super-dsh 0.1.3 → 0.1.5

package/agent-hermes/dist/agent-preset-hermes.js

@@ -1,171 +1,32 @@
-var __runInitializers = (this && this.__runInitializers) || function (thisArg, initializers, value) {
-    var useValue = arguments.length > 2;
-    for (var i = 0; i < initializers.length; i++) {
-        value = useValue ? initializers[i].call(thisArg, value) : initializers[i].call(thisArg);
-    }
-    return useValue ? value : void 0;
-};
-var __esDecorate = (this && this.__esDecorate) || function (ctor, descriptorIn, decorators, contextIn, initializers, extraInitializers) {
-    function accept(f) { if (f !== void 0 && typeof f !== "function") throw new TypeError("Function expected"); return f; }
-    var kind = contextIn.kind, key = kind === "getter" ? "get" : kind === "setter" ? "set" : "value";
-    var target = !descriptorIn && ctor ? contextIn["static"] ? ctor : ctor.prototype : null;
-    var descriptor = descriptorIn || (target ? Object.getOwnPropertyDescriptor(target, contextIn.name) : {});
-    var _, done = false;
-    for (var i = decorators.length - 1; i >= 0; i--) {
-        var context = {};
-        for (var p in contextIn) context[p] = p === "access" ? {} : contextIn[p];
-        for (var p in contextIn.access) context.access[p] = contextIn.access[p];
-        context.addInitializer = function (f) { if (done) throw new TypeError("Cannot add initializers after decoration has completed"); extraInitializers.push(accept(f || null)); };
-        var result = (0, decorators[i])(kind === "accessor" ? { get: descriptor.get, set: descriptor.set } : descriptor[key], context);
-        if (kind === "accessor") {
-            if (result === void 0) continue;
-            if (result === null || typeof result !== "object") throw new TypeError("Object expected");
-            if (_ = accept(result.get)) descriptor.get = _;
-            if (_ = accept(result.set)) descriptor.set = _;
-            if (_ = accept(result.init)) initializers.unshift(_);
-        }
-        else if (_ = accept(result)) {
-            if (kind === "field") initializers.unshift(_);
-            else descriptor[key] = _;
-        }
-    }
-    if (target) Object.defineProperty(target, contextIn.name, descriptor);
-    done = true;
-};
-import { Remote, RemoteError, TypertRemoteService } from "@deepseek-ai/dsh-typert-protocol";
-const HERMES_PRESET = Object.freeze({
-    id: "hermes",
-    trust: "system",
-    path: "",
+export const HERMES_PRESET_ID = "hermes";
+/** The single fixed Hermes preset: mounting it composes nothing. */
+export const HERMES_PRESET = Object.freeze({
+    id: HERMES_PRESET_ID,
     name: "Hermes",
     description: "Hermes agent via the agent-hermes adapter",
+    plugins: Object.freeze([]),
 });
-const COMPOSITION_TEXT = [
-    "# Hermes (fixed roster)",
-    "",
-    "This deployment runs exactly one agent mode: the Hermes provider bridges Dash",
-    "sessions to a native Hermes agent over the TUI gateway JSON-RPC. There is no",
-    "per-session plugin composition to configure, so this preset mounts nothing.",
-    "",
-    "rows: []",
-    "",
-].join("\n");
-/** The standing scope key every `hermes` session reads presenters through. */
-const STANDING_KEY = {};
-let SingleHermesPresetRoster = (() => {
-    let _classSuper = TypertRemoteService;
-    let _instanceExtraInitializers = [];
-    let _remoteList_decorators;
-    let _remoteRead_decorators;
-    let _remoteCopy_decorators;
-    let _remoteDelete_decorators;
-    let _remoteSelect_decorators;
-    return class SingleHermesPresetRoster extends _classSuper {
-        static {
-            const _metadata = typeof Symbol === "function" && Symbol.metadata ? Object.create(_classSuper[Symbol.metadata] ?? null) : void 0;
-            _remoteList_decorators = [Remote("list")];
-            _remoteRead_decorators = [Remote("read")];
-            _remoteCopy_decorators = [Remote("copy")];
-            _remoteDelete_decorators = [Remote("deletePreset")];
-            _remoteSelect_decorators = [Remote("select")];
-            __esDecorate(this, null, _remoteList_decorators, { kind: "method", name: "remoteList", static: false, private: false, access: { has: obj => "remoteList" in obj, get: obj => obj.remoteList }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteRead_decorators, { kind: "method", name: "remoteRead", static: false, private: false, access: { has: obj => "remoteRead" in obj, get: obj => obj.remoteRead }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteCopy_decorators, { kind: "method", name: "remoteCopy", static: false, private: false, access: { has: obj => "remoteCopy" in obj, get: obj => obj.remoteCopy }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteDelete_decorators, { kind: "method", name: "remoteDelete", static: false, private: false, access: { has: obj => "remoteDelete" in obj, get: obj => obj.remoteDelete }, metadata: _metadata }, null, _instanceExtraInitializers);
