super-dsh 0.1.3 → 0.1.5

package/agent-hub/dist/client-shim.js

@@ -1,251 +0,0 @@
-/**
- * Client mount shim (AW-B DL8).
- *
- * ONE head script installs every client-side break point:
- *   - `__DSH_TRANSPORT__.fetch`  → the Connection RPC fetch (URL object input)
- *   - `WebSocket` / `EventSource` / `XMLHttpRequest` constructors → path rewrite
- *   - `__DSH_FILE_UPLOAD__`      → uploads bypass the blob worker + its XHR
- *   - Storage.prototype get/set/remove → per-world key namespace
- *   - `globalThis.fetch`         → global-fetch calls asking for ctx0-root `/api`
- *     URLs (2026-09-17 H1: upstream session-log-export resolves the GLOBAL
- *     fetch at call time; narrow `/api`-only rule, query + hash preserved)
- *   - `HTMLAnchorElement.prototype.click` → download-anchor clicks re-rooted
- *     (2026-09-18 H1 r2: upstream hands the UNREWRITTEN absolute URL to a
- *     DETACHED `<a download>` and clicks it — detached clicks never reach
- *     document, so a document-level listener cannot see them, and a blanket
- *     rewrite breaks the runtime selector's root-absolute anchors
- *     (live-found 2026-09-18). Narrow rule: ONLY anchors carrying a
- *     `download` attribute AND a same-authority root-absolute `/api` href.)
- * The rule is namespace-agnostic: a same-origin root-absolute URL is re-rooted
- * under the mount (`/omp`), nothing else is touched. That covers every prefix
- * a plugin may declare later — no list to keep in sync.
- */
-/** Escape a label for embedding in generated JavaScript. */
-function js(value) {
-    return JSON.stringify(value);
-}
-/**
- * Render the shim as a classic script (parser-blocking head injection).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns JavaScript source.
- */
-export function renderClientShim(labelPath) {
-    if (typeof labelPath !== 'string' || !labelPath.startsWith('/') || labelPath === '/' || labelPath.endsWith('/')) {
-        throw new Error(`client-shim: labelPath must start with "/" and carry no trailing slash, got ${JSON.stringify(labelPath)}`);
-    }
-    const prefix = `${labelPath}/`;
-    return `(() => {
-  const LABEL = ${js(labelPath)}
-  const PREFIX = ${js(prefix)}
-
-  /** Re-root one pathname when it is same-origin root-absolute and not mounted yet. */
-  const rewritePath = (path) => {
-    if (typeof path !== 'string' || !path.startsWith('/') || path.startsWith('//')) return path
-    if (path === LABEL || path.startsWith(PREFIX)) return path
-    return PREFIX + path.slice(1)
-  }
-
-  const origin = () => {
-    const loc = globalThis.location
-    if (loc !== undefined && typeof loc.origin === 'string' && loc.origin !== 'null') return loc.origin
-    return 'http://dsh.internal'
-  }
-
-  /** Same authority as the page (scheme-agnostic: ws/wss/http/https share host). */
-  const sameAuthority = (url) => {
-    try {
-      return url.host === new URL(origin()).host
-    } catch {
-      return false
-    }
-  }
-
-  /** Rewrite a full URL (absolute or relative); other authorities are untouched. */
-  const rewriteUrl = (input) => {
-    if (typeof input === 'string') {
-      if (input.startsWith('/')) return rewritePath(input)
-      try {
-        const url = new URL(input, origin())
-        if (!sameAuthority(url)) return input
-        const next = rewritePath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url.href
-      } catch {
-        return input
-      }
-    }
-    if (input !== null && typeof input === 'object' && typeof input.href === 'string') {
-      try {
-        const url = new URL(input.href)
-        if (!sameAuthority(url)) return input
-        const next = rewritePath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url
-      } catch {
-        return input
-      }
-    }
-    return input
