dsh-asuta-user-agent-settings 0.0.0-stage → 0.1.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Asuta and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,35 @@
-# Temporary Holding Version
+# Agent 全局设置
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+设置页新增 **Agent 全局设置**：
+
+- 编辑 `$DSH_HOME/AGENTS.md`（默认用户 `.dsh/AGENTS.md`）。这就是原生 agent-instructions 读取的全局文件；未保存前不创建。项目／Agent 自身指令保留；不是覆盖系统约束的最高优先级。现有主／子 Agent 在原生下一请求指令协调时读取变化。
+- 独立选择自动／手动／选区压缩的提供商和模型，或跟随当前会话。仅包装原生 BasicCompactionEngine 的 summarize 定制点，按每次调用建立不可变 config 视图；不改 Agent 模型、不监听 llm/stream、不改变主对话路由。自定义／未知引擎不假称支持。
+- 刷新前端按钮调用当前窗口 location.reload，不重启后端；明确提醒可能丢失未保存设置或草稿。
+
+## 保存与数据
+
+指令及模型选择分别保存，均以读取时 revision 做冲突检查；串行保存＋同目录临时文件原子替换，临时文件失败清理，不留备份副本。编辑器仍拒绝符号链接和超出 128 KiB 的文件；Agent 运行读取单独使用原生兼容的 1 MiB 上限并允许文件符号链接，回退读取失败会清空缓存、记录诊断但不阻断下一步请求。压缩选择保存为 `$DSH_HOME/plugin-data/user-agent-settings/settings.json`。
+
+UI 和模型工具 `user_agent_settings` 调用同一 Host operation；模型保存入口先解析实际调用者（含子 Agent）的 sandboxPolicy，只有 danger-full-access 或原生本次审批通过才允许写入全局文件。拒绝、取消、无审批服务／通道或缺失调用上下文均不落盘，也不改变会话权限；read/models 不需要写入审批。工具延迟加载，只输出内容／元数据，不发模型请求。刷新是纯用户界面操作，不提供工具。HTTP route 仅同源并要求自定义请求头，拒绝跨源及 GET 修改；请求体上限预留最坏六倍 JSON 转义及元数据空间，解码后仍由核心执行 128 KiB UTF-8 限制。
+
+## 本次审查修复（1.0.3）
+
+- 隔离组合回归：113 项中 112 项通过、0 失败，1 项文件符号链接测试因 Windows `EPERM` 跳过；另 22 项持久化断言通过。
+- 新增覆盖：模型保存的调用者权限、审批失败／取消、运行读取大小与故障恢复、最大合法 JSON 转义请求；侧栏测试同时覆盖同 slot 失效和卸载恢复。
+- 语法、发布文件清单和 `git diff --check` 通过。未发起真实审批、改写实际全局设置、热重载插件或进行真实界面验收；未提交或推送本次修复。
+
+## 兼容性与验证
+
+全局文件由已挂载的原生 agent-instructions 读取；Minimal 等未加载原生模块的预设通过 required prompt context 补充。当前 standard、ptc、cordis 使用原生路径，minimal 使用回退；回退不覆盖项目／角色指令且原生路径不重复注入。同 ID 预设的旧 revision 若改变原生加载器开关，以及条件启用的加载器，状态会有兼容性边界；切换这类自定义组合后需重新核验。压缩 adapter 基于当前原生 BasicCompactionEngine 的受检查实现形状，对当前及后续主／子 Agent 作用，卸载恢复原方法，不覆盖之后安装的其它包装。新模型选择在下一次压缩生效，进行中的压缩保持原选择。
+
+独立 tests 在 `.user-agent-settings`：core 使用工作区隔离 fixture，覆盖 UTF-8 限制、版本冲突、并发保存、重载、无效模型失败不落盘；不改实际全局指令和用户模型配置。压缩测试使用无 I/O 假引擎，不消耗真实模型额度。真实已安装状态需另外检查。
+
+历史重新编辑／永久截断不在本插件中实现。当前内核追加式日志缺少跨缓存、搜索与存储代际的安全不可逆重写事务，不能把 UI 隐藏当作删除。
+
+### 最终验收（2026-10-26）
+
+- 已安装：dsh-asuta-user-agent-settings 1.0.2；Client settings.section 的 user-agent-settings 入口 active。
+- 实机读取：standard、ptc、cordis 原生指令加载；minimal required-context 回退 active；压缩 adapter 已接入原生主／子 Agent 作用域，无状态错误。
+- 组合回归：35 项测试及 22 项持久化断言全部通过；语法和 git diff --check 通过。隔离测试不修改真实用户指令、模型选择或会话历史。
+- 验收边界：设置页面布局与点击保存尚未在已登录主窗口自动验收；刷新按钮未由 Agent 自动触发。默认仍为跟随会话，未替用户指定压缩模型。
+- 未进行 Git 提交或推送。

