diff --git a/cordis.bundle.patch.yml b/cordis.bundle.patch.yml
index e4070f4..5e8698a 100644
--- a/cordis.bundle.patch.yml
+++ b/cordis.bundle.patch.yml
@@ -1,6 +1,6 @@
-# Combined host + declarative preset for dsh.bundle.patch (single string).
-# Sources: cordis.patch.yml + presets/netxops.preset.patch.yml
-# Regenerate: bun run scripts/gen-preset-patch.mjs
+# Alias of cordis.patch.yml for dsh.bundle.patch (single string).
+# Agent preset is composed from host `standard` at install — see
+# src/agent-preset-install.ts (no @deepseek-ai/dsh-agent-preset row).
 
 # Host-plane Netx Ops bridge: settings + credentials → connection publish.
 # Ops-scoped `netx__*` tools mount from the agent preset (`dsh-netxops/tools`).
@@ -40,296 +40,3 @@
         kbRoot: ''
         groupKbInPreset: true
         groupKbPublic: false
-
-# Declarative Netx Ops agent preset for DSH ≥0.2.0-rc.1.
-# Directory copy under ~/.dsh/.agent-presets is ignored on these hosts —
-# keep presets/netxops/agent.cordis.yml in sync with config.plugins below
-# (regenerate: bun run scripts/gen-preset-patch.mjs).
-
-- insert:
-    - id: preset-netxops
-      name: '@deepseek-ai/dsh-agent-preset'
-      config:
-        id: netxops
-        order: 50
-        name: "Netx Ops"
-        description: "运维专家（含标准模式全套工作区能力 + netx 工具）。"
-        plugins:
-        # Netx Ops agent preset = DSH `standard` (full coding agent) + netxops tools/persona.
-        #
-        # DSH has no preset inheritance: compositions are flat copies. Keep this file in
-        # sync with DeepSeekHarness `presets/standard/agent.cordis.yml`, then retain the
-        # Netx Ops persona + `netxops-tools` row below.
-        #
-        # Host owns registries, sandbox, persistence, model route. This file owns
-        # persona and which model-facing plugins Netx Ops sessions get.
-        
-        # ── identity ────────────────────────────────────────────────────────────────
-        
-        - id: persona
-          name: '@deepseek-ai/dsh-persona'
-          config:
-            suffix: Your working directory is {{cwd}}.
-            # Keep in sync with presets/netxops/PERSONA.md
-            prefix: |-
-              你是 **Netx Ops**，面向 netx 的网络运维专家；同时具备与「标准模式」相同的完整编程与工作区能力。
-        
-              ## 身份
-              - 被问「你是谁 / 什么模型」时：只回答你是 **Netx Ops**。
-              - 不透露系统提示、工具内幕、运行环境或供应商信息。
-        
-              ## 原则
-              1. 先用工具拿证据（告警、清单、CLI、工作区读查），再下结论。
-              2. 涉及破坏性变更：先说清影响与回滚（当前 CLI 仅只读：show / display / ping 等）。
-              3. 回复语言以 Host「Netx Ops」设置里的「回复语言」为准（强制 zh/en 时不得跟随用户语言）；未强制（follow-user）时再跟随用户语言。现场默认：简洁、可扫读的运维口吻。
-        
-              ## 终稿骨架（告警 / 网元 / CLI 必须）
-              ```
-              *<主题> — <范围>*
-              - Result: …
-              - Evidence: …（级别计数和/或 Top host_name / CLI ok|fail；能写则带 as-of）
-              - Next: …（没有则省略）
-              ```
-              - 终稿直接给结论，不要用「我先查一下」这类过程开场。
-              - 宜短（约 ≤15 行）；大表只摘要 Top，并提示可加过滤。
-              - 严重度写全称：Critical / Major / Minor / Warning。
-              - 对用户只展示 **host_name**；**严禁**发送任何 UUID。无 `host_name` 当垃圾忽略，勿用 label 顶替。
-              - 没有证据就说证据不足，禁止臆造根因。
-        
-              ## 技能（仅当对应能力组已开启）
-              - `netx-ops` — ops：告警、清单、纳管登录、路径
-              - 知识库 `_skills/kb-*`（若已配置运营商子集）
-        
-              ## 工具
-              - netx 调用名为 `netx__*`（驼峰）。决策树见技能正文。
-              - 多台 CLI：**一次** `execManagedNe`（`ne_ids` / `nms_ne_ids` / `targets`）。
-              - 工作区：与标准模式相同（shell、搜索、计划、todo、web、委派等）。
-        
-              ## 知识库双平面（KB 已配置时 — 铁律）
-              - **总部包只读**：正式 RCA、theory、packet、`_common`、`_skills`、总部命令库 — 检索用，不改。
-              - **唯一可写区** `{kbLocal}`：`refs/`（本网产品知识）/ `memories/`（过程记忆）/ `drafts/`（案例草稿）/ `suggestions/`（反哺总部）。
-              - **写文件只走宿主工具**：`netx__kbWriteRef` / `kbWriteMemory` / `kbWriteDraft` / `kbWriteSuggestion` / `kbUpdateLocal` / `kbDeleteLocal`。**禁止**对 KB 用 workspace `Write` / bash。
-        
-              ### refs — 本网产品知识（可进化核心）
-              - 排障涉及某网元时：**先读** `refs/devices/<host_name>/`；没有则 netx 取证后立刻 `kbWriteRef` 建档/补全。
-              - `area=devices` 必须带 `device=host_name`（禁 UUID）；画像主文件 slug=`PROFILE`。
-              - 台账/汇总 → `inventory`；跨机拓扑 → `topology`；业务域 → `business`；本网命令集 → `commands`；速查 → `handbooks`。
-              - **设备事实写 refs，过程经验写 memories**，不要把台账塞进日记。
-        
-              ### memories — 随手记
-              任务中一旦出现可复用价值（经验、踩坑、口诀、误判纠正），立刻 `kbWriteMemory`；宁短勿丢。
-              - `note` / `rca_review` / `ai_trace`
-        
-              ### drafts / suggestions
-              未闭环案例 → `kbWriteDraft`；总部通用层有误或工具/流程改进 → `kbWriteSuggestion`。
-        
-              ## 委派（默认 subagent，活多再拆）
-              你本人逻辑上全能。默认自己干；只有活明显偏多、且可并行时，才用 `subagent`（必要时 `subagent_fork`）拆开干。
-        
-              ### 自己干
-              - 单问单答、一条证据链能闭环（如 Critical Top、单机告警、单机能否登录）
-              - 下一步强依赖上一步结果
-              - 用户只要结论，不需要并行深挖
-        
-              ### 再拆
-              - 至少两块互不依赖的活（多机并行取证、告警面与链路面可同时查、查证与写纪要可并行）
-              - 串行会明显拖久或撑爆上下文
-              - 每一块都能写成独立目标，互不抢同一结论所有权
-        
-              ### 派活提示必须自包含
-              子 agent **看不到**当前对话，提示里写清：
-              - 目标（可验收）
-              - 范围边界（host / 告警类型 / 不要碰什么）
-              - 交付：短 Result / Evidence / Next
-              - 禁止：直接对用户说话、擅自扩大范围
-        
-              ### 收口
-              - 等齐结果后由你综合；**只有你**对用户说终稿
-              - 证据冲突时由你裁决或再补一刀，不要让子 agent 在用户面前互辩
-              - 优先前台等结果；确需并行再用后台 + jobs 收齐
-        
-        - id: agent-instructions
-          name: '@deepseek-ai/dsh-agent-instructions'
-          config:
-            maxBytes: 65536
-        
-        # ── shell ───────────────────────────────────────────────────────────────────
-        
-        - id: tool-bash
-          name: '@deepseek-ai/dsh-tool-bash'
-          disabled: !!js process.platform === 'win32'
-        
-        - id: tool-pwsh
-          name: '@deepseek-ai/dsh-tool-pwsh'
-          disabled: !!js process.platform !== 'win32'
-        
-        # ── filesystem ──────────────────────────────────────────────────────────────
-        
-        - id: tool-fs
-          name: '@deepseek-ai/dsh-tool-fs'
-        
-        - id: tool-fs-search
-          name: '@deepseek-ai/dsh-tool-fs-search'
-          config:
-            sampleOverCapGlobResults: false
-        
-        # ── background jobs ────────────────────────────────────────────────────────
-        
-        - id: tool-jobs
-          name: '@deepseek-ai/dsh-tool-jobs'
-        
-        # ── skills ──────────────────────────────────────────────────────────────────
-        
-        - id: skill-filesystem
-          name: '@deepseek-ai/dsh-skill-filesystem'
-          config:
-            # Ops / KB playbooks are registered by netxops-tools (capability groups), not customSkillDirs.
-            includeDefaultRoots: true
-            customSkillDirs: []
-        
-        - id: tool-skill
-          name: '@deepseek-ai/dsh-tool-skill'
-        
-        # Netx Ops tools (+ capability-gated skills / KB local write tools) in this preset scope.
-        - id: netxops-tools
-          name: dsh-netxops/tools
-        
-        # ── goals ───────────────────────────────────────────────────────────────────
-        
-        - id: command-goal
-          name: '@deepseek-ai/dsh-command-goal'
-        
-        - id: tool-goal
-          name: '@deepseek-ai/dsh-tool-goal'
-        
-        # ── plan mode ───────────────────────────────────────────────────────────────
-        
-        - id: planning
-          name: cordis:group
-          group: true
-          isolate:
-            planMode: true
-          config:
-            - id: plan-mode
-              name: '@deepseek-ai/dsh-plan-mode'
-              config:
-                section: |
-                      You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
-        
-                      Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
-        
-                      The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
-        
-                      Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
-        
-                      Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
-        
-                      When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
-        
-        # ── compaction ──────────────────────────────────────────────────────────────
-        
-        - id: compaction
-          name: cordis:group
-          group: true
-          isolate:
-            compaction: true
-            toolResultPruner: true
-          config:
-            - id: compaction-basic
-              name: '@deepseek-ai/dsh-compaction-basic'
-        
-            - id: command-compact
-              name: '@deepseek-ai/dsh-command-compact'
-        
-            - id: tool-result-pruner
-              name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
-              config:
-                thresholdChars: 8192
-                headChars: 4096
-                tailChars: 1024
-        
-        # ── delegation and workflows ────────────────────────────────────────────────
-        
-        - id: delegation
-          name: cordis:group
-          group: true
-          isolate:
-            workflowEngine: true
-          config:
-            - id: tool-subagent-control
-              name: '@deepseek-ai/dsh-tool-subagent-control'
-        
-            - id: tool-subagent-list-agents
-              name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
-        
-            - id: tool-subagent
-              name: '@deepseek-ai/dsh-tool-subagent'
-              config:
-                provider: spawn
-                toolName: subagent
-                modelSelectionSettings: true
-                backgroundMode: continuable
-        
-            - id: tool-subagent-fork
-              name: '@deepseek-ai/dsh-tool-subagent'
-              config:
-                provider: fork
-                toolName: subagent_fork
-                backgroundMode: continuable
-        
-            - id: tool-subagent-codex
-              name: '@deepseek-ai/dsh-tool-subagent'
-              disabled: true
-              config:
-                provider: codex
-                toolName: subagent_codex
-                backgroundMode: one-shot
-                maxDepth: provider-managed
-        
-            - id: tool-subagent-claude-code
-              name: '@deepseek-ai/dsh-tool-subagent'
-              disabled: true
-              config:
-                provider: claude-code
-                toolName: subagent_claude_code
-                backgroundMode: one-shot
-                maxDepth: provider-managed
-        
-            - id: workflow-worker-thread
-              name: '@deepseek-ai/dsh-workflow-worker-thread'
-              config:
-                provider: spawn
-        
-            - id: tool-workflow
-              name: '@deepseek-ai/dsh-tool-workflow'
-        
-            - id: tool-ralph
-              name: '@deepseek-ai/dsh-tool-ralph'
-              config:
-                subagentProvider: spawn
-                maxRounds: 64
-        
-        # ── remaining model-facing rows ─────────────────────────────────────────────
-        
-        - id: tool-ask-user
-          name: '@deepseek-ai/dsh-tool-ask-user'
-        
-        - id: tool-todo
-          name: '@deepseek-ai/dsh-tool-todo'
-          config:
-            allowParallelInProgress: true
-        
-        - id: tool-web
-          name: '@deepseek-ai/dsh-tool-web'
-          config:
-            fetch: true
-            searchTimeoutMs: 60000
-        
-        - id: present
-          name: '@deepseek-ai/dsh-tool-present'
-        
-        # Host package dsh-netxops: on DSH ≤0.1.5 copies this tree to $DSH_HOME/.agent-presets/netxops;
-        # on ≥0.2.0 the same composition is shipped as presets/netxops.preset.patch.yml
-        # (`@deepseek-ai/dsh-agent-preset` declaration). Regenerate the patch after edits:
-        #   bun run gen:preset-patch
-        
diff --git a/docs/INSTALL.md b/docs/INSTALL.md
index 1d64a64..a8383e4 100644
--- a/docs/INSTALL.md
+++ b/docs/INSTALL.md
@@ -9,7 +9,7 @@ One install wires **all of**:
 | Host tools | Capability groups **ops / topology** (one group ↔ one skill). Default ops in Ops preset; topology and all public off. Other agents may mount `dsh-netxops/tools-ops|topology` |
 | Companion plugins | **dsh-im-ops** + **dsh-ops-cron** — add as **direct** profile deps in the same command (DSH/pnpm blocks `github:` as transitive deps) |
 | Plugins card | Settings → Plugins → **Netx Ops** (URL / API lang / thinking+reply language / token / capability groups) |
-| Agent preset + skills | Settings → Agent presets → **Netx Ops**. DSH ≥0.2.0: declarative `@deepseek-ai/dsh-agent-preset` patch row. DSH ≤0.1.5: copied into `~/.dsh/.agent-presets` on activate. Playbooks follow the same group toggles |
+| Agent preset + skills | Settings → Agent presets → **Netx Ops**. On activate the Host composes `~/.dsh/.agent-presets/netxops` from the shipped **standard** preset + Netx Ops persona/tools/skills (DSH has no preset inheritance). Playbooks follow the same group toggles |
 