-  }
-
-  const nativeFetch = globalThis.fetch
-  const shimFetch = (input, init) => {
-    if (typeof nativeFetch !== 'function') throw new Error('client-shim: fetch is unavailable')
-    if (typeof Request === 'function' && input instanceof Request) {
-      const url = rewriteUrl(input.url)
-      return nativeFetch(url === input.url ? input : new Request(url, input), init)
-    }
-    return nativeFetch(rewriteUrl(input), init)
-  }
-
-  const transport = (globalThis.__DSH_TRANSPORT__ = globalThis.__DSH_TRANSPORT__ || {})
-  transport.rewrite = rewritePath
-  transport.fetch = shimFetch
-
-  // Construct through a Proxy, never a hand-rolled wrapper function: the
-  // upstream client compares socket.readyState against WebSocket.OPEN, so the
-  // native statics (CONNECTING/OPEN/CLOSING/CLOSED), prototype and instanceof
-  // must survive the interception.
-  const NativeWebSocket = globalThis.WebSocket
-  if (typeof NativeWebSocket === 'function') {
-    globalThis.WebSocket = new Proxy(NativeWebSocket, {
-      construct: (Target, args) => new Target(rewriteUrl(args[0]), ...args.slice(1)),
-    })
-  }
-
-  const NativeEventSource = globalThis.EventSource
-
-  if (typeof NativeEventSource === 'function') {
-    globalThis.EventSource = new Proxy(NativeEventSource, {
-      construct: (Target, args) => new Target(rewriteUrl(args[0]), ...args.slice(1)),
-    })
-  }
-
-  const NativeXhr = globalThis.XMLHttpRequest
-  if (typeof NativeXhr === 'function' && NativeXhr.prototype !== undefined && typeof NativeXhr.prototype.open === 'function') {
-    const nativeOpen = NativeXhr.prototype.open
-    NativeXhr.prototype.open = function (method, url, ...rest) {
-      return nativeOpen.call(this, method, rewriteUrl(url), ...rest)
-    }
-  }
-
-  // Read by the file-upload service at construction time: present ⇒ the page
-  // fetch carries uploads (no blob worker, and therefore no worker-scope XHR).
-  globalThis.__DSH_FILE_UPLOAD__ = { fetch: shimFetch }
-
-  // Narrow '/api' re-root helpers (2026-09-17 session-log 404, H1): upstream
-  // client code (session-log-export) resolves the GLOBAL fetch at call time
-  // and hands absolute ctx0-root URLs both to fetch and to a DETACHED
-  // download anchor — neither is visible to the transport faces above.
-  // Narrow rule: only root-absolute '/api' paths move under the mount;
-  // relative, same-mount, and foreign URLs pass through untouched. Query and
-  // hash survive because only the pathname is rewritten. The mount root comes
-  // from this shim's argument, never from location.pathname. NOTE: the '/api'
-  // literals below stay SINGLE-quoted on purpose — index-pass.ts rewrites
-  // every DOUBLE-quoted root-absolute string in the served HTML, and a
-  // doubled literal would silently disable these rewrites (regression tests
-  // survive the mount HTML pass).
-  const rewriteApiPath = (path) => {
-    if (path === '/api' || path.startsWith('/api/')) return PREFIX + path.slice(1)
-    return path
-  }
-  const rewriteApiUrl = (input) => {
-    if (typeof input === 'string') {
-      if (input.startsWith('/') && !input.startsWith('//')) return rewriteApiPath(input)
-      try {
-        const url = new URL(input, origin())
-        if (!sameAuthority(url)) return input
-        const next = rewriteApiPath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url.href
-      } catch {
-        return input
-      }
-    }
-    if (input !== null && typeof input === 'object' && typeof input.href === 'string') {
-      try {
-        const url = new URL(input.href)
-        if (!sameAuthority(url)) return input
-        const next = rewriteApiPath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url
-      } catch {
-        return input
-      }
-    }
-    return input
