external-subagent 0.1.2 → 0.1.3

package/README.md

@@ -15,32 +15,43 @@ independent axes:
 
 ## Status
 
-Current work happens on the `audit/external-subagent-20260917` branch; the
-productization closeout below is the historical record of that stage. DSH and
-ZCode installed-artifact lifecycles, active-task upgrade, and standalone
-initialization are implemented and reviewed. `init` installs the standalone
-daemon service only — no host is bound implicitly; hosts are bound through the
-explicit `install-plugin` (Codex or ZCode) / `install-mcp` (Codex-only TOML
-binding) commands. Installing from a packed artifact and explicitly
-initializing to a launchd-resident service (idempotent repeat init/start) is
-live-verified on a real GUI session. Both productization
-candidates passed the four-cell consumer matrix — DSH/ZCode × public CLI /
-real Codex CLI via the managed plugin over MCP, each against its own tarball:
-the pre-fix candidate C1 (`0.1.1`, historical) and the post-installer-fix
-final candidate C2 (`0.1.2`), whose fresh consumer verification passed
-through the public install surface — all four cells COMPLETED with the
-plugin cache verified against the staged binding (`cache_verified: true`;
-see [docs/acceptance/productization.md](docs/acceptance/productization.md)).
-The managed plugin manifest is versioned per released candidate because its
-version is codex's plugin-cache identity, and codex resolves the reserved
-`personal` marketplace name machine-globally to the real user root
-(regardless of `CODEX_HOME`), so each candidate's consumer runs pin that
-identity's bytes there and any later candidate bumps again. The installer
-re-verified on 0.154.0; DSH admission currently supports `build` and strict
-`plan`; its model selection is explicit spawn model, configured default, then
-the native default. The package is published to the public npm registry as
+The package is published to the public npm registry as
 `external-subagent@0.1.0` (macOS arm64 only; `os`/`cpu` in `package.json`
-reject installation on other platforms at npm install time).
+reject installation on other platforms at npm install time). `init` installs
+the standalone daemon service only — no host is bound implicitly; hosts are
+bound through the explicit `install-plugin` (Codex or ZCode) /
+`install-mcp` (Codex-only TOML binding) commands. Installing from a packed
+artifact and explicitly initializing to a launchd-resident service
+(idempotent repeat init/start) is live-verified on a real GUI session;
+active-task upgrade and standalone initialization are implemented and
+reviewed.
+
+All three subagents are **disabled by default** and are enabled per name with
+`external-subagent agents enable <zcode|dsh|codex>`: a successful local probe
+writes the configuration (no write on failure), and `dsh`/`codex` need a
+daemon restart to take effect. ZCode admits all four permission modes
+(build/edit/plan/yolo) and rejects an explicit spawn `model`; DSH admits
+`build` and strict `plan`, with model selection as explicit spawn model,
+configured default, then the native default, and its `build` mode admits a
+non-empty caller `write_manifest` through the guarded manifest-build
+composition (workspace-write sandbox, `tool-fs`-only writes, out-of-manifest
+paths rejected as `FS_WRITE_MANIFEST_DENIED`; an explicit `["."]` keeps the
+legacy build composition and `plan` still requires an empty manifest); Codex
+admits all four modes
+(build/edit → workspace-write, plan → read-only, yolo → danger-full-access,
+all pinning `approvalPolicy=never`) and rejects a non-empty `write_manifest`
+with `codex_write_manifest_unsupported`. `observe` works on all three: ZCode
+and DSH expose the public reasoning tail (at most 200 characters) and Codex
+reports `reasoning: null`.
+
+The daemon socket environment variable is now the neutral
+`EXTERNAL_SUBAGENT_SOCKET`, with no fallback to the retired name. An existing
+installation upgrading to this version must run the public
+`external-subagent update` (or `reconcile`) once to rewrite the host
+bindings, then restart the service; see
+[docs/operations.md](docs/operations.md). The historical productization
+acceptance matrix is recorded in
+[docs/acceptance/productization.md](docs/acceptance/productization.md).
 
 ## Versioning
 
@@ -122,3 +133,10 @@ cargo test --workspace
 node --test tests/install/*.test.mjs tests/platform/*.test.mjs tests/cli/*.test.mjs tests/contract/*.test.mjs
 node --test tests/integration/*.test.mjs tools/probes/dsh-acp/probe.test.mjs
 ```
+
+The JavaScript install/upgrade suites build the native facade through
+`scripts/release/build-native-payload.mjs`; set
+`EXTERNAL_SUBAGENT_CARGO_PROFILE=debug` to make that entry build from
+`target/debug` (no `--release`) and record `profile: debug` in the staged
+manifest. The default stays a release build for `prepack`/publishing, and
+`npm run check` is the JavaScript syntax gate.

package/cli/commands/agents.mjs

@@ -1,4 +1,7 @@
 import { readConfig } from '../config/read.mjs';
+import { updateConfig } from '../config/write.mjs';
+import { SUBAGENT_IDS } from '../config/schema.mjs';
+import path from 'node:path';
 import { CliError } from '../errors.mjs';
 
 const INPUT_FIELDS = new Set(['operation', 'subagent', 'through', 'workspace', 'home']);
@@ -60,7 +63,11 @@ function parseModelsArgs(rest) {
 export function parseSubagentsArgs(args) {
   if (args.length === 0) return { operation: 'list' };
   const [operation, ...rest] = args;
-  if (!['list', 'status', 'probe', 'models'].includes(operation)) throw new CliError('INVALID_ARGUMENT', `unsupported subagents operation: ${operation}`, 2);
+  if (!['list', 'status', 'probe', 'models', 'enable'].includes(operation)) throw new CliError('INVALID_ARGUMENT', `unsupported subagents operation: ${operation}`, 2);
+  if (operation === 'enable') {
+    if (rest.length !== 1 || !SUBAGENT_IDS.includes(rest[0])) throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex>', 2);
+    return { operation, subagent: rest[0] };
+  }
   if (operation === 'probe') return parseProbeArgs(rest);
   if (operation === 'models') return parseModelsArgs(rest);
   if (operation === 'list' && rest.length !== 0) throw new CliError('INVALID_ARGUMENT', 'usage: subagents list', 2);
@@ -72,6 +79,44 @@ export async function subagentsCommand(paths, input = {}, options = {}) {
   validateInput(input);
   const operation = input.operation ?? 'list';
   const config = readConfig(paths.config);
+  if (operation === 'enable') {
+    const agent = input.subagent;
