@luchenglong/cli-bridge 0.2.8 → 0.2.9

package/preset/claude-first/agent.cordis.yml

@@ -0,0 +1,136 @@
+# 生成物 — 由 node scripts/build.mjs 从 preset/claude-first/plugin-list.mjs 生成，勿手改。
+# legacy 目录形态（$DSH_HOME/.agent-presets/claude-first/）；新 DSH 走声明制
+# （home-plugin/cli-bridge-indicator/lib/preset-declarations.mjs 直接 import 同一源）。
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    prefix: 'You are a coding agent powered by the {{model}} model.'
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+- id: tool-bash
+  name: '@deepseek-ai/dsh-tool-bash'
+  disabled: !!js 'process.platform === ''win32'''
+- id: tool-pwsh
+  name: '@deepseek-ai/dsh-tool-pwsh'
+  disabled: !!js 'process.platform !== ''win32'''
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+- id: tool-jobs
+  name: '@deepseek-ai/dsh-tool-jobs'
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+- id: command-goal
+  name: '@deepseek-ai/dsh-command-goal'
+- id: tool-goal
+  name: '@deepseek-ai/dsh-tool-goal'
+- id: planning
+  name: 'cordis:group'
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+          You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+          Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+          The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+          Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+          Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+          When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+- id: compaction
+  name: 'cordis:group'
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+- id: delegation
+  name: 'cordis:group'
+  group: true
+  isolate:
+    workflowEngine: true
+  config:
+    - id: tool-subagent-control
+      name: '@deepseek-ai/dsh-tool-subagent-control'
+    - id: tool-subagent-list-agents
+      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+    - id: tool-subagent
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        modelSelectionSettings: true
+    - id: tool-subagent-fork
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+    - id: tool-subagent-codex
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: codex
+        toolName: subagent_codex
+        maxDepth: provider-managed
+    - id: tool-subagent-claude-code
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: claude-code
+        toolName: subagent_claude_code
+        maxDepth: provider-managed
+    - id: workflow-ptc
+      name: '@deepseek-ai/dsh-workflow-ptc'
+      config:
+        provider: spawn
+    - id: tool-workflow
+      name: '@deepseek-ai/dsh-tool-workflow'
+    - id: tool-ralph
+      name: '@deepseek-ai/dsh-tool-ralph'
+      disabled: true
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+- id: tool-web
+  name: '@deepseek-ai/dsh-tool-web'
+  config:
+    fetch: true
+    searchTimeoutMs: 60000
+- id: present
+  name: '@deepseek-ai/dsh-tool-present'
+- id: tool-plugin-manager
+  name: '@deepseek-ai/dsh-plugin-manager/tools'
+  disabled: true
+- id: cli-bridge-claude
+  name: '@luchenglong/cli-bridge/preset-claude'