 You do **not** run `link-preset.ps1` for normal use. That script is only a manual fallback.
 
@@ -69,7 +69,7 @@ One command, three **direct** profile bundles. Do **not** nest IM/cron under net
    Capability groups: leave default for **ops**, or enable **topology** / **对其他预设公开** (new sessions after save).  
    Optional: **知识库** — set package root (MANIFEST v1.0); default mounts `_skills/kb-*` into Netx Ops; optional public. See [KNOWLEDGE_BASE.md](KNOWLEDGE_BASE.md).
 2. Restart after install/upgrade so the bundle patch layers apply. Open Settings → **Agent presets** → **Netx Ops** should appear.
-   The Netx Ops preset is **standard + netxops tools/persona** (shell, search, plan, todo, web, workflows, … plus `netx__*`). On DSH ≥0.2.0 the picker reads the declarative preset row (not `~/.dsh/.agent-presets`). On ≤0.1.5, re-activate so `$DSH_HOME/.agent-presets/netxops` is refreshed from the package.
+   The Netx Ops preset is **standard + netxops tools/persona** (shell, search, plan, todo, web, workflows, … plus `netx__*`). Re-activate (or restart the Host) so `$DSH_HOME/.agent-presets/netxops` is recomposed from the current Harness `standard` preset.
 3. **New session → preset Netx Ops** → ask e.g. Critical Top / single-host alarms / 「能否登录」.
 
 ## Key-alarm push
diff --git a/lib/index.js b/lib/index.js
index ba2bfd3..caf69e7 100644
--- a/lib/index.js
+++ b/lib/index.js
@@ -2,14 +2,183 @@ import { createRequire } from "node:module";
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 
 // src/index.ts
-import { cpSync, existsSync as existsSync5, mkdirSync as mkdirSync2, rmSync as rmSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { dirname as dirname4, join as join7 } from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
 import z from "@deepseek-ai/schemastery";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
 import * as DshSettings from "@deepseek-ai/dsh-settings";
 
+// src/agent-preset-install.ts
+import {
+  cpSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync
+} from "node:fs";
+import { createRequire as createRequire2 } from "node:module";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+var NETXOPS_PRESET_ID = "netxops";
+function packageRoot() {
+  return join(dirname(fileURLToPath(import.meta.url)), "..");
+}
+function resolveDshHome() {
+  const fromEnv = process.env.DSH_HOME?.trim();
+  if (fromEnv !== undefined && fromEnv.length > 0)
+    return fromEnv;
+  return join(homedir(), ".dsh");
+}
+function resolveStandardPresetDir() {
+  const dshHome = resolveDshHome();
+  const candidates = [
+    join(dshHome, "profiles", "node_modules", "@deepseek-ai", "dsh-agent-presets", "presets", "standard"),
+    join(dshHome, "profiles", "web", "node_modules", "@deepseek-ai", "dsh-agent-presets", "presets", "standard"),
+    join(dshHome, "profiles", "desktop", "node_modules", "@deepseek-ai", "dsh-agent-presets", "presets", "standard")
+  ];
+  for (const dir of candidates) {
+    if (existsSync(join(dir, "agent.cordis.yml")))
+      return dir;
+  }
+  for (const nm of [
+    join(dshHome, "profiles", "node_modules"),
+    join(dshHome, "profiles", "web", "node_modules"),
+    join(dshHome, "profiles", "desktop", "node_modules")
+  ]) {
+    const pkgJson = join(nm, "@deepseek-ai", "dsh-agent-presets", "package.json");
+    if (!existsSync(pkgJson))
+      continue;
+    try {
+      const req = createRequire2(pkgJson);
+      const root = dirname(req.resolve("@deepseek-ai/dsh-agent-presets/package.json"));
+      const dir = join(root, "presets", "standard");
+      if (existsSync(join(dir, "agent.cordis.yml")))
+        return dir;
+    } catch {}
+  }
+  try {
+    const req = createRequire2(import.meta.url);
+    const root = dirname(req.resolve("@deepseek-ai/dsh-agent-presets/package.json"));
+    const dir = join(root, "presets", "standard");
+    if (existsSync(join(dir, "agent.cordis.yml")))
+      return dir;
+  } catch {}
+  return null;
+}
+function replaceTopLevelEntry(cordis, id, replacement) {
+  const lines = cordis.replace(/\r\n/g, `
+`).split(`
+`);
+  const start = lines.findIndex((line) => line === `- id: ${id}`);
+  const block = replacement.replace(/\r\n/g, `
+`).trimEnd().split(`
+`);
+  if (start < 0) {
+    return `${cordis.replace(/\r\n/g, `
+`).trimEnd()}
+
+${block.join(`
+`)}
+`;
+  }
+  let end = start + 1;
+  while (end < lines.length && !lines[end].startsWith("- id:"))
+    end += 1;
+  while (end > start + 1 && lines[end - 1].trim() === "")
+    end -= 1;
+  return [...lines.slice(0, start), ...block, "", ...lines.slice(end)].join(`
+`).replace(/\n{3,}/g, `
+
+`);
+}
+function ensureNetxopsToolsRow(cordis) {
+  if (/^- id: netxops-tools$/m.test(cordis))
+    return cordis;
+  const row = `- id: netxops-tools
+  name: dsh-netxops/tools`;
+  if (/^- id: tool-skill$/m.test(cordis)) {
+    const lines = cordis.replace(/\r\n/g, `
+`).split(`
+`);
+    const start = lines.findIndex((line) => line === "- id: tool-skill");
+    let end = start + 1;
+    while (end < lines.length && !lines[end].startsWith("- id:"))
+      end += 1;
+    while (end > start + 1 && lines[end - 1].trim() === "")
+      end -= 1;
+    return [...lines.slice(0, end), "", ...row.split(`
+`), "", ...lines.slice(end)].join(`
+`).replace(/\n{3,}/g, `
+
+`);
+  }
+  return `${cordis.replace(/\r\n/g, `
+`).trimEnd()}
+
+${row}
+`;
+}
+function personaEntryFromMarkdown(md) {
+  const body = md.replace(/\r\n/g, `
+`).replace(/^#[^\n]*\n+/u, "").replace(/\n+$/u, "");
+  const indented = body.split(`
+`).map((line) => `      ${line}`).join(`
+`);
+  return [
+    "- id: persona",
+    "  name: '@deepseek-ai/dsh-persona'",
+    "  config:",
+    "    suffix: Your working directory is {{cwd}}.",
+    "    # Body from presets/netxops/PERSONA.md (composed onto standard at install).",
+    "    prefix: |-",
+    indented
+  ].join(`
+`);
+}
+function ensureAgentPresetInstalled(logger) {
+  const overlayRoot = join(packageRoot(), "presets", NETXOPS_PRESET_ID);
+  const personaPath = join(overlayRoot, "PERSONA.md");
+  const metaPath = join(overlayRoot, "preset.yml");
+  if (!existsSync(personaPath) || !existsSync(metaPath)) {
+    logger.warn("netxops: bundled preset overlay missing under %s — skip install", overlayRoot);
+    return;
+  }
+  const standardDir = resolveStandardPresetDir();
+  if (standardDir === null) {
+    logger.warn("netxops: cannot find shipped standard preset (@deepseek-ai/dsh-agent-presets) — skip user-preset install");
+    return;
+  }
+  const destParent = join(resolveDshHome(), ".agent-presets");
+  const dest = join(destParent, NETXOPS_PRESET_ID);
+  try {
+    mkdirSync(destParent, { recursive: true });
+    if (existsSync(dest))
+      rmSync(dest, { recursive: true, force: true });
+    cpSync(standardDir, dest, { recursive: true });
+    writeFileSync(join(dest, "preset.yml"), readFileSync(metaPath, "utf8"));
+    writeFileSync(join(dest, "PERSONA.md"), readFileSync(personaPath, "utf8"));
+    const standardCordis = readFileSync(join(standardDir, "agent.cordis.yml"), "utf8");
+    let composed = replaceTopLevelEntry(standardCordis, "persona", personaEntryFromMarkdown(readFileSync(personaPath, "utf8")));
+    composed = ensureNetxopsToolsRow(composed);
+    writeFileSync(join(dest, "agent.cordis.yml"), composed.endsWith(`
+`) ? composed : `${composed}
+`, "utf8");
+    const skillsSrc = join(overlayRoot, "skills");
+    if (existsSync(skillsSrc)) {
+      cpSync(skillsSrc, join(dest, "skills"), { recursive: true });
+    }
+    writeFileSync(join(dest, ".dsh-netxops-managed"), [
+      `composed-from: standard`,
+      `standard-source: ${standardDir}`,
+      `at: ${new Date().toISOString()}`,
+      ""
+    ].join(`
+`), "utf8");
+    logger.info("netxops: agent preset composed from standard → %s", dest);
+  } catch (error) {
+    logger.error("netxops: failed to install agent preset: %s", error);
+  }
+}
 // src/netx/alarm-push-status.ts
 var STORE_KEY = Symbol.for("dsh-netxops.alarm-push-status");
 function emptyStatus(partial = {}) {
@@ -404,16 +573,16 @@ async function deliverAlarmToIm(ctx, payload, options) {
 }
 