-            __esDecorate(this, null, _remoteSelect_decorators, { kind: "method", name: "remoteSelect", static: false, private: false, access: { has: obj => "remoteSelect" in obj, get: obj => obj.remoteSelect }, metadata: _metadata }, null, _instanceExtraInitializers);
-            if (_metadata) Object.defineProperty(this, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
-        }
-        constructor(ctx) {
-            super(ctx, "agentPresets");
-            __runInitializers(this, _instanceExtraInitializers);
-        }
-        get defaultId() {
-            return HERMES_PRESET.id;
-        }
-        get roots() {
-            return [];
-        }
-        get authorable() {
-            return false;
-        }
-        async list() {
-            return [HERMES_PRESET];
-        }
-        async resolve(id) {
-            if (id === undefined || id === HERMES_PRESET.id)
-                return HERMES_PRESET;
-            throw new RemoteError("agent-preset/not-found", `agent-presets: preset "${id}" not found (available: hermes)`, { agentPreset: id, available: [HERMES_PRESET.id] });
-        }
-        async mount(_agentCtx, id) {
-            return this.resolve(id);
-        }
-        async recompose(_agentCtx, id) {
-            return this.resolve(id);
-        }
-        async read(id) {
-            await this.resolve(id);
-            return COMPOSITION_TEXT;
-        }
-        // ── Remote RPC surface (alpha: agentPresets routes come from @Remote) ────
-        // The stock dsh-host-apiproxy mapped cordis methods to routes; alpha serves
-        // them from @Remote decorators on a TypertRemoteService. A plain Service
-        // registers no routes, which is why Settings → Agent Preset 404'd.
-        async remoteList() {
-            if (process.env.HERMES_TRACE === "1")
-                process.stderr.write("[hermes-roster] remoteList INVOKED\n");
-            return {
-                presets: [
-                    {
-                        id: HERMES_PRESET.id,
-                        trust: HERMES_PRESET.trust,
-                        isDefault: true,
-                        name: HERMES_PRESET.name,
-                        description: HERMES_PRESET.description,
-                    },
-                ],
-                authorable: this.authorable,
-            };
-        }
-        async remoteRead(agentPreset) {
-            const preset = await this.resolve(agentPreset);
-            return {
-                agentPreset: preset.id,
-                trust: preset.trust,
-                content: await this.read(preset.id),
-                name: preset.name,
-                description: preset.description,
-            };
-        }
-        async remoteCopy(from, id, name) {
-            await this.copy(from, id, name);
-        }
-        async remoteDelete(id) {
-            await this.remove(id);
-        }
-        /** Fixed roster: one preset, so selecting it is a no-op ack; anything else is unknown. */
-        async remoteSelect(agent, agentPreset) {
-            const preset = await this.resolve(agentPreset);
-            return preset.id;
-        }
-        async copy(_from, id, _name) {
-            throw new RemoteError("agent-preset/read-only", `agent-presets: preset "${id}" cannot be written: the Hermes roster is fixed and ships exactly one preset`, { agentPreset: id, reason: "the Hermes roster is fixed and ships exactly one preset" });
-        }
-        async remove(id) {
-            throw new RemoteError("agent-preset/read-only", `agent-presets: preset "${id}" cannot be written: the Hermes roster is fixed and ships exactly one preset`, { agentPreset: id, reason: "the Hermes roster is fixed and ships exactly one preset" });
-        }
-        serviceFor(_agent, _name) {
-            return undefined;
-        }
-        composeFrom(_agentCtx, _parentCtx) {
-            return undefined;
-        }
-        composedPreset(_agentCtx) {
-            return HERMES_PRESET.id;
-        }
-        async standingKeyFor(id) {
-            await this.resolve(id);
-            return STANDING_KEY;
-        }
-    };
-})();
-export { SingleHermesPresetRoster };
+/**
+ * Register the fixed preset into the host `AgentPresetRegistry` once the
+ * service is up. Registration failure keeps the roster row visible as
+ * `broken` inside the registry (upstream owns that lifecycle) — the adapter
+ * only owns the disposer.
+ */
+export function registerHermesPreset(ctx) {
+    ctx.inject(["agentPresets"], (scoped) => {
+        let dispose;
+        let settled = false;
+        void scoped.agentPresets.register(HERMES_PRESET).then((unregister) => {
+            if (settled) {
+                void unregister();
+            }
+            else {
+                dispose = unregister;
+            }
+        });
+        ctx.effect(() => async () => {
+            settled = true;
+            await dispose?.();
+        }, "hermesAdapter.preset");
+    });
+}

