@luchenglong/cli-bridge 0.2.8 → 0.2.10

package/preset/codex-first/agent.cordis.yml

@@ -0,0 +1,136 @@
+# 生成物 — 由 node scripts/build.mjs 从 preset/codex-first/plugin-list.mjs 生成，勿手改。
+# legacy 目录形态（$DSH_HOME/.agent-presets/codex-first/）；新 DSH 走声明制
+# （home-plugin/cli-bridge-indicator/lib/preset-declarations.mjs 直接 import 同一源）。
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    prefix: 'You are a coding agent powered by the {{model}} model.'
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+- id: tool-bash
+  name: '@deepseek-ai/dsh-tool-bash'
+  disabled: !!js 'process.platform === ''win32'''
+- id: tool-pwsh
+  name: '@deepseek-ai/dsh-tool-pwsh'
+  disabled: !!js 'process.platform !== ''win32'''
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+- id: tool-jobs
+  name: '@deepseek-ai/dsh-tool-jobs'
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+- id: command-goal
+  name: '@deepseek-ai/dsh-command-goal'
+- id: tool-goal
+  name: '@deepseek-ai/dsh-tool-goal'
+- id: planning
+  name: 'cordis:group'
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+          You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+          Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+          The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+          Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+          Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+          When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+- id: compaction
+  name: 'cordis:group'
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+- id: delegation
+  name: 'cordis:group'
+  group: true
+  isolate:
+    workflowEngine: true
+  config:
+    - id: tool-subagent-control
+      name: '@deepseek-ai/dsh-tool-subagent-control'
+    - id: tool-subagent-list-agents
+      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+    - id: tool-subagent
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        modelSelectionSettings: true
+    - id: tool-subagent-fork
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+    - id: tool-subagent-codex
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: codex
+        toolName: subagent_codex
+        maxDepth: provider-managed
+    - id: tool-subagent-claude-code
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: claude-code
+        toolName: subagent_claude_code
+        maxDepth: provider-managed
+    - id: workflow-ptc
+      name: '@deepseek-ai/dsh-workflow-ptc'
+      config:
+        provider: spawn
+    - id: tool-workflow
+      name: '@deepseek-ai/dsh-tool-workflow'
+    - id: tool-ralph
+      name: '@deepseek-ai/dsh-tool-ralph'
+      disabled: true
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+- id: tool-web
+  name: '@deepseek-ai/dsh-tool-web'
+  config:
+    fetch: true
+    searchTimeoutMs: 60000
+- id: present
+  name: '@deepseek-ai/dsh-tool-present'
+- id: tool-plugin-manager
+  name: '@deepseek-ai/dsh-plugin-manager/tools'
+  disabled: true
+- id: cli-bridge-codex
+  name: '@luchenglong/cli-bridge/preset-codex'

