@ckanner/flywheel 0.33.0 → 0.34.0

package/node_modules/dsh-preset-generator/src/gen-presets.mjs

@@ -0,0 +1,367 @@
+#!/usr/bin/env node
+/**
+ * gen-presets.mjs — materialize DSH agent presets from the installed base.
+ *
+ * ## Why this is not part of a plugin
+ *
+ * DSH agent presets have no inheritance: a preset's `plugins` list is its
+ * complete composition, and a patch replaces a whole entry rather than merging
+ * into it. So any custom preset has to restate the base preset, and the base
+ * ships inside the application and changes when DSH is upgraded.
+ *
+ * That job belongs to no single plugin. It started inside one, which meant a
+ * plugin's script was rewriting a profile region that also serves other plugins
+ * and the settings UI. Here it is a tool of its own: it reads the base, applies a
+ * policy, and writes the marked region of a profile patch.
+ *
+ * ## The marker is load-bearing
+ *
+ * `BEGIN` names this file's original path, and it has to keep naming it: a
+ * profile generated before this move already contains that exact string, and a
+ * different one would make this script append a second block instead of
+ * replacing the first.
+ *
+ * ## Usage
+ *
+ *   node src/gen-presets.mjs                 # write into the desktop profile
+ *   node src/gen-presets.mjs --dry-run       # print, write nothing
+ *   node src/gen-presets.mjs --out FILE      # write to FILE instead
+ *   node src/gen-presets.mjs --daily-only    # refuse if the file already has heavy
+ *   node src/gen-presets.mjs --asar PATH     # override the app.asar path
+ *   node src/gen-presets.mjs --profile DIR   # override the profile directory
+ *
+ * @module dsh-preset-generator
+ */
+
+import { closeSync, openSync, readFileSync, readSync, writeFileSync } from 'node:fs'
+import { homedir } from 'node:os'
+import { join } from 'node:path'
+import { PRESETS } from './policy.mjs'
+
+// ---------------------------------------------------------------------------
+// Defaults
+// ---------------------------------------------------------------------------
+
+const DEFAULT_ASAR =
+  '/Applications/DeepSeek Harness.app/Contents/Resources/app.asar'
+const BASE_PRESET = 'dsh/node_modules/@deepseek-ai/dsh-web-app/presets/ptc.patch.yml'
+const DEFAULT_PROFILE = join(homedir(), '.dsh', 'profiles', 'desktop')
+
+const BEGIN = '# >>> BEGIN generated presets (scripts/gen-presets.mjs) >>>'
+const END = '# <<< END generated presets <<<'
+
+/** The two presets this script owns. Both are PTC: LCU now exposes its
+ * Computer/Browser runtime through the PTC `cua` bridge, not a native `js` tool.
+ * DSH 0.2.2 deprecates the presentation selector in favour of mounting
+ * `dsh-tool-executor-ptc` directly. */
+// The pure SDK API consumes the same policies without running this CLI or
+// writing the user's desktop profile. LCU attachment remains a separate grant.
+
+// ---------------------------------------------------------------------------
+// Minimal asar reader (Electron's asar is a simple header + flat blob)
+// ---------------------------------------------------------------------------
+
+/**
+ * Read one file out of an asar archive without Electron.
