super-dsh 0.1.12-a → 0.3.0

package/README.md

@@ -2,7 +2,7 @@
 
 One [DSH](https://www.npmjs.com/package/@deepseek-ai/dsh) plugin that joins local
 foreign-agent runtimes into the DSH Web UI: a runtime selector in the sidebar,
-a live roster, and one zero-port world per runtime mounted under `/<label>` —
+a live roster, and one zero-port data world per runtime behind `/hub` —
 same browser shell, same auth domain, per-world session separation.
 
 **Owns no runtimes and stores no conversations.** Every adapter keeps its
@@ -14,7 +14,7 @@ the foreign store.
 ## Install
 
 ```bash
-dsh plugin --profile <name> add super-dsh@0.1.12
+dsh plugin --profile <name> add super-dsh@latest
 ```
 
 That single package composes the whole line (`@pgmi-builds/superd-hub` plus the
@@ -22,18 +22,55 @@ six primary `@pgmi-builds/agent-*` packages and three OPTIONAL SDK halves).
 Restart the profile and the
 home under `<DSH_HOME>/agents/<label>/` on first boot.
 
-## Remote web access
-
-The shipped bundle enables `superd-web-trust` with `trustAllHosts: true`.
-Authenticated requests may use any serving Host or Origin, and the browser's
-native trusted-host / loopback checks see the page as Host-owned. No `--host`,
-`--trusted-host`, or trusted-host environment variables are needed for trust.
-Native token-to-cookie login, cookie expiry, and authority binding remain in effect.
+## Better Dash delivery and native Web defaults
+
+This development build embeds [Better Dash](../better-dsh/).
+Every `scripts/pack.mjs` invocation first builds the current same-repository
+`../better-dsh` and packs it with the same npm approach, then embeds that
+artifact using `bundledDependencies`. Missing source or an exact version mismatch
+fails the build; Better Dash is never fetched from a registry during this step.
+The pack verifies every embedded file against the independent Better Dash tarball.
+
+Install Super Dash alone: on first startup its delivery component registers the
+exact enclosed Better Dash tarball through the installed harness's native package
+operation. The native Plugin Manager then shows **Super Dash** and **Better Dash**
+as parallel installed bundles. Their switches are independent: Better alone keeps
+native tools; Super alone keeps Hub/A2A and foreign agents. dev WebMCP stays separate.
+Super never includes Better's YAML in its own bundle patch.
+
+The archive is cached in the current DSH home's `bundle-artifacts/` directory, so
+Better remains reinstallable after Super is removed. An update preserves a retained
+Better disablement; replacing an already installed package requires a DSH restart.
+When both bundles are disabled, companion updates wait until either is enabled.
+Explicitly uninstalling Better is respected for the same Super artifact.
+Both source directories share one repository, and Better Dash remains separately
+installable with the same version. These local development artifacts have not been
+published to npm.
+
+Disabling Better restores native Web binding, trusted-host, login and onboarding
+policies. Remote deployments must supply native DSH trusted-host configuration;
+Super does not take ownership of those Better policies.
+
+Better Dash owns the native DSH policies: `dashr-web-trust` retains cookie
+authentication while accepting authenticated serving Host/Origin values; its
+password page provides new-client login. Cookie expiry and authority binding remain.
+`dashr-webserver` defaults to `0.0.0.0`; native `--port` and explicit loopback
+`--host` overrides are preserved. Super Dash carries no duplicate WebTrust.
+To restore the native address fence, set `dashr-web-trust`'s `trustAllHosts: false`.
+
+Better Dash also disables automatic credential onboarding and acknowledges the
+installed Models client's current welcome version before the listener opens.
+Manual model configuration remains available. To restore native welcome behavior:
+
+```yaml
+- id: dashr-welcome-notice
+  disabled: true
+```
 
-This does not change the listening address: use the native loopback listener
-behind your reverse proxy or LAN relay. Remove older manual host/trusted-host
-patches and any profile override disabling `superd-web-trust`. To restore the
-native address fence, explicitly set this row's `trustAllHosts: false`.
+Version-only upstream bumps adapt at the next startup. A renamed private constant
+or changed bundle layout fails explicitly and requires adaptation or disabling the
+entry. Dev WebMCP lives in the root `dev-webmcp/` directory and is included
+only as an extra development profile bundle, never in either release tarball.
 
 ## Runtimes
 

package/agent-agy/dist/world-plugin.d.ts

@@ -3,7 +3,7 @@ export declare const name = "agent-agy";
 interface HostContext {
     provide(name: string, value: unknown): void;
     inject(deps: string[], callback: (ctx: unknown) => void): unknown;
-    effect?(callback: () => () => void, label?: string): unknown;
+    effect(callback: () => () => Promise<void>, label?: string): unknown;
     get(name: string): unknown;
 }
 export declare function apply(ctx: HostContext): void;

package/agent-agy/dist/world-plugin.js

@@ -21,12 +21,12 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 export const name = 'agent-agy';
 /** Runtime key — also the mount label. */
 const KEY = 'agy';
 export function apply(ctx) {
-    registerAgent({ key: KEY, label: 'Antigravity', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -44,34 +44,21 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-agy',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'Antigravity' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-agy-sdk/dist/world-plugin.d.ts

@@ -3,7 +3,7 @@ export declare const name = "agent-agy-sdk";
 interface HostContext {
     provide(name: string, value: unknown): void;
     inject(deps: string[], callback: (ctx: unknown) => void): unknown;
-    effect?(callback: () => () => void, label?: string): unknown;
+    effect(callback: () => () => Promise<void>, label?: string): unknown;
     get(name: string): unknown;
 }
 export declare function apply(ctx: HostContext): void;

package/agent-agy-sdk/dist/world-plugin.js

@@ -21,7 +21,8 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 export const name = 'agent-agy-sdk';
 /**
  * Runtime key — also the mount label. Deliberately NOT `agy`: the hub's roster
@@ -31,7 +32,6 @@ export const name = 'agent-agy-sdk';
  */
 const KEY = 'agy-sdk';
 export function apply(ctx) {
-    registerAgent({ key: KEY, label: 'Antigravity (SDK)', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -49,34 +49,21 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-agy-sdk',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'Antigravity (SDK)' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-codex/dist/world-plugin.js