-  }
-  if (typeof nativeFetch === 'function' && globalThis.__DSH_FETCH_REWRITE__ !== true) {
-    globalThis.__DSH_FETCH_REWRITE__ = true
-    globalThis.fetch = (input, init) => nativeFetch(rewriteApiUrl(input), init)
-  }
-
-  // Download anchors (2026-09-18 H1 r2): upstream session-log-export hands
-  // the UNREWRITTEN absolute URL to a DETACHED '<a download>' element and
-  // calls .click() — detached clicks never propagate to document, so the r1
-  // document-level capture listener could not see them, while its BLANKET
-  // rewrite re-rooted the runtime selector's root-absolute anchors and broke
-  // cross-world navigation (live-found 2026-09-18). Narrow seam: wrap
-  // HTMLAnchorElement.prototype.click itself and rewrite ONLY anchors that
-  // carry a 'download' attribute AND a same-authority root-absolute '/api'
-  // href. Everything else — the runtime selector's links included — passes
-  // through untouched.
-  if (globalThis.HTMLAnchorElement !== undefined
-    && globalThis.HTMLAnchorElement.prototype !== undefined
-    && typeof globalThis.HTMLAnchorElement.prototype.click === 'function'
-    && globalThis.__DSH_ANCHOR_CLICK_REWRITE__ !== true) {
-    globalThis.__DSH_ANCHOR_CLICK_REWRITE__ = true
-    const nativeAnchorClick = globalThis.HTMLAnchorElement.prototype.click
-    globalThis.HTMLAnchorElement.prototype.click = function (...args) {
-      try {
-        if (this.hasAttribute('download')) {
-          const current = this.getAttribute('href')
-          if (typeof current === 'string' && current !== '') {
-            const next = rewriteApiUrl(current)
-            if (typeof next === 'string' && next !== current) this.setAttribute('href', next)
-          }
-        }
-      } catch {
-        /* best-effort: never break the click itself */
-      }
-      return nativeAnchorClick.apply(this, args)
-    }
-  }
-
-  // Storage namespace (2026-09-16 storage findings P1): all worlds share one
-
-  // origin, so bare localStorage keys would overwrite each other across
-  // mounts. Prefix every key with the label; root '/' never injects this
-  // shim and keeps bare keys. Never throws: attachPersistence only
-  // console-errors on failure, so a throwing shim would silently disable
-  // persistence.
-  try {
-  const StorageProto = globalThis.Storage && globalThis.Storage.prototype
-  if (globalThis.localStorage !== undefined && StorageProto !== undefined
-    && !globalThis.__DSH_STORAGE_NS__
-    && typeof StorageProto.getItem === 'function'
-    && typeof StorageProto.setItem === 'function'
-    && typeof StorageProto.removeItem === 'function') {
-    // NS derives from PREFIX, never LABEL: the mount HTML pass (index-pass)
-    // rewrites every quoted root-absolute string EXCEPT "<label>/"-prefixed
-    // ones, so the shim's LABEL="/omp" literal doubles to "/omp/omp" while
-    // PREFIX="/omp/" is immune (live-found 2026-09-17, acceptance A2/A5).
-    // The NS-from-PREFIX coupling is DELIBERATE: index-pass.ts rewrites double-quoted root-absolute strings except "<label>/"-prefixed ones, so LABEL="/omp" doubles while PREFIX="/omp/" survives; do NOT derive NS from LABEL.
-    const NS = PREFIX.slice(1, -1) + ':'
-    globalThis.__DSH_STORAGE_NS__ = NS
-    const nativeGetItem = StorageProto.getItem
-    const nativeSetItem = StorageProto.setItem
-    const nativeRemoveItem = StorageProto.removeItem
-    StorageProto.getItem = function (name) { return nativeGetItem.call(this, NS + name) }
-    StorageProto.setItem = function (name, value) { return nativeSetItem.call(this, NS + name, value) }
-    StorageProto.removeItem = function (name) { return nativeRemoveItem.call(this, NS + name) }
-  }
-  } catch {
-    /* storage namespace is best-effort: never break the shim */
-  }
-})()`;
-}