package/client.js

@@ -0,0 +1,68 @@
+window.__ModuleLoader__.load({
+  id: 'dsh-asuta-user-agent-settings',
+  factory(require) {
+    const React = require('react'), h = React.createElement
+    const NS = 'userAgentSettings'
+    const zh = { title:'Agent 全局设置',intro:'适用于所有工作区的主 Agent 和子 Agent；项目和角色自身的指令仍然保留。',instructions:'全局 Agent 文件',fileHelp:'使用 DSH 原生全局 AGENTS.md，不重复注入提示词。保存后从下一次请求读取；不会中断正在运行的回复。',notCreated:'文件尚未创建，首次保存时创建。',save:'保存',saving:'保存中…',saved:'已保存',reload:'重新读取',discard:'有未保存的修改，确定丢弃并重新读取吗？',loading:'正在加载设置…',error:'操作失败：',conflict:'内容已在其它位置改变，请先重新读取再保存。',compression:'上下文压缩模型',compressionHelp:'仅影响自动、手动及选区压缩，不改变正常对话模型。默认跟随每条会话的模型。模型不可用时明确报错，不静默切换。',follow:'跟随当前会话模型',choose:'指定模型',provider:'提供商',model:'模型',saveCompression:'保存压缩设置',modelPlaceholder:'选择模型或输入精确模型 ID',capability:'适配状态',refresh:'刷新前端',refreshHelp:'重新加载当前界面，相当于 Ctrl+R，不重启 DSH 后端。其它页面中尚未发送或保存的内容可能丢失。',refreshButton:'刷新当前界面',refreshConfirm:'刷新会重新加载当前界面，未保存的编辑或草稿可能丢失。是否继续？',refreshDirty:'本页还有未保存的设置。刷新后这些修改会丢失，是否继续？',limit:'最多 128 KiB；此文件不是最高优先级指令，不覆盖系统或项目约束。',statusReady:'已接入原生压缩流程',statusLimited:'部分压缩引擎不兼容，请查看状态',noProviders:'没有可用的模型提供商，请先在模型设置中配置。',retry:'重试' }
+    const en = { title:'Global Agent Settings',intro:'Applies to main agents and subagents in every workspace, alongside project and role instructions.',instructions:'Global Agent file',fileHelp:'Edits the native global AGENTS.md without duplicate prompt injection. Changes apply from the next request; running replies are not interrupted.',notCreated:'The file does not exist yet. Saving creates it.',save:'Save',saving:'Saving…',saved:'Saved',reload:'Reload from disk',discard:'Discard unsaved edits and reload from disk?',loading:'Loading settings…',error:'Operation failed: ',conflict:'The content changed elsewhere. Reload before saving.',compression:'Context compression model',compressionHelp:'Applies only to automatic, manual and region compression, not normal replies. By default, follows each conversation model. Unavailable models fail explicitly.',follow:'Follow conversation model',choose:'Choose a model',provider:'Provider',model:'Model',saveCompression:'Save compression setting',modelPlaceholder:'Choose or enter the exact model ID',capability:'Adapter status',refresh:'Refresh frontend',refreshHelp:'Reloads the current interface like Ctrl+R without restarting the DSH backend. Unsent or unsaved content elsewhere may be lost.',refreshButton:'Reload this interface',refreshConfirm:'Reload this interface? Unsaved edits or drafts may be lost.',refreshDirty:'This page has unsaved settings. Reloading will discard them. Continue?',limit:'Up to 128 KiB. Global instructions do not override system or project constraints.',statusReady:'Connected to native compression',statusLimited:'Some compression engines are unsupported; inspect status',noProviders:'No model providers are available. Configure one in model settings first.',retry:'Retry' }
+    async function request(body, signal) {
+      const response = await fetch('/__user-agent-settings/operation',{method:'POST',headers:{'content-type':'application/json','x-user-agent-settings':'1'},body:JSON.stringify(body),signal})
+      const result = await response.json()
+      if (!response.ok || !result.ok) throw Object.assign(new Error(result.error || 'Request failed'), { code: result.code })
+      return result
+    }
+    function Page({ t }) {
+      const tr = React.useCallback(key => { const fallback = String(navigator.language).toLowerCase().startsWith('zh') ? zh : en; const value = t?.(key); return value && value !== key ? value : fallback[key] ?? key },[t])
+      const [state,setState] = React.useState(null), [providers,setProviders] = React.useState([]),[text,setText] = React.useState(''),[mode,setMode] = React.useState('follow'),[provider,setProvider] = React.useState(''),[model,setModel] = React.useState(''),[busy,setBusy] = React.useState(''),[notice,setNotice] = React.useState(null)
+      const original = state?.compaction
+      const instructionDirty = !!state && text !== state.instructions.text
+      const selectionDirty = !!state && JSON.stringify(mode==='follow'?null:{provider,model}) !== JSON.stringify(original)
+      const dirty = instructionDirty || selectionDirty
+      const showError = error => setNotice({error:true,text:error.code==='CONFLICT'?tr('conflict'):tr('error')+error.message})
+      const load = React.useCallback(async signal => {
+        setBusy('load');setNotice(null)
+        try {
+          const result = await request({action:'read'},signal); if(signal?.aborted)return
+          setState(result);setText(result.instructions.text);setMode(result.compaction?'choose':'follow');setProvider(result.compaction?.provider??'');setModel(result.compaction?.model??'')
+          const catalog=await request({action:'models'},signal);if(!signal?.aborted)setProviders(catalog.providers)
+        } catch(error){if(error.name!=='AbortError')showError(error)}
+        finally { if(!signal?.aborted)setBusy('') }
+      },[tr])
+      React.useEffect(()=>{const controller=new AbortController();void load(controller.signal);return()=>controller.abort()},[load])
+      React.useEffect(()=>{if(!dirty)return;const warn=event=>{event.preventDefault();event.returnValue=''};window.addEventListener('beforeunload',warn);return()=>window.removeEventListener('beforeunload',warn)},[dirty])
+      async function saveInstructions(){setBusy('instructions');setNotice(null);try{const result=await request({action:'save_instructions',text,revision:state.instructions.revision});setState(previous=>({...previous,instructions:result.instructions}));setNotice({text:tr('saved')})}catch(error){showError(error)}finally{setBusy('')}}
+      async function saveCompression(){setBusy('compression');setNotice(null);try{const result=await request({action:'save_compaction',compaction:mode==='follow'?null:{provider,model},revision:state.revision});setState(previous=>({...previous,compaction:result.compaction,revision:result.revision,status:result.status}));setNotice({text:tr('saved')})}catch(error){showError(error)}finally{setBusy('')}}
