super-dsh 0.1.3 → 0.1.4

package/agent-pi/README.md

@@ -1,4 +1,4 @@
-# @pgmi-builds/agent-adapter-pi (Agent Worlds AW-F)
+# @pgmi-builds/agent-pi (Super D)
 
 pi coding agent provider for DeepSeek Harness — an `AgentFactory` dsh plugin that embeds the
 **pi coding agent** (`@earendil-works/pi-coding-agent@0.84.2`) **in-process via its SDK**
@@ -57,11 +57,11 @@ world form (form B) via the hub.
 
 ## Trap: `npm install` materializes the hub link
 
-`dependencies["file:../agent-hub"]` gets materialized by `npm install` as a
-**physical copy** under `node_modules/@pgmi-builds/agent-hub` — a second hub
+`dependencies["file:../superd-hub"]` gets materialized by `npm install` as a
+**physical copy** under `node_modules/@pgmi-builds/superd-hub` — a second hub
 module instance whose rosters/mount-registry are dead. Symptom in world form:
 the world's virtual webServer never appears (`9 entries did not activate`,
 everything pending on webServer). After ANY `npm install` in this package,
-re-link: `rm -rf node_modules/@pgmi-builds/agent-hub && ln -sfn ../../../agent-hub
-node_modules/@pgmi-builds/agent-hub` (codex symlink discipline; same class as
+re-link: `rm -rf node_modules/@pgmi-builds/superd-hub && ln -sfn ../../../superd-hub
+node_modules/@pgmi-builds/superd-hub` (codex symlink discipline; same class as
 the `@deepseek-ai/*` heal).

package/agent-pi/cordis.patch.yml

@@ -1,4 +1,4 @@
-# @pgmi-builds/agent-adapter-pi bundle patch (AW-F SDK line, codex form).
+# @pgmi-builds/agent-pi bundle patch (AW-F SDK line, codex form).
 # This file is the `dsh.bundle.patch` layer of the adapter package: when the pi
 # world profile mounts the bundle, the boot merges THIS patch — mount the pi
 # provider plus disable the native components it replaces.
@@ -18,7 +18,7 @@
 # the shared ModelRuntime catalog (auth/models-store from ~/.pi).
 - insert:
     - id: pi-provider
-      name: '@pgmi-builds/agent-adapter-pi'
+      name: '@pgmi-builds/agent-pi'
 
 # pi owns the live agent transcript (its native session JSONL under
 # ~/.pi/agent/sessions); disable the built-in loop so it does not double-run
@@ -36,8 +36,12 @@
 
 # pi is single-mode: the SDK session drives tools itself, so no Dash preset
 # composition is needed (the provider ships the fixed single-preset roster).
-- id: agent-presets
-  disabled: true
+# 0.1.7: the host AgentPresetRegistry row (renamed `agent-presets` ->
+# `agent-preset-registry`) stays MOUNTED — the adapter registers its one
+# fixed preset into it (src/agent-preset-pi.ts); pin only the default.
+- id: agent-preset-registry
+  config:
+    default: pi
 
 # The upstream jsonl persistence row STAYS MOUNTED: the provider writes the
 # DSH session log through it (create/open/append/close), so list/read/replay/

