super-dsh 0.3.1-b → 0.3.1-e

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "super-dsh",
-  "version": "0.3.1-b",
+  "version": "0.3.1-e",
   "description": "Super D for the DeepSeek Harness (DSH) — one dsh plugin that mounts the superd hub (runtime selector, roster, per-runtime agents) and joins local foreign-agent runtimes (OMP, Codex, Claude, Pi, Hermes, Antigravity) into the DSH Web UI. Each runtime keeps its native home and session store; the hub only bridges.",
   "type": "module",
   "license": "MIT",

package/remote/helper-bin/MANIFEST.json

@@ -1,28 +1,28 @@
 {
   "format": 1,
   "name": "superd-run",
-  "ver": "0.3.1-b",
+  "ver": "0.3.1-d.b596",
   "protocol": 1,
   "targets": {
     "aarch64-apple-darwin": {
       "file": "superd-run",
       "bytes": 337808,
-      "sha256": "715c2d7bd935f3b4cc4ae0ffb10d3fab946bb62d93f592ccfe2a7446669ff76b"
+      "sha256": "a8fd11a5e6a2cb146deb599414434a299ebf78c53cfc1d3e5f42617ee11c1706"
     },
     "aarch64-unknown-linux-musl": {
       "file": "superd-run",
-      "bytes": 397416,
-      "sha256": "22ac1c7f913092d8ca8d312b93528dd2263200f9670dc183fd215bc89d2bac68"
+      "bytes": 397592,
+      "sha256": "3a8660fa099f1e71de6e08313ee2aaace00503f74365475ee46e2d2a89228397"
     },
     "x86_64-pc-windows-gnu": {
       "file": "superd-run.exe",
-      "bytes": 336896,
-      "sha256": "a638479e1ccb1c4e185085100450962e39164158a76097b5087d2a3bb8880ac0"
+      "bytes": 337408,
+      "sha256": "1372450238c5bda702b4529f4148aa79e80a255c3c125d1a6229afd4693e9d90"
     },
     "x86_64-unknown-linux-musl": {
       "file": "superd-run",
       "bytes": 447152,
-      "sha256": "79e42879509bb87d2fe9888d282151fd17113203d3172f59a16fcb5a180ba057"
+      "sha256": "05b428657942abf22a0ad609433d5cab6b6182fe389851345459a0274b5a6533"
     }
   },
   "sources": {

package/remote/helper-bin/aarch64-apple-darwin/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/remote/helper-bin/aarch64-unknown-linux-musl/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/remote/helper-bin/x86_64-pc-windows-gnu/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/remote/helper-bin/x86_64-unknown-linux-musl/BUILT-VER

@@ -1 +1 @@
-0.3.1-b
+0.3.1-d.b596

package/remote/plugin.d.ts

@@ -99,7 +99,9 @@ declare class SshTargets {
   clear(): void;
 }
 /** Shared by execution, probes and file/relay consumers. extraArgs is trusted
- * internal SSH argv (e.g. forwarding), never a model-provided shell string. */
+ * internal SSH argv (e.g. forwarding), never a model-provided shell string.
+ * Identity assembly lives in ssh-argv.ts (the ONE policy — 2026-10-17 ruling);
+ * this wrapper only picks the tty/batch dialect base. */
 declare function sshArgv(connection: SshConnection, options?: {
   tty?: boolean;
   extraArgs?: readonly string[];
@@ -117,7 +119,12 @@ interface TransferReceipt {
   action: 'copy';
   src: string;
   dst: string;
-  verified: boolean;
+  route: 'hub-staged';
+  /** S4: tier actually performed — sha256 digests ran and matched, or explicitly skipped. */
+  verification: 'sha256' | 'not-applicable';
+  /** S3 unified failure envelope. */
+  ok: boolean;
+  reason?: 'digest-mismatch' | 'staging-error' | 'aborted';
   sourceDigest?: string;
   destinationDigest?: string;
   bytes: number;
@@ -154,8 +161,16 @@ interface NativeCopyReceipt {
   stdout: string[];
   stderr: string[];
   outputTruncated: boolean;
-  /** Native CLI success only — no independent digest was computed for this path. */
-  verified: false;
+  /** S3/S4 (spec §3.3): verification names the tier actually performed — native routes are exit-code-only (D1=A). */
+  verification: 'native-exit-only';
+  /** S3 unified failure envelope: all native exits zero. */
+  ok: boolean;
+  /** Failure class when ok is false. */
+  reason?: 'non-zero-exit' | 'aborted';
+  /** Human context, e.g. two-segment 'push not started: pull failed' (prose moved out of route, S8). */
+  note?: string;
+  /** D3 mkdir pre-hop outcome: true = created this call, false = already existed, 'n-a' = skipped or unavailable (detail in note). */
+  created?: true | false | 'n-a';
   /** Tool-owned staging/config release: released on normal/observed exit, unknown when a channel was lost. */
   cleanup: 'released' | 'unknown' | 'none-required';
 }
@@ -203,6 +218,10 @@ interface RsyncReceipt extends RunResult {
   transferredBytes?: number;
   /** Two-SSH route actually used, when applicable. */
   route?: 'local-ssh' | 'ssh-ssh-forward' | 'ssh-ssh-stdio';
+  /** S3/S4: exit-code-only tier (D1=A) + unified failure envelope. */
+  verification: 'native-exit-only';
+  ok: boolean;
+  reason?: 'non-zero-exit' | 'aborted';
 }
 /**
  * Native rsync with ordered caller options. Local↔SSH runs rsync directly with

package/remote/plugin.js

@@ -1,6 +1,6 @@
 import { Context } from "@deepseek-ai/cordis";
 import { chmod, lstat, mkdir, mkdtemp, open, readFile, readdir, readlink, rename, rm, stat, symlink, writeFile } from "node:fs/promises";
-import { constants, createReadStream, createWriteStream, mkdirSync, readFileSync, statSync } from "node:fs";
+import { constants, createReadStream, createWriteStream, existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
 import { pipeline } from "node:stream/promises";
 import { dirname, isAbsolute, join, posix, resolve } from "node:path";
 import { Readable } from "node:stream";
@@ -1210,17 +1210,18 @@ async function copyTree(request, source, destination, signal, scratchRoot = join
 	signal.throwIfAborted();
 	if (request.argv !== void 0 || request.pullArgv !== void 0 || request.pushArgv !== void 0) throw new Error("copy: argv/pullArgv/pushArgv are native CLI options; the Hub/local staged lane does not accept CLI options");
 	await mkdir(scratchRoot, { recursive: true });
-	signal.throwIfAborted();
-	const scratch = await mkdtemp(join(scratchRoot, "remote-copy-")), payload = join(scratch, "payload.bin");
 	const receipt = {
 		action: "copy",
+		route: "hub-staged",
 		src: request.src,
 		dst: request.dst,
-		verified: false,
+		ok: false,
+		verification: "not-applicable",
 		bytes: 0,
 		entries: 0,
 		scope: "transferred entries"
 	};
+	const scratch = await mkdtemp(join(scratchRoot, "remote-copy-")), payload = join(scratch, "payload.bin");
 	try {
 		await pipeline(await source.endpoint.exportTree(source.path, signal), createWriteStream(payload, {
 			flags: "wx",
@@ -1244,24 +1245,79 @@ async function copyTree(request, source, destination, signal, scratchRoot = join
 			const dest = await destination.endpoint.digest(destination.path, signal, selection);
 			receipt.destinationDigest = dest.sha256;
 			if (dest.sha256 !== receipt.sourceDigest) throw new Error("destination digest mismatch");
-			receipt.verified = true;
+			receipt.verification = "sha256";
 		}
 		signal.throwIfAborted();
 		await rm(scratch, {
 			recursive: true,
 			force: true
 		});
+		receipt.ok = true;
 		return receipt;
 	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		const reason = signal.aborted ? "aborted" : /mismatch/i.test(message) ? "digest-mismatch" : "staging-error";
 		throw new CopyError({
 			...receipt,
-			verified: false,
+			ok: false,
+			reason,
 			scratch,
-			error: error instanceof Error ? error.message : String(error)
+			error: message
 		});
 	}
 }
 