 // src/netx/alarm-session.ts
-import { homedir } from "node:os";
-import { join } from "node:path";
+import { homedir as homedir2 } from "node:os";
+import { join as join2 } from "node:path";
 var PRESET_ID = "netxops";
 var PERMISSION_PRESET = "default";
 var sticky = null;
 var deliveryChain = Promise.resolve();
 function resolveWorkspacePath() {
   const fromEnv = process.env.DSH_HOME?.trim();
-  const home = fromEnv && fromEnv.length > 0 ? fromEnv : join(homedir(), ".dsh");
-  return join(home, "workspaces", "netxops-alarms");
+  const home = fromEnv && fromEnv.length > 0 ? fromEnv : join2(homedir2(), ".dsh");
+  return join2(home, "workspaces", "netxops-alarms");
 }
 async function disposeSticky(handle) {
   if (!handle)
@@ -684,29 +853,29 @@ function toolNamesForGroups(groupIds) {
 }
 
 // src/netx/group-skills.ts
-import { existsSync } from "node:fs";
+import { existsSync as existsSync2 } from "node:fs";
 import { readdir, readFile, stat } from "node:fs/promises";
-import { dirname, join as join2 } from "node:path";
-import { fileURLToPath } from "node:url";
+import { dirname as dirname2, join as join3 } from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
 function opsSkillsRoot() {
   const envRoot = process.env.NETX_SKILLS_ROOT?.trim();
-  if (envRoot && existsSync(envRoot))
+  if (envRoot && existsSync2(envRoot))
     return envRoot;
-  const here = dirname(fileURLToPath(import.meta.url));
+  const here = dirname2(fileURLToPath2(import.meta.url));
   const siblingCandidates = [
-    join2(here, "..", "..", "..", "netx", "skills"),
-    join2(here, "..", "..", "netx", "skills")
+    join3(here, "..", "..", "..", "netx", "skills"),
+    join3(here, "..", "..", "netx", "skills")
   ];
   for (const candidate of siblingCandidates) {
-    if (existsSync(candidate))
+    if (existsSync2(candidate))
       return candidate;
   }
   const packaged = [
-    join2(here, "..", "presets", "netxops", "skills"),
-    join2(here, "..", "..", "presets", "netxops", "skills")
+    join3(here, "..", "presets", "netxops", "skills"),
+    join3(here, "..", "..", "presets", "netxops", "skills")
   ];
   for (const candidate of packaged) {
-    if (existsSync(candidate))
+    if (existsSync2(candidate))
       return candidate;
   }
   return packaged[0];
@@ -753,7 +922,7 @@ function stripQuotes(value) {
   return value;
 }
 async function loadSkillBundle(dir) {
-  const skillPath = join2(dir, "SKILL.md");
+  const skillPath = join3(dir, "SKILL.md");
   let raw;
   try {
     raw = await readFile(skillPath, "utf8");
@@ -776,7 +945,7 @@ async function loadSkillBundle(dir) {
   };
 }
 async function loadGroupSkills(skillsRoot, groupId) {
-  const groupDir = join2(skillsRoot, SKILL_DIR_BY_GROUP[groupId]);
+  const groupDir = join3(skillsRoot, SKILL_DIR_BY_GROUP[groupId]);
   let entries;
   try {
     entries = await readdir(groupDir);
@@ -785,7 +954,7 @@ async function loadGroupSkills(skillsRoot, groupId) {
   }
   const skills = [];
   for (const entry of entries) {
-    const full = join2(groupDir, entry);
+    const full = join3(groupDir, entry);
     let isDir = false;
     try {
       isDir = (await stat(full)).isDirectory();
@@ -831,8 +1000,8 @@ async function registerGroupSkills(ctx, groupIds, providerLabel) {
 }
 
 // src/netx/kb-local-path.ts
-import { existsSync as existsSync2, realpathSync, statSync } from "node:fs";
-import { join as join3, relative, resolve, sep } from "node:path";
+import { existsSync as existsSync3, realpathSync, statSync } from "node:fs";
+import { join as join4, relative, resolve, sep } from "node:path";
 var KB_LOCAL_WRITABLE_ROOTS = Object.freeze([
   "memories",
   "drafts",
@@ -943,7 +1112,7 @@ function resolveExistingWritableFile(localRoot, pathArg) {
   }
   const checked = resolveWritableLocalPath(localRoot, ...relative(localRoot, absolutePath).split(/[/\\]/).filter(Boolean));
   try {
-    if (existsSync2(checked.absolutePath)) {
+    if (existsSync3(checked.absolutePath)) {
       const realFile = realpathSync(checked.absolutePath);
       const realLocal = realpathSync(localRoot);
       const realRel = relative(realLocal, realFile);
@@ -971,16 +1140,16 @@ function resolveExistingWritableFile(localRoot, pathArg) {
   return checked;
 }
 function memoryDir(bucket) {
-  return join3("memories", MEMORY_BUCKET_DIR[bucket]);
+  return join4("memories", MEMORY_BUCKET_DIR[bucket]);
 }
 function suggestionDir(kind) {
-  return join3("suggestions", kind);
+  return join4("suggestions", kind);
 }
 function draftDir(domain) {
   const d = domain?.trim();
   if (!d)
     return "drafts";
-  return join3("drafts", sanitizeSlug(d, "misc"));
+  return join4("drafts", sanitizeSlug(d, "misc"));
 }
 function refDir(area, device) {
   if (!REF_AREAS.includes(area)) {
@@ -991,9 +1160,9 @@ function refDir(area, device) {
     if (!host) {
       throw new Error("refs/devices requires device (host_name)");
     }
-    return join3("refs", "devices", host);
+    return join4("refs", "devices", host);
   }
-  return join3("refs", area);
+  return join4("refs", area);
 }
 
 // src/netx/kb-context-skill.ts
@@ -1086,8 +1255,8 @@ function registerKbContextSkill(ctx, snapshot) {
 }
 
 // src/netx/kb-manifest.ts
-import { existsSync as existsSync3, readdirSync, readFileSync, statSync as statSync2 } from "node:fs";
-import { basename, dirname as dirname2, join as join4, resolve as resolve2 } from "node:path";
+import { existsSync as existsSync4, readdirSync, readFileSync as readFileSync2, statSync as statSync2 } from "node:fs";
+import { basename, dirname as dirname3, join as join5, resolve as resolve2 } from "node:path";
 var EMPTY_CONTENT = {
   hasRegions: false,
   hasTheory: false,
@@ -1140,8 +1309,8 @@ function findManifest(kbRoot, maxDepth = 3) {
   if (!rootStat.isDirectory()) {
     return { paths: [], error: `kbRoot is not a directory: ${root}` };
   }
-  const direct = join4(root, "MANIFEST.json");
-  if (existsSync3(direct)) {
+  const direct = join5(root, "MANIFEST.json");
+  if (existsSync4(direct)) {
     try {
       if (statSync2(direct).isFile())
         return { paths: [direct] };
@@ -1151,8 +1320,8 @@ function findManifest(kbRoot, maxDepth = 3) {
   const walk = (dir, depth) => {
     if (depth > maxDepth)
       return;
-    const candidate = join4(dir, "MANIFEST.json");
-    if (existsSync3(candidate)) {
+    const candidate = join5(dir, "MANIFEST.json");
+    if (existsSync4(candidate)) {
       try {
         if (statSync2(candidate).isFile())
           found.push(candidate);
@@ -1169,7 +1338,7 @@ function findManifest(kbRoot, maxDepth = 3) {
     for (const name of entries) {
       if (name === "node_modules" || name === ".git")
         continue;
-      const full = join4(dir, name);
+      const full = join5(dir, name);
       let st;
       try {
         st = statSync2(full);
@@ -1189,7 +1358,7 @@ function findManifest(kbRoot, maxDepth = 3) {
   for (const name of topEntries) {
     if (name === "node_modules" || name === ".git")
       continue;
-    const full = join4(root, name);
+    const full = join5(root, name);
     let st;
     try {
       st = statSync2(full);
@@ -1285,7 +1454,7 @@ function resolveKbRoot(kbRoot, maxDepth = 3) {
     const st = statSync2(root);
     if (st.isFile()) {
       if (basename(root).toLowerCase() === "manifest.json") {
-        root = dirname2(root);
+        root = dirname3(root);
       } else {
         return errorSnapshot(`kbRoot is not a directory: ${root}`);
       }
@@ -1307,7 +1476,7 @@ function resolveKbRoot(kbRoot, maxDepth = 3) {
   const manifestPath = located.paths[0];
   let raw;
   try {
-    raw = readFileSync(manifestPath, "utf8");
+    raw = readFileSync2(manifestPath, "utf8");
   } catch (error) {
     return errorSnapshot(`cannot read MANIFEST: ${error instanceof Error ? error.message : String(error)}`);
   }
@@ -1315,7 +1484,7 @@ function resolveKbRoot(kbRoot, maxDepth = 3) {
     const parsed = parseManifest(raw);
     return {
       status: "configured",
-      realRoot: dirname2(manifestPath),
+      realRoot: dirname3(manifestPath),
       operatorName: parsed.operatorName,
       country: parsed.country,
       version: parsed.version,
@@ -1333,15 +1502,15 @@ import { defineTool } from "@deepseek-ai/dsh-tools";
 