package/agent-pi/dist/agent-preset-pi.js

@@ -1,169 +1,32 @@
-var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
-    var useValue = arguments.length > 2;
-    for (var i = 0; i < initializers.length; i++) {
-        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
-    }
-    return useValue ? value : void 0;
-};
-var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
-    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
-    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
-    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
-    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
-    var _, done = false;
-    for (var i = decorators.length - 1; i >= 0; i--) {
-        var context = {};
-        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
-        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
-        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
-        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
-        if (kind === "accessor") {
-            if (result === void 0) continue;
-            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
-            if (_ = accept(result.get)) descriptor.get = _;
-            if (_ = accept(result.set)) descriptor.set = _;
-            if (_ = accept(result.init)) initializers.unshift(_);
-        }
-        else if (_ = accept(result)) {
-            if (kind === "field") initializers.unshift(_);
-            else descriptor[key] = _;
-        }
-    }
-    if (target) Object.defineProperty(target, contextIn.name, descriptor);
-    done = true;
-};
-import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
-const PI_PRESET = Object.freeze({
-    id: "pi",
-    trust: "system",
-    path: "",
+export const PI_PRESET_ID = "pi";
+/** The single fixed Pi preset: mounting it composes nothing. */
+export const PI_PRESET = Object.freeze({
+    id: PI_PRESET_ID,
     name: "Pi",
     description: "Pi agent via the agent-pi adapter",
+    plugins: Object.freeze([]),
 });
-const COMPOSITION_TEXT = [
-    "# Pi (fixed roster)",
-    "",
-    "This deployment runs exactly one agent mode: the Pi provider bridges Dash",
-    "sessions to a native pi agent over the @earendil-works/pi-coding-agent SDK.",
-    "There is no per-session plugin composition to configure, so this preset",
-    "mounts nothing.",
-    "",
-    "rows: []",
-    "",
-].join("\n");
-/** The standing scope key every `pi` session reads presenters through. */
-const STANDING_KEY = {};
-let SinglePiPresetRoster = (() => {
-    let _classSuper = TypertRemoteService;
-    let _instanceExtraInitializers = [];
-    let _remoteList_decorators;
-    let _remoteRead_decorators;
-    let _remoteCopy_decorators;
-    let _remoteDelete_decorators;
-    let _remoteSelect_decorators;
-    return class SinglePiPresetRoster extends _classSuper {
-        static {
-            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
-            _remoteList_decorators = [Remote("list")];
-            _remoteRead_decorators = [Remote("read")];
-            _remoteCopy_decorators = [Remote("copy")];
-            _remoteDelete_decorators = [Remote("deletePreset")];
-            _remoteSelect_decorators = [Remote("select")];
-            __esDecorate(this, null, _remoteList_decorators, { kind: "method", name: "remoteList", static: false, private: false, access: { has: obj => "remoteList" in obj, get: obj => obj.remoteList }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteRead_decorators, { kind: "method", name: "remoteRead", static: false, private: false, access: { has: obj => "remoteRead" in obj, get: obj => obj.remoteRead }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteCopy_decorators, { kind: "method", name: "remoteCopy", static: false, private: false, access: { has: obj => "remoteCopy" in obj, get: obj => obj.remoteCopy }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteDelete_decorators, { kind: "method", name: "remoteDelete", static: false, private: false, access: { has: obj => "remoteDelete" in obj, get: obj => obj.remoteDelete }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteSelect_decorators, { kind: "method", name: "remoteSelect", static: false, private: false, access: { has: obj => "remoteSelect" in obj, get: obj => obj.remoteSelect }, metadata: _metadata }, null, _instanceExtraInitializers);
