super-dsh 0.1.2 → 0.1.3-d

package/agent-agy/dist/agy-sessions.d.ts

@@ -1,3 +1,4 @@
+/** Prod homes that must never be resolved into (repo red line). */
 /** One persisted DSH → Antigravity conversation pairing. */
 export interface AgySessionRecord {
     /** The SDK conversation id; `null` until the first turn materializes it. */
@@ -12,7 +13,7 @@ export interface AgySessionRecord {
 export type AgySessionMap = Record<string, AgySessionRecord>;
 /**
  * The adapter's DSH-side world home. Form-A (boot home = DSH home root) nests
- * `agents/agy`; Form-B (already `<root>/agents/agy`) passes through. Prod-guarded.
+ * `agents/agy`; Form-B (already `<root>/agents/agy`) passes through.
  */
 export declare function resolveAgyWorldHome(home?: string): string;
 export declare function sessionMapPath(home?: string): string;

package/agent-agy/dist/agy-sessions.js

@@ -12,23 +12,14 @@
  * `conversationId` is `null` until the first turn materializes it.
  */
 import { mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
-/** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`agy-sessions: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * The adapter's DSH-side world home. Form-A (boot home = DSH home root) nests
- * `agents/agy`; Form-B (already `<root>/agents/agy`) passes through. Prod-guarded.
+ * `agents/agy`; Form-B (already `<root>/agents/agy`) passes through.
  */
 export function resolveAgyWorldHome(home) {
     const base = resolve(home ?? process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
     const dir = basename(base) === "agy" && basename(dirname(base)) === "agents" ? base : join(base, "agents", "agy");
-    assertNotProdHome(dir, "agy world home");
     return dir;
 }
 export function sessionMapPath(home) {

package/agent-agy/dist/world-plugin.js

@@ -16,12 +16,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../agent-hub/dist/index.js';
 export const name = 'aw.agent-adapter-agy';
 /** Runtime key — also the mount label. */
 const KEY = 'agy';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Antigravity', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -62,7 +60,7 @@ export function apply(ctx) {
         const ctxW = await spawnWorld({
             appName: `aw-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-claude/dist/claude-client.js

@@ -57,8 +57,10 @@
 import { query as officialQuery } from "@anthropic-ai/claude-agent-sdk";
 import { InputQueue } from "./input-queue.js";
 import { projectClaudeEvent } from "./claude-events.js";
-/** Host Claude Code binary driven through the SDK's bridge (spec ruling R5). */
-export const DEFAULT_CLAUDE_EXECUTABLE = "/home/u1/.local/bin/claude";
+/** Host Claude Code binary driven through the SDK bridge (spec ruling R5).
+ * PATH-resolved like any host CLI: $CLAUDE_EXECUTABLE wins, else a bare
+ * "claude" the SDK spawns through PATH. No machine-specific path ships. */
+export const DEFAULT_CLAUDE_EXECUTABLE = "claude";
 const defaultFactory = (o) => officialQuery({
     prompt: o.prompt,
     options: o.options,

package/agent-claude/dist/claude-home.js

@@ -9,14 +9,7 @@
  */
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
 /** Refuse any path that resolves into a production DSH home (repo red line). */
-export function assertNotProdHome(path, label) {
-    const p = resolve(path);
-    if (PROD_HOMES.includes(p) || PROD_HOMES.some((prod) => p.startsWith(`${prod}/`))) {
-        throw new Error(`agent-claude: refusing prod home "${p}" for ${label} — set DSH_HOME to the test home`);
-    }
-}
 /**
  * The Claude app home: the NATIVE `~/.claude`, prod-home guarded. An ambient
  * `CLAUDE_CONFIG_DIR` wins (tests pin an isolated home that way); the adapter
@@ -24,6 +17,5 @@ export function assertNotProdHome(path, label) {
  */
 export function resolveClaudeHome() {
     const claudeHome = resolve(process.env.CLAUDE_CONFIG_DIR ?? join(homedir(), ".claude"));
-    assertNotProdHome(claudeHome, "claudeHome");
     return claudeHome;
 }