package/agent-hermes/dist/agent.js

@@ -4,6 +4,7 @@ import { LlmAttemptId, ToolCallId, QUOTA_EXCEEDED_CODE, createAssistantMessage,
 import { createScope } from "@deepseek-ai/dsh-scope";
 import { GatewayRpcError, HERMES_SPAWN_ATTEMPTS } from "./hermes-client.js";
 import { approvalChoiceFromOutcome } from "./permission.js";
+import { withSystemHead } from "../../superd-hub/dist/index.js";
 /**
  * v2 live assistant-stream publication for the Hermes bridge — the same frame
  * protocol the reference loop's AssistantStreamAttempt speaks (start marker,
@@ -58,22 +59,27 @@ const trace = (...parts) => {
 export function convertContent(blocks) {
     if (blocks === undefined)
         return [];
-    const result = [];
+    // 0.1.6 renders blocks in ARRAY order; the native stream emits reasoning
+    // BEFORE text, so gateway messages that trail their thinking blocks must be
+    // hoisted — otherwise the WebUI draws "Thought for a while" AFTER the
+    // response (2026-09-23 evidence).
+    const reasoning = [];
+    const rest = [];
     for (const block of blocks) {
         switch (block.type) {
             case "text":
                 if (typeof block.text === "string")
-                    result.push({ type: "text", text: block.text });
+                    rest.push({ type: "text", text: block.text });
                 break;
             case "thinking":
                 if (typeof block.thinking === "string")
-                    result.push({ type: "reasoning", text: block.thinking });
+                    reasoning.push({ type: "reasoning", text: block.thinking });
                 break;
             case "toolCall": {
                 const id = typeof block.id === "string" ? block.id : "";
                 const name = typeof block.name === "string" ? block.name : "";
                 const args = typeof block.arguments === "string" ? block.arguments : JSON.stringify(block.arguments ?? {});
-                result.push({ type: "tool-call", id: ToolCallId(id), name, arguments: args });
+                rest.push({ type: "tool-call", id: ToolCallId(id), name, arguments: args });
                 break;
             }
             default:
@@ -81,7 +87,7 @@ export function convertContent(blocks) {
                 break;
         }
     }
-    return result;
+    return [...reasoning, ...rest];
 }
 /**
  * Classify the wire's `stopReason: "error"` assistant message into a Dash
@@ -191,8 +197,13 @@ function userMessageText(message) {
  * work) and echo it into history as a fake user prompt. Detect and drop it.
  */
 function isApprovalNarration(message) {
-    const source = message.source;
-    return source.kind === "plugin" && source.plugin === "user-approval";
+    // 0.1.7: the shared `plugin` source kind is gone (MessageSourceMap is
+    // merge-extensible; each producer declares its own kind) — user-approval
+    // now carries the dedicated `user-approval` kind.
+    // Type-only: loads the `user-approval` MessageSourceMap augmentation
+    // (0.1.7: producer-owned source kinds; the shared `plugin` kind is gone).
+    // noinspection JSValidateTypes
+    return message.source.kind === "user-approval";
 }
 const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 /**
@@ -264,6 +275,8 @@ export class HermesAgent {
