dsh-codex-subscription 2.2.6 → 2.2.7

package/lib/client.js

@@ -4755,7 +4755,7 @@ window.__ModuleLoader__.load({
 			streamIdleTimeout_10: "10 分钟",
 			streamIdleTimeout_20: "20 分钟",
 			streamIdleTimeout_30: "30 分钟",
-			subagentBackendHint: "Codex 复用订阅登录和工作区权限；默认继承当前订阅模型。开启 DSH 子任务模型选择并新建会话后，可在聊天中指定允许的订阅模型与推理档位；非订阅会话需指定。共享上下文子任务仍用 DSH。",
+			subagentBackendHint: "Codex 复用订阅登录和工作区权限；默认继承当前订阅模型。在“插件 → 子智能体”开启模型选择并勾选允许的模型后新建会话，可在聊天中指定允许的订阅模型与推理档位；非订阅会话需指定。共享上下文子任务仍用 DSH。",
 			subagentBackendUnavailable: "当前宿主缺少子代理服务，请更新 DSH。",
 			subagentRuntimeMissing: "尚未准备 Codex 子任务运行时，仅影响此选项。普通订阅对话无需安装。",
 			subagentRuntimePrepare: "准备方法（含离线说明）",
@@ -5303,7 +5303,7 @@ window.__ModuleLoader__.load({
 			streamIdleTimeout_10: "10 min",
 			streamIdleTimeout_20: "20 min",
 			streamIdleTimeout_30: "30 min",
-			subagentBackendHint: "Codex reuses subscription login and workspace permissions, inheriting the current subscription model by default. Enable DSH subtask model selection and start a new session to request an allowed subscription model and reasoning effort in chat; other model sessions require an explicit selection. Shared-context subtasks stay in DSH.",
+			subagentBackendHint: "Codex reuses subscription login and workspace permissions, inheriting the current subscription model by default. Turn on model selection under Plugins → Subagent, tick the allowed models and start a new session to request an allowed subscription model and reasoning effort in chat; other model sessions require an explicit selection. Shared-context subtasks stay in DSH.",
 			subagentBackendUnavailable: "Subagent services are unavailable. Update DSH to use this option.",
 			subagentRuntimeMissing: "Codex subtask runtime is not prepared. Subscription chat does not require it.",
 			subagentRuntimePrepare: "Setup and offline instructions",
@@ -7636,7 +7636,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.js
-		const PACKAGE_VERSION = "2.2.6";
+		const PACKAGE_VERSION = "2.2.7";
 		//#endregion
 		//#region src/client-recovery.js
 		async function recoveryCall(rpc, endpoint, payload = {}, timeoutMs = 1e4) {

package/lib/index.js

@@ -1277,9 +1277,29 @@ function subagentThreadPolicy(parent, policy, requested = {}) {
 		modelProvider: "openai",
 		approvalPolicy: "never",
 		sandbox: policy.mode,
-		config: effort === void 0 ? {} : { model_reasoning_effort: effort }
+		config: {
+			...CHILD_FEATURES_OFF,
+			...effort === void 0 ? {} : { model_reasoning_effort: effort }
+		}
 	};
 }
+/**
+* A ChatGPT-authenticated Codex child would otherwise expose the account's
+* connected apps (calendar, site deploys, ...) and plugin installs, all
+* auto-approved. A DSH subtask gets the workspace tools only.
+*/
+const CHILD_FEATURES_OFF = Object.freeze({ features: Object.freeze(Object.fromEntries([
+	"apps",
+	"plugins",
+	"plugin_sharing",
+	"remote_plugin",
+	"tool_suggest",
+	"browser_use",
+	"browser_use_external",
+	"browser_use_full_cdp_access",
+	"computer_use",
+	"in_app_browser"
+].map((name) => [name, false]))) });
 /** Reuse the official DSH process/turn provider; keep only subscription auth here. */
 function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refresh, loadRuntime, maintenance = () => false }) {
 	let runtime;
@@ -1385,6 +1405,20 @@ function createSubscriptionSubagent({ ctx, nativeHome, resolveAuth, store, refre
 		}
 	};
 }
+/**
+* DSH 0.2 mounts Agent preset rows once, at boot and before plugins load, so the
+* Loader never lists them and `internal/config` never reaches a later listener.
+* Read them from the preset registry; a host without it simply has none.
+*/
+function presetEntries(ctx) {
+	try {
+		const generations = ctx.get?.("agentPresets")?.generations;
+		if (!(generations instanceof Map)) return [];
+		return [...generations.values()].flatMap((generation) => [...generation.mount?.tree?.entries?.() ?? []]);
+	} catch {
+		return [];
+	}
+}
 /** Change only standard independent spawn tools; leave fork/custom tools untouched. */
 function createSubagentBackendSwitcher({ entries, prepare, persist }) {
 	const originals = /* @__PURE__ */ new Map();
@@ -3010,7 +3044,7 @@ async function readSubscriptionCredentials(getAuth, readCredential, signal) {
 }
 //#endregion
 //#region src/version.js
-const PACKAGE_VERSION = "2.2.6";
+const PACKAGE_VERSION = "2.2.7";
 const USER_AGENT = `dsh-codex-subscription/${PACKAGE_VERSION}`;
 //#endregion
 //#region src/model-catalog.js
@@ -6113,7 +6147,7 @@ function apply(ctx, config = {}) {
 		});
 		scoped.subagents.registerProvider(instance.provider);
 		const switcher = createSubagentBackendSwitcher({
-			entries: () => scoped.loader.entries(),
+			entries: () => [...scoped.loader.entries(), ...presetEntries(scoped)],
 			prepare: instance.prepare,
 			persist: (mode) => settings.update({ subagentBackend: mode })
 		});

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-codex-subscription",
-  "version": "2.2.6",
+  "version": "2.2.7",
   "description": "Use ChatGPT and Codex subscriptions in DeepSeek Harness with OAuth, quota, safe resets, web search, images, and Fast mode",
   "type": "module",
   "main": "./lib/index.js",