super-dsh 0.1.4 → 0.1.5-a

package/README.md

@@ -1,8 +1,8 @@
 # super-dsh — Super D agent hub for the DeepSeek Harness
 
 One [DSH](https://www.npmjs.com/package/@deepseek-ai/dsh) plugin that joins local
-foreign-agent runtimes into the DSH Web UI: one zero-port world per runtime
-mounted under `/<label>` —
+foreign-agent runtimes into the DSH Web UI: a runtime selector in the sidebar,
+a live roster, and one zero-port world per runtime mounted under `/<label>` —
 same browser shell, same auth domain, per-world session separation.
 
 **Owns no runtimes and stores no conversations.** Every adapter keeps its
@@ -14,12 +14,12 @@ the foreign store.
 ## Install
 
 ```bash
-dsh plugin --profile <name> add super-dsh@0.1.4
+dsh plugin --profile <name> add super-dsh@0.1.0
 ```
 
 That single package composes the whole line (`@pgmi-builds/superd-hub` plus the
-six `@pgmi-builds/agent-*` packages). Restart the profile and each world
-provisions its own nested DSH
+six `@pgmi-builds/agent-*` packages). Restart the profile and the
+sidebar gains the runtime selector; each world provisions its own nested DSH
 home under `<DSH_HOME>/agents/<label>/` on first boot.
 
 ## Runtimes
@@ -35,8 +35,7 @@ home under `<DSH_HOME>/agents/<label>/` on first boot.
 
 ## Design
 
-- **S1** addressing is one hop: the addressed world is the request's mount
-  path; the dispatcher never addresses sessions.
+- **S1** selector handoff is one hop; the dispatcher never addresses sessions.
 - **S2** activation is roster membership; worlds spawn as sibling roots
   (`boot()` on the CTX0 tree), never through `runProfile()`.
 - **S3/S7** `<DSH_HOME>/agents/<runtime>/` is that runtime's whole world; native

package/agent-agy/dist/world-plugin.js

@@ -2,21 +2,26 @@
  * agent-agy — the Antigravity (agy) adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-omp/world`
- * and `@pgmi-builds/agent-codex/world` so the hub sees every foreign
- * runtime through one shape: the world is spawned as a sibling ROOT context
- * with NO listener (`worldMountPatches`) and mounts itself under `/agy`.
+ * AW-B data-plane shape (DL1–DL5 → path-separation T-D), mirroring
+ * `@pgmi-builds/agent-omp/world` and `@pgmi-builds/agent-codex/world` so the
+ * hub sees every foreign runtime through one shape: the world is spawned as a
+ * sibling ROOT context with NO listener and NO webui composition
+ * (`worldMountPatches`) — a pure data plane behind the hub's `/hub` family.
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn;
- *   2. the world's entry row provides the virtual `webServer` in the world
- *      root, translating every route its plugins declare into `/agy+path`;
- *   3. the hub's carrier answers `/agy/api` + `/agy/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn;
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects;
+ *   3. the hub's `/hub` family answers `?agent=agy` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
 export const name = 'agent-agy';
 /** Runtime key — also the mount label. */
 const KEY = 'agy';
@@ -40,21 +45,9 @@ export function apply(ctx) {
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
             appName: `superd-${KEY}`,
             profileName: 'web',
@@ -69,16 +62,8 @@ export function apply(ctx) {
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
         }, `agent-${KEY}: mount`);
         return ctxW;

