@eddyskywalker/dsh-chatgpt-subscription 0.2.15 → 0.2.16

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.2.15 - 2026-09-11
+
+- 新增子代理模型授权守卫：DSH 的「Subagent」允许列表（`subagent-model-selection`）原本只在模型**显式**填写 `provider`/`model` 时生效，而委派调用不填路由时子代理会继承父级模型——于是 DeepSeek 会话里的子代理仍会在未授权模型上运行。插件现在在 Host 工具注册表上注册一个单调守卫（`ctx.tools.guard`），当调用会话（或最近的、记录了策略的祖先会话）带有允许列表时，任何生效路由不在此列表内的委派都会在子代理启动前被拒绝，拒绝理由里带上全部已授权路由，模型据此重试即可选中合规模型。
+- 该守卫只在会话确实记录了允许列表时介入（与 DSH 委派工具的会话快照语义一致），不会改变未启用该设置的会话；`subagentModelScope: 'preference'` 可让当前设置卡允许列表也约束未记录策略的会话（含恢复的旧会话）。
+- 只读取公开接口：会话日志事件 `subagent/model-selection-policy`、父会话谱系、Host 设置文档与 `ctx.tools.guard`，不修改 DSH 本体。
+- 新增配置项：`subagentModelAuthorization`（默认 `true`）、`subagentModelTools`（默认 `['subagent']`）、`subagentModelScope`（默认 `session`，可选 `preference`）。
+- 新增 14 条单测覆盖策略解析、谱系继承、设置读取、显式/继承路由的拒绝与放行、作用域切换以及守卫安装路径（含注册与释放）。
 ## 0.2.14 - 2026-09-10
 
 - 移除失效的「子代理最大嵌套深度 / 子代理上下文预算」设置：这两个偏好键在 DSH 侧没有任何消费方（全仓库无引用），插件自身也只有写、没有读，保存了也不生效。它们源于 2026-08-28 的 `5b08e2e`——那次提交迁移到 DSH 原生子代理模型路由，删除了 `subagent-context-adapter` / `subagent-policy` / `SubagentSettingsSection`，但把这两个控件和偏好键留了下来。相关 DTO 字段、schema、路由校验、界面控件、6 条未引用文案与失效单测一并移除；子代理模型与思考深度改用 DSH 自身的“Subagent”设置卡片，最大嵌套深度由 preset 中 `tool-subagent` 的 `maxDepth` 决定，README 同步更正。
@@ -61,4 +68,4 @@
 - 适配 DSH `0.1.0-rc.8`：peerDependencies / devDependencies 中全部 DSH 包范围从 `^0.1.0-rc.6` 提升至 `^0.1.0-rc.8`，并重新生成 package-lock.json。已在本机 rc.8 依赖集上验证：typecheck、55 项测试与 tsdown 构建全部通过，插件代码无需改动。
 - 移除已无引用的 `@deepseek-ai/dsh-agent` peer 依赖（子代理报告去重兼容模块已于 0.1.11 移除）。
 - 新增 `@deepseek-ai/dsh-client-connection` peer 依赖（客户端 `ContentBlock` 类型来源，符合 rc.8 客户端包 peer 声明惯例）。
-- 说明：rc.8 中 `@deepseek-ai/dsh-client-ui-slots` 不再是 DSH 运行时依赖图成员（仅保留为各客户端包的 devDependency），插件继续将其声明为 peer 依赖以保证安装时解析（`^0.1.0-rc.6` 联网安装时解析到 rc.8；本地锁文件因离线环境暂固定 rc.7，API 与 rc.8 用法一致）。
+- 说明：rc.8 中 `@deepseek-ai/dsh-client-ui-slots` 不再是 DSH 运行时依赖图成员（仅保留为各客户端包的 devDependency），插件继续将其声明为 peer 依赖以保证安装时解析（`^0.1.0-rc.6` 联网安装时解析到 rc.8；本地锁文件因离线环境暂固定 rc.7，API 与 rc.8 用法一致）。

package/README.md

@@ -11,6 +11,7 @@
 - [环境要求](#环境要求)
 - [安装](#安装)
 - [使用](#使用)
+- [子代理模型授权](#子代理模型授权0215-起)
 - [升级、降级与卸载](#升级降级与卸载)
 - [安全边界](#安全边界)
 - [插件路由](#插件路由)
@@ -132,6 +133,27 @@ DSH 模型选择器应显示 **“Codex（ChatGPT 订阅）”**。6 Astra 与 G
 
 > Windows 文件只能由创建它的用户通过 DPAPI 解密。macOS 凭据由登录钥匙串在本机加密保存。Linux 文件是未额外加密的 JSON，依赖目录 `0700` 和文件 `0600` 隔离；不要复制、打印或提交该文件。跨平台迁移需要重新登录。
 
