dsh-codex-subscription 2.1.3-beta.1 → 2.1.3

package/README.en.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-# DSH Codex Subscription
+# DSH Codex Subscription — Use ChatGPT subscriptions in DeepSeek Harness
 
 [简体中文](https://github.com/WSL043/dsh-codex-subscription/blob/main/README.md) · **English**
 
@@ -19,18 +19,20 @@ No OpenAI API key or Codex CLI. Models, search, quota, and image generation stay
 </div>
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/readme-hero-en.webp" width="900" alt="Your Codex subscription inside DSH: models, web search, quota and safe reset, image generation, and Fast mode">
+  <img src="docs/assets/codex-subscription-overview-en.webp" width="900" alt="Use ChatGPT and Codex subscriptions in DeepSeek Harness: sign in without an API key, choose models and view remaining quota">
 </p>
 
 ## Three-step start
 
-1. **Install the plugin.** Run the standard DSH bundle command:
+1. **Install the plugin.** In newer DSH, open **Plugins → Add plugin** and enter `dsh-codex-subscription`. To select a candidate, enter `package@version`, for example `dsh-codex-subscription@2.1.3-beta.1`. This field does not accept a full terminal command.
+
+   For older DSH or terminal use, run:
 
    ```sh
    dsh plugin --profile web add dsh-codex-subscription
    ```
 
-2. **Sign in.** Restart DSH yourself, open **Settings -> Codex**, and choose browser sign-in. No Codex CLI and no pasted token are required.
+2. **Sign in.** Follow the installation result; save your work and restart only if requested. Open **Settings -> Codex**, and choose browser sign-in. No Codex CLI and no pasted token are required.
 3. **Use Codex.** Select a Codex model. Quota, subscription search, image generation, and Fast mode remain inside DSH.
 
 DSH-Portable exposes the same standard plugin command, so the command above also applies there. See below for the complete official npm, update, and uninstall routes.
@@ -55,10 +57,10 @@ These capabilities reuse the same local ChatGPT sign-in. Subscription routing fa
 ## Product screen
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/context-settings.png" width="820" alt="2.0.0 account and preference settings: sign-in, quota display and alerts">
+  <img src="docs/assets/subscription-account-en.png" width="820" alt="DSH Codex subscription main screen: ChatGPT sign-in, remaining quota and composer preferences">
 </p>
 
-2.0.0 groups settings into Account & preferences and Advanced & diagnostics. Screenshots use the Chinese UI, with the account label hidden and scrollable content expanded for readability. [View advanced settings](docs/assets/settings-advanced-2.0.png).
+The actual Account & preferences screen shows sign-in status, subscription quota and composer preferences. Account, quota, balance and time values are demo data, not fixed plan entitlements. Advanced options and optional components are described below.
 
 ## Prepare DSH
 
@@ -134,6 +136,10 @@ Restart DSH manually after installation, then:
 - Visible errors when subscription routing is unavailable, with no silent paid fallback.
 
 
+### GPT-Reserve (Experimental)
+
+When the account’s official catalog advertises `gpt-reserve`, it appears at the end of the model picker as an experimental option. Availability and billing are determined by the service; a successful response does not confirm use of a separate reserve allowance. The composer shows only a matching quota bucket returned by the service, and does not substitute ordinary Codex quota when none is returned.
+
 ### GPT-6 Astra context
 
 When the official model catalog exposes GPT-6 Astra, Standard preserves the catalog window, Extended uses 872000 tokens, and Custom accepts 128000–872000 tokens (initially 272000). This limit follows the [official Codex model catalog](https://github.com/openai/codex/blob/6af345407d9c2a568da9d01b6c4b81a9e61495c0/codex-rs/models-manager/models.json#L33-L34), not the API model's total context capacity. These settings only adjust DSH's local context budget; they do not grant model access or guarantee an account's server-side capacity. Actual availability remains subject to the service.
@@ -141,7 +147,7 @@ When the official model catalog exposes GPT-6 Astra, Standard preserves the cata
 ### Composer quota
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/composer-quota.png" width="800" alt="Live DSH composer with GPT-6-Astra, Max reasoning, Fast mode, and remaining quota">
+  <img src="docs/assets/composer-quota.png" width="800" alt="Live DSH composer with GPT-6-Astra, Max reasoning, Fast mode, and remaining quota">
 </p>
 
 Live example: GPT-6-Astra with Max (the highest reasoning level) and Fast mode (lightning icon), with remaining quota visible on the left.
@@ -170,14 +176,14 @@ New and edited images return the exact original path on the current DSH host in
 A new image request does not silently include earlier images. GPT Image 2 can take longer than a normal text turn, and detailed text, exact composition, or repeated-character consistency may still need another pass.
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/image-preview-annotations-en.png" width="800" alt="Generated image, region note, and continue editing inside the DSH Image Viewer">
+  <img src="docs/assets/image-preview-annotations-en.png" width="800" alt="Generated image, region note, and continue editing inside the DSH Image Viewer">
 </p>
 
 The screenshot above illustrates image viewing and on-image notes; available buttons can vary with the image and installed viewer version.
 
 ### Sketch canvas (Beta)
 
-![Sketch canvas in the Chinese UI: aspect ratio, brushes, shapes, layers and zoom](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-canvas.png)
+![Sketch canvas in the Chinese UI: aspect ratio, brushes, shapes, layers and zoom](docs/assets/sketch-canvas.png)
 
 Use the composer pen button for manual drawing. Selecting `@sketch` only inserts the Agent entry into the composer; the Agent opens the board after you send your drawing request. You can also choose Open in sketch from an enhanced image preview. Attachment intake and removal use the native DSH component.
 
@@ -189,7 +195,7 @@ The board supports editable shapes and text, native curves, and a side control f
 
 | Original sketch | Actual plugin output |
 | --- | --- |
-| ![Mountains and cabin sketch](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-demo-source.png) | ![Watercolor mountain cabin generated from the sketch](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-demo-result.png) |
+| ![Mountains and cabin sketch](docs/assets/sketch-demo-source.png) | ![Watercolor mountain cabin generated from the sketch](docs/assets/sketch-demo-result.png) |
 
 The request preserves the mountain and cabin composition while creating a warm watercolor travel illustration with green peaks, an orange roof, a meadow stream and morning light, without the blue outlines. GPT-5.6-Luna made one image-tool call requesting low quality. Luna is the conversation model; the subscription backend determines the actual image model.
 
@@ -202,7 +208,7 @@ The request preserves the mountain and cabin composition while creating a warm w
 
 | Native sketch | Generated result |
 | --- | --- |
-| ![Sketch](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-advanced-source.png) | ![Result](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-advanced-result.png) |
+| ![Sketch](docs/assets/sketch-advanced-source.png) | ![Result](docs/assets/sketch-advanced-result.png) |
 
 **Sketch reproduction prompt (reconstructed from the artwork, not the original conversation)**
 
@@ -228,7 +234,7 @@ Actual results supplied by the user from another computer: Astra draws on a port
 
 | Native Astra sketch | GPT-generated oil painting |
 | --- | --- |
-| ![Mona Lisa sketch drawn by Astra](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-mona-lisa-source.png) | ![Mona Lisa oil painting generated from the sketch](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-mona-lisa-result.png) |
+| ![Mona Lisa sketch drawn by Astra](docs/assets/sketch-mona-lisa-source.png) | ![Mona Lisa oil painting generated from the sketch](docs/assets/sketch-mona-lisa-result.png) |
 
 Original sketch prompt: `@sketch 用竖版画板画一幅《蒙娜丽莎》` (Draw the Mona Lisa on a portrait canvas.)
 
