@agentrouter-top/relay-dsh-plugin-codex 0.2.2-agentrouter.1 → 0.2.2-agentrouter.3

package/AGENTROUTER-FORK.md

@@ -2,6 +2,6 @@
 
 Upstream: https://github.com/yangbobo2021/relay-dsh-plugin-codex.git @ 75918b3e06880df25375154321109f364124a544 (MIT).
 
-Changes: version 1 generic codexHome/codexEnv launch interface, Codex 0.153.4, and package/build identity. No agent protocol, model picker, effort controls or tool implementation replaced.
+Changes: version 1 generic codexHome/codexEnv launch interface, optional codexBehaviorDefaults=native (see docs/behavior-defaults.md), DSH pre-step context admission (see docs/context-admission.md), Codex 0.153.4, and package/build identity. No agent protocol, model picker, effort controls or tool implementation replaced.
 
 Sources and checksummed contributions: https://github.com/Maybank01/agentrouter-dsh-plugins/tree/main/upstream/relay-codex

package/docs/behavior-defaults.md

@@ -0,0 +1,43 @@
+# Optional native behavior defaults
+
+The public DSH host configuration accepts `codexBehaviorDefaults: "native"`.
+Omitting it (or setting `"relay"`) preserves upstream Relay behavior. Unknown
+values fail activation. This is independent of `codexExecutionMode`.
+
+For a Codex-native agent that can still use DSH plugin tools, compose:
+
+```yaml
+codexExecutionGuidance: false
+codexBehaviorDefaults: native
+# codexExecutionMode remains enhanced (the default).
+```
+
+This omits Relay's fixed personality, collaboration mode and multi-agent mode
+from ordinary thread/turn requests and from model/effort synchronization. It
+does not replace these overrides with empty strings or null, and does not remove
+Codex's own instructions, native mode defaults, AGENTS.md or Skills. Model/effort
+choices, tool schemas, attachment context, permissions and cancellation stay on
+their existing paths. Native configuration may itself select a personality or
+mode; this switch does not force a different one.
+
+With execution guidance disabled, ordinary conversations add no Relay developer
+instructions and do not forward the combined DSH `options.system`. Plugin tool
+descriptions/results still carry their necessary knowledge. This is **not** an
+automatic bridge for all DSH preset prompts or plugin context messages. A future
+knowledge/mode bridge needs explicit source and session scope, not a heuristic
+that classifies arbitrary system text as knowledge. Do not use this option to
+claim that unbridged DSH prompt contributions already reach Codex.
+
+Explicit instructions supplied by a caller still work (including separate,
+read-only auxiliary title/compaction threads); absent instruction fields are
+omitted. User files and existing conversation history are never rewritten.
+Previously injected guidance can remain in a resumed/forked conversation: use
+a new conversation to evaluate the new defaults.
+
+Implementation: `apply(ctx, config)` passes `behaviorDefaults` through the
+existing execution plugin to `CodexSessionRuntime`. There is no Desktop API,
+provider policy, extra AgentLoop or tool implementation here.
+
+Protocol semantics: [official OpenAI App Server documentation](https://learn.chatgpt.com/docs/app-server).
+In particular, `collaborationMode.settings.developer_instructions: null` selects
+the mode's built-in instructions; it does not clear them.

package/docs/context-admission.md

@@ -0,0 +1,27 @@
+# Codex context admission
+
+Relay uses DSH's public `agent/pre-step` waterfall to align newly recorded
+context messages with the adapter's existing native-input source policy.
+For the effective `relay-codex` preset, it awaits downstream decisions and
+DSH's runtime snapshot, then removes messages from unsupported sources before
+the loop appends them as `user/message` events. DSH's ordinary chat/trajectory
+views therefore no longer label these unforwarded messages as injected.
+
+Both admission and native input selection use the same source predicate:
+user input and Relay's existing `source.plugin = "relay"` activation messages
+are supported. Arbitrary DSH system/preset/plugin knowledge is still **not**
+automatically bridged. This fix does not enable more prompt injection, change
+the existing latest-input selection, or classify text heuristically.
+
+The hook preserves accepted message identities/attachments, upstream rejection
+decisions, request-series metadata and normal empty-step semantics. It follows
+the effective preset after switching and leaves other agents untouched. It is
+disposed with Relay. No Desktop/private API or extra plugin is needed, and
+AgentRouter's authentication and Codex Home composition do not implement it.
+
+This is admission for submission, not a receipt from the model: a later failed
+network request is still a failed request. Historical session events and native
+thread history are not rewritten; old misleading rows can remain in old chats.
+The DSH assembled request header is not a native Codex prompt dump. Native
+permissions, tools, behavior defaults and auxiliary requests keep their existing
+paths. A future knowledge bridge must update this same admission/input contract.

package/docs/kernel-policy.md

@@ -0,0 +1,12 @@
+# Kernel/model consistency
+
+Relay's `relay-codex` preset owns Codex execution. Primary calls from that
+preset must explicitly select the `relay-codex` model route. Selecting another
+route is an error, not permission to silently use the native default. A
+non-Codex session cannot select the Codex route either. Auxiliary calls with
+an explicit purpose retain their existing behavior.
+
+This is a route-ownership check, not a GPT/DeepSeek model-name allowlist.
+Native model and effort catalogs, permissions, tools and history stay upstream
+owned. Product-only preset visibility and provider activation belong to the
+deployment's ordinary DSH plugin/profile composition, not this generic adapter.