package/preset/claude-first/cli-bridge.mjs

@@ -0,0 +1,131 @@
+// preset/claude-first/cli-bridge.mjs — claude-first preset 的桥接插件（preset 宿主形态）。
+//
+// PROVIDER-CONTRACT.md §5：本模块只做「宿主接线」——构造描述符、attach、注册三工具 +
+// claude_models、心跳/事件发布、claude:policy 提示词段。全部执行/状态语义在
+// providers/claude.mjs + core/bridge-kit.mjs。
+//
+// preset id 'claude-first' 由 plugin-list.mjs 单源声明（本文件不含 id 字面量清单）。
+//
+// 本模块是宿主进程内真 ESM：可 import node: 内建与包内相对路径；禁止 import
+// @deepseek-ai/*（解析根够不到 harness 包，历史论证 —— 契约 §8）。
+import { existsSync } from 'node:fs'
+
+import defineProvider, { claudeExeCandidates } from '../../providers/claude.mjs'
+import { POLICY_TEXT } from '../../providers/claude-policy.mjs'
+import { renderResult, renderStatus } from '../../core/bridge-kit.mjs'
+import { isBridgeEnabled } from '../../core/scheduling.mjs'
+import { PROVIDER_IDS } from '../../providers/registry.mjs'
+
+export const name = 'cli-bridge-claude'
+export const inject = ['tools', 'subprocess', 'systemPrompt', 'timer']
+
+const OUTPUT_SCHEMA = { type: 'object', additionalProperties: true }
+
+export function apply(ctx) {
+  // 调度门禁：用户在设置面板关掉 claude → 本形态不注册任何工具/政策段/心跳。
+  // 每次会话装配时现读文件（改设置下次会话即生效，无需重启宿主）；fail-open。
+  if (!isBridgeEnabled('claude', PROVIDER_IDS)) return
+  const subprocess = ctx.subprocess
+  const sandboxPolicy = ctx.get('sandboxPolicy')
+
+  const provider = defineProvider({ process, env: process.env })
+
+  // 状态快照 → 家级灯（keystone 听 'claude/status'，事件是 app 级广播）。
+  function publish(snapshot) {
+    try { ctx.emit('claude/status', { snapshot }) } catch (e) { /* ignore */ }
+  }
+
+  // cwd 兜底：显式 cwd 参数 > env CLAUDE_MCP_CWD > 沙箱 workspaceRoot > process.cwd()。
+  function getCwdFallback() {
+    if (process.env.CLAUDE_MCP_CWD) return String(process.env.CLAUDE_MCP_CWD)
+    if (sandboxPolicy && typeof sandboxPolicy.workspaceRoot === 'string' && sandboxPolicy.workspaceRoot) return sandboxPolicy.workspaceRoot
+    return process.cwd()
+  }
+
+  // 设置面板分区（每次 getSettings 现读 ctx.get，面板改默认模型后下一次调用即生效）。
+  function panelSettings() {
+    try {
+      const s = ctx.get && ctx.get('cliBridgeSettings')
+      return (s && s.claude) || null
+    } catch (e) { return null }
+  }
+
+  // exe 解析优先级（与描述符 claudeExeCandidates 同一套）：
+  //   面板 binPath > env CLAUDE_BIN/CLAUDE_CLI/CLAUDE_CODE_BIN > 已知本地安装 > PATH 名 claude。
+  // .js/.mjs 目标经 process.execPath 包装（返回数组前缀，buildArgv 接受）。
+  // ⚠️ npm 全局安装会在 Windows 给 claude.cmd —— 本形态经 DSH subprocess 启动，.cmd 能否
+  // 执行取决于宿主；探测不到原生 exe 时如实落到 resolveExecutable，失败会明确报
+  // CLAUDE_UNAVAILABLE/SPAWN_ERROR（绝不静默改走别的后端）。
+  const binPathSetting = (() => {
+    const s = panelSettings()
+    const v = s ? s.binPath : ''
+    return typeof v === 'string' ? v : ''
+  })()
+  const exeCandidates = claudeExeCandidates(process.env, binPathSetting)
+
+  async function resolveExe(backend, signal) {
+    for (const c of exeCandidates) {
+      if (!c) continue
+      if (/\.(mjs|cjs|js)$/i.test(c)) return [process.execPath, c]
+      try { if (existsSync(c)) return c } catch (e) { }
+    }
+    return await subprocess.resolveExecutable('claude', undefined, signal)
+  }
+
+  provider.attach({
+    ctx, subprocess, resolveExe, getCwdFallback, publish,
+    getSettings: () => {
+      const s = panelSettings()
+      return s && typeof s === 'object' ? s : {}
+    }
+  })
+
+  // 宣告 claude 优先模式：家级灯据此决定常驻显示（presetActive）。挂载即宣告 +
+  // 每 30s 心跳续租（TTL 75s，契约 §2）。
+  function announceMode() {
+    try {
+      const sid = (ctx.session && ctx.session.id) || ctx.sessionId || null
+      ctx.emit('claude/mode', sid ? { active: true, sessionId: sid } : { active: true })
+    } catch (e) { /* ignore */ }
+  }
+  announceMode()
+  try { const t = ctx.setInterval ? ctx.setInterval(announceMode, 30000) : null; if (t && ctx.effect) ctx.effect(() => () => { try { t() } catch (e) {} }) } catch (e) {}
+
+  // ── 工具注册（执行进描述符三逻辑 + extraTools）──────────────────────────────
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.run.name,
+    description: provider.tools.run.description,
+    parameters: provider.tools.run.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.runToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.continue.name,
+    description: provider.tools.continue.description,
+    parameters: provider.tools.continue.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.continueToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.status.name,
+    description: provider.tools.status.description,
+    parameters: provider.tools.status.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderStatus(value, provider) },
+    execute: (args) => provider.statusToolLogic(args)
+  }))
+  for (const et of provider.extraTools || []) {
+    ctx.effect(() => ctx.tools.register({
+      name: et.name,
+      description: et.description,
+      parameters: et.inputSchema,
+      output: { schema: OUTPUT_SCHEMA, render: et.render || ((args, value) => renderResult(value, provider)) },
+      execute: (args, exec) => et.logic(args, exec)
+    }))
+  }
+
+  ctx.effect(() => ctx.systemPrompt.section({
+    name: 'claude:policy',
+    order: (typeof ctx.systemPrompt.getSectionOrder === 'function' ? ctx.systemPrompt.getSectionOrder('TOOL_SUBAGENT') : 2800) + 10,
+    text: POLICY_TEXT
+  }))
+}

