@deepseek-ai/dsh-subagent-codex 0.1.3-alpha.2 → 0.1.5-alpha.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (6) hide show
  1. package/README.i18n.yaml +2 -2
  2. package/README.md +3 -3
  3. package/README.zh.md +3 -3
  4. package/lib/index.js +1 -1
  5. package/lib/types/wire.d.ts +1 -1
  6. package/package.json +25 -25
package/README.i18n.yaml CHANGED
@@ -2,5 +2,5 @@
2
2
  # side as of the last confirmed-consistent state. Both languages carry equal authority;
3
3
  # after editing either side, bring the other along and re-record with:
4
4
  # pnpm run verify-translation-pairing --write packages/subagent/subagent-codex/README.md
5
- README.md: 5563dd420aa0fc7cae625d62bc4009625357b646
6
- README.zh.md: 65231ccab2a25f89ce8a9cf94875a19bfe3da1ec
5
+ README.md: 3f90c9430c296d1233f1d2973e51ed3517e61dc1
6
+ README.zh.md: 7e5f854af342319233a20b5847f4590dcf66c1f0
package/README.md CHANGED
@@ -9,7 +9,7 @@ English | [中文](README.zh.md)
9
9
 
10
10
  ## Summary
11
11
 
12
- `dsh-subagent-codex` registers a Profile-named Codex subagent provider (default `codex`) that runs a real Codex child through the official app-server protocol in the delegating session's workspace. Each accepted run starts the package-local Codex wrapper with `app-server --stdio`, creates one ephemeral Codex thread, submits one self-contained text task, and returns the selected final answer — or a separate safe failure diagnostic — through the shared subagent result contract. The provider ships as an optional Profile Bundle: installing it brings the official wrapper and one compatible native platform payload, while the registered provider stays dormant until a bound tool calls it. Native Codex configuration and authentication remain authoritative, and the Profile-selected `permissionMode` maps into the thread's approval, reviewer, and sandbox fields. Choose it when the child should be a genuine Codex session, fully isolated from the parent harness.
12
+ Install `@deepseek-ai/dsh-subagent-codex` into a Profile when delegated work should run in a genuine, unattended Codex session in the parent Session's workspace. Each delegation uses a fresh isolated Codex thread for one self-contained text task and returns only its final answer or a safe failure diagnostic. Native Codex configuration and authentication remain authoritative, while `permissionMode` selects the non-interactive approval and sandbox behavior. The Bundle supplies a compatible native Codex payload, but it exposes no model capability until a delegation tool is configured.
13
13
 
14
14
  ## Table of Contents
15
15
 
@@ -173,7 +173,7 @@ These limits define when this provider is a poor fit or needs special operationa
173
173
  - **Static instance selection** — Profile rows fix provider names, optional models, and tool bindings; calls cannot choose or change either a provider or model dynamically, and every exposed tool needs a unique `toolName`.
174
174
  - **Authentication and account state remain native** — the Bundle supplies the CLI but does not create an account, log in, trust a project, or rewrite Codex settings; configuration and authentication failures surface with their lifecycle stage and the safe `unknown` fallback rather than a separate public taxonomy.
175
175
  - **The native platform payload is required at delegation time** — installs that omit optional dependencies, unsupported platforms, and missing or damaged payloads fail at the first run; there is no host-CLI fallback.
176
- - **Compatibility is pinned by development evidence** — upgrading from the verified 0.149.1 protocol baseline requires regenerating upstream schema evidence and rerunning handshake, answer-selection, approval, cancellation, keyless real-product, and credentialed DeepSeek nonce tests.
176
+ - **Compatibility is pinned by development evidence** — upgrading from the verified 0.153.4 protocol baseline requires regenerating upstream schema evidence and rerunning handshake, answer-selection, approval, cancellation, keyless real-product, and credentialed DeepSeek nonce tests.
177
177
  - **No human approval path** — known unattended approval requests are denied and unknown server requests fail closed; the three Profile modes never create a DSH interaction channel or per-call allow policy.
178
178
  - **Assistant payload is final text only** — a failed run may additionally expose the separate safe diagnostic; reasoning, commentary, intermediate messages, tool traffic, usage, raw stderr, and workspace diffs remain outside the parent Session, while generic Job ids, notices, and status come from the shared job runtime.
179
179
  - **No optional shared capabilities** — `agentOptions`, output schemas, child personas, tool filtering, and harness depth enforcement are rejected by the shared service for this provider.
@@ -188,7 +188,7 @@ These limits define when this provider is a poor fit or needs special operationa
188
188
  This Dev Note is working context for maintainers: open questions and undecided directions. It is explicitly non-authoritative — shipped behavior and limits live in the sections above and in the package code.
189
189
 