+    if (!SUBAGENT_IDS.includes(agent) || ['through', 'workspace', 'home'].some((key) => input[key] !== undefined)) {
+      throw new CliError('INVALID_ARGUMENT', 'usage: agents enable <zcode|dsh|codex>', 2);
+    }
+    if (typeof options.callDaemon !== 'function' || typeof options.socket !== 'string') throw new CliError('INTERNAL_ERROR', 'agents enable requires a daemon connection');
+    const entry = config.subagents[agent];
+    const scope = Object.fromEntries(['home', 'profile'].filter((key) => entry[key] != null).map((key) => [key, entry[key]]));
+    const result = await options.callDaemon(options.socket, 'agent-probe', { subagent: agent, through: 'local', scope });
+    const local = result.evidence?.local;
+    if (local?.state !== 'READY') throw new CliError('agent_probe_failed', `Cannot enable ${agent}: ${local?.reason ?? 'local runtime probe did not succeed'}`, 2);
+    const requiredVersion = result.status?.required_version;
+    if (agent === 'dsh' && (typeof requiredVersion !== 'string' || !requiredVersion.trim())) {
+      throw new CliError('agent_probe_failed', 'Cannot enable dsh: daemon did not report required_version; update and restart the daemon, then retry', 2);
+    }
+    if (requiredVersion != null && local.version !== requiredVersion) {
+      throw new CliError('agent_probe_failed', `Cannot enable ${agent}: expected version ${requiredVersion}, observed ${local.version ?? 'unknown'}; install the required runtime version and retry`, 2);
+    }
+    const patch = { enabled: true, spawn_supported: true };
+    if (agent !== 'zcode') {
+      if (typeof local.runtime_path !== 'string' || !path.isAbsolute(local.runtime_path) || typeof local.version !== 'string' || !local.version.trim()) {
+        throw new CliError('agent_probe_failed', 'Probe did not return an absolute runtime_path and observed version', 2);
+      }
+      const home = local.scope?.home;
+      if (typeof home !== 'string' || !path.isAbsolute(home)) throw new CliError('agent_probe_failed', `Cannot enable ${agent}: configure subagents.${agent}.home or export ${agent.toUpperCase()}_HOME before starting the daemon`, 2);
+      Object.assign(patch, { runtime_path: local.runtime_path, home, profile: agent === 'dsh' ? 'acp' : (entry.profile ?? null), version: local.version });
+    }
+    const updated = updateConfig(paths.config, (latest) => {
+      if (Object.entries(patch).every(([key, value]) => latest.subagents[agent][key] === value)) return latest;
+      return { ...latest, subagents: { ...latest.subagents, [agent]: { ...latest.subagents[agent], ...patch } } };
+    });
+    const restart = agent !== 'zcode';
+    return {
+      subagent: agent, enabled: true, config_revision: updated.revision,
+      config: updated, evidence: subagentView(result.evidence), restart_required: restart,
+      message: restart ? '配置已保存，重启 daemon 后生效。' : '配置已保存，新的 zcode 任务即时生效，无需重启。',
+    };
+  }
   if (operation === 'list') {
     return { default_subagent: config.default_subagent, config_revision: config.revision, subagents: Object.entries(config.subagents).map(([id, value]) => ({ subagent: id, ...value })) };
   }
@@ -99,7 +144,10 @@ export async function subagentsCommand(paths, input = {}, options = {}) {
   const entries = status.subagents ?? status.agents;
   if (!Array.isArray(entries)) throw new CliError('PROTOCOL_ERROR', 'daemon status did not include subagent status');
   const subagents = entries.filter((entry) => input.subagent === undefined || (entry.subagent ?? entry.agent) === input.subagent).map(subagentView);
-  if (input.subagent !== undefined && subagents.length === 0) throw new CliError('subagent_unknown', `daemon did not report subagent: ${input.subagent}`, 2);
+  if (input.subagent !== undefined && subagents.length === 0) {
+    const roster = entries.map((entry) => entry.subagent ?? entry.agent).filter(Boolean).map((name) => `"${name}"`).join(', ');
+    throw new CliError('subagent_unknown', `daemon did not report subagent: ${input.subagent}, available subagents are [${roster}]`, 2);
+  }
   return { service_generation: status.service_generation ?? null, subagents };
 }
 

package/cli/commands/config.mjs

@@ -36,8 +36,8 @@ function unsetPatch(key) {
   if (key === 'default_subagent') return { default_subagent: null };
   const [, agent, field] = key.split('.');
   const defaults = {
-    enabled: agent === 'zcode',
-    spawn_supported: agent === 'zcode',
+    enabled: false,
+    spawn_supported: false,
     default_model: null, runtime_path: null, home: null, profile: null, version: null,
   };
   return { subagents: { [agent]: { [field]: defaults[field] } } };

package/cli/commands/maintenance.mjs

@@ -1,4 +1,4 @@
-import { backupData, cleanupLegacy, purge, restoreData, uninstall as removeService } from '../maintenance.mjs';
+import { backupData, purge, restoreData, uninstall as removeService } from '../maintenance.mjs';
 import { unregisterAllCodexHomes } from '../install/reconcile.mjs';
 import { uninstallZcodePlugin } from '../install/zcode.mjs';
 
@@ -24,4 +24,4 @@ export function uninstall(paths, options = {}) {
   return { ...removed, codex_homes_unregistered: released.unregistered, zcode_binding: zcode };
 }
 
-export { backupData, cleanupLegacy, purge, restoreData };
+export { backupData, purge, restoreData };

package/cli/commands/update.mjs

@@ -40,7 +40,7 @@ export async function updateCommand(paths, args = [], daemon = {}) {
   const registryPath = paths.data ? path.join(paths.data, 'codex-homes.json') : null;
   const priorRegistryBytes = (() => { try { return fs.readFileSync(registryPath); } catch { return null; } })();
   const requestedVersion = args.find((arg) => arg.startsWith('--version='))?.slice(10) || 'current';
-  const socket = daemon.socket || process.env.ZCODE_AGENTD_SOCKET || paths.socket;
+  const socket = daemon.socket || process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket;
   const rpc = daemon.callDaemon || callDaemon;
   const drainDeadline = Number.isFinite(daemon.drainTimeoutMs) && daemon.drainTimeoutMs > 0
     ? Date.now() + daemon.drainTimeoutMs : null;

package/cli/config/schema.mjs

@@ -21,7 +21,7 @@ export function defaultConfig() {
     revision: 0,
     default_subagent: null,
     subagents: {
-      zcode: { enabled: true, spawn_supported: true, default_model: null },
+      zcode: { enabled: false, spawn_supported: false, default_model: null },
       dsh: { enabled: false, spawn_supported: false, default_model: null, runtime_path: null, home: null, profile: null, version: null },