@@ -249,7 +255,47 @@ see the [OpenAI Codex Speed documentation](https://learn.chatgpt.com/docs/agent-
 Opt in under **Advanced & diagnostics**. SSE and DSH subtasks remain the defaults:
 
 - **WebSocket** reuses connections and eligible context transfers. Failed handshakes can fall back to SSE; interrupted responses surface an error without automatic replay. Applies to the next request, does not expand context limits, and is not guaranteed to be faster.
-- **Codex independent subtasks** reuse your subscription login and the official DSH Codex runtime, without a separate login or CLI setup. They inherit the current subscription model and workspace permissions by default. Enable DSH subtask model selection, configure allowed models and start a new session to specify the child model and reasoning effort in chat. Non-subscription sessions must explicitly select a subscription model. Shared-context subtasks remain with DSH.
+- **Codex independent subtasks** reuse your subscription login and the official DSH Codex runtime, without a separate login; install its optional component in settings. They inherit the current subscription model and workspace permissions by default. Enable DSH subtask model selection, configure allowed models and start a new session to specify the child model and reasoning effort in chat. Non-subscription sessions must explicitly select a subscription model. Shared-context subtasks remain with DSH.
+
+<a id="codex-subtask-runtime"></a>
+
+## Optional Codex subtask runtime
+
+Subscription chat, images, and native DSH subtasks do not need Codex CLI. Only **Codex independent subtasks (Beta)** require the optional official runtime. The plugin never downloads it in the background.
+
+In **Settings → Codex → Advanced → Independent subtasks**, click **Install component**. DSH handles installation; the page shows its stage and offers cancellation before applying. Restart after completion, then choose Codex. Installation does not enable subtasks automatically.
+
+![Optional component management](docs/assets/settings-runtime-current-en.png)
+
+For older hosts without the management interface, run this in the target DSH environment, then restart:
+
+```sh
+dsh plugin --profile web add @deepseek-ai/dsh-subagent-codex@0.1.5-rc.2
+```
+
+In the plugin installation UI, enter only `@deepseek-ai/dsh-subagent-codex@0.1.5-rc.2`, not the full command. Select Codex in advanced settings after preparation. Missing or failed preparation does not block subscription chat or the DSH backend. Shared-context subtasks remain in DSH.
+
+For offline preparation, install and verify beforehand on the target operating system and architecture, retaining the complete profile dependencies when moving it. The subscription archive or Codex wrapper alone is insufficient without the platform binary. First-time installation cannot complete offline unless dependencies are already prepared. Existing runtime checks and startup do not download anything; model requests still require connectivity. Do not use `--force` to install foreign-platform optional packages.
+
+**Upgrading an existing installation:** if you use Codex subtasks, run the preparation command before upgrading this plugin to retain the runtime explicitly in the same profile. A runtime only installed transitively by an older version may be removed during dependency reconciliation. The same command repairs an already-upgraded installation; restart afterwards.
+
+The runtime version is pinned separately; subscription updates do not silently upgrade it. This integration uses the official provider package-local CLI, never searches PATH or desktop-private runtimes, and removes the component only after an explicit uninstall request. Shared package caches are not deleted.
+
+### When you no longer need it
+
+To disable it, switch back to **DSH** in Advanced settings. The component stays installed so you can enable it again later.
+
+To uninstall it, click **Uninstall component** in the same section and confirm. The plugin blocks removal while Codex subtasks are running, switches back to DSH, and uses the official uninstall interface. Restart after completion. On older hosts, run this in a terminal, replacing `web` with the profile where you installed it:
+
+```sh
+dsh plugin --profile web remove @deepseek-ai/dsh-subagent-codex
+```
+
+This removes the optional subtask component, not the subscription plugin. Subscription chat, image generation and native DSH subtasks are unaffected. The package manager may keep the component if another plugin still depends on it.
+
+### Storage and cleanup
+
+Uninstalling does not clear shared package caches or guarantee a fixed amount of reclaimed space. DSH or Portable manages those caches centrally; this plugin does not delete shared directories. Sketches, conversation history, generated originals and sign-in data are not package caches. Use their respective management controls when you want to remove them.
 
 ## Update and uninstall
 

package/README.md

@@ -1,4 +1,4 @@
-# DSH Codex Subscription
+# DSH Codex Subscription — 在 DeepSeek Harness 使用 ChatGPT 订阅
 
 <div align="center">
 
@@ -20,18 +20,20 @@
 </div>
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/readme-hero.webp" width="900" alt="Codex 订阅直接用在 DSH：订阅模型、联网搜索、额度与安全重置、图片生成和高速模式">
+  <img src="docs/assets/codex-subscription-overview.webp" width="900" alt="在 DeepSeek Harness 登录 ChatGPT 并使用 Codex 订阅：无需 API Key，支持模型选择和剩余额度显示">
 </p>
 
 ## 三步开始
 
-1. **安装插件**：直接运行 DSH 标准 bundle 命令：
+1. **安装插件**：在新版 DSH 的 **插件 → 添加插件** 中填写 `dsh-codex-subscription`；指定候选版本时填写完整的 `包名@版本`，例如 `dsh-codex-subscription@2.1.3-beta.1`。这个输入框不接受整条终端命令。
+
+   旧版 DSH 或偏好终端操作时，才在终端运行：
 
    ```sh
    dsh plugin --profile web add dsh-codex-subscription
    ```
 
-2. **登录订阅**：手动重启 DSH，打开 **设置 -> Codex 订阅**，点击浏览器登录。无需 Codex CLI，也不要粘贴 token。
+2. **登录订阅**：按安装结果提示操作；若提示需要重启，先保存工作再重启。打开 **设置 -> Codex 订阅**，点击浏览器登录。无需 Codex CLI，也不要粘贴 token。
 3. **开始使用**：在模型选择器中选择 Codex；额度、订阅搜索、图片生成和高速模式都在 DSH 内使用。
 
 DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的命令。完整的官方 npm、更新和卸载方式见下文。
@@ -56,10 +58,10 @@ DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的
 ## 实际界面
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/context-settings.png" width="820" alt="2.0.0 账号与偏好：登录、额度、显示模式与提醒">
+  <img src="docs/assets/subscription-account.png" width="820" alt="DSH Codex 订阅主界面：ChatGPT 登录、剩余额度与输入框偏好">
 </p>
 
-2.0.0 设置分为“账号与偏好”和“高级与诊断”。截图已隐藏账号信息，并展开滚动内容便于阅读；[查看高级页](docs/assets/settings-advanced-2.0.png)。
+上图为“账号与偏好”主界面，展示登录状态、订阅额度和输入框偏好。截图中的账号、额度、余额与时间均为演示数据，不代表套餐固定权益。高级功能与可选组件见下文。
 
 ## 准备 DSH
 
@@ -135,6 +137,10 @@ dsh --profile web --dump-config
 - 订阅路由不可用时明确报错，不会静默切换到其他付费路由。
 
 
+### GPT-Reserve（实验性）
+
+账号的官方模型目录提供 `gpt-reserve` 时，模型选择器末尾会出现实验性选项。可用性和扣费归属由服务端决定；请求成功不代表已确认使用独立备用额度。输入框只显示服务端返回的匹配额度桶，未返回时不会借用普通 Codex 额度。
+
 ### GPT-6 Astra 上下文
 