package/preset/claude-first/plugin-list.mjs

@@ -0,0 +1,28 @@
+// preset/claude-first/plugin-list.mjs — claude-first 预设的单源插件清单（PROVIDER-CONTRACT §5）。
+//
+// = 官方 standard 基线（standard-base.mjs）+ claude 桥接行 + persona 差异。
+// preset id 'claude-first'：本包新增 provider，无旧包兼容包袱，id 直接用 provider id + '-first'
+// （与 opencode-first 同构；cordis-agy / cordis-mimo 的 cordis-* 前缀是旧包历史遗留，不可套用）。
+import { standardPluginRows, bridgeRow } from '../standard-base.mjs'
+
+export const meta = {
+  id: 'claude-first',
+  name: 'Claude Code 执行代理',
+  description: '完整编码 Agent（standard 全部能力），额外提供 claude_run/claude_continue 工具并注入"claude 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 Claude Code CLI（DSH 完全控制、claude 无提示改文件、默认后台执行），原生工具仅用于只读查询与最终验证。模型清单以服务端权威探测为准（claude_models）。',
+  order: 50
+}
+
+export function buildPlugins(deps) {
+  const rows = standardPluginRows()
+  // persona 段：prefix 必填；**不设 suffix** —— DSH 只注册 provider/model 两个提示词变量，
+  // 写 {{cwd}} 会在组装期抛 unknown prompt variable，使整个预设不可用（工作目录由
+  // working-directory 服务以不插值的用户上下文提供）。
+  const persona = rows.find((r) => r.id === 'persona')
+  if (persona && persona.config) {
+    persona.config.prefix = 'You are a coding agent powered by the {{model}} model.'
+    delete persona.config.suffix
+  }
+  // 桥接行：第二参数由 build（scripts/build.mjs）注入裸包说明符，绝不在这里写死路径。
+  rows.push(bridgeRow('claude', deps && deps.bridgeName))
+  return rows
+}

package/preset/claude-first/preset.yml

@@ -0,0 +1,3 @@
+name: Claude Code 执行代理
+description: '完整编码 Agent（standard 全部能力），额外提供 claude_run/claude_continue 工具并注入"claude 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 Claude Code CLI（DSH 完全控制、claude 无提示改文件、默认后台执行），原生工具仅用于只读查询与最终验证。模型清单以服务端权威探测为准（claude_models）。'
+order: 50

