super-dsh 0.1.6 → 0.1.10-e

package/agent-omp/dist/sidecar-client.js

@@ -1,195 +0,0 @@
-/**
- * Node-side client for the agent-omp bun sidecar.
- * Spawns `bun run sidecar/main.ts`, speaks the v0 JSON-lines protocol,
- * correlates requests by id and dispatches pushed event frames.
- */
-import { spawn } from "node:child_process";
-import { existsSync } from "node:fs";
-import { createRequire } from "node:module";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { PROTOCOL_VERSION, } from "./protocol.js";
-const require = createRequire(import.meta.url);
-const pkgDir = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
-/**
- * Locate the bun binary for the sidecar spawn.
- *
- * Layout-dependent: a checkout has it at `<pkg>/node_modules/.bin/bun`, but a
- * pnpm-hoisted profile install (prod) puts binaries in the profile root's
- * `node_modules/.bin` with the package itself symlinked under
- * `node_modules/<name>` — so walk the ancestors' .bin directories, and fall
- * back to a plain `bun` on PATH.
- */
-function resolveBunBinary(fromDir) {
-    const local = path.join(fromDir, "node_modules", ".bin", "bun");
-    if (existsSync(local))
-        return local;
-    let dir = fromDir;
-    for (let i = 0; i < 8; i++) {
-        const parent = path.dirname(dir);
-        if (parent === dir)
-            break;
-        dir = parent;
-        const candidate = path.join(dir, "node_modules", ".bin", "bun");
-        if (existsSync(candidate))
-            return candidate;
-    }
-    return "bun";
-}
-export class OmpSdkSidecar {
-    options;
-    proc = null;
-    nextId = 1;
-    pending = new Map();
-    eventHandlers = new Set();
-    readyPromise = null;
-    buffer = "";
-    startError = null;
-    constructor(options = {}) {
-        this.options = options;
-    }
-    get started() {
-        return this.proc !== null;
-    }
-    onEvent(handler) {
-        this.eventHandlers.add(handler);
-        return () => this.eventHandlers.delete(handler);
-    }
-    async start() {
-        if (this.readyPromise)
-            return this.readyPromise;
-        this.readyPromise = new Promise((resolve, reject) => {
-            const bunBin = resolveBunBinary(pkgDir);
-            const sidecarEntry = path.join(pkgDir, "sidecar", "main.ts");
-            const env = {
-                ...process.env,
-                ...this.options.env,
-            };
-            let proc;
-            try {
-                proc = spawn(bunBin, ["run", sidecarEntry], {
-                    cwd: this.options.cwd ?? pkgDir,
-                    env,
-                    stdio: ["pipe", "pipe", "pipe"],
-                });
-            }
-            catch (err) {
-                reject(new Error(`failed to spawn bun sidecar: ${err.message}`));
-                return;
-            }
-            this.proc = proc;
-            const timeout = setTimeout(() => reject(new Error(`sidecar ready timeout (60s): ${this.startError ?? "no output"}`)), 60_000);
-            const settle = (fn) => { clearTimeout(timeout); fn(); };
-            // A dead sidecar surfaces as EPIPE on stdin writes; keep a permanent
-            // no-op error sink so no window exists where the stream throws out of the
-            // event loop (per-call degradation is handled by #writeSafe).
-            proc.stdin.on("error", () => { });
-            proc.stdout.setEncoding("utf8");
-            proc.stdout.on("data", (chunk) => this.consume(chunk, (r) => settle(() => resolve(r))));
-            proc.stderr.setEncoding("utf8");
-            proc.stderr.on("data", (chunk) => {
-                this.startError = (this.startError ?? "") + chunk;
-                process.stderr.write(`[omp-sdk-sidecar] ${chunk}`);
-            });
-            proc.on("exit", (code, signal) => {
-                settle(() => reject(new Error(`sidecar exited before ready (${code ?? signal}): ${this.startError ?? ""}`)));
-                for (const [, p] of this.pending)
-                    p.reject(new Error(`sidecar exited (${code ?? signal})`));
-                this.pending.clear();
-                this.proc = null;
-            });
-        });
-        return this.readyPromise;
-    }
-    consume(chunk, onReady) {
-        this.buffer += chunk;
-        let nl;
-        while ((nl = this.buffer.indexOf("\n")) >= 0) {
-            const raw = this.buffer.slice(0, nl).trim();
-            this.buffer = this.buffer.slice(nl + 1);
-            if (!raw)
-                continue;
-            let frame;
-            try {
-                frame = JSON.parse(raw);
-            }
-            catch {
-                continue;
-            }
-            if (frame.event === "ready") {
-                onReady?.({ protocol: frame.payload?.protocol ?? PROTOCOL_VERSION });
-                continue;
-            }
-            if (typeof frame.id === "number" && ("ok" in frame)) {
-                const p = this.pending.get(frame.id);
-                if (p) {
-                    this.pending.delete(frame.id);
-                    if (frame.ok)
-                        p.resolve(frame.result);
-                    else
-                        p.reject(new Error(frame.error));
-                }
-                continue;
-            }
-            if (frame.event) {
-                for (const h of this.eventHandlers)
-                    h(frame);
-            }
-        }
-    }
-    call(method, params) {
-        if (!this.proc?.stdin)
-            return Promise.reject(new Error("sidecar not started"));
-        const id = this.nextId++;
-        const frame = { id, method, params };
-        return new Promise((resolve, reject) => {
-            this.pending.set(id, { resolve, reject });
-            this.#writeSafe(JSON.stringify(frame) + "\n", () => {
-                this.pending.delete(id);
-                reject(new Error(`sidecar write failed: ${method}`));
-            });
-        });
-    }
-    /** Write to the sidecar's stdin without ever throwing EPIPE out of the loop. */
-    #writeSafe(chunk, onLost) {
-        const stdin = this.proc?.stdin;
-        if (!stdin)
-            return onLost();
-        const fail = (err) => {
-            // EPIPE/ECONNRESET when the sidecar died between checks — a lost frame
-            // must degrade the caller, never crash the host process.
-            stdin.removeListener("error", fail);
-            try {
-                stdin.destroy();
-            }
-            catch { /* already gone */ }
-            onLost();
-        };
-        stdin.once("error", fail);
-        try {
-            stdin.write(chunk, () => stdin.removeListener("error", fail));
-        }
-        catch {
-            fail(new Error("write threw"));
-        }
-    }
-    notify(method, params) {
-        if (!this.proc?.stdin)
-            return;
-        this.#writeSafe(JSON.stringify({ method, params }) + "\n", () => { });
-    }
-    async stop() {
-        const proc = this.proc;
-        if (!proc)
-            return;
-        this.proc = null;
-        await new Promise((resolve) => {
-            proc.once("exit", () => resolve());
-            proc.stdin.end();
-            setTimeout(() => {
-                proc.kill("SIGTERM");
-                setTimeout(() => proc.kill("SIGKILL"), 3000);
-            }, 3000).unref?.();
-        });
-    }
-}