+ * @param asarPath - absolute path to the `.asar` file
+ * @param innerPath - slash-separated path inside the archive
+ * @returns the file contents
+ */
+function readAsarFile(asarPath, innerPath) {
+  const fd = openSync(asarPath, 'r')
+  try {
+    const head = Buffer.alloc(16)
+    readSync(fd, head, 0, 16, 0)
+    const baseOffset = 8 + head.readUInt32LE(4)
+    const jsonSize = head.readUInt32LE(12)
+    const json = Buffer.alloc(jsonSize)
+    readSync(fd, json, 0, jsonSize, 16)
+    let node = JSON.parse(json.toString('utf8'))
+    for (const segment of innerPath.split('/').filter(Boolean)) {
+      node = node.files?.[segment]
+      if (node === undefined) throw new Error(`not in archive: ${innerPath}`)
+    }
+    if (node.files !== undefined) throw new Error(`is a directory: ${innerPath}`)
+    const buf = Buffer.alloc(node.size)
+    readSync(fd, buf, 0, node.size, baseOffset + Number(node.offset))
+    return buf
+  } finally {
+    closeSync(fd)
+  }
+}
+
+// ---------------------------------------------------------------------------
+// Line surgery
+// ---------------------------------------------------------------------------
+
+/** Indentation (0-based column of the first non-space char); -1 for blank lines. */
+const indentOf = (line) => (line.trim() === '' ? -1 : line.search(/\S/))
+
+/** Index of the child row `- id: <rowId>` inside a plugin list. */
+function findRow(lines, rowId) {
+  const index = lines.findIndex((line) => line.trim().startsWith(`- id: ${rowId}`))
+  if (index < 0) throw new Error(`plugin row not found: ${rowId}`)
+  return index
+}
+
+/**
+ * Iterate the direct/indirect body lines of the row starting at `start`,
+ * stopping at the next row or any line dedented to the row's own level.
+ */
+function* body(lines, start) {
+  const base = indentOf(lines[start])
+  for (let i = start + 1; i < lines.length; i += 1) {
+    const ind = indentOf(lines[i])
+    if (ind === -1) continue
+    if (ind <= base) return
+    yield i
+  }
+}
+
+/**
+ * Remove `disabled: true` from one row, turning it on.
+ * @returns a new line array
+ */
+function enableRow(lines, rowId) {
+  const start = findRow(lines, rowId)
+  for (const i of body(lines, start)) {
+    if (lines[i].trim().startsWith('disabled:')) {
+      return lines.filter((_, k) => k !== i)
+    }
+  }
+  return lines // already enabled — idempotent
+}
+
+/** Replace the base's tool-presentation selector with the concrete executor.
+ *
+ * DSH 0.2.2 carries `@deepseek-ai/dsh-tool-executor-ptc` in the base preset and
+ * deprecates `@deepseek-ai/dsh-agent-tool-presentation`. Older bases still have
+ * the selector with a `mode:` field. Both shapes are accepted here: the row is
+ * replaced in place, so the custom preset asks for the executor directly and
+ * never mounts the deprecated selector.
+ */
+function setPresentation(lines, presentation) {
+  const rowId = `tool-executor-${presentation}`
+  const rowName = `@deepseek-ai/dsh-tool-executor-${presentation}`
+  const start = lines.findIndex((line) => {
+    const text = line.trim()
+    return /^- id: tool-executor-(native|ptc)$/.test(text) || text === '- id: tool-presentation'
+  })
+  if (start < 0) throw new Error('base preset has no tool-presentation or tool-executor row')
+
+  const base = indentOf(lines[start])
+  const indent = lines[start].slice(0, base)
+  let end = start + 1
+  while (end < lines.length) {
+    const ind = indentOf(lines[end])
+    if (ind !== -1 && ind <= base) break
+    end += 1
+  }
+  const trailing = []
+  while (end > start + 1 && lines[end - 1].trim() === '') {
+    trailing.unshift(lines[end - 1])
+    end -= 1
+  }
+  const replacement = [`${indent}- id: ${rowId}`, `${indent}  name: '${rowName}'`]
+  return [...lines.slice(0, start), ...replacement, ...trailing, ...lines.slice(end)]
+}
+
+/** Extract the `plugins:` sub-tree (the row list) from a preset patch file. */
+function extractPlugins(lines) {
+  const index = lines.findIndex((line) => /^\s*plugins:\s*$/.test(line))
+  if (index < 0) throw new Error('base preset has no `plugins:` key')
+  const base = indentOf(lines[index])
+  const out = []
+  for (let i = index + 1; i < lines.length; i += 1) {
+    const ind = indentOf(lines[i])
+    if (ind !== -1 && ind <= base) break