package/agent-codex/dist/world-plugin.js

@@ -2,21 +2,26 @@
  * agent-codex — the Codex adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-omp/world`
- * so the hub sees both foreign runtimes through one shape: the world is spawned
- * as a sibling ROOT context with NO listener (`worldMountPatches`) and mounts
- * itself under `/codex` through the hub —
+ * AW-B data-plane shape (DL1–DL5 → path-separation T-D), mirroring
+ * `@pgmi-builds/agent-omp/world` so the hub sees both foreign runtimes through
+ * one shape: the world is spawned as a sibling ROOT context with NO listener
+ * and NO webui composition (`worldMountPatches`) — a pure data plane behind
+ * the hub's `/hub` family —
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn;
- *   2. the world's entry row provides the virtual `webServer` in the world
- *      root, translating every route its plugins declare into `/codex+path`;
- *   3. the hub's carrier answers `/codex/api` + `/codex/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn;
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects;
+ *   3. the hub's `/hub` family answers `?agent=codex` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
 export const name = 'agent-codex';
 /** Runtime key — also the mount label. */
 const KEY = 'codex';
@@ -39,21 +44,9 @@ export function apply(ctx) {
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
             appName: `superd-${KEY}`,
             profileName: 'web',
@@ -68,16 +61,8 @@ export function apply(ctx) {
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
         }, `agent-${KEY}: mount`);
         return ctxW;

package/agent-hermes/dist/world-plugin.js

@@ -2,22 +2,26 @@
  * agent-hermes — the Hermes adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-omp/world`
- * and `@pgmi-builds/agent-codex/world` so the hub sees every foreign
- * runtime through one shape: the world is spawned as a sibling ROOT context
- * with NO listener (`worldMountPatches`) and mounts itself under `/hermes`
- * through the hub —
+ * AW-B data-plane shape (DL1–DL5 → path-separation T-D), mirroring
+ * `@pgmi-builds/agent-omp/world` and `@pgmi-builds/agent-codex/world` so the
+ * hub sees every foreign runtime through one shape: the world is spawned as a
+ * sibling ROOT context with NO listener and NO webui composition
+ * (`worldMountPatches`) — a pure data plane behind the hub's `/hub` family —
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn;
- *   2. the world's entry row provides the virtual `webServer` in the world
- *      root, translating every route its plugins declare into `/hermes+path`;
- *   3. the hub's carrier answers `/hermes/api` + `/hermes/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn;
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects;
+ *   3. the hub's `/hub` family answers `?agent=hermes` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
 export const name = 'agent-hermes';
 /** Runtime key — also the mount label. */
 const KEY = 'hermes';
@@ -44,21 +48,9 @@ export function apply(ctx) {
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
             appName: `superd-${KEY}`,
             profileName: 'web',
@@ -73,16 +65,8 @@ export function apply(ctx) {
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
         }, `agent-${KEY}: mount`);
         return ctxW;

package/agent-omp/dist/world-plugin.js

@@ -2,20 +2,24 @@
  * agent-omp — the adapter's world plugin (spec S2): activation IS
  * roster membership.
  *
- * AW-B (DL1–DL5): the world is spawned as a sibling ROOT context with NO
- * listener (see `worldMountPatches`) and mounts itself under `/<label>` through
- * the hub:
+ * AW-B (DL1–DL5) → path-separation T-D: the world is spawned as a sibling
+ * ROOT context with NO listener and NO webui composition (see
+ * `worldMountPatches`) — a pure data plane behind the hub's `/hub` family:
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn.
- *   2. the world's entry row provides the virtual `webServer` in the world root,
- *      translating every route its plugins declare into `/<label>+path`.
- *   3. the hub's carrier answers `/<label>/api` + `/<label>/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn.
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects.
+ *   3. the hub's `/hub` family answers `?agent=omp` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
 export const name = 'agent-omp';
 /** Runtime key — also the mount label. */
 const KEY = 'omp';
@@ -39,21 +43,9 @@ export function apply(ctx) {
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
             appName: `superd-${KEY}`,
             profileName: 'web',
@@ -68,16 +60,8 @@ export function apply(ctx) {
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
         }, `agent-${KEY}: mount`);
         return ctxW;