+//#endregion
+//#region src/remote/ssh-argv.ts
+/**
+* ONE identity-assembly policy for every SSH-speaking lane (user close-out
+* ruling 2026-10-17: "four builders necessarily mean four identity
+* semantics" — the structural root of F1).
+*
+* Assembly: explicit connection fields (byossh registrations; caller options
+* may override later by the CLI's own last-option-wins) in ONE order —
+* user, port, key, proxyJump — spoken in the target CLI's dialect.
+*
+* Resolution: config-side identity (aliases, config-only IdentityFile paths)
+* is read from the ORIGIN's own ssh config natively by every lane. The single
+* exception is the scp -3 temp config (ssh -F sees no user config), where
+* tempSshConfig inlines the `ssh -G`-resolved fields — paths only, never key
+* material (F1, 2026-10-14). That policy lives beside this builder in
+* native-copy.ts and must stay the only such inline site.
+*
+* Former duplicate builders now reduced here: sshArgv (execution/probes),
+* identityArgv (scp routes), rsyncRsh (RSYNC_RSH wiring), relaySsh
+* (dual-SSH relay). Behavior is byte-identical to each former site.
+*/
+/** Identity options ONLY for one connection, in the target CLI's dialect:
+* user, port, key, proxyJump — conditional, one order, NO base flags (each
+* lane's dialect base — BatchMode, -T, hardening — stays at its call site).
+* scp carries the user inside its user@host operand, so the scp dialect
+* never emits -l; its port flag is -P. */
+function sshIdentityArgv(connection, dialect) {
+	const args = [];
+	if (dialect === "ssh" && connection.user !== void 0) args.push("-l", connection.user);
+	if (connection.port !== void 0) args.push(dialect === "scp" ? "-P" : "-p", String(connection.port));
+	if (connection.key !== void 0) args.push("-i", connection.key);
+	if (connection.proxyJump !== void 0) args.push("-J", connection.proxyJump);
+	return args;
+}
+/** Full ssh invocation around the shared identity core. base and extra are
+* trusted internal argv (dialect flags incl. BatchMode, forwarding options)
+* — never a model-provided shell string. */
+function sshCommandArgv(connection, base, extra, command) {
+	const args = [
+		"ssh",
+		...base,
+		...sshIdentityArgv(connection, "ssh"),
+		...extra,
+		"--",
+		connection.host
+	];
+	if (command !== void 0) args.push(command);
+	return args;
+}
+
 //#endregion
 //#region src/remote/output-ring.ts
 const continuation = (byte) => (byte & 192) === 128;
@@ -1567,15 +1623,17 @@ function scpSpec(connection, path) {
 	const host = connection.host.includes(":") ? `[${connection.host}]` : connection.host;
 	return `${connection.user !== void 0 ? `${connection.user}@${host}` : host}:${path}`;
 }
-/** Connection identity as scp options (port, key), placed BEFORE caller argv so
-* an explicit caller -F/-i/-P/-J overrides the registered identity by scp's own
-* precedence (last option wins). */
+/** Connection identity as scp options, placed BEFORE caller argv so an
+* explicit caller -F/-i/-P/-J overrides the registered identity by scp's own
+* precedence (last option wins). Assembly itself lives in ssh-argv.ts
+* (the ONE identity policy — 2026-10-17 ruling); only the scp dialect
+* placement rule is local. */
 function identityArgv(connection) {
-	const options = ["-o", "BatchMode=yes"];
-	if (connection.port !== void 0) options.push("-P", String(connection.port));
-	if (connection.key !== void 0) options.push("-i", connection.key);
-	if (connection.proxyJump !== void 0) options.push("-J", connection.proxyJump);
-	return options;
+	return [
+		"-o",
+		"BatchMode=yes",
+		...sshIdentityArgv(connection, "scp")
+	];
 }
 function sshEndpoint(plan) {
 	if (plan.kind !== "ssh") throw new Error("remote: native copy endpoint is not an SSH target");
@@ -1614,18 +1672,23 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 		stdout: [],
 		stderr: [],
 		outputTruncated: false,
-		verified: false,
+		verification: "native-exit-only",
+		ok: true,
 		cleanup: "none-required"
 	};
-	const finish = (route, argvs, results) => {
+	const finish = (route, argvs, results, internal = []) => {
 		receipt.route = route;
-		receipt.argv = argvs;
+		receipt.argv = argvs.map((argv) => argv.map((token) => internal.find(([secret]) => secret === token)?.[1] ?? token));
 		receipt.exits = results.map((result) => result.exit);
 		receipt.stdout = results.map((result) => result.stdout);
 		receipt.stderr = results.map((result) => result.stderr);
 		receipt.outputTruncated = results.some((result) => result.outputTruncated);
+		receipt.ok = !signal.aborted && receipt.exits.every((exit) => exit === 0);
+		if (!receipt.ok) receipt.reason = signal.aborted ? "aborted" : "non-zero-exit";
 		return receipt;
 	};
+	if (request.mkdir !== false) await ensureDestinationDir(endpoints.dst, signal, options.execArgvFor, wrap, receipt);
+	else receipt.created = "n-a";
 	if (s === "local" && t === "ssh") {
 		rejectRemoteToRemoteScp(oneShot);
 		const connection = sshEndpoint(endpoints.dst.plan).connection;
@@ -1678,7 +1741,7 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 				srcSpec,
 				dstSpec
 			];
-			return finish("scp -3 (data through origin)", [argv], [await runNative(wrap(argv), signal)]);
+			return finish("scp-3", [argv], [await runNative(wrap(argv), signal)], config !== void 0 ? [[config.path, "<temp-ssh-config>"]] : []);
 		} catch (error) {
 			if (signal.aborted) unknown = true;
 			throw error;
@@ -1699,7 +1762,7 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 		];
 		const result = await runNative(wrap(argv), signal);
 		withSymlinkHint(result);
-		return finish("docker cp", [argv], [result]);
+		return finish("docker-cp", [argv], [result]);
 	}
 	if (s === "docker" && t === "local") {
 		const argv = [
@@ -1711,7 +1774,7 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 		];
 		const result = await runNative(wrap(argv), signal);
 		withSymlinkHint(result);
-		return finish("docker cp", [argv], [result]);
+		return finish("docker-cp", [argv], [result]);
 	}
 	if (s === "local" && t === "incus") {
 		const argv = [
@@ -1723,7 +1786,7 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 			endpoints.src.path,
 			`${containerOf(endpoints.dst.plan)}${endpoints.dst.path}`
 		];
-		return finish("incus file push", [argv], [await runNative(wrap(argv), signal)]);
+		return finish("incus-file-push", [argv], [await runNative(wrap(argv), signal)]);
 	}
 	if (s === "incus" && t === "local") {
 		const argv = [
@@ -1734,7 +1797,7 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 			`${containerOf(endpoints.src.plan)}${endpoints.src.path}`,
 			endpoints.dst.path
 		];
-		return finish("incus file pull", [argv], [await runNative(wrap(argv), signal)]);
+		return finish("incus-file-pull", [argv], [await runNative(wrap(argv), signal)]);
 	}
 	if (s === "local" || t === "local") throw new Error("remote: this endpoint pair is a single native command route; pullArgv/pushArgv apply to cross-endpoint pairs only");
 	const pullOptions = request.pullArgv !== void 0 ? pull : oneShot;
@@ -1747,9 +1810,12 @@ async function nativeCopy(request, endpoints, signal, options = {}) {
 		const pullArgv = segmentArgv(endpoints.src.plan, endpoints.src.path, staged, pullOptions, "pull");
 		const pushArgv = segmentArgv(endpoints.dst.plan, endpoints.dst.path, staged, pushOptions, "push");
 		const first = await runNative(wrap(pullArgv), signal);
-		if (first.exit !== 0) return finish("two native commands with origin staging (push not started: pull failed)", [pullArgv], [first]);
+		if (first.exit !== 0) {
+			receipt.note = "push not started: pull failed";
+			return finish("staged-pull-push", [pullArgv], [first], [[staged, "<staging>"]]);
+		}
 		const second = await runNative(wrap(pushArgv), signal);
-		return finish("two native commands with origin staging", [pullArgv, pushArgv], [first, second]);
+		return finish("staged-pull-push", [pullArgv, pushArgv], [first, second], [[staged, "<staging>"]]);
 	} finally {
 		receipt.cleanup = await rm(scratch, {
 			recursive: true,
@@ -1810,6 +1876,58 @@ function segmentArgv(plan, remote, staged, opts, leg) {
 		spec
 	];
 }
+/** D3 mkdir pre-hop: ensure the destination's PARENT directory exists before
+* the transfer (never the operand itself — see parent-only note below).
+* transfer. Local dst is node-side; remote dst runs ONE exec `mkdir -p` probe
+* whose stdout discloses created-vs-existed. Best-effort by contract: any
+* failure records created:'n-a' + note and lets the copy proceed so the native
+* CLI surfaces the real error (and stopped-container docker cp keeps working). */
+async function ensureDestinationDir(dst, signal, execArgvFor, wrap, receipt) {
+	const dir = dirname(dst.path);
+	if (dir === "/" || dir === ".") {
+		receipt.created = false;
+		return;
+	}
+	if (dst.plan.kind === "local") {
+		try {
+			if (existsSync(dir)) {
+				receipt.created = false;
+				return;
+			}
+			mkdirSync(dir, { recursive: true });
+			receipt.created = true;
+		} catch (error) {
+			receipt.created = "n-a";
+			receipt.note = `mkdir pre-hop failed: ${error instanceof Error ? error.message : String(error)}`;
+		}
+		return;
+	}
+	if (execArgvFor === void 0) {
+		receipt.created = "n-a";
+		return;
+	}
+	if (/[\r\n]/.test(dir)) {
+		receipt.created = "n-a";
+		receipt.note = "mkdir pre-hop skipped: newline-bearing destination path";
+		return;
+	}
+	const quoted = `'${dir.replaceAll("'", "'\\\\''")}'`;
+	const script = `if [ -d ${quoted} ]; then echo existed; else mkdir -p ${quoted} && echo created; fi`;
+	try {
+		const result = await runNative(wrap(execArgvFor(dst.plan, script)), signal);
+		const word = result.stdout.trim().split("\n").pop();
+		if (result.exit === 0 && word === "created") receipt.created = true;
+		else if (result.exit === 0 && word === "existed") receipt.created = false;
+		else {
+			receipt.created = "n-a";
+			const tail = result.stderr.trim().split("\n").filter((line) => line.length > 0).pop();
+			receipt.note = `mkdir pre-hop unavailable (exit ${result.exit})${tail !== void 0 ? `: ${tail}` : ""}`;
+		}
+	} catch (error) {
+		receipt.created = "n-a";
+		receipt.note = `mkdir pre-hop failed: ${error instanceof Error ? error.message : String(error)}`;
+	}
+}
 /** Distinguishing identities for scp -3: an origin-only temp config maps two
 * synthetic aliases; keys are referenced in place, never copied to any remote. */
 /** D8 (2026-10-14 user adoption, third acceptance round): a LOCAL directory source gets
@@ -1910,10 +2028,10 @@ async function resolveThroughOriginConfig(c, runNative$1) {
 //#endregion
 //#region src/remote/ssh-rsync-native-relay.ts
 /** ssh argv for the relay: batch, no agent, no multiplexing. `command` is the
-* remote command; forwarding options go before `--`, the host after it. */
+* remote command; forwarding options go before `--`, the host after it.
+* Identity core comes from ssh-argv.ts (the ONE policy — 2026-10-17 ruling). */
 function relaySsh(connection, extra, command) {
-	const args = [
-		"ssh",
+	return sshCommandArgv(connection, [
 		"-o",
 		"BatchMode=yes",
 		"-T",
@@ -1930,14 +2048,7 @@ function relaySsh(connection, extra, command) {
 		"ServerAliveInterval=5",
 		"-o",
 		"ServerAliveCountMax=2"
-	];
-	if (connection.user !== void 0) args.push("-l", connection.user);
-	if (connection.port !== void 0) args.push("-p", String(connection.port));
-	if (connection.key !== void 0) args.push("-i", connection.key);
-	if (connection.proxyJump !== void 0) args.push("-J", connection.proxyJump);
-	args.push(...extra, "--", connection.host);
-	if (command !== void 0) args.push(command);
-	return args;
+	], extra, command);
 }
 async function freePorts(count) {
 	const servers = [];
@@ -2220,14 +2331,7 @@ async function runRsync(request, source, destination, signal, options = {}) {
 	checkAbsolute(destination.path);
 	const argv = checkArgv("argv", request.argv);
 	if ("pullArgv" in request || "pushArgv" in request) throw new Error("remote: rsync takes argv only; pullArgv/pushArgv are copy-only fields");
-	for (const legacy of [
-		"dryRun",
-		"delete",
-		"excludes",
-		"preserve",
-		"verify",
-		"mkdir"
-	]) if (legacy in request) throw new Error(`remote: rsync field "${legacy}" was removed — pass native options through argv instead (e.g. "--dry-run", "--delete", "--exclude=<pattern>", "-a"/"-r"; verify/mkdir belong to the copy Hub/local lane)`);
+	for (const key of Object.keys(request)) if (key !== "src" && key !== "dst" && key !== "argv") throw new Error(`remote: rsync rejects unknown field "${key}" — native options go through argv (verify is a copy Hub-lane option; mkdir is copy-only; for destination parents pass --mkpath yourself)`);
 	if (!source.connection && !destination.connection) throw new Error("rsync requires at least one SSH endpoint; local-only is unsupported");
 	let result;
 	let route;
@@ -2275,6 +2379,9 @@ async function runRsync(request, source, destination, signal, options = {}) {
 		dst: request.dst,
 		argv,
 		route,
+		verification: "native-exit-only",
+		ok: result.exit === 0,
+		...result.exit === 0 ? {} : { reason: signal.aborted ? "aborted" : "non-zero-exit" },
 		command: `rsync ${argv.join(" ")}`,
 		...itemized.length > 0 || argv.includes("--itemize-changes") || argv.includes("-i") ? { itemizedChanges: itemized } : {},
 		...literalBytes === void 0 ? {} : { literalBytes },
@@ -2289,21 +2396,14 @@ async function runRsync(request, source, destination, signal, options = {}) {
 * placeholder host rsync appends and execs the canonical SSH argv. All tokens
 * are tool-built argv (identity options/aliases), never model text. */
 function rsyncRsh(connection, wrap) {
-	const args = [
-		"ssh",
-		"-o",
-		"BatchMode=yes",
-		"-T"
-	];
-	if (connection.user !== void 0) args.push("-l", connection.user);
-	if (connection.port !== void 0) args.push("-p", String(connection.port));
-	if (connection.key !== void 0) args.push("-i", connection.key);
-	if (connection.proxyJump !== void 0) args.push("-J", connection.proxyJump);
-	args.push("--", connection.host);
 	return [
 		"bash",
 		"-c",
-		`shift; exec ${wrap(args).map(rshQuote).join(" ")} "$@"`,
+		`shift; exec ${wrap(sshCommandArgv(connection, [
+			"-o",
+			"BatchMode=yes",
+			"-T"
+		], [])).map(rshQuote).join(" ")} "$@"`,
 		"rsync-rsh"
 	].map(rshQuote).join(" ");
 }
@@ -2399,26 +2499,19 @@ var SshTargets = class {
 	}
 };
 /** Shared by execution, probes and file/relay consumers. extraArgs is trusted
-* internal SSH argv (e.g. forwarding), never a model-provided shell string. */
+* internal SSH argv (e.g. forwarding), never a model-provided shell string.
+* Identity assembly lives in ssh-argv.ts (the ONE policy — 2026-10-17 ruling);
+* this wrapper only picks the tty/batch dialect base. */
 function sshArgv(connection, options = {}) {
-	const args = options.tty ? [
-		"ssh",
+	return sshCommandArgv(connection, options.tty ? [
 		"-tt",
 		"-o",
 		"BatchMode=yes"
 	] : [
-		"ssh",
 		"-o",
 		"BatchMode=yes",
 		"-T"
-	];
-	if (connection.user !== void 0) args.push("-l", connection.user);
-	if (connection.port !== void 0) args.push("-p", String(connection.port));
-	if (connection.key !== void 0) args.push("-i", connection.key);
-	if (connection.proxyJump !== void 0) args.push("-J", connection.proxyJump);
-	args.push(...options.extraArgs ?? [], "--", connection.host);
-	if (options.command !== void 0) args.push(options.command);
-	return args;
+	], options.extraArgs ?? [], options.command);
 }
 