package/preset/codex-first/cli-bridge.mjs

@@ -0,0 +1,160 @@
+// preset/codex-first/cli-bridge.mjs — codex-first preset 的桥接插件（preset 宿主形态）。
+//
+// PROVIDER-CONTRACT.md §5：本模块只做「宿主接线」——构造描述符、attach、注册三工具
+// （+ codex_models）、心跳/事件发布、codex:policy 提示词段。全部执行/状态语义在
+// providers/codex.mjs + core/bridge-kit.mjs。
+//
+// preset id 'codex-first' 由 plugin-list.mjs 单源声明。
+//
+// 本模块是宿主进程内真 ESM：可 import node: 内建与包内相对路径；禁止 import
+// @deepseek-ai/*（解析根够不到 harness 包，历史论证 —— 契约 §8）。
+import { existsSync } from 'node:fs'
+
+import defineProvider, { codexResolveExePrefix, codexExeCandidates } from '../../providers/codex.mjs'
+import { codexShimRejectReason } from '../../providers/codex-cli.mjs'
+import { renderResult, renderStatus } from '../../core/bridge-kit.mjs'
+import { isBridgeEnabled } from '../../core/scheduling.mjs'
+import { PROVIDER_IDS } from '../../providers/registry.mjs'
+
+export const name = 'cli-bridge-codex'
+export const inject = ['tools', 'subprocess', 'systemPrompt', 'timer']
+
+const OUTPUT_SCHEMA = { type: 'object', additionalProperties: true }
+
+export function apply(ctx) {
+  // 调度门禁（0.2.0）：用户在设置面板关掉 codex → 本形态不注册任何工具/政策段/心跳。
+  // 每次会话装配时现读文件（改设置下次会话即生效，无需重启宿主）；fail-open。
+  if (!isBridgeEnabled('codex', PROVIDER_IDS)) return
+  const subprocess = ctx.subprocess
+  const sandboxPolicy = ctx.get('sandboxPolicy')
+
+  const provider = defineProvider({ process, env: process.env })
+
+  // 状态快照 → 家级灯（keystone 听 'codex/status'，事件是 app 级广播）。
+  function publish(snapshot) {
+    try { ctx.emit('codex/status', { snapshot }) } catch (e) { /* ignore */ }
+  }
+
+  // cwd 兜底：显式 cwd 参数 > env CODEX_BRIDGE_CWD > 沙箱 workspaceRoot > process.cwd()。
+  //（不用 CODEX_HOME —— 那是 codex 自己的配置目录，语义不同，误用会把工作区指到 ~/.codex。）
+  function getCwdFallback() {
+    if (process.env.CODEX_BRIDGE_CWD) return String(process.env.CODEX_BRIDGE_CWD)
+    if (sandboxPolicy && typeof sandboxPolicy.workspaceRoot === 'string' && sandboxPolicy.workspaceRoot) return sandboxPolicy.workspaceRoot
+    return process.cwd()
+  }
+
+  // exe 解析优先级（与描述符同一套）：面板 binPath（getSettings）> CODEX_BIN >
+  // CODEX_CLI > CODEX_CLI_PATH > PATH 里的 codex。.js/.mjs 目标经 node 包装。
+  const binPathSetting = (() => {
+    try {
+      const s = ctx.get && ctx.get('cliBridgeSettings')
+      const v = s && s.codex ? s.codex.binPath : ''
+      return typeof v === 'string' ? v : ''
+    } catch (e) { return '' }
+  })()
+  const candidates = codexResolveExePrefix(process.env, binPathSetting)
+
+  async function resolveExe(backend, signal) {
+    let bare = ''
+    for (const c of candidates) {
+      // .cmd/.bat shim 直接给出可行动错误：无 shell 时 spawn 不解析它，走 shell 又会
+      // 二次解释 prompt —— 与其抛难懂的 EINVAL，不如在解析阶段说清楚。
+      const shim = codexShimRejectReason(c)
+      if (shim) throw new Error(shim)
+      if (/\.(mjs|cjs|js)$/i.test(c)) return [process.execPath, c]
+      if (/[\\/]/.test(c)) { try { if (existsSync(c)) return c } catch (e) { /* 继续下一个候选 */ } continue }
+      if (!bare) bare = c
+    }
+    // PATH 兜底：第一个裸名候选（CODEX_BIN 也可能是裸名，如 'codex-alt'）。
+    return await subprocess.resolveExecutable(bare || codexExeCandidates(process.env).slice(-1)[0], undefined, signal)
+  }
+
+  provider.attach({ ctx, subprocess, resolveExe, getCwdFallback, publish })
+
+  // 宣告 codex 优先模式：家级灯据此决定常驻显示（presetActive）。挂载即宣告 +
+  // 每 30s 心跳续租（TTL 75s，契约 §2）。
+  function announceMode() {
+    try {
+      const sid = (ctx.session && ctx.session.id) || ctx.sessionId || null
+      ctx.emit('codex/mode', sid ? { active: true, sessionId: sid } : { active: true })
+    } catch (e) { /* ignore */ }
+  }
+  announceMode()
+  try {
+    const t = ctx.setInterval ? ctx.setInterval(announceMode, 30000) : null
+    if (t && ctx.effect) ctx.effect(() => () => { try { t() } catch (e) { /* ignore */ } })
+  } catch (e) { /* 心跳尽力而为 */ }
+
+  // ── 工具注册（执行进描述符三逻辑）────────────────────────────────────────────
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.run.name,
+    description: provider.tools.run.description,
+    parameters: provider.tools.run.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.runToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.continue.name,
