@eddyskywalker/dsh-chatgpt-subscription 0.2.14 → 0.2.16

package/lib/index.js

@@ -1,4 +1,5 @@
 import { createRequire } from "node:module";
+import z from "@deepseek-ai/schemastery";
 import * as LlmModule from "@deepseek-ai/dsh-llm";
 import { HarnessError, LlmAdapter, LlmError, ProviderRequestId, ReasoningEffortId, attributionHeaders, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { WebError } from "@deepseek-ai/dsh-web";
@@ -12,7 +13,6 @@ import path, { dirname, join } from "node:path";
 import os, { homedir } from "node:os";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
 import * as SettingsModule from "@deepseek-ai/dsh-settings";
-import z from "@deepseek-ai/schemastery";
 import fsPromises, { chmod, lstat, mkdir, open, rename, stat, unlink } from "node:fs/promises";
 import { isDeepStrictEqual } from "node:util";
 import { URL as URL$1, URLSearchParams as URLSearchParams$1 } from "node:url";
@@ -1361,8 +1361,6 @@ const DEFAULT_PREFERENCES = {
 		"gpt-5.6-terra": 272e3,
 		"gpt-5.6-luna": 272e3
 	},
-	subagentContextWindow: null,
-	subagentMaxDepth: null,
 	proxyMode: "auto",
 	customProxyUrl: null
 };
@@ -1407,8 +1405,6 @@ function registerPreferenceStore(settings) {
 			"gpt-5.6-terra": z.number().step(1).min(1).max(GPT_56_MAX_CONTEXT_WINDOW).default(DEFAULT_PREFERENCES.contextWindowOverrides["gpt-5.6-terra"]),
 			"gpt-5.6-luna": z.number().step(1).min(1).max(GPT_56_MAX_CONTEXT_WINDOW).default(DEFAULT_PREFERENCES.contextWindowOverrides["gpt-5.6-luna"])
 		}).default(DEFAULT_PREFERENCES.contextWindowOverrides),
-		subagentContextWindow: z.union([z.number().step(1).min(1), z.const(null)]).default(DEFAULT_PREFERENCES.subagentContextWindow),
-		subagentMaxDepth: z.union([z.number().step(1).min(0).max(3), z.const(null)]).default(DEFAULT_PREFERENCES.subagentMaxDepth),
 		proxyMode: z.union([
 			z.const("auto"),
 			z.const("custom"),
@@ -1449,8 +1445,6 @@ var SettingsPreferenceStore = class {
 			...this.scope.get().contextWindowOverrides,
 			...patch.contextWindowOverrides
 		};
-		if (patch.subagentContextWindow !== void 0) normalized.subagentContextWindow = patch.subagentContextWindow;
-		if (patch.subagentMaxDepth !== void 0) normalized.subagentMaxDepth = patch.subagentMaxDepth;
 		if (patch.proxyMode !== void 0) {
 			if (!isProxyMode(patch.proxyMode)) throw new PreferenceError("Unsupported proxy mode preference.");
 			normalized.proxyMode = patch.proxyMode;
@@ -3145,14 +3139,6 @@ function readPreferencesUpdate(value, current) {
 		}
 		patch.contextWindowOverrides = overrides;
 	}
-	if ("subagentContextWindow" in value) {
-		if (value.subagentContextWindow !== null && (!Number.isSafeInteger(value.subagentContextWindow) || value.subagentContextWindow < 1)) throw new PreferenceError("subagentContextWindow must be null or a positive integer.");
-		patch.subagentContextWindow = value.subagentContextWindow;
-	}
-	if ("subagentMaxDepth" in value) {
-		if (value.subagentMaxDepth !== null && (!Number.isSafeInteger(value.subagentMaxDepth) || value.subagentMaxDepth < 0 || value.subagentMaxDepth > 3)) throw new PreferenceError(`subagentMaxDepth must be null or an integer from 0 to 3.`);
-		patch.subagentMaxDepth = value.subagentMaxDepth;
-	}
 	if ("proxyMode" in value) {
 		if (value.proxyMode !== "auto" && value.proxyMode !== "custom" && value.proxyMode !== "direct") throw new PreferenceError("proxyMode must be auto, custom, or direct.");
 		patch.proxyMode = value.proxyMode;
@@ -4926,7 +4912,7 @@ function sanitizeText(text) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asString(value) {
+function asString$1(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function safeJsonParse(text) {
@@ -4949,10 +4935,10 @@ function parseArguments(raw) {
 	return isRecord(parsed) ? parsed : {};
 }
 function imageBlockToPart(block) {
-	let data = asString(block.data) || asString(block.base64);
+	let data = asString$1(block.data) || asString$1(block.base64);
 	const source = isRecord(block.source) ? block.source : void 0;
-	if (!data && source) data = asString(source.data) || asString(source.base64);
-	let mimeType = asString(block.mimeType) || asString(block.mediaType) || (source ? asString(source.mimeType) || asString(source.mediaType) : void 0) || "image/png";
+	if (!data && source) data = asString$1(source.data) || asString$1(source.base64);
+	let mimeType = asString$1(block.mimeType) || asString$1(block.mediaType) || (source ? asString$1(source.mimeType) || asString$1(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
 		const match = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (match) {
@@ -4998,7 +4984,7 @@ function replayBlockFor(message, index) {
 	}
 }
 function thoughtSignature(part) {
-	return asString(part?.thoughtSignature) || asString(part?.thought_signature) || asString(part?.thinkingSignature) || asString(part?.textSignature);
+	return asString$1(part?.thoughtSignature) || asString$1(part?.thought_signature) || asString$1(part?.thinkingSignature) || asString$1(part?.textSignature);
 }
 function replayPart(part) {
 	const copy = { ...part };
@@ -5017,7 +5003,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 		if (!isRecord(block)) continue;