+    out.push(lines[i])
+  }
+  if (out.every((line) => line.trim() === '')) throw new Error('base `plugins:` is empty')
+  while (out.length > 0 && out[out.length - 1].trim() === '') out.pop()
+  return out
+}
+
+// ---------------------------------------------------------------------------
+// Preset rendering
+// ---------------------------------------------------------------------------
+
+function renderPreset(spec, basePlugins) {
+  const plugins = spec.enable.reduce(enableRow, [...basePlugins])
+  const withMode = spec.presentation === null
+    ? plugins
+    : setPresentation(plugins, spec.presentation)
+  const out = [
+    `    - id: preset-${spec.id}`,
+    "      name: '@deepseek-ai/dsh-agent-preset'",
+    '      config:',
+    `        id: ${spec.id}`,
+    `        name: '${spec.name}'`,
+    `        description: '${spec.description}'`,
+    `        order: ${spec.order}`,
+    '        plugins:',
+    ...withMode,
+    ...spec.append,
+  ]
+  return out
+}
+
+// ---------------------------------------------------------------------------
+// Main
+// ---------------------------------------------------------------------------
+
+function parseArgs(argv) {
+  const opts = {
+    dryRun: false,
+    // Preserve both managed choices on routine upgrades. An existing heavy
+    // preset may be selected by the user or referenced by a plugin allowlist.
+    withHeavy: true,
+    out: undefined,
+    asar: DEFAULT_ASAR,
+    profile: DEFAULT_PROFILE,
+  }
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i]
+    if (arg === '--dry-run') opts.dryRun = true
+    else if (arg === '--with-heavy') opts.withHeavy = true
+    else if (arg === '--daily-only') opts.withHeavy = false
+    else if (arg === '--out') opts.out = argv[++i]
+    else if (arg === '--asar') opts.asar = argv[++i]
+    else if (arg === '--profile') opts.profile = argv[++i]
+    else throw new Error(`unknown argument: ${arg}`)
+  }
+  return opts
+}
+
+function buildBlock(baseLines, { withHeavy }) {
+  const basePlugins = extractPlugins(baseLines)
+  const specs = withHeavy ? [PRESETS.daily, PRESETS.heavy] : [PRESETS.daily]
+  const lines = ['- insert:']
+  for (const spec of specs) lines.push(...renderPreset(spec, basePlugins))
+  return { body: lines.join('\n'), basePlugins, specs }
+}
+
+/** Replace the marked block in place, or append one. */
+/**
+ * Whether a top-level entry is the one this script wrote.
+ *
+ * The markers only say where the block lives, and the region is not exclusively
+ * ours: DSH's settings UI appends its own entries there. So the entry to replace
+ * is identified by what it contains — the `- insert:` shell carrying preset rows
+ * — rather than by being the only thing between the markers.
+ *
+ * @param entry - the lines of one top-level entry.
+ * @returns whether it is this script's.
+ */
+function isOwnEntry(entry) {
+  return /^-\s+insert:\s*$/.test(entry[0]) && entry.some((line) => /^\s+- id: preset-/.test(line))
+}
+
+/**
+ * Replace this script's own entry inside the region, and nothing else.
+ *
+ * Everything else in the region is left exactly where it is. That is the whole
+ * point: entries the settings UI put there are neither moved nor re-emitted, so
+ * there is nothing to collect, nothing to de-duplicate, and no way for a
+ * repeated settings write to accumulate a copy per run.
+ *
+ * @param region - the text between the markers.
+ * @param body - the entry to write, without the markers.
+ * @returns the region with our entry replaced.
+ */
+function replaceOwnEntry(region, body) {
+  const lines = region.split('\n')
+  const out = []
+  let replaced = false
+  let i = 0
+  while (i < lines.length) {
+    if (!/^-\s+\S/.test(lines[i])) {
+      out.push(lines[i])
+      i += 1
+      continue
+    }
+    const start = i
+    i += 1
+    while (i < lines.length && !/^-\s+\S/.test(lines[i])) i += 1
+    const entry = lines.slice(start, i)
+    if (!replaced && isOwnEntry(entry)) {
+      // The entry as consumed includes the blank lines that followed it, since
+      // they are not the start of another entry. They separate it from whatever
+      // comes next, so they are restored — otherwise the marker that follows ends
+      // up glued to the last line of the body.