 //#endregion
@@ -3580,13 +3673,18 @@ var RemoteDriver = class {
 				path: dst.path,
 				endpoint: localFileEndpoint()
 			}, combined);
-			if (request.verify !== void 0 || request.mkdir !== void 0) throw new Error("copy: verify/mkdir apply to the Hub/local staged lane only; native CLI routes do not verify or create parents (mirror the CLI's own behavior with argv like -r)");
+			if (request.verify !== void 0) throw new Error("copy: verify is a Hub/local staged lane option (independent SHA-256); native routes report exit-code-only verification — self-verify via oneshot digest commands when needed");
 			const planOf = (end) => end.kind === "cli" ? end.plan : end.kind === "local" ? { kind: "local" } : void 0;
 			const srcPlan = planOf(src), dstPlan = planOf(dst);
 			if (srcPlan === void 0 || dstPlan === void 0) throw new Error("copy: unreachable route resolution");
+			const execArgvFor = (plan, script) => {
+				const argv = helperShellArgv(plan, script);
+				return this.opts.nativeArgvFor ? this.opts.nativeArgvFor(argv) : argv;
+			};
 			return nativeCopy({
 				src: request.src,
 				dst: request.dst,
+				...request.mkdir === void 0 ? {} : { mkdir: request.mkdir },
 				...request.argv === void 0 ? {} : { argv: request.argv },
 				...request.pullArgv === void 0 ? {} : { pullArgv: request.pullArgv },
 				...request.pushArgv === void 0 ? {} : { pushArgv: request.pushArgv }
@@ -3599,7 +3697,10 @@ var RemoteDriver = class {
 					plan: dstPlan,
 					path: dst.path
 				}
-			}, combined, { wrapArgv: this.opts.nativeArgvFor });
+			}, combined, {
+				wrapArgv: this.opts.nativeArgvFor,
+				execArgvFor
+			});
 		})();
 		this.starting.add(work);
 		work.then(() => this.starting.delete(work), () => this.starting.delete(work));
@@ -4178,7 +4279,7 @@ Bare names resolve ssh config → docker → incus → live pty; unmatched goes
 