package/agent-claude/dist/session-map.js

@@ -26,23 +26,20 @@
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { assertNotProdHome } from "./claude-home.js";
 /**
  * The adapter's DSH-side state dir — the world's DSH home root
  * (`<dshHome>/agents/claude`), never the Claude app home. Precedence:
  * explicit world home (boot-provided `dshHomePath`), then `$DSH_HOME` (a hub
  * home, so the world layout nests `agents/claude`), then the line's
- * historical test-home default. Prod-guarded.
+ * historical test-home default.
  */
 export function resolveClaudeStateDir(home) {
     if (home !== undefined) {
         const dir = resolve(home);
-        assertNotProdHome(dir, "claude state dir");
         return dir;
     }
     const fallbackHome = resolve(process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
     const dir = join(fallbackHome, "agents", "claude");
-    assertNotProdHome(dir, "claude state dir");
     return dir;
 }
 /** The map file's path at the world DSH-home root. */

package/agent-codex/dist/codex-store.js

@@ -20,12 +20,6 @@ import { closeSync, openSync, readdirSync, readSync, statSync } from "node:fs";
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 /** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-export function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`codex-store: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * Resolve the Codex CLI's app-data home — the NATIVE `~/.codex` (user ruling
  * 2026-09-17, pi precedent): the installed app keeps its own home, so the
@@ -42,11 +36,9 @@ export function assertNotProdHome(path, label) {
 export function resolveCodexHome() {
     if (process.env.CODEX_HOME !== undefined) {
         const env = resolve(process.env.CODEX_HOME);
-        assertNotProdHome(env, "codex home");
         return env;
     }
     const native = join(homedir(), ".codex");
-    assertNotProdHome(native, "codex home");
     return native;
 }
 /**
@@ -56,7 +48,6 @@ export function resolveCodexHome() {
  */
 export function useCodexHome(path) {
     const resolved = resolve(path);
-    assertNotProdHome(resolved, "codex home");
     return resolved;
 }
 /** Bounded read budget: `session_meta` is the FIRST line, so this is generous. */

package/agent-codex/dist/session-map.js

@@ -19,7 +19,6 @@
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { assertNotProdHome } from "./codex-store.js";
 /** An `Error` carrying a stable {@link CodexResumeErrorCode}. */
 export class CodexResumeError extends Error {
     code;
@@ -35,17 +34,15 @@ export class CodexResumeError extends Error {
  * (`<dshHome>/agents/codex`), never the codex app home. Precedence: explicit
  * world home (boot-provided `dshHomePath`), then `$DSH_HOME` (a hub home, so
  * the world layout nests `agents/codex`), then the line's historical test-home
- * default. Prod-guarded.
+ * default.
  */
 export function resolveCodexStateDir(home) {
     if (home !== undefined) {
         const dir = resolve(home);
-        assertNotProdHome(dir, "codex state dir");
         return dir;
     }
     const fallbackHome = resolve(process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
     const dir = join(fallbackHome, "agents", "codex");
-    assertNotProdHome(dir, "codex state dir");
     return dir;
 }
 /** The map file's path at the world DSH-home root. */

package/agent-codex/dist/world-plugin.js

@@ -16,12 +16,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../agent-hub/dist/index.js';
 export const name = 'aw.agent-adapter-codex';
 /** Runtime key — also the mount label. */
 const KEY = 'codex';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Codex', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -61,7 +59,7 @@ export function apply(ctx) {
         const ctxW = await spawnWorld({
             appName: `aw-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-codex/package.json