 当官方模型目录提供 GPT-6 Astra 时，标准模式保留目录默认窗口；扩展模式使用 872000 Token，自定义模式可设置 128000–872000 Token（初始值为 272000）。该上限依据 [Codex 官方模型目录](https://github.com/openai/codex/blob/6af345407d9c2a568da9d01b6c4b81a9e61495c0/codex-rs/models-manager/models.json#L33-L34)，不是 API 模型的总上下文容量。这些设置只调整 DSH 的本地上下文预算，不授予模型访问权限，也不保证账号的服务端容量；实际可用性以服务端为准。
@@ -142,7 +148,7 @@ dsh --profile web --dump-config
 ### 输入框额度
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/composer-quota.png" width="800" alt="DSH 实机输入框：GPT-6-Astra、Max 推理、高速模式和剩余额度">
+  <img src="docs/assets/composer-quota.png" width="800" alt="DSH 实机输入框：GPT-6-Astra、Max 推理、高速模式和剩余额度">
 </p>
 
 实机示例：GPT-6-Astra · Max（最高推理档）· 高速模式（闪电标识），左侧直接显示剩余额度。
@@ -169,14 +175,14 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 新的图片请求不会静默带入历史图片。GPT Image 2 可能比文本回复耗时更长，复杂文字、精确构图和连续角色一致性也可能需要再次调整。
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/image-preview-annotations.png" width="800" alt="DSH 图片查看器中的生成图、区域备注和继续编辑">
+  <img src="docs/assets/image-preview-annotations.png" width="800" alt="DSH 图片查看器中的生成图、区域备注和继续编辑">
 </p>
 
 上图展示图片查看与图上备注的基本交互；具体按钮会随图片和所安装的查看器版本变化。
 
 ### 草图画板（Beta）
 
-![草图画板实机界面：画布比例、笔刷、形状、图层与缩放](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-canvas.png)
+![草图画板实机界面：画布比例、笔刷、形状、图层与缩放](docs/assets/sketch-canvas.png)
 
 点击输入框的草图按钮手动画图。`@sketch` 是 Agent 绘图入口：选择时只填入输入框，发送绘图请求后才由 Agent 打开画板。图片预览中可选择“进入草图”；上传、粘贴和移除附件仍由 DSH 原生组件处理。
 
@@ -188,7 +194,7 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 
 | 画板原草图 | 插件实际生成结果 |
 | --- | --- |
-| ![山峰与小屋草图](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-demo-source.png) | ![根据草图生成的水彩山间小屋](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-demo-result.png) |
+| ![山峰与小屋草图](docs/assets/sketch-demo-source.png) | ![根据草图生成的水彩山间小屋](docs/assets/sketch-demo-result.png) |
 
 示例要求：保留山峰与小屋的构图，生成温暖的水彩旅行插画，青绿山峰、橙色屋顶、草地小溪与柔和晨光，不保留蓝色线条。此例通过 GPT-5.6-Luna 发起一次图片工具调用，请求低质量；Luna 是对话模型，实际出图型号由订阅后端决定。
 
@@ -201,7 +207,7 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 
 | 原生草图 | 实际生成结果 |
 | --- | --- |
-| ![Sketch](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-advanced-source.png) | ![Result](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-advanced-result.png) |
+| ![Sketch](docs/assets/sketch-advanced-source.png) | ![Result](docs/assets/sketch-advanced-result.png) |
 
 **草图复现提示词（按原画面整理，非完整原始对话）**
 
@@ -227,7 +233,7 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 
 | Astra 原生草图 | GPT 生图：油画效果 |
 | --- | --- |
-| ![Astra 绘制的蒙娜丽莎草图](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-mona-lisa-source.png) | ![草图转换后的蒙娜丽莎油画](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/sketch-mona-lisa-result.png) |
+| ![Astra 绘制的蒙娜丽莎草图](docs/assets/sketch-mona-lisa-source.png) | ![草图转换后的蒙娜丽莎油画](docs/assets/sketch-mona-lisa-result.png) |
 
 草图提示词：`@sketch 用竖版画板画一幅《蒙娜丽莎》`
 
@@ -248,7 +254,47 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 在 **高级与诊断** 中按需开启，默认仍使用 SSE 和 DSH 子任务：
 
 - **WebSocket**：复用连接和可复用的上下文传输；握手失败可回退 SSE，已开始的响应中断会报错，不自动重放。下次请求生效，不增加模型上下文容量，也不保证更快。
-- **Codex 独立子任务**：复用订阅登录和官方 DSH Codex 运行时，无需另行登录或配置 CLI。默认继承当前订阅模型及工作区权限。开启 DSH 子任务模型选择、配置允许模型并新建会话后，可在聊天中指定子任务模型与推理档位；非订阅会话需明确选择订阅模型。共享上下文的子任务仍交给 DSH。
+- **Codex 独立子任务**：复用订阅登录和官方 DSH Codex 运行时，无需另行登录；可选组件在高级设置中安装。默认继承当前订阅模型及工作区权限。开启 DSH 子任务模型选择、配置允许模型并新建会话后，可在聊天中指定子任务模型与推理档位；非订阅会话需明确选择订阅模型。共享上下文的子任务仍交给 DSH。
+
+<a id="codex-subtask-runtime"></a>
+
+## 可选 Codex 子任务运行时
+
+普通订阅聊天、图片和 DSH 原生子任务不需要 Codex CLI。只有高级设置中的 **Codex 独立子任务（Beta）** 需要额外准备官方运行时，插件不会后台自动下载。
+
+在 **设置 → Codex 订阅 → 高级与诊断 → 独立子任务** 点击 **安装组件**。DSH 负责安装，页面显示当前阶段，可取消尚未应用的安装；完成后重启，再选择 Codex。安装不会自动开启子任务。
+
+![可选组件管理实机界面](docs/assets/settings-runtime-current.png)
+
+旧版宿主没有管理接口时，才在目标 DSH 环境的终端执行，然后重启：
+
+```sh
+dsh plugin --profile web add @deepseek-ai/dsh-subagent-codex@0.1.5-rc.2
+```
+
+如果使用插件安装页面，在包名框只填 `@deepseek-ai/dsh-subagent-codex@0.1.5-rc.2`，不要粘贴整条命令。安装到订阅插件所在的同一个 profile。之后在高级设置选择 Codex；共享上下文子任务仍由 DSH 处理。准备失败或尚未准备不影响普通订阅聊天，可继续选择 DSH。
+
+离线使用前，应在同系统、同架构的目标环境提前安装并验证运行时，迁移时保留完整的 DSH profile 依赖。只有订阅插件压缩包或 Codex 主包不能代替当前平台的可执行包；未提前准备时，断网无法完成首次安装。已有运行时的检查和启动不需要下载安装，但模型请求本身仍需要联网。不要使用 `--force` 安装其他平台的可选包。
+
+**旧版升级**：如果已使用 Codex 独立子任务，请在升级订阅插件前执行上面的准备命令，将运行时显式保留在同一个 profile；仅由旧版间接安装的运行时可能随依赖整理移除。已经升级也可执行同一命令补齐，然后重启。
+
+运行时版本单独固定，不会随订阅插件更新而自动下载新 CLI。现阶段沿用官方 provider 的包内 CLI，不自动查找 PATH，也不复用桌面应用的私有 CLI。只有明确点击卸载才移除组件，安装缓存不由插件清理。
+
+### 不再使用时
+
+只想停用：在高级设置切回 **DSH**，组件仍保留，之后可再次开启。
+
+要卸载：在同一位置点击 **卸载组件** 并确认。插件会检查正在运行的子任务，切回 DSH 后交给官方接口卸载；有任务运行时不能卸载。完成后重启。旧版宿主可在终端执行（将 `web` 替换为实际安装的 profile）：
+
+```sh
+dsh plugin --profile web remove @deepseek-ai/dsh-subagent-codex
+```
+
+卸载的是可选子任务组件，不是订阅插件；普通订阅聊天、生图和 DSH 原生子任务不受影响。若其他插件仍依赖该组件，包管理器可能保留它。
+
+### 存储与清理
+
+卸载不等于清空共享安装缓存，也不能保证释放某个固定大小。安装缓存由 DSH／Portable 统一管理，本插件不直接删除共享目录。草稿、会话记录、生成原图和登录信息不是安装缓存；需要删除时应使用各自的管理入口，不做一键混合清理。
 