package/agent-hub/dist/gateway.js

@@ -1,18 +0,0 @@
-import { registerSelectorRpc, registryTargets } from './rpc.js';
-import { agentRosterRow } from './agent-roster.js';
-/** Stable Cordis plugin name. */
-export const name = 'agent-hub';
-/**
- * The plugin form (row contract): applied when the row mounts.
- *
- * Two CTX0-owned contributions, neither carrying any selection value:
- *   - the world inventory control plane (read-only);
- *   - the agent roster row baked into ctx0's own index, so the selector lists
- *     every mount path the hub currently serves.
- */
-export function apply(ctx) {
-    registerSelectorRpc(ctx, registryTargets);
-    const on = ctx.on;
-    on?.call(ctx, 'webserver/index-inject', (table) => { table.push(agentRosterRow()); });
-}
-export default apply;

package/agent-hub/dist/index-pass.d.ts

@@ -1,22 +0,0 @@
-/**
- * Mount HTML pass (AW-B DL1/DL8 server half).
- *
- * The world dist is built with RELATIVE asset URLs (`./assets/...`), so a
- * `<base>` pointing at the mount makes every relative reference resolve under
- * `/<label>/`. Root-absolute strings (the boot graph's `/plugins/...` URLs,
- * injected script sources, `href="/"`-style anchors) do NOT follow `<base>`,
- * so they are re-rooted explicitly — one generic rule, no namespace list.
- */
-/**
- * Rewrite a world index for serving under `<labelPath>/`.
- *
- * - pins `<base>` at the mount (inserting one after `<head>` when absent);
- * - prefixes every double-quoted root-absolute string that is not already
- *   mounted and not protocol-relative (`//host/...`);
- * - idempotent (a second pass changes nothing).
- *
- * @param html - the world's index.html (already rendered with its own rows).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns the mount-ready HTML.
- */
-export declare function rewriteIndexHtml(html: string, labelPath: string): string;

package/agent-hub/dist/index-pass.js

@@ -1,47 +0,0 @@
-/**
- * Mount HTML pass (AW-B DL1/DL8 server half).
- *
- * The world dist is built with RELATIVE asset URLs (`./assets/...`), so a
- * `<base>` pointing at the mount makes every relative reference resolve under
- * `/<label>/`. Root-absolute strings (the boot graph's `/plugins/...` URLs,
- * injected script sources, `href="/"`-style anchors) do NOT follow `<base>`,
- * so they are re-rooted explicitly — one generic rule, no namespace list.
- */
-/** Root of the mount including the trailing slash (`/omp` → `/omp/`). */
-function mountPrefix(labelPath) {
-    return labelPath.endsWith('/') ? labelPath : `${labelPath}/`;
-}
-/**
- * Rewrite a world index for serving under `<labelPath>/`.
- *
- * - pins `<base>` at the mount (inserting one after `<head>` when absent);
- * - prefixes every double-quoted root-absolute string that is not already
- *   mounted and not protocol-relative (`//host/...`);
- * - idempotent (a second pass changes nothing).
- *
- * @param html - the world's index.html (already rendered with its own rows).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns the mount-ready HTML.
- */
-export function rewriteIndexHtml(html, labelPath) {
-    if (typeof labelPath !== 'string' || !labelPath.startsWith('/') || labelPath === '/' || labelPath.endsWith('/')) {
-        throw new Error(`index-pass: labelPath must start with "/" and carry no trailing slash, got ${JSON.stringify(labelPath)}`);
-    }
-    const prefix = mountPrefix(labelPath);
-    let out = html;
-    if (/<base\b[^>]*>/i.test(out)) {
-        out = out.replace(/<base\b[^>]*>/i, `<base href="${prefix}">`);
-    }
-    else if (/<head(?:\s[^>]*)?>/i.test(out)) {
-        out = out.replace(/<head(?:\s[^>]*)?>/i, open => `${open}<base href="${prefix}">`);
-    }
-    out = out.replace(/"(\/[^"]*)"/g, (whole, path) => {
-        if (path.startsWith('//'))
-            return whole;
-        // Load-bearing contract: client-shim.ts derives its storage NS from the surviving "<label>/" literal (regression test: the storage NS survives the mount HTML pass). Changing this exclusion breaks that coupling.
-        if (path.startsWith(prefix))
-            return whole;
-        return `"${prefix}${path.slice(1)}"`;
-    });
-    return out;
-}