+      const trailing = []
+      while (entry.length > 0 && entry[entry.length - 1].trim() === '') trailing.unshift(entry.pop())
+      out.push(...body.split('\n'), ...trailing)
+      replaced = true
+      continue
+    }
+    out.push(...entry)
+  }
+  // No entry of ours inside — a hand-edited file, or a region whose block was
+  // removed. Writing one is the same thing the first run does.
+  if (!replaced) out.unshift(body)
+  return out.join('\n')
+}
+
+function spliceBlock(text, body) {
+  const begin = text.indexOf(BEGIN)
+  const end = text.indexOf(END)
+  if (begin >= 0 && end > begin) {
+    // `region` runs from just after the BEGIN marker to just before END, so it
+    // already carries the newline that ends the marker line and the one before
+    // END. Adding either again would leave a blank line behind on every run.
+    const region = text.slice(begin + BEGIN.length, end)
+    return text.slice(0, begin)
+      + BEGIN + replaceOwnEntry(region, body) + END
+      + text.slice(end + END.length)
+  }
+  const separator = text === '' ? '' : text.endsWith('\n') ? '\n' : '\n\n'
+  return `${text}${separator}${BEGIN}\n${body}\n${END}\n`
+}
+
+function main() {
+  const opts = parseArgs(process.argv.slice(2))
+  const baseLines = readAsarFile(opts.asar, BASE_PRESET).toString('utf8').split('\n')
+  const { body, basePlugins, specs } = buildBlock(baseLines, opts)
+  const verb = opts.dryRun ? 'would write' : 'wrote'
+  const rowCount = basePlugins.filter((line) => /^\s*- id: /.test(line)).length
+
+  if (opts.dryRun) {
+    process.stdout.write(`${BEGIN}\n${body}\n${END}\n`)
+  } else {
+    const target = opts.out ?? join(opts.profile, 'cordis.patch.yml')
+    let before
+    let missing = false
+    try {
+      before = readFileSync(target, 'utf8')
+    } catch (error) {
+      // A new profile may not have a patch yet. Only absence is an empty
+      // document; an unreadable or invalid existing target must still fail.
+      if (error.code !== 'ENOENT') throw error
+      before = ''
+      missing = true
+    }
+    // Never delete a preset this file already had. A re-run is the documented
+    // response to a DSH upgrade, and it must not be able to take away the mode a
+    // user relies on as a side effect of an argument they did not pass.
+    for (const preset of ['daily', 'heavy']) {
+      const had = before.includes(`- id: preset-${preset}`)
+      const keeps = body.includes(`- id: preset-${preset}`)
+      if (had && !keeps) {
+        throw new Error(
+          `${target} already defines preset-${preset} and this run would remove it. `
+          + 'Re-run without --daily-only to keep every preset the file has.',
+        )
+      }
+    }
+    // Do not overwrite a patch another writer created after the missing read.