@@ -21,12 +21,12 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 export const name = 'agent-codex';
 /** Runtime key — also the mount label. */
 const KEY = 'codex';
 export function apply(ctx) {
-    registerAgent({ key: KEY, label: 'Codex', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -43,34 +43,21 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-codex',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'Codex' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-codex-sdk/dist/world-plugin.js

@@ -21,21 +21,12 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, unregisterAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 export const name = 'agent-codex-sdk';
 /** Runtime key — also the mount label. */
 const KEY = 'codex-sdk';
 export function apply(ctx) {
-    // Roster membership is FIBER-SCOPED (2026-10-03 acceptance finding):
-    // disabling this row from the plugin manager disposes the fiber, and the
-    // entry must go with it. The `/api/agent-runtime` view hides a row whose
-    // host mount is gone, but the raw roster map is never pruned — so without
-    // this disposer a later re-enable dies on `roster: duplicate agent key
-    // codex-sdk`.
-    ctx.effect?.(() => {
-        registerAgent({ key: KEY, label: 'Codex (SDK)', ready: false });
-        return () => unregisterAgent(KEY);
-    }, `agent-${KEY}: roster`);
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -53,41 +44,21 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-codex-sdk',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        // Toggling the row off must really UNLOAD the world (2026-10-03 omp-sdk
-        // acceptance finding, same shape here): disposing the world's own fiber
-        // disposes its provider, which releases every transport and the refcounted
-        // SDK handle — without this the world outlives its own row.
-        ctx.effect?.(() => () => {
-            void ctxW.fiber?.dispose();
-        }, `agent-${KEY}: world teardown`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'Codex (SDK)' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-hermes/dist/world-plugin.js

@@ -21,12 +21,12 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 export const name = 'agent-hermes';
 /** Runtime key — also the mount label. */
 const KEY = 'hermes';
 export function apply(ctx) {
-    registerAgent({ key: KEY, label: 'Hermes', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -47,34 +47,21 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-hermes',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'Hermes' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-omp/dist/world-plugin.js

@@ -19,7 +19,8 @@
 import { existsSync, mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, unregisterAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { ownWorld } from '../../superd-hub/dist/world-lifecycle.js';
 import { resolveOmpExecutable } from './rpc-client.js';
 export const name = 'agent-omp';
 /** Runtime key — also the mount label. */
@@ -45,13 +46,6 @@ function diagnoseOmpBinary() {
 }
 export function apply(ctx) {
     diagnoseOmpBinary();
-    // Fiber-scoped roster entry: disabling the row disposes this fiber and the
-    // entry must go with it, otherwise a re-enable dies on `roster: duplicate
-    // agent key omp` (same defect the omp-sdk acceptance surfaced live).
-    ctx.effect?.(() => {
-        registerAgent({ key: KEY, label: 'OMP', ready: false });
-        return () => unregisterAgent(KEY);
-    }, `agent-${KEY}: roster`);
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
     // no cwd contract — deriving the world root from cwd spawns worlds into a
     // garbage tree or throws inside apply() and kills the whole host boot.
@@ -69,36 +63,18 @@ export function apply(ctx) {
         adapterPkg: '@pgmi-builds/agent-omp',
         worldHome,
     });
-    const world = (async () => {
-        // T-D: no ctx0 listening-stack wait — the mount record is addressability
-        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
-        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
-        const ctxW = await spawnWorld({
-            appName: `superd-${KEY}`,
-            profileName: 'web',
-            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
-            home: worldHome,
-            dataHome: worldHome,
-            // The host's live table carries this world: spawnWorld republishes a
-            // widened successor before boot imports anything (spec §2.1), and
-            // @pgmi-builds rows resolve from the profile-local links written above.
-            host: ctx,
-            extraPatches: worldMountPatches(KEY),
-        });
-        const gateway = ctxW.get('typertGateway');
-        registerForeignTarget({ key: KEY, gateway });
-        setReady(KEY, true);
-        ctx.effect?.(() => () => {
-            dropHostMount();
-        }, `agent-${KEY}: mount`);
-        // Unloading the row must unload the world: disposing the world's fiber
-        // disposes its provider, which closes every held transport (and therefore
-        // the `omp --mode rpc` children).
-        ctx.effect?.(() => () => {
-            void ctxW.fiber?.dispose();
-        }, `agent-${KEY}: world teardown`);
-        return ctxW;
-    })().catch((cause) => {
+    const world = ownWorld(ctx, { key: KEY, label: 'OMP' }, (ownerId) => spawnWorld({
+        appName: `superd-${KEY}`,
+        profileName: 'web',
+        installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
+        home: worldHome,
+        dataHome: worldHome,
+        // The host's live table carries this world: spawnWorld republishes a
+        // widened successor before boot imports anything (spec §2.1), and
+        // @pgmi-builds rows resolve from the profile-local links written above.
+        host: ctx,
+        extraPatches: worldMountPatches(KEY, ownerId),
+    }), (cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
         // promise would fail the entire host boot (loader entry apply).
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
@@ -110,7 +86,6 @@ export function apply(ctx) {
                 console.error(`[super-dsh] ${KEY} startup:`, JSON.stringify(message));
             }
         }
-        return null;
     });
     ctx.provide(`superd.world.${KEY}`, world);
 }