@luchenglong/cli-bridge 0.0.0-stage → 0.2.2

package/preset/agy-first/cli-bridge.mjs

@@ -0,0 +1,169 @@
+// preset/agy-first/cli-bridge.mjs — cordis-agy preset 的桥接插件（preset 宿主形态）。
+//
+// PROVIDER-CONTRACT.md §5：本模块只做「宿主接线」——构造描述符、attach、注册三工具
+// （+agy_quota）、心跳/事件发布、agy:policy 提示词段。全部执行/状态语义在
+// providers/agy.mjs + core/bridge-kit.mjs。
+//
+// 移植基线：agy-first-bridge v1.7.1 preset/agy-first/agy-first-bridge.mjs 的 apply()。
+// preset id 'cordis-agy' 由 plugin-list.mjs 单源声明（旧会话头引用，不可变）。
+//
+// 本模块是宿主进程内真 ESM：可 import node: 内建与包内相对路径；禁止 import
+// @deepseek-ai/*（解析根够不到 harness 包，历史论证 —— 契约 §8）。
+import { existsSync } from 'node:fs'
+import { fileURLToPath } from 'node:url'
+
+import defineProvider from '../../providers/agy.mjs'
+import { renderResult, renderStatus } from '../../core/bridge-kit.mjs'
+import { isBridgeEnabled } from '../../core/scheduling.mjs'
+import { PROVIDER_IDS } from '../../providers/registry.mjs'
+
+export const name = 'cli-bridge-agy'
+export const inject = ['tools', 'subprocess', 'systemPrompt', 'timer']
+
+const OUTPUT_SCHEMA = { type: 'object', additionalProperties: true }
+
+// 额度脚本定位（契约 §8）：env CLI_BRIDGE_AGY_QUOTA > AGY_QUOTA_SCRIPT（旧兼容）>
+// 本包 bin/agy-quota.mjs（相对本模块推导；存在才注入）。描述符内部同样优先读 env。
+function resolveQuotaScript() {
+  const e = process.env.CLI_BRIDGE_AGY_QUOTA || process.env.AGY_QUOTA_SCRIPT || ''
+  if (e && existsSync(e)) return e
+  // fileURLToPath 而非 .pathname：路径含空格（"DSH Desktop"）时 .pathname 给出
+  // 百分号编码（%20）导致脚本永远打不开（旧仓注释里踩过的坑，逐字保留教训）。
+  try {
+    const p = fileURLToPath(new URL('../../bin/agy-quota.mjs', import.meta.url))
+    return existsSync(p) ? p : null
+  } catch (e2) { return null }
+}
+
+export function apply(ctx) {
+  // 调度门禁（0.2.0）：用户在设置面板关掉 agy → 本形态不注册任何工具/政策段/心跳。
+  // 每次会话装配时现读文件（改设置下次会话即生效，无需重启宿主）；fail-open。
+  if (!isBridgeEnabled('agy', PROVIDER_IDS)) return
+  const subprocess = ctx.subprocess
+  const planMode = ctx.get('planMode')
+  const sandboxPolicy = ctx.get('sandboxPolicy')
+
+  const provider = defineProvider({
+    process,
+    env: process.env,
+    quotaScript: resolveQuotaScript()
+  })
+
+  // 状态快照 → 家级灯（keystone 听 'agy/status'，事件是 app 级广播）。
+  function publish(snapshot) {
+    try { ctx.emit('agy/status', { snapshot }) } catch (e) { /* ignore */ }
+  }
+
+  // 旧仓 CWD_FALLBACK 硬编码 'C:\\Users\\lcl\\Desktop\\DSH'（机器特定，他机必坏）。
+  // 新语义：显式 cwd 参数 > env AGY_MCP_CWD > 沙箱 workspaceRoot > process.cwd()。
+  function getCwdFallback() {
+    if (process.env.AGY_MCP_CWD) return String(process.env.AGY_MCP_CWD)
+    if (sandboxPolicy && typeof sandboxPolicy.workspaceRoot === 'string' && sandboxPolicy.workspaceRoot) return sandboxPolicy.workspaceRoot
+    return process.cwd()
+  }
+
+  // 旧仓 exe 解析逻辑：AGY_BIN（旧包兼容名 AGY_CLI）> PATH 查找 agy > 报错。
+  // .js/.mjs 目标经 process.execPath 包装（返回数组前缀，buildArgv 接受）。
+  async function resolveExe(backend, signal) {
+    const bin = process.env.AGY_BIN || process.env.AGY_CLI || ''
+    if (bin) {
+      if (/\.(mjs|cjs|js)$/i.test(bin)) return [process.execPath, bin]
+      return bin
+    }
+    return await subprocess.resolveExecutable('agy', undefined, signal)
+  }
+
+  // 旧 planActiveFor verbatim：DSH plan 态决定 agy 的 --mode。
+  function planActiveFor(exec) {
+    try {
+      if (planMode && exec && exec.agent) {
+        const st = planMode.get(exec.agent)
+        return !!(st && st.active)
+      }
+    } catch (e) {}
+    return false
+  }
+
+  provider.attach({ ctx, subprocess, resolveExe, getCwdFallback, planActiveFor, publish })
+
+  // 宣告 agy 优先模式：家级灯据此决定常驻显示（presetActive）。挂载即宣告 +
+  // 每 30s 心跳续租（TTL 75s，契约 §2）。
+  function announceMode() {
+    try {
+      const sid = (ctx.session && ctx.session.id) || ctx.sessionId || null
+      ctx.emit('agy/mode', sid ? { active: true, sessionId: sid } : { active: true })
+    } catch (e) { /* ignore */ }
+  }
+  announceMode()
+  try { const t = ctx.setInterval ? ctx.setInterval(announceMode, 30000) : null; if (t && ctx.effect) ctx.effect(() => () => { try { t() } catch (e) {} }) } catch (e) {}