190
190
  - **Payload size disclosure** — the current darwin-arm64 platform payload packs to about 114 MB and unpacks to about 282 MB; these are disclosure numbers, not installation thresholds.
191
- - **Version-pinned protocol** — the runtime dependency is pinned to `@openai/codex@0.149.1`; upgrading requires regenerating the upstream schema evidence and rerunning the credentialed nonce tests.
191
+ - **Version-pinned protocol** — the runtime dependency is pinned to `@openai/codex@0.153.4`; upgrading requires regenerating the upstream schema evidence and rerunning the credentialed nonce tests.
192
192
 
193
193
  </details>
194
194
 
package/README.zh.md CHANGED
@@ -9,7 +9,7 @@ kind: "package-bundle"
9
9
 
10
10
  ## 概述
11
11
 
12
- `dsh-subagent-codex` 注册由 Profile 命名、默认名称为 `codex` 的 Codex subagent 提供方，它在发起委派的会话工作区中通过官方 app-server 协议运行真实的 Codex 子 agent（智能体）。每次接受的运行以 `app-server --stdio` 启动包内 Codex wrapper，创建一个临时 Codex 线程，提交一个自包含文本任务，并通过共享的 subagent 结果约定返回选定的最终答案——或独立的安全失败诊断。该提供方作为可选的 Profile Bundle 发布：安装会带入官方 wrapper 与一个兼容的原生平台载荷，而注册的提供方在绑定工具调用前保持休眠。原生 Codex 配置与身份验证继续是权威来源，Profile 选择的 `permissionMode` 会映射进线程的 approval、reviewer 与 sandbox 字段。当子 agent 应该是与父 harness 完全隔离的真实 Codex 会话时，选择它。
12
+ 当委派工作需要在父会话工作区中的真实无人值守 Codex 会话内运行时，把 `@deepseek-ai/dsh-subagent-codex` 安装进 Profile。每次委派都会为一个自包含文本任务使用全新且隔离的 Codex 线程，并且只返回其最终答案或安全失败诊断。原生 Codex 配置和身份验证继续作为权威来源，而 `permissionMode` 选择非交互式审批和沙箱行为。Bundle 会提供兼容的原生 Codex 载荷，但只有配置委派工具后才会向模型提供能力。
13
13
 