+## 子代理模型授权（0.2.15 起）
+
+DSH 设置页的「Subagent」卡片会把勾选的模型写成会话级的允许列表（会话日志事件 `subagent/model-selection-policy`）。DSH 内置委派工具只拒绝**模型显式填写**且不在列表内的路由；调用里不写 `provider`/`model` 时，子代理会继承父级模型，于是白名单之外的主模型（例如 `deepseek-official/deepseek-flash`）仍会被子代理使用。
+
+插件在 Host 工具注册表上补一个单调守卫（`ctx.tools.guard`），在委派执行前判定生效路由：
+
+- 调用会话（或最近的、记录了策略的祖先会话）带有允许列表时，生效路由必须落在列表内；
+- 不写路由的委派按“继承父级模型”判定，因此父级模型不在列表内时会被拒绝；
+- 拒绝结果里会列出全部已授权路由（例如 `antigravity/gemini-3.8-flash`），模型照此重试即可；`list_subagent_models` 仍只展示已授权路由；
+- 未记录允许列表的会话（例如恢复的旧会话、未启用该设置的会话）保持 DSH 原有行为。
+
+配置项（插件行 `config`，全部可省略）：
+
+| 字段 | 默认 | 含义 |
+|---|---|---|
+| `subagentModelAuthorization` | `true` | 是否启用上述授权守卫；设为 `false` 回到 DSH 原有行为 |
+| `subagentModelTools` | `['subagent']` | 需要授权的委派工具名；preset 里自定义了 `toolName` 时在此列出 |
+| `subagentModelScope` | `session` | `session` 只约束记录了允许列表的会话；`preference` 额外用当前设置卡列表约束未记录的会话 |
+
+改动只在设置卡片里保存过的勾选生效：设置改动只影响之后新建的会话（DSH 的会话快照语义），已运行的会话继续使用它自己记录的那份列表。
+
 ## 安全边界
 
 Antigravity 的 access token / refresh token 使用独立的系统凭据存储：Windows 使用 CurrentUser DPAPI（`$DSH_HOME/storages/antigravity-oauth.json.dpapi`），macOS 使用登录钥匙串，Linux 使用 Secret Service。macOS / Linux 的服务名为 `dsh-antigravity`，账号键按旧凭据文件的绝对路径生成，隔离不同的 `DSH_HOME`。
@@ -192,4 +214,4 @@ npm pack --dry-run
 | 模型不可用 | 检查 ChatGPT 套餐、workspace 权限与当前模型可用性 |
 | DPAPI 读取失败 | 确认 DSH 以创建凭据时的同一 Windows 用户运行；必要时清理凭据后重新登录 |
 | Linux 凭据存储不可用 | 确认凭据属于当前用户且权限为 `0600`，父目录权限为 `0700`；修复权限或注销后重新登录 |
-| Linux 上工具调用语法错误 | 确认 DSH 暴露的是 `bash`、`sh` 或 `shell`，并使用相应的 Bash/POSIX 语法与 `/` 路径 |
+| Linux 上工具调用语法错误 | 确认 DSH 暴露的是 `bash`、`sh` 或 `shell`，并使用相应的 Bash/POSIX 语法与 `/` 路径 |