+    writeFileSync(target, spliceBlock(before, body), { mode: 0o600, flag: missing ? 'wx' : 'w' })
+    process.stderr.write(`${verb} ${target}\n`)
+  }
+  process.stderr.write(
+    `base: ${BASE_PRESET} (${rowCount} top-level rows)\n`
+    + `presets: ${specs.map((s) => s.id).join(', ')}\n`,
+  )
+}
+
+main()

package/node_modules/dsh-preset-generator/src/policy.mjs

@@ -0,0 +1,17 @@
+/** Shared desktop and SDK intent. Names describe use, not separate GUI grants. */
+export const PRESETS = Object.freeze({
+  daily: Object.freeze({
+    id: 'daily', name: '日常', description: '日常编码：PTC 程序化工具调用 + Codex 委派',
+    order: 5, presentation: 'ptc', enable: Object.freeze([]), append: Object.freeze([]),
+  }),
+  heavy: Object.freeze({
+    id: 'heavy', name: '重活', description: '重活：PTC Computer/Browser CUA + Codex 委派',
+    order: 6, presentation: 'ptc', enable: Object.freeze([]), append: Object.freeze([]),
+  }),
+})
+
+/** Return a detached policy; callers cannot alter future generated presets. */
+export function presetPolicy(id) {
+  if (!Object.hasOwn(PRESETS, id)) throw new TypeError(`Unknown managed preset: ${String(id)}`)
+  return structuredClone(PRESETS[id])
+}

package/node_modules/dsh-subagent-codex-pro/CHANGELOG.md

@@ -1,6 +1,21 @@
 # Changelog
 
-## 0.9.0 (source candidate, unreleased)
+## 0.10.0 (source candidate)
+
+- Add a real DSH native settings page, a live Config schema, whole-object per-call overrides and explicit null/off semantics. Keep default inheritance distinct from off.
+- Wire desktop/PTC delegation and the Host provider through native validation, app-server configuration, child lifecycle and receipts; invalidate implicit session reuse when the effective binding changes.
+- Add a dedicated fresh, read-only subagent_codex_review tool. Review cannot become an ordinary delegation default or silently ignore prompt/schema/resume arguments.
+- Preserve native receipts in direct tools and background results, report bounded Host evidence, reject unfinished children, and retain image attachment blocks in PTC rendering.
+- Validate schemas with the actual DSH closed subset and PTC SDK generator, validate serialized settings before save, and exercise real React revisions/off/reset plus plugin-to-process cancellation and cleanup.
+
+- Add optional native capability v1 controls, verified scoped Codex configuration, V2 backend selection and explicit off across both backends.
+- Preserve full native agent tools/permissions; collect owned child states, model evidence and deduplicated baseline-aware usage without mixing observations into the model answer.
+- Add independent fresh-thread native review, correct review model/effort configuration and explicit native combination constraints.
+- Propagate child events and terminal native evidence through the existing guardian, machine supervisor and read-only recovery lifecycle.
+- Keep the current child turn authoritative under replay and late completion, including failed terminal turns.
+- Keep protocol 1, authentication and absent-native behavior compatible. See [native capabilities](docs/native-capabilities.md) for exact evidence and validation limits.
+
+## 0.9.0 (2026-11-12)
 
 - Add lifecycle v1 with awaited configuration-checked thread-ready, dispatch-intent,
   dispatch-possible and turn-accepted checkpoints. A failed ACK cannot silently

package/node_modules/dsh-subagent-codex-pro/README.md

@@ -14,12 +14,65 @@ tools.subagent_codex({
 })
 ```
 
-## 0.9.0 source candidate: durable lifecycle and recovery
+## Native capabilities in DSH and the machine API
+
+The 0.10.0 source candidate exposes native agents in the **plugin itself**:
+open the installed bundle in DSH's Plugins page and configure its **codex-pro**
+row. The page offers inheritance, explicit off, concurrency, child model/effort,
+and the V2 backend. Saving applies to the next invocation without remounting the
+plugin; an active run keeps its original snapshot. A conflicting save retains
+your draft until you explicitly reload.
+
+`subagent_codex` accepts a per-call `native` value. DSH's existing PTC executor
+automatically generates this tool's SDK; native Codex agents still use Codex's
+own harness and tools. There is no separate PTC executor to install.
+
+```js
+await tools.subagent_codex({
+  description: "Implement independent changes",
+  prompt: "Implement the task; delegate independent work when useful.",
+  native: { version: 1, agents: { enabled: true, maxConcurrentThreads: 3, backend: "v2" } },
+})
+await tools.subagent_codex_review({
+  description: "Review the branch",
+  target: { type: "baseBranch", branch: "main" },
+})
+```
+
+| Desktop native value | Meaning |
+| --- | --- |
+| Omitted | Read the current plugin default; if none is configured, leave the choice to the CLI. |
+| `null` | Explicitly turn agents off across both backends. |
+| A version-1 object | Replace the entire native default, without merging nested fields. |
+| `{version:1, agents:{enabled:false}}` | Explicit off; active controls beside `enabled:false` are rejected. |
+
+A present object without `agents` also turns agents off. An enabled override
+under `modelSelection:false` must preserve exactly the configured child model
+and effort, including whether they are omitted. Inherited settings are allowed;
+changing or clearing those model choices requires editing the plugin settings.