       codex: { enabled: false, spawn_supported: false, default_model: null, runtime_path: null, home: null, profile: null, version: null },
     },

package/cli/config/write.mjs

@@ -31,7 +31,7 @@ export function updateConfig(file, updater) {
   try {
     const current = readConfig(file);
     const next = updater(current);
-    return writeConfig(file, next);
+    return next === current ? current : writeConfig(file, next);
   } finally {
     try { process.kill(-helper.pid, 'SIGTERM'); } catch {}
     try { fs.unlinkSync(ready); } catch {}

package/cli/constants.mjs

@@ -8,7 +8,7 @@ const IS_DEBUG_VARIANT = process.env.EXTERNAL_SUBAGENT_VARIANT === 'debug';
 
 export const PRODUCT_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug' : 'external-subagent';
 export const PRODUCT_ID = IS_DEBUG_VARIANT ? 'external_subagent_debug' : 'external_subagent';
-export const VERSION = '0.1.2';
+export const VERSION = '0.1.3';
 export const LAUNCH_AGENT_LABEL = IS_DEBUG_VARIANT ? 'com.external-subagent-debug.daemon' : 'com.external-subagent.daemon';
 export const DAEMON_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debugd' : 'external-subagentd';
 export const MCP_BIN_NAME = IS_DEBUG_VARIANT ? 'external-subagent-debug-mcp' : 'external-subagent-mcp';
@@ -18,7 +18,7 @@ export const ZCODE_RUNTIME = '/Applications/ZCode.app/Contents/Resources/glm/zco
 
 export const BUSINESS_COMMANDS = new Set([
   'init', 'hooks', 'status', 'diagnose', 'backup', 'restore', 'start', 'stop',
-  'uninstall', 'purge', 'cleanup-legacy', 'install-plugin', 'install-mcp', 'create', 'spawn', 'wait', 'list', 'send',
+  'uninstall', 'purge', 'install-plugin', 'install-mcp', 'create', 'spawn', 'wait', 'list', 'send',
   'respond', 'cancel', 'result', 'close', 'config', 'agents', 'subagents',
   'observe', 'update', 'reconcile',
 ]);

package/cli/install/codex.mjs

@@ -97,10 +97,10 @@ function updateMarketplace(file, staging) {
 function stagedManagedBinding(staging) {
   const manifest = JSON.parse(fs.readFileSync(path.join(staging, '.codex-plugin', 'plugin.json'), 'utf8'));
   const server = JSON.parse(fs.readFileSync(path.join(staging, '.mcp.json'), 'utf8')).mcpServers?.external_subagent;
-  if (!server || typeof server.command !== 'string' || typeof server.env?.ZCODE_AGENTD_SOCKET !== 'string') {
+  if (!server || typeof server.command !== 'string' || typeof server.env?.EXTERNAL_SUBAGENT_SOCKET !== 'string') {
     throw new CliError('INVALID_PLUGIN_SOURCE', 'staged plugin MCP binding is incomplete');
   }
-  return { manifest, command: server.command, socket: server.env.ZCODE_AGENTD_SOCKET };
+  return { manifest, command: server.command, socket: server.env.EXTERNAL_SUBAGENT_SOCKET };
 }
 
 function readCacheJson(file, cache, identity) {
@@ -152,7 +152,7 @@ function verifyCodexCache(add, { codexHome, staging, marketplaceName }) {
       }
     }
     const server = readCacheJson(path.join(cache, '.mcp.json'), cache, identity).mcpServers?.external_subagent;
-    const socket = server?.env?.ZCODE_AGENTD_SOCKET;
+    const socket = server?.env?.EXTERNAL_SUBAGENT_SOCKET;
     if (!server || server.command !== expected.command || socket !== expected.socket) {
       throw new CliError('CODEX_CACHE_BINDING_MISMATCH', `codex plugin cache for ${identity} carries a different managed binding (command=${server?.command}, socket=${socket}); expected this install's staged binding (command=${expected.command}, socket=${expected.socket}). The cache resolved to another installation's bytes (${cache}); either the machine-global content store reused them for the same identity (release a distinct plugin version instead of accepting them), or the reserved marketplace name personal resolved machine-globally to the real user root regardless of CODEX_HOME (refresh or re-register that root, or use a non-reserved marketplace name in isolated homes)`);
     }
@@ -309,7 +309,7 @@ export function uninstallPlugin(paths, options = {}) {
 function codexMcpConfig(paths) {
   const command = nativeBinary(MCP_BIN_NAME);
   const tools = CODEX_TOOLS.map((tool) => `  "${tool}",`).join('\n');
-  return `[${CODEX_MCP_SECTION}]\ncommand = ${JSON.stringify(command)}\nenabled = true\nrequired = true\nstartup_timeout_sec = 10\ntool_timeout_sec = 304\nenabled_tools = [\n${tools}\n]\ndefault_tools_approval_mode = "prompt"\n\n[${CODEX_MCP_SECTION}.env]\nZCODE_AGENTD_SOCKET = ${JSON.stringify(paths.socket)}\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_status]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_list]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_wait]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_result]\napproval_mode = "auto"\n`;
+  return `[${CODEX_MCP_SECTION}]\ncommand = ${JSON.stringify(command)}\nenabled = true\nrequired = true\nstartup_timeout_sec = 10\ntool_timeout_sec = 304\nenabled_tools = [\n${tools}\n]\ndefault_tools_approval_mode = "prompt"\n\n[${CODEX_MCP_SECTION}.env]\nEXTERNAL_SUBAGENT_SOCKET = ${JSON.stringify(paths.socket)}\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_status]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_list]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_wait]\napproval_mode = "auto"\n\n[${CODEX_MCP_SECTION}.tools.external_subagent_result]\napproval_mode = "auto"\n`;
 }
 
 function removeTomlSection(text, section) {

package/cli/install/init.mjs

@@ -1,7 +1,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { spawnSync } from 'node:child_process';
-import { LAUNCH_AGENT_LABEL, ZCODE_RUNTIME } from '../constants.mjs';
+import { LAUNCH_AGENT_LABEL } from '../constants.mjs';
 import { CliError } from '../errors.mjs';
 import { parseConfig } from '../config/read.mjs';
 import { writeConfig } from '../config/write.mjs';
@@ -10,7 +10,7 @@ import { pathReport } from './path.mjs';
 import { packageRoot, payloadManifestPath } from './layout.mjs';
 import { updateInstallation } from './update.mjs';
 import { loadInstallState, markInstallStep, removeCreatedDirectories, rollbackFiles, snapshotFile } from './recovery.mjs';
-import { bootstrapService, bootoutService, installLaunchAgent } from './service-macos.mjs';
+import { bootstrapService, bootoutService, installLaunchAgent, runtimeObservations } from './service-macos.mjs';
 
 // Standalone-install coordination (S05, AUD-005 decision D1).  A plain npm
 // install only stages the package and payload; an explicit `init` installs
@@ -197,7 +197,7 @@ export function runInit(options = {}) {
     // Honest runtime report instead of a hard dependency: the pinned ZCode
     // runtime is an adapter capability, observed and forwarded by the service
     // template only when present.