 		const replay = replayBlockFor(message, index);
 		const originalParts = Array.isArray(replay?.parts) ? replay.parts.filter(isRecord) : [];
-		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString(part.text) || "").join("") === sanitizeText(String(block.text || ""))) {
+		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString$1(part.text) || "").join("") === sanitizeText(String(block.text || ""))) {
 			parts.push(...originalParts.map(replayPart));
 			continue;
 		}
@@ -5038,7 +5024,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 			const toolId = String(block.id || "");
 			const toolName = String(block.name || "");
 			const originalCall = originalParts.find((part) => isRecord(part.functionCall));
-			const wireId = asString((isRecord(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
+			const wireId = asString$1((isRecord(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
 			toolCalls.set(toolId, {
 				name: toolName,
 				id: wireId
@@ -5315,8 +5301,8 @@ function processStreamLine(line, state) {
 		if (isRecord(part.functionCall)) {
 			out.push(...closeCurrentBlock(state));
 			const fc = part.functionCall;
-			const toolName = asString(fc.name) || "";
-			const toolId = asString(fc.id) || sanitizeToolCallId("", toolName);
+			const toolName = asString$1(fc.name) || "";
+			const toolId = asString$1(fc.id) || sanitizeToolCallId("", toolName);
 			const argsText = JSON.stringify(isRecord(fc.args) ? fc.args : {});
 			const index = state.blocks.length;
 			const block = {
@@ -5354,7 +5340,7 @@ function processStreamLine(line, state) {
 	}
 	collectUsage(chunk.usageMetadata, state);
 	if (responseData !== chunk) collectUsage(responseData.usageMetadata, state);
-	const finishReason = asString(candidate?.finishReason) || asString(responseData.finishReason);
+	const finishReason = asString$1(candidate?.finishReason) || asString$1(responseData.finishReason);
 	if (finishReason) {
 		state.finishReason = finishReason;
 		out.push(...closeCurrentBlock(state));
@@ -5699,7 +5685,230 @@ function registerAntigravityRoutes(ctx, store, modelSettings, preferences, fetch
 	});
 }
 //#endregion
+//#region src/host/subagent-model-authorization.ts
+/** DSH settings namespace owned by the Subagent settings card. */
+const SUBAGENT_MODEL_SELECTION_NAMESPACE = "subagent-model-selection";
+/** Durable Session event carrying one Session's authorized child routes. */
+const SUBAGENT_POLICY_EVENT = "subagent/model-selection-policy";
+/** Delegation tools whose child routes this guard authorizes. */
+const DEFAULT_DELEGATION_TOOLS = ["subagent"];
+/**
+* Read one deployment event field as a string.
+* @param value - Candidate field value from a durable event.
+* @returns the string value, or undefined for any other type.
+*/
+function asString(value) {
+	return typeof value === "string" ? value : void 0;
+}
+/**
+* Read one deployment event field as a plain object.
+* @param value - Candidate field value from a durable event.
+* @returns the record value, or undefined for arrays, null, and primitives.
+*/
+function asRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+/**
+* Read one deployment event field as a boolean.
+* @param value - Candidate field value from a durable event.
+* @returns the boolean value, or undefined for any other type.
+*/
+function asBoolean(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+/**
+* Parse the allowlist out of a durable route-policy event.
+* @param data - `subagent/model-selection-policy` event payload.
+* @returns every well-formed route, or undefined when the payload carries none.
+*/
+function parseAllowedRoutes(data) {
+	const allowed = asRecord(data)?.["allowedModels"];
+	if (!Array.isArray(allowed)) return void 0;
+	const routes = [];
+	for (const entry of allowed) {
+		const record = asRecord(entry);
+		const provider = asString(record?.["provider"]);
+		const model = asString(record?.["model"]);
+		if (provider === void 0 || model === void 0) continue;
+		if (provider.length === 0 || model.length === 0) continue;
+		routes.push({
+			provider,
+			model
+		});
+	}
+	return routes.length === 0 ? void 0 : routes;
+}
+/**
+* Find one Session's recorded allowlist among its durable events.
+* @param session - Session whose log is scanned.
+* @returns the authorized routes, or undefined for a Session that recorded none.
+*/
+function policyRoutesOf(session) {
+	if (session === void 0 || typeof session.eventAt !== "function") return void 0;
+	for (let seq = 0; seq < 256; seq += 1) {
+		let event;
+		try {
+			event = session.eventAt(seq);
+		} catch {
+			return;
+		}
+		if (event === void 0) return void 0;
+		if (event.type !== "subagent/model-selection-policy") continue;
+		const routes = parseAllowedRoutes(event.data);
+		if (routes !== void 0) return routes;
+	}
+}
+/**
+* Resolve the allowlist a delegation from this agent must respect: the agent's
+* own recorded policy, else the nearest ancestor Session that recorded one
+* (the inheritance the delegation tool applies to child Sessions).
+* @param agent - Calling agent.
+* @param sessions - Session registry used for ancestor lookup.