+    description: provider.tools.continue.description,
+    parameters: provider.tools.continue.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.continueToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.status.name,
+    description: provider.tools.status.description,
+    parameters: provider.tools.status.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderStatus(value, provider) },
+    execute: (args) => provider.statusToolLogic(args)
+  }))
+  for (const et of provider.extraTools || []) {
+    ctx.effect(() => ctx.tools.register({
+      name: et.name,
+      description: et.description,
+      parameters: et.inputSchema,
+      output: { schema: OUTPUT_SCHEMA, render: et.render || ((args, value) => renderResult(value, provider)) },
+      execute: (args, exec) => et.logic(args, exec)
+    }))
+  }
+
+  // policy 段（新 provider 无旧文案可 verbatim 继承；按实测 CLI 能力撰写）。
+  const policyText = [
+    'codex-first execution policy (local OpenAI Codex CLI bridge).',
+    '',
+    'Local agent CLI "codex" handles coding tasks under full DSH control. Every dispatch is `codex exec --json --skip-git-repo-check` (never interactive, so approvals cannot block). By default codex runs in the background and returns a jobId immediately; collect results via job_output and watch live progress via codex_status anytime.',
+    '',
+    'Decision table for tool selection:',
+    '- Single read/glob/grep or short (<30s) command -> Native tools.',
+    '- Implementing, editing, refactoring, debugging, builds, multi-file investigation -> codex_run.',
+    '- Follow-ups on the same topic -> codex_continue (with latest=true or sessionId; codex keeps the thread).',
+    '- Final build/test verification of codex output -> Native tools.',
+    '',
+    'Context protocol (one topic = one codex thread):',
+    '- First dispatch on a topic: provide the task with a compact CONTEXT preamble (point to paths, do not paste file contents):',
+    '  CONTEXT: 2-6 lines — goal; repo root; key paths; decisions/constraints; current state.',
+    '  TASK: the complete instruction.',
+    '- Follow-ups: call codex_continue and state only what is new.',
+    '',
+    'Sandbox & approval:',
+    '- mode=auto follows the DSH plan state: plan -> read-only sandbox, otherwise workspace-write.',
+    '- codex exec has NO -a/--ask-for-approval flag; the bridge sets approval policy through -c approval_policy="…" only when the settings panel defines one. On resume the sandbox also goes through -c ("codex exec resume" has no -s and no -C).',
+    '- If a run fails because the sandbox denied an operation, raise sandboxMode (workspace-write -> danger-full-access) instead of looping retries.',
+    '',
+    'Execution & Fallback protocol:',
+    '- Dispatch defaults to background=true (set background=false only to block). Collect via job_output.',
+    '- On rate-limit or network failure, a confirmation dialog opens in BOTH foreground and background while in flight.',
+    '- If result has fallback=true (status FALLBACK_TO_DSH), the user chose DSH-local: finish with native tools and NEVER call codex again for this task.',
+    '- Never loop codex calls; never ask codex to call back into DSH.',
+    '',
+    'Models & credentials:',
+    '- Run codex_models (default source=live) to see what the configured endpoint really serves; ~/.codex/models.json and model_catalog_json are local catalog metadata, NOT a claim about server availability.',
+    '- Omit model unless you have a reason: codex then uses the CLI Bridge settings default, or ~/.codex/config.toml model.',
+    '- Credentials belong to codex (~/.codex/config.toml model_providers.<name>, auth.json): on auth failures tell the user to run `codex login` or fix the provider block; do not retry in a loop.'
+  ].join('\n')
+
+  ctx.effect(() => ctx.systemPrompt.section({
+    name: 'codex:policy',
+    order: (typeof ctx.systemPrompt.getSectionOrder === 'function' ? ctx.systemPrompt.getSectionOrder('TOOL_SUBAGENT') : 2800) + 10,
+    text: policyText
+  }))
+}