+      const models=providers.find(item=>item.id===provider)?.models??[]
+      const button=(label,onClick,disabled=false,primary=false)=>h('button',{type:'button',className:'uas-button'+(primary?' uas-primary':''),onClick,disabled:!!busy||disabled},label)
+      const card=(title,...children)=>h('section',{className:'uas-card'},h('h3',null,title),...children)
+      return h('div',{className:'uas-page','data-plugin':'dsh-asuta-user-agent-settings'},h('style',null,CSS),h('h2',null,tr('title')),h('p',{className:'uas-muted'},tr('intro')),
+        notice?h('div',{role:notice.error?'alert':'status',className:'uas-notice'+(notice.error?' uas-error':'')},notice.text):null,
+        !state?h('div',null,tr('loading'),!busy?button(tr('retry'),()=>load()):null):h(React.Fragment,null,
+          card(tr('instructions'),h('p',{className:'uas-muted'},tr('fileHelp')),h('code',{className:'uas-path'},state.instructions.path),!state.instructions.exists?h('p',{className:'uas-muted'},tr('notCreated')):null,h('textarea',{'aria-label':tr('instructions'),className:'uas-editor',value:text,onChange:event=>setText(event.target.value),spellCheck:false,disabled:!!busy}),h('p',{className:'uas-muted'},tr('limit')),h('div',{className:'uas-actions'},button(busy==='instructions'?tr('saving'):tr('save'),saveInstructions,!instructionDirty,true),button(tr('reload'),()=>{if(!dirty||window.confirm(tr('discard')))void load()}))),
+          card(tr('compression'),h('p',{className:'uas-muted'},tr('compressionHelp')),h('label',{className:'uas-field'},h('span',null,tr('compression')),h('select',{value:mode,onChange:event=>setMode(event.target.value),disabled:!!busy},h('option',{value:'follow'},tr('follow')),h('option',{value:'choose'},tr('choose')))),mode==='choose'?h(React.Fragment,null,h('label',{className:'uas-field'},h('span',null,tr('provider')),h('select',{value:provider,onChange:event=>{setProvider(event.target.value);setModel('')},disabled:!!busy},h('option',{value:''},'—'),...providers.map(item=>h('option',{key:item.id,value:item.id},item.name||item.id)))),h('label',{className:'uas-field'},h('span',null,tr('model')),h('input',{value:model,list:'uas-models',placeholder:tr('modelPlaceholder'),onChange:event=>setModel(event.target.value),disabled:!!busy})),h('datalist',{id:'uas-models'},...models.map(item=>h('option',{key:item.id,value:item.id},item.name||item.id))),providers.length===0?h('p',{className:'uas-muted'},tr('noProviders')):null):null,h('div',{className:'uas-actions'},button(busy==='compression'?tr('saving'):tr('saveCompression'),saveCompression,!selectionDirty||(mode==='choose'&&(!provider||!model)),true)),state.status?h('details',{className:'uas-diagnostics'},h('summary',null,tr('capability')),h('pre',null,JSON.stringify(state.status,null,2))):null),
+          card(tr('refresh'),h('p',{className:'uas-muted'},tr('refreshHelp')),button(tr('refreshButton'),()=>{if(window.confirm(tr(dirty?'refreshDirty':'refreshConfirm')))window.location.reload()}))
+        ))
+    }
+    const CSS = `
+      .uas-page { max-width: 880px; padding: 28px 32px 48px; color: var(--dsw-alias-label-primary); font-family: var(--dsw-font-family),system-ui,sans-serif; }
+      .uas-page h2 { margin: 0 0 10px; font-size: 20px; font-weight: 600; } .uas-page h3 { margin: 0 0 12px; font-size: 16px; font-weight: 600; }
+      .uas-muted { color: var(--dsw-alias-label-secondary); font-size: 13px; line-height: 1.65; margin: 8px 0 14px; }
+      .uas-card { padding: 22px 0 26px; border-bottom: 1px solid var(--dsw-alias-border-l1); } .uas-card:last-child { border: none; }
+      .uas-path { display:block; overflow-wrap:anywhere; font-size:12px; margin:12px 0; color:var(--dsw-alias-label-secondary); }
+      .uas-editor { box-sizing: border-box; display:block; width:100%; min-height:260px; resize:vertical; padding:14px; line-height:1.6; font-family:ui-monospace,Consolas,monospace; font-size:13px; color:var(--dsw-alias-label-primary); background:var(--dsw-alias-bg-layer-1); border:1px solid var(--dsw-alias-border-l1); border-radius:10px; }
+      .uas-actions { display:flex; flex-wrap:wrap; gap:10px; margin-top:14px; }
+      .uas-button { border:1px solid var(--dsw-alias-border-l1); border-radius:8px; padding:8px 14px; background:var(--dsw-alias-bg-layer-1); color:var(--dsw-alias-label-primary); font:inherit; font-size:13px; cursor:pointer; }
+      .uas-button:hover { background:var(--dsw-alias-interactive-bg-hover); } .uas-button:disabled { opacity:.5; cursor:default; } .uas-primary { color:var(--dsw-alias-brand-primary); border-color:var(--dsw-alias-brand-primary); }
+      .uas-field { display:grid; grid-template-columns:130px minmax(0,1fr); align-items:center; gap:16px; margin:14px 0; font-size:13px; }
+      .uas-field input,.uas-field select { box-sizing:border-box; width:100%; padding:9px 11px; border:1px solid var(--dsw-alias-border-l1); border-radius:8px; color:var(--dsw-alias-label-primary); background:var(--dsw-alias-bg-layer-1); font:inherit; }
+      .uas-notice { padding:10px 14px; border:1px solid var(--dsw-alias-border-l1); border-radius:8px; font-size:13px; } .uas-error { color:var(--dsw-alias-state-error-primary); }
+      .uas-diagnostics { margin-top:14px; font-size:12px; color:var(--dsw-alias-label-secondary); } .uas-diagnostics pre { white-space:pre-wrap; overflow-wrap:anywhere; }
+      .uas-page button:focus-visible,.uas-page input:focus-visible,.uas-page select:focus-visible,.uas-page textarea:focus-visible { outline:2px solid var(--dsw-alias-brand-primary); outline-offset:2px; }
+      @media(max-width:600px){.uas-page{padding:20px 16px}.uas-field{grid-template-columns:1fr;gap:7px}}
+    `
+    return {inject:['slots','locale'],apply(ctx){
+      ctx.effect(()=>ctx.locale.register(NS,{zh,en}),'user-agent-settings: translations')
+      ctx.effect(()=>ctx.slots.inject('settings.section',()=>ctx.slots.register({name:'settings.section',id:'user-agent-settings',order:45,label:()=>ctx.locale.bind(NS)('title'),locale:NS},Page)),'user-agent-settings: settings page')
+    }}
+  },
+})