package/lib/index.js

@@ -1,4 +1,5 @@
 import { createRequire } from "node:module";
+import z from "@deepseek-ai/schemastery";
 import * as LlmModule from "@deepseek-ai/dsh-llm";
 import { HarnessError, LlmAdapter, LlmError, ProviderRequestId, ReasoningEffortId, attributionHeaders, resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
 import { WebError } from "@deepseek-ai/dsh-web";
@@ -12,7 +13,6 @@ import path, { dirname, join } from "node:path";
 import os, { homedir } from "node:os";
 import { ProxyAgent, fetch as fetch$1 } from "undici";
 import * as SettingsModule from "@deepseek-ai/dsh-settings";
-import z from "@deepseek-ai/schemastery";
 import fsPromises, { chmod, lstat, mkdir, open, rename, stat, unlink } from "node:fs/promises";
 import { isDeepStrictEqual } from "node:util";
 import { URL as URL$1, URLSearchParams as URLSearchParams$1 } from "node:url";
@@ -4912,7 +4912,7 @@ function sanitizeText(text) {
 function isRecord(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function asString(value) {
+function asString$1(value) {
 	return typeof value === "string" ? value : void 0;
 }
 function safeJsonParse(text) {
@@ -4935,10 +4935,10 @@ function parseArguments(raw) {
 	return isRecord(parsed) ? parsed : {};
 }
 function imageBlockToPart(block) {
-	let data = asString(block.data) || asString(block.base64);
+	let data = asString$1(block.data) || asString$1(block.base64);
 	const source = isRecord(block.source) ? block.source : void 0;
-	if (!data && source) data = asString(source.data) || asString(source.base64);
-	let mimeType = asString(block.mimeType) || asString(block.mediaType) || (source ? asString(source.mimeType) || asString(source.mediaType) : void 0) || "image/png";
+	if (!data && source) data = asString$1(source.data) || asString$1(source.base64);
+	let mimeType = asString$1(block.mimeType) || asString$1(block.mediaType) || (source ? asString$1(source.mimeType) || asString$1(source.mediaType) : void 0) || "image/png";
 	if (data?.startsWith("data:")) {
 		const match = data.match(/^data:([^;,]+);base64,(.*)$/s);
 		if (match) {
@@ -4984,7 +4984,7 @@ function replayBlockFor(message, index) {
 	}
 }
 function thoughtSignature(part) {
-	return asString(part?.thoughtSignature) || asString(part?.thought_signature) || asString(part?.thinkingSignature) || asString(part?.textSignature);
+	return asString$1(part?.thoughtSignature) || asString$1(part?.thought_signature) || asString$1(part?.thinkingSignature) || asString$1(part?.textSignature);
 }
 function replayPart(part) {
 	const copy = { ...part };
@@ -5003,7 +5003,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 		if (!isRecord(block)) continue;
 		const replay = replayBlockFor(message, index);
 		const originalParts = Array.isArray(replay?.parts) ? replay.parts.filter(isRecord) : [];
-		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString(part.text) || "").join("") === sanitizeText(String(block.text || ""))) {
+		if ((block.type === "text" || block.type === "reasoning") && originalParts.length > 0 && originalParts.every((part) => !part.functionCall) && originalParts.map((part) => asString$1(part.text) || "").join("") === sanitizeText(String(block.text || ""))) {
 			parts.push(...originalParts.map(replayPart));
 			continue;
 		}
@@ -5024,7 +5024,7 @@ function assistantParts(message, model, runtimeModel, toolCalls) {
 			const toolId = String(block.id || "");
 			const toolName = String(block.name || "");
 			const originalCall = originalParts.find((part) => isRecord(part.functionCall));
-			const wireId = asString((isRecord(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
+			const wireId = asString$1((isRecord(originalCall?.functionCall) ? originalCall.functionCall : void 0)?.id) || (toolCallIdNeeded(model.id, runtimeModel) ? sanitizeToolCallId(toolId, toolName) : originalCall ? void 0 : toolId || void 0);
 			toolCalls.set(toolId, {
 				name: toolName,
 				id: wireId
@@ -5301,8 +5301,8 @@ function processStreamLine(line, state) {
 		if (isRecord(part.functionCall)) {
 			out.push(...closeCurrentBlock(state));
 			const fc = part.functionCall;
-			const toolName = asString(fc.name) || "";
-			const toolId = asString(fc.id) || sanitizeToolCallId("", toolName);
+			const toolName = asString$1(fc.name) || "";
+			const toolId = asString$1(fc.id) || sanitizeToolCallId("", toolName);
 			const argsText = JSON.stringify(isRecord(fc.args) ? fc.args : {});
 			const index = state.blocks.length;
 			const block = {
@@ -5340,7 +5340,7 @@ function processStreamLine(line, state) {
 	}
 	collectUsage(chunk.usageMetadata, state);
 	if (responseData !== chunk) collectUsage(responseData.usageMetadata, state);
-	const finishReason = asString(candidate?.finishReason) || asString(responseData.finishReason);
+	const finishReason = asString$1(candidate?.finishReason) || asString$1(responseData.finishReason);
 	if (finishReason) {
 		state.finishReason = finishReason;
 		out.push(...closeCurrentBlock(state));
@@ -5685,7 +5685,230 @@ function registerAntigravityRoutes(ctx, store, modelSettings, preferences, fetch
 	});
 }
 //#endregion
+//#region src/host/subagent-model-authorization.ts
+/** DSH settings namespace owned by the Subagent settings card. */
+const SUBAGENT_MODEL_SELECTION_NAMESPACE = "subagent-model-selection";
+/** Durable Session event carrying one Session's authorized child routes. */
+const SUBAGENT_POLICY_EVENT = "subagent/model-selection-policy";
+/** Delegation tools whose child routes this guard authorizes. */
+const DEFAULT_DELEGATION_TOOLS = ["subagent"];
+/**
+* Read one deployment event field as a string.
+* @param value - Candidate field value from a durable event.
+* @returns the string value, or undefined for any other type.
+*/
+function asString(value) {
+	return typeof value === "string" ? value : void 0;
+}
+/**
+* Read one deployment event field as a plain object.
+* @param value - Candidate field value from a durable event.
+* @returns the record value, or undefined for arrays, null, and primitives.
+*/
+function asRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+/**
+* Read one deployment event field as a boolean.