-            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
-        }
-        constructor(ctx) {
-            super(ctx, "agentPresets");
-            __runInitializers(this, _instanceExtraInitializers);
-        }
-        get defaultId() {
-            return PI_PRESET.id;
-        }
-        get roots() {
-            return [];
-        }
-        get authorable() {
-            return false;
-        }
-        async list() {
-            return [PI_PRESET];
-        }
-        async resolve(id) {
-            if (id === undefined || id === PI_PRESET.id)
-                return PI_PRESET;
-            throw new RemoteError("agent-preset/not-found", `agent-presets: preset "${id}" not found (available: pi)`, { agentPreset: id, available: [PI_PRESET.id] });
-        }
-        async mount(_agentCtx, id) {
-            return this.resolve(id);
-        }
-        async recompose(_agentCtx, id) {
-            return this.resolve(id);
-        }
-        async read(id) {
-            await this.resolve(id);
-            return COMPOSITION_TEXT;
-        }
-        // ── Remote RPC surface (alpha: agentPresets routes come from @Remote) ────
-        async remoteList() {
-            if (process.env.PI_TRACE === "1")
-                process.stderr.write("[pi-roster] remoteList INVOKED\n");
-            return {
-                presets: [
-                    {
-                        id: PI_PRESET.id,
-                        trust: PI_PRESET.trust,
-                        isDefault: true,
-                        name: PI_PRESET.name,
-                        description: PI_PRESET.description,
-                    },
-                ],
-                authorable: this.authorable,
-            };
-        }
-        async remoteRead(agentPreset) {
-            const preset = await this.resolve(agentPreset);
-            return {
-                agentPreset: preset.id,
-                trust: preset.trust,
-                content: await this.read(preset.id),
-                name: preset.name,
-                description: preset.description,
-            };
-        }
-        async remoteCopy(from, id, name) {
-            await this.copy(from, id, name);
-        }
-        async remoteDelete(id) {
-            await this.remove(id);
-        }
-        /** Fixed roster: one preset, so selecting it is a no-op ack; anything else is unknown. */
-        async remoteSelect(agent, agentPreset) {
-            const preset = await this.resolve(agentPreset);
-            return preset.id;
-        }
-        async copy(_from, id, _name) {
-            throw new RemoteError("agent-preset/read-only", `agent-presets: preset "${id}" cannot be written: the Pi roster is fixed and ships exactly one preset`, { agentPreset: id, reason: "the Pi roster is fixed and ships exactly one preset" });
-        }
-        async remove(id) {
-            throw new RemoteError("agent-preset/read-only", `agent-presets: preset "${id}" cannot be written: the Pi roster is fixed and ships exactly one preset`, { agentPreset: id, reason: "the Pi roster is fixed and ships exactly one preset" });
-        }
-        serviceFor(_agent, _name) {
-            return undefined;
-        }
-        composeFrom(_agentCtx, _parentCtx) {
-            return undefined;
-        }
-        composedPreset(_agentCtx) {
-            return PI_PRESET.id;
-        }
-        async standingKeyFor(id) {
-            await this.resolve(id);
-            return STANDING_KEY;
-        }
-    };
-})();
-export { SinglePiPresetRoster };
+/**
+ * Register the fixed preset into the host `AgentPresetRegistry` once the
+ * service is up. Registration failure keeps the roster row visible as
+ * `broken` inside the registry (upstream owns that lifecycle) — the adapter
+ * only owns the disposer.
+ */
+export function registerPiPreset(ctx) {
+    ctx.inject(["agentPresets"], (scoped) => {
+        let dispose;
+        let settled = false;
+        void scoped.agentPresets.register(PI_PRESET).then((unregister) => {
+            if (settled) {
+                void unregister();
+            }
+            else {
+                dispose = unregister;
+            }
+        });
+        ctx.effect(() => async () => {
+            settled = true;
+            await dispose?.();
+        }, "piAdapter.preset");
+    });
+}