@@ -24,7 +24,6 @@
   "dependencies": {
     "@openai/codex": "0.154.0",
     "@openai/codex-sdk": "0.154.0",
-    "@pgmi-builds/agent-hub": "file:../agent-hub",
     "zod": "3.25.76"
   },
   "peerDependencies": {
@@ -35,7 +34,8 @@
     "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@pgmi-builds/agent-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -61,6 +61,9 @@
     },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
+    },
+    "@pgmi-builds/agent-hub": {
+      "optional": true
     }
   },
   "devDependencies": {

package/agent-hermes/dist/hermes-store.js

@@ -19,15 +19,7 @@
  * degrades to "unknown session" rather than breaking every operation.
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
-/** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`hermes-store: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * The adapter's DSH-side state dir — `<dshHome>/agents/hermes`. This is DSH-SIDE
  * adapter state (the identity map), NOT hermes data: hermes keeps its native
@@ -40,13 +32,12 @@ function assertNotProdHome(path, label) {
  *   - Form-B: the boot-provided home is ALREADY the world home
  *     (`<root>/agents/hermes`) — passed through as-is, never double-nested.
  * Precedence: explicit home (boot-provided `dshHomePath`), then `$DSH_HOME`,
- * then the line's historical test-home default. Prod-guarded.
+ * then the line's historical test-home default.
  */
 export function resolveHermesAppDir(home) {
     const base = resolve(home ?? process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
     // Form-B world home is already `<root>/agents/hermes` — never double-nest.
     const dir = basename(base) === "hermes" && basename(dirname(base)) === "agents" ? base : join(base, "agents", "hermes");
-    assertNotProdHome(dir, "hermes app dir");
     return dir;
 }
 /** The map file's path inside the adapter's DSH-side app dir. */

package/agent-hermes/dist/world-plugin.js

@@ -17,12 +17,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../agent-hub/dist/index.js';
 export const name = 'aw.agent-adapter-hermes';
 /** Runtime key — also the mount label. */
 const KEY = 'hermes';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Hermes', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -66,7 +64,7 @@ export function apply(ctx) {
         const ctxW = await spawnWorld({
             appName: `aw-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-hermes/package.json

@@ -22,7 +22,6 @@
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
-    "@pgmi-builds/agent-hub": "file:../agent-hub",
     "zod": "3.25.76"
   },
   "peerDependencies": {
@@ -33,7 +32,8 @@
     "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@pgmi-builds/agent-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -59,6 +59,9 @@
     },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
+    },
+    "@pgmi-builds/agent-hub": {
+      "optional": true
     }
   },
   "devDependencies": {

package/agent-hub/dist/index.d.ts

@@ -13,7 +13,7 @@ export { handleAgentRuntime, registerSelectorRpc, AGENT_RUNTIME_RPC_PATH, regist
 export { registerForeignTarget, unregisterForeignTarget, getTarget, listRuntimeKeys, type ForeignTarget, type GatewayFace } from './targets.js';
 export { registerAgent, unregisterAgent, setReady, listAgents, onRosterChanged, type RosterEntry } from './roster.js';
 export { spawnWorld, type SpawnWorldOptions } from './spawn-world.js';
-export { provisionWorldProfile, type ProvisionWorldOptions } from './world-provision.js';
+export { provisionWorldProfile, resolveInstallAnchor, type ProvisionWorldOptions } from './world-provision.js';
 export { claimLabel, labelOf, releaseLabel, listLabels, type LabelClaim, type ClaimOptions } from './labels.js';
 export { WorldWebServer, stripLabelFromUrl, type WorldWebRoute, type WorldWebUpgradeRoute, type RealWebServerFace } from './world-web-server.js';
 export { parseClientRequest, serverResponse, serverError, serverResult, wireErrorOf, EnvelopeError, type ClientRequestEnvelope, type WireError } from './envelope.js';

package/agent-hub/dist/index.js

@@ -13,7 +13,7 @@ export { handleAgentRuntime, registerSelectorRpc, AGENT_RUNTIME_RPC_PATH, regist
 export { registerForeignTarget, unregisterForeignTarget, getTarget, listRuntimeKeys } from './targets.js';
 export { registerAgent, unregisterAgent, setReady, listAgents, onRosterChanged } from './roster.js';
 export { spawnWorld } from './spawn-world.js';
-export { provisionWorldProfile } from './world-provision.js';
+export { provisionWorldProfile, resolveInstallAnchor } from './world-provision.js';
 export { claimLabel, labelOf, releaseLabel, listLabels } from './labels.js';
 export { WorldWebServer, stripLabelFromUrl } from './world-web-server.js';
 export { parseClientRequest, serverResponse, serverError, serverResult, wireErrorOf, EnvelopeError } from './envelope.js';

