@ export class LazyOmpRpc {
      *   construction and the first prompt — the new-chat permission pick does.
      * @param cwd - the spawn cwd.
      */
-    constructor(spawnArgs, cwd) {
+    constructor(spawnArgs, cwd, onClose) {
+        this.onClose = onClose;
         this.#spawnArgs = spawnArgs;
         this.#cwd = cwd;
     }
@@ -42,7 +44,11 @@ export class LazyOmpRpc {
             return Promise.resolve(this.#client);
         if (this.#spawn === undefined) {
             const args = typeof this.#spawnArgs === "function" ? this.#spawnArgs() : this.#spawnArgs;
-            this.#spawn = OmpRpcClient.spawn(args, this.#cwd).then((client) => {
+            this.#spawn = Promise.resolve(args).then((resolved) => {
+                if (this.#closed)
+                    throw new Error('OMP client closed during extension preparation');
+                return OmpRpcClient.spawn(resolved, this.#cwd);
+            }).then((client) => {
                 // A close() that raced the in-flight spawn wins: dispose immediately.
                 if (this.#closed) {
                     client.close();
@@ -160,7 +166,10 @@ export class LazyOmpRpc {
             this.#client.sendRaw(command);
     }
     close() {
+        if (this.#closed)
+            return;
         this.#closed = true;
+        this.onClose?.();
         const client = this.#client;
         this.#client = undefined;
         client?.close();

package/agent-omp/dist/rpc-client.js

@@ -264,7 +264,12 @@ export class OmpRpcClient {
     async getSystemPrompt() {
         try {
             const state = await this.getState();
-            return state.systemPrompt;
+            const prompt = state.systemPrompt;
+            if (typeof prompt === "string")
+                return prompt;
+            if (Array.isArray(prompt) && prompt.every(part => typeof part === "string"))
+                return prompt.join("\n\n");
+            return undefined;
         }
         catch {
             return undefined;

package/agent-pi/dist/agent.js

@@ -1,3 +1,4 @@
+import { ToolCallRecovery } from "@deepseek-ai/dsh-session";
 import { randomUUID } from "node:crypto";
 import { agentEvents } from "@deepseek-ai/dsh-agent";
 import { Inbox } from "./inbox.js";
@@ -186,6 +187,8 @@ export class PiAgent {
     #step = 0;
     #lastTurn = 0;
     #turnOpen = false;
+    #turnCommitted = false;
+    #stepOpen = false;
     #cancelCause = null;
     /** Terminal model failure of the open turn (`message_end` stopReason "error"); consumed by `agent_end`. */
     #pendingFailure = null;
@@ -402,7 +405,7 @@ export class PiAgent {
         catch (error) {
             trace(`#startTurn cold start failed: ${String(error)}`);
             if (this.#turnOpen) {
-                this.session.append("turn/start", { turn: this.#dashTurn });
+                this.#commitTurnStart();
                 this.session.append("user/message", message, { surfaceOp: "append" });
                 this.#closeTurn({ kind: "error", error: { message: String(error), code: "UNKNOWN" } });
             }
@@ -411,7 +414,7 @@ export class PiAgent {
         }
         if (this.#disposed)
             return;
-        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#commitTurnStart();
         this.#emitRequestContext();
         this.session.append("user/message", message, { surfaceOp: "append" });
         void this.#client.prompt(userMessageText(message)).catch((error) => this.#fail(error));
@@ -562,13 +565,36 @@ export class PiAgent {
             return;
         this.#reserveTurn();
         this.#localUserPending = localUser;
-        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#commitTurnStart();
         this.#emitRequestContext();
         this.session.append("user/message", message, { surfaceOp: "append" });
     }
+    #commitTurnStart() {
+        if (this.#turnCommitted)
+            return;
+        this.session.append("turn/start", { turn: this.#dashTurn });
+        this.#turnCommitted = true;
+    }
     #closeTurn(reason) {
         if (!this.#turnOpen)
             return;
+        this.#commitTurnStart();
+        if (this.#stepOpen) {
+            const events = this.session.snapshotEvents();
+            const start = events.findLastIndex(event => event.type === "step/start");
+            const recovery = new ToolCallRecovery();
+            for (const event of events.slice(start))
+                recovery.observe(event);
+            for (const result of recovery.results()) {
+                this.session.append("tool/result", result.data, {
+                    surfaceOp: "append",
+                    ...(result.sourceEventSeqs === undefined ? {} : { sourceEventSeqs: result.sourceEventSeqs }),
+                });
+            }
+            this.session.append("step/end", { turn: this.#dashTurn, step: this.#step });
+            this.#stepOpen = false;
+        }
+        this.#turnCommitted = false;
         this.#turnOpen = false;
         this.#localUserPending = false;
         this.session.append("turn/end", { turn: this.#dashTurn, reason });
@@ -585,6 +611,7 @@ export class PiAgent {
         this.#stepStartPending = false;
         this.#step += 1;
         this.session.append("step/start", { turn: this.#dashTurn, step: this.#step });
+        this.#stepOpen = true;
         trace(`step/start turn=${this.#dashTurn} step=${this.#step}`);
     }
     /**
@@ -695,10 +722,6 @@ export class PiAgent {
                 trace("event turn_start");
                 this.#stepStartPending = true;
                 this.#pendingFailure = null;
-                // Open the step immediately (pi may never send message_start)
-                // and try the system prompt now that the session exists.
-                this.#commitStepStart();
-                this.#emitSystemMessage();
                 break;
             case "message_start": {
                 const message = event.message;
@@ -798,8 +821,9 @@ export class PiAgent {
                 // Last chance for the system prompt. Appended inside the still-open
                 // step (before step/end) so the step-scope invariant holds.
                 this.#emitSystemMessage();
-                if (this.#turnOpen && this.#step > 0) {
+                if (this.#turnOpen && this.#stepOpen) {
                     this.session.append("step/end", { turn: this.#dashTurn, step: this.#step });
+                    this.#stepOpen = false;
                 }
                 break;
             case "agent_end": {
@@ -839,9 +863,12 @@ export class PiAgent {
             return;
         this.#mirroredTitle = name;
         try {
+            const input = this.session.snapshotEvents().find(event => event.type === "user/message" && event.data.source.kind === "user");
+            if (input === undefined)
+                return;
             this.session.append("session/title", {
                 title: name,
-                messageSeqs: [],
+                messageSeqs: [input.seq],
                 source: { kind: "provider", provider: "pi" },
             });
             trace(`session/title ← pi: "${name}"`);