+Native controls never expand the configured permission policy.
+
+Native review is a **separate, explicitly requested operation**:
+`subagent_codex_review` always creates a fresh ephemeral read-only thread with
+agents off. It accepts an explicit target and never accepts an ignored prompt,
+resume id, image list or output schema. Normal delegation defaults cannot select
+review.
+
+Direct tool results keep full evidence in `native` alongside clean `content`.
+Background jobs with native evidence return a JSON string envelope containing
+`text`, `threadId` and `native`; jobs without native controls keep their
+existing text result. The Host provider reads the same live defaults and reports
+bounded native diagnostics through the official Host contract. The standalone
+machine API retains its full receipt and recovery journal. See the
+[complete contract](docs/native-capabilities.md) / [中文契约](docs/native-capabilities.zh.md)
+for settings, per-call policy, provider boundaries, evidence and verification.
+
+## 0.9.0: durable lifecycle and recovery
 
 The public machine API now exposes awaitable typed checkpoints, a private
 per-invocation journal, and read-only recovery. An independent machine supervisor
-preserves the original terminal receipt after caller death. The source candidate
-is **not an npm release**. See the [lifecycle contract](docs/machine-lifecycle.md)
+preserves the original terminal receipt after caller death. Version 0.10.0 remains
+an unpublished source candidate. See the [lifecycle contract](docs/machine-lifecycle.md)
 and [中文说明](docs/machine-lifecycle.zh.md); existing DSH tool behavior is unchanged.
 
 ## 0.8.0 integration and migration
@@ -544,7 +597,7 @@ completed commands and file changes, plus Codex's `commentary` messages — so
 | continuable / thread reuse | ✅ `session` reuses one; `thread_id` continues any |
 | `maxDepth` / persona / `toolFilter` | ❌ not applicable — see below |
 
-The three refusals above are not gaps to be filled. A Codex delegation is a **leaf**: it has no DSH child
+The three refusals above are not gaps to be filled. A Codex delegation is a **DSH leaf**: it has no DSH child
 agent, so a delegation-depth cap has nothing to cap. Its tools are Codex's own — the shell, the patch tool, its
 own MCP servers — not this harness's, so a **tool filter**, which names DSH tools, cannot describe them; restrict
 Codex through its own configuration instead. And a **persona** is a system instruction for a child agent, where

package/node_modules/dsh-subagent-codex-pro/assets/native-client.js

@@ -0,0 +1,118 @@
+/* DSH browser closure format. React is supplied by the Host module table. */
+window.__ModuleLoader__.load({
+  id: 'dsh-subagent-codex-pro',
+  factory(require) {
+    const React = require('react')
+    const h = React.createElement
+    const zh = typeof navigator !== 'undefined' && /^zh\b/i.test(navigator.language)
+    const copy = zh ? {
+      title: 'Codex 原生协作', mode: '默认能力', inherit: '继承配置', off: '全部关闭', agents: '启用原生 Agent',
+      limit: '最多并行子线程（留空使用 CLI 默认）', model: '子 Agent 默认模型（可选）', effort: '子 Agent 默认思考等级（可选）',
+      backend: '使用 v2 Agent 后端', save: '保存', reload: '重新载入', saving: '保存中…', saved: '已保存；下一次调用使用新设置。',
+      conflict: '未保存：配置可能已更新或不可写。草稿已保留；重新载入后再编辑。', unavailable: '当前配置不可用或不可写。',
+      invalidLimit: '并行数必须是大于零且小于 Number.MAX_SAFE_INTEGER 的整数。', invalidText: '子模型和思考等级不能包含 NUL，且 UTF-8 长度不能超过 65536 字节。', effective: '当前生效的 native 配置',
+      note: '每次调用可整体覆盖默认值。关闭或继承不会保存下面的 Agent 参数；独立 review 使用 subagent_codex_review 工具。模型选择关闭时，调用者不得改变配置中的子模型与思考等级。',
+      summary: '原生 Agent 默认配置与并行能力。',
+    } : {