     #pendingFailure = null;
     /** Last title mirrored into `session/title` (dedupes repeated gateway events). */
     #mirroredTitle = null;
+    /** Seq of the session's first user/message (v4 title citations derive from it). */
+    #titleSourceSeq;
     /** Live v2 assistant-stream publication for the in-flight wire message. */
     #streamBridge;
     #assistantAttemptCounter = 0;
@@ -299,7 +312,7 @@ export class HermesAgent {
         this.#loopCtx = loopCtx;
         this.id = id;
         this.options = options;
-        this.session = session;
+        this.session = withSystemHead(session, () => createSystemMessage(""));
         this.#client = client;
         this.#onIdleExit = onIdleExit;
         this.#runtimeInfo = runtimeInfo;
@@ -482,7 +495,7 @@ export class HermesAgent {
             return;
         this.session.append("turn/start", { turn: this.#dashTurn });
         await this.#emitRequestContext();
-        this.session.append("user/message", message, { surfaceOp: "append" });
+        this.#titleSourceSeq ??= this.session.append("user/message", message, { surfaceOp: "append" }).seq;
         this.#armTurnDeadline();
         void this.#client
             .prompt(userMessageText(message))
@@ -555,20 +568,19 @@ export class HermesAgent {
         if (this.#runtimeInfo === undefined || !this.#turnOpen)
             return;
         this.#commitStepStart();
-        if (this.#step === 0)
+        // commitStepStart re-enters #emitSystemMessage (step open → stamp); the
+        // outer call must re-check the one-shot flag after the recursion.
+        if (this.#systemMessageDone)
             return;
-        if (this.session.snapshotEvents().some((event) => event.type === "system/message")) {
-            this.#systemMessageDone = true;
+        if (this.#step === 0)
             return;
-        }
         const text = this.#runtimeInfo.systemPrompt();
         if (text === undefined || text.trim() === "")
             return;
-        this.session.append("system/message", {
-            turn: this.#dashTurn,
-            step: this.#step,
-            message: createSystemMessage(text, "aw.agent-adapter-hermes"),
-        }, { surfaceOp: "append" });
+        // v4 protected-head posture: replace the placeholder head (stamped before
+        // the first user message); an append here would corrupt the log for the
+        // 0.1.7 reader ("system/message requires a protected first surface head").
+        this.session.stampSystemPrompt(this.#dashTurn, this.#step, createSystemMessage(text));
         this.#systemMessageDone = true;
         const title = this.#runtimeInfo.sessionTitle();
         if (title !== undefined && title !== "")
@@ -941,9 +953,11 @@ export class HermesAgent {
             return;
         this.#mirroredTitle = name;
         try {
+            if (this.#titleSourceSeq === undefined)
+                return; // v4: a provider title cites the user message it titles
             this.session.append("session/title", {
                 title: name,
-                messageSeqs: [],
+                messageSeqs: [this.#titleSourceSeq],
                 source: { kind: "provider", provider: "hermes" },
             });
             trace(`session/title ← hermes: "${name}"`);