package/agent-hub/dist/world-join.js

@@ -31,14 +31,12 @@ import { join } from 'node:path';
 import { registerAgent, setReady } from './roster.js';
 import { registerForeignTarget } from './targets.js';
 import { spawnWorld } from './spawn-world.js';
-import { provisionWorldProfile } from './world-provision.js';
+import { provisionWorldProfile, resolveInstallAnchor } from './world-provision.js';
 import { registerHostMount } from './world-host.js';
 import { mountWorld } from './carrier.js';
 import { worldMountPatches } from './world-mount.js';
 /** Stable Cordis plugin name. */
 export const name = 'aw.world.join';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 /** Apply the join. @param ctx - the CTX0 root context. @param config - `{ key, label? }`. */
 export function apply(ctx, config) {
     const key = typeof config?.key === 'string' ? config.key : undefined;
@@ -86,7 +84,7 @@ export function apply(ctx, config) {
         const ctxW = await spawnWorld({
             appName: `aw-${key}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-hub/dist/world-provision.d.ts

@@ -1,3 +1,17 @@
+/**
+ * Resolve the running dsh installation's package.json — the anchor worlds
+ * resolve `@deepseek-ai` bundles and the fallback closure from.
+ *
+ * Precedence: `$SUPERD_DSH_ANCHOR` (the repo dev lines' contract — the
+ * launcher pins the checkout build), then a walk UP from the
+ * `@deepseek-ai/dsh-app-boot` this module resolved (the host always provides
+ * it) to the nearest ancestor package named `@deepseek-ai/dsh` — the
+ * packaged-install layout (`<install>/@deepseek-ai/dsh/node_modules/
+ * @deepseek-ai/dsh-app-boot`) lands on the install root in two hops. No
+ * machine-specific path ships in code.
+ * @throws when neither yields an installation (mis-launched composition).
+ */
+export declare function resolveInstallAnchor(): string;
 export interface ProvisionWorldOptions {
     /** Runtime key — also the mount label and the `agents/<key>` home segment. */
     key: string;