package/compaction.js

@@ -0,0 +1,268 @@
+/**
+ * Runtime-only compaction routing. Persistence belongs to the settings core.
+ *
+ * Native contract verified against dsh-compaction-basic: summarize is the sole
+ * customization hook and every automatic/manual/region path dispatches it.
+ * We never register llm/stream middleware, edit Loader/profile configuration,
+ * mutate AgentOptions/session headers, or change the live engine config.
+ *
+ * createCompactionAdapter(ctx, getSelection) returns synchronously:
+ *   status(): detached diagnostic object (no model requests)
+ *   refresh(): rescan live scopes; existing wrappers read selection per call
+ *   validate(selection): Promise<normalized selection>; metadata-only check
+ *   dispose(): Promise<void>; idempotent, restores owned method descriptors
+ * Selection is {provider, model} or null (follow each conversation's route).
+ * Changing the getter affects the next summary, never an in-flight summary.
+ */
+const ORIGINAL = Symbol.for('cordis.original')
+const OWNED = Symbol.for('user-agent-settings.compaction-adapter.v1')
+
+function failure(code, message) { return Object.assign(new Error(message), { code }) }
+function canonical(value) { return value?.[ORIGINAL] ?? value }
+function normalize(selection) {
+  if (selection === null) return null
+  if (!selection || typeof selection !== 'object' || Array.isArray(selection) ||
+      Object.keys(selection).some(key => key !== 'provider' && key !== 'model') ||
+      typeof selection.provider !== 'string' || !selection.provider.trim() ||
+      typeof selection.model !== 'string' || !selection.model.trim()) {
+    throw failure('INVALID_COMPACTION_MODEL', 'Compaction model must be null or a non-empty {provider, model} pair.')
+  }
+  return Object.freeze({ provider: selection.provider, model: selection.model })
+}
+
+function inspectEngine(value) {
+  const engine = canonical(value)
+  if (!engine) return { engine: null, supported: false, reason: 'No compaction service is active in this scope.' }
+  let proto = engine
+  let native
+  while (proto && proto !== Object.prototype) {
+    const constructor = Object.getOwnPropertyDescriptor(proto, 'constructor')?.value
+    if (constructor?.name === 'BasicCompactionEngine') {
+      native = Object.getOwnPropertyDescriptor(proto, 'summarize')?.value
+      break
+    }
+    proto = Object.getPrototypeOf(proto)
+  }
+  const current = engine.summarize
+  const base = current?.[OWNED]?.original ?? current
+  if (typeof native !== 'function' || base !== native ||
+      !engine.config || !Array.isArray(engine.config.modelPolicies) ||
+      typeof engine.compactNow !== 'function' || typeof engine.compactRegion !== 'function' ||
+      typeof engine.compactIfNeeded !== 'function') {
+    return { engine, supported: false, reason: 'Custom/unknown compaction engine: only the native BasicCompactionEngine summarizer hook is supported.' }
+  }
+  const descriptor = Object.getOwnPropertyDescriptor(engine, 'summarize')
+  if (descriptor && !descriptor.configurable && !descriptor.writable) {
+    return { engine, supported: false, reason: 'The compaction summarizer is not replaceable.' }
+  }
+  if (!descriptor && !Object.isExtensible(engine)) {
+    return { engine, supported: false, reason: 'The compaction instance is not extensible.' }
+  }
+  return { engine, supported: true, original: base }
+}
+
+function summaryConfig(config, selection) {
+  const pair = {
+    summarizationProvider: selection?.provider ?? '',
+    summarizationModel: selection?.model ?? '',
+  }
+  // Exact model policies otherwise win over the top-level summarizer route.
+  // All pressure, retention, retry and output-cap policy values are preserved.
+  return Object.freeze({
+    ...config, ...pair,
+    modelPolicies: Object.freeze(config.modelPolicies.map(policy => Object.freeze({ ...policy, ...pair }))),
+  })
+}
+
+export function createCompactionAdapter(ctx, getSelection) {
+  if (typeof getSelection !== 'function') throw new TypeError('getSelection must be a function')
+  const records = new Map()
+  const patches = new Map()
+  const listeners = []
+  const rootKey = {}
+  let disposed = false
+  let disposal
+  let lastError = null
+  let summariesStarted = 0
+
+  function warn(error) {
+    lastError = error instanceof Error ? error.message : String(error)
+    try { ctx.logger?.warn?.('Compaction model adapter: ' + lastError) } catch {}
+  }
+  function getService(scope, name) { return scope?.get?.(name) }
+  function compactionFor(record) {
+    if (record.kind === 'agent') {
+      // Preset groups isolate compaction BELOW Agent.ctx; ctx.get cannot see
+      // them. This public resolver also returns a caller-traced service.
+      const presets = getService(ctx, 'agentPresets')
+      const service = presets?.serviceFor?.(record.agent, 'compaction')
+      if (service !== undefined) { record.source = 'preset'; return service }
+    }
+    record.source = record.kind === 'host' ? 'host' : 'agent'
+    return getService(record.scope, 'compaction')
+  }
+  function release(record) {
+    const patch = record.patch
+    record.patch = null
+    if (!patch || --patch.users > 0) return
+    patches.delete(patch.engine)
+    if (patch.engine.summarize !== patch.wrapper) return // never clobber a later owner
+    if (patch.descriptor) Object.defineProperty(patch.engine, 'summarize', patch.descriptor)
+    else delete patch.engine.summarize
+  }
+  function sync(record) {
+    if (disposed || record.stopped) return
+    let inspection
+    try { inspection = inspectEngine(compactionFor(record)) }
+    catch (error) { inspection = { engine: null, supported: false, reason: String(error.message ?? error) } }
+    if (record.patch && record.patch.engine === inspection.engine &&
+        inspection.engine.summarize === record.patch.wrapper) {
+      record.supported = true; record.reason = null; return
+    }
+    release(record)
+    record.supported = inspection.supported
+    record.reason = inspection.reason ?? null
+    if (!inspection.supported) return
+    let patch = patches.get(inspection.engine)
+    if (!patch) {
+      if (inspection.engine.summarize?.[OWNED]) {
+        record.supported = false
+        record.reason = 'Another compaction settings adapter already owns this instance.'
+        return
+      }
+      const { engine, original } = inspection
+      patch = { engine, original, descriptor: Object.getOwnPropertyDescriptor(engine, 'summarize'), users: 0 }
+      patch.wrapper = function (input, agent, signal) {
+        if (disposed) return Reflect.apply(original, this, [input, agent, signal])
+        const selection = normalize(getSelection())
+        const receiver = Object.create(this)
+        Object.defineProperty(receiver, 'config', { value: summaryConfig(this.config, selection) })
+        summariesStarted++
+        // Per-call receiver preserves the caller's Cordis ctx and cancellation.
+        // No mutation, await window, request middleware, or global LLM rewrite.
+        return Reflect.apply(original, receiver, [input, agent, signal])
+      }
+      Object.defineProperty(patch.wrapper, OWNED, { value: { original } })
+      try {
+        Object.defineProperty(engine, 'summarize', {
+          ...(patch.descriptor ?? { configurable: true, enumerable: false, writable: true }),
+          value: patch.wrapper,
+        })
+      } catch (error) {
+        record.supported = false; record.reason = String(error.message ?? error); warn(error); return
+      }
+      patches.set(engine, patch)
+    }
+    patch.users++
+    record.patch = patch
+  }
+  function watch(key, scope, kind) {
+    if (!scope || records.has(key) || disposed) return
+    const record = { scope, kind, agent: kind === 'agent' ? key : null, source: null, id: kind === 'agent' ? String(key.id) : null, stopped: false, patch: null, supported: false, reason: null, watcher: null, lifetime: null }
+    records.set(key, record)
+    const stop = () => {
+      if (record.stopped) return
+      record.stopped = true
+      records.delete(key)
+      release(record)
+      const watcher = record.watcher; record.watcher = null
+      return watcher?.dispose?.()
+    }
+    record.stop = stop
+    sync(record) // cover already-loaded agents before asynchronous inject setup
+    try {
+      if (typeof scope.inject === 'function') {
+        record.watcher = scope.inject(['compaction'], function compactionSettingsScope() {
+          sync(record)
+          return () => release(record)
+        })
+        // Fiber is thenable: observe startup failures, not a detached rejection.
+        if (record.watcher?.then) Promise.resolve(record.watcher).catch(warn)
+      }
+      // Agent scope and plugin both own this registration (practices.md).
+      if (kind === 'agent' && typeof scope.effect === 'function') {
+        record.lifetime = scope.effect(() => stop, 'user-agent-settings: compaction scope')
+      }
+    } catch (error) { warn(error) }
+  }
+  function refresh() {
+    if (disposed) return status()
+    try {
+      watch(rootKey, ctx, 'host')
+      const agents = getService(ctx, 'agents')
+      const live = agents?.list?.() ?? []
+      const keys = new Set(live)
+      for (const agent of live) watch(agent, agent.ctx, 'agent')
+      for (const [key, record] of records) {
+        if (record.kind === 'agent' && !keys.has(key)) {
+          const result = record.stop(); result?.catch?.(warn)
+        } else sync(record)
+      }
+    } catch (error) { warn(error) }
+    return status()
+  }
+  function status() {
+    let selection = null
+    let selectionError = null
+    try { selection = normalize(getSelection()) } catch (error) { selectionError = error.message }
+    const scopes = [...records.values()].map(record => ({
+      kind: record.kind, source: record.source, sessionId: record.id, supported: record.supported, reason: record.reason,
+    }))
+    const active = scopes.filter(scope => scope.supported).length
+    const unsupported = scopes.filter(scope => !scope.supported && !scope.reason?.startsWith('No compaction service'))
+    return {
+      available: !disposed && active > 0 && unsupported.length === 0 && !selectionError,
+      mode: selection === null ? 'follow-conversation' : 'fixed',
+      selection, disposed, mechanism: 'native-summarize-hook',
+      coverage: ['automatic', 'context-overflow', 'manual', 'region'],
+      activeEngines: patches.size, activeScopes: active, scopes, summariesStarted,
+      limitations: unsupported.map(scope => ({ sessionId: scope.sessionId, reason: scope.reason })),
+      error: selectionError ?? lastError,
+    }
+  }
+  async function validate(value) {
+    if (disposed) throw failure('COMPACTION_ADAPTER_DISPOSED', 'Compaction adapter is disposed.')
+    const selection = normalize(value)
+    const report = refresh()
+    if (selection !== null && (!report.activeEngines || report.limitations.length)) {
+      throw failure('COMPACTION_UNSUPPORTED', report.limitations[0]?.reason ?? 'No supported native compaction service is active.')
+    }
+    if (selection === null) return null
+    const llm = getService(ctx, 'llm')
+    const providers = await llm?.listProviders?.()
+    if (!providers?.some(provider => provider.id === selection.provider)) {
+      throw failure('COMPACTION_PROVIDER_UNAVAILABLE', 'The selected compaction provider is not registered.')
+    }
+    const models = await llm.listModels(selection.provider)
+    if (!models.some(model => model.id === selection.model)) {
+      throw failure('COMPACTION_MODEL_UNAVAILABLE', 'The selected compaction model is not in the provider model catalog.')
+    }
+    return selection
+  }
+  function dispose() {
+    if (disposal) return disposal
+    disposed = true
+    const pending = []
+    for (const off of listeners.splice(0)) {
+      try { const result = off(); if (result?.then) pending.push(result) } catch (error) { warn(error) }
+    }
+    for (const record of [...records.values()]) {
+      try {
+        const result = record.stop(); if (result?.then) pending.push(result)
+        const lifetime = record.lifetime?.(); if (lifetime?.then) pending.push(lifetime)
+      } catch (error) { warn(error) }
+    }
+    disposal = Promise.allSettled(pending).then(() => undefined)
+    return disposal
+  }
+  if (typeof ctx.on === 'function') {
+    listeners.push(ctx.on('agent/created', ({ agent }) => { watch(agent, agent.ctx, 'agent') }))
+    listeners.push(ctx.on('agent/disposed', ({ agent }) => {
+      const record = records.get(agent); const result = record?.stop(); result?.catch?.(warn)
+    }))
+    listeners.push(ctx.on('app-boot/config-reload', () => { refresh() }))
+    listeners.push(ctx.on('agent-preset/selected', () => { refresh() }))
+  }
+  refresh()
+  return { status, refresh, validate, dispose }
+}