 ## 更新与卸载
 

package/lib/client.js

@@ -872,6 +872,10 @@ window.__ModuleLoader__.load({
 			"preferences/status",
 			"preferences/models",
 			"preferences/update",
+			"runtime/status",
+			"runtime/install",
+			"runtime/remove",
+			"runtime/cancel",
 			"reset-credit/inspect",
 			"reset-credit/prepare",
 			"reset-credit/consume",
@@ -4502,6 +4506,24 @@ window.__ModuleLoader__.load({
 		//#endregion
 		//#region src/client-locales.js
 		const zh = {
+			runtimeLoading: "正在检查组件…",
+			runtimeRestart: "组件已更新，请重启 DSH 后使用。",
+			runtime_installing: "正在通过 DSH 安装组件…",
+			runtime_removing: "正在通过 DSH 卸载组件…",
+			runtime_applying: "正在应用安装结果…",
+			runtimeInstall: "安装组件",
+			runtimeRemove: "卸载组件",
+			runtimeCancel: "取消安装",
+			runtimeKeep: "保留",
+			runtimeConfirmRemove: "确认卸载",
+			runtimeRefresh: "刷新状态",
+			runtimeActive: "有 Codex 子任务正在运行，结束后才能安装或卸载。",
+			runtimeConfirm: "卸载后将切回 DSH 子任务。普通订阅聊天、生图、登录和草稿保留。确定卸载可选组件？",
+			runtimeFailed: "操作未完成。请刷新状态后重试；详细原因可在 DSH 插件管理中查看。",
+			runtimeBuildBlocked: "DSH 拦截了依赖安装脚本。请在官方插件管理中审核后再安装。",
+			runtimeCancelled: "安装已取消，可重新安装。",
+			runtimeUnavailable: "当前宿主未提供组件管理接口，请更新 DSH 或按说明手动管理。",
+			runtimeInstallHint: "此处只管理官方 Codex 子任务组件，由 DSH 负责安装与卸载。安装后不会自动开启子任务；仅切回 DSH 不会卸载组件。",
 			compactionTitle: "云端压缩",
 			compaction_dsh: "关闭",
 			compaction_cloud: "开启",
@@ -4514,6 +4536,11 @@ window.__ModuleLoader__.load({
 			connectionHint: "默认 SSE。WebSocket 实验性复用连接与上下文传输；连接失败可回退 SSE。下次请求生效，不扩大上下文容量。",
 			subagentBackendHint: "Codex 复用订阅登录和工作区权限；默认继承当前订阅模型。开启 DSH 子任务模型选择并新建会话后，可在聊天中指定允许的订阅模型与推理档位；非订阅会话需指定。共享上下文子任务仍用 DSH。",
 			subagentBackendUnavailable: "当前宿主缺少子代理服务，请更新 DSH。",
+			subagentRuntimeMissing: "尚未准备 Codex 子任务运行时，仅影响此选项。普通订阅对话无需安装。",
+			subagentRuntimePrepare: "准备方法（含离线说明）",
+			subagentRuntimeInstalled: "已检测到 Codex 子任务组件；启动时会检查可执行文件。",
+			subagentRuntimeManage: "安装、卸载与存储",
+			subagentRuntimeCacheHint: "卸载后安装缓存可能仍保留，由 DSH 或 Portable 统一管理。此处不会删除登录、草稿或生成图片。",
 			sketchRecovered: "已恢复未保存草稿",
 			sketchRecoveryFailed: "恢复检查点保存失败，请手动保存或导出草稿。",
 			sketchStorageBlocked: "草稿正被其他窗口占用，请关闭其他草图窗口后重试。",
@@ -4930,6 +4957,24 @@ window.__ModuleLoader__.load({
 			imageRemoveAnnotation: "删除标注"
 		};
 		const en = {
+			runtimeLoading: "Checking component…",
+			runtimeRestart: "Component changed. Restart DSH before using it.",
+			runtime_installing: "Installing through DSH…",
+			runtime_removing: "Uninstalling through DSH…",
+			runtime_applying: "Applying installation…",
+			runtimeInstall: "Install component",
+			runtimeRemove: "Uninstall component",
+			runtimeCancel: "Cancel installation",
+			runtimeKeep: "Keep",
+			runtimeConfirmRemove: "Confirm uninstall",
+			runtimeRefresh: "Refresh status",
+			runtimeActive: "Codex subtasks are running. Wait for them to finish before installing or uninstalling.",
+			runtimeConfirm: "Uninstalling switches subtasks back to DSH. Subscription chat, images, sign-in and sketches stay available. Uninstall this optional component?",
+			runtimeFailed: "The operation did not complete. Refresh and retry; see DSH plugin management for details.",
+			runtimeBuildBlocked: "DSH blocked dependency build scripts. Review them in the official plugin manager before installing.",
+			runtimeCancelled: "Installation cancelled. You can try again.",
+			runtimeUnavailable: "This host has no component management interface. Update DSH or use the manual instructions.",
+			runtimeInstallHint: "DSH installs and removes the official Codex subtask component here. Installation does not enable subtasks automatically. Switching to DSH alone does not uninstall it.",
 			compactionTitle: "Cloud compaction",
 			compaction_dsh: "Off",
 			compaction_cloud: "On",
@@ -4942,6 +4987,11 @@ window.__ModuleLoader__.load({
 			connectionHint: "SSE by default. Experimental WebSocket reuses connections and context transfers and can fall back to SSE on connection failure. Applies to the next request; context limits stay the same.",
 			subagentBackendHint: "Codex reuses subscription login and workspace permissions, inheriting the current subscription model by default. Enable DSH subtask model selection and start a new session to request an allowed subscription model and reasoning effort in chat; other model sessions require an explicit selection. Shared-context subtasks stay in DSH.",
 			subagentBackendUnavailable: "Subagent services are unavailable. Update DSH to use this option.",
+			subagentRuntimeMissing: "Codex subtask runtime is not prepared. Subscription chat does not require it.",
+			subagentRuntimePrepare: "Setup and offline instructions",
+			subagentRuntimeInstalled: "Codex subtask component detected; its executable is checked on startup.",
+			subagentRuntimeManage: "Install, uninstall and storage",
+			subagentRuntimeCacheHint: "Package caches may remain after uninstalling. DSH or Portable manages them centrally. Sign-in, sketches and generated images are not deleted here.",
 			sketchRecovered: "Unsaved sketch recovered",
 			sketchRecoveryFailed: "Recovery checkpoint failed. Save or export your draft.",
 			sketchStorageBlocked: "Draft storage is in use. Close other sketch windows and retry.",
@@ -5576,6 +5626,14 @@ window.__ModuleLoader__.load({
 @container (max-width:480px){.codexSubscriptionAccountRow,.codexSubscriptionSectionHead{align-items:flex-start;flex-direction:column}
 .codexSubscriptionActions{width:100%}
 .codexSubscriptionSearchChoices{grid-template-columns:1fr}}
+.codexSubscriptionRuntime{font-size:12px;line-height:1.6;margin-top:12px;color:var(--dsw-alias-label-secondary)}
+.codexSubscriptionRuntime summary{cursor:pointer;width:fit-content;color:var(--dsw-alias-label-primary);border-radius:6px}
+.codexSubscriptionRuntime summary:focus-visible{outline:2px solid currentColor;outline-offset:4px}
+.codexSubscriptionRuntime p{margin:8px 0}
+.codexSubscriptionRuntime .codexSubscriptionPreference{flex-wrap:wrap;align-items:flex-start}
+.codexSubscriptionRuntime .codexSubscriptionPreference>span{flex:1;min-width:180px;font-size:12px;color:var(--dsw-alias-label-secondary)}
+.codexSubscriptionRuntime button{flex-shrink:0;white-space:nowrap}
+.codexSubscriptionRuntime code{display:block;overflow-wrap:anywhere;padding:8px 10px;border:1px solid var(--dsw-alias-border-l2);border-radius:8px;user-select:text}