-    runtime: { path: ZCODE_RUNTIME, present: fs.existsSync(ZCODE_RUNTIME) },
+    runtimes: runtimeObservations(paths),
     payload,
     baseline,
     path_report: pathFindings,

package/cli/install/plugin-stage.mjs

@@ -75,6 +75,16 @@ export function treeDigest(root) {
 // The publish protocol keeps two private sibling trees beside the target,
 // named `.<target>.candidate.<pid>.<uuid>` and `.<target>.prior.<pid>.<uuid>`.
 
+// The socket environment key every managed binding pins.  Runtime consumers
+// (the stdio bridge, the native MCP facade, the CLI, and the daemon) read
+// exactly this name, with no fallback to any retired spelling.
+export const SOCKET_ENV = 'EXTERNAL_SUBAGENT_SOCKET';
+// The retired key earlier installers pinned into staged `.mcp.json` files.
+// It is recognized ONLY here, to refresh a managed staging tree in place, and
+// is never a runtime fallback.  The literal is assembled from fragments so the
+// retired name never appears as a searchable token (the rg gate stays clean).
+export const LEGACY_SOCKET_ENV = ['ZCODE', 'AGENTD', 'SOCKET'].join('_');
+
 const siblingSuffix = () => `${process.pid}.${crypto.randomUUID()}`;
 
 function discardTree(dir) {
@@ -97,7 +107,10 @@ function bindCandidate(candidate, paths, command, args, timeoutMs) {
   server.command = command;
   if (args !== null) server.args = args;
   if (timeoutMs !== null) server.timeoutMs = timeoutMs;
-  server.env = { ...(server.env || {}), ZCODE_AGENTD_SOCKET: paths.socket };
+  server.env = { ...(server.env || {}), [SOCKET_ENV]: paths.socket };
+  // Rewrite, never accumulate: a managed prior tree bound under the retired
+  // key is refreshed to carry the new key and nothing else.
+  delete server.env[LEGACY_SOCKET_ENV];
   fs.writeFileSync(mcpPath, `${JSON.stringify(mcp, null, 2)}\n`, { mode: 0o600 });
 }
 
@@ -138,7 +151,14 @@ export function preparePluginStage(source, staging, paths, binding = {}) {
     // the staged bridge); a prior native-form binding carried none, and the
     // rewrite below installs the requested form regardless.
     const argsMatch = args === null || priorCommand !== command || JSON.stringify(priorArgs) === JSON.stringify(args);
-    if (!priorServer || (!commandMatches && !argsOwned) || !argsMatch || priorServer.env?.ZCODE_AGENTD_SOCKET !== paths.socket) {
+    // Ownership of an existing tree is proved by the requested binding, the
+    // native facade, or a staged script.  Its socket may be pinned under the
+    // current key OR the retired one this installer used before the rename:
+    // either one pointing at paths.socket is a managed product binding that
+    // gets rewritten to the current key.  Any other binding stays foreign.
+    const priorEnv = priorServer?.env || {};
+    const priorSocketManaged = priorEnv[SOCKET_ENV] === paths.socket || priorEnv[LEGACY_SOCKET_ENV] === paths.socket;
+    if (!priorServer || (!commandMatches && !argsOwned) || !argsMatch || !priorSocketManaged) {
       throw new CliError('PLUGIN_STAGING_CONFLICT', 'staging MCP binding differs from the managed product endpoint');
     }
   }

package/cli/install/service-macos.mjs

@@ -18,6 +18,15 @@ function escapeXml(value) {
   return value.replaceAll('&', '&amp;').replaceAll('<', '&lt;').replaceAll('>', '&gt;');
 }
 
+// Presence is diagnostic only; enabling is an explicit probe + config operation.
+export function runtimeObservations(paths, options = {}) {
+  const config = readConfig(paths.config);
+  return Object.fromEntries(['zcode', 'dsh', 'codex'].map((agent) => {
+    const runtime = agent === 'zcode' ? (options.zcodeRuntime ?? ZCODE_RUNTIME) : config.subagents[agent].runtime_path;
+    return [agent, { path: runtime, present: Boolean(runtime && fs.existsSync(runtime)), enabled: config.subagents[agent].enabled }];
+  }));
+}
+
 export function launchAgentPlist(paths, options = {}) {
   const daemon = nativeBinary(DAEMON_BIN_NAME);
   const config = readConfig(paths.config);

package/cli/install/zcode.mjs

@@ -105,7 +105,7 @@ function verifyZcodeBinding({ config, staging, dir }) {
   const binding = zcodeMcpBinding(staging);
   if (!server || server.command !== binding.command || JSON.stringify(server.args || []) !== JSON.stringify(binding.args)
     || server.timeoutMs !== binding.timeoutMs
-    || server.env?.ZCODE_AGENTD_SOCKET === undefined) {
+    || server.env?.EXTERNAL_SUBAGENT_SOCKET === undefined) {
     throw new CliError('ZCODE_BINDING_UNVERIFIABLE', `the staged plugin MCP binding is not the managed endpoint (${staging})`);
   }
   return server;
@@ -148,7 +148,7 @@ export function installZcodePlugin(paths, options = {}) {
       plugin_id: ZCODE_PLUGIN_ID,
       digest: treeDigest(staging),
       config_verified: true,
-      binding: { command: server.command, socket: server.env.ZCODE_AGENTD_SOCKET },
+      binding: { command: server.command, socket: server.env.EXTERNAL_SUBAGENT_SOCKET },
     };
     if (prior.doc.plugins?.enabled === false) {
       result.warning = 'plugins.enabled is false in the ZCode config; the binding will not load until plugins are enabled';

package/cli/main.mjs

@@ -5,7 +5,7 @@ import { BUSINESS_COMMANDS, PRODUCT_NAME, VERSION, ZCODE_RUNTIME } from './const
 import { CliError } from './errors.mjs';
 import { installHooks, installPlan, runInit } from './install/init.mjs';
 import { nativeBinary } from './install/layout.mjs';
-import { cleanupLegacy, purge, restoreData, backupData, uninstall } from './commands/maintenance.mjs';
+import { purge, restoreData, backupData, uninstall } from './commands/maintenance.mjs';
 import { updateCommand } from './commands/update.mjs';
 import { localInstallStatus, startDaemon, stopDaemon } from './commands/daemon.mjs';
 import { serviceRegistrationStatus } from './install/service-macos.mjs';