package/agent-hub/dist/world-provision.js

@@ -32,14 +32,61 @@
  * or null when the adapter sibling does not exist next to the hub (a foreign
  * composition this module does not own — keep the caller's env/fallback path).
  */
-import { existsSync, lstatSync, mkdirSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
+import { existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, symlinkSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createRequire } from 'node:module';
+import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 const HUB_SCOPE = '@pgmi-builds';
 const HARNESS_SCOPE = '@deepseek-ai';
 /** The profile bundles every world tree composes besides its adapter. */
 const WORLD_BASE_BUNDLES = ['@deepseek-ai/dsh-base', '@deepseek-ai/dsh-web-app'];
+/**
+ * Resolve the running dsh installation's package.json — the anchor worlds
+ * resolve `@deepseek-ai` bundles and the fallback closure from.
+ *
+ * Precedence: `$SUPERD_DSH_ANCHOR` (the repo dev lines' contract — the
+ * launcher pins the checkout build), then a walk UP from the
+ * `@deepseek-ai/dsh-app-boot` this module resolved (the host always provides
+ * it) to the nearest ancestor package named `@deepseek-ai/dsh` — the
+ * packaged-install layout (`<install>/@deepseek-ai/dsh/node_modules/
+ * @deepseek-ai/dsh-app-boot`) lands on the install root in two hops. No
+ * machine-specific path ships in code.
+ * @throws when neither yields an installation (mis-launched composition).
+ */
+export function resolveInstallAnchor() {
+    const fromEnv = process.env.SUPERD_DSH_ANCHOR;
+    if (fromEnv !== undefined && fromEnv !== '')
+        return fromEnv;
+    let dir = dirname(resolveHostPackageDir('@deepseek-ai/dsh-app-boot'));
+    while (true) {
+        const manifest = join(dir, 'package.json');
+        if (existsSync(manifest)) {
+            try {
+                const name = JSON.parse(readFileSync(manifest, 'utf8')).name;
+                if (name === '@deepseek-ai/dsh')
+                    return manifest;
+            }
+            catch { /* malformed intermediate manifest — keep walking */ }
+        }
+        const parent = dirname(dir);
+        if (parent === dir) {
+            throw new Error('super-dsh: cannot derive the dsh installation anchor (set SUPERD_DSH_ANCHOR)');
+        }
+        dir = parent;
+    }
+}
+/** First `node_modules` search-path candidate that exists for a specifier,
+ *  resolved to its REALPATH — farm and pnpm links must not leak into the
+ *  ancestor walk (the install tree only exists behind the symlink). */
+function resolveHostPackageDir(spec) {
+    for (const searchPath of createRequire(import.meta.url).resolve.paths(`${spec}/x`) ?? []) {
+        const candidate = join(searchPath, spec);
+        if (existsSync(join(candidate, 'package.json')))
+            return realpathSync(candidate);
+    }
+    throw new Error(`super-dsh: cannot resolve ${spec} from the running host`);
+}
 /**
  * Provision one world's nested profile (idempotent: rewrites profile files,
  * re-links packages — lstat-safe against dangling links). Returns the
@@ -103,20 +150,32 @@ function provisionWorldProfileUnchecked(opts) {
             rmSync(dst, { recursive: true, force: true });
         symlinkSync(target, dst);
     }
-    // The harness scope rides along as ONE scope-level link into the first
-    // `@deepseek-ai` directory visible from this module (the shared heal farm
-    // in a dsh home, the repo farm in dev) — every `@deepseek-ai/*` row of the
-    // world composition resolves through it without farming per package.
-    for (const searchPath of createRequire(import.meta.url).resolve.paths(`${HARNESS_SCOPE}/x`) ?? []) {
-        const scopeDir = join(searchPath, HARNESS_SCOPE);
-        if (!existsSync(scopeDir))
+    // The harness scope for the world tree is a REAL scope directory of
+    // per-package symlinks UNIONED from two authoritative sources (farm first,
+    // installation fills the gaps — dev3 evidence: farm 244 entries missing 16
+    // newer packages the install's 260 has; ctx0 survives via the app-boot
+    // install-anchored resolver fallback, but a tree with an explicit bare
+    // base gets no such fallback). A single scope-level link cannot express
+    // that union, and a resolve.paths() walk from this module can pick the
+    // PROFILE's own partial pnpm scope (2 entries on dev3) — never use it.
+    const ANCHOR = resolveInstallAnchor();
+    const scopeSources = [
+        join(resolveDshHome(), 'profiles', 'node_modules', HARNESS_SCOPE),
+        join(dirname(ANCHOR), 'node_modules', HARNESS_SCOPE),
+    ];
+    const scopeDst = join(linkRoot, HARNESS_SCOPE);
+    rmSync(scopeDst, { recursive: true, force: true });
+    mkdirSync(scopeDst, { recursive: true });
+    const linked = new Set();
+    for (const scopeSrc of scopeSources) {
+        if (!existsSync(scopeSrc))
             continue;
-        const dst = join(linkRoot, HARNESS_SCOPE);
-        const st = lstatSync(dst, { throwIfNoEntry: false });
-        if (st)
-            rmSync(dst, { recursive: true, force: true });
-        symlinkSync(scopeDir, dst);
-        break;
+        for (const name of readdirSync(scopeSrc)) {
+            if (name.startsWith('.') || linked.has(name))
+                continue;
+            symlinkSync(join(scopeSrc, name), join(scopeDst, name));
+            linked.add(name);
+        }
     }
     return join(opts.worldHome, 'profiles', 'node_modules') + '/';
 }

package/agent-omp/dist/world-plugin.js

@@ -15,12 +15,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../agent-hub/dist/index.js';
 export const name = 'aw.agent-adapter-omp';
 /** Runtime key — also the mount label. */
 const KEY = 'omp';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'OMP', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -61,7 +59,7 @@ export function apply(ctx) {
         const ctxW = await spawnWorld({
             appName: `aw-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-omp/package.json