 oneshot: stateless bash -lc, stdout/stderr separate, exit code verbatim. Supervision prefers a pinned superd-run helper cached on the endpoint (~/.cache/superd/run; first call uploads it over the same exec lane) and falls back to a POSIX wrapper everywhere else — the result field "runner" says which ran. Helper or wrapper, backgrounded children are reaped on completion and the whole group is killed on timeout/cancel; the endpoint needs bash only (no Python).
 
-Files — {action:"copy" | "rsync", src:"[target:]abs", dst:"[target:]abs", argv:["-a"]}: argv tokens pass verbatim before src/dst — no whitelist, no forced defaults (dry run = pass "--dry-run" yourself); the CLI's own exit code and stderr come back in the receipt. copy: local↔SSH scp; SSH↔SSH scp -3 through the origin (identities stay local); docker cp; incus file push/pull; any other pair = two commands with origin staging (per-half options via pullArgv/pushArgv, exclusive with argv); scp -R (uppercase — scp's remote-client mode) is refused; copy of a directory from a LOCAL source auto-appends the route's recursive flag (-r, shown in the receipt argv); from a REMOTE source pass -r yourself or use rsync; success is NOT independently verified; verify/mkdir only on the Hub↔local lane. rsync: local↔SSH, or SSH↔SSH with one protocol conversation between the peers (real delta; forwarding denied → honest error, never full copy). rsync src trailing slash copies contents, no slash the directory itself.
+Files — {action:"copy" | "rsync", src:"[target:]abs", dst:"[target:]abs", argv:["-a"]}: argv tokens pass verbatim before src/dst — no whitelist, no forced defaults (dry run = pass "--dry-run" yourself); the CLI's own exit code and stderr come back in the receipt. copy: local↔SSH scp; SSH↔SSH scp -3 through the origin (identities stay local); docker cp; incus file push/pull; any other pair = two commands with origin staging (per-half options via pullArgv/pushArgv, exclusive with argv); scp -R (uppercase — scp's remote-client mode) is refused; copy of a directory from a LOCAL source auto-appends the route's recursive flag (-r, shown in the receipt argv); from a REMOTE source pass -r yourself or use rsync; mkdir defaults to ensuring the destination's PARENT directory first (one exec pre-hop, outcome in the receipt created field; the operand itself is never pre-created); receipts use stable route ids (scp / scp-3 / docker-cp / incus-file-push / incus-file-pull / staged-pull-push / hub-staged) with ok+reason, the verification tier actually performed (native-exit-only by default; sha256 on the Hub lane) and tool-owned temp paths in argv shown as placeholders. rsync: local↔SSH, or SSH↔SSH with one protocol conversation between the peers (real delta; forwarding denied → honest error, never full copy). rsync src trailing slash copies contents, no slash the directory itself.
 