+
+  // ── 工具注册（schema verbatim 旧 preset；执行进描述符三逻辑）──────────────────
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.run.name,
+    description: provider.tools.run.description,
+    parameters: provider.tools.run.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.runToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.continue.name,
+    description: provider.tools.continue.description,
+    parameters: provider.tools.continue.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.continueToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.status.name,
+    description: provider.tools.status.description,
+    parameters: provider.tools.status.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderStatus(value, provider) },
+    execute: (args) => provider.statusToolLogic(args)
+  }))
+  // agy_quota：preset 形态有 process/subprocess → 恒注册（描述符工厂决定）。
+  for (const et of provider.extraTools) {
+    ctx.effect(() => ctx.tools.register({
+      name: et.name,
+      description: et.description,
+      parameters: et.inputSchema,
+      output: { schema: OUTPUT_SCHEMA, render: et.render || ((args, value) => renderResult(value, provider)) },
+      execute: (args, exec) => et.logic(args, exec)
+    }))
+  }
+
+  // 旧 policy 文案 verbatim（契约 §8：提示词连续性，不许顺手改）。
+  const policyText = [
+    'agy-first execution policy (local agy CLI bridge).',
+    '',
+    'Local agent CLI "agy" handles coding tasks under full DSH control (permissions auto-approved, never prompts). By default, agy runs in the background and returns a jobId immediately; collect results via job_output and watch live progress via agy_status anytime.',
+    '',
+    'Decision table for tool selection:',
+    '- Single read/glob/grep or short (<30s) command -> Native tools.',
+    '- Implementing, editing, refactoring, debugging, builds, multi-file investigation -> agy_run.',
+    '- Follow-ups on the same topic -> agy_continue (with latest=true or conversationId; agy preserves session context).',
+    '- Final build/test verification of agy output -> Native tools.',
+    '- Image/video generation -> agy_run WITHOUT picking a model (agy selects the appropriate model).',
+    '',
+    'Context protocol (one topic = one agy conversation):',
+    '- First dispatch on a topic: provide the task with a compact CONTEXT preamble (point to paths, do not paste file contents):',
+    '  CONTEXT: 2-6 lines — goal; repo root; key paths; decisions/constraints; current state.',
+    '  TASK: the complete instruction.',
+    '- Follow-ups: call agy_continue and state only what is new.',
+    '',
+    'Execution & Fallback protocol:',
+    '- Dispatch defaults to background=true (set background=false only to block). Collect via job_output.',
+    '- On rate-limit or network failure, a confirmation dialog opens in BOTH foreground and background while in flight.',
+    '- If result has fallback=true (status FALLBACK_TO_DSH), the user chose DSH-local: finish with native tools and NEVER call agy again for this task.',
+    '- If status is QUOTA_BLOCKED (Gemini 5h pool <10%), finish natively. Never loop agy calls; never ask agy to call back into DSH.',
+    '',
+    'Model selection & Quota guard:',
+    '- The Gemini 5h pool (<10% threshold) is enforced automatically as the sole per-task gate; do NOT pre-call agy_quota before every dispatch. Call agy_quota only when you want to compare model availability.',
+    '- Use Gemini pool (gemini-*) or utility models (tab_*, chat_*). Never pass Claude or GPT (3p) models.',
+    '- Weekly quota is NOT a per-task gate: low weekly quota only informs future planning, never aborts current work.'
+  ].join('\n')
+
+  ctx.effect(() => ctx.systemPrompt.section({
+    name: 'agy:policy',
+    order: (typeof ctx.systemPrompt.getSectionOrder === 'function' ? ctx.systemPrompt.getSectionOrder('TOOL_SUBAGENT') : 2800) + 10,
+    text: policyText
+  }))
+}