+* @returns the authorized routes, or undefined when no Session recorded any.
+*/
+function authorizedRoutesFor(agent, sessions) {
+	let session = agent?.session;
+	for (let depth = 0; depth < 8 && session !== void 0; depth += 1) {
+		const recorded = policyRoutesOf(session);
+		if (recorded !== void 0) return recorded;
+		const header = session.header;
+		if (header?.origin !== "subagent") return void 0;
+		const parentId = asString(header.parentSession);
+		if (parentId === void 0) return void 0;
+		session = sessions.get(parentId);
+	}
+}
+/**
+* Read the Host preference that owns the allowlist. Values in the stored
+* document are untrusted JSON, so every field is narrowed before use.
+* @param settings - Live settings service, when composed.
+* @returns the resolved preference, or undefined without a settings service.
+*/
+function subagentModelSelectionPreference(settings) {
+	if (settings === void 0) return void 0;
+	const register = settings["register"];
+	if (typeof register !== "function") return void 0;
+	try {
+		const value = asRecord(register.call(settings, SUBAGENT_MODEL_SELECTION_NAMESPACE, z.object({
+			enabled: z.boolean().default(false),
+			allowedModels: z.array(z.object({
+				provider: z.string().min(1).required(),
+				model: z.string().min(1).required()
+			})).default([])
+		})).get());
+		if (value === void 0) return void 0;
+		return {
+			enabled: asBoolean(value["enabled"]) === true,
+			allowedModels: parseAllowedRoutes(value) ?? []
+		};
+	} catch {
+		return;
+	}
+}
+/** Whether an exact route is authorized by a allowlist. */
+function routesInclude(allowed, provider, model) {
+	return allowed.some((route) => route.provider === provider && route.model === model);
+}
+/**
+* Build the denial reason for a delegation that would run on an unauthorized
+* route. The reason names the authorized routes so the next call can select one.
+* @param provider - Effective child provider id, when one is known.
+* @param model - Effective child model id, when one is known.
+* @param allowed - Routes the calling Session authorizes.
+* @param explicit - Whether the model named the route in the tool arguments.
+* @returns the corrective reason handed back to the model.
+*/
+function unauthorizedRouteReason(provider, model, allowed, explicit) {
+	const route = provider === void 0 || model === void 0 ? "the inherited route" : `route "${provider}/${model}"`;
+	return `subagent model selection: ${explicit ? "the model this call selected is not on the Session allowlist" : "the route this call would inherit from the parent is not on the Session allowlist"} (${route}). Provide an authorized provider and model — ${allowed.map((entry) => `${entry.provider}/${entry.model}`).join(", ")} — using list_subagent_models to inspect their reasoning efforts.`;
+}
+/**
+* Decide whether one delegation call may start its child.
+* @param agent - Calling agent.
+* @param toolName - Tool being dispatched.
+* @param args - Parsed tool arguments.
+* @param preference - Current Host preference, when the settings service exists.
+* @param sessions - Session registry used for ancestor lookup.
+* @param toolNames - Delegation tool names this guard authorizes.
+* @param scope - Whether an unrecorded Session falls back to the preference.
+* @returns a denial reason, or undefined to leave the call untouched.
+*/
+function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session") {
+	if (!toolNames.includes(toolName)) return void 0;
+	if (preference !== void 0 && !preference.enabled) return void 0;
+	const allowed = authorizedRoutesFor(agent, sessions) ?? (scope === "preference" ? preference?.allowedModels ?? [] : []);
+	if (allowed.length === 0) return void 0;
+	const request = asRecord(args) ?? {};
+	const requestedProvider = asString(request["provider"]);
+	const requestedModel = asString(request["model"]);
+	const explicit = requestedProvider !== void 0 || requestedModel !== void 0;
+	const implicit = requestedProvider === void 0 && requestedModel === void 0;
+	const provider = implicit ? asString(agent?.options?.provider) : requestedProvider;
+	const model = implicit ? asString(agent?.options?.model) : requestedModel;
+	if (provider === void 0 || model === void 0) return;
+	if (routesInclude(allowed, provider, model)) return void 0;
+	return unauthorizedRouteReason(provider, model, allowed, explicit);
+}
+/**
+* Build the monotonic tool guard for one deployment. The Host preference is
+* sampled from the live settings document on every call, because a settings
+* edit must not rebuild the guard the way it cannot rebuild a Session.
+* @param options - settings, session registry, and delegation tool names.
+* @returns a guard that denies delegations outside the Session allowlist.
+*/
+function createSubagentAuthorization(options) {
+	return (agent, toolName, args) => delegationDenialReason(agent, toolName, args, subagentModelSelectionPreference(options.settings), options.sessions, options.toolNames, options.scope ?? "session");
+}
+/** Delegation names this guard recognizes when configuration omits them. */
+function normalizeDelegationToolNames(value) {
+	const names = Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry.trim().length > 0) : [];
+	return [...new Set(names.length === 0 ? [...DEFAULT_DELEGATION_TOOLS] : names.map((name) => name.trim()))];
+}
+/**
+* Validate the plugin configuration that owns this guard.
+* @param toolNames - Candidate delegation tool names.
+* @returns the exact names this guard authorizes.