 Output: pty tails at ~30k chars ("[truncated: …]" header) — redirect bulk output to a file. Hard retention 4,000,000 UTF-16 units per stream (Hub 4MiB bytes); outputStats reports the rest; restart cannot recover discarded output. stdin feeds the command; timeout (seconds) interrupts then kills. run_in_background:true (oneshot) → jobId for job_output/job_kill. Native transport errors pass through verbatim — self-correct from them.`;
 function createRemoteTool(driver, opts = {}) {
@@ -4217,11 +4318,11 @@ function createRemoteTool(driver, opts = {}) {
 			},
 			verify: {
 				type: "boolean",
-				description: "copy only, Hub↔local↔local staged lane only: independent SHA-256 verification (default true). Native CLI routes do not verify and report that fact."
+				description: "copy only. Receipts name the verification tier actually performed (D1=A): native CLI routes are \"native-exit-only\" (no independent check — self-verify via oneshot digest commands when needed); the Hub↔local staged lane computes independent SHA-256 digests by default and verify:false skips them (\"not-applicable\"). No hash tier exists on native routes."
 			},
 			mkdir: {
 				type: "boolean",
-				description: "copy only, Hub↔local↔local staged lane only: create missing destination parents (default true). Native CLI routes let the CLI decide."
+				description: "copy only, all routes. Default true: before transfer, one best-effort exec pre-hop ensures the destination's PARENT directory exists (the operand itself is never pre-created — each CLI's own layout semantics stay byte-identical). Receipt created field: true (parent created this call) / false (already existed) / \"n-a\" (skipped or pre-hop unavailable, e.g. docker exec on a stopped container — the native CLI then reports the real error itself). false skips the pre-hop."
 			},
 			run_in_background: {
 				type: "boolean",
@@ -4344,12 +4445,26 @@ function createRemoteTool(driver, opts = {}) {
 					args.timeout,
 					args.run_in_background
 				].some((value) => value !== void 0)) throw new Error(`${args.action} cannot be combined with execution/PTY/job arguments; register byossh separately first`);
-				for (const legacy of [
-					"dryRun",
-					"delete",
-					"excludes",
-					"preserve"
-				]) if (args[legacy] !== void 0) throw new Error(`${legacy} was removed: pass native options through argv instead (e.g. ${legacy === "dryRun" ? "\"--dry-run\"" : legacy === "delete" ? "\"--delete\"" : legacy === "excludes" ? "\"--exclude=<pattern>\"" : "\"-a\" / \"-r\""})`);
+				const KNOWN_PARAMS = new Set([
+					"action",
+					"src",
+					"dst",
+					"argv",
+					"pullArgv",
+					"pushArgv",
+					"verify",
+					"mkdir",
+					"run_in_background",
+					"target",
+					"ssh",
+					"spawn",
+					"cmd",
+					"script",
+					"mode",
+					"stdin",
+					"timeout"
+				]);
+				for (const key of Object.keys(args)) if (!KNOWN_PARAMS.has(key)) throw new Error(`remote: unknown parameter "${key}" — this surface has no legacy aliases (dryRun/delete/excludes/preserve are gone); pass native CLI options through argv instead`);
 				if (args.action === "rsync") {
 					if (args.pullArgv !== void 0 || args.pushArgv !== void 0) throw new Error("rsync takes argv only; pullArgv/pushArgv are copy-only fields");
 					if ([args.verify, args.mkdir].some((value) => value !== void 0)) throw new Error("rsync cannot be combined with copy verify/mkdir options; the Hub/local staged lane is copy-only");
@@ -4359,13 +4474,14 @@ function createRemoteTool(driver, opts = {}) {
 						dst: args.dst,
 						...args.argv === void 0 ? {} : { argv: args.argv }
 					}, exec.signal, { sessionKey: getSessionKey(exec) });
-					if (receipt$1.exit !== 0) throw new Error(JSON.stringify(receipt$1));
+					if (receipt$1.ok === false || receipt$1.exit !== 0) throw new Error(JSON.stringify(receipt$1));
+					const rsyncDuration = Date.now() - start;
 					return {
 						kind: "rsync",
-						text: JSON.stringify(receipt$1),
+						text: formatTransferLine("rsync", receipt$1, rsyncDuration),
 						receipt: receipt$1,
 						exit: receipt$1.exit,
-						durationMs: Date.now() - start
+						durationMs: rsyncDuration
 					};
 				}
 				const copyStart = Date.now();
@@ -4378,14 +4494,16 @@ function createRemoteTool(driver, opts = {}) {
 					...args.pullArgv === void 0 ? {} : { pullArgv: args.pullArgv },
 					...args.pushArgv === void 0 ? {} : { pushArgv: args.pushArgv }
 				}, exec.signal, { sessionKey: getSessionKey(exec) });
-				const exits = receipt.exits ?? [];
-				if (exits.some((code) => code !== 0)) throw new Error(JSON.stringify(receipt));
+				const asReceipt = receipt;
+				const exits = asReceipt.exits ?? [];
+				if (asReceipt.ok === false || exits.some((code) => code !== 0)) throw new Error(JSON.stringify(receipt));
+				const copyDuration = Date.now() - copyStart;
 				return {
 					kind: "copy",
-					text: JSON.stringify(receipt),
+					text: formatTransferLine("copy", receipt, copyDuration),
 					receipt,
 					exit: exits.length > 0 ? 0 : null,
-					durationMs: Date.now() - copyStart
+					durationMs: copyDuration
 				};
 			}
 			if ([
@@ -4482,6 +4600,26 @@ function createRemoteTool(driver, opts = {}) {
 	});
 	return tool;
 }
+/** S8 (2026-10-17): copy/rsync render as one formatted line; the full receipt
+* stays in the receipt field — raw-JSON dumps are gone from text. */
+function formatTransferLine(action, receipt, durationMs) {
+	const r = receipt;
+	const parts = [];
+	if (r.ok === false) parts.push(`✗ ${r.reason ?? "failed"}`);
+	parts.push(`${action} ${r.src} → ${r.dst}`);
+	if (r.route !== void 0 && r.route !== "") parts.push(`route ${r.route}`);
+	if (r.exits !== void 0) parts.push(`exits [${r.exits.join(",")}]`);
+	else if (r.exit !== void 0) parts.push(`exit ${r.exit}`);
+	if (r.verification !== void 0) parts.push(`verification ${r.verification}`);
+	if (r.created === true) parts.push("created yes");
+	else if (r.created === false) parts.push("created pre-existing");
+	else if (r.created === "n-a") parts.push("created n-a");
+	if (r.cleanup !== void 0 && r.cleanup !== "none-required") parts.push(`cleanup ${r.cleanup}`);
+	if (typeof r.bytes === "number") parts.push(`${r.bytes} bytes / ${r.entries} entries`);
+	parts.push(`${(durationMs / 1e3).toFixed(1)}s`);
+	if (r.note !== void 0 && r.note.length > 0) parts.push(`(${r.note})`);
+	return parts.join(" · ");
+}
 function renderValue(v) {
 	if (v.kind === "status" || v.kind === "roster" || v.kind === "job" || v.kind === "copy" || v.kind === "rsync") return v.text;
 	const parts = [];