 @media(max-width:640px){.codexSubscriptionCard{padding:14px}}
 `;
 		//#endregion
@@ -6712,6 +6770,7 @@ window.__ModuleLoader__.load({
 			let modelRefreshStarted = false;
 			let disposed = false;
 			let subagentBackendAvailable = false;
+			let subagentRuntimeInstalled = false;
 			const sameModels = (left, right) => left.length === right.length && left.every((model, index) => JSON.stringify(model) === JSON.stringify(right[index]));
 			const nativeSnapshot = () => scope.getSnapshot();
 			const read = () => {
@@ -6729,6 +6788,7 @@ window.__ModuleLoader__.load({
 					compactionMode: value?.compactionMode === "cloud" ? "cloud" : "dsh",
 					subagentBackend: value?.subagentBackend === "codex" ? "codex" : "dsh",
 					subagentBackendAvailable,
+					subagentRuntimeInstalled,
 					quickQuotaMode: normalizeQuickQuotaMode(value?.[QUICK_QUOTA_MODE_FIELD], value?.[LEGACY_QUICK_QUOTA_FIELD]),
 					searchProvider: normalizeSearchProvider(value?.[SEARCH_PROVIDER_FIELD]),
 					speedMode: normalizeSpeedMode(value?.[SPEED_MODE_FIELD]),
@@ -6763,6 +6823,7 @@ window.__ModuleLoader__.load({
 			});
 			const acceptFallback = (value) => {
 				subagentBackendAvailable = value?.subagentBackendAvailable === true;
+				subagentRuntimeInstalled = value?.subagentRuntimeInstalled === true;
 				if (!modelRefreshStarted) {
 					contextModels = Array.isArray(value?.contextModels) ? value.contextModels : [];
 					verbosityModels = Array.isArray(value?.verbosityModels) ? value.verbosityModels : [];
@@ -6800,6 +6861,7 @@ window.__ModuleLoader__.load({
 					const value = unwrap(await rpc.call(CHANNEL, "preferences/status", {}));
 					if (current !== generation || disposed) return;
 					subagentBackendAvailable = value?.subagentBackendAvailable === true;
+					subagentRuntimeInstalled = value?.subagentRuntimeInstalled === true;
 					if (nativeSnapshot().status === "ready") {
 						if (!modelRefreshStarted) {
 							contextModels = Array.isArray(value?.contextModels) ? value.contextModels : [];
@@ -7172,12 +7234,19 @@ window.__ModuleLoader__.load({
 		//#region src/sidebar-quota.js
 		const isDisplayableWindow = (window) => Number.isFinite(window?.remainingPercent) && window.remainingPercent >= 0 && window.remainingPercent <= 100 && Number.isFinite(window?.windowSeconds) && window.windowSeconds > 0;
 		const normalized = (value) => String(value ?? "").toLocaleLowerCase("en-US").replaceAll(/[^a-z0-9]+/gu, "-");
-		const limitMatchesModel = (limit, model) => {
+		const exactModelLimit = (limit, model) => {
+			const id = normalized(model);
+			return id.length > 0 && [limit?.id, limit?.name].some((value) => typeof value === "string" && normalized(value) === id);
+		};
+		const limitMatchesModel = (limit, model, hasExactLimit) => {
+			if (hasExactLimit) return exactModelLimit(limit, model);
+			if (normalized(model) === "gpt-reserve") return false;
 			if (/\bspark\b/u.test(normalized(model))) return /\bspark\b/u.test(normalized(`${limit?.id ?? ""} ${limit?.name ?? ""}`));
 			return limit?.id === "codex";
 		};
 		function selectModelQuotaWindows(usage, model) {
-			return (Array.isArray(usage?.rateLimits) ? usage.rateLimits.filter((limit) => limitMatchesModel(limit, model) && Array.isArray(limit.windows)).flatMap((limit) => limit.windows).filter(isDisplayableWindow) : []).map((selected) => ({
+			const hasExactLimit = Array.isArray(usage?.rateLimits) && usage.rateLimits.some((limit) => exactModelLimit(limit, model));
+			return (Array.isArray(usage?.rateLimits) ? usage.rateLimits.filter((limit) => limitMatchesModel(limit, model, hasExactLimit) && Array.isArray(limit.windows)).flatMap((limit) => limit.windows).filter(isDisplayableWindow) : []).map((selected) => ({
 				remainingPercent: selected.remainingPercent,
 				windowSeconds: selected.windowSeconds,
 				...Number.isSafeInteger(selected.resetsAt) ? { resetsAt: selected.resetsAt } : {},
@@ -7186,7 +7255,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.js
-		const PACKAGE_VERSION = "2.1.3-beta.1";
+		const PACKAGE_VERSION = "2.1.3";
 		//#endregion
 		//#region src/client-recovery.js
 		async function recoveryCall(rpc, endpoint, payload = {}, timeoutMs = 1e4) {
@@ -8043,6 +8112,158 @@ window.__ModuleLoader__.load({
 			] });
 		}
 		//#endregion
+		//#region src/client-runtime-management.jsx
+		function RuntimeManagement({ rpc, preference, t }) {
+			const [state, setState] = (0, react.useState)();
+			const [error, setError] = (0, react.useState)(false);
+			const [sending, setSending] = (0, react.useState)(false);
+			const [confirm, setConfirm] = (0, react.useState)(false);
+			const alive = (0, react.useRef)(false);
+			const busy = [
+				"installing",
+				"removing",
+				"applying"
+			].includes(state?.phase);
+			const read = async () => {
+				try {
+					const result = await rpc.call(CHANNEL, "runtime/status", {});
+					if (!alive.current) return;
+					if (!result.ok) {
+						setError(true);
+						return;
+					}
+					setState(result.value);
+					setError(false);
+				} catch {
+					if (alive.current) setError(true);
+				}
+			};
+			(0, react.useEffect)(() => {
+				alive.current = true;
+				read();
+				return () => {
+					alive.current = false;
+				};
+			}, [rpc]);
+			(0, react.useEffect)(() => {
+				if (!busy) return;
+				let stopped = false, timer;
+				const poll = async () => {
+					await read();
+					if (!stopped) timer = setTimeout(poll, 1500);
+				};
+				timer = setTimeout(poll, 1500);
+				return () => {
+					stopped = true;
+					clearTimeout(timer);
+				};
+			}, [busy, rpc]);
+			const act = async (action) => {
+				if (sending) return;
+				setSending(true);
+				setError(false);
+				setConfirm(false);
+				try {
+					const result = await rpc.call(CHANNEL, `runtime/${action}`, {});
+					if (!alive.current) return;
+					if (!result.ok) {
+						await read();
+						if (alive.current) setError(true);
+						return;
+					}
+					setState(result.value);
+					if (action === "remove") preference.load();
+				} catch {
+					if (alive.current) setError(true);
+				} finally {
+					if (alive.current) setSending(false);
+				}