+*/
+function validateDelegationToolNames(toolNames) {
+	if (toolNames.length === 0) throw new Error("dsh-chatgpt-subscription: subagentModelAuthorization.toolNames must name at least one delegation tool");
+	for (const name of toolNames) if (name.length === 0 || name !== name.trim()) throw new Error(`dsh-chatgpt-subscription: subagentModelAuthorization.toolNames entry "${name}" must be a non-empty trimmed string`);
+	return [...toolNames];
+}
+/**
+* Register the monotonic guard on the Host tool registry.
+* @param ctx - Host context carrying `tools` (and optionally `settings`).
+* @param sessions - Session registry used for ancestor lookup.
+* @param config - Enforcement toggle and delegation tool names.
+* @returns the exact disposer that unregisters the guard.
+*/
+function installSubagentModelAuthorization(ctx, sessions, config = {}) {
+	const toolNames = validateDelegationToolNames(config.toolNames ?? [...DEFAULT_DELEGATION_TOOLS]);
+	const scope = validateAuthorizationScope(config.scope ?? "session");
+	const settings = ctx.get?.("settings");
+	const authorize = createSubagentAuthorization({
+		settings,
+		sessions,
+		toolNames,
+		scope
+	});
+	return ctx.tools.guard((exec) => authorize(exec.agent, exec.name, exec.arguments));
+}
+/**
+* Validate the configured authorization scope.
+* @param scope - Candidate scope from deployment configuration.
+* @returns the exact scope this guard enforces.
+*/
+function validateAuthorizationScope(scope) {
+	if (scope === "session" || scope === "preference") return scope;
+	throw new Error(`dsh-chatgpt-subscription: subagentModelScope must be "session" or "preference", received ${JSON.stringify(scope)}`);
+}
+//#endregion
 //#region src/index.ts
+const Config = z.object({
+	subagentModelAuthorization: z.boolean().default(true),
+	subagentModelTools: z.array(z.string()).default([]),
+	subagentModelScope: z.union([z.const("session"), z.const("preference")]).default("session")
+});
 const inject = [
 	"webServer",
 	"llm",
@@ -5708,12 +5917,24 @@ const inject = [
 	"settings",
 	"loader"
 ];
-function apply(ctx) {
+function apply(ctx, pluginConfig = {}) {
 	const store = createPlatformTokenStore();
 	const preferences = registerPreferenceStore(ctx.settings);
 	const antigravityStore = new FileCredentialStore();
 	const antigravityModelSettings = new FileModelSettingsStore();
 	const antigravityPreferences = registerAntigravityPreferenceStore(ctx.settings, antigravityModelSettings);
+	const delegationToolNames = normalizeDelegationToolNames(pluginConfig.subagentModelTools);
+	if (pluginConfig.subagentModelAuthorization !== false) ctx.inject(["sessions"], (scoped) => {
+		const sessions = scoped.get("sessions");
+		if (sessions === void 0) return;
+		scoped.effect(() => {
+			if (typeof scoped.tools?.guard !== "function") return () => void 0;
+			return installSubagentModelAuthorization(scoped, sessions, {
+				toolNames: delegationToolNames,
+				scope: pluginConfig.subagentModelScope ?? "session"
+			});
+		}, "dsh-chatgpt-subscription: subagent model authorization");
+	});
 	ctx.effect(() => {
 		const proxyManager = new ProxyManager({
 			getPreferences: () => preferences.status(),
@@ -5767,4 +5988,4 @@ function localWebServerBaseUrl(host, port) {
 	return `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}`;
 }
 //#endregion
-export { AntigravityAdapter, CodexChatGptAdapter, FileCredentialStore, FileModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, ResponsesClient, UsageService, WindowsDpapiTokenStore, apply, beginWebLogin, clearCachedQuota, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createPlatformTokenStore, credentialPath, detectSystemProxy, fetchAccountQuota, getCachedQuota, inject, loginAndSave, mapCodexUsage, modelSettingsPath, parseCodexUsage, parseResponsesStream, refreshAntigravityToken };
+export { AntigravityAdapter, CodexChatGptAdapter, Config, FileCredentialStore, FileModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, ResponsesClient, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, UsageService, WindowsDpapiTokenStore, apply, authorizedRoutesFor, beginWebLogin, clearCachedQuota, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createPlatformTokenStore, createSubagentAuthorization, credentialPath, delegationDenialReason, detectSystemProxy, fetchAccountQuota, getCachedQuota, inject, installSubagentModelAuthorization, loginAndSave, mapCodexUsage, modelSettingsPath, normalizeDelegationToolNames, parseAllowedRoutes, parseCodexUsage, parseResponsesStream, policyRoutesOf, refreshAntigravityToken, subagentModelSelectionPreference, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames };

package/lib/types/client/CodexSubscriptionSection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CodexSubscriptionSection.d.ts","sourceRoot":"","sources":["../../../src/client/CodexSubscriptionSection.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,KAAK,EAAyB,oBAAoB,EAAE,eAAe,EAAkB,cAAc,EAA8D,MAAM,wBAAwB,CAAA;AAGtM,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAA;AAGjC,KAAK,KAAK,GAAG,YAAY,CAAC,kBAAkB,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;AACtE,KAAK,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAA;AACzG,KAAK,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;AAE3B,wBAAgB,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CA+fxE;AAiBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAO5F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAO7F;AAcD,wBAAgB,gBAAgB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAAE,YAAY,EAAE,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAUzN;AAED,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAczH;AAMD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAYpF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,SAA4B,GAAG,MAAM,GAAG,IAAI,CAGxG;AAoCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAgBtE"}
+{"version":3,"file":"CodexSubscriptionSection.d.ts","sourceRoot":"","sources":["../../../src/client/CodexSubscriptionSection.tsx"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AACjF,OAAO,KAAK,EAAyB,oBAAoB,EAAE,eAAe,EAAkB,cAAc,EAA8D,MAAM,wBAAwB,CAAA;AAGtM,OAAO,EAAE,EAAE,EAAE,MAAM,cAAc,CAAA;AAGjC,KAAK,KAAK,GAAG,YAAY,CAAC,kBAAkB,CAAC,GAAG,WAAW,CAAC,OAAO,EAAE,CAAC,CAAA;AACtE,KAAK,UAAU,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,MAAM,GAAG,QAAQ,GAAG,aAAa,GAAG,IAAI,CAAA;AACzG,KAAK,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;AAE3B,wBAAgB,wBAAwB,CAAC,EAAE,CAAC,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAkbxE;AAiBD,wBAAgB,YAAY,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAO5F;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,oBAAoB,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAO7F;AAcD,wBAAgB,gBAAgB,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE;IAAE,YAAY,EAAE,WAAW,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAUzN;AAED,wBAAgB,QAAQ,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,cAAc,CAAC;IAAC,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAczH;AAMD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,CAAC,EAAE,SAAS,GAAG,MAAM,CAYpF;AAED,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAOlE;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,gBAAgB,SAA4B,GAAG,MAAM,GAAG,IAAI,CAGxG;AAoCD,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,CAgBtE"}

package/lib/types/client/locales.d.ts

@@ -71,13 +71,6 @@ export declare const zh: {
     readonly searchProviderDsh: "DSH 默认";
     readonly searchProviderCodex: "ChatGPT（代理隧道）";
     readonly providerDefault: "使用 Provider 默认值";
-    readonly subagentEnhancements: "子代理设置";
-    readonly subagentContextWindow: "子代理上下文预算";
-    readonly subagentContextWindowHint: "限制子代理运行时的最大上下文 Token 数（例如 128K、256K）；留空跟随模型主设置。";
-    readonly subagentMaxDepth: "子代理最大嵌套深度";
-    readonly subagentMaxDepthHint: "限制子代理的递归层级（0–3）；0 禁止创建子代理。";
-    readonly subagentDisabled: "已禁用";
-    readonly levels: "层";
     readonly contextWindows: "模型上下文窗口";
     readonly contextWindowsHint: "默认 272K；6 Astra 最高 872K，GPT-5.6 最高 1M。该值用于 DSH 的压缩与溢出判断，可输入 872K、512K 等容量。";
     readonly contextWindow: "上下文窗口";
@@ -205,13 +198,6 @@ export declare const dictionaries: {
         readonly searchProviderDsh: "DSH 默认";
         readonly searchProviderCodex: "ChatGPT（代理隧道）";
         readonly providerDefault: "使用 Provider 默认值";
-        readonly subagentEnhancements: "子代理设置";
-        readonly subagentContextWindow: "子代理上下文预算";
-        readonly subagentContextWindowHint: "限制子代理运行时的最大上下文 Token 数（例如 128K、256K）；留空跟随模型主设置。";
-        readonly subagentMaxDepth: "子代理最大嵌套深度";
-        readonly subagentMaxDepthHint: "限制子代理的递归层级（0–3）；0 禁止创建子代理。";
-        readonly subagentDisabled: "已禁用";
-        readonly levels: "层";
         readonly contextWindows: "模型上下文窗口";
         readonly contextWindowsHint: "默认 272K；6 Astra 最高 872K，GPT-5.6 最高 1M。该值用于 DSH 的压缩与溢出判断，可输入 872K、512K 等容量。";
         readonly contextWindow: "上下文窗口";
@@ -264,6 +250,6 @@ export declare const dictionaries: {
         readonly retry: "重试";
         readonly unknown: "未知";
     };
-    en: Record<"quota" | "account" | "storage" | "stale" | "pending" | "tokens" | "title" | "intro" | "signedOut" | "signedIn" | "plan" | "accountId" | "expires" | "storageWindows" | "storageMacKeychain" | "storageLinuxFile" | "storageMemory" | "storageUnavailable" | "securityWindows" | "securityMacKeychain" | "securityLinuxFile" | "securityMemory" | "securityUnavailable" | "signIn" | "signInAgain" | "cancel" | "signOut" | "refreshToken" | "popupBlocked" | "continueLogin" | "loading" | "connection" | "provider" | "connectionState" | "connected" | "untested" | "testConnection" | "testing" | "latency" | "models" | "modelsHint" | "proxySettings" | "proxyMode" | "proxyModeHint" | "proxyModeAuto" | "proxyModeCustom" | "proxyModeDirect" | "customProxyUrl" | "customProxyUrlHint" | "customProxyUrlPlaceholder" | "saveProxyUrl" | "proxyDetected" | "proxyDetectedEffective" | "proxyNoneDetected" | "proxyDirectHint" | "enhancements" | "fastMode" | "fastModeHint" | "outputVerbosity" | "outputVerbosityHint" | "verbosityLow" | "verbosityMedium" | "verbosityHigh" | "reasoningSummary" | "reasoningSummaryHint" | "summaryAuto" | "summaryConcise" | "summaryDetailed" | "summaryNone" | "searchProvider" | "searchProviderHint" | "searchProviderDsh" | "searchProviderCodex" | "providerDefault" | "subagentEnhancements" | "subagentContextWindow" | "subagentContextWindowHint" | "subagentMaxDepth" | "subagentMaxDepthHint" | "subagentDisabled" | "levels" | "contextWindows" | "contextWindowsHint" | "contextWindow" | "contextWindowInvalid" | "saveContextWindow" | "save" | "quickQuota" | "quickQuotaHint" | "quotaIntro" | "refreshQuota" | "refreshing" | "noQuota" | "quotaSignedOut" | "updated" | "primary" | "secondary" | "limitWindow" | "used" | "remaining" | "available" | "unavailable" | "unlimited" | "credits" | "monthlySpend" | "resetCredits" | "resetCreditExpires" | "useResetCredit" | "usingResetCredit" | "useResetCreditConfirm" | "resetCreditUsed" | "spendControlReached" | "limit" | "exhausted" | "resets" | "quickQuotaLabel" | "quickQuotaLoading" | "imageToolRunning" | "imageToolDone" | "imageToolFailed" | "image" | "openImage" | "openNamedImage" | "imageLoading" | "imageLoadFailed" | "imagePreviewClose" | "imagePreviewOpenOriginal" | "retry" | "unknown", string>;
+    en: Record<"quota" | "account" | "storage" | "stale" | "pending" | "tokens" | "title" | "intro" | "signedOut" | "signedIn" | "plan" | "accountId" | "expires" | "storageWindows" | "storageMacKeychain" | "storageLinuxFile" | "storageMemory" | "storageUnavailable" | "securityWindows" | "securityMacKeychain" | "securityLinuxFile" | "securityMemory" | "securityUnavailable" | "signIn" | "signInAgain" | "cancel" | "signOut" | "refreshToken" | "popupBlocked" | "continueLogin" | "loading" | "connection" | "provider" | "connectionState" | "connected" | "untested" | "testConnection" | "testing" | "latency" | "models" | "modelsHint" | "proxySettings" | "proxyMode" | "proxyModeHint" | "proxyModeAuto" | "proxyModeCustom" | "proxyModeDirect" | "customProxyUrl" | "customProxyUrlHint" | "customProxyUrlPlaceholder" | "saveProxyUrl" | "proxyDetected" | "proxyDetectedEffective" | "proxyNoneDetected" | "proxyDirectHint" | "enhancements" | "fastMode" | "fastModeHint" | "outputVerbosity" | "outputVerbosityHint" | "verbosityLow" | "verbosityMedium" | "verbosityHigh" | "reasoningSummary" | "reasoningSummaryHint" | "summaryAuto" | "summaryConcise" | "summaryDetailed" | "summaryNone" | "searchProvider" | "searchProviderHint" | "searchProviderDsh" | "searchProviderCodex" | "providerDefault" | "contextWindows" | "contextWindowsHint" | "contextWindow" | "contextWindowInvalid" | "saveContextWindow" | "save" | "quickQuota" | "quickQuotaHint" | "quotaIntro" | "refreshQuota" | "refreshing" | "noQuota" | "quotaSignedOut" | "updated" | "primary" | "secondary" | "limitWindow" | "used" | "remaining" | "available" | "unavailable" | "unlimited" | "credits" | "monthlySpend" | "resetCredits" | "resetCreditExpires" | "useResetCredit" | "usingResetCredit" | "useResetCreditConfirm" | "resetCreditUsed" | "spendControlReached" | "limit" | "exhausted" | "resets" | "quickQuotaLabel" | "quickQuotaLoading" | "imageToolRunning" | "imageToolDone" | "imageToolFailed" | "image" | "openImage" | "openNamedImage" | "imageLoading" | "imageLoadFailed" | "imagePreviewClose" | "imagePreviewOpenOriginal" | "retry" | "unknown", string>;
 };
 //# sourceMappingURL=locales.d.ts.map

package/lib/types/client/locales.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,EAAE,EAAG,0BAAmC,CAAA;AAErD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkIL,CAAA;AAEV,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE,EAAE,MAAM,CAkI9C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,EAAE,CAAA;AACvC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAa,CAAA"}
+{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,EAAE,EAAG,0BAAmC,CAAA;AAErD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA2HL,CAAA;AAEV,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE,EAAE,MAAM,CA2H9C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,EAAE,CAAA;AACvC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAa,CAAA"}

package/lib/types/host/preferences.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preferences.d.ts","sourceRoot":"","sources":["../../../src/host/preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAsB,MAAM,2BAA2B,CAAA;AAerF,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,wBAAwB,CAAA;AAE/B,MAAM,WAAW,2BAA2B;IAC1C,MAAM,IAAI,0BAA0B,CAAA;IACpC,MAAM,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IACpF,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,0BAA0B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAA;CAC1H;AAID,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,2BAA2B,CA0B/F;AAkED,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAG5B"}
+{"version":3,"file":"preferences.d.ts","sourceRoot":"","sources":["../../../src/host/preferences.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,gBAAgB,EAAsB,MAAM,2BAA2B,CAAA;AAcrF,OAAO,KAAK,EACV,0BAA0B,EAC1B,gCAAgC,EACjC,MAAM,wBAAwB,CAAA;AAE/B,MAAM,WAAW,2BAA2B;IAC1C,MAAM,IAAI,0BAA0B,CAAA;IACpC,MAAM,CAAC,KAAK,EAAE,gCAAgC,GAAG,OAAO,CAAC,0BAA0B,CAAC,CAAA;IACpF,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,0BAA0B,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,MAAM,IAAI,CAAA;CAC1H;AAID,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,gBAAgB,GAAG,2BAA2B,CAwB/F;AA4DD,qBAAa,eAAgB,SAAQ,KAAK;gBAC5B,OAAO,EAAE,MAAM;CAG5B"}

package/lib/types/host/subagent-model-authorization.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Host-side authorization for the models a subagent may run.