package/cordis.patch.yml

@@ -0,0 +1,4 @@
+- insert:
+    - id: user-agent-settings
+      name: 'dsh-asuta-user-agent-settings'
+      config: {}

package/core.js

@@ -0,0 +1,87 @@
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import os from 'node:os'
+import { createHash, randomUUID } from 'node:crypto'
+
+export const MAX_INSTRUCTION_BYTES = 128 * 1024
+// Match the native instruction loader without relaxing editor/write protections.
+export const MAX_RUNTIME_INSTRUCTION_BYTES = 1024 * 1024
+export const digest = text => createHash('sha256').update(text).digest('hex')
+export const fault = (code, message) => Object.assign(new Error(message), { code })
+export function homePath(env = process.env) {
+  const value = env.DSH_HOME?.trim() || path.join(os.homedir(), '.dsh')
+  return path.resolve(value === '~' ? os.homedir() : /^[~][\\/]/.test(value) ? path.join(os.homedir(), value.slice(2)) : value)
+}
+async function readText(file, optional = false, { runtime = false } = {}) {
+  const limit = runtime ? MAX_RUNTIME_INSTRUCTION_BYTES : MAX_INSTRUCTION_BYTES
+  try {
+    const stat = runtime ? await fs.stat(file) : await fs.lstat(file)
+    if (!stat.isFile() || (!runtime && stat.isSymbolicLink())) throw fault('INVALID_FILE', 'The settings target must be a regular file' + (runtime ? '' : ', not a symbolic link'))
+    const tooLarge = () => fault('TOO_LARGE', runtime ? 'File exceeds the 1 MiB runtime instruction limit' : 'File exceeds the 128 KiB editor limit')
+    if (stat.size > limit) throw tooLarge()
+    const content = await fs.readFile(file)
+    if (content.length > limit) throw tooLarge()
+    return { exists: true, text: content.toString('utf8') }
+  } catch (error) { if (optional && error.code === 'ENOENT') return { exists: false, text: '' }; throw error }
+}
+async function atomicWrite(file, text) {
+  await fs.mkdir(path.dirname(file), { recursive: true })
+  const temporary = file + '.' + randomUUID() + '.tmp'
+  try { await fs.writeFile(temporary, text, { flag: 'wx', mode: 0o600 }); await fs.rename(temporary, file) }
+  finally { await fs.rm(temporary, { force: true }) }
+}
+export function createSettingsCore({ home = homePath(), llm, adapter } = {}) {
+  const instructionFile = path.join(home, 'AGENTS.md')
+  const selectionFile = path.join(home, 'plugin-data', 'user-agent-settings', 'settings.json')
+  let selection = null, selectionRevision = digest('missing'), tail = Promise.resolve()
+  const serial = operation => { const next = tail.then(operation); tail = next.catch(() => {}); return next }
+  async function load() {
+    const saved = await readText(selectionFile, true)
+    if (saved.exists) { const parsed = JSON.parse(saved.text); selection = normalizeSelection(parsed.compaction); selectionRevision = digest(saved.text) }
+    else { selection = null; selectionRevision = digest('missing') }
+    return selection
+  }
+  function normalizeSelection(value) {
+    if (value === null || value === undefined) return null
+    if (!value || typeof value !== 'object' || typeof value.provider !== 'string' || typeof value.model !== 'string' || !value.provider.trim() || !value.model.trim() || value.provider.length > 256 || value.model.length > 512) throw fault('BAD_SELECTION', 'Choose a provider and model, or follow the conversation model')
+    return { provider: value.provider.trim(), model: value.model.trim() }
+  }
+  async function instructions({ runtime = false } = {}) {
+    const content = await readText(instructionFile, true, { runtime })
+    return { path: instructionFile, ...content, revision: digest((content.exists ? 'present:' : 'missing:') + content.text), maxBytes: runtime ? MAX_RUNTIME_INSTRUCTION_BYTES : MAX_INSTRUCTION_BYTES }
+  }
+  async function saveInstructions({ text, revision }) {
+    return serial(async () => {
+      if (typeof text !== 'string' || Buffer.byteLength(text, 'utf8') > MAX_INSTRUCTION_BYTES) throw fault('TOO_LARGE', 'Instruction text must be UTF-8 text up to 128 KiB')
+      const current = await instructions()
+      if (typeof revision !== 'string' || revision !== current.revision) throw fault('CONFLICT', 'Global instructions changed elsewhere. Reload before saving')
+      if (current.exists && current.text === text) return current
+      await atomicWrite(instructionFile, text)
+      return instructions()
+    })
+  }
+  async function saveCompaction({ compaction, revision }) {
+    return serial(async () => {
+      const current = await readText(selectionFile, true)
+      const actualRevision = current.exists ? digest(current.text) : digest('missing')
+      if (revision !== actualRevision) throw fault('CONFLICT', 'Compression settings changed elsewhere. Reload before saving')
+      const next = normalizeSelection(compaction)
+      await adapter?.validate(next)
+      if (next && !adapter) await llm.resolveModelInfo(next.provider, next.model)
+      const text = JSON.stringify({ version: 1, compaction: next }, null, 2) + '\n'
+      await atomicWrite(selectionFile, text)
+      selection = next; selectionRevision = digest(text)
+      adapter?.refresh?.()
+      return { compaction: selection, revision: selectionRevision, status: adapter?.status?.() ?? null }
+    })
+  }
+  async function models() {
+    const providers = llm.listProviders()
+    const entries = await Promise.all(providers.map(async provider => {
+      try { return { ...provider, models: (await llm.listModels(provider.id)).map(model => ({ id: model.id, name: model.name })) } }
+      catch (error) { return { ...provider, models: [], error: error.message } }
+    }))
+    return entries
+  }
+  return { load, instructions, saveInstructions, saveCompaction, models, getSelection: () => selection, setAdapter: value => { adapter = value }, snapshot: () => serial(async () => { await load(); return { instructions: await instructions(), compaction: selection, revision: selectionRevision, status: adapter?.status?.() ?? null } }) }
+}