package/agent-pi/dist/agent.js

@@ -2,6 +2,7 @@ import { randomUUID } from "node:crypto";
 import { agentEvents } from "@deepseek-ai/dsh-agent";
 import { Inbox } from "./inbox.js";
 import { LlmAttemptId, ToolCallId, QUOTA_EXCEEDED_CODE, createAssistantMessage, createSystemMessage, createToolResultMessage, createUserMessage } from "@deepseek-ai/dsh-llm";
+import { withSystemHead } from "../../superd-hub/dist/index.js";
 import { createScope } from "@deepseek-ai/dsh-scope";
 import { PI_IDLE_EXIT_MS } from "./knobs.js";
 import { trace } from "./knobs.js";
@@ -149,8 +150,13 @@ function userMessageText(message) {
  * drop it.
  */
 function isApprovalNarration(message) {
-    const source = message.source;
-    return source.kind === "plugin" && source.plugin === "user-approval";
+    // 0.1.7: the shared `plugin` source kind is gone (MessageSourceMap is
+    // merge-extensible; each producer declares its own kind) — user-approval
+    // now carries the dedicated `user-approval` kind.
+    // Type-only: loads the `user-approval` MessageSourceMap augmentation
+    // (0.1.7: producer-owned source kinds; the shared `plugin` kind is gone).
+    // noinspection JSValidateTypes
+    return message.source.kind === "user-approval";
 }
 /**
  * Reconstruct a Dash user message from a wire `message_start(role=user)`
@@ -222,7 +228,7 @@ export class PiAgent {
         this.#loopCtx = loopCtx;
         this.id = id;
         this.options = options;
-        this.session = session;
+        this.session = withSystemHead(session, () => createSystemMessage(""));
         this.#client = client;
         this.#onIdleExit = onIdleExit;
         this.#runtimeInfo = runtimeInfo;
@@ -418,20 +424,20 @@ export class PiAgent {
         if (this.#runtimeInfo === undefined || !this.#turnOpen)
             return;
         this.#commitStepStart();
-        if (this.#step === 0)
+        // commitStepStart re-enters #emitSystemMessage (step open → stamp); the
+        // outer call must re-check the one-shot flag after the recursion.
+        if (this.#systemMessageDone)
             return;
-        if (this.session.snapshotEvents().some((event) => event.type === "system/message")) {
-            this.#systemMessageDone = true;
+        if (this.#step === 0)
             return;
-        }
         const text = this.#runtimeInfo.systemPrompt();
         if (text === undefined || text.trim() === "")
             return;
-        this.session.append("system/message", {
-            turn: this.#dashTurn,
-            step: this.#step,
-            message: createSystemMessage(text, "aw.agent-adapter-pi"),
-        }, { surfaceOp: "append" });
+        // v4 protected-head posture: the placeholder head (stamped before the
+        // first user message) is REPLACED with the real prompt — an append here
+        // would land after user surface nodes and corrupt the log for the 0.1.7
+        // reader ("system/message requires a protected first surface head").
+        this.session.stampSystemPrompt(this.#dashTurn, this.#step, createSystemMessage(text));
         this.#systemMessageDone = true;
         trace(`system/message stamped (${text.length} chars)`);
     }