@@ -33,8 +33,7 @@
   },
   "dependencies": {
     "@oh-my-pi/pi-coding-agent": "^18.1.14",
-    "bun": "^1.4.2",
-    "@pgmi-builds/agent-hub": "file:../agent-hub"
+    "bun": "^1.4.2"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
@@ -45,7 +44,8 @@
     "@deepseek-ai/dsh-session": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
     "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.2",
+    "@pgmi-builds/agent-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -74,6 +74,9 @@
     },
     "@deepseek-ai/dsh-home-paths": {
       "optional": true
+    },
+    "@pgmi-builds/agent-hub": {
+      "optional": true
     }
   },
   "devDependencies": {

package/agent-pi/dist/pi-home.js

@@ -16,19 +16,12 @@
  *    pi never reads this tree; it is DSH bookkeeping in the same class as the
  *    DSH session log.
  */
-import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 /** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-export function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`pi-home: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * Resolve the adapter's DSH-side state dir — `<dshHomePath>/agents/pi`.
  * Precedence: explicit home (boot-provided `dshHomePath`), then `$DSH_HOME`,
- * then the line's historical test-home default. Prod-guarded.
+ * then the line's historical test-home default.
  */
 export function resolvePiStateDir(home) {
     if (home !== undefined) {
@@ -37,16 +30,13 @@ export function resolvePiStateDir(home) {
         // — that tree IS the pi world's root, so the state dir is the home itself
         // (no second nest). Line/standalone form: nest once under agents/pi.
         if (resolved.endsWith(join("agents", "pi"))) {
-            assertNotProdHome(resolved, "pi state dir");
             return resolved;
         }
         const dir = join(resolved, "agents", "pi");
-        assertNotProdHome(dir, "pi state dir");
         return dir;
     }
     const fallbackHome = resolve(process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
     const dir = join(fallbackHome, "agents", "pi");
-    assertNotProdHome(dir, "pi state dir");
     return dir;
 }
 /** The dsh↔pi session mapping file inside the state dir. */

package/agent-pi/dist/world-plugin.js

@@ -16,12 +16,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../agent-hub/dist/index.js';
 export const name = 'aw.agent-adapter-pi';
 /** Runtime key — also the mount label. */
 const KEY = 'pi';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Pi', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -62,7 +60,7 @@ export function apply(ctx) {
         const ctxW = await spawnWorld({
             appName: `aw-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
             // Adapter-local bundle names resolve from the profile's own

package/agent-pi/package.json

@@ -23,7 +23,6 @@
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.84.2",
-    "@pgmi-builds/agent-hub": "file:../agent-hub",
     "zod": "3.25.76"
   },
   "peerDependencies": {
@@ -34,7 +33,8 @@
     "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session": "0.1.5-rc.2",
     "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2",
+    "@pgmi-builds/agent-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -60,6 +60,9 @@
     },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
+    },
+    "@pgmi-builds/agent-hub": {
+      "optional": true
     }
   },
   "devDependencies": {