package/agent-hub/dist/labels.d.ts

@@ -1,45 +0,0 @@
-/**
- * Label table (AW-B DL2/DL4): one world ↔ one mount path under the ctx0 origin.
- *
- * The addressed world is the request's path (`/<label>/...`), so the label is
- * the ONLY routing key. Reserving it must be atomic against the real
- * webServer's duplicate-registration throw — that throw is the only collision
- * signal the framework offers (the route tables are private and there is no
- * query API), so it is used here as the probe.
- *
- * A collision is a composition-level conflict and must be loud; an optional
- * alternate root lets a deployment re-home instead of failing to boot.
- */
-/** One reserved mount path. */
-export interface LabelClaim {
-    /** Runtime key (`omp`, `codex`, …). */
-    readonly key: string;
-    /** Reserved mount root, e.g. `/omp` or `/_agents/omp` (no trailing slash). */
-    readonly path: string;
-    /** Release the claim (idempotent). */
-    release(): void;
-}
-/** How to reserve a path: the injected real-webServer registration. */
-export interface ClaimOptions {
-    /** Attempt a prefix registration; throws when `(kind, path)` is already taken. */
-    register(path: string): () => void;
-    /** Optional root prefix (default: the origin root). */
-    root?: string;
-    /** Candidate roots to try, in order, when the clean path is taken. */
-    alternateRoots?: readonly string[];
-}
-/**
- * Reserve the mount path for `key`.
- * @param key - runtime key (one path segment).
- * @param opts - registration probe plus optional roots.
- * @returns the live claim.
- */
-export declare function claimLabel(key: string, opts: ClaimOptions): LabelClaim;
-/** The reserved mount root for a key, or undefined when unclaimed. */
-export declare function labelOf(key: string): string | undefined;
-/** Release a key's claim; unknown keys are a no-op. */
-export declare function releaseLabel(key: string): void;
-/** Claimed keys, registration order. */
-export declare function listLabels(): string[];
-/** Test/introspection helper: is this object a claim? */
-export declare function isLabelClaim(value: unknown): value is LabelClaim;