package/preset/codex-first/agent.cordis.yml

@@ -0,0 +1,136 @@
+# 生成物 — 由 node scripts/build.mjs 从 preset/codex-first/plugin-list.mjs 生成，勿手改。
+# legacy 目录形态（$DSH_HOME/.agent-presets/codex-first/）；新 DSH 走声明制
+# （home-plugin/cli-bridge-indicator/lib/preset-declarations.mjs 直接 import 同一源）。
+- id: persona
+  name: '@deepseek-ai/dsh-persona'
+  config:
+    prefix: 'You are a coding agent powered by the {{model}} model.'
+- id: agent-instructions
+  name: '@deepseek-ai/dsh-agent-instructions'
+  config:
+    maxBytes: 65536
+- id: tool-bash
+  name: '@deepseek-ai/dsh-tool-bash'
+  disabled: !!js 'process.platform === ''win32'''
+- id: tool-pwsh
+  name: '@deepseek-ai/dsh-tool-pwsh'
+  disabled: !!js 'process.platform !== ''win32'''
+- id: tool-fs
+  name: '@deepseek-ai/dsh-tool-fs'
+- id: tool-fs-search
+  name: '@deepseek-ai/dsh-tool-fs-search'
+  config:
+    sampleOverCapGlobResults: false
+- id: tool-jobs
+  name: '@deepseek-ai/dsh-tool-jobs'
+- id: skill-filesystem
+  name: '@deepseek-ai/dsh-skill-filesystem'
+- id: tool-skill
+  name: '@deepseek-ai/dsh-tool-skill'
+- id: command-goal
+  name: '@deepseek-ai/dsh-command-goal'
+- id: tool-goal
+  name: '@deepseek-ai/dsh-tool-goal'
+- id: planning
+  name: 'cordis:group'
+  group: true
+  isolate:
+    planMode: true
+  config:
+    - id: plan-mode
+      name: '@deepseek-ai/dsh-plan-mode'
+      config:
+        section: |
+          You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
+
+          Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
+
+          The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
+
+          Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
+
+          Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
+
+          When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
+- id: compaction
+  name: 'cordis:group'
+  group: true
+  isolate:
+    compaction: true
+    toolResultPruner: true
+  config:
+    - id: compaction-basic
+      name: '@deepseek-ai/dsh-compaction-basic'
+    - id: command-compact
+      name: '@deepseek-ai/dsh-command-compact'
+    - id: tool-result-pruner
+      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
+      config:
+        thresholdChars: 8192
+        headChars: 4096
+        tailChars: 1024
+- id: delegation
+  name: 'cordis:group'
+  group: true
+  isolate:
+    workflowEngine: true
+  config:
+    - id: tool-subagent-control
+      name: '@deepseek-ai/dsh-tool-subagent-control'
+    - id: tool-subagent-list-agents
+      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
+    - id: tool-subagent
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: spawn
+        toolName: subagent
+        modelSelectionSettings: true
+    - id: tool-subagent-fork
+      name: '@deepseek-ai/dsh-tool-subagent'
+      config:
+        provider: fork
+        toolName: subagent_fork
+    - id: tool-subagent-codex
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: codex
+        toolName: subagent_codex
+        maxDepth: provider-managed
+    - id: tool-subagent-claude-code
+      name: '@deepseek-ai/dsh-tool-subagent'
+      disabled: true
+      config:
+        provider: claude-code
+        toolName: subagent_claude_code
+        maxDepth: provider-managed
+    - id: workflow-ptc
+      name: '@deepseek-ai/dsh-workflow-ptc'
+      config:
+        provider: spawn
+    - id: tool-workflow
+      name: '@deepseek-ai/dsh-tool-workflow'
+    - id: tool-ralph
+      name: '@deepseek-ai/dsh-tool-ralph'
+      disabled: true
+      config:
+        subagentProvider: spawn
+        maxRounds: 64
+- id: tool-ask-user
+  name: '@deepseek-ai/dsh-tool-ask-user'
+- id: tool-todo
+  name: '@deepseek-ai/dsh-tool-todo'
+  config:
+    allowParallelInProgress: true
+- id: tool-web
+  name: '@deepseek-ai/dsh-tool-web'
+  config:
+    fetch: true
+    searchTimeoutMs: 60000
+- id: present
+  name: '@deepseek-ai/dsh-tool-present'
+- id: tool-plugin-manager
+  name: '@deepseek-ai/dsh-plugin-manager/tools'
+  disabled: true
+- id: cli-bridge-codex
+  name: '@luchenglong/cli-bridge/preset-codex'