package/agent-pi/dist/agent-preset-projection.js

@@ -1,29 +0,0 @@
-/**
- * The `agentPreset` session projection, owned by the adapter.
- *
- * Upstream registers this fold from the `dsh-agent-presets` package, which our
- * patch disables (the pi provider replaces preset composition wholesale).
- * But the Web UI depends on the projection regardless: the preset hero chip
- * renders only when `session.projectionValues.agentPreset` resolves, and the
- * session-header label reads it too. Without a registrant the projection is
- * absent for every adapter session and both surfaces stay blank (the omp
- * line's "no mode" bug).
- *
- * Same fold as upstream; adapter-pi is single-preset: default every session
- * to "pi" so the header chip resolves for scan-native (never-resumed)
- * sessions too. Registered under the provider's own fiber via
- * `ctx.inject(['sessionProjections'])`.
- */
-import { z } from "zod";
-const agentPresetSchema = z.union([z.string(), z.null()]);
-/** Current Session preset, initialized from its header and advanced by selection events. */
-export const piAgentPresetProjection = {
-    key: "agentPreset",
-    stateSchema: agentPresetSchema,
-    init: (header) => header.agentPreset ?? "pi",
-    apply: (state, event) => event.type === "agent-preset/selected"
-        ? event.data.agentPreset
-        : state,
-    wire: { viewSchema: agentPresetSchema, view: (state) => state },
-    stateVersion: 1,
-};