package/agent-hub/dist/labels.js

@@ -1,83 +0,0 @@
-/**
- * Label table (AW-B DL2/DL4): one world ↔ one mount path under the ctx0 origin.
- *
- * The addressed world is the request's path (`/<label>/...`), so the label is
- * the ONLY routing key. Reserving it must be atomic against the real
- * webServer's duplicate-registration throw — that throw is the only collision
- * signal the framework offers (the route tables are private and there is no
- * query API), so it is used here as the probe.
- *
- * A collision is a composition-level conflict and must be loud; an optional
- * alternate root lets a deployment re-home instead of failing to boot.
- */
-const claims = new Map();
-function isRecordLike(value) {
-    return typeof value === 'object' && value !== null;
-}
-/** Reject keys that cannot be a single path segment. */
-function assertKey(key) {
-    if (typeof key !== 'string' || key === '' || key.includes('/') || key.includes('?')) {
-        throw new Error(`labels: invalid label key ${JSON.stringify(key)} (one non-empty path segment required)`);
-    }
-}
-function joinRoot(root, key) {
-    const trimmed = root.replace(/\/+$/, '');
-    return trimmed === '' ? `/${key}` : `${trimmed}/${key}`;
-}
-/**
- * Reserve the mount path for `key`.
- * @param key - runtime key (one path segment).
- * @param opts - registration probe plus optional roots.
- * @returns the live claim.
- */
-export function claimLabel(key, opts) {
-    assertKey(key);
-    const existing = claims.get(key);
-    if (existing !== undefined) {
-        throw new Error(`labels: key ${JSON.stringify(key)} already claimed at "${existing.path}"`);
-    }
-    const roots = [opts.root ?? '', ...(opts.alternateRoots ?? [])];
-    const tried = [];
-    for (const root of roots) {
-        const path = joinRoot(root, key);
-        if (tried.includes(path))
-            continue;
-        tried.push(path);
-        let dispose;
-        try {
-            dispose = opts.register(path);
-        }
-        catch {
-            continue;
-        }
-        const claim = {
-            key,
-            path,
-            release: () => {
-                if (claims.get(key)?.path !== path)
-                    return;
-                claims.delete(key);
-                dispose?.();
-            },
-        };
-        claims.set(key, claim);
-        return claim;
-    }
-    throw new Error(`labels: no free mount path for ${JSON.stringify(key)} (tried ${tried.map(p => `"${p}"`).join(', ')})`);
-}
-/** The reserved mount root for a key, or undefined when unclaimed. */
-export function labelOf(key) {
-    return claims.get(key)?.path;
-}
-/** Release a key's claim; unknown keys are a no-op. */
-export function releaseLabel(key) {
-    claims.get(key)?.release();
-}
-/** Claimed keys, registration order. */
-export function listLabels() {
-    return [...claims.keys()];
-}
-/** Test/introspection helper: is this object a claim? */
-export function isLabelClaim(value) {
-    return isRecordLike(value) && typeof value['key'] === 'string' && typeof value['path'] === 'string';
-}

package/agent-hub/dist/spawn-world.js

@@ -1,72 +0,0 @@
-/**
- * spawnWorld (S2): spawn a sibling ROOT context for a foreign agent world
- * from the CTX0 tree — the library form of the PoC (ADR 0008 mechanism,
- * .scratch/multi-context-poc/spawner2.mjs collapsed into a function).
- *
- * AW-A posture: SHARED home (ADR 0008 constraint 2 fallback). The ctxN
- * `dshHomePath` service override is an AW-C1 item (spec §三/§十一.2) — the
- * boot() provide/prepare ordering fact is pinned by
- * test/boot-prepare-ordering.test.mjs. Data detachment at this stage comes
- * from the adapter side (foreign app-home redirection, spec §七).
- *
- * Profile resolution: loadProfile(name, profileName, installAnchor, home)
- * reads profiles under `<home>/profiles/<profileName>` and heals the
- * `@deepseek-ai/*` fallback farm into `<home>/profiles/node_modules` from
- * the install anchor (single instance — same physical installation).
- */
-import { loadProfile, boot } from '@deepseek-ai/dsh-app-boot';
-import { provideCmdline } from '@deepseek-ai/dsh-cmdline';
-import { writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { pathToFileURL } from 'node:url';
-const EMPTY_ROOT = '[]\n';
-export async function spawnWorld(opts) {
-    const profile = loadProfile(opts.appName, opts.profileName, opts.installAnchor, opts.home);
-    // Empty include root: the tree is composed entirely as patch layers
-    // (bundle rows in profile order + profile patch + extras).
-    writeFileSync(join(profile.dir, 'cordis.yml'), EMPTY_ROOT);
-    const patches = [
-        ...profile.layers.flatMap((l) => l.patches),
-        ...profile.patches,
-        ...(opts.extraPatches ?? []),
-    ];
-    // Bare plugin names resolve from the installation's node_modules (the
-    // anchor owns the complete plugin closure). Same cordis on both sides —
-    // no cross-copy Symbol split.
-    // Loader wants a file:// URL base; accept a plain path and normalize.
-    const rawBase = opts.bareModuleBaseUrl ?? join(opts.installAnchor, '..', 'node_modules', '/');
-    const bareModuleBaseUrl = rawBase.startsWith('file:')
-        ? rawBase
-        : pathToFileURL(rawBase.endsWith('/') ? rawBase : rawBase + '/').href;
-    // Embedding-host facts via the PUBLIC cmdline API (risk-2 probe: boot owns
-    // dshHomePath, so the prepare slot is for OUR provides — cmdlineArgs is not
-    // boot-provided and upstream documents the empty-args embedding path).
-    // Worlds take no flags and never open a browser; exit = dispose own fiber.
-    // LAN authorities for the world's trust fence (deploy-level, env-driven):
-    // the world webserver must accept the Host the browser actually sends.
-    const trusted = (process.env.AW_TRUSTED_HOSTS ?? '')
-        .split(/[\s,]+/).filter(Boolean)
-        .flatMap((h) => ['--trusted-host', h]);
-    let fiber;
-    const ctxW = await boot(opts.appName, join(profile.dir, 'cordis.yml'), patches, (ctx) => {
-        provideCmdline(ctx, {
-            args: ['--no-open', ...trusted],
-            exit: () => { void fiber?.dispose(); },
-        });
-        // This tree reads its own home from here on: sessions, settings.yaml,
-        // workspace store — all under the world's nested root.
-        //
-        // `set` (not `provide`): boot already registered `dshHomePath` on this
-        // root, and cordis refuses a second `provide` in the same scope
-        // ("service … has been registered at <root>"). `set` is the documented
-        // "overwrite a provided service's value" path for the owning fiber, which
-        // the prepare slot is — and ADR 0008 constraint 2 prescribes exactly this
-        // in-tree override (process.env is a shared resolver and must not change).
-        if (opts.dataHome !== undefined) {
-            const dataHome = opts.dataHome;
-            ctx.set('dshHomePath', (...segments) => join(dataHome, ...segments));
-        }
-    }, bareModuleBaseUrl);
-    fiber = ctxW.fiber;
-    return ctxW;
-}