+      title: 'Codex native collaboration', mode: 'Default capabilities', inherit: 'Inherit configuration', off: 'All off', agents: 'Enable native Agents',
+      limit: 'Maximum concurrent child threads (blank: CLI default)', model: 'Default child model (optional)', effort: 'Default child effort (optional)',
+      backend: 'Use the v2 Agent backend', save: 'Save', reload: 'Reload', saving: 'Saving…', saved: 'Saved. New settings apply to the next invocation.',
+      conflict: 'Not saved: configuration changed or is not writable. Your draft is retained; reload before editing again.', unavailable: 'Configuration is unavailable or read-only.',
+      invalidLimit: 'Concurrency must be a positive integer below Number.MAX_SAFE_INTEGER.', invalidText: 'Child model and effort cannot contain NUL or exceed 65536 UTF-8 bytes.', effective: 'Currently effective native configuration',
+      note: 'An invocation can replace these defaults as a whole. Off and inherit do not save Agent fields. Independent review uses subagent_codex_review. With model selection disabled, callers cannot change the configured child model or effort.',
+      summary: 'Native Agent defaults and concurrency.',
+    }
+    const own = (value, key) => value !== null && typeof value === 'object' && Object.prototype.hasOwnProperty.call(value, key)
+    const draftOf = state => {
+      const native = state?.value?.native
+      const agents = native && typeof native === 'object' ? native.agents : undefined
+      return {
+        mode: !own(state?.user, 'native') ? 'inherit' : native === null || agents?.enabled !== true ? 'off' : 'agents',
+        limit: agents?.maxConcurrentThreads === undefined ? '' : String(agents.maxConcurrentThreads),
+        model: agents?.defaultModel ?? '', effort: agents?.defaultEffort ?? '', backend: agents?.backend === 'v2',
+      }
+    }
+    const mutationOf = draft => {
+      if (draft.mode === 'inherit') return [{ op: 'unset', path: ['native'] }]
+      if (draft.mode === 'off') return [{ op: 'set', path: ['native'], value: null }]
+      const agents = { enabled: true }
+      if (draft.limit.trim() !== '') {
+        const n = Number(draft.limit)
+        if (!Number.isSafeInteger(n) || n < 1 || n >= Number.MAX_SAFE_INTEGER) throw new Error(copy.invalidLimit)
+        agents.maxConcurrentThreads = n
+      }
+      for (const [field, value] of [['defaultModel', draft.model.trim()], ['defaultEffort', draft.effort.trim()]]) {
+        if (value.includes('\0') || new TextEncoder().encode(value).byteLength > 65536) throw new Error(copy.invalidText)
+        if (value !== '') agents[field] = value
+      }
+      if (draft.backend) agents.backend = 'v2'
+      return [{ op: 'set', path: ['native'], value: { version: 1, agents } }]
+    }
+    function Editor({ form }) {
+      const state = form?.state
+      const [draft, setDraft] = React.useState(() => draftOf(state))
+      const [revision, setRevision] = React.useState(state?.revision)
+      const [dirty, setDirty] = React.useState(false)
+      const [busy, setBusy] = React.useState(false)
+      const [notice, setNotice] = React.useState('')
+      const mounted = React.useRef(true)
+      React.useEffect(() => { mounted.current = true; return () => { mounted.current = false } }, [])
+      React.useEffect(() => {
+        if (!dirty && !busy) { setDraft(draftOf(state)); setRevision(state?.revision) }
+      }, [state?.revision, state?.status, dirty, busy])
+      const ready = state?.status === 'ready' && state.writable && Number.isSafeInteger(state.revision)
+      const change = (field, value) => {
+        if (!ready || busy) return
+        if (!dirty) setRevision(state.revision)
+        setDraft(previous => ({ ...previous, [field]: value }))