package/superd-hub/dist/client-shim.d.ts

@@ -1,28 +0,0 @@
-/**
- * Client mount shim (AW-B DL8).
- *
- * ONE head script installs every client-side break point:
- *   - `__DSH_TRANSPORT__.fetch`  → the Connection RPC fetch (URL object input)
- *   - `WebSocket` / `EventSource` / `XMLHttpRequest` constructors → path rewrite
- *   - `__DSH_FILE_UPLOAD__`      → uploads bypass the blob worker + its XHR
- *   - Storage.prototype get/set/remove → per-world key namespace
- *   - `globalThis.fetch`         → global-fetch calls asking for ctx0-root `/api`
- *     URLs (2026-09-17 H1: upstream session-log-export resolves the GLOBAL
- *     fetch at call time; narrow `/api`-only rule, query + hash preserved)
- *   - `HTMLAnchorElement.prototype.click` → download-anchor clicks re-rooted
- *     (2026-09-18 H1 r2: upstream hands the UNREWRITTEN absolute URL to a
- *     DETACHED `<a download>` and clicks it — detached clicks never reach
- *     document, so a document-level listener cannot see them, and a blanket
- *     rewrite breaks the runtime selector's root-absolute anchors
- *     (live-found 2026-09-18). Narrow rule: ONLY anchors carrying a
- *     `download` attribute AND a same-authority root-absolute `/api` href.)
- * The rule is namespace-agnostic: a same-origin root-absolute URL is re-rooted
- * under the mount (`/omp`), nothing else is touched. That covers every prefix
- * a plugin may declare later — no list to keep in sync.
- */
-/**
- * Render the shim as a classic script (parser-blocking head injection).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns JavaScript source.
- */
-export declare function renderClientShim(labelPath: string): string;

