@eddyskywalker/dsh-chatgpt-subscription 0.1.0-alpha.0 → 0.1.0

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.1.0 - 2026-08-16
+
+- 首个正式版本发布。
+- 完善客户端 UI 样式体系与 `@eddyskywalker` 命名空间配置。
+- 增强命令执行工具与无状态安全重试机制。
+
 ## 0.1.0-alpha.0 - 2026-08-14
 
 - 新增 DSH Host/Client 双端插件与一级“Codex 订阅”设置入口。

package/lib/index.js

@@ -637,6 +637,7 @@ async function buildResponsesPayload(options, attachments) {
 		options.system?.trim(),
 		...options.messages.filter((message) => message.role === "system").map((message) => blocksToText(message.content).trim()),
 		sandboxToolInstruction(options.tools, sandboxRetryTools),
+		commandToolInstruction(options.tools),
 		runCodeInstruction(options.tools)
 	].filter((value) => Boolean(value));
 	const input = [];
@@ -713,8 +714,18 @@ function runCodeInstruction(tools) {
 	return "run_code compatibility rule: its code is parsed as strict JavaScript/TypeScript before execution. On Windows, do not embed PowerShell containing $, ${...}, backslashes, or here-strings in JavaScript template literals; String.raw does not disable ${...} interpolation. Prefer arrays of ordinary quoted strings joined with \"\\n\", escaping backslashes, or use a file-write tool for large scripts and then invoke pwsh.";
 }
 function toolDescriptionForCodex(name, description) {
-	if (name !== "run_code") return description;
-	return `${description}\n\nCompatibility: code is strict JavaScript/TypeScript. When composing PowerShell, avoid JavaScript template literals containing $, \${...}, Windows backslashes, or PowerShell here-strings. Prefer ordinary quoted string arrays joined with "\\n", or write a script file with a dedicated file tool before invoking pwsh.`;
+	if (name === "run_code") return `${description}\n\nCompatibility: code is strict JavaScript/TypeScript. When composing PowerShell, avoid JavaScript template literals containing $, \${...}, Windows backslashes, or PowerShell here-strings. Prefer ordinary quoted string arrays joined with "\\n", or write a script file with a dedicated file tool before invoking pwsh.`;
+	if (isCommandTool(name)) return `${description}\n\n${commandToolCompatibilityText(name)}`;
+	return description;
+}
+function commandToolInstruction(tools) {
+	const names = tools?.filter((tool) => isCommandTool(tool.name)).map((tool) => tool.name);
+	if (!names?.length) return void 0;
+	return `Command tool compatibility rule (${[...new Set(names)].join(", ")}): each command call runs in a fresh process, so do not rely on cd, aliases, functions, or variables from previous calls; set workdir when the tool supports it. On Windows/pwsh, keep commands in native PowerShell syntax and native Windows paths. For deletion or move operations, first resolve and verify exact absolute target paths, then operate on those literal paths only; avoid dynamically deleting paths built from $HOME, wildcards, command substitution, or another shell's output. Treat [auto-mode hard deny] and similar policy denials as non-retriable; choose a safer non-destructive inspection or report the limitation instead of repeating the same command or adding sandbox escalation. If downloads fail with TLS credential or connection-closed errors, treat that as an environment/network failure and use local sources or report the limitation instead of cycling through equivalent download commands.`;
+}
+function commandToolCompatibilityText(name) {
+	const shell = name.toLowerCase();
+	return `Compatibility: command execution is stateless between calls.${shell === "pwsh" || shell.includes("powershell") ? " Use native PowerShell syntax and native Windows paths; prefer workdir over cd because every call starts a fresh process." : " Prefer workdir over cd because every call starts a fresh process."} For destructive operations, verify exact absolute targets first and use literal paths; policy hard-deny results require a safer command shape, not sandbox escalation.`;
 }
 function sandboxToolInstruction(tools, sandboxRetryTools) {
 	if (!tools?.some((tool) => hasSandboxControls(tool.parameters))) return void 0;
@@ -723,7 +734,8 @@ function sandboxToolInstruction(tools, sandboxRetryTools) {
 }
 function toolParametersForCodex(toolName, parameters, allowSandboxRetry) {
 	const hideSandboxControls = !allowSandboxRetry && hasSandboxControls(parameters);
-	if (!hideSandboxControls && toolName !== "run_code") return parameters;
+	const augmentCommandTool = isCommandTool(toolName);
+	if (!hideSandboxControls && toolName !== "run_code" && !augmentCommandTool) return parameters;
 	const cloned = structuredClone(parameters);
 	const properties = record$2(cloned.properties);
 	if (properties !== null && hideSandboxControls) {
@@ -739,8 +751,27 @@ function toolParametersForCodex(toolName, parameters, allowSandboxRetry) {
 			code.description = current ? `${current}\n\n${compatibility}` : compatibility;
 		}
 	}
+	if (augmentCommandTool && properties !== null) {
+		appendPropertyDescription(properties.command, "Single command for a fresh process; do not rely on state from earlier calls.");
+		appendPropertyDescription(properties.workdir, "Use a native absolute working directory instead of embedding cd in the command.");
+		appendPropertyDescription(properties.timeoutMs, "Positive finite timeout in milliseconds for bounded commands.");
+		appendPropertyDescription(properties.run_in_background, "Use only for long-running servers or watchers whose output will be checked later.");
+		appendPropertyDescription(properties.sandbox_permissions, "Only set when retrying the exact previous sandbox-denied call; it does not bypass hard-deny policy results.");
+		appendPropertyDescription(properties.justification, "Required only for an allowed sandbox retry; explain why the wider access is needed.");
+	}
 	return cloned;
 }
+function appendPropertyDescription(value, addition) {
+	const property = record$2(value);
+	if (property === null) return;
+	const current = typeof property.description === "string" ? property.description.trim() : "";
+	if (current.includes(addition)) return;
+	property.description = current ? `${current}\n\n${addition}` : addition;
+}
+function isCommandTool(name) {
+	const normalized = name.toLowerCase();
+	return normalized === "pwsh" || normalized === "powershell" || normalized === "bash" || normalized === "shell";
+}
 function hasSandboxControls(parameters) {
 	const properties = record$2(parameters.properties);
 	return properties !== null && ("sandbox_permissions" in properties || "justification" in properties);