package/agent-pi/dist/index.js

@@ -25,6 +25,7 @@
  * duplicated by design: pi's native JSONL stays pi's authority; the DSH log
  * is the WebUI copy.
  */
+import { bindForeignHub } from '@pgmi-builds/superd-hub/foreign-hub';
 import { realpathSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
@@ -288,6 +289,9 @@ export class PiProvider extends Service {
             });
         });
     }
+    hubFor(sessionId) {
+        return bindForeignHub('pi', sessionId, this.home, () => this.runtime.ctx.agents.get(sessionId));
+    }
     async createAgent(ownerCtx, options) {
         const loopCtx = this.runtime.ctx;
         const id = options.sessionId;
@@ -315,7 +319,7 @@ export class PiProvider extends Service {
         const client = await PiSessionClient.spawn([], spawnCwd, {
             kind: "create",
             ...(toolset === undefined ? {} : { tools: toolset }),
-        });
+        }, this.hubFor(id));
         const preparation = SessionPreparation.create(loopCtx.sessions.prepare(id, {
             ...(options.seed === undefined ? {} : { seed: options.seed }),
             ...(meta === undefined ? {} : { meta }),
@@ -398,7 +402,7 @@ export class PiProvider extends Service {
         // CREATE-shaped lazy shell — zero pi objects until the first prompt.
         const client = await PiSessionClient.spawn([], spawnCwd, blank
             ? { kind: "create", ...(toolset === undefined ? {} : { tools: toolset }) }
-            : { kind: "resume", sessionFile: record.sessionFile });
+            : { kind: "resume", sessionFile: record.sessionFile }, this.hubFor(id));
         let handle;
         let stored;
         let preparation;