package/icon.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64" viewBox="0 0 64 64"><rect x="4" y="4" width="56" height="56" rx="15" fill="#164e63"/><path d="M18 17h22l7 7v24H18z" fill="none" stroke="#ecfeff" stroke-width="3" stroke-linejoin="round"/><path d="M39 17v9h8M24 33h17M24 39h10" fill="none" stroke="#67e8f9" stroke-width="3" stroke-linecap="round"/><circle cx="45" cy="45" r="10" fill="#0891b2"/><path d="M45 39v12M39 45h12" stroke="#fff" stroke-width="2.5" stroke-linecap="round"/></svg>

package/index.js

@@ -0,0 +1,88 @@
+import { createSettingsCore, MAX_INSTRUCTION_BYTES } from './core.js?v=1.0.3'
+import { createCompactionAdapter } from './compaction.js?v=1.0.1'
+import { createGlobalInstructionsAdapter } from './instructions.js?v=1.0.2'
+import { createSettingsToolExecutor } from './permissions.js?v=1.0.3'
+
+export const inject = ['webServer', 'llm', 'agents', 'agentPresets', 'systemPrompt', 'connection', 'sandboxPolicy']
+const PREFIX = '/__user-agent-settings'
+// JSON can encode one control byte as six bytes (\u0000). Core still
+// validates the decoded UTF-8 text against the independent 128 KiB limit.
+const MAX_BODY = MAX_INSTRUCTION_BYTES * 6 + 16 * 1024
+async function readJson(req) {
+  const chunks = []; let size = 0
+  for await (const chunk of req) { size += chunk.length; if (size > MAX_BODY) throw Object.assign(new Error('Request too large'), { code: 'TOO_LARGE' }); chunks.push(chunk) }
+  return chunks.length ? JSON.parse(Buffer.concat(chunks).toString('utf8')) : {}
+}
+function respond(res, status, value) { res.statusCode = status; res.setHeader('content-type', 'application/json; charset=utf-8'); res.setHeader('cache-control', 'no-store'); res.end(JSON.stringify(value)) }
+export async function apply(ctx) {
+  const core = createSettingsCore({ llm: ctx.llm })
+  await core.load()
+  let globalInstructions = null, instructionReadError = null
+  async function refreshGlobalInstructions() {
+    try {
+      globalInstructions = await core.instructions({ runtime: true })
+      instructionReadError = null
+    } catch (error) {
+      // Do not inject stale preferences or let optional fallback I/O gate every
+      // main/child request. Native presets keep their own instruction loader.
+      globalInstructions = null
+      const diagnostic = { code: error.code ?? 'INSTRUCTION_READ_FAILED', message: String(error.message ?? error) }
+      if (diagnostic.code !== instructionReadError?.code || diagnostic.message !== instructionReadError?.message) {
+        try { ctx.logger?.warn?.('Global instructions refresh: ' + diagnostic.message) } catch {}
+      }
+      instructionReadError = diagnostic
+    }
+  }
+  await refreshGlobalInstructions()
+  const instructionAdapter = await createGlobalInstructionsAdapter(ctx, () => globalInstructions?.text.trim() ? `Global user instructions from ${globalInstructions.path}. Apply as user preferences; system, developer, direct user, project and role-specific instructions retain precedence.\n\n${globalInstructions.text}` : '')
+  ctx.effect(() => () => instructionAdapter.dispose(), 'user-agent-settings: dispose global instructions fallback')
+  ctx.on('agent/pre-step', async (_step, next) => { await refreshGlobalInstructions(); return next() })
+  const adapter = createCompactionAdapter(ctx, core.getSelection)
+  core.setAdapter(adapter)
+  ctx.effect(() => () => adapter.dispose(), 'user-agent-settings: dispose compaction routing')
+  async function operate(args = {}) {
+    switch (args.action) {
+      case 'read': {
+        const presets = await ctx.get('agentPresets')?.compositionInventory?.() ?? []
+        const instructionLoaders = presets.map(preset => ({ id: preset.id, name: preset.name ?? preset.id, default: preset.isDefault, nativeGlobalFile: preset.rows.some(row => row.enabled === true && row.moduleName === '@deepseek-ai/dsh-agent-instructions') }))
+        await refreshGlobalInstructions()
+        const snapshot = await core.snapshot()
+        return { ok: true, ...snapshot, instructionLoaders, globalInstructionStatus: { ...instructionAdapter.status(), instructionReadError }, desktopNavigationStatus: ctx.get('desktopNavigationStatus')?.read?.() ?? null, clientAssets: ctx.get('clientModules')?.graph().entries.filter(entry => ['dsh-asuta-user-agent-settings', 'dsh-asuta-desktop-navigation'].includes(entry.id)) ?? [] }
+      }
+      case 'models': return { ok: true, providers: await core.models() }
+      case 'save_instructions': {
+        const instructions = await core.saveInstructions(args)
+        await refreshGlobalInstructions()
+        return { ok: true, instructions }
+      }
+      case 'save_compaction': return { ok: true, ...(await core.saveCompaction(args)) }
+      default: throw Object.assign(new Error('Unknown action'), { code: 'BAD_ACTION' })
+    }
+  }
+  ctx.effect(() => ctx.provide('userAgentSettings', { operate }), 'user-agent-settings: shared operations')
+  ctx.effect(() => ctx.webServer.register({
+    kind: 'exact', path: PREFIX + '/operation',
+    async handler(req, res) {
+      const rejection = ctx.connection.requestRejection(req)
+      if (rejection !== undefined) return respond(res, rejection, { ok: false, code: 'FORBIDDEN', error: 'DSH authentication required' })
+      if (String(req.headers['x-user-agent-settings'] ?? '') !== '1') return respond(res, 403, { ok: false, code: 'FORBIDDEN', error: 'Missing settings request header' })
+      const origin = req.headers.origin
+      if (origin && origin !== ctx.webServer.getOrigin()) return respond(res, 403, { ok: false, code: 'FORBIDDEN', error: 'Cross-origin settings requests are not allowed' })
+      if (req.method !== 'POST') return respond(res, 405, { ok: false, error: 'POST only' })
+      try { respond(res, 200, await operate(await readJson(req))) }
+      catch (error) { respond(res, error.code === 'CONFLICT' ? 409 : 400, { ok: false, code: error.code ?? 'SETTINGS_FAILED', error: error.message }) }
+    },
+  }), 'user-agent-settings: authenticated settings route')
+  ctx.effect(() => ctx.get('tools')?.register({
+    name: 'user_agent_settings', deferLoading: true,
+    description: 'Read or edit the native global AGENTS instructions and choose the model used only for context compression across main agents and subagents. Saves require the revision returned by read and danger-full-access permission or native approval for this call; they affect other sessions. Browser refresh is user-only.',
+    parameters: { type: 'object', properties: {
+      action: { type: 'string', enum: ['read', 'models', 'save_instructions', 'save_compaction'] },
+      revision: { type: 'string', description: 'For instruction saves use instructions.revision; for compression saves use the top-level revision from read.' },
+      text: { type: 'string', description: 'Complete global AGENTS.md contents for save_instructions, up to 128 KiB UTF-8.' },
+      compaction: { description: 'For save_compaction: null follows each conversation model; otherwise provide its registered provider and model.', oneOf: [{ type: 'null' }, { type: 'object', properties: { provider: { type: 'string' }, model: { type: 'string' } }, required: ['provider', 'model'], additionalProperties: false }] },
+    }, required: ['action'], additionalProperties: false },
+    output: { schema: { type: 'object', additionalProperties: true }, render: (_args, value) => [{ type: 'text', text: JSON.stringify(value) }] },
+    execute: createSettingsToolExecutor(ctx, operate),
+  }), 'user-agent-settings: agent settings operations')
+}