package/agent-pi/dist/index.js

@@ -1,6 +1,6 @@
 /**
  * agent-pi provider — Pi provider plugin for DeepSeek Harness
- * (Agent Worlds AW-F, SDK line).
+ * (Super D, SDK line).
  *
  * Replaces the built-in agent loop with an `AgentFactory` that drives pi
  * `AgentSession`s in-process (one `PiSessionClient` per session, through the
@@ -28,13 +28,12 @@
 import { realpathSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
-import { emitAgentEvent, installModelSelection } from "@deepseek-ai/dsh-agent";
+import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { SessionLogOffset, SessionPreparation, interruptedTurnClosers, } from "@deepseek-ai/dsh-session";
 import { PiSessionClient } from "./pi-client.js";
 import { PiAgent } from "./agent.js";
 import { PiLlmAdapter } from "./adapter.js";
-import { SinglePiPresetRoster } from "./agent-preset-pi.js";
-import { piAgentPresetProjection } from "./agent-preset-projection.js";
+import { registerPiPreset } from "./agent-preset-pi.js";
 import { resolvePiStateDir } from "./pi-home.js";
 import { sessionRecord, upsertSession } from "./session-map.js";
 import { warmPiCatalog, readPiModelCatalog, piProviderIds, resolvePiSelection, PI_PROVIDER_ID } from "./models.js";
@@ -112,14 +111,12 @@ export class PiProvider extends Service {
         // nesting it under a child fiber via ctx.plugin hides its @Remote routes
         // from the gateway and every agentPresets/* call 404s. Register it on
         // this plugin's own (top-level) fiber instead.
-        new SinglePiPresetRoster(ctx);
-        // Drive the `agentPreset` session projection ourselves: the upstream
-        // registrant lives in the (disabled) dsh-agent-presets package, but the
-        // Web UI gates the preset chip and header label on
-        // `projectionValues.agentPreset`.
-        ctx.inject(["sessionProjections"], (scoped) => {
-            scoped.sessionProjections.register(piAgentPresetProjection);
-        });
+        // 0.1.7: roster/selection/document RPC + the `agentPreset` session
+        // projection all live in the host AgentPresetRegistry (mounted by the
+        // dsh-web-app bundle's `agent-preset-registry` row; the adapter patch
+        // pins its `default` to the Pi preset). The adapter only registers
+        // its one fixed preset into the registry.
+        registerPiPreset(ctx);
     }
     /**
      * The factory owns its sessions' route (codex directive parity): a session
@@ -197,7 +194,7 @@ export class PiProvider extends Service {
             if (typeof resolved === "string" && resolved !== "")
                 return resolved;
         }
-        return process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw");
+        return process.env.DSH_HOME ?? join(process.cwd(), ".tests", "superd");
     }
     /**
      * App-wide wiring the adapter owns: register the adapter on a boot
@@ -357,7 +354,7 @@ export class PiProvider extends Service {
         const loopCtx = this.runtime.ctx;
         const id = options.resumeSessionId;
         // Identity ("mapping only") with BLANK-SESSION TOLERANCE (2026-09-18,
-        // dev-rules §14 i / omp-web doctrine): a session whose pi side never
+        // dev-rules §14 i doctrine): a session whose pi side never
         // materialized (no record, or `sessionFile: null`) resumes AS FRESH —
         // the lazy shell waits for the first prompt, exactly like create (the
         // Dash host eagerly resumes on view/model-change, so failing here broke
@@ -547,8 +544,9 @@ async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, sessi
             agent.ctx.sessions.announce(session);
         }
         detachAgent = loopCtx.agents.enter(agent, parentAgent);
-        loopCtx.agents.announce(agent);
-        emitAgentEvent(loopCtx, agent, "agent/session-start", { source });
+        // 0.1.6: announce(agent, source) is required, async, and emits agent/created
+        // itself — the manual agent/session-start emission is gone upstream.
+        await loopCtx.agents.announce(agent, source);
         let disposed = false;
         let unfollowOwner;
         const dispose = async () => {

package/agent-pi/dist/pi-home.js

@@ -16,19 +16,12 @@
  *    pi never reads this tree; it is DSH bookkeeping in the same class as the
  *    DSH session log.
  */
-import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 /** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-export function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`pi-home: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * Resolve the adapter's DSH-side state dir — `<dshHomePath>/agents/pi`.
  * Precedence: explicit home (boot-provided `dshHomePath`), then `$DSH_HOME`,
- * then the line's historical test-home default. Prod-guarded.
+ * then the line's historical test-home default.
  */
 export function resolvePiStateDir(home) {
     if (home !== undefined) {
@@ -37,16 +30,13 @@ export function resolvePiStateDir(home) {
         // — that tree IS the pi world's root, so the state dir is the home itself
         // (no second nest). Line/standalone form: nest once under agents/pi.
         if (resolved.endsWith(join("agents", "pi"))) {
-            assertNotProdHome(resolved, "pi state dir");
             return resolved;
         }
         const dir = join(resolved, "agents", "pi");
-        assertNotProdHome(dir, "pi state dir");
         return dir;
     }
-    const fallbackHome = resolve(process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
+    const fallbackHome = resolve(process.env.DSH_HOME ?? join(process.cwd(), ".tests", "superd"));
     const dir = join(fallbackHome, "agents", "pi");
-    assertNotProdHome(dir, "pi state dir");
     return dir;
 }
 /** The dsh↔pi session mapping file inside the state dir. */