package/superd-hub/dist/client-shim.js

@@ -1,251 +0,0 @@
-/**
- * Client mount shim (AW-B DL8).
- *
- * ONE head script installs every client-side break point:
- *   - `__DSH_TRANSPORT__.fetch`  → the Connection RPC fetch (URL object input)
- *   - `WebSocket` / `EventSource` / `XMLHttpRequest` constructors → path rewrite
- *   - `__DSH_FILE_UPLOAD__`      → uploads bypass the blob worker + its XHR
- *   - Storage.prototype get/set/remove → per-world key namespace
- *   - `globalThis.fetch`         → global-fetch calls asking for ctx0-root `/api`
- *     URLs (2026-09-17 H1: upstream session-log-export resolves the GLOBAL
- *     fetch at call time; narrow `/api`-only rule, query + hash preserved)
- *   - `HTMLAnchorElement.prototype.click` → download-anchor clicks re-rooted
- *     (2026-09-18 H1 r2: upstream hands the UNREWRITTEN absolute URL to a
- *     DETACHED `<a download>` and clicks it — detached clicks never reach
- *     document, so a document-level listener cannot see them, and a blanket
- *     rewrite breaks the runtime selector's root-absolute anchors
- *     (live-found 2026-09-18). Narrow rule: ONLY anchors carrying a
- *     `download` attribute AND a same-authority root-absolute `/api` href.)
- * The rule is namespace-agnostic: a same-origin root-absolute URL is re-rooted
- * under the mount (`/omp`), nothing else is touched. That covers every prefix
- * a plugin may declare later — no list to keep in sync.
- */
-/** Escape a label for embedding in generated JavaScript. */
-function js(value) {
-    return JSON.stringify(value);
-}
-/**
- * Render the shim as a classic script (parser-blocking head injection).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns JavaScript source.
- */
-export function renderClientShim(labelPath) {
-    if (typeof labelPath !== 'string' || !labelPath.startsWith('/') || labelPath === '/' || labelPath.endsWith('/')) {
-        throw new Error(`client-shim: labelPath must start with "/" and carry no trailing slash, got ${JSON.stringify(labelPath)}`);
-    }
-    const prefix = `${labelPath}/`;
-    return `(() => {
-  const LABEL = ${js(labelPath)}
-  const PREFIX = ${js(prefix)}
-
-  /** Re-root one pathname when it is same-origin root-absolute and not mounted yet. */
-  const rewritePath = (path) => {
-    if (typeof path !== 'string' || !path.startsWith('/') || path.startsWith('//')) return path
-    if (path === LABEL || path.startsWith(PREFIX)) return path
-    return PREFIX + path.slice(1)
-  }
-
-  const origin = () => {
-    const loc = globalThis.location
-    if (loc !== undefined && typeof loc.origin === 'string' && loc.origin !== 'null') return loc.origin
-    return 'http://dsh.internal'
-  }
-
-  /** Same authority as the page (scheme-agnostic: ws/wss/http/https share host). */
-  const sameAuthority = (url) => {
-    try {
-      return url.host === new URL(origin()).host
-    } catch {
-      return false
-    }
-  }
-
-  /** Rewrite a full URL (absolute or relative); other authorities are untouched. */
-  const rewriteUrl = (input) => {
-    if (typeof input === 'string') {
-      if (input.startsWith('/')) return rewritePath(input)
-      try {
-        const url = new URL(input, origin())
-        if (!sameAuthority(url)) return input
-        const next = rewritePath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url.href
-      } catch {
-        return input
-      }
-    }
-    if (input !== null && typeof input === 'object' && typeof input.href === 'string') {
-      try {
-        const url = new URL(input.href)
-        if (!sameAuthority(url)) return input
-        const next = rewritePath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url
-      } catch {
-        return input
-      }
-    }
-    return input
-  }
-
-  const nativeFetch = globalThis.fetch