package/agent-hub/dist/world-entry.d.ts

@@ -1,31 +0,0 @@
-/**
- * World-side mount plugin (AW-B DL1/DL3) — `@pgmi-builds/agent-hub/world`.
- *
- * Inserted into the WORLD root's composition (its own process-side root, no
- * listener). It provides the virtual `webServer` for that root: every route the
- * world's plugins register is translated to `/<label>+path` on ctx0's real
- * webServer, so the world's whole web surface lands under its mount with no
- * namespace list and no second socket.
- *
- * The RPC channel is NOT the world's: `WorldWebServer` swallows `/api*`, and the
- * hub's carrier answers `/<label>/api` + `/<label>/api/remote.mux` in ctx0's
- * auth domain, dispatching to this world's gateway instance. Non-envelope
- * GET/HEAD traffic on `/<label>/api` is forwarded into the world's registered
- * exact Fetch routes (session-log export and friends) through the shared
- * `/api` fetch handler this plugin publishes into the cross-root registry
- * (`world-host.ts`) — still behind ctx0's fence, never the world's own.
-
- * auth domain, dispatching to this world's gateway instance.
- */
-import type { Context } from '@deepseek-ai/cordis';
-/** Stable Cordis plugin name. */
-export declare const name = "aw.world.mount";
-/** Row config: which world this root is. */
-export interface Config {
-    key: string;
-}
-/** Apply the world mount. @param ctx - the WORLD root context. @param config - `{ key }`. */
-export declare function apply(ctx: Context, config?: {
-    key?: unknown;
-}): void;
-export default apply;