package/preset/codex-first/cli-bridge.mjs

@@ -0,0 +1,160 @@
+// preset/codex-first/cli-bridge.mjs — codex-first preset 的桥接插件（preset 宿主形态）。
+//
+// PROVIDER-CONTRACT.md §5：本模块只做「宿主接线」——构造描述符、attach、注册三工具
+// （+ codex_models）、心跳/事件发布、codex:policy 提示词段。全部执行/状态语义在
+// providers/codex.mjs + core/bridge-kit.mjs。
+//
+// preset id 'codex-first' 由 plugin-list.mjs 单源声明。
+//
+// 本模块是宿主进程内真 ESM：可 import node: 内建与包内相对路径；禁止 import
+// @deepseek-ai/*（解析根够不到 harness 包，历史论证 —— 契约 §8）。
+import { existsSync } from 'node:fs'
+
+import defineProvider, { codexResolveExePrefix, codexExeCandidates } from '../../providers/codex.mjs'
+import { codexShimRejectReason } from '../../providers/codex-cli.mjs'
+import { renderResult, renderStatus } from '../../core/bridge-kit.mjs'
+import { isBridgeEnabled } from '../../core/scheduling.mjs'
+import { PROVIDER_IDS } from '../../providers/registry.mjs'
+
+export const name = 'cli-bridge-codex'
+export const inject = ['tools', 'subprocess', 'systemPrompt', 'timer']
+
+const OUTPUT_SCHEMA = { type: 'object', additionalProperties: true }
+
+export function apply(ctx) {
+  // 调度门禁（0.2.0）：用户在设置面板关掉 codex → 本形态不注册任何工具/政策段/心跳。
+  // 每次会话装配时现读文件（改设置下次会话即生效，无需重启宿主）；fail-open。
+  if (!isBridgeEnabled('codex', PROVIDER_IDS)) return
+  const subprocess = ctx.subprocess
+  const sandboxPolicy = ctx.get('sandboxPolicy')
+
+  const provider = defineProvider({ process, env: process.env })
+
+  // 状态快照 → 家级灯（keystone 听 'codex/status'，事件是 app 级广播）。
+  function publish(snapshot) {
+    try { ctx.emit('codex/status', { snapshot }) } catch (e) { /* ignore */ }
+  }
+
+  // cwd 兜底：显式 cwd 参数 > env CODEX_BRIDGE_CWD > 沙箱 workspaceRoot > process.cwd()。
+  //（不用 CODEX_HOME —— 那是 codex 自己的配置目录，语义不同，误用会把工作区指到 ~/.codex。）
+  function getCwdFallback() {
+    if (process.env.CODEX_BRIDGE_CWD) return String(process.env.CODEX_BRIDGE_CWD)
+    if (sandboxPolicy && typeof sandboxPolicy.workspaceRoot === 'string' && sandboxPolicy.workspaceRoot) return sandboxPolicy.workspaceRoot
+    return process.cwd()
+  }
+
+  // exe 解析优先级（与描述符同一套）：面板 binPath（getSettings）> CODEX_BIN >
+  // CODEX_CLI > CODEX_CLI_PATH > PATH 里的 codex。.js/.mjs 目标经 node 包装。
+  const binPathSetting = (() => {
+    try {
+      const s = ctx.get && ctx.get('cliBridgeSettings')
+      const v = s && s.codex ? s.codex.binPath : ''
+      return typeof v === 'string' ? v : ''
+    } catch (e) { return '' }
+  })()
+  const candidates = codexResolveExePrefix(process.env, binPathSetting)
+
+  async function resolveExe(backend, signal) {
+    let bare = ''
+    for (const c of candidates) {
+      // .cmd/.bat shim 直接给出可行动错误：无 shell 时 spawn 不解析它，走 shell 又会
+      // 二次解释 prompt —— 与其抛难懂的 EINVAL，不如在解析阶段说清楚。
+      const shim = codexShimRejectReason(c)
+      if (shim) throw new Error(shim)
+      if (/\.(mjs|cjs|js)$/i.test(c)) return [process.execPath, c]
+      if (/[\\/]/.test(c)) { try { if (existsSync(c)) return c } catch (e) { /* 继续下一个候选 */ } continue }
+      if (!bare) bare = c
+    }
+    // PATH 兜底：第一个裸名候选（CODEX_BIN 也可能是裸名，如 'codex-alt'）。
+    return await subprocess.resolveExecutable(bare || codexExeCandidates(process.env).slice(-1)[0], undefined, signal)
+  }
+
+  provider.attach({ ctx, subprocess, resolveExe, getCwdFallback, publish })
+
+  // 宣告 codex 优先模式：家级灯据此决定常驻显示（presetActive）。挂载即宣告 +
+  // 每 30s 心跳续租（TTL 75s，契约 §2）。
+  function announceMode() {
+    try {
+      const sid = (ctx.session && ctx.session.id) || ctx.sessionId || null
+      ctx.emit('codex/mode', sid ? { active: true, sessionId: sid } : { active: true })
+    } catch (e) { /* ignore */ }
+  }
+  announceMode()
+  try {
+    const t = ctx.setInterval ? ctx.setInterval(announceMode, 30000) : null
+    if (t && ctx.effect) ctx.effect(() => () => { try { t() } catch (e) { /* ignore */ } })
+  } catch (e) { /* 心跳尽力而为 */ }
+
+  // ── 工具注册（执行进描述符三逻辑）────────────────────────────────────────────
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.run.name,
+    description: provider.tools.run.description,
+    parameters: provider.tools.run.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.runToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.continue.name,