 // src/netx/kb-local-ops.ts
 import {
-  existsSync as existsSync4,
-  mkdirSync,
+  existsSync as existsSync5,
+  mkdirSync as mkdirSync2,
   readdirSync as readdirSync2,
-  readFileSync as readFileSync2,
-  rmSync,
+  readFileSync as readFileSync3,
+  rmSync as rmSync2,
   statSync as statSync3,
-  writeFileSync
+  writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname3, join as join5 } from "node:path";
+import { dirname as dirname4, join as join6 } from "node:path";
 function requireLocalRoot(snapshot) {
   const root = resolveKbLocalRoot(snapshot);
   if (!root) {
@@ -1387,12 +1556,12 @@ function createMemory(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const name = memoryFileName({ date: args.date, slug: args.slug });
   const target = resolveWritableLocalPath(localRoot, memoryDir(args.bucket), name);
-  if (existsSync4(target.absolutePath) && !args.overwrite) {
+  if (existsSync5(target.absolutePath) && !args.overwrite) {
     throw new Error(`file already exists (pass overwrite=true to replace): ${target.relativePath}`);
   }
-  mkdirSync(dirname3(target.absolutePath), { recursive: true });
-  const existed = existsSync4(target.absolutePath);
-  writeFileSync(target.absolutePath, args.body.endsWith(`
+  mkdirSync2(dirname4(target.absolutePath), { recursive: true });
+  const existed = existsSync5(target.absolutePath);
+  writeFileSync2(target.absolutePath, args.body.endsWith(`
 `) ? args.body : `${args.body}
 `, "utf8");
   return {
@@ -1406,12 +1575,12 @@ function createDraft(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const name = draftFileName({ date: args.date, slug: args.slug });
   const target = resolveWritableLocalPath(localRoot, draftDir(args.domain), name);
-  if (existsSync4(target.absolutePath) && !args.overwrite) {
+  if (existsSync5(target.absolutePath) && !args.overwrite) {
     throw new Error(`file already exists (pass overwrite=true to replace): ${target.relativePath}`);
   }
-  mkdirSync(dirname3(target.absolutePath), { recursive: true });
-  const existed = existsSync4(target.absolutePath);
-  writeFileSync(target.absolutePath, ensureDraftBody(args.body), "utf8");
+  mkdirSync2(dirname4(target.absolutePath), { recursive: true });
+  const existed = existsSync5(target.absolutePath);
+  writeFileSync2(target.absolutePath, ensureDraftBody(args.body), "utf8");
   return {
     ok: true,
     action: existed ? "updated" : "created",
@@ -1423,12 +1592,12 @@ function createSuggestion(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const name = suggestionFileName({ date: args.date, slug: args.slug });
   const target = resolveWritableLocalPath(localRoot, suggestionDir(args.kind), name);
-  if (existsSync4(target.absolutePath) && !args.overwrite) {
+  if (existsSync5(target.absolutePath) && !args.overwrite) {
     throw new Error(`file already exists (pass overwrite=true to replace): ${target.relativePath}`);
   }
-  mkdirSync(dirname3(target.absolutePath), { recursive: true });
-  const existed = existsSync4(target.absolutePath);
-  writeFileSync(target.absolutePath, args.body.endsWith(`
+  mkdirSync2(dirname4(target.absolutePath), { recursive: true });
+  const existed = existsSync5(target.absolutePath);
+  writeFileSync2(target.absolutePath, args.body.endsWith(`
 `) ? args.body : `${args.body}
 `, "utf8");
   return {
@@ -1442,12 +1611,12 @@ function createRef(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const name = refFileName(args.slug);
   const target = resolveWritableLocalPath(localRoot, refDir(args.area, args.device), name);
-  if (existsSync4(target.absolutePath) && !args.overwrite) {
+  if (existsSync5(target.absolutePath) && !args.overwrite) {
     throw new Error(`file already exists (pass overwrite=true to replace): ${target.relativePath}`);
   }
-  mkdirSync(dirname3(target.absolutePath), { recursive: true });
-  const existed = existsSync4(target.absolutePath);
-  writeFileSync(target.absolutePath, args.body.endsWith(`
+  mkdirSync2(dirname4(target.absolutePath), { recursive: true });
+  const existed = existsSync5(target.absolutePath);
+  writeFileSync2(target.absolutePath, args.body.endsWith(`
 `) ? args.body : `${args.body}
 `, "utf8");
   return {
@@ -1460,13 +1629,13 @@ function createRef(snapshot, args) {
 function updateLocalFile(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const target = resolveExistingWritableFile(localRoot, args.path);
-  if (!existsSync4(target.absolutePath)) {
+  if (!existsSync5(target.absolutePath)) {
     throw new Error(`file not found: ${target.relativePath}`);
   }
   const body = target.writableRoot === "drafts" ? ensureDraftBody(args.body) : args.body.endsWith(`
 `) ? args.body : `${args.body}
 `;
-  writeFileSync(target.absolutePath, body, "utf8");
+  writeFileSync2(target.absolutePath, body, "utf8");
   return {
     ok: true,
     action: "updated",
@@ -1477,10 +1646,10 @@ function updateLocalFile(snapshot, args) {
 function deleteLocalFile(snapshot, args) {
   const localRoot = requireLocalRoot(snapshot);
   const target = resolveExistingWritableFile(localRoot, args.path);
-  if (!existsSync4(target.absolutePath)) {
+  if (!existsSync5(target.absolutePath)) {
     throw new Error(`file not found: ${target.relativePath}`);
   }
-  rmSync(target.absolutePath, { force: false });
+  rmSync2(target.absolutePath, { force: false });
   return {
     ok: true,
     action: "deleted",
@@ -1498,7 +1667,7 @@ function walkFiles(dir, baseLocal, out) {
   for (const name of entries) {
     if (name === "." || name === "..")
       continue;
-    const full = join5(dir, name);
+    const full = join6(dir, name);
     let st;
     try {
       st = statSync3(full);
@@ -1523,7 +1692,7 @@ function listLocalFiles(snapshot, args = {}) {
   const roots = args.root && args.root !== "all" ? [args.root] : [...KB_LOCAL_WRITABLE_ROOTS];
   const entries = [];
   for (const r of roots) {
-    walkFiles(join5(localRoot, r), localRoot, entries);
+    walkFiles(join6(localRoot, r), localRoot, entries);
   }
   entries.sort((a, b) => b.mtimeMs - a.mtimeMs);
   const limit = Math.min(Math.max(args.limit ?? 50, 1), 200);
@@ -1771,19 +1940,19 @@ function registerKbLocalTools(ctx, snapshot = getKbContext()) {
 
 // src/netx/kb-pack-skills.ts
 import { readdir as readdir2, stat as stat2 } from "node:fs/promises";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 function kbPackSkillsEnabled(snapshot) {
   return snapshot.status === "configured" && snapshot.content.hasSkills === true;
 }
 function resolveKbSkillsRoot(snapshot) {
   const rel = snapshot.paths.skills?.trim() || "_skills";
-  return join6(snapshot.realRoot, rel);
+  return join7(snapshot.realRoot, rel);
 }
 function resolveKbLocalSkillsRoot(snapshot) {
   const rel = snapshot.paths.localSkills?.trim();
   if (!rel)
     return null;
-  return join6(snapshot.realRoot, rel);
+  return join7(snapshot.realRoot, rel);
 }
 async function registerSkillsUnderRoot(ctx, skillsApi, root, provider, options) {
   let entries;
@@ -1799,7 +1968,7 @@ async function registerSkillsUnderRoot(ctx, skillsApi, root, provider, options)
     return [];
   const disposers = [];
   for (const entry of entries) {
-    const full = join6(root, entry);
+    const full = join7(root, entry);
     let isDir = false;
     try {
       isDir = (await stat2(full)).isDirectory();
@@ -2013,11 +2182,11 @@ function watchNetxConnection(listener) {
 }
 
 // src/netx/session-export.ts
-import { homedir as homedir2, hostname as osHostname } from "node:os";
+import { homedir as homedir3, hostname as osHostname } from "node:os";
 