package/agent-hermes/dist/hermes-client.js

@@ -109,9 +109,9 @@ let gatewayFactory = defaultGatewayFactory;
 export function setGatewayFactory(factory) {
     gatewayFactory = factory ?? defaultGatewayFactory;
 }
-/** Brief-pinned order: AW_HERMES_PYTHON → <root>/venv/bin/python → <root>/.venv/bin/python → PATH python3. */
+/** Brief-pinned order: SUPERD_HERMES_PYTHON → <root>/venv/bin/python → <root>/.venv/bin/python → PATH python3. */
 export function resolveHermesPython(root) {
-    const configured = process.env.AW_HERMES_PYTHON?.trim();
+    const configured = process.env.SUPERD_HERMES_PYTHON?.trim();
     if (configured)
         return configured;
     for (const p of [resolve(root, "venv/bin/python"), resolve(root, ".venv/bin/python")]) {
@@ -120,9 +120,9 @@ export function resolveHermesPython(root) {
     }
     return "python3";
 }
-/** Hermes root: AW_HERMES_ROOT → ~/.hermes/hermes-agent (native home — never redirected). */
+/** Hermes root: SUPERD_HERMES_ROOT → ~/.hermes/hermes-agent (native home — never redirected). */
 export function resolveHermesRoot() {
-    return process.env.AW_HERMES_ROOT?.trim() || resolve(homedir(), ".hermes/hermes-agent");
+    return process.env.SUPERD_HERMES_ROOT?.trim() || resolve(homedir(), ".hermes/hermes-agent");
 }
 function asRecord(value) {
     if (value === null || typeof value !== "object" || Array.isArray(value))
@@ -946,7 +946,7 @@ export class HermesGatewayClient {
         return this.#stderrLines.slice(-20).join("\n");
     }
     #trace(line) {
-        if (process.env.AW_HERMES_TRACE === "1") {
+        if (process.env.SUPERD_HERMES_TRACE === "1") {
             process.stderr.write(`[hermes-client] ${line}\n`);
         }
     }

package/agent-hermes/dist/hermes-store.js

@@ -19,15 +19,7 @@
  * degrades to "unknown session" rather than breaking every operation.
  */
 import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
 import { basename, dirname, join, resolve } from "node:path";
-/** Prod homes that must never be resolved into (repo red line). */
-const PROD_HOMES = [join(homedir(), ".dsh"), join(homedir(), ".superd")];
-function assertNotProdHome(path, label) {
-    if (PROD_HOMES.includes(path) || PROD_HOMES.some((p) => path.startsWith(`${p}/`))) {
-        throw new Error(`hermes-store: refusing prod home as ${label}: ${path}`);
-    }
-}
 /**
  * The adapter's DSH-side state dir — `<dshHome>/agents/hermes`. This is DSH-SIDE
  * adapter state (the identity map), NOT hermes data: hermes keeps its native
@@ -40,13 +32,12 @@ function assertNotProdHome(path, label) {
  *   - Form-B: the boot-provided home is ALREADY the world home
  *     (`<root>/agents/hermes`) — passed through as-is, never double-nested.
  * Precedence: explicit home (boot-provided `dshHomePath`), then `$DSH_HOME`,
- * then the line's historical test-home default. Prod-guarded.
+ * then the line's historical test-home default.
  */
 export function resolveHermesAppDir(home) {
-    const base = resolve(home ?? process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw"));
+    const base = resolve(home ?? process.env.DSH_HOME ?? join(process.cwd(), ".tests", "superd"));
     // Form-B world home is already `<root>/agents/hermes` — never double-nest.
     const dir = basename(base) === "hermes" && basename(dirname(base)) === "agents" ? base : join(base, "agents", "hermes");
-    assertNotProdHome(dir, "hermes app dir");
     return dir;
 }
 /** The map file's path inside the adapter's DSH-side app dir. */