package/preset/agy-first/plugin-list.mjs

@@ -0,0 +1,26 @@
+// preset/agy-first/plugin-list.mjs — cordis-agy 预设的单源插件清单（PROVIDER-CONTRACT §5）。
+//
+// = 官方 standard 基线（standard-base.mjs）+ agy 桥接行 + persona 差异（旧仓
+// preset-cordis-agy 的 persona 文案 verbatim）。preset id 'cordis-agy' 是旧会话头
+// 引用（agy-first-bridge v1.7.1 cordis.patch.yml），不可变。
+import { standardPluginRows, bridgeRow } from '../standard-base.mjs'
+
+export const meta = {
+  id: 'cordis-agy',
+  name: 'AGY 执行代理',
+  description: '完整编码 Agent（standard 全部能力），额外提供 agy_run/agy_continue 工具并注入"agy 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 agy CLI（DSH 完全控制、agy 无提示改文件、默认后台执行），原生工具仅用于只读查询与最终验证。',
+  order: 10
+}
+
+export function buildPlugins(deps) {
+  const rows = standardPluginRows()
+  // 旧仓 agent.cordis.yml persona 段 verbatim（v1.5.15：dsh-persona 要求
+  // prefix 必填 + suffix 可选；旧单 text: 字段被 schema 拒绝）。
+  const persona = rows.find((r) => r.id === 'persona')
+  if (persona && persona.config) {
+    persona.config.prefix = 'You are a coding agent powered by the {{model}} model.'
+    persona.config.suffix = 'Your working directory is {{cwd}}.'
+  }
+  rows.push(bridgeRow('agy', deps && deps.bridgeName))
+  return rows
+}

package/preset/agy-first/preset.yml

@@ -0,0 +1,3 @@
+name: AGY 执行代理
+description: '完整编码 Agent（standard 全部能力），额外提供 agy_run/agy_continue 工具并注入"agy 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 agy CLI（DSH 完全控制、agy 无提示改文件、默认后台执行），原生工具仅用于只读查询与最终验证。'
+order: 10

package/preset/codebuddy-first/agent.cordis.yml

@@ -0,0 +1,141 @@
+# 生成物 — 由 node scripts/build.mjs 从 preset/codebuddy-first/plugin-list.mjs 生成，勿手改。
+# legacy 目录形态（$DSH_HOME/.agent-presets/codebuddy-first/）；新 DSH 走声明制
+# （home-plugin/cli-bridge-indicator/lib/preset-declarations.mjs 直接 import 同一源）。
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    suffix: 'Your working directory is {{cwd}}.'
+    prefix: 'You are a coding agent powered by the {{model}} model.'
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+- id: tool-bash
+  name: '@deepseek-ai/dsh-tool-bash'
+  disabled: !!js 'process.platform === ''win32'''
+- id: tool-pwsh
+  name: '@deepseek-ai/dsh-tool-pwsh'
+  disabled: !!js 'process.platform !== ''win32'''
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+- id: tool-jobs
+  name: '@deepseek-ai/dsh-tool-jobs'
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+- id: command-goal
+  name: '@deepseek-ai/dsh-command-goal'
+- id: tool-goal
+  name: '@deepseek-ai/dsh-tool-goal'
+- id: planning
+  name: 'cordis:group'
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+          You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+          Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+          The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+          Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+          Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+          When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+- id: compaction
+  name: 'cordis:group'
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+- id: delegation
+  name: 'cordis:group'
+  group: true
+  isolate:
+    workflowEngine: true
+  config:
+    - id: tool-subagent-control
+      name: '@deepseek-ai/dsh-tool-subagent-control'
+    - id: tool-subagent-list-agents
+      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+    - id: tool-subagent
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        modelSelectionSettings: true
+        backgroundMode: continuable
+    - id: tool-subagent-fork
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+        backgroundMode: continuable
+    - id: tool-subagent-codex
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: codex
+        toolName: subagent_codex
+        backgroundMode: one-shot
+        maxDepth: provider-managed
+    - id: tool-subagent-claude-code
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: claude-code
+        toolName: subagent_claude_code
+        backgroundMode: one-shot
+        maxDepth: provider-managed
+    - id: workflow-ptc
+      name: '@deepseek-ai/dsh-workflow-ptc'
+      config:
+        provider: spawn
+    - id: tool-workflow
+      name: '@deepseek-ai/dsh-tool-workflow'
+    - id: tool-ralph
+      name: '@deepseek-ai/dsh-tool-ralph'
+      disabled: true
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+- id: tool-web
+  name: '@deepseek-ai/dsh-tool-web'
+  config:
+    fetch: true
+    searchTimeoutMs: 60000
+- id: present
+  name: '@deepseek-ai/dsh-tool-present'
+- id: tool-plugin-manager
+  name: '@deepseek-ai/dsh-plugin-manager/tools'
+  disabled: true
+- id: cli-bridge-codebuddy
+  name: '@luchenglong/cli-bridge/preset-codebuddy'