package/client/index.js

@@ -0,0 +1,242 @@
+window.__ModuleLoader__.load({ id: "super-dsh", factory: (require) => {
+var module = { exports: {} }; var exports = module.exports;
+//#region rolldown:runtime
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+
+//#endregion
+let react = require("react");
+react = __toESM(react);
+let react_jsx_runtime = require("react/jsx-runtime");
+react_jsx_runtime = __toESM(react_jsx_runtime);
+
+//#region src/client/RuntimeSeat.tsx
+const NATIVE = {
+	key: "native",
+	label: "DSH",
+	path: "/"
+};
+/** Fallback labels for the read-only face (which only reports keys). */
+const RUNTIME_LABELS = {
+	native: "DSH",
+	omp: "OMP",
+	codex: "Codex"
+};
+function fromGlobal() {
+	const agents = globalThis.__DSH_AGENT_ROSTER__?.agents;
+	if (!Array.isArray(agents)) return void 0;
+	const links = [];
+	for (const entry of agents) {
+		if (typeof entry !== "object" || entry === null) continue;
+		const { key, label, path } = entry;
+		if (typeof key !== "string" || typeof path !== "string") continue;
+		links.push({
+			key,
+			label: typeof label === "string" ? label : RUNTIME_LABELS[key] ?? key,
+			path
+		});
+	}
+	return links.length > 0 ? links : void 0;
+}
+/** Normalize the current mount root: `/omp` and `/omp/` are the same page. */
+function currentPath() {
+	const pathname = typeof location === "undefined" ? "/" : location.pathname;
+	if (pathname === "" || pathname === "/") return "/";
+	return pathname.endsWith("/") ? pathname : `${pathname}/`;
+}
+function RuntimeSeat({ wide }) {
+	const [agents, setAgents] = react.useState(() => fromGlobal() ?? [NATIVE]);
+	const [open, setOpen] = react.useState(false);
+	const rootRef = react.useRef(null);
+	react.useEffect(() => {
+		let cancelled = false;
+		fetch("/api/agent-runtime", { credentials: "same-origin" }).then((r) => r.ok ? r.json() : Promise.reject(/* @__PURE__ */ new Error(`HTTP ${r.status}`))).then((j) => {
+			if (cancelled) return;
+			if (Array.isArray(j?.agents)) {
+				const listed = [];
+				for (const entry of j.agents) {
+					if (typeof entry !== "object" || entry === null) continue;
+					const { key, label, path } = entry;
+					if (typeof key !== "string" || typeof path !== "string") continue;
+					listed.push({
+						key,
+						label: typeof label === "string" ? label : RUNTIME_LABELS[key] ?? key,
+						path
+					});
+				}
+				if (listed.length > 0) {
+					setAgents(listed);
+					return;
+				}
+			}
+			if (!Array.isArray(j?.available)) return;
+			const links = [];
+			for (const key of j.available) {
+				if (typeof key !== "string") continue;
+				links.push(key === "native" ? NATIVE : {
+					key,
+					label: RUNTIME_LABELS[key] ?? key,
+					path: `/${key}/`
+				});
+			}
+			if (links.length > 0) setAgents(links);
+		}).catch(() => {});
+		return () => {
+			cancelled = true;
+		};
+	}, []);
+	react.useEffect(() => {
+		if (!open) return;
+		const onDown = (event) => {
+			if (rootRef.current !== null && !rootRef.current.contains(event.target)) setOpen(false);
+		};
+		document.addEventListener("mousedown", onDown);
+		return () => document.removeEventListener("mousedown", onDown);
+	}, [open]);
+	const here = currentPath();
+	const active = agents.find((agent) => agent.path === here) ?? NATIVE;
+	const styleBase = {
+		display: "flex",
+		alignItems: "center",
+		gap: 8,
+		width: "100%",
+		padding: wide ? "7px 10px" : "7px 0",
+		justifyContent: wide ? "flex-start" : "center",
+		border: "none",
+		borderRadius: 8,
+		background: "transparent",
+		color: "inherit",
+		font: "inherit",
+		fontSize: 13,
+		cursor: "pointer",
+		position: "relative"
+	};
+	const styleBadge = {
+		fontSize: 10,
+		lineHeight: 1.4,
+		padding: "1px 6px",
+		borderRadius: 999,
+		background: "color-mix(in srgb, currentColor 12%, transparent)",
+		whiteSpace: "nowrap"
+	};
+	const styleMenu = {
+		position: "absolute",
+		bottom: "calc(100% + 6px)",
+		left: 6,
+		right: 6,
+		zIndex: 40,
+		background: "var(--dsh-surface, #26262b)",
+		border: "1px solid color-mix(in srgb, currentColor 18%, transparent)",
+		borderRadius: 10,
+		boxShadow: "0 8px 24px rgba(0,0,0,.35)",
+		overflow: "hidden"
+	};
+	const styleItem = (isActive) => ({
+		display: "block",
+		width: "100%",
+		padding: "8px 12px",
+		border: "none",
+		background: isActive ? "color-mix(in srgb, currentColor 10%, transparent)" : "transparent",
+		color: "inherit",
+		font: "inherit",
+		fontSize: 13,
+		textAlign: "left",
+		cursor: "pointer"
+	});
+	return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+		ref: rootRef,
+		style: {
+			position: "relative",
+			width: "100%"
+		},
+		children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+			type: "button",
+			style: styleBase,
+			title: "Agent runtime — picking one opens that runtime's mount (/omp/, /codex/, …)",
+			onClick: () => {
+				setOpen((v) => !v);
+			},
+			children: wide ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					"aria-hidden": true,
+					children: "⌘"
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					style: {
+						flex: 1,
+						textAlign: "left",
+						whiteSpace: "nowrap",
+						overflow: "hidden",
+						textOverflow: "ellipsis"
+					},
+					children: ["Agent · ", active.label]
+				}),
+				/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					style: styleBadge,
+					children: "open"
+				})
+			] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				"aria-hidden": true,
+				children: "⌘"
+			})
+		}), open && /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+			style: styleMenu,
+			children: agents.map((agent) => /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+				href: agent.path,
+				style: {
+					...styleItem(agent.path === here),
+					textDecoration: "none"
+				},
+				"aria-current": agent.path === here ? "page" : void 0,
+				onClick: () => {
+					setOpen(false);
+				},
+				children: agent.path === here ? `${agent.label} ✓` : agent.label
+			}, agent.key))
+		})]
+	});
+}
+
+//#endregion
+//#region src/client/index.ts
+/** Required services (cordis fiber inject): the slot registry. */
+const inject = ["slots"];
+/**
+* Mount the selector. Degrades silently when the slot service is absent (a
+* composition without the sidebar renders nothing — a footer action is an
+* optional occupant by contract).
+*
+* @param ctx - client root context.
+*/
+function apply(ctx) {
+	ctx.inject(["slots"], (raw) => {
+		const scope = raw;
+		scope.effect(() => scope.slots.inject("sidebar.footer.action", () => scope.slots.register({
+			name: "sidebar.footer.action",
+			id: "agent-runtime"
+		}, RuntimeSeat)), "agent-hub: runtime footer action");
+	});
+}
+
+//#endregion
+exports.apply = apply;
+exports.inject = inject;
+return module.exports; } });