package/agent-pi/dist/world-plugin.js

@@ -2,21 +2,26 @@
  * agent-pi — the Pi adapter's WORLD plugin (spec S2):
  * activation IS roster membership.
  *
- * AW-B URL scheme (DL1–DL5), mirroring `@pgmi-builds/agent-omp/world`
- * and `@pgmi-builds/agent-codex/world` so the hub sees every foreign
- * runtime through one shape: the world is spawned as a sibling ROOT context
- * with NO listener (`worldMountPatches`) and mounts itself under `/pi`.
+ * AW-B data-plane shape (DL1–DL5 → path-separation T-D), mirroring
+ * `@pgmi-builds/agent-omp/world` and `@pgmi-builds/agent-codex/world` so the
+ * hub sees every foreign runtime through one shape: the world is spawned as a
+ * sibling ROOT context with NO listener and NO webui composition
+ * (`worldMountPatches`) — a pure data plane behind the hub's `/hub` family.
  *
- *   1. ctx0 publishes the host mount (real webServer instance) before spawn;
- *   2. the world's entry row provides the virtual `webServer` in the world
- *      root, translating every route its plugins declare into `/pi+path`;
- *   3. the hub's carrier answers `/pi/api` + `/pi/api/remote.mux` in
- *      ctx0's auth domain and dispatches into this world's gateway instance.
+ *   1. ctx0 publishes the host mount record (the world's addressability
+ *      entry — no webServer, no fence: those legs retired with the world
+ *      pages) before spawn;
+ *   2. the world's entry row provides the virtual `webServer` (a silent
+ *      sink) plus the neutral `webRuntime` facts its connection row injects;
+ *   3. the hub's `/hub` family answers `?agent=pi` traffic in ctx0's auth
+ *      domain and dispatches into this world's gateway instance (the
+ *      per-label `/<label>/api` + `/<label>/api/remote.mux` mounts retired
+ *      in T-C, `mountWorld` deleted in T-D).
  */
 import { mkdirSync } from 'node:fs';
 import { resolveDshHome } from '@deepseek-ai/dsh-home-paths';
 import { join } from 'node:path';
-import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, mountWorld, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
+import { spawnWorld, registerAgent, setReady, registerForeignTarget, registerHostMount, worldMountPatches, provisionWorldProfile, resolveInstallAnchor, } from '../../superd-hub/dist/index.js';
 export const name = 'agent-pi';
 /** Runtime key — also the mount label. */
 const KEY = 'pi';
@@ -40,21 +45,9 @@ export function apply(ctx) {
         worldHome,
     });
     const world = (async () => {
-        // Wait for ctx0's listening stack: the mount needs the real webServer and
-        // the browser-trust fence from the live connection service.
-        const host = await new Promise((resolve) => {
-            ctx.inject(['webServer', 'connection'], (hostCtx) => { resolve(hostCtx); });
-        });
-        const real = host['webServer'];
-        const connection = host['connection'];
-        const dropHostMount = registerHostMount({
-            key: KEY,
-            labelPath: `/${KEY}`,
-            real,
-            // ctx0's index gate, applied by the mount to this world's pages and assets:
-            // the world is reached in-ctx and owns no listener, so ctx0 decides auth.
-            authorize: (req, res) => connection.authorizeIndex(req, res),
-        });
+        // T-D: no ctx0 listening-stack wait — the mount record is addressability
+        // only and the /hub family wires its own gate in ctx0 (gateway.ts).
+        const dropHostMount = registerHostMount({ key: KEY, labelPath: `/${KEY}` });
         const ctxW = await spawnWorld({
             appName: `superd-${KEY}`,
             profileName: 'web',
@@ -69,16 +62,8 @@ export function apply(ctx) {
         });
         const gateway = ctxW.get('typertGateway');
         registerForeignTarget({ key: KEY, gateway });
-        const mounted = mountWorld({
-            real,
-            label: KEY,
-            gateway,
-            requestRejection: (request) => connection
-                .requestRejection(request),
-        });
         setReady(KEY, true);
         ctx.effect?.(() => () => {
-            mounted.dispose();
             dropHostMount();
         }, `agent-${KEY}: mount`);
         return ctxW;