+			};
+			const locked = sending || busy || state?.restartRequired || state?.active > 0;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				className: "codexSubscriptionRuntime",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						className: "codexSubscriptionPreference",
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+							role: "status",
+							children: t(!state ? "runtimeLoading" : state.restartRequired ? "runtimeRestart" : busy ? `runtime_${state.phase}` : state.installed ? "subagentRuntimeInstalled" : "subagentRuntimeMissing")
+						}), state?.available ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+							type: "button",
+							variant: "outline",
+							disabled: locked || state.installed && !state.removable,
+							onClick: () => state.installed ? setConfirm(true) : void act("install"),
+							children: t(state.installed ? "runtimeRemove" : "runtimeInstall")
+						}) : null]
+					}),
+					state?.active > 0 ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("runtimeActive") }) : null,
+					busy && state.phase === "installing" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+						type: "button",
+						variant: "outline",
+						disabled: sending,
+						onClick: () => {
+							act("cancel");
+						},
+						children: t("runtimeCancel")
+					}) : null,
+					confirm ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						role: "group",
+						"aria-label": t("runtimeRemove"),
+						children: [
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("runtimeConfirm") }),
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+								type: "button",
+								variant: "outline",
+								onClick: () => setConfirm(false),
+								children: t("runtimeKeep")
+							}),
+							" ",
+							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+								type: "button",
+								variant: "outline",
+								disabled: locked,
+								onClick: () => {
+									act("remove");
+								},
+								children: t("runtimeConfirmRemove")
+							})
+						]
+					}) : null,
+					error || state?.phase === "failed" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "alert",
+						children: t(state?.error === "build-blocked" ? "runtimeBuildBlocked" : "runtimeFailed")
+					}) : null,
+					state?.phase === "cancelled" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						role: "status",
+						children: t("runtimeCancelled")
+					}) : null,
+					!busy ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.Button, {
+						type: "button",
+						variant: "outline",
+						disabled: sending,
+						onClick: () => {
+							read();
+							preference.load();
+						},
+						children: t("runtimeRefresh")
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("details", { children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("summary", { children: t("subagentRuntimeManage") }),
+						state && !state.available ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("runtimeUnavailable") }) : null,
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("runtimeInstallHint") }),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", { children: "@deepseek-ai/dsh-subagent-codex@0.1.5-rc.2" }),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", { children: t("subagentRuntimeCacheHint") }),
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+							href: "https://github.com/WSL043/dsh-codex-subscription/blob/main/README.md#codex-subtask-runtime",
+							target: "_blank",
+							rel: "noreferrer",
+							children: t("subagentRuntimePrepare")
+						})
+					] })
+				]
+			});
+		}
+		//#endregion
 		//#region src/context-draft-state.js
 		const hasOwn = (value, key) => Object.prototype.hasOwnProperty.call(value ?? {}, key);
 		/**
@@ -8314,7 +8535,7 @@ window.__ModuleLoader__.load({
 				]
 			});
 		}
-		function PreferencesCard({ preference, t, section = "display" }) {
+		function PreferencesCard({ preference, rpc, t, section = "display" }) {
 			const snapshot = usePreferenceSnapshot(preference);
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 				className: section === "advanced" ? "codexSubscriptionAdvancedPreferences" : "codexSubscriptionCard codexSubscriptionPreferencesCard",
@@ -8411,10 +8632,10 @@ window.__ModuleLoader__.load({
 							})]
 						})
 					}),
-					/* @__PURE__ */ (0, react_jsx_runtime.jsx)("section", {
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 						className: "codexSubscriptionCard codexSubscriptionPreferencesCard",
 						"aria-label": t("subagentBackendTitle"),
-						children: /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 							className: "codexSubscriptionPreference",
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 								className: "codexSubscriptionPreferenceCopy",
@@ -8440,14 +8661,18 @@ window.__ModuleLoader__.load({
 										type: "radio",
 										name: "codex-subagent-backend",
 										checked: snapshot.subagentBackend === value,
-										disabled: !snapshot.writable || !snapshot.subagentBackendAvailable,
+										disabled: !snapshot.writable || !snapshot.subagentBackendAvailable || value === "codex" && !snapshot.subagentRuntimeInstalled,
 										onChange: () => {
 											preference.set({ subagentBackend: value });
 										}
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: t(`subagentBackend_${value}`) })]
 								}, value))
 							})]
-						})
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(RuntimeManagement, {
+							rpc,
+							preference,
+							t
+						})]
 					})
 				] }) : /* @__PURE__ */ (0, react_jsx_runtime.jsxs)(react_jsx_runtime.Fragment, { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(QuickQuotaPreference, {
 					preference,
@@ -9493,6 +9718,7 @@ window.__ModuleLoader__.load({
 								preference
 							}, resetKey),
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PreferencesCard, {
+								rpc,
 								preference,
 								t
 							})
@@ -9505,6 +9731,7 @@ window.__ModuleLoader__.load({
 						hidden: tab !== "advanced",
 						children: [
 							/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PreferencesCard, {
+								rpc,
 								preference,
 								t,
 								section: "advanced"