package/lib/types/host/responses-mapper.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"responses-mapper.d.ts","sourceRoot":"","sources":["../../../src/host/responses-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,6BAA6B,CAAA;AACtF,OAAO,KAAK,EAAgB,eAAe,EAAW,MAAM,sBAAsB,CAAA;AAElF,MAAM,WAAW,gBAAiB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,EAAE,IAAI,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,CAKnF;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAsF3B"}
+{"version":3,"file":"responses-mapper.d.ts","sourceRoot":"","sources":["../../../src/host/responses-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,6BAA6B,CAAA;AACtF,OAAO,KAAK,EAAgB,eAAe,EAAW,MAAM,sBAAsB,CAAA;AAElF,MAAM,WAAW,gBAAiB,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAC/D,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACrC,MAAM,EAAE,IAAI,CAAA;IACZ,KAAK,EAAE,KAAK,CAAA;CACb;AAED,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC,CAKnF;AAED,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,GAC9C,OAAO,CAAC,gBAAgB,CAAC,CAuF3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eddyskywalker/dsh-chatgpt-subscription",
-  "version": "0.1.0-alpha.0",
+  "version": "0.1.0",
   "description": "DSH provider plugin for Codex access through a ChatGPT subscription.",
   "author": {
     "name": "eddyskywalker",
@@ -26,7 +26,7 @@
   "type": "module",
   "publishConfig": {
     "access": "public",
-    "tag": "next"
+    "tag": "latest"
   },
   "main": "lib/index.js",
   "types": "lib/types/index.d.ts",