package/preset/codex-first/plugin-list.mjs

@@ -0,0 +1,28 @@
+// preset/codex-first/plugin-list.mjs — codex-first 预设的单源插件清单（PROVIDER-CONTRACT §5）。
+//
+// = 官方 standard 基线（standard-base.mjs）+ codex 桥接行 + persona 差异。
+// preset id 直接用 'codex-first'（与 opencode-first 同构）：本包新增的 provider 无旧包
+// 兼容包袱，不套用 agy 的 cordis-agy / mimo 的 cordis-mimo 旧前缀。
+import { standardPluginRows, bridgeRow } from '../standard-base.mjs'
+
+export const meta = {
+  id: 'codex-first',
+  name: 'Codex 执行代理',
+  description: '完整编码 Agent（standard 全部能力），额外提供 codex_run/codex_continue 工具并注入"Codex 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 OpenAI Codex CLI（DSH 完全控制、非交互不弹审批、默认后台执行），原生工具仅用于只读查询与最终验证。',
+  order: 50
+}
+
+export function buildPlugins(deps) {
+  const rows = standardPluginRows()
+  // persona 段：prefix 与其它 preset 同构（dsh-persona 要求 prefix 必填）。
+  // 不设置 suffix —— DSH 只注册 provider/model 两个模板变量，工作目录由
+  // working-directory 服务以「不插值」的用户上下文提供；写 {{cwd}} 会让本预设整轮
+  // 组装失败（2026-10-18 实测，别重蹈覆辙）。
+  const persona = rows.find((r) => r.id === 'persona')
+  if (persona && persona.config) {
+    persona.config.prefix = 'You are a coding agent powered by the {{model}} model.'
+    delete persona.config.suffix
+  }
+  rows.push(bridgeRow('codex', deps && deps.bridgeName))
+  return rows
+}

package/preset/codex-first/preset.yml

@@ -0,0 +1,3 @@
+name: Codex 执行代理
+description: '完整编码 Agent（standard 全部能力），额外提供 codex_run/codex_continue 工具并注入"Codex 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 OpenAI Codex CLI（DSH 完全控制、非交互不弹审批、默认后台执行），原生工具仅用于只读查询与最终验证。'
+order: 50