package/docs/transcript-presentation.md

@@ -0,0 +1,20 @@
+# Codex transcript presentation
+
+Relay hides the `permission` command row and the DSH `request/header.system`
+chat row for sessions whose effective preset is `relay-codex`. This includes
+replayed and failed turns; it does not depend on a successful Codex response.
+The primary adapter does not forward DSH's `options.system` to Codex. Native
+Codex instructions, explicitly admitted plugin context, and task-specific
+auxiliary instructions are not affected by this presentation rule.
+
+This uses the public `conversation.chat.commandview` permission specialization
+and a leaf shadow of `conversation.chat.node/system-prompt`. Other commands,
+tool approvals, turn errors and the original event log remain unchanged.
+Other or unknown presets retain a permission disclosure built from the public
+DSH primitive and the original system-prompt renderer. DSH does not export its
+generic command card; Relay does not copy it or claim its child slots.
+
+No Desktop patch, private DOM mutation, log deletion, authentication change or
+permission-policy change is involved. Removing Relay restores native renderers.
+Changes to the native system-prompt leaf contract fail open. If the primary
+adapter starts forwarding system prompts in future, update this policy with it.

package/lib/client.js

@@ -36319,6 +36319,82 @@ window.__ModuleLoader__.load({
 			});
 		}
 		//#endregion
+		//#region src/client/transcript-presentation.tsx
+		function isCodexSession(state, sessionId) {
+			return sessionPreset(state.byId[sessionId]) === "relay-codex";
+		}
+		/** Only the permission command seat is ours; all other commands stay with DSH. */
+		function PermissionTranscriptRow({ sessionId, useSessions, node, t }) {
+			const codex = useSessions((state) => isCodexSession(state, sessionId));
+			const [open, setOpen] = (0, react.useState)(false);
+			if (codex) return null;
+			const failed = node.outcome?.kind === "error";
+			const summary = node.outcome?.text ?? t(node.outcome === null ? "row.running" : failed ? "row.failed" : "ok");
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.DisclosureRow, {
+				title: "permission",
+				open,
+				expandable: true,
+				expandOnRowClick: true,
+				icon: failed ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.StateDot, { state: "error" }) : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconApiOutline14, { size: 14 }),
+				onToggle: () => setOpen((value) => !value),
+				keepContentWhenOpen: true,
+				collapsedContent: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					style: {
+						marginInlineStart: 8,
+						whiteSpace: "pre-wrap"
+					},
+					children: summary
+				}),
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)("pre", {
+					style: {
+						whiteSpace: "pre-wrap",
+						overflowWrap: "anywhere"
+					},
+					children: [node.args, summary].filter(Boolean).join("\n")
+				})
+			});
+		}
+		/** Presentation only: keep request headers, permission events and approvals intact. */
+		function installTranscriptPresentation(ctx) {
+			ctx.slots.inject("conversation.chat.commandview", () => {
+				const locale = ctx.slots.entries("conversation.chat.node").find((entry) => entry.children?.["conversation.chat.commandview"])?.locale;
+				if (locale !== "chat" && locale !== "conversation") return () => {};
+				return ctx.slots.register({
+					name: "conversation.chat.commandview",
+					key: "permission",
+					priority: -20,
+					locale
+				}, PermissionTranscriptRow);
+			});
+			ctx.slots.inject("conversation.chat.node", () => {
+				let previous;
+				let dispose;
+				const reconcile = () => {
+					const original = ctx.slots.entries("conversation.chat.node").find((entry) => entry.options.key === "system-prompt" && (entry.options.priority ?? 0) >= 0);
+					if (original === previous) return;
+					dispose?.();
+					dispose = void 0;
+					previous = original;
+					if (!original || original.children || original.store || original.inject || original.locale !== "chat" && original.locale !== "conversation") return;
+					const Original = original.component;
+					dispose = ctx.slots.register({
+						name: "conversation.chat.node",
+						key: "system-prompt",
+						priority: -20,
+						locale: original.locale
+					}, function CodexRequestPromptBoundary(props) {
+						return props.useSessions((state) => isCodexSession(state, props.sessionId)) ? null : /* @__PURE__ */ (0, react_jsx_runtime.jsx)(Original, { ...props });
+					});
+				};
+				const unsubscribe = ctx.slots.subscribe("conversation.chat.node", reconcile);
+				reconcile();
+				return () => {
+					unsubscribe();
+					dispose?.();
+				};
+			});
+		}
+		//#endregion
 		//#region src/client/codex-activity.ts
 		const codexActivityDefinition = {
 			kind: "relay-codex-activity",
@@ -37092,6 +37168,7 @@ window.__ModuleLoader__.load({
 			return withConversationRuntime(ctx, (inner) => {
 				applyActivityPresentation(inner);
 				installProcessPresentation(inner, advancedDebug);
+				installTranscriptPresentation(inner);
 				return installModelSelection(inner, "relay-codex", "relay-codex", "relay-claude");
 			});
 		}