@@ -17,7 +17,7 @@ import { parseConfigArgs } from './commands/config.mjs';
 import { subagentsCommand, parseSubagentsArgs } from './commands/agents.mjs';
 import { parseSpawnArgs, prepareSpawnInput } from './commands/tasks.mjs';
 
-const HELP = `external-subagent ${VERSION}\n\nUsage: external-subagent <command> [options]\n\nCommands:\n  help, version               Show basic product information\n  init [--dry-run] [--resume] [--install-hooks] [--skip-service-start]\n                             Install the standalone daemon service only; bind a\n                             host afterwards with install-plugin or install-mcp\n  hooks install [--dry-run]  Install ZCode policy hooks explicitly\n  install-plugin [codex|zcode] [--dry-run|--uninstall] [--codex-home <path>]\n                             Install or remove the managed host plugin (MCP + skill);\n                             the host defaults to codex, --codex-home is codex-only\n  install-mcp [--dry-run|--uninstall] [--codex-home <path>]\n                             Install or remove the direct Codex MCP TOML binding\n  status, diagnose            Inspect local service and runtime state\n  start, stop                 Bootstrap or boot out the daemon LaunchAgent\n  backup --output <dir>       Back up retained product data\n  restore --input <dir>       Verify and restore product data\n  uninstall                   Release Codex/ZCode bindings; remove service registration; retain data\n  purge --yes                 Explicitly delete new product data\n  cleanup-legacy --yes        Delete old unpublished installation (no migration)\n`;
+const HELP = `external-subagent ${VERSION}\n\nUsage: external-subagent <command> [options]\n\nCommands:\n  help, version               Show basic product information\n  init [--dry-run] [--resume] [--install-hooks] [--skip-service-start]\n                             Install the standalone daemon service only; bind a\n                             host afterwards with install-plugin or install-mcp\n  hooks install [--dry-run]  Install ZCode policy hooks explicitly\n  install-plugin [codex|zcode] [--dry-run|--uninstall] [--codex-home <path>]\n                             Install or remove the managed host plugin (MCP + skill);\n                             the host defaults to codex, --codex-home is codex-only\n  install-mcp [--dry-run|--uninstall] [--codex-home <path>]\n                             Install or remove the direct Codex MCP TOML binding\n  status, diagnose            Inspect local service and runtime state\n  start, stop                 Bootstrap or boot out the daemon LaunchAgent\n  backup --output <dir>       Back up retained product data\n  restore --input <dir>       Verify and restore product data\n  uninstall                   Release Codex/ZCode bindings; remove service registration; retain data\n  purge --yes                 Explicitly delete new product data\n`;
 const DAEMON_HELP = `  config get [key] | config set <key> <value>\n  subagents list | subagents status [subagent] | subagents probe/models [subagent]\n  create/spawn, wait, list, send, respond, cancel, result, close, observe\n                             Daemon calls accept --json '<object>' or JSON stdin\n                             list JSON requires repository (workspace is an alias)\n                             observe JSON requires only agent_id\n`;
 
 function structuredInput(args, parser) {
@@ -117,7 +117,7 @@ function boundedFailureRecord(record) {
 function diagnosticTail(text) {
   let incomplete = false;
   const decoded = text.split('\n').map((line) => {
-    const match = line.match(/^(\[zcode-agentd\] failure agent=[^:\r\n]+: )(.+)$/u);
+    const match = line.match(/^(\[external-subagentd\] failure agent=[^:\r\n]+: )(.+)$/u);
     if (match && match[2].startsWith('{')) {
       try {
         const record = JSON.parse(match[2]);
@@ -166,7 +166,7 @@ function diagnosticLogs(logDirectory) {
       let decodeStart = Math.max(0, start - 256) - readStart;
       if (decodeStart > 0) {
         const lineStart = buffer.lastIndexOf(0x0a, decodeStart - 1) + 1;
-        if (buffer.subarray(lineStart, read).toString('utf8').startsWith('[zcode-agentd] failure agent=')) decodeStart = lineStart;
+        if (buffer.subarray(lineStart, read).toString('utf8').startsWith('[external-subagentd] failure agent=')) decodeStart = lineStart;
       }
       // Legacy text keeps its original lookbehind; known records are decoded
       // (or marked incomplete) before any display clipping can hide the prefix.
@@ -211,7 +211,7 @@ function agentDiagnosticLogs(logDirectory, agentId) {
       if (lines.pop()) report.incomplete.push(`record_incomplete:${name}`); // The writer may still be appending.
       for (const line of lines.reverse()) {
         if (Buffer.byteLength(line) > DIAGNOSTIC_RECORD_BYTES) { report.incomplete.push(`record_truncated:${name}`); continue; }
-        const prefix = `[zcode-agentd] failure agent=${agentId}: `;
+        const prefix = `[external-subagentd] failure agent=${agentId}: `;
         if (!line.startsWith(prefix)) continue;
         const raw = line.slice(prefix.length);
         // JSON records repeat the identifier; reject misleading prefix matches.
@@ -256,7 +256,7 @@ function diagnoseInput(args) {
 
 async function diagnose(paths, args) {
   const { agent, outputDirectory } = diagnoseInput(args);
-  const socket = process.env.ZCODE_AGENTD_SOCKET || paths.socket;
+  const socket = process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket;
   const report = {
     schema_version: 1,
     scope: agent ? { agent_id: agent } : { kind: 'global' },
@@ -381,7 +381,7 @@ export async function main(args) {
     // keep it out of the ordinary status projection.