package/preset/codebuddy-first/cli-bridge.mjs

@@ -0,0 +1,188 @@
+// preset/codebuddy-first/cli-bridge.mjs — codebuddy-first preset 的桥接插件（preset 宿主形态）。
+//
+// PROVIDER-CONTRACT.md §5：本模块只做「宿主接线」——构造描述符、attach、注册三工具、
+// 心跳/事件发布、codebuddy:policy 提示词段。全部执行/状态语义在
+// providers/codebuddy.mjs + core/bridge-kit.mjs。
+//
+// 移植基线：codebuddy-first-bridge v1.6.x preset/codebuddy-first/codebuddy-first-bridge.mjs
+// 的 apply()：resolveExe 三面候选链、CWD_FALLBACK、心跳（SELF_SESSION_ID 兜底通道 +
+// 30s 续租 + dispose 撤销）、noteSession、systemPrompt order 5 —— 全部 verbatim。
+//
+// 沙箱论证：本插件只注册工具与提示段，不发服务、不开端口、不写盘（设置文件由
+// 家级指示灯路由单一写者负责）——无需 isolate 包装（旧包同款结论，逐字保留）。
+//
+// 本模块是宿主进程内真 ESM：可 import node: 内建与包内相对路径；禁止 import
+// @deepseek-ai/*（解析根够不到 harness 包，历史论证 —— 契约 §8）。
+import fs from 'node:fs'
+import path from 'node:path'
+
+import defineProvider from '../../providers/codebuddy.mjs'
+import { renderResult, renderStatus } from '../../core/bridge-kit.mjs'
+import { isBridgeEnabled } from '../../core/scheduling.mjs'
+import { PROVIDER_IDS } from '../../providers/registry.mjs'
+// 统一设置文件（keystone 单源：含旧 codebuddy-bridge-settings.json 字段级迁移）。
+import { readSettingsFile, effectiveSettings } from '../../home-plugin/cli-bridge-indicator/lib/settings.mjs'
+
+export const name = 'cli-bridge-codebuddy'
+export const inject = ['tools', 'subprocess', 'systemPrompt', 'timer']
+
+const OUTPUT_SCHEMA = { type: 'object', additionalProperties: true }
+// 旧 preset CWD_FALLBACK verbatim（机器默认路径，Lead 定案保留：动态解析工作目录
+// 只在 keystone indicator 侧做，preset 形态行为与旧包逐字一致）。
+const CWD_FALLBACK = 'C:\\Users\\lcl\\Desktop\\codebuddy-bridge'
+
+export function apply(ctx, config) {
+  // 调度门禁（0.2.0）：用户关掉 codebuddy → 本形态不注册工具/政策段/心跳；fail-open。
+  if (!isBridgeEnabled('codebuddy', PROVIDER_IDS)) return
+  const subprocess = ctx.subprocess
+  const planMode = ctx.get('planMode')
+  const sandboxPolicy = ctx.get('sandboxPolicy')
+  const cfg = config || {}
+
+  const provider = defineProvider({ process, env: process.env, nodeFs: fs, nodePath: path })
+
+  // 设置读数：每次现读统一文件（面板保存即时生效，无需重启）；文件缺失/损坏 →
+  // effectiveSettings（默认值 + 旧包文件字段级回退）。行 config 只做最后兜底。
+  function codebuddySettings() {
+    try {
+      const snap = readSettingsFile() || effectiveSettings()
+      const part = snap && snap.codebuddy
+      if (part && typeof part === 'object') return part
+    } catch (e) { /* 无 fs / 定位失败：落到行 config */ }
+    return provider.normalizeSettings(cfg)
+  }
+
+  // 状态快照 → 家级灯（keystone 听 'codebuddy/status'，事件是 app 级广播；旧 payload 形态）。
+  function publish(snapshot) {
+    try { ctx.emit('codebuddy/status', { snapshot }) } catch (e) { /* ignore */ }
+  }
+
+  // 旧 preset resolveExe verbatim（L265-284）：三个后端各有独立安装包，明确报错
+  // 而不跨面回退（各产品面登录互斥，混用会污染同一会话存储）。
+  //   codebuddy    npm 全局包 @tencent-ai/codebuddy-code：PATH → CODEBUDDY_BIN →
+  //                npm 全局 bin（.cmd shim 走 node+bin，规避 CVE-2024-27980 后
+  //                spawn .cmd/.bat 的 EINVAL）。
+  //   codebuddy-en WorkBuddy AI 国际版自带 CLI：CODEBUDDY_EN_BIN → C:\Program Files\WorkBuddyAI\…
+  //   workbuddy    WorkBuddy 国内版桌面自带 CLI：WORKBUDDY_BIN → C:\Program Files\WorkBuddy\…
+  async function resolveExe(backend, execSignal) {
+    const nodeExe = process.execPath || 'node'
+    if (backend === 'workbuddy') {
+      const wbBin = process.env.WORKBUDDY_BIN || 'C:\\Program Files\\WorkBuddy\\resources\\app.asar.unpacked\\cli\\bin\\codebuddy'
+      return [nodeExe, wbBin]
+    }
+    if (backend === 'codebuddy-en') {
+      const enBin = process.env.CODEBUDDY_EN_BIN || 'C:\\Program Files\\WorkBuddyAI\\resources\\app.asar.unpacked\\cli\\bin\\codebuddy'
+      return [nodeExe, enBin]
+    }
+    try {
+      const exe = await subprocess.resolveExecutable('codebuddy', undefined, execSignal)
+      // npm 安装的 codebuddy 只有 .cmd shim，Node 直接 spawn .cmd/.bat 会 EINVAL
+      // （CVE-2024-27980 加固后）；命中 .cmd/.bat 时改走 node + bin 脚本。
+      if (!/\.(cmd|bat)$/i.test(exe)) return exe
+    } catch (e) {}