package/agent-hermes/dist/index.js

@@ -1,6 +1,6 @@
 /**
  * agent-hermes provider — Hermes provider plugin for DeepSeek Harness
- * (Agent Worlds AW-H, TUI gateway line).
+ * (Super D, TUI gateway line).
  *
  * Replaces the built-in agent loop with an `AgentFactory` that drives a
  * `HermesGatewayClient` (one spawned `python -m tui_gateway.entry` child per
@@ -24,13 +24,12 @@
 import { realpathSync, statSync } from "node:fs";
 import { join } from "node:path";
 import { Service } from "@deepseek-ai/cordis";
-import { emitAgentEvent, installModelSelection } from "@deepseek-ai/dsh-agent";
+import { installModelSelection } from "@deepseek-ai/dsh-agent";
 import { SessionLogOffset, SessionPreparation, interruptedTurnClosers, } from "@deepseek-ai/dsh-session";
 import { HermesGatewayClient, HERMES_SPAWN_GRACE_MS } from "./hermes-client.js";
 import { HermesAgent } from "./agent.js";
 import { HermesLlmAdapter, HERMES_PROVIDER_ID } from "./adapter.js";
-import { SingleHermesPresetRoster } from "./agent-preset-hermes.js";
-import { hermesAgentPresetProjection } from "./agent-preset-projection.js";
+import { registerHermesPreset } from "./agent-preset-hermes.js";
 import { sessionRecord, upsertSession } from "./hermes-store.js";
 import { hermesProviderSlugs, readHermesModelCatalog } from "./models.js";
 import { envApprovalMode, defaultPermissionPreset, presetFromEvents } from "./permission.js";
@@ -96,11 +95,12 @@ export class HermesProvider extends Service {
         this.#registerDefaultModel();
         // The roster must be visible to the API gateway's root-level remote
         // enumeration; register it on this plugin's own (top-level) fiber.
-        new SingleHermesPresetRoster(ctx);
-        // Drive the `agentPreset` session projection ourselves.
-        ctx.inject(["sessionProjections"], (scoped) => {
-            scoped.sessionProjections.register(hermesAgentPresetProjection);
-        });
+        // 0.1.7: roster/selection/document RPC + the `agentPreset` session
+        // projection all live in the host AgentPresetRegistry (mounted by the
+        // dsh-web-app bundle's `agent-preset-registry` row; the adapter patch
+        // pins its `default` to the Hermes preset). The adapter only registers
+        // its one fixed preset into the registry.
+        registerHermesPreset(ctx);
     }
     /**
      * The factory owns its sessions' route (user directive 2026-09-15,
@@ -217,7 +217,7 @@ export class HermesProvider extends Service {
             if (typeof resolved === "string" && resolved !== "")
                 return resolved;
         }
-        return process.env.DSH_HOME ?? join(process.cwd(), ".tests", "aw");
+        return process.env.DSH_HOME ?? join(process.cwd(), ".tests", "superd");
     }
     /**
      * Push the gateway's default model into the world's `agentDefaultModel`
@@ -499,8 +499,9 @@ async function setupAndPublish(loopCtx, ownerCtx, id, agentOptions, setup, sessi
             agent.ctx.sessions.announce(session);
         }
         detachAgent = loopCtx.agents.enter(agent, parentAgent);
-        loopCtx.agents.announce(agent);
-        emitAgentEvent(loopCtx, agent, "agent/session-start", { source });
+        // 0.1.6: announce(agent, source) is required, async, and emits agent/created
+        // itself — the manual agent/session-start emission is gone upstream.
+        await loopCtx.agents.announce(agent, source);
         let disposed = false;
         let unfollowOwner;
         const dispose = async () => {