package/agent-pi/dist/pi-client.js

@@ -23,14 +23,23 @@ import { projectSessionEvent } from "./pi-events.js";
 import { getPiModelRuntime } from "./models.js";
 import { trace } from "./knobs.js";
 /** Default factory: the real SDK, over the shared ModelRuntime. */
-let sessionFactory = async ({ cwd, mode }) => {
+let sessionFactory = async ({ cwd, mode, hub }) => {
     const sdk = (await import("@earendil-works/pi-coding-agent"));
     const modelRuntime = await getPiModelRuntime();
     const sessionManager = mode.kind === "resume" ? sdk.SessionManager.open(mode.sessionFile) : sdk.SessionManager.create(cwd);
+    const extension = await hub?.extensionPath();
+    let resourceLoader;
+    if (extension !== undefined) {
+        const { DefaultResourceLoader, getAgentDir } = await import('@earendil-works/pi-coding-agent');
+        const loader = new DefaultResourceLoader({ cwd, agentDir: getAgentDir(), additionalExtensionPaths: [extension] });
+        await loader.reload();
+        resourceLoader = loader;
+    }
     const { session } = await sdk.createAgentSession({
         modelRuntime,
         sessionManager,
         cwd,
+        ...(resourceLoader === undefined ? {} : { resourceLoader }),
         ...(mode.kind === "create" && mode.tools !== undefined && mode.tools.length > 0 ? { tools: mode.tools } : {}),
     });
     return session;
@@ -57,11 +66,11 @@ export class PiSessionClient {
      * `ensureStarted()`. `args` is accepted for omp-seam parity and must be
      * empty — unknown values fail loud (the SDK line has no spawn flags).
      */
-    static async spawn(args, cwd, mode) {
+    static async spawn(args, cwd, mode, hub) {
         if (args.length > 0) {
             throw new Error(`PiSessionClient: unsupported spawn arg "${String(args[0])}" (SDK line)`);
         }
-        return new PiSessionClient({ cwd, mode });
+        return new PiSessionClient({ cwd, mode, ...(hub === undefined ? {} : { hub }) });
     }
     /** Register a wire event listener; returns the unsubscriber. */
     on(listener) {
@@ -183,6 +192,7 @@ export class PiSessionClient {
         if (this.#closed)
             return;
         this.#closed = true;
+        this.config.hub?.dispose();
         try {
             this.#session?.dispose();
         }

package/cordis.patch.yml

@@ -12,15 +12,14 @@
 #                              zero-port sibling root, mounted under /<label>
 #   - super-dsh/join           the generic hub joiner for the standalone
 #                              claude adapter (R2)
-#   - super-dsh/web-trust      the page-trust component (ported from
-#                              better-dsh web-trust, authorities leg): the
-#                              browser-side twin of the server trustedHosts
-#                              fence — declares trusted page authorities so
-#                              the Web UI treats a non-loopback page (Caddy
-#                              domain / LAN IP) as loopback-equivalent.
-#                              On/off: row `disabled: true`, or config
-#                              `trustedPageAuthorities: []` (inert). Default
-#                              derives from the trusted-hosts env.
+#   - super-dsh/web-trust      authentication-only admission (aligned with
+#                              dashr): every serving Host/Origin is accepted
+#                              after native cookie authentication, and the
+#                              browser owns its Host on any authority. No
+#                              trusted-host CLI flags or environment required.
+#                              Set trustAllHosts: false to retain the native
+#                              fence / declared-authorities mode, or disable
+#                              this row explicitly.
 #   - super-dsh/a2a            the agent-facing A2A tool face (mesh P3): the
 #                              single `superd-hub` model tool on ctx0's tools
 #                              service (dormant without tools; world trees
@@ -36,6 +35,8 @@
       name: 'super-dsh'
     - id: superd-web-trust
       name: 'super-dsh/web-trust'
+      config:
+        trustAllHosts: true
     # Native UI fusion transport (plan Task 3): the ctx0 page-level state atom
     # + five call-time patches. Composing this row IS the switch — there is no
     # environment variable in the decision (2026-09-27 user ruling: a release

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Super D for the DeepSeek Harness (DSH) \u2014 one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",
@@ -80,8 +80,6 @@
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.84.2",
-    "@openai/codex": "0.160.0",
-    "ws": "^8.21.0",
     "zod": "4.4.3",
     "@modelcontextprotocol/sdk": "^1.29.0"
   },
@@ -100,7 +98,8 @@
     "@deepseek-ai/dsh-tools": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
     "@deepseek-ai/dsh-user-approval": ">=0.1.5-0 <0.3.0-0",
-    "@deepseek-ai/dsh-user-questions": ">=0.1.5-0 <0.3.0-0"
+    "@deepseek-ai/dsh-user-questions": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-client-connection": ">=0.1.5-0 <0.3.0-0"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -147,6 +146,9 @@
     },
     "@deepseek-ai/dsh-user-questions": {
       "optional": true
+    },
+    "@deepseek-ai/dsh-client-connection": {
+      "optional": true
     }
   },
   "publishConfig": {