+* @param value - Candidate field value from a durable event.
+* @returns the boolean value, or undefined for any other type.
+*/
+function asBoolean(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+/**
+* Parse the allowlist out of a durable route-policy event.
+* @param data - `subagent/model-selection-policy` event payload.
+* @returns every well-formed route, or undefined when the payload carries none.
+*/
+function parseAllowedRoutes(data) {
+	const allowed = asRecord(data)?.["allowedModels"];
+	if (!Array.isArray(allowed)) return void 0;
+	const routes = [];
+	for (const entry of allowed) {
+		const record = asRecord(entry);
+		const provider = asString(record?.["provider"]);
+		const model = asString(record?.["model"]);
+		if (provider === void 0 || model === void 0) continue;
+		if (provider.length === 0 || model.length === 0) continue;
+		routes.push({
+			provider,
+			model
+		});
+	}
+	return routes.length === 0 ? void 0 : routes;
+}
+/**
+* Find one Session's recorded allowlist among its durable events.
+* @param session - Session whose log is scanned.
+* @returns the authorized routes, or undefined for a Session that recorded none.
+*/
+function policyRoutesOf(session) {
+	if (session === void 0 || typeof session.eventAt !== "function") return void 0;
+	for (let seq = 0; seq < 256; seq += 1) {
+		let event;
+		try {
+			event = session.eventAt(seq);
+		} catch {
+			return;
+		}
+		if (event === void 0) return void 0;
+		if (event.type !== "subagent/model-selection-policy") continue;
+		const routes = parseAllowedRoutes(event.data);
+		if (routes !== void 0) return routes;
+	}
+}
+/**
+* Resolve the allowlist a delegation from this agent must respect: the agent's
+* own recorded policy, else the nearest ancestor Session that recorded one
+* (the inheritance the delegation tool applies to child Sessions).
+* @param agent - Calling agent.
+* @param sessions - Session registry used for ancestor lookup.
+* @returns the authorized routes, or undefined when no Session recorded any.
+*/
+function authorizedRoutesFor(agent, sessions) {
+	let session = agent?.session;
+	for (let depth = 0; depth < 8 && session !== void 0; depth += 1) {
+		const recorded = policyRoutesOf(session);
+		if (recorded !== void 0) return recorded;
+		const header = session.header;
+		if (header?.origin !== "subagent") return void 0;
+		const parentId = asString(header.parentSession);
+		if (parentId === void 0) return void 0;
+		session = sessions.get(parentId);
+	}
+}
+/**
+* Read the Host preference that owns the allowlist. Values in the stored
+* document are untrusted JSON, so every field is narrowed before use.
+* @param settings - Live settings service, when composed.
+* @returns the resolved preference, or undefined without a settings service.
+*/
+function subagentModelSelectionPreference(settings) {
+	if (settings === void 0) return void 0;
+	const register = settings["register"];
+	if (typeof register !== "function") return void 0;
+	try {
+		const value = asRecord(register.call(settings, SUBAGENT_MODEL_SELECTION_NAMESPACE, z.object({
+			enabled: z.boolean().default(false),
+			allowedModels: z.array(z.object({
+				provider: z.string().min(1).required(),
+				model: z.string().min(1).required()
+			})).default([])
+		})).get());
+		if (value === void 0) return void 0;
+		return {
+			enabled: asBoolean(value["enabled"]) === true,
+			allowedModels: parseAllowedRoutes(value) ?? []
+		};
+	} catch {
+		return;
+	}
+}
+/** Whether an exact route is authorized by a allowlist. */
+function routesInclude(allowed, provider, model) {
+	return allowed.some((route) => route.provider === provider && route.model === model);
+}
+/**
+* Build the denial reason for a delegation that would run on an unauthorized
+* route. The reason names the authorized routes so the next call can select one.
+* @param provider - Effective child provider id, when one is known.
+* @param model - Effective child model id, when one is known.
+* @param allowed - Routes the calling Session authorizes.
+* @param explicit - Whether the model named the route in the tool arguments.
+* @returns the corrective reason handed back to the model.
+*/
+function unauthorizedRouteReason(provider, model, allowed, explicit) {
+	const route = provider === void 0 || model === void 0 ? "the inherited route" : `route "${provider}/${model}"`;
+	return `subagent model selection: ${explicit ? "the model this call selected is not on the Session allowlist" : "the route this call would inherit from the parent is not on the Session allowlist"} (${route}). Provide an authorized provider and model — ${allowed.map((entry) => `${entry.provider}/${entry.model}`).join(", ")} — using list_subagent_models to inspect their reasoning efforts.`;
+}
+/**
+* Decide whether one delegation call may start its child.
+* @param agent - Calling agent.
+* @param toolName - Tool being dispatched.
+* @param args - Parsed tool arguments.
+* @param preference - Current Host preference, when the settings service exists.
+* @param sessions - Session registry used for ancestor lookup.
+* @param toolNames - Delegation tool names this guard authorizes.
+* @param scope - Whether an unrecorded Session falls back to the preference.
+* @returns a denial reason, or undefined to leave the call untouched.
+*/
+function delegationDenialReason(agent, toolName, args, preference, sessions, toolNames = DEFAULT_DELEGATION_TOOLS, scope = "session") {
+	if (!toolNames.includes(toolName)) return void 0;
+	if (preference !== void 0 && !preference.enabled) return void 0;
+	const allowed = authorizedRoutesFor(agent, sessions) ?? (scope === "preference" ? preference?.allowedModels ?? [] : []);
+	if (allowed.length === 0) return void 0;
+	const request = asRecord(args) ?? {};
+	const requestedProvider = asString(request["provider"]);
+	const requestedModel = asString(request["model"]);
+	const explicit = requestedProvider !== void 0 || requestedModel !== void 0;
+	const implicit = requestedProvider === void 0 && requestedModel === void 0;
+	const provider = implicit ? asString(agent?.options?.provider) : requestedProvider;