package/agent-hub/dist/world-entry.js

@@ -1,51 +0,0 @@
-import { noteWorldServer, publishWorldFetch, takeHostMount } from './world-host.js';
-import { WorldWebServer } from './world-web-server.js';
-/** Stable Cordis plugin name. */
-export const name = 'aw.world.mount';
-/** Apply the world mount. @param ctx - the WORLD root context. @param config - `{ key }`. */
-export function apply(ctx, config) {
-    const key = typeof config?.key === 'string' ? config.key : undefined;
-    if (key === undefined) {
-        ctx.logger?.warn?.('aw.world.mount: missing config.key — world not mounted');
-        return;
-    }
-    const mount = takeHostMount(key);
-    if (mount === undefined) {
-        ctx.logger?.warn?.(`aw.world.mount: no host mount registered for key ${JSON.stringify(key)}`);
-        return;
-    }
-    const worldWebServer = new WorldWebServer(mount.labelPath, mount.real, {
-        onIndexInject: (table) => { ctx.emit('webserver/index-inject', table); },
-        // One auth domain: the mount, not this world, decides who may read a page.
-        authorize: (req, res) => mount.authorize?.(req, res) ?? true,
-    });
-    noteWorldServer(key, worldWebServer);
-    ctx.reflect.provide('webServer', worldWebServer);
-    // The world's frontend-static still asks ITS OWN connection to authorize an
-    // index request. That gate is answered by the mount above: the browser came
-    // in through ctx0, the world is reached in-ctx, and the world's cookie secret
-    // belongs to its own nested home — so a second check here could only 401 an
-    // already-authorized read. Neutralize it instead of sharing credentials.
-    // The same connection also composes the world's `/api` fetch handler (exact
-    // Fetch routes + the gateway's RPC interceptor). It is published here so the
-    // hub's carrier can forward non-envelope GET/HEAD traffic on
-    // `/<label>/api` into the world's registered routes; auth stays in ctx0's
-    // domain because the carrier fences the request BEFORE this handler runs.
-    let dropWorldFetch;
-    ctx.inject(['connection'], (webCtx) => {
-        const connection = webCtx.get('connection');
-        if (connection === undefined)
-            return;
-        if (typeof connection.authorizeIndex === 'function') {
-            connection.authorizeIndex = () => true;
-        }
-        if (typeof connection.createSharedFetchHandler === 'function') {
-            dropWorldFetch = publishWorldFetch(key, connection.createSharedFetchHandler('/api'));
-        }
-    });
-    ctx.effect(() => () => {
-        worldWebServer.dispose();
-        dropWorldFetch?.();
-    }, 'aw.world.mount: virtual webServer');
-}
-export default apply;

package/agent-hub/dist/world-host.js

@@ -1,44 +0,0 @@
-const mounts = new Map();
-/** Publish the host side of one world mount (idempotent replace). */
-export function registerHostMount(mount) {
-    mounts.set(mount.key, mount);
-    return () => {
-        if (mounts.get(mount.key) === mount)
-            mounts.delete(mount.key);
-    };
-}
-const servers = new Map();
-/** Record the virtual webServer a world root provided (diagnostics/tests). */
-export function noteWorldServer(key, server) {
-    servers.set(key, server);
-}
-/** The virtual webServer a world root provided, if it mounted yet. */
-export function worldServerOf(key) {
-    return servers.get(key);
-}
-/** Read one host mount (called from inside the world root). */
-export function takeHostMount(key) {
-    return mounts.get(key);
-}
-/** Keys with a published host mount. */
-export function listHostMounts() {
-    return [...mounts.keys()];
-}
-const worldFetchHandlers = new Map();
-/**
- * Publish one world's shared `/api` fetch handler so the carrier can forward
- * non-envelope traffic on `/<label>/api` into the world's registered routes
- * (session-log export and friends). Called from inside the world root
- * (`world-entry`); read from the host root (`carrier`). Idempotent replace.
- */
-export function publishWorldFetch(key, handler) {
-    worldFetchHandlers.set(key, handler);
-    return () => {
-        if (worldFetchHandlers.get(key) === handler)
-            worldFetchHandlers.delete(key);
-    };
-}
-/** The world's published shared `/api` fetch handler, if its root published one yet. */
-export function worldFetchHandlerOf(key) {
-    return worldFetchHandlers.get(key);
-}