package/superd-hub/dist/a2a-row.js

@@ -1,3 +1,5 @@
+import { homedir } from 'node:os';
+import { join } from 'node:path';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { createSuperdHubTool } from './hub-tool.js';
 import { createA2aIngest } from './a2a-ingest.js';
@@ -14,6 +16,10 @@ import { PtyPool } from './exec-pty-session.js';
 import { LocalScriptChannel, WsPtyChannel } from './exec-pty-channel.js';
 import { PTY_EXEC_PATH } from './exec-pty-rpc.js';
 import { agentLinks } from './agent-roster.js';
+import { foreignAgentHandle, registerForeignHubHost, foreignHubEndpoint } from './foreign-hub.js';
+import { refreshHermesNativeEndpoint } from './foreign-native.js';
+import { refreshClaudeNativeEndpoint } from './foreign-claude.js';
+import { refreshAgyNativeEndpoint } from './foreign-agy.js';
 /** Stable Cordis plugin (row) name. */
 export const name = 'superd-a2a';
 /** Zero static injects — the tools/typertGateway legs are dynamic (dormancy). */
@@ -69,7 +75,7 @@ export function wireHubToolRow(ctx, opts = {}) {
         let ingestRef;
         const service = createA2aService({ home, gatewayFor, ingest: () => ingestRef, log: alog });
         const delivery = {
-            agents: { get: (sessionId) => liveAgentHandle(ctx, sessionId) },
+            agents: { get: (sessionId) => liveAgentHandle(ctx, sessionId) ?? foreignAgentHandle(home, sessionId) },
             buffer: (initiatorSessionId, message) => { service.buffer(initiatorSessionId, message); },
         };
         ingestRef = createA2aIngest({ home, gatewayFor, delivery, log: alog });
@@ -141,7 +147,7 @@ export function wireHubToolRow(ctx, opts = {}) {
         };
         const execFaceFull = { ...execFace, pty: execPty };
         // the a2a endpoints (POST /api/superd/a2a + GET /api/superd/a2a/outbox) ride the shared
-        t.tools.register(createSuperdHubTool({
+        const toolDeps = {
             service,
             delivery,
             exec: execFaceFull,
@@ -152,7 +158,18 @@ export function wireHubToolRow(ctx, opts = {}) {
             // native DSH session, so the initiator's a6 is the 'native' row's.
             initiatorOf: (sessionId) => localA2aInitiator(home, 'native', sessionId),
             onWatch: (dispose) => { ctx.effect(() => dispose, 'superd-a2a: a2a completion watch'); },
-        }));
+        };
+        t.tools.register(createSuperdHubTool(toolDeps));
+        t.effect(() => registerForeignHubHost(home, toolDeps), 'superd-a2a: foreign session facility');
+        t.effect(() => {
+            const publication = Promise.all([
+                refreshHermesNativeEndpoint(() => foreignHubEndpoint(home), join(homedir(), '.hermes')),
+                refreshClaudeNativeEndpoint(() => foreignHubEndpoint(home), process.env.CLAUDE_CONFIG_DIR ?? join(homedir(), '.claude')),
+                refreshAgyNativeEndpoint(() => foreignHubEndpoint(home), join(homedir(), '.gemini', 'antigravity-cli')),
+            ])
+                .catch(error => ctx.logger.warn(`superd-a2a: native plugin endpoint refresh failed: ${String(error)}`));
+            return () => publication;
+        }, 'superd-a2a: native post office discovery');
     });
 }
 /** MUST stay an arrow (RM0/better-dash note: function declarations get `new`-called, disposers lost). */

package/superd-hub/dist/connection-trust.d.ts

@@ -0,0 +1,8 @@
+import type { HostConnectionHandle } from '@deepseek-ai/dsh-client-connection';
+/**
+ * Use the native index authenticator as a cookie-only admission delegate.
+ * A fixed, query-free index path prevents token exchange or redirects here;
+ * original Host and Cookie headers preserve the native authority binding and
+ * lifetime. No upstream private fields or cookie-format copies are needed.
+ */
+export declare function installAuthenticationOnlyAdmission(connection: HostConnectionHandle): () => void;

package/superd-hub/dist/connection-trust.js

@@ -0,0 +1,16 @@
+/**
+ * Use the native index authenticator as a cookie-only admission delegate.
+ * A fixed, query-free index path prevents token exchange or redirects here;
+ * original Host and Cookie headers preserve the native authority binding and
+ * lifetime. No upstream private fields or cookie-format copies are needed.
+ */
+export function installAuthenticationOnlyAdmission(connection) {
+    const original = connection.requestRejection;
+    const response = { writeHead() { }, end() { } };
+    connection.requestRejection = (request) => connection.authorizeIndex({
+        headers: request.headers,
+        method: 'GET',
+        url: '/index.html',
+    }, response) ? undefined : 401;
+    return () => { connection.requestRejection = original; };
+}

package/superd-hub/dist/foreign-agy.d.ts

@@ -0,0 +1,3 @@
+import type { ForeignHubBinding } from './foreign-hub.js';
+export declare function refreshAgyNativeEndpoint(endpoint: () => Promise<string | undefined>, nativeHome: string): Promise<void>;
+export declare function prepareAgyNativePlugin(binding: Pick<ForeignHubBinding, 'transport'>, nativeHome: string, stagingDirectory: string, install: (directory: string) => Promise<unknown>): Promise<string | undefined>;