     const { pid: _pid, ...service } = serviceRaw;
     try {
-      output({ ...local, service, daemon_status: publicDaemonStatus(await callDaemon(process.env.ZCODE_AGENTD_SOCKET || paths.socket, 'status', {}), { verbose }) });
+      output({ ...local, service, daemon_status: publicDaemonStatus(await callDaemon(process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket, 'status', {}), { verbose }) });
     } catch (error) {
       output({ ...local, service, daemon_status: null, daemon_error: { code: error.code || 'DAEMON_ERROR', message: error.message } });
     }
@@ -391,7 +391,7 @@ export async function main(args) {
     const input = structuredInput(args.slice(1), command === 'config' ? parseConfigArgs : parseSubagentsArgs);
     output(command === 'config'
       ? configCommand(paths, input)
-      : await subagentsCommand(paths, input, { callDaemon, socket: process.env.ZCODE_AGENTD_SOCKET || paths.socket }));
+      : await subagentsCommand(paths, input, { callDaemon, socket: process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket }));
     return;
   }
   if (command === 'diagnose') {
@@ -405,16 +405,12 @@ export async function main(args) {
   if (command === 'restore') { output(restoreData(value(args, '--input'), paths)); return; }
   if (command === 'start') { output(startDaemon(paths)); return; }
   if (command === 'stop') { output(stopDaemon(paths)); return; }
-  if (command === 'update' || command === 'reconcile') { output(await updateCommand(paths, command === 'reconcile' ? ['reconcile', ...args.slice(1)] : args.slice(1), { socket: process.env.ZCODE_AGENTD_SOCKET || paths.socket })); return; }
+  if (command === 'update' || command === 'reconcile') { output(await updateCommand(paths, command === 'reconcile' ? ['reconcile', ...args.slice(1)] : args.slice(1), { socket: process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket })); return; }
   if (command === 'uninstall') { output(uninstall(paths)); return; }
   if (command === 'purge') {
     if (!args.includes('--yes')) throw new CliError('CONFIRMATION_REQUIRED', 'purge requires --yes');
     output(purge(paths)); return;
   }
-  if (command === 'cleanup-legacy') {
-    if (!args.includes('--yes')) throw new CliError('CONFIRMATION_REQUIRED', 'cleanup-legacy requires --yes');
-    output(cleanupLegacy(paths.home)); return;
-  }
   let input;
   if (command === 'create' || command === 'spawn') {
     const spawnArgs = args.slice(1);
@@ -422,7 +418,7 @@ export async function main(args) {
       ? prepareSpawnInput(parseDaemonInput(spawnArgs))
       : parseSpawnArgs(spawnArgs);
   } else input = parseDaemonInput(args.slice(1));
-  const result = await callDaemon(process.env.ZCODE_AGENTD_SOCKET || paths.socket, command, input);
+  const result = await callDaemon(process.env.EXTERNAL_SUBAGENT_SOCKET || paths.socket, command, input);
   output({ command, result });
 }
 

package/cli/maintenance.mjs

@@ -2,7 +2,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { CliError } from './errors.mjs';
 import { jsonBytes, sha256 } from './fs-atomic.mjs';
-import { legacyPaths, productPaths } from './paths.mjs';
+import { productPaths } from './paths.mjs';
 import { bootoutService } from './install/service-macos.mjs';
 
 function copyTree(source, destination, records, root = source) {
@@ -97,8 +97,3 @@ export function uninstall(paths = productPaths(), options = {}) {
 export function purge(paths = productPaths()) {
   return { purged: removeOne(paths.data), logs_purged: removeOne(paths.logs) };
 }
-
-export function cleanupLegacy(home) {
-  const removed = legacyPaths(home).filter(removeOne);
-  return { migration: false, aliases_created: [], removed };
-}

package/cli/paths.mjs

@@ -4,7 +4,7 @@ import { LAUNCH_AGENT_LABEL, PRODUCT_NAME } from './constants.mjs';
 import { PLUGIN_NAME } from './install/layout.mjs';
 
 export function platform() {
-  return process.env.ZCODE_AS_SUBAGENT_TEST_PLATFORM || process.platform;
+  return process.env.EXTERNAL_SUBAGENT_TEST_PLATFORM || process.platform;
 }
 
 // State paths derive from PRODUCT_NAME, so the debug variant gets a fully
@@ -26,15 +26,3 @@ export function productPaths(home = os.homedir()) {
     zcodePlugin: path.join(data, 'zcode-plugin', PLUGIN_NAME),
   };
 }
-
-export function legacyPaths(home = os.homedir()) {
-  return [
-    path.join(home, 'Library', 'LaunchAgents', 'com.zcode-reviewd.plist'),
-    path.join(home, 'Library', 'LaunchAgents', 'com.zcode-review-mcp.plist'),
-    path.join(home, 'Library', 'Logs', 'zcode-reviewd'),
-    path.join(home, 'Library', 'Application Support', 'zcode-review-mcp'),
-    path.join(home, 'Library', 'Application Support', 'zcode-reviewd'),
-    path.join(home, '.local', 'bin', 'zcode-reviewd'),
-    path.join(home, '.local', 'bin', 'zcode-review-mcp'),
-  ];
-}

package/cli/rpc.mjs

@@ -184,6 +184,7 @@ function publicResult(result) {
     total_bytes: result.total_bytes,
     next_offset: result.next_offset ?? null,
     complete: result.complete,
+    reason_code: result.reason_code ?? null,
   };
 }
 

package/npm/native/darwin-arm64/payload.json

@@ -1,20 +1,20 @@
 {
   "schema_version": 1,
   "product": "external-subagent",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "platform": "darwin-arm64",
   "files": [
     {
       "name": "external-subagentd",
-      "bytes": 9269360,
+      "bytes": 9331504,
       "mode": "755",
-      "sha256": "ba5ea77bd4a47d41bd759a312fb6678cae2a9512eeaeaf09690de9cb502dba75"
+      "sha256": "8f8625ccf600f6a4c252318ab7b67cc6f111d0e19282edd759f02a3267fb7a14"
     },
     {
       "name": "external-subagent-mcp",
       "bytes": 937840,
       "mode": "755",
-      "sha256": "aa6f61545de3a0480de16028fa5b17683a9c02fe97a7a03c41ff623f4e25d600"
+      "sha256": "5d933f567572c570b76733cb8eccae6eb08d3a4e84c239cc06b334bd760f4008"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "external-subagent",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Manage bounded ZCode, DeepSeek Harness (DSH), and Codex subagent tasks through a local MCP service for any local host (Codex, ZCode, or a custom MCP client)",
   "type": "module",
   "license": "MIT",

package/plugins/codex/external-subagent/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "external-subagent",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Manage bounded external agent tasks through the external-subagent MCP service.",
   "author": { "name": "external-subagent maintainers" },
   "skills": "./skills/",

package/plugins/codex/external-subagent/.mcp.json

@@ -3,7 +3,7 @@
     "external_subagent": {
       "command": "__EXTERNAL_SUBAGENT_MCP_EXECUTABLE__",
       "args": [],
-      "env": { "ZCODE_AGENTD_SOCKET": "__EXTERNAL_SUBAGENT_SOCKET__" }
+      "env": { "EXTERNAL_SUBAGENT_SOCKET": "__EXTERNAL_SUBAGENT_SOCKET__" }
     }
   }
 }

package/plugins/codex/external-subagent/scripts/mcp-stdio-bridge.mjs

@@ -3,7 +3,7 @@
 //
 // Mirrors crates/external-mcp (the native facade) byte for byte in
 // behavior: resolve the daemon MCP stream endpoint from
-// ZCODE_AGENTD_SOCKET, connect, and pipe client stdio <-> socket until
+// EXTERNAL_SUBAGENT_SOCKET, connect, and pipe client stdio <-> socket until
 // either side reaches EOF.  Hosts that spawn MCP servers inside
 // restricted execution contexts (ZCode kills ad-hoc-signed native
 // binaries there, while node processes and unix sockets are allowed)
@@ -12,9 +12,9 @@
 import net from 'node:net';
 import path from 'node:path';
 
-const socket = process.env.ZCODE_AGENTD_SOCKET;
+const socket = process.env.EXTERNAL_SUBAGENT_SOCKET;
 if (!socket || !path.isAbsolute(socket)) {
-  console.error('mcp-stdio-bridge: ZCODE_AGENTD_SOCKET must be an absolute path');
+  console.error('mcp-stdio-bridge: EXTERNAL_SUBAGENT_SOCKET must be an absolute path');
   process.exit(1);
 }
 // The stable daemon RPC socket keeps its name; MCP is exposed by the

package/plugins/codex/external-subagent/skills/external-subagent/SKILL.md

@@ -25,7 +25,7 @@ Spawn accepts an optional `effort` token that steers the task's reasoning
 effort. Omit it to keep each agent's current default (codex keeps its existing
 wire default; zcode and dsh send no effort field or call at all). `codex`
 admits only the closed set
-`low | medium | high | xhigh` — `minimal` and `max` are rejected;
+`low | medium | high | xhigh | max` — `minimal` and `ultra` are rejected;
 `zcode` and `dsh` accept any bounded token (1..24 bytes of `[a-z0-9_]`) and
 pass it through to the runtime, because the supported set is only known at
 runtime. A malformed or unsupported token is rejected before dispatch, so no
@@ -40,16 +40,23 @@ Codex home instances, and offers plugin or direct MCP bindings; built-in
 dirs with a single per-user instance. This is separate
 from `subagent.codex`. Protocol implementations are adapters.
