@subshell-ai/plugin-codex 1.0.1 → 1.0.2

package/dist/index.d.ts

@@ -676,7 +676,8 @@ declare const manifest: SubshellManifest;
  * (a user may put it in their own preset flags — that is their call).
  *
  * subshell MCP is wired automatically WITHOUT touching user state: every
- * launch carries `-c mcp_servers.subshell.command=… -c mcp_servers.subshell.args=…`
+ * launch carries `-c mcp_servers.subshell.command=…`,
+ * `-c mcp_servers.subshell.args=…` and `-c mcp_servers.subshell.env_vars=…`
  * config overrides (dotted path, value parsed as TOML — verified against the
  * real binary), which codex merges over ~/.codex/config.toml for that run
  * only. The subagent monitoring hooks ride the same mechanism as
@@ -684,9 +685,9 @@ declare const manifest: SubshellManifest;
  * `hooks.*` table is REPLACED for the duration of a subshell-launched run —
  * the documented limitation, same shape as claude-code's; nothing on disk
  * changes. No config file the harness must read, no CODEX_HOME redirect (that
- * dir holds the user's auth.json). The spawned `subshell mcp` child inherits
- * the subshell's baked SUBSHELL_* pane env for its credential, like every
- * harness.
+ * dir holds the user's auth.json). The spawned `subshell mcp` child needs the
+ * pane's SUBSHELL_* identity, and Codex filters a child's environment, so the
+ * env_vars override re-forwards those names (never values) at each launch.
  * (Flags/values verified against @openai/codex 2026-09 help output.)
  *
  * Identity, detection and install guidance live in this package's

package/dist/index.js

@@ -285,7 +285,7 @@ function validateGenericPreset(preset) {
 const parsed = parseManifest({
 	name: "@subshell-ai/plugin-codex",
 	description: "Codex harness plugin for Subshell",
-	version: "1.0.1",
+	version: "1.0.2",
 	license: "Apache-2.0",
 	type: "module",
 	main: "dist/index.js",
@@ -348,6 +348,14 @@ if ("error" in parsed) throw new Error(`@subshell-ai/plugin-codex has an invalid
 const manifest = parsed;
 //#endregion
 //#region src/index.ts
+const MCP_ENV_VARS = [
+	"SUBSHELL_API_KEY",
+	"SUBSHELL_BASE_URL",
+	"SUBSHELL_ID",
+	"SUBSHELL_NAME",
+	"SUBSHELL_DATA_DIR",
+	"SUBSHELL_SERVER_DATA_DIR"
+];
 /** Known Codex settings, applied as per-invocation CLI flags. */
 const CODEX_SETTINGS_FIELDS = [
 	{
@@ -417,7 +425,8 @@ function tomlStringArray(values) {
 * (a user may put it in their own preset flags — that is their call).
 *
 * subshell MCP is wired automatically WITHOUT touching user state: every
-* launch carries `-c mcp_servers.subshell.command=… -c mcp_servers.subshell.args=…`
+* launch carries `-c mcp_servers.subshell.command=…`,
+* `-c mcp_servers.subshell.args=…` and `-c mcp_servers.subshell.env_vars=…`
 * config overrides (dotted path, value parsed as TOML — verified against the
 * real binary), which codex merges over ~/.codex/config.toml for that run
 * only. The subagent monitoring hooks ride the same mechanism as
@@ -425,9 +434,9 @@ function tomlStringArray(values) {
 * `hooks.*` table is REPLACED for the duration of a subshell-launched run —
 * the documented limitation, same shape as claude-code's; nothing on disk
 * changes. No config file the harness must read, no CODEX_HOME redirect (that
-* dir holds the user's auth.json). The spawned `subshell mcp` child inherits
-* the subshell's baked SUBSHELL_* pane env for its credential, like every
-* harness.
+* dir holds the user's auth.json). The spawned `subshell mcp` child needs the
+* pane's SUBSHELL_* identity, and Codex filters a child's environment, so the
+* env_vars override re-forwards those names (never values) at each launch.
 * (Flags/values verified against @openai/codex 2026-09 help output.)
 *
 * Identity, detection and install guidance live in this package's
@@ -491,13 +500,16 @@ const createPlugin = (host) => ({
 				`[mcp_servers.${MCP_SERVER_NAME}]`,
 				`command = ${tomlString(launch.command)}`,
 				`args = ${tomlStringArray(launch.args)}`,
+				`env_vars = ${tomlStringArray(MCP_ENV_VARS)}`,
 				""
 			].join("\n"),
 			args: [
 				"-c",
 				`mcp_servers.${MCP_SERVER_NAME}.command=${tomlString(launch.command)}`,
 				"-c",
-				`mcp_servers.${MCP_SERVER_NAME}.args=${tomlStringArray(launch.args)}`
+				`mcp_servers.${MCP_SERVER_NAME}.args=${tomlStringArray(launch.args)}`,
+				"-c",
+				`mcp_servers.${MCP_SERVER_NAME}.env_vars=${tomlStringArray(MCP_ENV_VARS)}`
 			],
 			env: void 0
 		};

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@subshell-ai/plugin-codex",
   "description": "Codex harness plugin for Subshell",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "license": "Apache-2.0",
   "type": "module",
   "main": "dist/index.js",