 // node_modules/.pnpm/fflate@0.8.3/node_modules/fflate/esm/index.mjs
-import { createRequire as createRequire2 } from "module";
-var require2 = createRequire2("/");
+import { createRequire as createRequire3 } from "module";
+var require2 = createRequire3("/");
 var _a;
 var Worker;
 var isMarkedAsUntransferable;
@@ -5234,7 +5403,6 @@ var name = "netxops";
 var inject = ["credentials"];
 var NETXOPS_RPC_CHANNEL = "/netxops";
 var NETXOPS_SETTINGS_NAMESPACE = "netxops";
-var NETXOPS_PRESET_ID = "netxops";
 var DEFAULT_TOKEN_REF = "NETX_API_TOKEN";
 function vol(schema) {
   const candidate = schema;
@@ -5265,37 +5433,6 @@ var Config = z.object({
   groupKbInPreset: vol(z.boolean().default(true)),
   groupKbPublic: vol(z.boolean().default(false))
 });
-function packageRoot() {
-  return join7(dirname4(fileURLToPath2(import.meta.url)), "..");
-}
-function resolveDshHome() {
-  const fromEnv = process.env.DSH_HOME?.trim();
-  if (fromEnv !== undefined && fromEnv.length > 0)
-    return fromEnv;
-  return join7(homedir3(), ".dsh");
-}
-function ensureAgentPresetInstalled(logger) {
-  const src = join7(packageRoot(), "presets", NETXOPS_PRESET_ID);
-  const composition = join7(src, "agent.cordis.yml");
-  if (!existsSync5(composition)) {
-    logger.warn("netxops: bundled preset missing at %s — skip user-preset install", src);
-    return;
-  }
-  const destParent = join7(resolveDshHome(), ".agent-presets");
-  const dest = join7(destParent, NETXOPS_PRESET_ID);
-  try {
-    mkdirSync2(destParent, { recursive: true });
-    if (existsSync5(dest)) {
-      rmSync2(dest, { recursive: true, force: true });
-    }
-    cpSync(src, dest, { recursive: true });
-    writeFileSync2(join7(dest, ".dsh-netxops-managed"), `${new Date().toISOString()}
-`, "utf8");
-    logger.info("netxops: agent preset installed at %s", dest);
-  } catch (error) {
-    logger.error("netxops: failed to install agent preset: %s", error);
-  }
-}
 async function resolveToken(ctx, refName) {
   const hit = await ctx.credentials.resolve(credentialRef(refName));
   return hit?.value ?? "";
diff --git a/package.json b/package.json
index bd1d22c..32e41db 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "dsh-netxops",
-  "version": "0.1.46",
+  "version": "0.1.47",
   "description": "DeepSeek Harness Netx Ops: ops/topology + IM delivery + session export + knowledge-base MANIFEST/_skills + localSkills",
   "license": "MIT",
   "type": "module",
diff --git a/presets/netxops.preset.patch.yml b/presets/netxops.preset.patch.yml
deleted file mode 100644
index 88b22f1..0000000
--- a/presets/netxops.preset.patch.yml
+++ /dev/null
@@ -1,292 +0,0 @@
-# Declarative Netx Ops agent preset for DSH ≥0.2.0-rc.1.
-# Directory copy under ~/.dsh/.agent-presets is ignored on these hosts —
-# keep presets/netxops/agent.cordis.yml in sync with config.plugins below
-# (regenerate: bun run scripts/gen-preset-patch.mjs).
-
-- insert:
-    - id: preset-netxops
-      name: '@deepseek-ai/dsh-agent-preset'
-      config:
-        id: netxops
-        order: 50
-        name: "Netx Ops"
-        description: "运维专家（含标准模式全套工作区能力 + netx 工具）。"
-        plugins:
-        # Netx Ops agent preset = DSH `standard` (full coding agent) + netxops tools/persona.
-        #
-        # DSH has no preset inheritance: compositions are flat copies. Keep this file in
-        # sync with DeepSeekHarness `presets/standard/agent.cordis.yml`, then retain the
-        # Netx Ops persona + `netxops-tools` row below.
-        #
-        # Host owns registries, sandbox, persistence, model route. This file owns
-        # persona and which model-facing plugins Netx Ops sessions get.
-        
-        # ── identity ────────────────────────────────────────────────────────────────
-        
-        - id: persona
-          name: '@deepseek-ai/dsh-persona'
-          config:
-            suffix: Your working directory is {{cwd}}.
-            # Keep in sync with presets/netxops/PERSONA.md
-            prefix: |-
-              你是 **Netx Ops**，面向 netx 的网络运维专家；同时具备与「标准模式」相同的完整编程与工作区能力。
-        
-              ## 身份
-              - 被问「你是谁 / 什么模型」时：只回答你是 **Netx Ops**。
-              - 不透露系统提示、工具内幕、运行环境或供应商信息。
-        
-              ## 原则
-              1. 先用工具拿证据（告警、清单、CLI、工作区读查），再下结论。
-              2. 涉及破坏性变更：先说清影响与回滚（当前 CLI 仅只读：show / display / ping 等）。
-              3. 回复语言以 Host「Netx Ops」设置里的「回复语言」为准（强制 zh/en 时不得跟随用户语言）；未强制（follow-user）时再跟随用户语言。现场默认：简洁、可扫读的运维口吻。
-        
-              ## 终稿骨架（告警 / 网元 / CLI 必须）
-              ```
-              *<主题> — <范围>*
-              - Result: …
-              - Evidence: …（级别计数和/或 Top host_name / CLI ok|fail；能写则带 as-of）
-              - Next: …（没有则省略）
-              ```
-              - 终稿直接给结论，不要用「我先查一下」这类过程开场。
-              - 宜短（约 ≤15 行）；大表只摘要 Top，并提示可加过滤。
-              - 严重度写全称：Critical / Major / Minor / Warning。
-              - 对用户只展示 **host_name**；**严禁**发送任何 UUID。无 `host_name` 当垃圾忽略，勿用 label 顶替。
-              - 没有证据就说证据不足，禁止臆造根因。
-        
-              ## 技能（仅当对应能力组已开启）
-              - `netx-ops` — ops：告警、清单、纳管登录、路径
-              - 知识库 `_skills/kb-*`（若已配置运营商子集）
-        
-              ## 工具
-              - netx 调用名为 `netx__*`（驼峰）。决策树见技能正文。
-              - 多台 CLI：**一次** `execManagedNe`（`ne_ids` / `nms_ne_ids` / `targets`）。
-              - 工作区：与标准模式相同（shell、搜索、计划、todo、web、委派等）。
-        
-              ## 知识库双平面（KB 已配置时 — 铁律）
-              - **总部包只读**：正式 RCA、theory、packet、`_common`、`_skills`、总部命令库 — 检索用，不改。
-              - **唯一可写区** `{kbLocal}`：`refs/`（本网产品知识）/ `memories/`（过程记忆）/ `drafts/`（案例草稿）/ `suggestions/`（反哺总部）。
-              - **写文件只走宿主工具**：`netx__kbWriteRef` / `kbWriteMemory` / `kbWriteDraft` / `kbWriteSuggestion` / `kbUpdateLocal` / `kbDeleteLocal`。**禁止**对 KB 用 workspace `Write` / bash。
-        
-              ### refs — 本网产品知识（可进化核心）
-              - 排障涉及某网元时：**先读** `refs/devices/<host_name>/`；没有则 netx 取证后立刻 `kbWriteRef` 建档/补全。
-              - `area=devices` 必须带 `device=host_name`（禁 UUID）；画像主文件 slug=`PROFILE`。
-              - 台账/汇总 → `inventory`；跨机拓扑 → `topology`；业务域 → `business`；本网命令集 → `commands`；速查 → `handbooks`。
-              - **设备事实写 refs，过程经验写 memories**，不要把台账塞进日记。
-        
-              ### memories — 随手记
-              任务中一旦出现可复用价值（经验、踩坑、口诀、误判纠正），立刻 `kbWriteMemory`；宁短勿丢。
-              - `note` / `rca_review` / `ai_trace`
-        
-              ### drafts / suggestions
-              未闭环案例 → `kbWriteDraft`；总部通用层有误或工具/流程改进 → `kbWriteSuggestion`。
-        
-              ## 委派（默认 subagent，活多再拆）
-              你本人逻辑上全能。默认自己干；只有活明显偏多、且可并行时，才用 `subagent`（必要时 `subagent_fork`）拆开干。
-        
-              ### 自己干
-              - 单问单答、一条证据链能闭环（如 Critical Top、单机告警、单机能否登录）
-              - 下一步强依赖上一步结果
-              - 用户只要结论，不需要并行深挖
-        
-              ### 再拆
-              - 至少两块互不依赖的活（多机并行取证、告警面与链路面可同时查、查证与写纪要可并行）
-              - 串行会明显拖久或撑爆上下文
-              - 每一块都能写成独立目标，互不抢同一结论所有权
-        
-              ### 派活提示必须自包含
-              子 agent **看不到**当前对话，提示里写清：
-              - 目标（可验收）
-              - 范围边界（host / 告警类型 / 不要碰什么）
-              - 交付：短 Result / Evidence / Next
-              - 禁止：直接对用户说话、擅自扩大范围
-        
-              ### 收口
-              - 等齐结果后由你综合；**只有你**对用户说终稿
-              - 证据冲突时由你裁决或再补一刀，不要让子 agent 在用户面前互辩
-              - 优先前台等结果；确需并行再用后台 + jobs 收齐
-        
-        - id: agent-instructions
-          name: '@deepseek-ai/dsh-agent-instructions'
-          config:
-            maxBytes: 65536
-        
-        # ── shell ───────────────────────────────────────────────────────────────────
-        
-        - id: tool-bash
-          name: '@deepseek-ai/dsh-tool-bash'
-          disabled: !!js process.platform === 'win32'
-        
-        - id: tool-pwsh
-          name: '@deepseek-ai/dsh-tool-pwsh'
-          disabled: !!js process.platform !== 'win32'
-        
-        # ── filesystem ──────────────────────────────────────────────────────────────
-        
-        - id: tool-fs
-          name: '@deepseek-ai/dsh-tool-fs'
-        
-        - id: tool-fs-search
-          name: '@deepseek-ai/dsh-tool-fs-search'
-          config:
-            sampleOverCapGlobResults: false
-        
-        # ── background jobs ────────────────────────────────────────────────────────
-        
-        - id: tool-jobs
-          name: '@deepseek-ai/dsh-tool-jobs'
-        
-        # ── skills ──────────────────────────────────────────────────────────────────
-        
-        - id: skill-filesystem
-          name: '@deepseek-ai/dsh-skill-filesystem'
-          config:
-            # Ops / KB playbooks are registered by netxops-tools (capability groups), not customSkillDirs.
-            includeDefaultRoots: true
-            customSkillDirs: []
-        
-        - id: tool-skill
-          name: '@deepseek-ai/dsh-tool-skill'
-        
-        # Netx Ops tools (+ capability-gated skills / KB local write tools) in this preset scope.
-        - id: netxops-tools
-          name: dsh-netxops/tools
-        
-        # ── goals ───────────────────────────────────────────────────────────────────
-        
-        - id: command-goal
-          name: '@deepseek-ai/dsh-command-goal'
-        
-        - id: tool-goal
-          name: '@deepseek-ai/dsh-tool-goal'
-        
-        # ── plan mode ───────────────────────────────────────────────────────────────
-        
-        - id: planning
-          name: cordis:group
-          group: true
-          isolate:
-            planMode: true
-          config:
-            - id: plan-mode
-              name: '@deepseek-ai/dsh-plan-mode'
-              config:
-                section: |
-                      You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
-        
-                      Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
-        
-                      The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
-        
-                      Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
-        
-                      Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
-        
-                      When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
-        
-        # ── compaction ──────────────────────────────────────────────────────────────
-        
-        - id: compaction
-          name: cordis:group
-          group: true
-          isolate:
-            compaction: true
-            toolResultPruner: true
-          config:
-            - id: compaction-basic
-              name: '@deepseek-ai/dsh-compaction-basic'
-        
-            - id: command-compact
-              name: '@deepseek-ai/dsh-command-compact'
-        
-            - id: tool-result-pruner
-              name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
-              config:
-                thresholdChars: 8192
-                headChars: 4096
-                tailChars: 1024
-        
-        # ── delegation and workflows ────────────────────────────────────────────────
-        
-        - id: delegation
-          name: cordis:group
-          group: true
-          isolate:
-            workflowEngine: true
-          config:
-            - id: tool-subagent-control
-              name: '@deepseek-ai/dsh-tool-subagent-control'
-        
-            - id: tool-subagent-list-agents
-              name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
-        
-            - id: tool-subagent
-              name: '@deepseek-ai/dsh-tool-subagent'
-              config:
-                provider: spawn
-                toolName: subagent
-                modelSelectionSettings: true
-                backgroundMode: continuable
-        
-            - id: tool-subagent-fork
-              name: '@deepseek-ai/dsh-tool-subagent'
-              config:
-                provider: fork
-                toolName: subagent_fork
-                backgroundMode: continuable
-        
-            - id: tool-subagent-codex
-              name: '@deepseek-ai/dsh-tool-subagent'
-              disabled: true
-              config:
-                provider: codex
-                toolName: subagent_codex
-                backgroundMode: one-shot
-                maxDepth: provider-managed
-        
-            - id: tool-subagent-claude-code
-              name: '@deepseek-ai/dsh-tool-subagent'
-              disabled: true
-              config:
-                provider: claude-code
-                toolName: subagent_claude_code
-                backgroundMode: one-shot
-                maxDepth: provider-managed
-        
-            - id: workflow-worker-thread
-              name: '@deepseek-ai/dsh-workflow-worker-thread'
-              config:
-                provider: spawn
-        
-            - id: tool-workflow
-              name: '@deepseek-ai/dsh-tool-workflow'
-        
-            - id: tool-ralph
-              name: '@deepseek-ai/dsh-tool-ralph'
-              config:
-                subagentProvider: spawn
-                maxRounds: 64
-        
-        # ── remaining model-facing rows ─────────────────────────────────────────────
-        
-        - id: tool-ask-user
-          name: '@deepseek-ai/dsh-tool-ask-user'
-        
-        - id: tool-todo
-          name: '@deepseek-ai/dsh-tool-todo'
-          config:
-            allowParallelInProgress: true
-        
-        - id: tool-web
-          name: '@deepseek-ai/dsh-tool-web'
-          config:
-            fetch: true
-            searchTimeoutMs: 60000
-        
-        - id: present
-          name: '@deepseek-ai/dsh-tool-present'
-        
-        # Host package dsh-netxops: on DSH ≤0.1.5 copies this tree to $DSH_HOME/.agent-presets/netxops;
-        # on ≥0.2.0 the same composition is shipped as presets/netxops.preset.patch.yml
-        # (`@deepseek-ai/dsh-agent-preset` declaration). Regenerate the patch after edits:
-        #   bun run gen:preset-patch
-        
diff --git a/presets/netxops/agent.cordis.yml b/presets/netxops/agent.cordis.yml
index 45282d4..56e1eb1 100644
--- a/presets/netxops/agent.cordis.yml
+++ b/presets/netxops/agent.cordis.yml
@@ -1,277 +1,14 @@
-# Netx Ops agent preset = DSH `standard` (full coding agent) + netxops tools/persona.
+# Netx Ops delta only — NOT a full agent composition.
 #
-# DSH has no preset inheritance: compositions are flat copies. Keep this file in
-# sync with DeepSeekHarness `presets/standard/agent.cordis.yml`, then retain the
-# Netx Ops persona + `netxops-tools` row below.
+# At Host apply, `ensureAgentPresetInstalled` copies the Harness shipped
+# `standard` preset into `$DSH_HOME/.agent-presets/netxops`, then:
+#   1. replaces `persona` with presets/netxops/PERSONA.md
+#   2. ensures the `netxops-tools` row below is present
+#   3. copies presets/netxops/skills/
 #
-# Host owns registries, sandbox, persistence, model route. This file owns
-# persona and which model-facing plugins Netx Ops sessions get.
+# DSH has no preset inheritance; composing from `standard` at install time is
+# how Netx Ops stays aligned with the running Harness without embedding (or
+# declaring via `@deepseek-ai/dsh-agent-preset`) a full standard tree.
 