+    description: provider.tools.continue.description,
+    parameters: provider.tools.continue.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderResult(value, provider) },
+    execute: (args, exec) => provider.continueToolLogic(args, exec)
+  }))
+  ctx.effect(() => ctx.tools.register({
+    name: provider.tools.status.name,
+    description: provider.tools.status.description,
+    parameters: provider.tools.status.inputSchema,
+    output: { schema: OUTPUT_SCHEMA, render: (args, value) => renderStatus(value, provider) },
+    execute: (args) => provider.statusToolLogic(args)
+  }))
+  for (const et of provider.extraTools || []) {
+    ctx.effect(() => ctx.tools.register({
+      name: et.name,
+      description: et.description,
+      parameters: et.inputSchema,
+      output: { schema: OUTPUT_SCHEMA, render: et.render || ((args, value) => renderResult(value, provider)) },
+      execute: (args, exec) => et.logic(args, exec)
+    }))
+  }
+
+  // policy 段（新 provider 无旧文案可 verbatim 继承；按实测 CLI 能力撰写）。
+  const policyText = [
+    'codex-first execution policy (local OpenAI Codex CLI bridge).',
+    '',
+    'Local agent CLI "codex" handles coding tasks under full DSH control. Every dispatch is `codex exec --json --skip-git-repo-check` (never interactive, so approvals cannot block). By default codex runs in the background and returns a jobId immediately; collect results via job_output and watch live progress via codex_status anytime.',
+    '',
+    'Decision table for tool selection:',
+    '- Single read/glob/grep or short (<30s) command -> Native tools.',
+    '- Implementing, editing, refactoring, debugging, builds, multi-file investigation -> codex_run.',
+    '- Follow-ups on the same topic -> codex_continue (with latest=true or sessionId; codex keeps the thread).',
+    '- Final build/test verification of codex output -> Native tools.',
+    '',
+    'Context protocol (one topic = one codex thread):',
+    '- First dispatch on a topic: provide the task with a compact CONTEXT preamble (point to paths, do not paste file contents):',
+    '  CONTEXT: 2-6 lines — goal; repo root; key paths; decisions/constraints; current state.',
+    '  TASK: the complete instruction.',
+    '- Follow-ups: call codex_continue and state only what is new.',
+    '',
+    'Sandbox & approval:',
+    '- mode=auto follows the DSH plan state: plan -> read-only sandbox, otherwise workspace-write.',
+    '- codex exec has NO -a/--ask-for-approval flag; the bridge sets approval policy through -c approval_policy="…" only when the settings panel defines one. On resume the sandbox also goes through -c ("codex exec resume" has no -s and no -C).',
+    '- If a run fails because the sandbox denied an operation, raise sandboxMode (workspace-write -> danger-full-access) instead of looping retries.',
+    '',
+    'Execution & Fallback protocol:',
+    '- Dispatch defaults to background=true (set background=false only to block). Collect via job_output.',
+    '- On rate-limit or network failure, a confirmation dialog opens in BOTH foreground and background while in flight.',
+    '- If result has fallback=true (status FALLBACK_TO_DSH), the user chose DSH-local: finish with native tools and NEVER call codex again for this task.',
+    '- Never loop codex calls; never ask codex to call back into DSH.',
+    '',
+    'Models & credentials:',
+    '- Run codex_models (default source=live) to see what the configured endpoint really serves; ~/.codex/models.json and model_catalog_json are local catalog metadata, NOT a claim about server availability.',
+    '- Omit model unless you have a reason: codex then uses the CLI Bridge settings default, or ~/.codex/config.toml model.',
+    '- Credentials belong to codex (~/.codex/config.toml model_providers.<name>, auth.json): on auth failures tell the user to run `codex login` or fix the provider block; do not retry in a loop.'
+  ].join('\n')
+
+  ctx.effect(() => ctx.systemPrompt.section({
+    name: 'codex:policy',
+    order: (typeof ctx.systemPrompt.getSectionOrder === 'function' ? ctx.systemPrompt.getSectionOrder('TOOL_SUBAGENT') : 2800) + 10,
+    text: policyText
+  }))
+}