package/agent-hermes/dist/world-plugin.js

@@ -1,28 +1,30 @@
 /**
- * aw.agent-adapter-hermes — the Hermes adapter's WORLD plugin (spec S2):
+ * agent-hermes — the Hermes adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-adapter-omp/world`
- * and `@pgmi-builds/agent-adapter-codex/world` so the hub sees every foreign
- * runtime through one shape: the world is spawned as a sibling ROOT context
- * with NO listener (`worldMountPatches`) and mounts itself under `/hermes`
- * through the hub —
+ * AW-B data-plane shape (DL1–DL5 → path-separation T-D), mirroring
+ * `@pgmi-builds/agent-omp/world` and `@pgmi-builds/agent-codex/world` so the
+ * hub sees every foreign runtime through one shape: the world is spawned as a
+ * sibling ROOT context with NO listener and NO webui composition
+ * (`worldMountPatches`) — a pure data plane behind the hub's `/hub` family —
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn;
- *   2. the world's entry row provides the virtual `webServer` in the world
- *      root, translating every route its plugins declare into `/hermes+path`;
- *   3. the hub's carrier answers `/hermes/api` + `/hermes/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn;
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects;
+ *   3. the hub's `/hub` family answers `?agent=hermes` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, } from '../../agent-hub/dist/index.js';
-export const name = 'aw.agent-adapter-hermes';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+export const name = 'agent-hermes';
 /** Runtime key — also the mount label. */
 const KEY = 'hermes';
-const ANCHOR = process.env.SUPERD_DSH_ANCHOR
-    ?? '/home/u1/.local/lib/node_modules/@deepseek-ai/dsh/package.json';
 export function apply(ctx) {
     registerAgent({ key: KEY, label: 'Hermes', ready: false });
     // Harness resolver (env → ~/.dsh): a consumer install has no DSH_HOME and
@@ -39,57 +41,34 @@ export function apply(ctx) {
     const worldHome = join(root, 'agents', KEY);
     mkdirSync(join(worldHome, 'profiles'), { recursive: true });
     // Publish story: a foreign install has no line bootstrap, so the nested
-    // profile + @pgmi-builds links are provisioned HERE (idempotent; dev lines
-    // keep parity — smoke.mjs wrote the same layout, and AW_BARE_BASE still
-    // overrides the resolved base).
-    const bareBase = provisionWorldProfile({
+    // profile + @pgmi-builds links are provisioned HERE (idempotent).
+    provisionWorldProfile({
         key: KEY,
-        adapterPkg: '@pgmi-builds/agent-adapter-hermes',
+        adapterPkg: '@pgmi-builds/agent-hermes',
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
-            appName: `aw-${KEY}`,
+            appName: `superd-${KEY}`,
             profileName: 'web',
-            installAnchor: ANCHOR,
+            installAnchor: resolveInstallAnchor(ctx), // lazy: never at module scope — import must stay side-effect-free
             home: worldHome,
             dataHome: worldHome,
-            // Adapter-local bundle names resolve from the profile's own
-            // node_modules (heal owns @deepseek-ai there; @pgmi-builds links are
-            // provisioned by provisionWorldProfile above, or by the line bootstrap
-            // when the adapter package was not resolvable — env wins over both).
-            bareModuleBaseUrl: process.env.AW_BARE_BASE ?? bareBase ?? undefined,
+            // The host's live table carries this world: spawnWorld republishes a
+            // widened successor before boot imports anything (spec §2.1), and
+            // @pgmi-builds rows resolve from the profile-local links written above.
+            host: ctx,
             extraPatches: worldMountPatches(KEY),
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
-        }, `aw.agent-adapter-${KEY}: mount`);
+        }, `agent-${KEY}: mount`);
         return ctxW;
     })().catch((cause) => {
         // A failed world degrades to a not-ready roster row; a rejected provided
@@ -97,5 +76,5 @@ export function apply(ctx) {
         console.error(`[super-dsh] ${KEY} world failed:`, cause);
         return null;
     });
-    ctx.provide(`aw.world.${KEY}`, world);
+    ctx.provide(`superd.world.${KEY}`, world);
 }

package/agent-hermes/package.json

@@ -1,7 +1,7 @@
 {
-  "name": "@pgmi-builds/agent-adapter-hermes",
+  "name": "@pgmi-builds/agent-hermes",
   "version": "0.1.0",
-  "description": "Hermes provider for DeepSeek Harness (dsh) — an AgentFactory that embeds Nous Research Hermes Agent via the TUI gateway JSON-RPC (python -m tui_gateway.entry) and bridges its session surface into Dash Agent/Session contracts (Agent Worlds AW-H).",
+  "description": "Hermes provider for DeepSeek Harness (dsh) — an AgentFactory that embeds Nous Research Hermes Agent via the TUI gateway JSON-RPC (python -m tui_gateway.entry) and bridges its session surface into Dash Agent/Session contracts .",
   "type": "module",
   "exports": {
     ".": "./dist/index.js",
@@ -22,18 +22,18 @@
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {
-    "@pgmi-builds/agent-hub": "file:../agent-hub",
-    "zod": "3.25.76"
+    "zod": "4.4.3"
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-agent-presets": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-scope": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-session-persistence": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-typert-protocol": "0.1.5-rc.2"
+    "@deepseek-ai/dsh-agent": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-agent-presets": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-llm": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-scope": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-session": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-session-persistence": ">=0.1.5-0 <0.3.0-0",
+    "@deepseek-ai/dsh-typert-protocol": ">=0.1.5-0 <0.3.0-0",
+    "@pgmi-builds/superd-hub": "*"
   },
   "peerDependenciesMeta": {
     "@deepseek-ai/cordis": {
@@ -59,6 +59,9 @@
     },
     "@deepseek-ai/dsh-typert-protocol": {
       "optional": true
+    },
+    "@pgmi-builds/superd-hub": {
+      "optional": true
     }
   },
   "devDependencies": {