+ *
+ * The `subagent-model-selection` preference is sampled into each Session as a
+ * durable route allowlist, but the built-in delegation tool only rejects an
+ * explicit route outside that list: a call that selects no route lets the child
+ * inherit the parent's model, so a DeepSeek parent could spawn DeepSeek
+ * children even though the allowlist authorizes only other models.
+ *
+ * This guard closes that gap from the plugin plane. Whenever the calling
+ * Session (or the nearest ancestor that recorded one) carries an allowlist,
+ * a delegation whose effective child route the list does not authorize is
+ * denied before the child starts, with the authorized routes in the reason so
+ * the model can retry and pick one of them.
+ * @module dsh-chatgpt-subscription/subagent-model-authorization
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { SettingsProvider } from '@deepseek-ai/dsh-settings';
+/** DSH settings namespace owned by the Subagent settings card. */
+export declare const SUBAGENT_MODEL_SELECTION_NAMESPACE = "subagent-model-selection";
+/** Durable Session event carrying one Session's authorized child routes. */
+export declare const SUBAGENT_POLICY_EVENT = "subagent/model-selection-policy";
+/** Delegation tools whose child routes this guard authorizes. */
+export declare const DEFAULT_DELEGATION_TOOLS: readonly string[];
+/** One exact provider/model route the user authorized for children. */
+export interface AllowedModelRoute {
+    readonly provider: string;
+    readonly model: string;
+}
+/** Resolved model-selection preference read from the Host settings document. */
+export interface SubagentModelSelectionPreference {
+    readonly enabled: boolean;
+    readonly allowedModels: readonly AllowedModelRoute[];
+}
+/** One durable Session record this module reads: its events and its lineage. */
+export interface PolicySession {
+    eventAt?(seq: number): {
+        type?: unknown;
+        data?: unknown;
+    } | undefined;
+    readonly header?: {
+        readonly origin?: unknown;
+        readonly parentSession?: unknown;
+    };
+}
+/** Session lookup the guard walks from the calling agent to its ancestors. */
+export interface SessionsResolver {
+    get(id: string): PolicySession | undefined;
+}
+/** Calling agent fields the guard reads. */
+export interface AuthorizationAgent {
+    readonly session?: PolicySession;
+    readonly options?: {
+        readonly provider?: unknown;
+        readonly model?: unknown;
+    };
+}
+/** What the delegation tool received from the model. */
+export interface DelegationArguments {
+    readonly provider?: unknown;
+    readonly model?: unknown;
+}
+/**
+ * Parse the allowlist out of a durable route-policy event.
+ * @param data - `subagent/model-selection-policy` event payload.
+ * @returns every well-formed route, or undefined when the payload carries none.
+ */
+export declare function parseAllowedRoutes(data: unknown): AllowedModelRoute[] | undefined;
+/**
+ * Find one Session's recorded allowlist among its durable events.
+ * @param session - Session whose log is scanned.
+ * @returns the authorized routes, or undefined for a Session that recorded none.
+ */
+export declare function policyRoutesOf(session: PolicySession | undefined): AllowedModelRoute[] | undefined;
+/**
+ * Resolve the allowlist a delegation from this agent must respect: the agent's
+ * own recorded policy, else the nearest ancestor Session that recorded one
+ * (the inheritance the delegation tool applies to child Sessions).
+ * @param agent - Calling agent.
+ * @param sessions - Session registry used for ancestor lookup.
+ * @returns the authorized routes, or undefined when no Session recorded any.
+ */
+export declare function authorizedRoutesFor(agent: AuthorizationAgent | undefined, sessions: SessionsResolver): AllowedModelRoute[] | undefined;
+/**
+ * Read the Host preference that owns the allowlist. Values in the stored
+ * document are untrusted JSON, so every field is narrowed before use.
+ * @param settings - Live settings service, when composed.
+ * @returns the resolved preference, or undefined without a settings service.
+ */
+export declare function subagentModelSelectionPreference(settings: SettingsProvider | undefined): SubagentModelSelectionPreference | undefined;
+/**
+ * Build the denial reason for a delegation that would run on an unauthorized
+ * route. The reason names the authorized routes so the next call can select one.
+ * @param provider - Effective child provider id, when one is known.
+ * @param model - Effective child model id, when one is known.
+ * @param allowed - Routes the calling Session authorizes.
+ * @param explicit - Whether the model named the route in the tool arguments.
+ * @returns the corrective reason handed back to the model.
+ */
+export declare function unauthorizedRouteReason(provider: string | undefined, model: string | undefined, allowed: readonly AllowedModelRoute[], explicit: boolean): string;
+/** Which Session's recorded allowlist a delegation must respect. */
+export type AuthorizationScope = 
+/**
+ * `session` (default): a Session that recorded an allowlist governs itself
+ * and its descendants, matching the delegation tool's durable snapshot; a
+ * Session that recorded none keeps the built-in behavior.