package/instructions.js

@@ -0,0 +1,164 @@
+/**
+ * Fill the native global AGENTS gap for presets without agent-instructions.
+ * No file access or profile writes; the parent owns the synchronous text cache.
+ *
+ * Public API: await createGlobalInstructionsAdapter(ctx, getInstructionsText)
+ * -> { refresh(): Promise<status>, status(): plain diagnostics,
+ *      dispose(): Promise<void> }.
+ *
+ * Native assembleContextFor(agent) supplies scope=agent. Use that exact public
+ * Agent/context relationship and agentPresets.composedPreset(), plus exact
+ * acquireScope() keys for cold assembly. No private scope symbols or imports.
+ */
+const NATIVE_LOADER = '@deepseek-ai/dsh-agent-instructions'
+const CONTEXT_NAME = 'user-agent-settings.global-instructions'
+
+export async function createGlobalInstructionsAdapter(ctx, getInstructionsText) {
+  if (typeof getInstructionsText !== 'function') throw new TypeError('getInstructionsText must be a function')
+  const presets = ctx.get('agentPresets')
+  const prompt = ctx.get('systemPrompt')
+  if (!presets?.compositionInventory || !presets?.acquireScope || !presets?.composedPreset || !prompt?.context) {
+    throw new Error('Global instructions require the native agentPresets and systemPrompt services.')
+  }
+  let rows = new Map()
+  let leases = new Map()
+  let pending = null
+  let dirty = false
+  let disposed = false
+  let disposal = null
+  let lastError = null
+  let generation = 0
+  let unregisterContext = null
+  const listeners = []
+
+  function warn(error) {
+    lastError = error instanceof Error ? error.message : String(error)
+    try { ctx.logger?.warn?.('Global instructions adapter: ' + lastError) } catch {}
+  }
+  function text() {
+    const value = getInstructionsText()
+    if (typeof value !== 'string') throw new TypeError('getInstructionsText must return a string')
+    return value.trim() ? value : ''
+  }
+  async function release(lease) {
+    if (lease?.[Symbol.asyncDispose]) await lease[Symbol.asyncDispose]()
+    else if (lease?.dispose) await lease.dispose()
+  }
+  function modeOf(inventory) {
+    const native = (inventory.rows ?? []).filter(row => row.moduleName === NATIVE_LOADER)
+    if (native.some(row => row.enabled === true)) return 'native'
+    // Conditional ownership is uncertain: suppress our copy instead of risking
+    // two copies if the native loader activates. Report it in status.
+    if (native.some(row => row.enabled === 'conditional')) return 'uncertain'
+    return 'fallback'
+  }
+  async function rebuild() {
+    const inventory = await presets.compositionInventory()
+    const nextRows = new Map()
+    const nextLeases = new Map()
+    try {
+      for (const entry of inventory) {
+        const mode = modeOf(entry)
+        const row = { id: entry.id, mode, broken: typeof entry.broken === 'string' ? entry.broken : null }
+        nextRows.set(entry.id, row)
+        if (mode !== 'fallback' || row.broken) continue
+        const lease = await presets.acquireScope(entry.id)
+        if (disposed) { await release(lease); break }
+        nextLeases.set(entry.id, lease)
+      }
+    } catch (error) {
+      await Promise.allSettled([...nextLeases.values()].map(release))
+      throw error
+    }
+    if (disposed) {
+      await Promise.allSettled([...nextLeases.values()].map(release))
+      return
+    }
+    const previous = leases
+    rows = nextRows
+    leases = nextLeases
+    lastError = null
+    generation++
+    const results = await Promise.allSettled([...previous.values()].map(release))
+    for (const result of results) if (result.status === 'rejected') warn(result.reason)
+  }
+  function refresh() {
+    if (disposed) return Promise.resolve(status())
+    dirty = true
+    if (pending) return pending
+    pending = (async () => {
+      while (dirty && !disposed) { dirty = false; await rebuild() }
+      return status()
+    })().catch(error => { warn(error); throw error }).finally(() => { pending = null })
+    return pending
+  }
+  function fallbackFor(scope) {
+    if (scope === undefined) return true
+    // Cold presentation acquires and supplies the revision key itself.
+    for (const [id, lease] of leases) if (scope === lease.key) return rows.get(id)?.mode === 'fallback'
+    // Live main/subagents are their own native prompt assembly scope keys.
+    // Reading the composed preset through its public context API is crucial:
+    // Agent.ctx.get cannot resolve the isolated preset composition.
+    if (scope && typeof scope === 'object' && scope.ctx) {
+      const id = presets.composedPreset(scope.ctx)
+      return id !== undefined && rows.get(id)?.mode === 'fallback' && !rows.get(id)?.broken
+    }
+    return false
+  }
+  function contextText(assembly = {}) {
+    if (disposed || !fallbackFor(assembly.scope)) return ''
+    return text()
+  }
+  function status() {
+    return {
+      available: !disposed && unregisterContext !== null,
+      mechanism: 'required-native-prompt-context',
+      contextName: CONTEXT_NAME,
+      generation, disposed, pending: pending !== null,
+      presets: [...rows.values()].map(row => ({
+        id: row.id, nativeGlobalFile: row.mode === 'native',
+        fallback: row.mode === 'fallback' && !row.broken,
+        leaseActive: leases.has(row.id), uncertain: row.mode === 'uncertain', broken: row.broken,
+      })),
+      limitations: [...rows.values()].filter(row => row.mode === 'uncertain' || row.broken).map(row => ({
+        id: row.id, reason: row.broken ?? 'Conditional native instruction loader: fallback suppressed to prevent duplication.',
+      })),
+      error: lastError,
+    }
+  }
+  async function readyFor(agent) {
+    if (pending) await pending
+    const id = agent?.ctx ? presets.composedPreset(agent.ctx) : undefined
+    if (id !== undefined && !rows.has(id)) await refresh()
+  }
+  function scheduleRefresh() { refresh().catch(() => {}) }
+  function dispose() {
+    if (disposal) return disposal
+    disposed = true
+    const removals = listeners.splice(0)
+    if (unregisterContext) { removals.push(unregisterContext); unregisterContext = null }
+    disposal = (async () => {
+      const removed = await Promise.allSettled(removals.map(off => Promise.resolve().then(off)))
+      for (const result of removed) if (result.status === 'rejected') warn(result.reason)
+      if (pending) await pending.catch(() => {})
+      const previous = leases; leases = new Map()
+      const released = await Promise.allSettled([...previous.values()].map(release))
+      for (const result of released) if (result.status === 'rejected') warn(result.reason)
+    })()
+    return disposal
+  }
+  try {
+    listeners.push(ctx.on('agent/created', async ({ agent }) => { await refresh(); await readyFor(agent) }))
+    listeners.push(ctx.on('agent/pre-step', async ({ agent }, next) => { await readyFor(agent); return next() }, { prepend: true }))
+    listeners.push(ctx.on('app-boot/config-reload', scheduleRefresh))
+    listeners.push(ctx.on('agent-preset/selected', scheduleRefresh))
+    await refresh()
+    unregisterContext = prompt.context({
+      name: CONTEXT_NAME, order: 100, text: contextText, required: true, interpolate: false,
+    })
+  } catch (error) {
+    await dispose()
+    throw error
+  }
+  return { refresh, status, dispose }
+}