package/lib/index.js

@@ -1,3 +1,4 @@
+import { createRequire } from "node:module";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { closeOpenAICodexWebSocketSessions, resetOpenAICodexWebSocketDebugStats } from "@earendil-works/pi-ai/api/openai-codex-responses";
 import { execFile, spawn } from "node:child_process";
@@ -9,6 +10,9 @@ import { HttpsProxyAgent } from "https-proxy-agent";
 import WebSocket from "ws";
 import { clientRequestSchema } from "@deepseek-ai/dsh-client-connection";
 import { lstat, mkdir, open, readFile, rename, rm, stat } from "node:fs/promises";
+import { constants, readFileSync } from "node:fs";
+import { dirname, join, resolve } from "node:path";
+import { pathToFileURL } from "node:url";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 import * as dshCredentials from "@deepseek-ai/dsh-credentials";
 import { dshHomePath, resolveDshHome } from "@deepseek-ai/dsh-home-paths";
@@ -18,8 +22,6 @@ import z from "@deepseek-ai/schemastery";
 import { openaiCodexProvider as createOpenAICodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
 import { createModels } from "@earendil-works/pi-ai";
 import { WebError } from "@deepseek-ai/dsh-web";
-import { constants } from "node:fs";
-import { dirname, join, resolve } from "node:path";
 //#region src/image-models.js
 const DEFAULT_IMAGE_MODEL = "gpt-image-2";
 const IMAGE_MODELS = Object.freeze({
@@ -875,6 +877,10 @@ const RPC_ENDPOINTS = Object.freeze([
 	"preferences/status",
 	"preferences/models",
 	"preferences/update",
+	"runtime/status",
+	"runtime/install",
+	"runtime/remove",
+	"runtime/cancel",
 	"reset-credit/inspect",
 	"reset-credit/prepare",
 	"reset-credit/consume",
@@ -1048,6 +1054,45 @@ function authenticatedSubagentChild(child, { Transport, getTokens, thread, signa
 	} });
 }
 //#endregion
+//#region src/subagent-runtime.js
+const SUBAGENT_RUNTIME_PACKAGE = "@deepseek-ai/dsh-subagent-codex";
+const SUBAGENT_RUNTIME_VERSION = "0.1.5-rc.2";
+const require = createRequire(import.meta.url);
+const execute = promisify(execFile);
+function inspectSubagentRuntime(resolve = require.resolve) {
+	try {
+		const manifestPath = resolve(`${SUBAGENT_RUNTIME_PACKAGE}/package.json`);
+		if (JSON.parse(readFileSync(manifestPath, "utf8")).version !== "0.1.5-rc.2") return { installed: false };
+		return { installed: true };
+	} catch {
+		return { installed: false };
+	}
+}
+async function loadSubagentRuntime({ resolve: resolve$1 = require.resolve, run = execute, importModule = (url) => import(url) } = {}) {
+	if (!inspectSubagentRuntime(resolve$1).installed) throw new Error("Codex subtask runtime is not prepared");
+	const entry = resolve$1(SUBAGENT_RUNTIME_PACKAGE);
+	const providerRequire = createRequire(entry);
+	const codexManifestPath = providerRequire.resolve("@openai/codex/package.json");
+	const codex = JSON.parse(readFileSync(codexManifestPath, "utf8"));
+	if (codex.version !== "0.153.4" || typeof codex.bin?.codex !== "string") throw new Error("Codex subtask runtime version is unsupported");
+	const wrapper = resolve(dirname(codexManifestPath), codex.bin.codex);
+	try {
+		const { stdout } = await run(process.execPath, [wrapper, "--version"], {
+			timeout: 1e4,
+			maxBuffer: 4096,
+			windowsHide: true
+		});
+		if (stdout.trim() !== "codex-cli 0.153.4") throw new Error("Unexpected CLI version");
+	} catch {
+		throw new Error("Codex subtask runtime is incomplete; prepare it for this platform");
+	}
+	const [official, { JsonRpcLineTransport: Transport }] = await Promise.all([importModule(pathToFileURL(entry).href), importModule(pathToFileURL(providerRequire.resolve("@deepseek-ai/dsh-sdk-protocol")).href)]);
+	return {
+		official,
+		Transport
+	};
+}
+//#endregion
 //#region src/subagent-backend.js
 const SUBAGENT_PROVIDER = "codex-subscription-subagent";
 const MODES = /* @__PURE__ */ new Set([
@@ -1086,7 +1131,7 @@ function subagentThreadPolicy(parent, policy, requested = {}) {
 	};
 }
 /** Reuse the official DSH process/turn provider; keep only subscription auth here. */
-function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refresh, loadRuntime }) {
+function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refresh, loadRuntime, maintenance = () => false }) {
 	let runtime;
 	const load = () => runtime ??= loadRuntime().catch((error) => {
 		runtime = void 0;
@@ -1107,6 +1152,7 @@ function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refre
 			inheritsParentContext: false,
 			async start(request) {
 				if (disposed) throw new Error("Codex subagent is unavailable");
+				if (maintenance()) throw new Error("Codex subtask component is being changed; restart DSH after completion");
 				const controller = new AbortController();
 				active.add(controller);
 				const signal = AbortSignal.any([request.signal, controller.signal]);
@@ -1178,7 +1224,11 @@ function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refre
 				}
 			}
 		},
-		prepare: load,
+		activeCount: () => active.size,
+		prepare: () => {
+			if (maintenance()) return Promise.reject(/* @__PURE__ */ new Error("Restart DSH after changing the Codex subtask component"));
+			return load();
+		},
 		dispose() {
 			disposed = true;
 			for (const controller of active) controller.abort();
@@ -1252,11 +1302,104 @@ function createSubagentBackendSwitcher({ entries, prepare, persist }) {
 		}
 	};
 }
-async function loadSubagentRuntime() {
-	const [official, { JsonRpcLineTransport: Transport }] = await Promise.all([import("@deepseek-ai/dsh-subagent-codex"), import("@deepseek-ai/dsh-sdk-protocol")]);
+//#endregion
+//#region src/runtime-management.js
+function createRuntimeManagement({ manager, inspect, active, selectDsh }) {
+	let operation;
+	let state = {
+		phase: "idle",
+		restartRequired: false
+	};
+	const supported = (value) => [
+		"listBundles",
+		"installBundle",
+		"removeBundle",
+		"cancelInstall"
+	].every((key) => typeof value?.[key] === "function");
+	const status = async () => {
+		const host = manager();
+		let bundle;
+		let available = supported(host);
+		try {
+			if (available) bundle = (await host.listBundles()).find((value) => value.name === SUBAGENT_RUNTIME_PACKAGE);
+		} catch {
+			available = false;
+		}
+		return {
+			...state,
+			available,
+			installed: inspect().installed,
+			removable: available && bundle?.installed === true && !bundle.readOnlyReason,
+			active: active()
+		};
+	};
+	const start = async (action) => {
+		if (!["install", "remove"].includes(action)) throw Error("invalid-action");
+		if (operation) throw Error("busy");
+		if (state.restartRequired) throw Error("restart-required");
+		if (active() > 0) throw Error("active-tasks");
+		const host = manager();
+		if (!supported(host)) throw Error("unavailable");
+		const requestId = randomUUID();
+		const current = {
+			action,
+			requestId,
+			host
+		};
+		operation = current;
+		state = {
+			phase: action === "install" ? "installing" : "removing",
+			restartRequired: false
+		};
+		current.done = (async () => {
+			try {
+				if (action === "remove") {
+					const bundle = (await host.listBundles()).find((value) => value.name === SUBAGENT_RUNTIME_PACKAGE);
+					if (!bundle?.installed || bundle.readOnlyReason) throw Error("not-removable");
+					await selectDsh();
+				}
+				const result = action === "install" ? await host.installBundle(`${SUBAGENT_RUNTIME_PACKAGE}@${SUBAGENT_RUNTIME_VERSION}`, {
+					enabled: false,
+					requestId
+				}) : await host.removeBundle(SUBAGENT_RUNTIME_PACKAGE);
+				if (result.application === "cancelled") state = {
+					phase: "cancelled",
+					restartRequired: false
+				};
+				else if (["applied", "restart-required"].includes(result.application)) state = {
+					phase: "done",
+					restartRequired: true
+				};
+				else state = {
+					phase: "failed",
+					restartRequired: false,
+					error: result.packageResult?.kind ?? result.error?.code ?? "operation-error"
+				};
+			} catch (error) {
+				state = {
+					phase: "failed",
+					restartRequired: false,
+					error: error.message === "not-removable" ? "not-removable" : "operation-error"
+				};
+			} finally {
+				operation = void 0;
+			}
+		})();
+		return status();
+	};
 	return {
-		official,
-		Transport
+		status,
+		start,