+ */
+'session'
+/**
+ * `preference`: the current Host preference also governs Sessions that never
+ * recorded an allowlist, so the Settings card applies without restarting the
+ * Session. A Session that recorded its own routes still outranks it.
+ */
+ | 'preference';
+/**
+ * Decide whether one delegation call may start its child.
+ * @param agent - Calling agent.
+ * @param toolName - Tool being dispatched.
+ * @param args - Parsed tool arguments.
+ * @param preference - Current Host preference, when the settings service exists.
+ * @param sessions - Session registry used for ancestor lookup.
+ * @param toolNames - Delegation tool names this guard authorizes.
+ * @param scope - Whether an unrecorded Session falls back to the preference.
+ * @returns a denial reason, or undefined to leave the call untouched.
+ */
+export declare function delegationDenialReason(agent: AuthorizationAgent | undefined, toolName: string, args: unknown, preference: SubagentModelSelectionPreference | undefined, sessions: SessionsResolver, toolNames?: readonly string[], scope?: AuthorizationScope): string | undefined;
+/** Runtime inputs the guard closes over. */
+export interface SubagentAuthorizationOptions {
+    /** Live settings service, when composed; absent leaves recorded policies in charge. */
+    readonly settings?: SettingsProvider;
+    /** Session registry used for ancestor lookup. */
+    readonly sessions: SessionsResolver;
+    /** Exact delegation tool names this guard authorizes. */
+    readonly toolNames: readonly string[];
+    /** Whether an unrecorded Session falls back to the current preference. */
+    readonly scope?: AuthorizationScope;
+}
+/** The exact guard signature the Host tool registry evaluates. */
+export type DelegationGuard = (agent: AuthorizationAgent | undefined, toolName: string, args: unknown) => string | undefined;
+/**
+ * Build the monotonic tool guard for one deployment. The Host preference is
+ * sampled from the live settings document on every call, because a settings
+ * edit must not rebuild the guard the way it cannot rebuild a Session.
+ * @param options - settings, session registry, and delegation tool names.
+ * @returns a guard that denies delegations outside the Session allowlist.
+ */
+export declare function createSubagentAuthorization(options: SubagentAuthorizationOptions): DelegationGuard;
+/** Delegation names this guard recognizes when configuration omits them. */
+export declare function normalizeDelegationToolNames(value: unknown): string[];
+/**
+ * Validate the plugin configuration that owns this guard.
+ * @param toolNames - Candidate delegation tool names.
+ * @returns the exact names this guard authorizes.
+ */
+export declare function validateDelegationToolNames(toolNames: readonly string[]): string[];
+/** Configuration accepted by {@link installSubagentModelAuthorization}. */
+export interface SubagentModelAuthorizationConfig {
+    /** Delegation tool names the guard authorizes. */
+    readonly toolNames?: readonly string[];
+    /** Whether an unrecorded Session falls back to the current preference. */
+    readonly scope?: AuthorizationScope;
+}
+/**
+ * Register the monotonic guard on the Host tool registry.
+ * @param ctx - Host context carrying `tools` (and optionally `settings`).
+ * @param sessions - Session registry used for ancestor lookup.
+ * @param config - Enforcement toggle and delegation tool names.
+ * @returns the exact disposer that unregisters the guard.
+ */
+export declare function installSubagentModelAuthorization(ctx: Context, sessions: SessionsResolver, config?: SubagentModelAuthorizationConfig): () => void;
+/**
+ * Validate the configured authorization scope.
+ * @param scope - Candidate scope from deployment configuration.
+ * @returns the exact scope this guard enforces.
+ */
+export declare function validateAuthorizationScope(scope: unknown): AuthorizationScope;
+//# sourceMappingURL=subagent-model-authorization.d.ts.map

package/lib/types/host/subagent-model-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-model-authorization.d.ts","sourceRoot":"","sources":["../../../src/host/subagent-model-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,kEAAkE;AAClE,eAAO,MAAM,kCAAkC,6BAA6B,CAAA;AAE5E,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAAiB,CAAA;AAEvE,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACrD;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KACjC,CAAA;CACF;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;CAC3C;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAC7E;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AA+BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAajF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAiBlG;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,gBAAgB,GACzB,iBAAiB,EAAE,GAAG,SAAS,CAYjC;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GACrC,gCAAgC,GAAG,SAAS,CAwB9C;AAWD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,QAAQ,EAAE,OAAO,GAChB,MAAM,CAWR;AAED,oEAAoE;AACpE,MAAM,MAAM,kBAAkB;AAC5B;;;;GAIG;AACD,SAAS;AACX;;;;GAIG;GACD,YAAY,CAAA;AAEhB;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,gCAAgC,GAAG,SAAS,EACxD,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,GAAE,SAAS,MAAM,EAA6B,EACvD,KAAK,GAAE,kBAA8B,GACpC,MAAM,GAAG,SAAS,CA0BpB;AAED,4CAA4C;AAC5C,MAAM,WAAW,4BAA4B;IAC3C,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IACpC,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAA;CACpC;AAED,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,KACV,MAAM,GAAG,SAAS,CAAA;AAEvB;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,eAAe,CAUjB;AAED,4EAA4E;AAC5E,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAKrE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUlF;AAED,2EAA2E;AAC3E,MAAM,WAAW,gCAAgC;IAC/C,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAA;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,GAAE,gCAAqC,GAC5C,MAAM,IAAI,CAOZ;AACD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAK7E"}