14
14
  ## 目录
15
15
 
@@ -173,7 +173,7 @@ Codex 子级会在一个全新的临时线程中，以单个轮次接收这些
173
173
  - **静态选择实例**——Profile 配置项固定提供方名称、可选模型与工具绑定；调用无法动态选择或修改提供方与模型，而且每个公开工具都需要唯一的 `toolName`。
174
174
  - **身份验证与账户状态仍由原生机制管理**——Bundle 会提供 CLI，但不会创建账户、登录、信任项目或改写 Codex 设置；配置与身份验证失败会公开其生命周期阶段与安全的 `unknown` 回退，而不会增加单独的公开分类体系。
175
175
  - **委派时必须存在原生平台载荷**——省略 optional dependencies 的安装、不受支持的平台以及缺失或损坏的载荷都会在第一次运行时失败；不会回退到宿主 CLI。
176
- - **兼容性由开发证据锁定**——若要从已验证的 0.149.1 协议基线升级，必须重新生成上游 schema 证据，并重新运行握手、答案选择、审批、取消、无密钥真实产品以及带密钥的 DeepSeek 随机数测试。
176
+ - **兼容性由开发证据锁定**——若要从已验证的 0.153.4 协议基线升级，必须重新生成上游 schema 证据，并重新运行握手、答案选择、审批、取消、无密钥真实产品以及带密钥的 DeepSeek 随机数测试。
177
177
  - **没有人工审批路径**——已知的无人值守审批请求会被拒绝，未知服务器请求会以默认拒绝方式使运行失败；三种 Profile 模式都不会创建 DSH 交互通道或逐次调用 allow 策略。
178
178
  - **assistant 载荷仅包含最终文本**——失败运行可以额外公开独立的安全诊断；推理、过程说明、中间消息、工具通信、用量信息、原始 stderr 和工作区差异不会进入父会话，通用 Job id、通知与状态来自共享作业运行时。
179
179
  - **没有可选的共享能力**——对于本提供方，共享服务会拒绝 `agentOptions`、输出 schema、子任务角色设定、工具筛选和 harness 深度强制约束。
@@ -188,7 +188,7 @@ Codex 子级会在一个全新的临时线程中，以单个轮次接收这些
188
188
  本开发备注是维护者的工作上下文：开放问题与尚未决定的探索方向。它明确不具权威性——已交付的行为与限制以上文和包代码为准。
189
189
 
190
190
  - **载荷体积披露**——当前 darwin-arm64 平台载荷压缩后约 114 MB、解包后约 282 MB；这些是披露数字，不是安装阈值。
191
- - **版本锁定的协议**——运行时依赖锁定为 `@openai/codex@0.149.1`；升级需要重新生成上游 schema 证据并重新运行带凭证的随机数测试。
191
+ - **版本锁定的协议**——运行时依赖锁定为 `@openai/codex@0.153.4`；升级需要重新生成上游 schema 证据并重新运行带凭证的随机数测试。
192
192
 