-  const shimFetch = (input, init) => {
-    if (typeof nativeFetch !== 'function') throw new Error('client-shim: fetch is unavailable')
-    if (typeof Request === 'function' && input instanceof Request) {
-      const url = rewriteUrl(input.url)
-      return nativeFetch(url === input.url ? input : new Request(url, input), init)
-    }
-    return nativeFetch(rewriteUrl(input), init)
-  }
-
-  const transport = (globalThis.__DSH_TRANSPORT__ = globalThis.__DSH_TRANSPORT__ || {})
-  transport.rewrite = rewritePath
-  transport.fetch = shimFetch
-
-  // Construct through a Proxy, never a hand-rolled wrapper function: the
-  // upstream client compares socket.readyState against WebSocket.OPEN, so the
-  // native statics (CONNECTING/OPEN/CLOSING/CLOSED), prototype and instanceof
-  // must survive the interception.
-  const NativeWebSocket = globalThis.WebSocket
-  if (typeof NativeWebSocket === 'function') {
-    globalThis.WebSocket = new Proxy(NativeWebSocket, {
-      construct: (Target, args) => new Target(rewriteUrl(args[0]), ...args.slice(1)),
-    })
-  }
-
-  const NativeEventSource = globalThis.EventSource
-
-  if (typeof NativeEventSource === 'function') {
-    globalThis.EventSource = new Proxy(NativeEventSource, {
-      construct: (Target, args) => new Target(rewriteUrl(args[0]), ...args.slice(1)),
-    })
-  }
-
-  const NativeXhr = globalThis.XMLHttpRequest
-  if (typeof NativeXhr === 'function' && NativeXhr.prototype !== undefined && typeof NativeXhr.prototype.open === 'function') {
-    const nativeOpen = NativeXhr.prototype.open
-    NativeXhr.prototype.open = function (method, url, ...rest) {
-      return nativeOpen.call(this, method, rewriteUrl(url), ...rest)
-    }
-  }
-
-  // Read by the file-upload service at construction time: present ⇒ the page
-  // fetch carries uploads (no blob worker, and therefore no worker-scope XHR).
-  globalThis.__DSH_FILE_UPLOAD__ = { fetch: shimFetch }
-
-  // Narrow '/api' re-root helpers (2026-09-17 session-log 404, H1): upstream
-  // client code (session-log-export) resolves the GLOBAL fetch at call time
-  // and hands absolute ctx0-root URLs both to fetch and to a DETACHED
-  // download anchor — neither is visible to the transport faces above.
-  // Narrow rule: only root-absolute '/api' paths move under the mount;
-  // relative, same-mount, and foreign URLs pass through untouched. Query and
-  // hash survive because only the pathname is rewritten. The mount root comes
-  // from this shim's argument, never from location.pathname. NOTE: the '/api'
-  // literals below stay SINGLE-quoted on purpose — index-pass.ts rewrites
-  // every DOUBLE-quoted root-absolute string in the served HTML, and a
-  // doubled literal would silently disable these rewrites (regression tests
-  // survive the mount HTML pass).
-  const rewriteApiPath = (path) => {
-    if (path === '/api' || path.startsWith('/api/')) return PREFIX + path.slice(1)
-    return path
-  }
-  const rewriteApiUrl = (input) => {
-    if (typeof input === 'string') {
-      if (input.startsWith('/') && !input.startsWith('//')) return rewriteApiPath(input)
-      try {
-        const url = new URL(input, origin())
-        if (!sameAuthority(url)) return input
-        const next = rewriteApiPath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url.href
-      } catch {
-        return input
-      }
-    }
-    if (input !== null && typeof input === 'object' && typeof input.href === 'string') {
-      try {
-        const url = new URL(input.href)
-        if (!sameAuthority(url)) return input
-        const next = rewriteApiPath(url.pathname)
-        if (next === url.pathname) return input
-        url.pathname = next
-        return url
-      } catch {
-        return input
-      }
-    }