+    // 回退：node 直接跑 npm 全局 bin 脚本（codebuddy 通常不在 DSH 进程 PATH 里）。
+    const binPath = process.env.CODEBUDDY_BIN || (process.env.APPDATA || 'C:\\Users\\lcl\\AppData\\Roaming') + '\\npm\\node_modules\\@tencent-ai\\codebuddy-code\\bin\\codebuddy'
+    return [nodeExe, binPath]
+  }
+
+  // 旧 planActiveFor verbatim：DSH plan 态决定 codebuddy 的 --permission-mode。
+  function planActiveFor(exec) {
+    try {
+      if (planMode && exec && exec.agent) {
+        const st = planMode.get(exec.agent)
+        return !!(st && st.active)
+      }
+    } catch (e) {}
+    return false
+  }
+
+  provider.attach({
+    ctx,
+    subprocess,
+    resolveExe,
+    getCwdFallback: function () {
+      return (sandboxPolicy && typeof sandboxPolicy.workspaceRoot === 'string' && sandboxPolicy.workspaceRoot) || CWD_FALLBACK
+    },
+    planActiveFor,
+    defaultMode: 'auto',
+    getSettings: codebuddySettings,
+    getPreferredBackend: function () {
+      const s = codebuddySettings()
+      return (s && s.preferredBackend) || provider.defaultBackend
+    },
+    publish
+  })
+
+  // ── 模式宣告心跳（旧 preset verbatim）─────────────────────────────────────────
+  // 本会话身份（兜底通道）：host 侧首选自己实时枚举 agents.list() +
+  // agentPresets.composedPreset() 判定哪些会话是 codebuddy-first；这里的上报是
+  // 那条通道失灵时的备份。apply() 阶段 agent 通常尚未就位（preset 正在被组合
+  // 进去），所以：① 先试 agents.currentInitiator()；② 拿不到就等第一次工具调用，
+  // 从 exec.agent 补记。全程防御：取不到就退化为不带 sessionId 的旧全局语义。
+  let SELF_SESSION_ID = null
+  function sessionIdOf(agent) {
+    if (!agent) return null
+    const sid = agent.id || (agent.session && agent.session.id)
+    return typeof sid === 'string' && sid ? sid : null
+  }
+  try {
+    const agents = typeof ctx.get === 'function' ? ctx.get('agents') : undefined
+    if (agents && typeof agents.currentInitiator === 'function') SELF_SESSION_ID = sessionIdOf(agents.currentInitiator())
+  } catch (e) { }
+
+  function announceMode(active) {
+    try {
+      const payload = { active: active !== false }
+      if (SELF_SESSION_ID) payload.sessionId = SELF_SESSION_ID
+      ctx.emit('codebuddy/mode', payload)
+    } catch (e) { }
+  }
+  // 第一次工具调用时补记会话身份（apply 阶段拿不到的情况）。
+  function noteSession(exec) {
+    if (SELF_SESSION_ID) return
+    try {
+      const sid = sessionIdOf(exec && exec.agent)
+      if (sid) { SELF_SESSION_ID = sid; announceMode(true) }
+    } catch (e) { }
+  }
+  announceMode(true)
+  try {
+    const t = ctx.setInterval ? ctx.setInterval(function () { announceMode(true) }, 30000) : null
+    if (ctx.effect) ctx.effect(() => () => {
+      try { if (t) t() } catch (e) { }
+      announceMode(false)
+    })
+  } catch (e) { }
+
+  // ── 工具注册（schema 经描述符 verbatim；执行进描述符三逻辑）───────────────────
+  const runTool = {
+    name: provider.tools.run.name,
+    description: provider.tools.run.description,
+    parameters: provider.tools.run.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute(args, exec) { noteSession(exec); return provider.runToolLogic(args, exec) }
+  }
+  const continueTool = {
+    name: provider.tools.continue.name,
+    description: provider.tools.continue.description,
+    parameters: provider.tools.continue.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute(args, exec) { noteSession(exec); return provider.continueToolLogic(args, exec) }
+  }
+  const statusTool = {
+    name: provider.tools.status.name,
+    description: provider.tools.status.description,
+    parameters: provider.tools.status.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderStatus(value, provider) },
+    execute(args) { return provider.statusToolLogic(args) }
+  }
+  for (const tool of [runTool, continueTool, statusTool]) ctx.tools.register(tool)
+
+  // 提示词策略段（旧 preset verbatim：name 'codebuddy:policy'，order 5，
+  // POLICY_TEXT 全文在 providers/codebuddy.mjs —— 提示词连续性红线）。
+  ctx.effect(() => ctx.systemPrompt.section({
+    name: 'codebuddy:policy',
+    order: 5,
+    text: provider.policyText
+  }))
+}