package/remote/provenance.json

@@ -5,15 +5,15 @@
   "sources": {
     "better-dsh/src/remote/agent-registration.ts": "459301354ea1ab713984bb01bc491a080256d4e983e55ff074e2665c3213d355",
     "better-dsh/src/remote/archive.ts": "fd32f96dc63421be7d56eb545badf355c6ee2498599605ffa48958b9efca9a63",
-    "better-dsh/src/remote/copy.ts": "bd6f290d3f8ec3e33f9980f160b26390a3be38ead891b81de7cf610940a7af87",
-    "better-dsh/src/remote/driver.ts": "ba44b100228e54681a243d4b739aba14d2b5efe98c238220f1029cf9afba5e2b",
+    "better-dsh/src/remote/copy.ts": "ab2aec5ee8df814f4bc568370977d229c402489248c738eff147431a52650c52",
+    "better-dsh/src/remote/driver.ts": "74fe4e9bd161a1c3c43dd5143e63423a6802afe93b01177f5d7918c3b6880e36",
     "better-dsh/src/remote/endpoints.ts": "315b6c37e6e5dbd51301aa971566b8345593560e1f2ba299e71143e147a8a17c",
     "better-dsh/src/remote/file-worker.ts": "31ac019a944cf7fdcd0ff044f8b330d923bf4d384c77056f9b7e3032bc8c9598",
     "better-dsh/src/remote/helper.ts": "789a802610fc480bb1c922dd284787ca22d7394fa906c729ee33d78ade79973c",
     "better-dsh/src/remote/hub-contract.ts": "4bd333f3ef3e94305a64f04c03948a9dae4bbf5268b0d26d9de99770be2d8ac9",
     "better-dsh/src/remote/input.ts": "7e543adb0973c25cbd24103c2d838db0fdacdd32525278d789004fc237dcd924",
     "better-dsh/src/remote/jobs.ts": "9587f2694426fcf00ff33d9db164d5b15ea659aed7dbcb1df2640fa3f08b2149",
-    "better-dsh/src/remote/native-copy.ts": "0c2045330c1007e49251643971d5edb9ef887a4964493450fd4184319d347b6e",
+    "better-dsh/src/remote/native-copy.ts": "3f8691abb14dfb7a94e956956fb4d182b7732ffbe70f1a8ff7dec5dd2b9afb7c",
     "better-dsh/src/remote/nonce-framing.ts": "5592fec76cec0c1e1ac75f4806d0904cd111bf2061b1fada4f0dfa12014d1233",
     "better-dsh/src/remote/oneshot.ts": "99f2c809ba1159c7865ec3cff2e6d7b1f165a7f03185a6fc9505c1a534ba57bc",
     "better-dsh/src/remote/output-ring.ts": "a79104bd3dcddab06a3fe7e52d239a70becd4f2dcddd0c9b6513f5fe3c4ed0bc",
@@ -21,15 +21,16 @@
     "better-dsh/src/remote/process.ts": "f4491c76457b662703e0b1e4a876299b9c8b7b3da5b304c6baee5576017de448",
     "better-dsh/src/remote/pty-session.ts": "8ea63b3357c681c5dcacacbfb99da532cae8ed293482e7a54c0362b0f9f27a3d",
     "better-dsh/src/remote/roster.ts": "753803521accb7a5eacc19a9bada648af8ee5fc67a152247915b92e9ddeb6887",
-    "better-dsh/src/remote/rsync.ts": "21f10f0a24fd5148e298c938aaabeff85c96becc76317a1d3cc5c2e8a517c7c0",
+    "better-dsh/src/remote/rsync.ts": "f9c15279fdfa67b3265eeda216bcd0c46d8b4f05c6026cf2750a1c818ff333ba",
+    "better-dsh/src/remote/ssh-argv.ts": "36c916d21163b7db0c5a95bb196b0d5d0609fc812cfe425f4e74d91eb2fd10b4",
     "better-dsh/src/remote/ssh-config.ts": "71ce833be5c934430e8a9ca982af055fccb71d6c3e64513ae83e7937b070e446",
     "better-dsh/src/remote/ssh-process.ts": "9b4d754af5af0fe6a903e683642e94842f8662358b72467d41f2288e1e67fd79",
-    "better-dsh/src/remote/ssh-rsync-native-relay.ts": "3a30f65f1c548badd1e8a6018c4f7cacd8f75e2aec4d7b7181b03fc04f180f27",
-    "better-dsh/src/remote/ssh-targets.ts": "d463357d03fec88f9cdc3c47bba85ae9213f2641b2c08689fe9a7af42fe8bcd4",
+    "better-dsh/src/remote/ssh-rsync-native-relay.ts": "5d9585ab30a11aeeba19ce7b43aa31f47e2ee0bde2e7c006ac3e811cf7940bdf",
+    "better-dsh/src/remote/ssh-targets.ts": "86dfdd248192ee38f8cfc5642906ec1615c54e5a3e14bd45e35880d636279a15",
     "better-dsh/src/remote/status.ts": "54264917bd50401c5a2f2ff9df325af7a5e790597e6307fcdc46a8455d18b530",
     "better-dsh/src/remote/target.ts": "965a04b3561aa56ee089876a869fd2116b1773ef34b053b3006905fcde063a43",
-    "better-dsh/src/remote/tool.ts": "997edf11d0512866682ee87ddd0a6b5e060db0c222d97d7544b2a52a5e8749bc",
-    "better-dsh/src/remote/transports.ts": "258aa92224a310d632c53a326d2e3d3d2b0f0f1bf2f9ceeb554bded03581ae18",
+    "better-dsh/src/remote/tool.ts": "3059d69033de389956446e01d250bdbf01e1c411422c8d4e1c20912747b0f50a",
+    "better-dsh/src/remote/transports.ts": "2983e707b287b5e2742a23de45ef0976a3ff264425b7d29f02399ee77e19742c",
     "better-dsh/third_party/schemastery/lib/index.cjs": "aca1c1a47c7b6034feee01501aefca3e6dd97a0bac4fe334fd30647ae5a9e480",
     "better-dsh/third_party/schemastery/lib/index.d.mts": "66847f605af58c42575333c825eefdec4ad38278ad6cb260e37aa0cc63803bbd",
     "better-dsh/third_party/schemastery/lib/index.mjs": "cfcbe46c7416bdb35ce891c252152bbf519e08199bede5930dd7cb880c65f1ef",
@@ -57,16 +58,16 @@
   },
   "outputs": {
     "file-worker.js": "f84f5b48de915949d85c3d0340a343cc5901218c3bc2dafdf5cecaa244f7b6e3",
-    "helper-bin/MANIFEST.json": "c8c13fffd331abbdcfb29783e2ebcbe1ba9737d56ed495df2d78788c6b6c7d94",
-    "helper-bin/aarch64-apple-darwin/BUILT-VER": "0d13f4cceb4520b0970f93ee648432615239279700de836661c63f2c89ac41dd",
-    "helper-bin/aarch64-apple-darwin/superd-run": "715c2d7bd935f3b4cc4ae0ffb10d3fab946bb62d93f592ccfe2a7446669ff76b",
-    "helper-bin/aarch64-unknown-linux-musl/BUILT-VER": "0d13f4cceb4520b0970f93ee648432615239279700de836661c63f2c89ac41dd",
-    "helper-bin/aarch64-unknown-linux-musl/superd-run": "22ac1c7f913092d8ca8d312b93528dd2263200f9670dc183fd215bc89d2bac68",
-    "helper-bin/x86_64-pc-windows-gnu/BUILT-VER": "0d13f4cceb4520b0970f93ee648432615239279700de836661c63f2c89ac41dd",
-    "helper-bin/x86_64-pc-windows-gnu/superd-run.exe": "a638479e1ccb1c4e185085100450962e39164158a76097b5087d2a3bb8880ac0",
-    "helper-bin/x86_64-unknown-linux-musl/BUILT-VER": "0d13f4cceb4520b0970f93ee648432615239279700de836661c63f2c89ac41dd",
-    "helper-bin/x86_64-unknown-linux-musl/superd-run": "79e42879509bb87d2fe9888d282151fd17113203d3172f59a16fcb5a180ba057",
-    "plugin.d.ts": "b58e5a7148767a28ecc87b4fe1a39ff287ddba5cf6d1e538f6242dfb4d0485f8",
-    "plugin.js": "d97c93d87242aaac376858206cd3407f4283dd9b0036a190329efb26e305a04a"
+    "helper-bin/MANIFEST.json": "efce4956d5c23f7916f48218b81848717a425ccf78ebeb6fcc7c788015250884",
+    "helper-bin/aarch64-apple-darwin/BUILT-VER": "8601d3c2ff79795c9657b02080afffe91c42775534dd6687c6dbdc0f4924db70",
+    "helper-bin/aarch64-apple-darwin/superd-run": "a8fd11a5e6a2cb146deb599414434a299ebf78c53cfc1d3e5f42617ee11c1706",
+    "helper-bin/aarch64-unknown-linux-musl/BUILT-VER": "8601d3c2ff79795c9657b02080afffe91c42775534dd6687c6dbdc0f4924db70",
+    "helper-bin/aarch64-unknown-linux-musl/superd-run": "3a8660fa099f1e71de6e08313ee2aaace00503f74365475ee46e2d2a89228397",
+    "helper-bin/x86_64-pc-windows-gnu/BUILT-VER": "8601d3c2ff79795c9657b02080afffe91c42775534dd6687c6dbdc0f4924db70",
+    "helper-bin/x86_64-pc-windows-gnu/superd-run.exe": "1372450238c5bda702b4529f4148aa79e80a255c3c125d1a6229afd4693e9d90",
+    "helper-bin/x86_64-unknown-linux-musl/BUILT-VER": "8601d3c2ff79795c9657b02080afffe91c42775534dd6687c6dbdc0f4924db70",
+    "helper-bin/x86_64-unknown-linux-musl/superd-run": "05b428657942abf22a0ad609433d5cab6b6182fe389851345459a0274b5a6533",
+    "plugin.d.ts": "d1cb7c08dee04fb3629727e8fa2394e2ece34d40f6a5a83adef13de1a22cd610",
+    "plugin.js": "c59076f72b0436636d9daa23dbc51e9139f8d4563a3d8de3d283e976a66fcaa4"
   }
 }