package/preset/codex-first/plugin-list.mjs

@@ -0,0 +1,28 @@
+// preset/codex-first/plugin-list.mjs — codex-first 预设的单源插件清单（PROVIDER-CONTRACT §5）。
+//
+// = 官方 standard 基线（standard-base.mjs）+ codex 桥接行 + persona 差异。
+// preset id 直接用 'codex-first'（与 opencode-first 同构）：本包新增的 provider 无旧包
+// 兼容包袱，不套用 agy 的 cordis-agy / mimo 的 cordis-mimo 旧前缀。
+import { standardPluginRows, bridgeRow } from '../standard-base.mjs'
+
+export const meta = {
+  id: 'codex-first',
+  name: 'Codex 执行代理',
+  description: '完整编码 Agent（standard 全部能力），额外提供 codex_run/codex_continue 工具并注入"Codex 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 OpenAI Codex CLI（DSH 完全控制、非交互不弹审批、默认后台执行），原生工具仅用于只读查询与最终验证。',
+  order: 50
+}
+
+export function buildPlugins(deps) {
+  const rows = standardPluginRows()
+  // persona 段：prefix 与其它 preset 同构（dsh-persona 要求 prefix 必填）。
+  // 不设置 suffix —— DSH 只注册 provider/model 两个模板变量，工作目录由
+  // working-directory 服务以「不插值」的用户上下文提供；写 {{cwd}} 会让本预设整轮
+  // 组装失败（2026-10-18 实测，别重蹈覆辙）。
+  const persona = rows.find((r) => r.id === 'persona')
+  if (persona && persona.config) {
+    persona.config.prefix = 'You are a coding agent powered by the {{model}} model.'
+    delete persona.config.suffix
+  }
+  rows.push(bridgeRow('codex', deps && deps.bridgeName))
+  return rows
+}

package/preset/codex-first/preset.yml

@@ -0,0 +1,3 @@
+name: Codex 执行代理
+description: '完整编码 Agent（standard 全部能力），额外提供 codex_run/codex_continue 工具并注入"Codex 优先"策略：各种模式下先把实现、编辑、调试、构建、跨文件排查派给本机 OpenAI Codex CLI（DSH 完全控制、非交互不弹审批、默认后台执行），原生工具仅用于只读查询与最终验证。'
+order: 50