package/preset/codebuddy-first/plugin-list.mjs

@@ -0,0 +1,20 @@
+// preset/codebuddy-first/plugin-list.mjs — codebuddy-first 预设的单源插件清单（PROVIDER-CONTRACT §5）。
+//
+// = 官方 standard 基线（standard-base.mjs）+ codebuddy 桥接行；persona 保持 standard
+// 默认（旧包 preset/codebuddy-first/agent.cordis.yml 就没有 persona 定制 —— 不顺手加）。
+// preset id 'codebuddy-first' 是旧会话头引用（codebuddy-first-bridge 的
+// preset.yml name: CodeBuddy-First 执行代理），不可变。
+import { standardPluginRows, bridgeRow } from '../standard-base.mjs'
+
+export const meta = {
+  id: 'codebuddy-first',
+  name: 'CodeBuddy-First 执行代理',
+  description: '完整编码 Agent（standard 全部能力），额外提供 codebuddy_run/codebuddy_continue 工具并注入"codebuddy 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 codebuddy CLI（DSH 完全控制、codebuddy 无提示改文件），原生工具仅用于只读查询与最终验证。',
+  order: 10
+}
+
+export function buildPlugins(deps) {
+  const rows = standardPluginRows()
+  rows.push(bridgeRow('codebuddy', deps && deps.bridgeName))
+  return rows
+}

package/preset/codebuddy-first/preset.yml

@@ -0,0 +1,3 @@
+name: CodeBuddy-First 执行代理
+description: '完整编码 Agent（standard 全部能力），额外提供 codebuddy_run/codebuddy_continue 工具并注入"codebuddy 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 codebuddy CLI（DSH 完全控制、codebuddy 无提示改文件），原生工具仅用于只读查询与最终验证。'
+order: 10