package/agent-pi/dist/world-plugin.js

@@ -1,9 +1,9 @@
 /**
- * aw.agent-adapter-pi — the Pi adapter's WORLD plugin (spec S2):
+ * agent-pi — the Pi adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-adapter-omp/world`
- * and `@pgmi-builds/agent-adapter-codex/world` so the hub sees every foreign
+ * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-omp/world`
+ * and `@pgmi-builds/agent-codex/world` so the hub sees every foreign
  * runtime through one shape: the world is spawned as a sibling ROOT context
  * with NO listener (`worldMountPatches`) and mounts itself under `/pi`.
  *
@@ -16,12 +16,10 @@
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
-export const name = 'aw.agent-adapter-pi';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+export const name = 'agent-pi';
 /** Runtime key — also the mount label. */
 const KEY = 'pi';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Pi', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -35,12 +33,10 @@ export function apply(ctx) {
     const worldHome = join(root, 'agents', KEY);
     mkdirSync(join(worldHome, 'profiles'), { recursive: true });
     // Publish story: a foreign install has no line bootstrap, so the nested
-    // profile + @pgmi-builds links are provisioned HERE (idempotent; dev lines
-    // keep parity — smoke.mjs wrote the same layout, and AW_BARE_BASE still
-    // overrides the resolved base).
-    const bareBase = provisionWorldProfile({
+    // profile + @pgmi-builds links are provisioned HERE (idempotent).
+    provisionWorldProfile({
         key: KEY,
-        adapterPkg: '@pgmi-builds/agent-adapter-pi',
+        adapterPkg: '@pgmi-builds/agent-pi',
         worldHome,
     });
     const world = (async () => {
@@ -60,16 +56,15 @@ export function apply(ctx) {
             authorize: (req, res) => connection.authorizeIndex(req, res),
         });
         const ctxW = await spawnWorld({
-            appName: `aw-${KEY}`,
+            appName: `superd-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
-            // Adapter-local bundle names resolve from the profile's own
-            // node_modules (heal owns @deepseek-ai there; @pgmi-builds links are
-            // provisioned by provisionWorldProfile above, or by the line bootstrap
-            // when the adapter package was not resolvable — env wins over both).
-            bareModuleBaseUrl: process.env.AW_BARE_BASE ?? bareBase ?? undefined,
+            // The host's live table carries this world: spawnWorld republishes a
+            // widened successor before boot imports anything (spec §2.1), and
+            // @pgmi-builds rows resolve from the profile-local links written above.
+            host: ctx,
             extraPatches: worldMountPatches(KEY),
         });
         const gateway = ctxW.get('typertGateway');
@@ -85,7 +80,7 @@ export function apply(ctx) {
         ctx.effect?.(() => () => {
             mounted.dispose();
             dropHostMount();
-        }, `aw.agent-adapter-${KEY}: mount`);
+        }, `agent-${KEY}: mount`);
         return ctxW;
     })().catch((cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
@@ -93,5 +88,5 @@ export function apply(ctx) {
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
         return null;
     });
-    ctx.provide(`aw.world.${KEY}`, world);
+    ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-pi/package.json

@@ -1,7 +1,7 @@
 {
-  "name": "@pgmi-builds/agent-adapter-pi",
+  "name": "@pgmi-builds/agent-pi",
   "version": "0.1.0",
-  "description": "Pi provider for DeepSeek Harness (dsh) — an AgentFactory that embeds the pi coding agent in-process via the @earendil-works/pi-coding-agent SDK and bridges pi's session surface into Dash Agent/Session contracts (Agent Worlds AW-F). pi keeps its native data home ~/.pi (2026-09-17 ruling).",
+  "description": "Pi provider for DeepSeek Harness (dsh) — an AgentFactory that embeds the pi coding agent in-process via the @earendil-works/pi-coding-agent SDK and bridges pi's session surface into Dash Agent/Session contracts . pi keeps its native data home ~/.pi (2026-09-17 ruling).",
   "type": "module",
   "exports": {
     ".": "./dist/index.js",
@@ -23,18 +23,18 @@
   },
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.84.2",
-    "@pgmi-builds/agent-hub": "file:../agent-hub",
-    "zod": "3.25.76"
+    "zod": "4.4.3"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
+    "@pgmi-builds/superd-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -60,6 +60,9 @@
     },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
+    },
+    "@pgmi-builds/superd-hub": {
+      "optional": true
     }
   },
   "devDependencies": {