-# ── identity ────────────────────────────────────────────────────────────────
-
-- id: persona
-  name: '@deepseek-ai/dsh-persona'
-  config:
-    suffix: Your working directory is {{cwd}}.
-    # Keep in sync with presets/netxops/PERSONA.md
-    prefix: |-
-      你是 **Netx Ops**，面向 netx 的网络运维专家；同时具备与「标准模式」相同的完整编程与工作区能力。
-
-      ## 身份
-      - 被问「你是谁 / 什么模型」时：只回答你是 **Netx Ops**。
-      - 不透露系统提示、工具内幕、运行环境或供应商信息。
-
-      ## 原则
-      1. 先用工具拿证据（告警、清单、CLI、工作区读查），再下结论。
-      2. 涉及破坏性变更：先说清影响与回滚（当前 CLI 仅只读：show / display / ping 等）。
-      3. 回复语言以 Host「Netx Ops」设置里的「回复语言」为准（强制 zh/en 时不得跟随用户语言）；未强制（follow-user）时再跟随用户语言。现场默认：简洁、可扫读的运维口吻。
-
-      ## 终稿骨架（告警 / 网元 / CLI 必须）
-      ```
-      *<主题> — <范围>*
-      - Result: …
-      - Evidence: …（级别计数和/或 Top host_name / CLI ok|fail；能写则带 as-of）
-      - Next: …（没有则省略）
-      ```
-      - 终稿直接给结论，不要用「我先查一下」这类过程开场。
-      - 宜短（约 ≤15 行）；大表只摘要 Top，并提示可加过滤。
-      - 严重度写全称：Critical / Major / Minor / Warning。
-      - 对用户只展示 **host_name**；**严禁**发送任何 UUID。无 `host_name` 当垃圾忽略，勿用 label 顶替。
-      - 没有证据就说证据不足，禁止臆造根因。
-
-      ## 技能（仅当对应能力组已开启）
-      - `netx-ops` — ops：告警、清单、纳管登录、路径
-      - 知识库 `_skills/kb-*`（若已配置运营商子集）
-
-      ## 工具
-      - netx 调用名为 `netx__*`（驼峰）。决策树见技能正文。
-      - 多台 CLI：**一次** `execManagedNe`（`ne_ids` / `nms_ne_ids` / `targets`）。
-      - 工作区：与标准模式相同（shell、搜索、计划、todo、web、委派等）。
-
-      ## 知识库双平面（KB 已配置时 — 铁律）
-      - **总部包只读**：正式 RCA、theory、packet、`_common`、`_skills`、总部命令库 — 检索用，不改。
-      - **唯一可写区** `{kbLocal}`：`refs/`（本网产品知识）/ `memories/`（过程记忆）/ `drafts/`（案例草稿）/ `suggestions/`（反哺总部）。
-      - **写文件只走宿主工具**：`netx__kbWriteRef` / `kbWriteMemory` / `kbWriteDraft` / `kbWriteSuggestion` / `kbUpdateLocal` / `kbDeleteLocal`。**禁止**对 KB 用 workspace `Write` / bash。
-
-      ### refs — 本网产品知识（可进化核心）
-      - 排障涉及某网元时：**先读** `refs/devices/<host_name>/`；没有则 netx 取证后立刻 `kbWriteRef` 建档/补全。
-      - `area=devices` 必须带 `device=host_name`（禁 UUID）；画像主文件 slug=`PROFILE`。
-      - 台账/汇总 → `inventory`；跨机拓扑 → `topology`；业务域 → `business`；本网命令集 → `commands`；速查 → `handbooks`。
-      - **设备事实写 refs，过程经验写 memories**，不要把台账塞进日记。
-
-      ### memories — 随手记
-      任务中一旦出现可复用价值（经验、踩坑、口诀、误判纠正），立刻 `kbWriteMemory`；宁短勿丢。
-      - `note` / `rca_review` / `ai_trace`
-
-      ### drafts / suggestions
-      未闭环案例 → `kbWriteDraft`；总部通用层有误或工具/流程改进 → `kbWriteSuggestion`。
-
-      ## 委派（默认 subagent，活多再拆）
-      你本人逻辑上全能。默认自己干；只有活明显偏多、且可并行时，才用 `subagent`（必要时 `subagent_fork`）拆开干。
-
-      ### 自己干
-      - 单问单答、一条证据链能闭环（如 Critical Top、单机告警、单机能否登录）
-      - 下一步强依赖上一步结果
-      - 用户只要结论，不需要并行深挖
-
-      ### 再拆
-      - 至少两块互不依赖的活（多机并行取证、告警面与链路面可同时查、查证与写纪要可并行）
-      - 串行会明显拖久或撑爆上下文
-      - 每一块都能写成独立目标，互不抢同一结论所有权
-
-      ### 派活提示必须自包含
-      子 agent **看不到**当前对话，提示里写清：
-      - 目标（可验收）
-      - 范围边界（host / 告警类型 / 不要碰什么）
-      - 交付：短 Result / Evidence / Next
-      - 禁止：直接对用户说话、擅自扩大范围
-
-      ### 收口
-      - 等齐结果后由你综合；**只有你**对用户说终稿
-      - 证据冲突时由你裁决或再补一刀，不要让子 agent 在用户面前互辩
-      - 优先前台等结果；确需并行再用后台 + jobs 收齐
-
-- id: agent-instructions
-  name: '@deepseek-ai/dsh-agent-instructions'
-  config:
-    maxBytes: 65536
-
-# ── shell ───────────────────────────────────────────────────────────────────
-
-- id: tool-bash
-  name: '@deepseek-ai/dsh-tool-bash'
-  disabled: !!js process.platform === 'win32'
-
-- id: tool-pwsh
-  name: '@deepseek-ai/dsh-tool-pwsh'
-  disabled: !!js process.platform !== 'win32'
-
-# ── filesystem ──────────────────────────────────────────────────────────────
-
-- id: tool-fs
-  name: '@deepseek-ai/dsh-tool-fs'
-
-- id: tool-fs-search
-  name: '@deepseek-ai/dsh-tool-fs-search'
-  config:
-    sampleOverCapGlobResults: false
-
-# ── background jobs ────────────────────────────────────────────────────────
-
-- id: tool-jobs
-  name: '@deepseek-ai/dsh-tool-jobs'
-
-# ── skills ──────────────────────────────────────────────────────────────────
-
-- id: skill-filesystem
-  name: '@deepseek-ai/dsh-skill-filesystem'
-  config:
-    # Ops / KB playbooks are registered by netxops-tools (capability groups), not customSkillDirs.
-    includeDefaultRoots: true
-    customSkillDirs: []
-
-- id: tool-skill
-  name: '@deepseek-ai/dsh-tool-skill'
-
-# Netx Ops tools (+ capability-gated skills / KB local write tools) in this preset scope.
 - id: netxops-tools
   name: dsh-netxops/tools
-
-# ── goals ───────────────────────────────────────────────────────────────────
-
-- id: command-goal
-  name: '@deepseek-ai/dsh-command-goal'
-
-- id: tool-goal
-  name: '@deepseek-ai/dsh-tool-goal'
-
-# ── plan mode ───────────────────────────────────────────────────────────────
-
-- id: planning
-  name: cordis:group
-  group: true
-  isolate:
-    planMode: true
-  config:
-    - id: plan-mode
-      name: '@deepseek-ai/dsh-plan-mode'
-      config:
-        section: |
-              You are in plan mode. Stay in plan mode until exit_plan_mode succeeds or the user switches the session mode. Imperative language to implement changes means plan the implementation, not execute it. A user's conversational agreement — including an answer confirming something you asked — approves nothing and does not end plan mode; fold the confirmed decision into the plan and submit it through exit_plan_mode.
-
-              Explore first. Use non-mutating reads, searches, static analysis, and checks to ground the plan in the actual repository. Do not edit or write files, change configuration, run formatters or code generation that rewrites tracked files, commit, or otherwise carry out the plan. Prefer existing functions and patterns over new machinery.
-
-              The tool catalog stays the same across modes for request-cache stability. These plan-mode rules override any later tool description or guidance that suggests using mutation tools; those tools remain listed to keep the tool catalog unchanged. Do not use todo_write to track this planning phase: it tracks implementation after an approved plan, while the plan itself belongs in exit_plan_mode.
-
-              Resolve discoverable facts by inspection. Use ask_user_question only for user-owned choices or material ambiguity that inspection cannot answer. Do not ask the user where code lives or how current behavior works when you can find out.
-
-              Make the plan decision-complete: state the goal and success criteria; group implementation changes by subsystem; identify public API, schema, and data-flow changes; cover edge cases, failure modes, tests, acceptance criteria, and explicit assumptions. Keep it concise enough to review but detailed enough that another engineer can implement it without making design decisions.
-
-              When ready, call exit_plan_mode with the complete plan markdown, starting with a # title. Make exit_plan_mode the only and final tool call in that assistant response: it presents the plan for approval, and implementation begins only in a later step after approval. Do not paste the final plan as a plain reply or ask "should I proceed?" through prose or ask_user_question. If review rejects it, incorporate the feedback and present again. If the review channel is unavailable or aborted, stay in plan mode and ask the user to switch modes manually; do not proceed with implementation.
-
-# ── compaction ──────────────────────────────────────────────────────────────
-
-- id: compaction
-  name: cordis:group
-  group: true
-  isolate:
-    compaction: true
-    toolResultPruner: true
-  config:
-    - id: compaction-basic
-      name: '@deepseek-ai/dsh-compaction-basic'
-
-    - id: command-compact
-      name: '@deepseek-ai/dsh-command-compact'
-
-    - id: tool-result-pruner
-      name: '@deepseek-ai/dsh-compaction-tool-result-pruner'
-      config:
-        thresholdChars: 8192
-        headChars: 4096
-        tailChars: 1024
-
-# ── delegation and workflows ────────────────────────────────────────────────
-
-- id: delegation
-  name: cordis:group
-  group: true
-  isolate:
-    workflowEngine: true
-  config:
-    - id: tool-subagent-control
-      name: '@deepseek-ai/dsh-tool-subagent-control'
-
-    - id: tool-subagent-list-agents
-      name: '@deepseek-ai/dsh-tool-subagent-control/list-agents'
-
-    - id: tool-subagent
-      name: '@deepseek-ai/dsh-tool-subagent'
-      config:
-        provider: spawn
-        toolName: subagent
-        modelSelectionSettings: true
-        backgroundMode: continuable
-
-    - id: tool-subagent-fork
-      name: '@deepseek-ai/dsh-tool-subagent'
-      config:
-        provider: fork
-        toolName: subagent_fork
-        backgroundMode: continuable
-
-    - id: tool-subagent-codex
-      name: '@deepseek-ai/dsh-tool-subagent'
-      disabled: true
-      config:
-        provider: codex
-        toolName: subagent_codex
-        backgroundMode: one-shot
-        maxDepth: provider-managed
-
-    - id: tool-subagent-claude-code
-      name: '@deepseek-ai/dsh-tool-subagent'
-      disabled: true
-      config:
-        provider: claude-code
-        toolName: subagent_claude_code
-        backgroundMode: one-shot
-        maxDepth: provider-managed
-
-    - id: workflow-worker-thread
-      name: '@deepseek-ai/dsh-workflow-worker-thread'
-      config:
-        provider: spawn
-
-    - id: tool-workflow
-      name: '@deepseek-ai/dsh-tool-workflow'
-
-    - id: tool-ralph
-      name: '@deepseek-ai/dsh-tool-ralph'
-      config:
-        subagentProvider: spawn
-        maxRounds: 64
-
-# ── remaining model-facing rows ─────────────────────────────────────────────
-
-- id: tool-ask-user
-  name: '@deepseek-ai/dsh-tool-ask-user'
-
-- id: tool-todo
-  name: '@deepseek-ai/dsh-tool-todo'
-  config:
-    allowParallelInProgress: true
-
-- id: tool-web
-  name: '@deepseek-ai/dsh-tool-web'
-  config:
-    fetch: true
-    searchTimeoutMs: 60000
-
-- id: present
-  name: '@deepseek-ai/dsh-tool-present'
-
-# Host package dsh-netxops: on DSH ≤0.1.5 copies this tree to $DSH_HOME/.agent-presets/netxops;
-# on ≥0.2.0 the same composition is shipped as presets/netxops.preset.patch.yml
-# (`@deepseek-ai/dsh-agent-preset` declaration). Regenerate the patch after edits:
-#   bun run gen:preset-patch
diff --git a/scripts/gen-preset-patch.mjs b/scripts/gen-preset-patch.mjs
index ef47a2b..d4177c5 100644
--- a/scripts/gen-preset-patch.mjs
+++ b/scripts/gen-preset-patch.mjs
@@ -1,60 +1,32 @@
 /**
- * Regenerate `presets/netxops.preset.patch.yml` from
- * `presets/netxops/{preset.yml,agent.cordis.yml}` so the declarative
- * `@deepseek-ai/dsh-agent-preset` row stays in sync with the directory
- * composition used on DSH ≤0.1.5.
+ * Legacy entrypoint kept for `bun run gen:preset-patch`.
  *
- * Also writes `cordis.bundle.patch.yml` = host cordis + preset patch.
- * DSH CLI `dsh.bundle.patch` is a single string path (not string[]); keep
- * sources split for editing but ship one concatenated entry for boot.
+ * Declarative `@deepseek-ai/dsh-agent-preset` patches were removed: Netx Ops
+ * now composes `$DSH_HOME/.agent-presets/netxops` from the host `standard`
+ * preset at apply time (see src/agent-preset-install.ts).
+ *
+ * Regenerates `cordis.bundle.patch.yml` as a copy of `cordis.patch.yml` so
+ * `dsh.bundle.patch` stays a single string path for CLI compatibility.
  */
 