package/cordis.patch.yml

@@ -16,8 +16,11 @@
 # Profile-layer values (webserver port/host, settings path) stay in the USER's
 # profile patch layer, never here.
 - insert:
+    # BARE package row: subpath rows (…/world/omp) are permanently not client
+    # rows in client-modules' scan (exactPackageSpecifier), so THIS row is
+    # what registers the package's client half — the sidebar selector.
     - id: agent-hub
-      name: 'super-dsh/hub'
+      name: 'super-dsh'
     - id: aw-agent-adapter-omp
       name: 'super-dsh/world/omp'
     - id: aw-agent-adapter-codex

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.1.2",
+  "version": "0.1.3-d",
   "description": "Agent Worlds for the DeepSeek Harness (DSH) — one dsh plugin that mounts the agent hub (runtime selector, roster, per-runtime worlds) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",
@@ -9,6 +9,7 @@
     "url": "git+https://github.com/pgmi-builds/superd.git"
   },
   "exports": {
+    ".": "./agent-hub/dist/index.js",
     "./hub": "./agent-hub/dist/index.js",
     "./join": "./agent-hub/dist/world-join.js",
     "./world/omp": "./agent-omp/dist/world-plugin.js",
@@ -17,12 +18,13 @@
     "./world/pi": "./agent-pi/dist/world-plugin.js",
     "./world/hermes": "./agent-hermes/dist/world-plugin.js",
     "./world/agy": "./agent-agy/dist/world-plugin.js",
-    "./client": "./agent-hub/lib/client/index.js",
+    "./client": "./client/index.js",
     "./cordis.patch.yml": "./cordis.patch.yml",
     "./package.json": "./package.json"
   },
   "files": [
     "cordis.patch.yml",
+    "client",
     "README.md",
     "agent-hub/dist",
     "agent-hub/lib",