package/superd-hub/dist/a2a-host.d.ts

@@ -10,6 +10,14 @@ export interface A2aHostOptions {
      * ({@link bridgeTypertGateway}).
      */
     nativeGateway?: RawTypertGatewayFace;
+    /**
+     * LAZY provider of ctx0's owner browser Peer (connection.browserPeer) —
+     * 0.2.1 gateways read peer.signal/principal on every invocation. A
+     * provider, not a value: typertGateway mounts before connection, so a
+     * wiring-time read would capture undefined forever; resolution happens
+     * per call, when connection is long live.
+     */
+    nativePeer?: () => unknown;
 }
 /**
  * The RAW typertGateway service face — upstream canonical stream order
@@ -20,8 +28,8 @@ export interface A2aHostOptions {
  * mesh-gateway wire adapters (dual-face, 3rd-argument dispatch).
  */
 export interface RawTypertGatewayFace {
-    dispatchRpc(endpoint: string, payload: unknown, signal: AbortSignal): Promise<unknown>;
-    openWireStream(endpoint: string, payload: unknown, uplink: undefined, peer: undefined, signal: AbortSignal, control: AbortController): Promise<AsyncIterable<unknown>> | AsyncIterable<unknown>;
+    dispatchRpc(endpoint: string, payload: unknown, signal: AbortSignal, peer: unknown): Promise<unknown>;
+    openWireStream(endpoint: string, payload: unknown, uplink: undefined, peer: unknown, signal: AbortSignal, control: AbortController): Promise<AsyncIterable<unknown>> | AsyncIterable<unknown>;
 }
 /**
  * Bridge one RAW typertGateway instance to Task 2's 3-arg `A2aGateway` face
@@ -38,7 +46,7 @@ export interface RawTypertGatewayFace {
  * @param real - a raw in-process typertGateway instance (ctx0's own or a local world's).
  * @returns the gateway Task 2's service consumes.
  */
-export declare function bridgeTypertGateway(real: RawTypertGatewayFace): A2aGateway;
+export declare function bridgeTypertGateway(real: RawTypertGatewayFace, peer?: unknown): A2aGateway;
 /**
  * Build the gatewayFor resolver Task 2's service consumes: federated table
  * first, shared target registry second, local id-map inversion third,

package/superd-hub/dist/a2a-host.js

@@ -59,10 +59,10 @@ function localKeyOfA6(home, a6) {
  * @param real - a raw in-process typertGateway instance (ctx0's own or a local world's).
  * @returns the gateway Task 2's service consumes.
  */
-export function bridgeTypertGateway(real) {
+export function bridgeTypertGateway(real, peer) {
     return {
-        dispatchRpc: (endpoint, payload, signal) => real.dispatchRpc(endpoint, payload, signal),
-        openWireStream: (endpoint, payload, signal) => real.openWireStream(endpoint, payload, undefined, undefined, signal, new AbortController()),
+        dispatchRpc: (endpoint, payload, signal) => real.dispatchRpc(endpoint, payload, signal, peer),
+        openWireStream: (endpoint, payload, signal) => real.openWireStream(endpoint, payload, undefined, peer, signal, new AbortController()),
     };
 }
 /**
@@ -95,17 +95,17 @@ export function resolveA2aGatewayFor(options) {
             if (key === 'native') {
                 if (options.nativeGateway === undefined)
                     throw new A2aAddressError('unreachable', addr);
-                return bridgeTypertGateway(options.nativeGateway);
+                return bridgeTypertGateway(options.nativeGateway, options.nativePeer?.());
             }
             // The registry's declared GatewayFace (targets.ts) types the stream
             // face as the 3-arg subset, but a LOCAL row's runtime object is the RAW
             // typertGateway instance (world-join.ts registers it verbatim) — re-cast
             // to RawTypertGatewayFace so the bridge above binds the canonical 6-arg
             // positional order instead of the declared subset.
-            const local = getTarget(key)?.gateway;
-            if (local === undefined)
+            const target = getTarget(key);
+            if (target?.gateway === undefined)
                 throw new A2aAddressError('unreachable', addr);
-            return bridgeTypertGateway(local);
+            return bridgeTypertGateway(target.gateway, target.peer);
         }
         // The a6 resolves nowhere — classify the miss (D7): a roster row exists →
         // its plane is down; else the machine decides agent-vs-machine blame.

package/superd-hub/dist/a2a-row.js

@@ -56,12 +56,18 @@ export function wireHubToolRow(ctx, opts = {}) {
         // RAW instance in, bridged at the resolver (fix round 1: one shared
         // bridge in a2a-host.ts covers the native seam AND all local world rows).
         const raw = t.get('typertGateway');
+        // 0.2.1: every invocation reads the caller Peer — ctx0's owner browser
+        // Peer rides the native seam as a LAZY provider: typertGateway mounts
+        // BEFORE connection (the service registers in its constructor), so a
+        // wiring-time value would capture undefined forever; resolution happens
+        // per call, when connection is long live.
+        const nativePeer = () => ctx.get('connection')?.browserPeer;
         // postoffice R4: ONE resolver, ONE ingest, TWO consumers — the initiator
         // service's self-routing leg calls the very same ingest handler the HTTP
         // endpoint calls (protocol-identical by construction). The service takes
         // a LAZY provider: the ingest's delivery face buffers through the
         // service's own buffer leg, so it can only be built after the service.
-        const gatewayFor = resolveA2aGatewayFor({ home, nativeGateway: raw });
+        const gatewayFor = resolveA2aGatewayFor({ home, nativeGateway: raw, nativePeer });
         // Operational journal: the pure modules only format lines; this is
         // where they meet the process console and land in the unit log (4999 rig
         // / dev3 dsh.service journal). NOT ctx.logger: the pack composes no

package/superd-hub/dist/carrier.d.ts

@@ -1,22 +1,24 @@
 import { type WorldRequest, type WorldResponse } from './world-web-server.js';
 import { WorldMuxServer, type MuxFailure } from './world-mux.js';
-/** The three-method face of a world's typertGateway service instance. */
+/** The face of a world's typertGateway service instance the hub forwards through. */
 export interface CarrierGatewayFace {
-    dispatchRpc(endpoint: string, payload: unknown, signal: AbortSignal): Promise<unknown>;
+    dispatchRpc(endpoint: string, payload: unknown, signal: AbortSignal, peer: unknown): Promise<unknown>;
     /**
      * Streams return an async iterable (upstream face is synchronous-returning).
      * Canonical order: (endpoint, payload, uplink, peer, signal, control) — the
-     * carrier passes no peer (ctx0's fence already authenticated the client),
-     * the mux controller's signal, and the controller itself, exactly as the
-     * native gateway's mux wires its own streams.
+     * carrier passes the world's owner browser Peer (0.2.1 gateways read it on
+     * every invocation), the mux controller's signal, and the controller
+     * itself, exactly as the native gateway's mux wires its own streams.
      */
-    openWireStream(endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: undefined, signal: AbortSignal, control: AbortController): Promise<AsyncIterable<unknown>> | AsyncIterable<unknown>;
+    openWireStream(endpoint: string, payload: unknown, uplink: AsyncIterable<unknown>, peer: unknown, signal: AbortSignal, control: AbortController): Promise<AsyncIterable<unknown>> | AsyncIterable<unknown>;
 }
 export declare function writeJson(res: WorldResponse, status: number, body: string): void;
 /** Deps the forwarding kernel needs to answer for one world's traffic. */
 export interface ForwardOptions {
     /** The addressed world's gateway instance. */
     gateway: CarrierGatewayFace;
+    /** The addressed world's owner browser Peer (0.2.1 invocation identity). */
+    peer?: unknown;
     /** World key addressing the world's published `/api` fetch handler. */
     label: string;
     /** URL prefix this carrier strips before the world sees the request (`/omp`, `/hub`). */
@@ -47,7 +49,7 @@ export declare function forwardWorldFetch(options: {
  */
 export declare function forwardApiCall(options: ForwardOptions, req: WorldRequest, res: WorldResponse): Promise<void>;
 /** One WorldMuxServer bound to `gateway` — the canonical openWireStream wiring in one place. */
-export declare function worldMuxOf(gateway: CarrierGatewayFace, options?: {
+export declare function worldMuxOf(gateway: CarrierGatewayFace, peer?: unknown, options?: {
     heartbeatIntervalMs?: number;
     failure?: (error: unknown) => MuxFailure;
 }): WorldMuxServer;