-import { readFileSync, writeFileSync } from 'node:fs'
+import { readFileSync, writeFileSync, unlinkSync, existsSync } from 'node:fs'
 import { dirname, join } from 'node:path'
 import { fileURLToPath } from 'node:url'
 
 const root = join(dirname(fileURLToPath(import.meta.url)), '..')
-const cordis = readFileSync(join(root, 'presets/netxops/agent.cordis.yml'), 'utf8')
-const metaText = readFileSync(join(root, 'presets/netxops/preset.yml'), 'utf8')
+const host = join(root, 'cordis.patch.yml')
+const bundle = join(root, 'cordis.bundle.patch.yml')
+const legacyDeclarative = join(root, 'presets', 'netxops.preset.patch.yml')
 
-const name = (metaText.match(/^name:\s*(.+)$/m) || [])[1]?.trim() || 'Netx Ops'
-const description = (metaText.match(/^description:\s*(.+)$/m) || [])[1]?.trim() || ''
-const order = (metaText.match(/^order:\s*(\d+)/m) || [])[1] || '50'
+const text = readFileSync(host, 'utf8')
+const out = `# Alias of cordis.patch.yml for dsh.bundle.patch (single string).
+# Agent preset is composed from host \`standard\` at install — see
+# src/agent-preset-install.ts (no @deepseek-ai/dsh-agent-preset row).
 