+	const model = implicit ? asString(agent?.options?.model) : requestedModel;
+	if (provider === void 0 || model === void 0) return;
+	if (routesInclude(allowed, provider, model)) return void 0;
+	return unauthorizedRouteReason(provider, model, allowed, explicit);
+}
+/**
+* Build the monotonic tool guard for one deployment. The Host preference is
+* sampled from the live settings document on every call, because a settings
+* edit must not rebuild the guard the way it cannot rebuild a Session.
+* @param options - settings, session registry, and delegation tool names.
+* @returns a guard that denies delegations outside the Session allowlist.
+*/
+function createSubagentAuthorization(options) {
+	return (agent, toolName, args) => delegationDenialReason(agent, toolName, args, subagentModelSelectionPreference(options.settings), options.sessions, options.toolNames, options.scope ?? "session");
+}
+/** Delegation names this guard recognizes when configuration omits them. */
+function normalizeDelegationToolNames(value) {
+	const names = Array.isArray(value) ? value.filter((entry) => typeof entry === "string" && entry.trim().length > 0) : [];
+	return [...new Set(names.length === 0 ? [...DEFAULT_DELEGATION_TOOLS] : names.map((name) => name.trim()))];
+}
+/**
+* Validate the plugin configuration that owns this guard.
+* @param toolNames - Candidate delegation tool names.
+* @returns the exact names this guard authorizes.
+*/
+function validateDelegationToolNames(toolNames) {
+	if (toolNames.length === 0) throw new Error("dsh-chatgpt-subscription: subagentModelAuthorization.toolNames must name at least one delegation tool");
+	for (const name of toolNames) if (name.length === 0 || name !== name.trim()) throw new Error(`dsh-chatgpt-subscription: subagentModelAuthorization.toolNames entry "${name}" must be a non-empty trimmed string`);
+	return [...toolNames];
+}
+/**
+* Register the monotonic guard on the Host tool registry.
+* @param ctx - Host context carrying `tools` (and optionally `settings`).
+* @param sessions - Session registry used for ancestor lookup.
+* @param config - Enforcement toggle and delegation tool names.
+* @returns the exact disposer that unregisters the guard.
+*/
+function installSubagentModelAuthorization(ctx, sessions, config = {}) {
+	const toolNames = validateDelegationToolNames(config.toolNames ?? [...DEFAULT_DELEGATION_TOOLS]);
+	const scope = validateAuthorizationScope(config.scope ?? "session");
+	const settings = ctx.get?.("settings");
+	const authorize = createSubagentAuthorization({
+		settings,
+		sessions,
+		toolNames,
+		scope
+	});
+	return ctx.tools.guard((exec) => authorize(exec.agent, exec.name, exec.arguments));
+}
+/**
+* Validate the configured authorization scope.
+* @param scope - Candidate scope from deployment configuration.
+* @returns the exact scope this guard enforces.
+*/
+function validateAuthorizationScope(scope) {
+	if (scope === "session" || scope === "preference") return scope;
+	throw new Error(`dsh-chatgpt-subscription: subagentModelScope must be "session" or "preference", received ${JSON.stringify(scope)}`);
+}
+//#endregion
 //#region src/index.ts
+const Config = z.object({
+	subagentModelAuthorization: z.boolean().default(true),
+	subagentModelTools: z.array(z.string()).default([]),
+	subagentModelScope: z.union([z.const("session"), z.const("preference")]).default("session")
+});
 const inject = [
 	"webServer",
 	"llm",
@@ -5694,12 +5917,24 @@ const inject = [
 	"settings",
 	"loader"
 ];
-function apply(ctx) {
+function apply(ctx, pluginConfig = {}) {
 	const store = createPlatformTokenStore();
 	const preferences = registerPreferenceStore(ctx.settings);
 	const antigravityStore = new FileCredentialStore();
 	const antigravityModelSettings = new FileModelSettingsStore();
 	const antigravityPreferences = registerAntigravityPreferenceStore(ctx.settings, antigravityModelSettings);
+	const delegationToolNames = normalizeDelegationToolNames(pluginConfig.subagentModelTools);
+	if (pluginConfig.subagentModelAuthorization !== false) ctx.inject(["sessions"], (scoped) => {
+		const sessions = scoped.get("sessions");
+		if (sessions === void 0) return;
+		scoped.effect(() => {
+			if (typeof scoped.tools?.guard !== "function") return () => void 0;
+			return installSubagentModelAuthorization(scoped, sessions, {
+				toolNames: delegationToolNames,
+				scope: pluginConfig.subagentModelScope ?? "session"
+			});
+		}, "dsh-chatgpt-subscription: subagent model authorization");
+	});
 	ctx.effect(() => {
 		const proxyManager = new ProxyManager({
 			getPreferences: () => preferences.status(),
@@ -5753,4 +5988,4 @@ function localWebServerBaseUrl(host, port) {
 	return `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}`;
 }
 //#endregion
-export { AntigravityAdapter, CodexChatGptAdapter, FileCredentialStore, FileModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, ResponsesClient, UsageService, WindowsDpapiTokenStore, apply, beginWebLogin, clearCachedQuota, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createPlatformTokenStore, credentialPath, detectSystemProxy, fetchAccountQuota, getCachedQuota, inject, loginAndSave, mapCodexUsage, modelSettingsPath, parseCodexUsage, parseResponsesStream, refreshAntigravityToken };
+export { AntigravityAdapter, CodexChatGptAdapter, Config, FileCredentialStore, FileModelSettingsStore, LinuxFileTokenStore, MacKeychainTokenStore, OAuthService, ProxyManager, ResponsesClient, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, UsageService, WindowsDpapiTokenStore, apply, authorizedRoutesFor, beginWebLogin, clearCachedQuota, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createPlatformTokenStore, createSubagentAuthorization, credentialPath, delegationDenialReason, detectSystemProxy, fetchAccountQuota, getCachedQuota, inject, installSubagentModelAuthorization, loginAndSave, mapCodexUsage, modelSettingsPath, normalizeDelegationToolNames, parseAllowedRoutes, parseCodexUsage, parseResponsesStream, policyRoutesOf, refreshAntigravityToken, subagentModelSelectionPreference, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames };

package/lib/types/host/subagent-model-authorization.d.ts

@@ -0,0 +1,177 @@
+/**
+ * Host-side authorization for the models a subagent may run.
+ *
+ * The `subagent-model-selection` preference is sampled into each Session as a
+ * durable route allowlist, but the built-in delegation tool only rejects an
+ * explicit route outside that list: a call that selects no route lets the child
+ * inherit the parent's model, so a DeepSeek parent could spawn DeepSeek
+ * children even though the allowlist authorizes only other models.
+ *
+ * This guard closes that gap from the plugin plane. Whenever the calling
+ * Session (or the nearest ancestor that recorded one) carries an allowlist,
+ * a delegation whose effective child route the list does not authorize is
+ * denied before the child starts, with the authorized routes in the reason so
+ * the model can retry and pick one of them.
+ * @module dsh-chatgpt-subscription/subagent-model-authorization
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { SettingsProvider } from '@deepseek-ai/dsh-settings';
+/** DSH settings namespace owned by the Subagent settings card. */
+export declare const SUBAGENT_MODEL_SELECTION_NAMESPACE = "subagent-model-selection";
+/** Durable Session event carrying one Session's authorized child routes. */
+export declare const SUBAGENT_POLICY_EVENT = "subagent/model-selection-policy";
+/** Delegation tools whose child routes this guard authorizes. */
+export declare const DEFAULT_DELEGATION_TOOLS: readonly string[];
+/** One exact provider/model route the user authorized for children. */
+export interface AllowedModelRoute {
+    readonly provider: string;
+    readonly model: string;
+}
+/** Resolved model-selection preference read from the Host settings document. */
+export interface SubagentModelSelectionPreference {
+    readonly enabled: boolean;
+    readonly allowedModels: readonly AllowedModelRoute[];
+}
+/** One durable Session record this module reads: its events and its lineage. */
+export interface PolicySession {
+    eventAt?(seq: number): {
+        type?: unknown;
+        data?: unknown;
+    } | undefined;
+    readonly header?: {
+        readonly origin?: unknown;
+        readonly parentSession?: unknown;
+    };
+}
+/** Session lookup the guard walks from the calling agent to its ancestors. */
+export interface SessionsResolver {
+    get(id: string): PolicySession | undefined;
+}
+/** Calling agent fields the guard reads. */
+export interface AuthorizationAgent {
+    readonly session?: PolicySession;
+    readonly options?: {
+        readonly provider?: unknown;
+        readonly model?: unknown;
+    };
+}
+/** What the delegation tool received from the model. */
+export interface DelegationArguments {
+    readonly provider?: unknown;
+    readonly model?: unknown;
+}
+/**
+ * Parse the allowlist out of a durable route-policy event.
+ * @param data - `subagent/model-selection-policy` event payload.
+ * @returns every well-formed route, or undefined when the payload carries none.
+ */
+export declare function parseAllowedRoutes(data: unknown): AllowedModelRoute[] | undefined;
+/**
+ * Find one Session's recorded allowlist among its durable events.
+ * @param session - Session whose log is scanned.
+ * @returns the authorized routes, or undefined for a Session that recorded none.
+ */
+export declare function policyRoutesOf(session: PolicySession | undefined): AllowedModelRoute[] | undefined;
+/**
+ * Resolve the allowlist a delegation from this agent must respect: the agent's
+ * own recorded policy, else the nearest ancestor Session that recorded one
+ * (the inheritance the delegation tool applies to child Sessions).
+ * @param agent - Calling agent.
+ * @param sessions - Session registry used for ancestor lookup.
+ * @returns the authorized routes, or undefined when no Session recorded any.
+ */
+export declare function authorizedRoutesFor(agent: AuthorizationAgent | undefined, sessions: SessionsResolver): AllowedModelRoute[] | undefined;
+/**
+ * Read the Host preference that owns the allowlist. Values in the stored
+ * document are untrusted JSON, so every field is narrowed before use.
+ * @param settings - Live settings service, when composed.
+ * @returns the resolved preference, or undefined without a settings service.
+ */
+export declare function subagentModelSelectionPreference(settings: SettingsProvider | undefined): SubagentModelSelectionPreference | undefined;
+/**
+ * Build the denial reason for a delegation that would run on an unauthorized
+ * route. The reason names the authorized routes so the next call can select one.
+ * @param provider - Effective child provider id, when one is known.
+ * @param model - Effective child model id, when one is known.
+ * @param allowed - Routes the calling Session authorizes.
+ * @param explicit - Whether the model named the route in the tool arguments.
+ * @returns the corrective reason handed back to the model.
+ */
+export declare function unauthorizedRouteReason(provider: string | undefined, model: string | undefined, allowed: readonly AllowedModelRoute[], explicit: boolean): string;
+/** Which Session's recorded allowlist a delegation must respect. */
+export type AuthorizationScope = 
+/**
+ * `session` (default): a Session that recorded an allowlist governs itself
+ * and its descendants, matching the delegation tool's durable snapshot; a
+ * Session that recorded none keeps the built-in behavior.
+ */
+'session'
+/**
+ * `preference`: the current Host preference also governs Sessions that never
+ * recorded an allowlist, so the Settings card applies without restarting the
+ * Session. A Session that recorded its own routes still outranks it.
+ */
+ | 'preference';
+/**
+ * Decide whether one delegation call may start its child.
+ * @param agent - Calling agent.
+ * @param toolName - Tool being dispatched.
+ * @param args - Parsed tool arguments.
+ * @param preference - Current Host preference, when the settings service exists.
+ * @param sessions - Session registry used for ancestor lookup.
+ * @param toolNames - Delegation tool names this guard authorizes.
+ * @param scope - Whether an unrecorded Session falls back to the preference.
+ * @returns a denial reason, or undefined to leave the call untouched.
+ */
+export declare function delegationDenialReason(agent: AuthorizationAgent | undefined, toolName: string, args: unknown, preference: SubagentModelSelectionPreference | undefined, sessions: SessionsResolver, toolNames?: readonly string[], scope?: AuthorizationScope): string | undefined;
+/** Runtime inputs the guard closes over. */
+export interface SubagentAuthorizationOptions {
+    /** Live settings service, when composed; absent leaves recorded policies in charge. */
+    readonly settings?: SettingsProvider;
+    /** Session registry used for ancestor lookup. */
+    readonly sessions: SessionsResolver;
+    /** Exact delegation tool names this guard authorizes. */
+    readonly toolNames: readonly string[];
+    /** Whether an unrecorded Session falls back to the current preference. */
+    readonly scope?: AuthorizationScope;
+}
+/** The exact guard signature the Host tool registry evaluates. */
+export type DelegationGuard = (agent: AuthorizationAgent | undefined, toolName: string, args: unknown) => string | undefined;
+/**
+ * Build the monotonic tool guard for one deployment. The Host preference is
+ * sampled from the live settings document on every call, because a settings
+ * edit must not rebuild the guard the way it cannot rebuild a Session.
+ * @param options - settings, session registry, and delegation tool names.
+ * @returns a guard that denies delegations outside the Session allowlist.
+ */
+export declare function createSubagentAuthorization(options: SubagentAuthorizationOptions): DelegationGuard;
+/** Delegation names this guard recognizes when configuration omits them. */
+export declare function normalizeDelegationToolNames(value: unknown): string[];
+/**
+ * Validate the plugin configuration that owns this guard.
+ * @param toolNames - Candidate delegation tool names.
+ * @returns the exact names this guard authorizes.
+ */
+export declare function validateDelegationToolNames(toolNames: readonly string[]): string[];
+/** Configuration accepted by {@link installSubagentModelAuthorization}. */
+export interface SubagentModelAuthorizationConfig {
+    /** Delegation tool names the guard authorizes. */
+    readonly toolNames?: readonly string[];
+    /** Whether an unrecorded Session falls back to the current preference. */
+    readonly scope?: AuthorizationScope;
+}
+/**
+ * Register the monotonic guard on the Host tool registry.
+ * @param ctx - Host context carrying `tools` (and optionally `settings`).
+ * @param sessions - Session registry used for ancestor lookup.
+ * @param config - Enforcement toggle and delegation tool names.
+ * @returns the exact disposer that unregisters the guard.
+ */
+export declare function installSubagentModelAuthorization(ctx: Context, sessions: SessionsResolver, config?: SubagentModelAuthorizationConfig): () => void;
+/**
+ * Validate the configured authorization scope.
+ * @param scope - Candidate scope from deployment configuration.
+ * @returns the exact scope this guard enforces.
+ */
+export declare function validateAuthorizationScope(scope: unknown): AuthorizationScope;
+//# sourceMappingURL=subagent-model-authorization.d.ts.map