 
+All three subagents (`zcode`, `dsh`, `codex`) are disabled by default; enable one
+with `external-subagent agents enable <name>`, which runs a local probe and writes
+the configuration only on success (a daemon restart is required for `dsh`/`codex`).
 Actual per-subagent limitations (from the accepted code):
 
-- `zcode` — enabled and spawn-supported by default; all four permission modes
+- `zcode` — disabled until explicitly enabled; all four permission modes
   (build/edit/plan/yolo); an explicit spawn `model` is rejected
   (`model_selection_unsupported`).
 - `dsh` — disabled until explicitly enabled and configured
   (`runtime_path`/`home`/`profile`/`version`); admits only `build` and strict
   `plan`.
-- `codex` — disabled by default; `plan` (sandbox=read-only) and `yolo`
-  (sandbox=danger-full-access), both pinning approvalPolicy=never;
-  `build`/`edit` are refused before the prompt.
-- `observe` — verified public reasoning exists only for zcode tasks; observe
-  on a non-zcode task truthfully errors `unavailable`.
+- `codex` — disabled until explicitly enabled; all four permission modes:
+  `build`/`edit` map to sandbox=workspace-write, `plan` to sandbox=read-only,
+  and `yolo` to sandbox=danger-full-access, all pinning approvalPolicy=never.
+  A non-empty spawn `write_manifest` is rejected before task creation with
+  `codex_write_manifest_unsupported`.
+- `observe` — available for all three subagents; `zcode` and `dsh` return the
+  public reasoning tail (at most 200 characters), while `codex` does not collect
+  reasoning and returns `reasoning: null`. Tool history and coverage are reported
+  truthfully per adapter capability.

package/schema/external-subagent-public-api.json

@@ -62,15 +62,19 @@
       "type": "object",
       "required": ["repository", "prompt"],
       "properties": {
-        "subagent": { "type": "string", "minLength": 1, "description": "Subagent route key; omission uses configured default_subagent or returns subagent_required. Null is invalid; dsh production spawn remains gated." },
+        "subagent": { "type": "string", "minLength": 1, "description": "Subagent route key; omission uses configured default_subagent or returns subagent_required. Null is invalid; dsh production spawn requires its enabled + spawn_supported + pinned-runtime configuration." },
         "repository": { "type": "string", "minLength": 1 },
-        "permission_mode": { "$ref": "#/properties/permission_mode" },
+        "permission_mode": { "$ref": "#/properties/permission_mode", "description": "codex supports build/edit (workspace-write), plan (read-only), and yolo (danger-full-access), always with approvalPolicy=never." },
         "prompt": { "type": "string", "minLength": 1 },
         "model": { "type": "string", "minLength": 1, "description": "Task model. dsh requires provider:model, split at the first colon (the model side may contain further colons; a missing colon or an empty side is rejected before any task). codex uses its own model id; zcode rejects model selection." },
         "effort": { "type": "string", "minLength": 1, "maxLength": 24, "pattern": "^[a-z0-9_]+$", "description": "Reasoning-effort token: 1..24 bytes of [a-z0-9_]. codex admits only low, medium, high or xhigh; zcode and dsh pass the bounded token through. Omission keeps the runtime default." },
-        "write_manifest": { "type": "array", "items": { "type": "string", "minLength": 1 } }
+        "write_manifest": { "type": "array", "items": { "type": "string", "minLength": 1 }, "description": "codex requires an empty or omitted write_manifest; non-empty input returns codex_write_manifest_unsupported before task creation. dsh admits a non-empty manifest in build through the guarded manifest-build composition (workspace-write sandbox, only tool-fs writable, out-of-manifest paths rejected as FS_WRITE_MANIFEST_DENIED), at most 256 entries; an explicit [\".\"] keeps the existing build composition. plan requires an empty manifest for every subagent." }
       },
       "allOf": [
+        { "if": { "required": ["subagent"], "properties": { "subagent": { "const": "codex" } } },
+          "then": { "properties": { "write_manifest": { "maxItems": 0 } } } },
+        { "if": { "required": ["subagent"], "properties": { "subagent": { "const": "dsh" } } },
+          "then": { "properties": { "write_manifest": { "maxItems": 256 } } } },
         { "if": { "required": ["permission_mode"], "properties": { "permission_mode": { "const": "plan" } } },
           "then": { "properties": { "write_manifest": { "maxItems": 0 } } } }
       ],
@@ -101,6 +105,7 @@
       "additionalProperties": false
     },
     "observe": {
+      "description": "Read captured task observations for zcode, dsh or codex. zcode and dsh expose at most 200 Unicode characters of public reasoning; codex reasoning is null. Coverage reports capture gaps and unsupported history truthfully.",
       "type": "object",
       "required": ["agent_id"],
       "properties": {
@@ -121,7 +126,7 @@
     },
     "result_projection": {
       "type": "object",
-      "required": ["outcome", "final_text", "partial", "offset", "total_bytes", "next_offset", "complete"],
+      "required": ["outcome", "final_text", "partial", "offset", "total_bytes", "next_offset", "complete", "reason_code"],
       "properties": {
         "outcome": { "enum": ["COMPLETED", "FAILED", "CANCELLED", "TIMED_OUT", "RUNTIME_LOST", "RESULT_INVALID"] },
         "final_text": { "type": "string" },
@@ -129,7 +134,8 @@
         "offset": { "type": "integer", "minimum": 0 },
         "total_bytes": { "type": "integer", "minimum": 0 },
         "next_offset": { "type": ["integer", "null"], "minimum": 0 },
-        "complete": { "type": "boolean" }
+        "complete": { "type": "boolean" },
+        "reason_code": { "type": ["string", "null"] }
       },
       "additionalProperties": false
     },

package/schema/{zas-observation-v1.1.schema.json → observation.schema.json}

@@ -36,7 +36,7 @@
       }
     },
     "reasoning": {
-      "type": "object",
+      "type": ["object", "null"],
       "additionalProperties": false,
       "required": ["text", "truncated"],
       "properties": {

package/schema/public-reasoning-source.json

@@ -0,0 +1,36 @@
+{
+  "schema": "external-subagent-public-reasoning-source/1",
+  "subagents": {
+    "zcode": {
+      "public": true,
+      "status": "VERIFIED_RUNTIME_PUBLIC",
+      "runtime_path": "/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs",
+      "runtime_version": "3.11.2",
+      "runtime_sha256": "e9f1868c0fdb863537ed910ee3828b9be96b8c2fd805473f63b439e1113266b8",
+      "wire_method": "session/event",
+      "event_type_pointer": "/params/type",
+      "event_type": "model.streaming",
+      "event_discriminator_pointer": "/params/payload/kind",
+      "event_discriminator_value": "reasoning_delta",
+      "delta_pointer": "/params/payload/delta",
+      "explicitly_excluded_key": "encrypted_content"
+    },
+    "dsh": {
+      "public": true,
+      "status": "VERIFIED_PROTOCOL_PUBLIC",
+      "runtime_version": "acp/1",
+      "wire_method": "session/update",
+      "event_type": "agent_thought_chunk",
+      "delta_pointer": "/params/update/content/text",
+      "canonical_event_type": "model.streaming",
+      "canonical_delta_pointer": "/params/payload/delta",
+      "explicitly_excluded_key": "encrypted_content"
+    },
+    "codex": {
+      "public": false,
+      "status": "HIDDEN",
+      "reasoning": null,
+      "collected": false
+    }
+  }
+}

package/scripts/release/build-native-payload.mjs

@@ -29,6 +29,14 @@ if (variant !== '' && variant !== 'debug') {
   process.exit(2);
 }
 const isDebug = variant === 'debug';
+// The cargo profile is release by default so prepack/prepublish keep shipping
+// release bytes; EXTERNAL_SUBAGENT_CARGO_PROFILE=debug selects the development
+// profile without changing the payload/product naming.