193
193
  </details>
194
194
 
package/lib/index.js CHANGED
@@ -9,7 +9,7 @@ import { brandString } from "@deepseek-ai/dsh-brand";
9
9
  import { JsonRpcLineTransport } from "@deepseek-ai/dsh-sdk-protocol";
10
10
  //#region lib/types/wire.js
11
11
  /**
12
- * Minimal Codex app-server 0.149.1 protocol adapter. The shared JSON-RPC
12
+ * Minimal Codex app-server 0.153.4 protocol adapter. The shared JSON-RPC
13
13
  * transport owns framing and request correlation; this module owns only the
14
14
  * product methods, current thread/turn association, unattended approval
15
15
  * responses, and terminal-answer selection.
package/lib/types/wire.d.ts CHANGED
@@ -1,5 +1,5 @@
1
1
  /**
2
- * Minimal Codex app-server 0.149.1 protocol adapter. The shared JSON-RPC
2
+ * Minimal Codex app-server 0.153.4 protocol adapter. The shared JSON-RPC
3
3
  * transport owns framing and request correlation; this module owns only the
4
4
  * product methods, current thread/turn association, unattended approval
5
5
  * responses, and terminal-answer selection.
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "@deepseek-ai/dsh-subagent-codex",
3
3
  "description": "One-shot Codex subagent provider over the official app-server protocol",
4
- "version": "0.1.3-alpha.2",
4
+ "version": "0.1.5-alpha.2",
5
5
  "publishConfig": {
6
6
  "access": "public"
7
7
  },
@@ -34,35 +34,35 @@
34
34
  },
35
35
  "peerDependencies": {
36
36
  "@deepseek-ai/cordis": "^4.0.2",
37
- "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
38
- "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
39
- "@deepseek-ai/dsh-subagent": "^0.1.3-alpha.2",
40
- "@deepseek-ai/dsh-subprocess": "^0.1.3-alpha.2",
41
- "@deepseek-ai/dsh-timeout": "^0.1.3-alpha.2"
37
+ "@deepseek-ai/dsh-llm": "^0.1.5-alpha.2",
38
+ "@deepseek-ai/dsh-session": "^0.1.5-alpha.2",
39
+ "@deepseek-ai/dsh-subagent": "^0.1.5-alpha.2",
40
+ "@deepseek-ai/dsh-timeout": "^0.1.5-alpha.2",
41
+ "@deepseek-ai/dsh-subprocess": "^0.1.5-alpha.2"
42
42
  },
43
43
  "dependencies": {
44
- "@openai/codex": "0.149.1",
45
- "@deepseek-ai/dsh-sdk-protocol": "^0.1.3-alpha.2",
46
- "@deepseek-ai/schemastery": "^3.18.2",
47
- "@deepseek-ai/dsh-brand": "^0.1.3-alpha.2"
44
+ "@openai/codex": "0.153.4",
45
+ "@deepseek-ai/dsh-brand": "^0.1.5-alpha.2",
46
+ "@deepseek-ai/dsh-sdk-protocol": "^0.1.5-alpha.2",
47
+ "@deepseek-ai/schemastery": "^3.18.2"
48
48
  },
49
49
  "devDependencies": {
50
50
  "@deepseek-ai/cordis": "^4.0.2",
51
- "@deepseek-ai/dsh-agent": "^0.1.3-alpha.2",
52
51
  "@deepseek-ai/cordis-plugin-loader": "^1.0.3",
53
- "@deepseek-ai/dsh-app-boot": "^0.1.3-alpha.2",
54
- "@deepseek-ai/dsh-llm": "^0.1.3-alpha.2",
55
- "@deepseek-ai/dsh-loader-smoke": "^0.1.3-alpha.2",
56
- "@deepseek-ai/dsh-session": "^0.1.3-alpha.2",
57
- "@deepseek-ai/dsh-session-checkpoint-policy": "^0.1.3-alpha.2",
58
- "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.3-alpha.2",
59
- "@deepseek-ai/dsh-session-projection": "^0.1.3-alpha.2",
60
- "@deepseek-ai/dsh-subagent": "^0.1.3-alpha.2",
61
- "@deepseek-ai/dsh-subprocess": "^0.1.3-alpha.2",
62
- "@deepseek-ai/dsh-subprocess-local": "^0.1.3-alpha.2",
63
- "@deepseek-ai/dsh-timeout": "^0.1.3-alpha.2",
64
- "@deepseek-ai/dsh-tool-subagent": "^0.1.3-alpha.2",
65
- "@deepseek-ai/dsh-tools": "^0.1.3-alpha.2",
66
- "@deepseek-ai/dsh-tool-jobs": "^0.1.3-alpha.2"
52
+ "@deepseek-ai/dsh-agent": "^0.1.5-alpha.2",
53
+ "@deepseek-ai/dsh-loader-smoke": "^0.1.5-alpha.2",
54
+ "@deepseek-ai/dsh-llm": "^0.1.5-alpha.2",
55
+ "@deepseek-ai/dsh-session": "^0.1.5-alpha.2",
56
+ "@deepseek-ai/dsh-session-checkpoint-policy": "^0.1.5-alpha.2",
57
+ "@deepseek-ai/dsh-session-projection": "^0.1.5-alpha.2",
58
+ "@deepseek-ai/dsh-session-persistence-jsonl": "^0.1.5-alpha.2",
59
+ "@deepseek-ai/dsh-subagent": "^0.1.5-alpha.2",
60
+ "@deepseek-ai/dsh-subprocess": "^0.1.5-alpha.2",
61
+ "@deepseek-ai/dsh-subprocess-local": "^0.1.5-alpha.2",
62
+ "@deepseek-ai/dsh-timeout": "^0.1.5-alpha.2",
63
+ "@deepseek-ai/dsh-tool-jobs": "^0.1.5-alpha.2",
64
+ "@deepseek-ai/dsh-tool-subagent": "^0.1.5-alpha.2",
65
+ "@deepseek-ai/dsh-tools": "^0.1.5-alpha.2",
66
+ "@deepseek-ai/dsh-app-boot": "^0.1.5-alpha.2"
67
67
  }
68
68
  }