package/lib/types/host/subagent-model-authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subagent-model-authorization.d.ts","sourceRoot":"","sources":["../../../src/host/subagent-model-authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AAIjE,kEAAkE;AAClE,eAAO,MAAM,kCAAkC,6BAA6B,CAAA;AAE5E,4EAA4E;AAC5E,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE,iEAAiE;AACjE,eAAO,MAAM,wBAAwB,EAAE,SAAS,MAAM,EAAiB,CAAA;AAEvE,uEAAuE;AACvE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CACvB;AAED,gFAAgF;AAChF,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,SAAS,iBAAiB,EAAE,CAAA;CACrD;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,CAAC,GAAG,EAAE,MAAM,GAAG;QAAE,IAAI,CAAC,EAAE,OAAO,CAAC;QAAC,IAAI,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;IACrE,QAAQ,CAAC,MAAM,CAAC,EAAE;QAChB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;QACzB,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,CAAA;KACjC,CAAA;CACF;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;CAC3C;AAED,4CAA4C;AAC5C,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAA;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAC7E;AAED,wDAAwD;AACxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB;AA+BD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAajF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,aAAa,GAAG,SAAS,GAAG,iBAAiB,EAAE,GAAG,SAAS,CAiBlG;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,gBAAgB,GACzB,iBAAiB,EAAE,GAAG,SAAS,CAYjC;AAED;;;;;GAKG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,gBAAgB,GAAG,SAAS,GACrC,gCAAgC,GAAG,SAAS,CAwB9C;AAWD;;;;;;;;GAQG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,KAAK,EAAE,MAAM,GAAG,SAAS,EACzB,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,QAAQ,EAAE,OAAO,GAChB,MAAM,CAWR;AAED,oEAAoE;AACpE,MAAM,MAAM,kBAAkB;AAC5B;;;;GAIG;AACD,SAAS;AACX;;;;GAIG;GACD,YAAY,CAAA;AAEhB;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,EACb,UAAU,EAAE,gCAAgC,GAAG,SAAS,EACxD,QAAQ,EAAE,gBAAgB,EAC1B,SAAS,GAAE,SAAS,MAAM,EAA6B,EACvD,KAAK,GAAE,kBAA8B,GACpC,MAAM,GAAG,SAAS,CA0BpB;AAED,4CAA4C;AAC5C,MAAM,WAAW,4BAA4B;IAC3C,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,CAAC,EAAE,gBAAgB,CAAA;IACpC,iDAAiD;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAA;IACnC,yDAAyD;IACzD,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAA;IACrC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAA;CACpC;AAED,kEAAkE;AAClE,MAAM,MAAM,eAAe,GAAG,CAC5B,KAAK,EAAE,kBAAkB,GAAG,SAAS,EACrC,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,OAAO,KACV,MAAM,GAAG,SAAS,CAAA;AAEvB;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,eAAe,CAUjB;AAED,4EAA4E;AAC5E,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CAKrE;AAED;;;;GAIG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,EAAE,CAUlF;AAED,2EAA2E;AAC3E,MAAM,WAAW,gCAAgC;IAC/C,kDAAkD;IAClD,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACtC,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAA;CACpC;AAED;;;;;;GAMG;AACH,wBAAgB,iCAAiC,CAC/C,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,GAAE,gCAAqC,GAC5C,MAAM,IAAI,CAOZ;AACD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAK7E"}