package/locale/en.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Global Agent Settings",
+    "description": "Edit global AGENTS instructions, choose a context compression model, and reload the frontend."
+  }
+}

package/locale/zh.json

@@ -0,0 +1,6 @@
+{
+  "meta": {
+    "title": "Agent 全局设置",
+    "description": "编辑所有工作区共用的原生 AGENTS 指令、指定上下文压缩模型，并快速刷新前端。"
+  }
+}

package/package.json

@@ -1,6 +1,72 @@
 {
   "name": "dsh-asuta-user-agent-settings",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.1.2",
+  "peerDependencies": {
+    "@deepseek-ai/dsh-sandbox": "0.2.2-rc.2"
+  },
+  "type": "module",
+  "description": "Edit native global Agent instructions, choose a compression model, and refresh the frontend from Settings.",
+  "main": "index.js",
+  "exports": {
+    ".": "./index.js",
+    "./client": "./client.js",
+    "./package.json": "./package.json",
+    "./locale/*.json": "./locale/*.json",
+    "./icon": "./icon.svg",
+    "./cordis.patch.yml": "./cordis.patch.yml"
+  },
+  "files": [
+    "index.js",
+    "client.js",
+    "core.js",
+    "compaction.js",
+    "instructions.js",
+    "permissions.js",
+    "cordis.patch.yml",
+    "locale/*.json",
+    "icon.svg",
+    "README.md",
+    "LICENSE*",
+    "NOTICE*",
+    "THIRD_PARTY_NOTICES.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "platform": "web",
+      "immediately": true,
+      "inject": [
+        "@deepseek-ai/dsh-client-locale"
+      ]
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Asuta/dsh-cdx-plus.git",
+    "directory": "packages/user-agent-settings"
+  },
+  "homepage": "https://github.com/Asuta/dsh-cdx-plus/tree/main/packages/user-agent-settings",
+  "bugs": {
+    "url": "https://github.com/Asuta/dsh-cdx-plus/issues"
+  },
+  "keywords": [
+    "dsh-plugin",
+    "deepseek-harness"
+  ],
+  "engines": {
+    "node": "^22.19.0 || >=24",
+    "dsh": "0.2.2-rc.2"
+  },
+  "license": "MIT",
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-sandbox": {
+      "optional": true
+    }
+  },
+  "icon": "./icon.svg"
+}

package/permissions.js

@@ -0,0 +1,32 @@
+const SAVE_ACTIONS = new Set(['save_instructions', 'save_compaction'])
+const loadNativeSandbox = () => import('@deepseek-ai/dsh-sandbox')
+
+// UI saves are authenticated user actions. Model saves must additionally honor
+// the actual caller's session (including delegated child policy), like the
+// native plugin_manager tool; never reuse the UI's trusted write path directly.
+export function createSettingsToolExecutor(ctx, operate, loadSandbox = loadNativeSandbox) {
+  return async (args, exec) => {
+    if (SAVE_ACTIONS.has(args?.action)) {
+      if (!exec?.signal || !ctx.sandboxPolicy?.resolve) {
+        throw Object.assign(new Error('Global settings saves require a caller execution context and sandbox policy.'), { code: 'PERMISSION_DENIED' })
+      }
+      exec.signal.throwIfAborted()
+      const policy = ctx.sandboxPolicy.resolve(exec.agent === undefined ? {} : { session: exec.agent.session })
+      if (!['read-only', 'workspace-write', 'danger-full-access'].includes(policy?.mode)) {
+        throw Object.assign(new Error('Cannot determine the caller permission mode.'), { code: 'PERMISSION_DENIED' })
+      }
+      if (policy.mode !== 'danger-full-access') {
+        // A missing native helper/approver or a denied/cancelled approval must
+        // reject the save. Import lazily so read-only discovery needs no helper.
+        const { approveEscalation } = await loadSandbox()
+        await approveEscalation({
+          requestedMode: 'danger-full-access', effectiveMode: policy.mode,
+          subject: 'global Agent settings save',
+          justification: `user_agent_settings ${args.action}. This writes global DSH settings outside the workspace and affects other sessions.`,
+        }, { approver: ctx.get('approval'), agent: exec.agent, callId: exec.callId, toolName: 'user_agent_settings', signal: exec.signal })
+      }
+      exec.signal.throwIfAborted()
+    }
+    return JSON.parse(JSON.stringify(await operate(args)))
+  }
+}