subconscious-cli 6.0.1 → 6.2.0

package/bin/runbook/codex/run.sh

@@ -1,164 +1,16 @@
 #!/usr/bin/env bash
-# Point the `codex` CLI at the Subconscious gateway — ephemerally.
-#
-# Uses `codex -c key=value` overrides so nothing is written to ~/.codex/config.toml.
-# web_search is disabled so Codex doesn't send hosted tools the gateway can't execute.
-# The model catalog (needed to suppress the "model metadata not found" warning)
-# is written to a temp file that is cleaned up on exit.
-#
-# Subagents are ON by default. The per-model `multi_agent_version` catalog
-# field selects WHICH implementation Codex offers, not whether it offers one:
-# "v2" gives the `collaboration` namespace, and an empty value falls back to
-# the older `multi_agent_v1` namespace rather than turning subagents off.
-# Only `agents.enabled=false` actually disables them, so clearing
-# CODEX_MULTI_AGENT_VERSION does both.
+# Write the temporary Codex model catalog and merge the compaction hooks, then
+# start the codex argv subc built. Nothing is written to ~/.codex/config.toml.
 #
 # This needs a gateway that round-trips Codex's namespaced tools. Codex sends
 # them as `type: "namespace"` and resolves an incoming call by namespace plus
 # name, so a gateway that flattens the namespace for the model must restore it
 # on the way back, or every call fails with "unsupported call: spawn_agent".
-#
-# Usage:
-#   ./run.sh                         # uses GATEWAY_URL/API_KEY from ../.env
-#   ./run.sh --context-window 5000000 -- --resume
-#   ./run.sh --stream-idle-timeout 1800000  # allow a 30min silent think
-#   ./run.sh --max-subagents 12        # raise the concurrent-subagent ceiling
-#   ./run.sh --subagent-effort low     # cheaper subagents than the parent
-#   ./run.sh --external-tools          # include Codex apps/plugins (may exceed gateway tool limits)
-#
-# Config: copy ../env.example to ../.env and edit. .env is gitignored.
-# Profile env is injected by subc. A sibling .env is only used when SUBC_ENV_FILE is unset.
-#
-# Or source it to just export the env:
-#   source run.sh
 