package/lib/types/index.d.ts

@@ -1,7 +1,27 @@
 import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+/** Optional deployment configuration for this plugin. */
+export interface Config {
+    /**
+     * Whether the Subagent model allowlist also governs the route a delegation
+     * that selects no model would inherit from its parent. Default `true`; set
+     * `false` to leave inherited routes to the built-in delegation tool.
+     */
+    subagentModelAuthorization?: boolean;
+    /** Delegation tool names the authorization guard recognizes (default `subagent`). */
+    subagentModelTools?: string[];
+    /**
+     * `session` (default) enforces the allowlist a Session recorded, matching the
+     * delegation tool's snapshot; `preference` also enforces the current Settings
+     * card allowlist for Sessions that recorded none.
+     */
+    subagentModelScope?: 'session' | 'preference';
+}
+export declare const Config: z<Config>;
 export declare const inject: string[];
-export declare function apply(ctx: Context): void;
+export declare function apply(ctx: Context, pluginConfig?: Config): void;
 export { ProxyManager, detectSystemProxy } from './host/proxy-manager.ts';
+export { SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, authorizedRoutesFor, createSubagentAuthorization, delegationDenialReason, installSubagentModelAuthorization, normalizeDelegationToolNames, parseAllowedRoutes, policyRoutesOf, subagentModelSelectionPreference, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, } from './host/subagent-model-authorization.ts';
 export { OAuthService } from './host/oauth-service.ts';
 export { CodexChatGptAdapter } from './host/adapter.ts';
 export { createCodexImageTool } from './host/codex-images.ts';

package/lib/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AA+BlD,eAAO,MAAM,MAAM,UAAqE,CAAA;AAExF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,GAAG,IAAI,CAuExC;AAED,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACzE,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAClF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAE/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAqCxC,yDAAyD;AACzD,MAAM,WAAW,MAAM;IACrB;;;;OAIG;IACH,0BAA0B,CAAC,EAAE,OAAO,CAAA;IACpC,qFAAqF;IACrF,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,SAAS,GAAG,YAAY,CAAA;CAC9C;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAI3B,CAAA;AAEF,eAAO,MAAM,MAAM,UAAqE,CAAA;AAExF,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,YAAY,GAAE,MAAW,GAAG,IAAI,CA0FnE;AAED,OAAO,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACzE,OAAO,EACL,kCAAkC,EAClC,qBAAqB,EACrB,mBAAmB,EACnB,2BAA2B,EAC3B,sBAAsB,EACtB,iCAAiC,EACjC,4BAA4B,EAC5B,kBAAkB,EAClB,cAAc,EACd,gCAAgC,EAChC,uBAAuB,EACvB,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,wCAAwC,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAC7D,OAAO,EAAE,yBAAyB,EAAE,MAAM,wBAAwB,CAAA;AAClE,OAAO,EAAE,wBAAwB,EAAE,MAAM,uBAAuB,CAAA;AAChE,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAClF,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACtF,OAAO,EAAE,wBAAwB,EAAE,MAAM,gCAAgC,CAAA;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AACnE,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AACjE,OAAO,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAA;AAE/E,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAA;AAClE,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,iBAAiB,GAClB,MAAM,mCAAmC,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAA;AAClG,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@eddyskywalker/dsh-chatgpt-subscription",
-  "version": "0.2.15",
+  "version": "0.2.16",
   "description": "DSH provider plugin for Codex access through a ChatGPT subscription.",
   "author": {
     "name": "eddyskywalker",