package/providers/claude-exe.mjs

@@ -0,0 +1,112 @@
+// providers/claude-exe.mjs — claude 可执行文件探测/包装（无宿主依赖的纯逻辑片）。
+//
+// 从 providers/claude.mjs 拆出，让两个文件都留在 600 行红线内（规则 §26）。
+// scripts/build.mjs 会把 providers/claude-*.mjs 按文件名字典序内联进 dynamic 沙箱的
+// 同一个作用域，所以沙箱里这些函数天然可见；ESM 形态走本文件的 import。
+// ⚠️ 注释里绝不写出口令标记字面量（build 全局替换会把注释劈开 → 生成物语法崩）。
+//
+// 本机实测事实（Claude Code 2.0.76，Windows）：
+//   • PATH 上的 `claude` 是原生 exe（.cherrystudio\bin\claude.exe）；官方原生 installer
+//     给 claude.exe，npm 全局安装给 claude.cmd + node_modules/@anthropic-ai/claude-code/cli.js。
+//   • Windows 上 Node 的 spawn 不能直接执行 .cmd/.bat（CreateProcess 只补 .exe），
+//     必须 shell:true；.js/.mjs 目标必须经 node 包装。这两条决定下面的 splitExeSpec。
+
+// 沙箱可能没有 fs/path：一律经 getBuiltinModule + typeof 守卫读取，读不到就退保守值。
+function claudeBuiltin(name) {
+  try {
+    const proc = globalThis.process
+    return (proc && typeof proc.getBuiltinModule === 'function') ? proc.getBuiltinModule(name) : null
+  } catch (e) { return null }
+}
+
+// PATH 兜底名（Windows 由 CreateProcess 自动补 .exe）。
+export const CLAUDE_EXE_BASENAME = 'claude'
+
+// 用户可以显式指定可执行文件的既有环境变量（按优先级）。
+export const CLAUDE_BIN_ENV_VARS = ['CLAUDE_BIN', 'CLAUDE_CLI', 'CLAUDE_CODE_BIN']
+
+// 已知的本地安装位置（native installer / 官方 local 目录）；存在才收，不做版本猜测。
+const CLAUDE_LOCAL_REL = [
+  ['.claude', 'local', 'claude.exe'],
+  ['.claude', 'local', 'claude'],
+  ['.local', 'bin', 'claude.exe'],
+  ['.local', 'bin', 'claude']
+]
+
+/**
+ * 把「一个可执行文件路径」拆成 spawn 需要的形态。
+ * .js/.cjs/.mjs → 经当前 node 启动（测试 fixture 与 npm 安装的 cli.js 都是这形态）；
+ * .cmd/.bat    → 只能 shell 执行（Windows 限制），调用方必须带 shell:true；
+ * 其余         → 直接执行（原生 exe / PATH 名字）。
+ * @param {string} exe
+ * @returns {{cmd: string, prefixArgs: string[], shell: boolean, kind: string}}
+ */
+export function splitExeSpec(exe) {
+  const s = String(exe || '')
+  if (/\.(mjs|cjs|js)$/i.test(s)) {
+    const proc = globalThis.process
+    const node = (proc && proc.execPath) ? proc.execPath : 'node'
+    return { cmd: node, prefixArgs: [s], shell: false, kind: 'node' }
+  }
+  if (/\.(cmd|bat)$/i.test(s)) return { cmd: s, prefixArgs: [], shell: true, kind: 'shell' }
+  return { cmd: s, prefixArgs: [], shell: false, kind: 'binary' }
+}
+
+/** shell:true 下的命令行拼装（只用于参数集合固定的探测调用，不拼装用户 prompt）。 */
+export function quoteShellArg(a) {
+  const s = String(a)
+  return /[\s"&|<>^()]/.test(s) ? '"' + s.replace(/"/g, '""') + '"' : s
+}
+
+/**
+ * 候选可执行文件列表（顺序 = 优先级）：设置面板 binPath > env 变量 > 已知本地安装 > PATH 名字。
+ * 纯函数、零副作用；无 fs 能力时只返回设置/env/PATH 名，绝不抛。
+ * @param {object} env 环境变量
+ * @param {string} [binPath] 设置面板里显式填写的路径
+ * @returns {string[]}
+ */
+export function claudeExeCandidates(env, binPath) {
+  const e = env || {}
+  const out = []
+  const push = (p) => { const v = String(p || '').trim(); if (v && out.indexOf(v) < 0) out.push(v) }
+  if (binPath) push(binPath)
+  for (const k of CLAUDE_BIN_ENV_VARS) if (e[k]) push(e[k])
+  const fs = claudeBuiltin('node:fs')
+  const path = claudeBuiltin('node:path')
+  const home = e.USERPROFILE || e.HOME || ''
+  if (fs && path && typeof fs.existsSync === 'function' && typeof path.join === 'function' && home) {
+    for (const rel of CLAUDE_LOCAL_REL) {
+      const p = path.join.apply(path, [home].concat(rel))
+      try { if (fs.existsSync(p)) push(p) } catch (err) { }
+    }
+  }
+  push(CLAUDE_EXE_BASENAME)
+  return out
+}
+
+/**
+ * 探测时优先尝试的候选（去掉 PATH 兜底名——它由 spawn 的 PATH 搜索处理，且不是绝对路径）。
+ * @returns {string[]}
+ */
+export function claudeProbeCandidates(env, binPath) {
+  return claudeExeCandidates(env, binPath).filter((c) => c !== CLAUDE_EXE_BASENAME)
+}
+
+/**
+ * buildArgv 需要的前缀数组：设置 binPath > env > 本地安装 > PATH 名字。
+ * .js/.mjs 目标返回 [node, file]。宿主形态（preset/dynamic）也会用它做 existsSync 校验。
+ * @returns {string[]}
+ */
+export function resolveExePrefix(env, binPath) {
+  const cands = claudeExeCandidates(env, binPath)
+  const spec = splitExeSpec(cands[0] || CLAUDE_EXE_BASENAME)
+  return [spec.cmd].concat(spec.prefixArgs)
+}
+
+/** PATH 里的 claude 是否真的可执行（仅诊断用：返回路径或空串）。 */
+export function claudePathHint(env) {
+  const e = env || {}
+  for (const k of CLAUDE_BIN_ENV_VARS) if (e[k]) return String(e[k])
+  const cands = claudeExeCandidates(e, '')
+  return cands.length ? String(cands[0]) : ''
+}