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-source "${SCRIPT_DIR}/../model-capabilities.generated.sh"
-
-# Load shared env from SUBC_ENV_FILE, or a sibling .env / env.example.
-SHARED_ENV="${SUBC_ENV_FILE:-${SCRIPT_DIR}/../.env}"
-[[ -f "$SHARED_ENV" ]] || SHARED_ENV="${SCRIPT_DIR}/../env.example"
-if [[ -f "$SHARED_ENV" ]]; then set -a; source "$SHARED_ENV"; set +a; fi
-
-GATEWAY_URL="${GATEWAY_URL:-}"
-API_KEY="${CODEX_API_KEY:-${API_KEY:-}}"
-MODEL="${MODEL:-subconscious/glm-5.3-marathon}"
-MAX_CONCURRENT_SUBAGENTS="${MAX_CONCURRENT_SUBAGENTS:-}"
-# Effort for spawned agents, independent of the parent's. Empty inherits the
-# Codex default. See the note above SUBAGENT_ARGS for why max is a poor choice.
-#
-# Low rather than medium: the gateway rounds medium up to high for GLM, and at
-# high a subagent handed an open-ended task keeps deliberating without ever
-# writing the closing `</think>`. The turn then comes back as one long block of
-# prose with no tool call, so the agent reports success having produced no
-# files. Measured against the worker on one broad task: low closed and called a
-# tool in ~1.5k characters, high ran past 76k and was still going.
-CODEX_SUBAGENT_REASONING_EFFORT="${CODEX_SUBAGENT_REASONING_EFFORT-low}"
-EXTERNAL_TOOLS="${CODEX_EXTERNAL_TOOLS:-false}"
-CODEX_CONTEXT_WINDOW="${CODEX_CONTEXT_WINDOW:-5000000}"
-CODEX_MAX_CONTEXT_WINDOW="${CODEX_MAX_CONTEXT_WINDOW:-}"
-CODEX_AUTO_COMPACT_TOKEN_LIMIT="${CODEX_AUTO_COMPACT_TOKEN_LIMIT:-4500000}"
-CODEX_REASONING_EFFORT="${CODEX_REASONING_EFFORT:-max}"
-# How long Codex waits on a silent stream before giving up. The marathon models
-# at max reasoning effort routinely think for longer than five minutes without
-# emitting a token, and a subagent's turn is one uninterrupted think with no
-# visible progress, so the old 300s ceiling cut off work that was still running.
-CODEX_STREAM_IDLE_TIMEOUT_MS="${CODEX_STREAM_IDLE_TIMEOUT_MS:-900000}"
-# Codex gates its subagent tools on this per-model catalog field. Only "v2" is
-# honored by current releases; "v1" registers nothing. Set to empty to opt out.
-# Unset defaults to v2; an explicitly empty value opts out, so use `-` not `:-`.
-CODEX_MULTI_AGENT_VERSION="${CODEX_MULTI_AGENT_VERSION-v2}"
-
-# Parse args (only when executed, not sourced)
-PASSTHRU=()
-if [[ "${BASH_SOURCE[0]:-$0}" == "${0}" ]]; then
-  while [[ $# -gt 0 ]]; do
-    case "$1" in
-      --context-window)
-        CODEX_CONTEXT_WINDOW="${2:-}"
-        shift 2
-        ;;
-      --max-context-window)
-        CODEX_MAX_CONTEXT_WINDOW="${2:-}"
-        shift 2
-        ;;
-      --auto-compact-token-limit)
-        CODEX_AUTO_COMPACT_TOKEN_LIMIT="${2:-}"
-        shift 2
-        ;;
-      --reasoning-effort)
-        CODEX_REASONING_EFFORT="${2:-}"
-        shift 2
-        ;;
-      --stream-idle-timeout)
-        CODEX_STREAM_IDLE_TIMEOUT_MS="${2:-}"
-        shift 2
-        ;;
-      --max-subagents)
-        MAX_CONCURRENT_SUBAGENTS="${2:-}"
-        shift 2
-        ;;
-      --subagent-effort)
-        CODEX_SUBAGENT_REASONING_EFFORT="${2:-}"
-        shift 2
-        ;;
-      --external-tools)
-        EXTERNAL_TOOLS=true
-        shift
-        ;;
-      --)
-        shift
-        PASSTHRU+=("$@")
-        break
-        ;;
-      *)
-        PASSTHRU+=("$1")
-        shift
-        ;;
-    esac
-  done
-fi
-
-CODEX_MAX_CONTEXT_WINDOW="${CODEX_MAX_CONTEXT_WINDOW:-${CODEX_CONTEXT_WINDOW}}"
-case "$CODEX_REASONING_EFFORT" in
-  none|low|medium|high|max) ;;
-  *)
-    echo "error: reasoning effort must be one of: none, low, medium, high, max" >&2
-    exit 1
-    ;;
-esac
-
-DEFAULT_SUBCONSCIOUS_MODELS="subconscious/glm-5.3-marathon
-subconscious/glm-5.2
-subconscious/tim-qwen3.6-27b
-subconscious/deepseek-v4-flash-marathon
-subconscious/deepseek-v4.1-flash-marathon"
-SUPPORTED_MODELS=()
-
-add_supported_model() {
-  local model_id="$1" existing
-  [[ -n "$model_id" ]] || return 0
-  if [[ ! "$model_id" =~ ^[-A-Za-z0-9._:/+]+$ ]]; then
-    echo "error: invalid model id: $model_id" >&2
-    exit 1
-  fi
-  if [[ "${#SUPPORTED_MODELS[@]}" -gt 0 ]]; then
-    for existing in "${SUPPORTED_MODELS[@]}"; do
-      [[ "$existing" == "$model_id" ]] && return 0
-    done
-  fi
-  SUPPORTED_MODELS+=("$model_id")
-}
-
-# Keep the requested model first while exposing the complete Subconscious
-# catalog in Codex's /model picker. The CLI supplies the live gateway catalog;
-# the packaged fallback keeps the vendored runbook useful on its own.
-add_supported_model "$MODEL"
-while IFS= read -r model_id; do
-  add_supported_model "$model_id"
-done <<< "${SUBCONSCIOUS_MODELS:-$DEFAULT_SUBCONSCIOUS_MODELS}"
+source "${SCRIPT_DIR}/../lib.sh"
 
 write_model_catalog() {
   local catalog_file="$1" model_id vision_fields index=0 multi_agent_json="null"
@@ -167,8 +19,11 @@ write_model_catalog() {
   fi
   {
     printf '{\n  "models": [\n'
-    for model_id in "${SUPPORTED_MODELS[@]}"; do
-      vision_fields=""
+    # The requested model comes first; the rest fill Codex's /model picker.
+    while IFS= read -r model_id; do
+      # Codex assumes ["text", "image"] when the field is missing, so a
+      # text-only model must say so or Codex sends it images anyway.
+      vision_fields=', "input_modalities": ["text"]'
       if subc_model_supports_vision "$model_id"; then
         vision_fields=', "input_modalities": ["text", "image"]'
       fi
@@ -217,66 +72,14 @@ write_model_catalog() {
     }
 EOF
       index=$((index + 1))
-    done
+    done <<< "$SUBC_MODEL_IDS"
     printf '\n  ]\n}\n'
   } >"$catalog_file"
 }
 