package/superd-hub/dist/carrier.js

@@ -177,7 +177,7 @@ export async function forwardApiCall(options, req, res) {
         }
         rpcId = envelope.rpcId;
         const controller = new AbortController();
-        const result = await options.gateway.dispatchRpc(envelope.method, envelope.payload, controller.signal);
+        const result = await options.gateway.dispatchRpc(envelope.method, envelope.payload, controller.signal, options.peer);
         // The gateway already returns a Result (`{ok:true,value}` | `{ok:false,error}`),
         // which is exactly the server-response's `result` field.
         writeJson(res, 200, serverResult(rpcId, result));
@@ -194,8 +194,8 @@ export async function forwardApiCall(options, req, res) {
     }
 }
 /** One WorldMuxServer bound to `gateway` — the canonical openWireStream wiring in one place. */
-export function worldMuxOf(gateway, options) {
-    return new WorldMuxServer((endpoint, payload, uplink, control) => Promise.resolve(gateway.openWireStream(endpoint, payload, uplink, undefined, control.signal, control)), {
+export function worldMuxOf(gateway, peer, options) {
+    return new WorldMuxServer((endpoint, payload, uplink, control) => Promise.resolve(gateway.openWireStream(endpoint, payload, uplink, peer, control.signal, control)), {
         ...(options?.heartbeatIntervalMs === undefined ? {} : { heartbeatIntervalMs: options.heartbeatIntervalMs }),
         ...(options?.failure === undefined ? {} : { failure: options.failure }),
     });

package/superd-hub/dist/companions.js

@@ -3,8 +3,9 @@ import { createHash } from 'node:crypto';
 import { readFile, mkdir, unlink, rmdir } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { writeFileAtomic } from '@deepseek-ai/dsh-atomic-write';
-// done marks a CONFIRMED first use (Better observed installed). A receipt with attempted
-// but neither done nor error is an interrupted first use — e.g. killed by the restart
+// done marks a CONFIRMED first use (Better observed installed); removed marks a
+// migrated legacy removal record. A receipt with attempted but neither done,
+// error, nor removed is an interrupted first use — e.g. killed by the restart
 // that installing Super itself triggers — and must re-arm, not suppress, the retry.
 const message = (error) => error instanceof Error ? error.message : String(error);
 async function optionalJson(path) {
@@ -48,9 +49,10 @@ export class BetterDashCompanion {
         return this.initialized ??= (async () => {
             const saved = await optionalJson(this.receipt);
             if (saved !== undefined) {
-                // Never-resurrect applies only to a CONFIRMED first use or a recorded
-                // failure; an interrupted first use (no done, no error) re-arms.
-                this.intent = saved.attempted && saved.done !== true && saved.error === undefined
+                // Never-resurrect applies to a CONFIRMED first use, a recorded failure,
+                // or a migrated removal record; an interrupted first use (no done, no
+                // error, no removal marker) re-arms.
+                this.intent = saved.attempted && saved.done !== true && saved.error === undefined && saved.removed !== true
                     ? { attempted: false } : saved;
                 await this.cleanLegacy();
                 return;
@@ -59,7 +61,7 @@ export class BetterDashCompanion {
             // Any old registration was first use. An absent Better now means removal,
             // including when Super has since changed version; never resurrect it.
             if (old?.['super-dsh:better-dsh'] !== undefined) {
-                this.intent = { attempted: true };
+                this.intent = { attempted: true, removed: true };
                 await this.save();
                 await this.cleanLegacy();
             }

package/superd-hub/dist/gateway.js

@@ -90,7 +90,14 @@ export function apply(ctx, config) {
             real: real,
             authorize: (req, res) => connection.authorizeIndex(req, res),
             requestRejection: (req) => connection.requestRejection(req),
-            gatewayOf: (label) => (federatedGatewayOf(label) ?? getTarget(label)?.gateway),
+            gatewayOf: (label) => {
+                const federated = federatedGatewayOf(label);
+                if (federated !== undefined)
+                    return { key: label, gateway: federated };
+                // The stored face IS the service instance (canonical methods); targets.ts
+                // keeps a looser structural view for the mesh wire adapters.
+                return getTarget(label);
+            },
         }), 'superd-hub: /hub route family');
         // P4 §8.2: the PTY executor's upgrade route — same gate as the /hub family
         // (authorizeIndex cookie auth first, then the browser-trust fence). The

package/superd-hub/dist/hub-route.d.ts

@@ -63,8 +63,11 @@ export interface HubRouteOptions {
      * answer, so even the demux 404s never speak to untrusted traffic.
      */
     requestRejection?(req: unknown): number | undefined;
-    /** The live gateway of a registered label, or undefined (unknown / not yet spawned). */
-    gatewayOf(label: string): CarrierGatewayFace | undefined;
+    /** The live target (gateway + owner peer) of a registered label, or undefined (unknown / not yet spawned). */
+    gatewayOf(label: string): {
+        gateway: CarrierGatewayFace;
+        peer?: unknown;
+    } | undefined;
 }
 /**
  * Register the family on ctx0's webServer.

package/superd-hub/dist/hub-route.js

@@ -130,15 +130,15 @@ export function registerHubRoute(options) {
             });
             return;
         }
-        const gateway = options.gatewayOf(agent);
-        if (gateway === undefined) {
+        const target = options.gatewayOf(agent);
+        if (target === undefined) {
             answer404(res, { error: 'unknown-agent', label: agent });
             return;
         }
         // Consume the family plumbing: the kernel forwards a native-shaped URL
         // (the kernel carries the same fence face as the carrier's own kernel).
         req.url = worldUrlOf(req.url);
-        await forwardApiCall({ gateway, label: agent, mountPath: HUB_MOUNT_PATH, requestRejection: options.requestRejection }, req, res);
+        await forwardApiCall({ gateway: target.gateway, peer: target.peer, label: agent, mountPath: HUB_MOUNT_PATH, requestRejection: options.requestRejection }, req, res);
     };
     const handleUpgrade = (req, socket, head) => {
         if (!gateUpgrade(options, req, socket))
@@ -155,8 +155,8 @@ export function registerHubRoute(options) {
             rejectUpgrade(socket, 404, JSON.stringify({ error: 'foreign-only' }), 'application/json');
             return;
         }
-        const gateway = options.gatewayOf(agent);
-        if (gateway === undefined) {
+        const target = options.gatewayOf(agent);
+        if (target === undefined) {
             rejectUpgrade(socket, 404, JSON.stringify({ error: 'unknown-agent', label: agent }), 'application/json');
             return;
         }
@@ -165,7 +165,7 @@ export function registerHubRoute(options) {
         // a heartbeat interval and a per-connection WebSocketServer; on socket
         // close it must be CLOSED (world-mux clears the heartbeat only in close),
         // or every reconnect leaks the timer plus the mux graph forever.
-        const mux = worldMuxOf(gateway);
+        const mux = worldMuxOf(target.gateway, target.peer);
         socket.once?.('close', () => {
             void mux.close().catch(() => undefined);
         });

package/superd-hub/dist/targets.d.ts

@@ -22,6 +22,13 @@ export interface ForeignTarget {
     key: string;
     /** The context's typertGateway service instance (or a wire adapter with the same face). */
     gateway: GatewayFace;
+    /**
+     * The world's owner browser Peer (connection.browserPeer) for in-process
+     * faces — DSH 0.2.1 gateways read peer.signal/principal on every forwarded
+     * invocation, so the hub must present the world's shared owner identity.
+     * Wire adapters (mesh federation) omit it: the far end supplies its own.
+     */
+    peer?: unknown;
 }
 /** Register (or replace) the target for a runtime key. */
 export declare function registerForeignTarget(target: ForeignTarget): void;

package/superd-hub/dist/world-lifecycle.js

@@ -48,7 +48,7 @@ export function ownWorld(ctx, entry, spawn, onFailure) {
                     unregisterForeignTarget(key);
                 setReady(key, false);
             }, `superd.world.${key}: availability`);
-            target = { key, gateway: world.get('typertGateway') };
+            target = { key, gateway: world.get('typertGateway'), peer: world.get('connection')?.browserPeer };
             registerForeignTarget(target);
             setReady(key, true);
             return world;