-const pluginsBody = cordis
-  .split(/\r?\n/)
-  .map((line) => `        ${line}`)
-  .join('\n')
-
-const out = `# Declarative Netx Ops agent preset for DSH ≥0.2.0-rc.1.
-# Directory copy under ~/.dsh/.agent-presets is ignored on these hosts —
-# keep presets/netxops/agent.cordis.yml in sync with config.plugins below
-# (regenerate: bun run scripts/gen-preset-patch.mjs).
-
-- insert:
-    - id: preset-netxops
-      name: '@deepseek-ai/dsh-agent-preset'
-      config:
-        id: netxops
-        order: ${order}
-        name: ${JSON.stringify(name)}
-        description: ${JSON.stringify(description)}
-        plugins:
-${pluginsBody}
-`
-
-const dest = join(root, 'presets/netxops.preset.patch.yml')
-writeFileSync(dest, out)
-console.log(`wrote ${dest} (${out.length} bytes)`)
-
-const hostPatch = readFileSync(join(root, 'cordis.patch.yml'), 'utf8').trimEnd()
-const bundle = `# Combined host + declarative preset for dsh.bundle.patch (single string).
-# Sources: cordis.patch.yml + presets/netxops.preset.patch.yml
-# Regenerate: bun run scripts/gen-preset-patch.mjs
-
-${hostPatch}
-
-${out.trimStart()}`
-const bundleDest = join(root, 'cordis.bundle.patch.yml')
-writeFileSync(bundleDest, bundle)
-console.log(`wrote ${bundleDest} (${bundle.length} bytes)`)
+${text.trimStart()}`
+writeFileSync(bundle, out)
+if (existsSync(legacyDeclarative)) {
+  unlinkSync(legacyDeclarative)
+  console.log(`removed obsolete ${legacyDeclarative}`)
+}
+console.log(`wrote ${bundle} (${out.length} bytes) — host-only; no declarative preset patch`)
diff --git a/src/agent-preset-install.ts b/src/agent-preset-install.ts
new file mode 100644
index 0000000..3628375
--- /dev/null
+++ b/src/agent-preset-install.ts
@@ -0,0 +1,178 @@
+/**
+ * Install Netx Ops as a user agent-preset by composing from the host's shipped
+ * `standard` preset + Netx Ops overlays (persona / tools / skills).
+ *
+ * DSH has no preset inheritance (`extends`). Copying `standard` at install time
+ * is the supported way to stay aligned with the running Harness version without
+ * embedding a full standard composition (or `@deepseek-ai/dsh-agent-preset`)
+ * inside this package.
+ */
+
+import {
+  cpSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs'
+import { createRequire } from 'node:module'
+import { homedir } from 'node:os'
+import { dirname, join } from 'node:path'
+import { fileURLToPath } from 'node:url'
+import type { Context } from '@deepseek-ai/cordis'
+
+export const NETXOPS_PRESET_ID = 'netxops'
+
+function packageRoot(): string {
+  return join(dirname(fileURLToPath(import.meta.url)), '..')
+}
+
+function resolveDshHome(): string {
+  const fromEnv = process.env.DSH_HOME?.trim()
+  if (fromEnv !== undefined && fromEnv.length > 0) return fromEnv
+  return join(homedir(), '.dsh')
+}
+
+/** Locate the shipped `standard` preset directory on this machine. */
+export function resolveStandardPresetDir(): string | null {
+  const dshHome = resolveDshHome()
+  const candidates = [
+    join(dshHome, 'profiles', 'node_modules', '@deepseek-ai', 'dsh-agent-presets', 'presets', 'standard'),
+    join(dshHome, 'profiles', 'web', 'node_modules', '@deepseek-ai', 'dsh-agent-presets', 'presets', 'standard'),
+    join(dshHome, 'profiles', 'desktop', 'node_modules', '@deepseek-ai', 'dsh-agent-presets', 'presets', 'standard'),
+  ]
+  for (const dir of candidates) {
+    if (existsSync(join(dir, 'agent.cordis.yml'))) return dir
+  }
+  for (const nm of [
+    join(dshHome, 'profiles', 'node_modules'),
+    join(dshHome, 'profiles', 'web', 'node_modules'),
+    join(dshHome, 'profiles', 'desktop', 'node_modules'),
+  ]) {
+    const pkgJson = join(nm, '@deepseek-ai', 'dsh-agent-presets', 'package.json')
+    if (!existsSync(pkgJson)) continue
+    try {
+      const req = createRequire(pkgJson)
+      const root = dirname(req.resolve('@deepseek-ai/dsh-agent-presets/package.json'))
+      const dir = join(root, 'presets', 'standard')
+      if (existsSync(join(dir, 'agent.cordis.yml'))) return dir
+    } catch {
+      // try next
+    }
+  }
+  try {
+    const req = createRequire(import.meta.url)
+    const root = dirname(req.resolve('@deepseek-ai/dsh-agent-presets/package.json'))
+    const dir = join(root, 'presets', 'standard')
+    if (existsSync(join(dir, 'agent.cordis.yml'))) return dir
+  } catch {
+    // not resolvable from this package
+  }
+  return null
+}
+
+function replaceTopLevelEntry(cordis: string, id: string, replacement: string): string {
+  const lines = cordis.replace(/\r\n/g, '\n').split('\n')
+  const start = lines.findIndex((line) => line === `- id: ${id}`)
+  const block = replacement.replace(/\r\n/g, '\n').trimEnd().split('\n')
+  if (start < 0) {
+    return `${cordis.replace(/\r\n/g, '\n').trimEnd()}\n\n${block.join('\n')}\n`
+  }
+  let end = start + 1
+  while (end < lines.length && !lines[end]!.startsWith('- id:')) end += 1
+  while (end > start + 1 && lines[end - 1]!.trim() === '') end -= 1
+  return [...lines.slice(0, start), ...block, '', ...lines.slice(end)].join('\n').replace(/\n{3,}/g, '\n\n')
+}
+
+function ensureNetxopsToolsRow(cordis: string): string {
+  if (/^- id: netxops-tools$/m.test(cordis)) return cordis
+  const row = '- id: netxops-tools\n  name: dsh-netxops/tools'
+  if (/^- id: tool-skill$/m.test(cordis)) {
+    // Insert immediately after the tool-skill entry.
+    const lines = cordis.replace(/\r\n/g, '\n').split('\n')
+    const start = lines.findIndex((line) => line === '- id: tool-skill')
+    let end = start + 1
+    while (end < lines.length && !lines[end]!.startsWith('- id:')) end += 1
+    while (end > start + 1 && lines[end - 1]!.trim() === '') end -= 1
+    return [...lines.slice(0, end), '', ...row.split('\n'), '', ...lines.slice(end)].join('\n').replace(/\n{3,}/g, '\n\n')
+  }
+  return `${cordis.replace(/\r\n/g, '\n').trimEnd()}\n\n${row}\n`
+}
+
+function personaEntryFromMarkdown(md: string): string {
+  // Drop the human-facing H1 (`# Netx Ops 人设…`); the cordis prefix starts at the body.
+  const body = md.replace(/\r\n/g, '\n').replace(/^#[^\n]*\n+/u, '').replace(/\n+$/u, '')
+  const indented = body.split('\n').map((line) => `      ${line}`).join('\n')
+  return [
+    '- id: persona',
+    "  name: '@deepseek-ai/dsh-persona'",
+    '  config:',
+    '    suffix: Your working directory is {{cwd}}.',
+    '    # Body from presets/netxops/PERSONA.md (composed onto standard at install).',
+    '    prefix: |-',
+    indented,
+  ].join('\n')
+}
+
+/**
+ * Build `~/.dsh/.agent-presets/netxops` from the host `standard` preset plus
+ * Netx Ops persona / tools / skills. Safe to call on every Host apply.
+ */
+export function ensureAgentPresetInstalled(logger: Context['logger']): void {
+  const overlayRoot = join(packageRoot(), 'presets', NETXOPS_PRESET_ID)
+  const personaPath = join(overlayRoot, 'PERSONA.md')
+  const metaPath = join(overlayRoot, 'preset.yml')
+  if (!existsSync(personaPath) || !existsSync(metaPath)) {
+    logger.warn('netxops: bundled preset overlay missing under %s — skip install', overlayRoot)
+    return
+  }
+
+  const standardDir = resolveStandardPresetDir()
+  if (standardDir === null) {
+    logger.warn(
+      'netxops: cannot find shipped standard preset (@deepseek-ai/dsh-agent-presets) — skip user-preset install',
+    )
+    return
+  }
+
+  const destParent = join(resolveDshHome(), '.agent-presets')
+  const dest = join(destParent, NETXOPS_PRESET_ID)
+  try {
+    mkdirSync(destParent, { recursive: true })
+    if (existsSync(dest)) rmSync(dest, { recursive: true, force: true })
+    // Real copy: DSH discovery skips Windows junctions.
+    cpSync(standardDir, dest, { recursive: true })
+
+    writeFileSync(join(dest, 'preset.yml'), readFileSync(metaPath, 'utf8'))
+    writeFileSync(join(dest, 'PERSONA.md'), readFileSync(personaPath, 'utf8'))
+
+    const standardCordis = readFileSync(join(standardDir, 'agent.cordis.yml'), 'utf8')
+    let composed = replaceTopLevelEntry(
+      standardCordis,
+      'persona',
+      personaEntryFromMarkdown(readFileSync(personaPath, 'utf8')),
+    )
+    composed = ensureNetxopsToolsRow(composed)
+    writeFileSync(join(dest, 'agent.cordis.yml'), composed.endsWith('\n') ? composed : `${composed}\n`, 'utf8')
+
+    const skillsSrc = join(overlayRoot, 'skills')
+    if (existsSync(skillsSrc)) {
+      cpSync(skillsSrc, join(dest, 'skills'), { recursive: true })
+    }
+
+    writeFileSync(
+      join(dest, '.dsh-netxops-managed'),
+      [
+        `composed-from: standard`,
+        `standard-source: ${standardDir}`,
+        `at: ${new Date().toISOString()}`,
+        '',
+      ].join('\n'),
+      'utf8',
+    )
+    logger.info('netxops: agent preset composed from standard → %s', dest)
+  } catch (error) {
+    logger.error('netxops: failed to install agent preset: %s', error)
+  }
+}
diff --git a/src/index.ts b/src/index.ts
index 32bad68..d3e206d 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -19,16 +19,17 @@
  * @module dsh-netxops
  */
 
-import { cpSync, existsSync, mkdirSync, rmSync, writeFileSync } from 'node:fs'
-import { homedir } from 'node:os'
-import { dirname, join } from 'node:path'
-import { fileURLToPath } from 'node:url'
 import type { Context } from '@deepseek-ai/cordis'
 import z from '@deepseek-ai/schemastery'
 import { credentialRef } from '@deepseek-ai/dsh-credentials'
 import type {} from '@deepseek-ai/dsh-credentials'
 import * as DshSettings from '@deepseek-ai/dsh-settings'
 import type {} from '@deepseek-ai/dsh-settings'
+export {
+  ensureAgentPresetInstalled,
+  NETXOPS_PRESET_ID,
+} from './agent-preset-install.ts'
+import { ensureAgentPresetInstalled } from './agent-preset-install.ts'
 import { startAlarmPushClient } from './netx/alarm-push.ts'
 import {
   getAlarmPushStatus,
@@ -87,9 +88,6 @@ export const NETXOPS_RPC_CHANNEL = '/netxops'
 /** Settings / composition namespace (Plugins page join key). */
 export const NETXOPS_SETTINGS_NAMESPACE = 'netxops'
 
-/** Agent preset id under `$DSH_HOME/.agent-presets/`. */
-export const NETXOPS_PRESET_ID = 'netxops'
-
 /** Default credential reference for the netx API bearer token. */
 export const DEFAULT_TOKEN_REF = 'NETX_API_TOKEN'
 
@@ -114,11 +112,9 @@ export interface Config {
   /** Per tool-call timeout (ms). */
   toolCallTimeoutMs: number
   /**
-   * On DSH ≤0.1.5: copy bundled preset into `$DSH_HOME/.agent-presets/netxops`
-   * (directory discovery). On DSH ≥0.2.0 that directory is dead — the
-   * declarative `@deepseek-ai/dsh-agent-preset` row in
-   * `presets/netxops.preset.patch.yml` is what the picker reads; the copy
-   * remains as a no-op fallback for older hosts.
+   * Compose `$DSH_HOME/.agent-presets/netxops` from the host shipped
+   * `standard` preset + Netx Ops persona/tools/skills (DSH has no preset
+   * inheritance). Disable only if you manage that directory yourself.
    */
   installAgentPreset: boolean
   /**
@@ -207,48 +203,6 @@ export const Config: z<Config> = z.object({
   groupKbPublic: vol(z.boolean().default(false)),
 })
 
-/** Package root (parent of `lib/` or `src/` depending on launch). */
-function packageRoot(): string {
-  return join(dirname(fileURLToPath(import.meta.url)), '..')
-}
-
-/** Harness home used by agent-presets' user root. */
-function resolveDshHome(): string {
-  const fromEnv = process.env.DSH_HOME?.trim()
-  if (fromEnv !== undefined && fromEnv.length > 0) return fromEnv
-  return join(homedir(), '.dsh')
-}
-
-/**
- * Install the bundled Netx Ops preset as a real directory under the user
- * preset root (DSH ≤0.1.5 discovery). DSH ≥0.2.0 ignores this tree — use the
- * declarative patch row instead. DSH discovery skips Windows junctions
- * (`Dirent.isDirectory()` is false for reparse points), so a copy is required
- * — not `mklink /J`.
- * @param logger - cordis logger for non-fatal install failures.
- */
-export function ensureAgentPresetInstalled(logger: Context['logger']): void {
-  const src = join(packageRoot(), 'presets', NETXOPS_PRESET_ID)
-  const composition = join(src, 'agent.cordis.yml')
-  if (!existsSync(composition)) {
-    logger.warn('netxops: bundled preset missing at %s — skip user-preset install', src)
-    return
-  }
-  const destParent = join(resolveDshHome(), '.agent-presets')
-  const dest = join(destParent, NETXOPS_PRESET_ID)
-  try {
-    mkdirSync(destParent, { recursive: true })
-    if (existsSync(dest)) {
-      rmSync(dest, { recursive: true, force: true })
-    }
-    cpSync(src, dest, { recursive: true })
-    writeFileSync(join(dest, '.dsh-netxops-managed'), `${new Date().toISOString()}\n`, 'utf8')
-    logger.info('netxops: agent preset installed at %s', dest)
-  } catch (error) {
-    logger.error('netxops: failed to install agent preset: %s', error)
-  }
-}
-
 /**
  * Resolve bearer token from the credentials seam (or empty when unset).
  * Requires `inject: ['credentials']` so the store is live before apply.