+const cargoProfile = process.env.EXTERNAL_SUBAGENT_CARGO_PROFILE || 'release';
+if (cargoProfile !== 'release' && cargoProfile !== 'debug') {
+  process.stderr.write(`unknown cargo profile: ${cargoProfile} (supported: release, debug)\n`);
+  process.exit(2);
+}
 const nativeDirName = isDebug ? 'native-debug' : 'native';
 const productName = isDebug ? 'external-subagent-debug' : 'external-subagent';
 const binaries = isDebug
@@ -66,6 +74,7 @@ function stagedIsCurrent(version) {
   let manifest;
   try { manifest = JSON.parse(fs.readFileSync(manifestPath, 'utf8')); } catch { return false; }
   if (manifest.version !== version || manifest.platform !== 'darwin-arm64' || manifest.product !== productName) return false;
+  if ((manifest.profile ?? 'release') !== cargoProfile) return false;
   const inputs = newestInputMs();
   for (const file of manifest.files) {
     const target = path.join(platformDir, file.name);
@@ -82,24 +91,27 @@ const version = packageVersion();
 // diagnostics go to stderr there so pack output stays machine-parseable.
 const note = (text) => (process.env.npm_lifecycle_event ? process.stderr : process.stdout).write(text);
 if (process.argv.includes('--if-stale') && stagedIsCurrent(version)) {
-  note(`native payload already current at ${version}${isDebug ? ' (debug)' : ''}\n`);
+  note(`native payload already current at ${version}${isDebug ? ' (debug)' : ''}${cargoProfile === 'release' ? '' : ` [${cargoProfile}]`}\n`);
   process.exit(0);
 }
 
-const build = spawnSync('cargo', ['build', '--release', '-p', 'external-daemon', '-p', 'external-mcp'], {
+const cargoArguments = ['build'];
+if (cargoProfile === 'release') cargoArguments.push('--release');
+cargoArguments.push('-p', 'external-daemon', '-p', 'external-mcp');
+const build = spawnSync('cargo', cargoArguments, {
   cwd: packageRoot, stdio: 'inherit',
 });
 if (build.status !== 0) {
-  process.stderr.write('cargo release build failed\n');
+  process.stderr.write(`cargo ${cargoProfile} build failed\n`);
   process.exit(build.status ?? 1);
 }
 
 fs.mkdirSync(platformDir, { recursive: true });
 const files = [];
 for (const [source, name] of binaries) {
-  const sourcePath = path.join(packageRoot, 'target', 'release', source);
+  const sourcePath = path.join(packageRoot, 'target', cargoProfile, source);
   if (!fs.existsSync(sourcePath)) {
-    process.stderr.write(`release binary missing: ${sourcePath}\n`);
+    process.stderr.write(`${cargoProfile} binary missing: ${sourcePath}\n`);
     process.exit(1);
   }
   const target = path.join(platformDir, name);
@@ -109,11 +121,15 @@ for (const [source, name] of binaries) {
   files.push({ name, bytes: bytes.length, mode: '755', sha256: sha256(bytes) });
 }
 
-const manifest = { schema_version: 1, product: productName, version, platform: 'darwin-arm64', files };
+const manifest = { schema_version: 1, product: productName, version, platform: 'darwin-arm64' };
+// The debug profile is recorded so --if-stale can tell a debug-staged payload
+// from a release one; the release manifest stays byte-identical to before.
+if (cargoProfile !== 'release') manifest.profile = cargoProfile;
+manifest.files = files;
 fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`, { mode: 0o644 });
 if (isDebug) {
   const stagedPlugin = stageDebugPlugin(packageRoot);
   note(`native payload ${version} (debug) staged: ${files.map((file) => file.name).join(', ')}\nplugin source staged: ${stagedPlugin}\n`);
 } else {
-  note(`native payload ${version} staged: ${files.map((file) => file.name).join(', ')}\n`);
+  note(`native payload ${version} staged: ${files.map((file) => file.name).join(', ')}${cargoProfile === 'release' ? '' : ` [${cargoProfile}]`}\n`);
 }

package/schema/zas-public-reasoning-source.json

@@ -1,14 +0,0 @@
-{
-  "schema": "zas-public-reasoning-source/1",
-  "status": "VERIFIED_RUNTIME_PUBLIC",
-  "runtime_path": "/Applications/ZCode.app/Contents/Resources/glm/zcode.cjs",
-  "runtime_version": "3.11.2",
-  "runtime_sha256": "e9f1868c0fdb863537ed910ee3828b9be96b8c2fd805473f63b439e1113266b8",
-  "wire_method": "session/event",
-  "event_type_pointer": "/params/type",
-  "event_type": "model.streaming",
-  "event_discriminator_pointer": "/params/payload/kind",
-  "event_discriminator_value": "reasoning_delta",
-  "delta_pointer": "/params/payload/delta",
-  "explicitly_excluded_key": "encrypted_content"
-}