package/cordis.patch.yml

@@ -1,40 +1,50 @@
-# super-dsh — the Agent Worlds composite bundle (one `dsh plugin add` face).
+# super-dsh — the Super D composite bundle (one `dsh plugin add` face).
 #
 # better-dsh shape: ONE package, components are this package's own subpath
 # exports, so every row below is individually toggleable on the plugin page
 # (cordis hmr; docs/06 §二.5 — insert rows = the "Components" lines).
 #
-#   - super-dsh/hub            the hub: selector + roster + per-world mount
-#                              carrier + V5 gateway delegation (wraps the live
-#                              typertGateway; upstream dispatch untouched)
-#   - super-dsh/world/<label>  one world plugin per adapter (activation IS
+#   - super-dsh/hub            the hub host library (selector + roster +
+#                              per-world mount carrier + V5 gateway
+#                              delegation) — ships for the adapters' relative
+#                              imports (world spawn/mount/carrier/web-trust);
+#                              the ctx0 control-plane row and ui client half
+#                              were stripped in 0.1.4 (archival final state
+#                              of the multi-webui path)
+#   - super-dsh/agents/<label>  one world plugin per adapter (activation IS
 #                              roster membership, S2) — each spawns its own
 #                              zero-port sibling root, mounted under /<label>
 #   - super-dsh/join           the generic hub joiner for the standalone
 #                              claude adapter (R2)
+#   - super-dsh/web-trust      the page-trust component (ported from
+#                              better-dsh web-trust, authorities leg): the
+#                              browser-side twin of the server trustedHosts
+#                              fence — declares trusted page authorities so
+#                              the Web UI treats a non-loopback page (Caddy
+#                              domain / LAN IP) as loopback-equivalent.
+#                              On/off: row `disabled: true`, or config
+#                              `trustedPageAuthorities: []` (inert). Default
+#                              derives from the trusted-hosts env.
 #
 # Profile-layer values (webserver port/host, settings path) stay in the USER's
 # profile patch layer, never here.
 - insert:
-    # BARE package row: subpath rows (…/world/omp) are permanently not client
-    # rows in client-modules' scan (exactPackageSpecifier), so THIS row is
-    # what registers the package's client half — the sidebar selector.
-    - id: agent-hub
-      name: 'super-dsh'
-    - id: aw-agent-adapter-omp
-      name: 'super-dsh/world/omp'
-    - id: aw-agent-adapter-codex
-      name: 'super-dsh/world/codex'
-    - id: aw-agent-adapter-pi
-      name: 'super-dsh/world/pi'
-    - id: aw-agent-adapter-hermes
-      name: 'super-dsh/world/hermes'
-    - id: aw-agent-adapter-agy
-      name: 'super-dsh/world/agy'
+    - id: superd-web-trust
+      name: 'super-dsh/web-trust'
+    - id: agent-omp
+      name: 'super-dsh/agents/omp'
+    - id: agent-codex
+      name: 'super-dsh/agents/codex'
+    - id: agent-pi
+      name: 'super-dsh/agents/pi'
+    - id: agent-hermes
+      name: 'super-dsh/agents/hermes'
+    - id: agent-agy
+      name: 'super-dsh/agents/agy'
     # R2 (2026-09-16): the claude adapter ships STANDALONE only — its /world
     # entry is inert. The HUB side joins it: one generic joiner row with the
     # key; spawn/roster/mount wiring lives in super-dsh/join.
-    - id: aw-world-join-claude
+    - id: superd-join-claude
       name: 'super-dsh/join'
       config:
         key: claude