-    return input
-  }
-  if (typeof nativeFetch === 'function' && globalThis.__DSH_FETCH_REWRITE__ !== true) {
-    globalThis.__DSH_FETCH_REWRITE__ = true
-    globalThis.fetch = (input, init) => nativeFetch(rewriteApiUrl(input), init)
-  }
-
-  // Download anchors (2026-09-18 H1 r2): upstream session-log-export hands
-  // the UNREWRITTEN absolute URL to a DETACHED '<a download>' element and
-  // calls .click() — detached clicks never propagate to document, so the r1
-  // document-level capture listener could not see them, while its BLANKET
-  // rewrite re-rooted the runtime selector's root-absolute anchors and broke
-  // cross-world navigation (live-found 2026-09-18). Narrow seam: wrap
-  // HTMLAnchorElement.prototype.click itself and rewrite ONLY anchors that
-  // carry a 'download' attribute AND a same-authority root-absolute '/api'
-  // href. Everything else — the runtime selector's links included — passes
-  // through untouched.
-  if (globalThis.HTMLAnchorElement !== undefined
-    && globalThis.HTMLAnchorElement.prototype !== undefined
-    && typeof globalThis.HTMLAnchorElement.prototype.click === 'function'
-    && globalThis.__DSH_ANCHOR_CLICK_REWRITE__ !== true) {
-    globalThis.__DSH_ANCHOR_CLICK_REWRITE__ = true
-    const nativeAnchorClick = globalThis.HTMLAnchorElement.prototype.click
-    globalThis.HTMLAnchorElement.prototype.click = function (...args) {
-      try {
-        if (this.hasAttribute('download')) {
-          const current = this.getAttribute('href')
-          if (typeof current === 'string' && current !== '') {
-            const next = rewriteApiUrl(current)
-            if (typeof next === 'string' && next !== current) this.setAttribute('href', next)
-          }
-        }
-      } catch {
-        /* best-effort: never break the click itself */
-      }
-      return nativeAnchorClick.apply(this, args)
-    }
-  }
-
-  // Storage namespace (2026-09-16 storage findings P1): all worlds share one
-
-  // origin, so bare localStorage keys would overwrite each other across
-  // mounts. Prefix every key with the label; root '/' never injects this
-  // shim and keeps bare keys. Never throws: attachPersistence only
-  // console-errors on failure, so a throwing shim would silently disable
-  // persistence.
-  try {
-  const StorageProto = globalThis.Storage && globalThis.Storage.prototype
-  if (globalThis.localStorage !== undefined && StorageProto !== undefined
-    && !globalThis.__DSH_STORAGE_NS__
-    && typeof StorageProto.getItem === 'function'
-    && typeof StorageProto.setItem === 'function'
-    && typeof StorageProto.removeItem === 'function') {
-    // NS derives from PREFIX, never LABEL: the mount HTML pass (index-pass)
-    // rewrites every quoted root-absolute string EXCEPT "<label>/"-prefixed
-    // ones, so the shim's LABEL="/omp" literal doubles to "/omp/omp" while
-    // PREFIX="/omp/" is immune (live-found 2026-09-17, acceptance A2/A5).
-    // The NS-from-PREFIX coupling is DELIBERATE: index-pass.ts rewrites double-quoted root-absolute strings except "<label>/"-prefixed ones, so LABEL="/omp" doubles while PREFIX="/omp/" survives; do NOT derive NS from LABEL.
-    const NS = PREFIX.slice(1, -1) + ':'
-    globalThis.__DSH_STORAGE_NS__ = NS
-    const nativeGetItem = StorageProto.getItem
-    const nativeSetItem = StorageProto.setItem
-    const nativeRemoveItem = StorageProto.removeItem
-    StorageProto.getItem = function (name) { return nativeGetItem.call(this, NS + name) }
-    StorageProto.setItem = function (name, value) { return nativeSetItem.call(this, NS + name, value) }
-    StorageProto.removeItem = function (name) { return nativeRemoveItem.call(this, NS + name) }
-  }
-  } catch {
-    /* storage namespace is best-effort: never break the shim */
-  }
-})()`;
-}