+        setDirty(true); setNotice('')
+      }
+      const reload = () => {
+        setDraft(draftOf(state)); setRevision(state?.revision); setDirty(false); setNotice('')
+      }
+      const save = async event => {
+        event.preventDefault()
+        if (!ready || busy || !dirty) return
+        let ops
+        try { ops = mutationOf(draft) } catch (error) { setNotice(error.message); return }
+        setBusy(true); setNotice('')
+        try {
+          const accepted = await form.mutate(ops, revision)
+          if (!mounted.current) return
+          if (accepted) { setDirty(false); setNotice(copy.saved) }
+          else setNotice(copy.conflict)
+        } catch (error) {
+          if (mounted.current) setNotice(String(error?.message ?? error))
+        } finally { if (mounted.current) setBusy(false) }
+      }
+      const textField = (key, title, type = 'text') => h('label', { style: { display: 'grid', gap: 4 } }, title,
+        h('input', { type, value: draft[key], onChange: event => change(key, event.target.value), ...(type === 'number' ? { min: 1, step: 1 } : {}) }))
+      return h('form', { onSubmit: save, style: { display: 'grid', gap: 12 } },
+        h('h3', null, copy.title), h('p', null, copy.note),
+        h('fieldset', { disabled: !ready || busy, style: { display: 'grid', gap: 12, border: 0, padding: 0, margin: 0 } },
+          h('label', null, copy.mode, h('select', { value: draft.mode, onChange: event => change('mode', event.target.value) },
+            ...['inherit', 'off', 'agents'].map(value => h('option', { key: value, value }, copy[value])))),
+          draft.mode === 'agents' ? h('div', { style: { display: 'grid', gap: 10 } },
+            textField('limit', copy.limit, 'number'), textField('model', copy.model), textField('effort', copy.effort),
+            h('label', null, h('input', { type: 'checkbox', checked: draft.backend, onChange: event => change('backend', event.target.checked) }), ' ', copy.backend)) : null,
+          h('div', { style: { display: 'flex', gap: 8 } },
+            h('button', { type: 'submit', disabled: !dirty }, busy ? copy.saving : copy.save),
+            h('button', { type: 'button', onClick: reload, disabled: !dirty }, copy.reload))),
+        !ready ? h('p', { role: 'status' }, copy.unavailable) : null,
+        notice ? h('p', { role: 'status', 'aria-live': 'polite' }, notice) : null,
+        h('details', null, h('summary', null, copy.effective),
+          h('pre', { style: { whiteSpace: 'pre-wrap', overflowWrap: 'anywhere' } }, state?.value?.native === undefined ? '(CLI / inherited defaults)' : JSON.stringify(state.value.native, null, 2))))
+    }
+    function NativeSettings(props) {
+      return props.view === 'summary' ? h('span', null, copy.summary) : h(Editor, { form: props.form })
+    }
+    return {
+      inject: ['slots'],
+      apply(ctx) {
+        ctx.effect(() => ctx.slots.inject('plugins.row.config', () => ctx.slots.register({
+          name: 'plugins.row.config', key: 'dsh-subagent-codex-pro#codex-pro',
+        }, NativeSettings)), 'codex-pro native settings')
+      },
+    }
+  },
+})

package/node_modules/dsh-subagent-codex-pro/cordis.patch.yml

@@ -28,3 +28,9 @@
         #
         # `modelSelection: false` hides `model` and `reasoning_effort` from the
         # tool schema entirely.
+
+        #
+        # Native defaults are intentionally unset. Configure the codex-pro row
+        # in the Plugins page or add version: 1 / agents here. native: null
+        # explicitly disables agents; omission inherits CLI defaults.
+        # Review is always an explicit subagent_codex_review operation.