+		blocked: () => operation !== void 0 || state.restartRequired,
+		progress(value) {
+			if (operation?.action === "install" && value.requestId === operation.requestId && value.phase === "applying") state.phase = "applying";
+		},
+		async cancel() {
+			const current = operation;
+			if (current?.action !== "install") return status();
+			if ((await current.host.cancelInstall(current.requestId)).status === "cancelled") await current.done;
+			return status();
+		}
 	};
 }
 //#endregion
@@ -2644,7 +2787,7 @@ function openaiCodexSubscriptionProvider({ resolveSpeedMode = () => void 0, reso
 Object.freeze(["0.82.1", "0.85.1"]);
 //#endregion
 //#region src/version.js
-const PACKAGE_VERSION = "2.1.3-beta.1";
+const PACKAGE_VERSION = "2.1.3";
 const USER_AGENT = `dsh-codex-subscription/${PACKAGE_VERSION}`;
 //#endregion
 //#region src/model-catalog.js
@@ -2689,7 +2832,8 @@ function unsupportedCapabilities(value) {
 function visibleModel(value) {
 	if (!record$4(value)) return void 0;
 	const id = nonEmpty$2(value.slug);
-	if (id === void 0 || value.visibility !== "list") return void 0;
+	const reserve = id === "gpt-reserve" && ["list", "hide"].includes(value.visibility);
+	if (id === void 0 || value.visibility !== "list" && !reserve) return void 0;
 	const supported = Array.isArray(value.supported_reasoning_levels) ? value.supported_reasoning_levels : [];
 	const input = Array.isArray(value.input_modalities) ? value.input_modalities.filter((item) => ["text", "image"].includes(item)) : ["text", "image"];
 	const unsupported = unsupportedCapabilities({
@@ -2699,7 +2843,7 @@ function visibleModel(value) {
 	return {
 		...Object.keys(unsupported).length ? { unsupported } : {},
 		id,
-		name: nonEmpty$2(value.display_name) ?? id,
+		name: reserve ? "GPT-Reserve (Experimental)" : nonEmpty$2(value.display_name) ?? id,
 		description: nonEmpty$2(value.description),
 		priority: Number.isFinite(value.priority) ? value.priority : 0,
 		input: input.length > 0 ? input : ["text"],
@@ -2719,7 +2863,7 @@ function visibleModel(value) {
 function parseOfficialModelCatalog(value) {
 	if (!record$4(value) || !Array.isArray(value.models)) throw new Error("Codex returned a malformed model catalog");
 	const seen = /* @__PURE__ */ new Set();
-	return value.models.map(visibleModel).filter((model) => model !== void 0 && !seen.has(model.id) && seen.add(model.id)).sort((left, right) => right.priority - left.priority);
+	return value.models.map(visibleModel).filter((model) => model !== void 0 && !seen.has(model.id) && seen.add(model.id)).sort((left, right) => Number(left.id === "gpt-reserve") - Number(right.id === "gpt-reserve") || right.priority - left.priority);
 }
 function mergeModel(baseModels, remote) {
 	const base = baseModels.find((model) => model.id === remote.id) ?? baseModels.find((model) => model.id !== "gpt-5.3-codex-spark") ?? baseModels[0];
@@ -4693,8 +4837,31 @@ const publicError = (code, message) => ({
 		details: { issues: [] }
 	}
 });
-function createSubscriptionRpcHandler({ authHandler, usageReader, resetCreditService, preferences, diagnosticsReader, modelCatalog, originalImages, resolveInheritedOriginal, closeConnections }) {
+function createSubscriptionRpcHandler({ authHandler, usageReader, resetCreditService, preferences, runtimeManagement, diagnosticsReader, modelCatalog, originalImages, resolveInheritedOriginal, closeConnections }) {
 	return async (endpoint, payload, signal) => {
+		if ([
+			"runtime/status",
+			"runtime/install",
+			"runtime/remove",
+			"runtime/cancel"
+		].includes(endpoint)) try {
+			signal.throwIfAborted();
+			if (!runtimeManagement) return publicError("unavailable", "Runtime management is unavailable");
+			const action = endpoint.split("/")[1];
+			return {
+				ok: true,
+				value: action === "status" ? await runtimeManagement.status() : action === "cancel" ? await runtimeManagement.cancel() : await runtimeManagement.start(action)
+			};
+		} catch (error) {
+			if (signal.aborted) throw error;
+			const code = [
+				"busy",
+				"active-tasks",
+				"restart-required",
+				"unavailable"
+			].includes(error.message) ? error.message : "operation-error";
+			return publicError(code, code);
+		}
 		if (endpoint === "image/original/chunk") try {
 			signal.throwIfAborted();
 			if (typeof payload?.sessionId !== "string" || payload.sessionId.length === 0 || payload.sessionId.length > 512 || typeof payload?.assetId !== "string" || !ORIGINAL_IMAGE_ID_PATTERN.test(payload.assetId) || !Number.isSafeInteger(payload?.offset) || payload.offset < 0 || payload.offset % 4194304 !== 0) return publicError("invalid-input", "Invalid original image request");
@@ -4915,6 +5082,16 @@ function apply(ctx) {
 	const baseProvider = createOpenAICodexProvider();
 	let resolveAuth = async () => void 0;
 	let subagentBackend;
+	const runtimeManagement = createRuntimeManagement({
+		manager: () => ctx.get?.("pluginManager"),
+		inspect: inspectSubagentRuntime,
+		active: () => subagentBackend?.activeCount() ?? 0,
+		selectDsh: async () => {
+			if (subagentBackend) await subagentBackend.select("dsh");
+			else await settings.update({ subagentBackend: "dsh" });
+		}
+	});
+	ctx.effect(() => ctx.on?.("plugin-manager/install-state", (value) => runtimeManagement.progress(value)));
 	const modelCatalog = createOfficialModelCatalog({
 		getAuth: (options) => resolveAuth(options),
 		readCredential: (options) => store.read(PROVIDER, options),
@@ -4953,6 +5130,7 @@ function apply(ctx) {
 			connectionMode: settings.get().connectionMode ?? "sse",
 			subagentBackend: settings.get().subagentBackend ?? "dsh",
 			subagentBackendAvailable: subagentBackend !== void 0,
+			subagentRuntimeInstalled: inspectSubagentRuntime().installed,
 			...readCapabilitySettings(settings.get()),
 			[QUICK_QUOTA_MODE_FIELD]: normalizeQuickQuotaMode(settings.get()[QUICK_QUOTA_MODE_FIELD], settings.get()[LEGACY_QUICK_QUOTA_FIELD]),
 			[SEARCH_PROVIDER_FIELD]: settings.get()[SEARCH_PROVIDER_FIELD],
@@ -5019,7 +5197,8 @@ function apply(ctx) {
 			resolveAuth,
 			store,
 			refresh: (credential) => network.run("oauth", () => baseProvider.auth.oauth.refresh(credential)),
-			loadRuntime: loadSubagentRuntime
+			loadRuntime: loadSubagentRuntime,
+			maintenance: runtimeManagement.blocked
 		});
 		scoped.subagents.registerProvider(instance.provider);
 		const switcher = createSubagentBackendSwitcher({
@@ -5040,7 +5219,10 @@ function apply(ctx) {
 				throw error;
 			}
 		};
-		subagentBackend = { select };
+		subagentBackend = {
+			select,
+			activeCount: instance.activeCount
+		};
 		const sync = (value) => {
 			const mode = value.subagentBackend ?? "dsh";
 			if (mode !== requested) select(mode).catch(() => scoped.logger.warn("Could not switch the subscription subagent backend"));
@@ -5185,6 +5367,7 @@ function apply(ctx) {
 		usageReader,
 		resetCreditService,
 		preferences,
+		runtimeManagement,
 		diagnosticsReader: () => createSubscriptionDiagnostics({
 			auth,
 			preferences,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-codex-subscription",
-  "version": "2.1.3-beta.1",
+  "version": "2.1.3",
   "description": "Use ChatGPT and Codex subscriptions in DeepSeek Harness with OAuth, quota, safe resets, web search, images, and Fast mode",
   "type": "module",
   "main": "./lib/index.js",
@@ -92,7 +92,8 @@
     "@deepseek-ai/schemastery": "3.18.1 || ^3.18.2",
     "@earendil-works/pi-ai": "0.82.1 || 0.85.1",
     "react": "^18.2.0",
-    "react-dom": "^18.2.0"
+    "react-dom": "^18.2.0",
+    "@deepseek-ai/dsh-subagent-codex": "0.1.5-rc.2"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",
@@ -120,16 +121,18 @@
     "fake-indexeddb": "6.2.5",
     "react": "18.3.1",
     "react-dom": "18.3.1",
-    "tsdown": "0.22.2"
+    "tsdown": "0.22.2",
+    "@deepseek-ai/dsh-subagent-codex": "0.1.5-rc.2"
   },
   "dependencies": {
     "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2",
     "https-proxy-agent": "7.0.6",
     "ws": "8.21.3"
   },
-  "optionalDependencies": {
-    "@deepseek-ai/dsh-sdk-protocol": "0.1.5-rc.2",
-    "@deepseek-ai/dsh-subagent-codex": "0.1.5-rc.2"
+  "peerDependenciesMeta": {
+    "@deepseek-ai/dsh-subagent-codex": {
+      "optional": true
+    }
   },
   "scripts": {
     "build": "tsdown --config tsdown.config.mjs",