package/superd-hub/dist/index-pass.d.ts

@@ -1,22 +0,0 @@
-/**
- * Mount HTML pass (AW-B DL1/DL8 server half).
- *
- * The world dist is built with RELATIVE asset URLs (`./assets/...`), so a
- * `<base>` pointing at the mount makes every relative reference resolve under
- * `/<label>/`. Root-absolute strings (the boot graph's `/plugins/...` URLs,
- * injected script sources, `href="/"`-style anchors) do NOT follow `<base>`,
- * so they are re-rooted explicitly — one generic rule, no namespace list.
- */
-/**
- * Rewrite a world index for serving under `<labelPath>/`.
- *
- * - pins `<base>` at the mount (inserting one after `<head>` when absent);
- * - prefixes every double-quoted root-absolute string that is not already
- *   mounted and not protocol-relative (`//host/...`);
- * - idempotent (a second pass changes nothing).
- *
- * @param html - the world's index.html (already rendered with its own rows).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns the mount-ready HTML.
- */
-export declare function rewriteIndexHtml(html: string, labelPath: string): string;

package/superd-hub/dist/index-pass.js

@@ -1,47 +0,0 @@
-/**
- * Mount HTML pass (AW-B DL1/DL8 server half).
- *
- * The world dist is built with RELATIVE asset URLs (`./assets/...`), so a
- * `<base>` pointing at the mount makes every relative reference resolve under
- * `/<label>/`. Root-absolute strings (the boot graph's `/plugins/...` URLs,
- * injected script sources, `href="/"`-style anchors) do NOT follow `<base>`,
- * so they are re-rooted explicitly — one generic rule, no namespace list.
- */
-/** Root of the mount including the trailing slash (`/omp` → `/omp/`). */
-function mountPrefix(labelPath) {
-    return labelPath.endsWith('/') ? labelPath : `${labelPath}/`;
-}
-/**
- * Rewrite a world index for serving under `<labelPath>/`.
- *
- * - pins `<base>` at the mount (inserting one after `<head>` when absent);
- * - prefixes every double-quoted root-absolute string that is not already
- *   mounted and not protocol-relative (`//host/...`);
- * - idempotent (a second pass changes nothing).
- *
- * @param html - the world's index.html (already rendered with its own rows).
- * @param labelPath - mount root, e.g. `/omp`.
- * @returns the mount-ready HTML.
- */
-export function rewriteIndexHtml(html, labelPath) {
-    if (typeof labelPath !== 'string' || !labelPath.startsWith('/') || labelPath === '/' || labelPath.endsWith('/')) {
-        throw new Error(`index-pass: labelPath must start with "/" and carry no trailing slash, got ${JSON.stringify(labelPath)}`);
-    }
-    const prefix = mountPrefix(labelPath);
-    let out = html;
-    if (/<base\b[^>]*>/i.test(out)) {
-        out = out.replace(/<base\b[^>]*>/i, `<base href="${prefix}">`);
-    }
-    else if (/<head(?:\s[^>]*)?>/i.test(out)) {
-        out = out.replace(/<head(?:\s[^>]*)?>/i, open => `${open}<base href="${prefix}">`);
-    }
-    out = out.replace(/"(\/[^"]*)"/g, (whole, path) => {
-        if (path.startsWith('//'))
-            return whole;
-        // Load-bearing contract: client-shim.ts derives its storage NS from the surviving "<label>/" literal (regression test: the storage NS survives the mount HTML pass). Changing this exclusion breaks that coupling.
-        if (path.startsWith(prefix))
-            return whole;
-        return `"${prefix}${path.slice(1)}"`;
-    });
-    return out;
-}

package/superd-hub/dist/labels.d.ts

@@ -1,45 +0,0 @@
-/**
- * Label table (AW-B DL2/DL4): one world ↔ one mount path under the ctx0 origin.
- *
- * The addressed world is the request's path (`/<label>/...`), so the label is
- * the ONLY routing key. Reserving it must be atomic against the real
- * webServer's duplicate-registration throw — that throw is the only collision
- * signal the framework offers (the route tables are private and there is no
- * query API), so it is used here as the probe.
- *
- * A collision is a composition-level conflict and must be loud; an optional
- * alternate root lets a deployment re-home instead of failing to boot.
- */
-/** One reserved mount path. */
-export interface LabelClaim {
-    /** Runtime key (`omp`, `codex`, …). */
-    readonly key: string;
-    /** Reserved mount root, e.g. `/omp` or `/_agents/omp` (no trailing slash). */
-    readonly path: string;
-    /** Release the claim (idempotent). */
-    release(): void;
-}
-/** How to reserve a path: the injected real-webServer registration. */
-export interface ClaimOptions {
-    /** Attempt a prefix registration; throws when `(kind, path)` is already taken. */
-    register(path: string): () => void;
-    /** Optional root prefix (default: the origin root). */
-    root?: string;
-    /** Candidate roots to try, in order, when the clean path is taken. */
-    alternateRoots?: readonly string[];
-}
-/**
- * Reserve the mount path for `key`.
- * @param key - runtime key (one path segment).
- * @param opts - registration probe plus optional roots.
- * @returns the live claim.
- */
-export declare function claimLabel(key: string, opts: ClaimOptions): LabelClaim;
-/** The reserved mount root for a key, or undefined when unclaimed. */
-export declare function labelOf(key: string): string | undefined;
-/** Release a key's claim; unknown keys are a no-op. */
-export declare function releaseLabel(key: string): void;
-/** Claimed keys, registration order. */
-export declare function listLabels(): string[];
-/** Test/introspection helper: is this object a claim? */
-export declare function isLabelClaim(value: unknown): value is LabelClaim;