-# The gateway accepts at most 128 tools per request. Codex apps and installed
-# plugins can collectively exceed that before any core coding tools are added,
-# so keep those external catalogs off for Subconscious by default. Users can
-# opt back in with --external-tools if their gateway supports a larger limit.
-EXTERNAL_TOOL_ARGS=()
-if [[ "$EXTERNAL_TOOLS" != "true" ]]; then
-  EXTERNAL_TOOL_ARGS=(
-    -c features.apps=false
-    -c features.plugins=false
-    -c apps._default.enabled=false
-  )
-fi
-
-# Bound the subagent tree when the catalog turns it on. Codex still only spawns
-# a subagent when the user asks for one; these are ceilings, not defaults.
-#
-# Codex documents no nesting-depth limit, so a subagent can spawn its own
-# subagent and the tree can grow deeper than you asked for. Capping concurrency
-# is the only lever available.
-#
-# Subagent reasoning effort is set separately from the parent's on purpose: the
-# marathon models at max effort think for many minutes without emitting a
-# token, and a subagent turn is one uninterrupted think, so inheriting max
-# makes every delegated subtask look like a hang.
-# Applied after argument parsing so --max-subagents can win. Four is a floor
-# rather than a considered limit: Codex's own default is three, and exceeding
-# either one fails the spawn outright rather than queueing it, so a run that
-# wants more should say so instead of collecting retries.
-MAX_CONCURRENT_SUBAGENTS="${MAX_CONCURRENT_SUBAGENTS:-4}"
-
-SUBAGENT_ARGS=()
-if [[ -z "$CODEX_MULTI_AGENT_VERSION" ]]; then
-  # Clearing the catalog field alone only downgrades Codex to multi-agent v1,
-  # whose tools this gateway has never been exercised against. Turn the
-  # feature off outright instead.
-  SUBAGENT_ARGS=(-c agents.enabled=false)
-else
-  SUBAGENT_ARGS=(
-    -c agents.max_concurrent_threads_per_session="${MAX_CONCURRENT_SUBAGENTS}"
-    -c agents.interrupt_message=true
-  )
-  if [[ -n "$CODEX_SUBAGENT_REASONING_EFFORT" ]]; then
-    SUBAGENT_ARGS+=(
-      -c agents.default_subagent_reasoning_effort="${CODEX_SUBAGENT_REASONING_EFFORT}"
-    )
-  fi
-fi
-
-if [[ -z "$GATEWAY_URL" || -z "$API_KEY" ]]; then
-  echo "error: GATEWAY_URL and API_KEY must be set in ../.env" >&2
-  exit 1
-fi
-
-export SUBCONSCIOUS_API_KEY="$API_KEY"
-export SUBCONSCIOUS_GATEWAY_URL="${GATEWAY_URL%/}"
+# The hooks library writes its env file from these two.
+API_KEY="$SUBCONSCIOUS_API_KEY"
+GATEWAY_URL="$SUBCONSCIOUS_GATEWAY_URL"
 
 # Merge compaction hooks without replacing ~/.codex/hooks.json or config.toml.
 # `codex_ensure_hooks` returns early when they are already current, so a launch
@@ -286,33 +89,11 @@ export SUBCONSCIOUS_GATEWAY_URL="${GATEWAY_URL%/}"
 HOOK_SRC="${SCRIPT_DIR}/hook.sh"
 # shellcheck source=hooks-lib.sh
 source "${SCRIPT_DIR}/hooks-lib.sh"
-codex_ensure_hooks best-effort || true
+codex_ensure_hooks best-effort >&2 || true
 
-# Write a temp model catalog so Codex doesn't print "model metadata not found".
-# This is the one thing that can't be passed via -c flags.
+# Without a catalog Codex prints "model metadata not found", and a catalog
+# cannot be passed with -c. Codex replaces this shell, so the file outlives it.
 CATALOG_FILE="$(mktemp -t codex-model-catalog.XXXXXX.json)"
-cleanup() { rm -f "$CATALOG_FILE"; }
-trap cleanup EXIT
 write_model_catalog "$CATALOG_FILE"
 
-# If sourced, just export env and return.
-if [[ "${BASH_SOURCE[0]:-$0}" != "${0}" ]]; then
-  export GATEWAY_URL CATALOG_FILE MAX_CONCURRENT_SUBAGENTS CODEX_SUBAGENT_REASONING_EFFORT
-  return 0 2>/dev/null || true
-fi
-
-# Ephemeral config via -c flags — nothing is written to ~/.codex/config.toml.
-exec codex \
-  -c model="${MODEL}" \
-  -c model_provider=subconscious \
-  -c model_catalog_json="${CATALOG_FILE}" \
-  -c model_reasoning_effort="${CODEX_REASONING_EFFORT}" \
-  -c web_search=disabled \
-  ${EXTERNAL_TOOL_ARGS[@]+"${EXTERNAL_TOOL_ARGS[@]}"} \
-  ${SUBAGENT_ARGS[@]+"${SUBAGENT_ARGS[@]}"} \
-  -c model_providers.subconscious.name=Subconscious \
-  -c model_providers.subconscious.base_url="${GATEWAY_URL}/v1" \
-  -c model_providers.subconscious.wire_api=responses \
-  -c model_providers.subconscious.env_key=SUBCONSCIOUS_API_KEY \
-  -c model_providers.subconscious.stream_idle_timeout_ms="${CODEX_STREAM_IDLE_TIMEOUT_MS}" \
-  ${PASSTHRU[@]+"${PASSTHRU[@]}"}
+subc_exec "{tempFile}" "$CATALOG_FILE" -- "$@"

package/bin/runbook/copilot/agent.json

@@ -0,0 +1,186 @@
+{
+  "id": "copilot",
+  "command": "copilot",
+  "aliases": ["vscode", "vs-code"],
+  "name": "GitHub Copilot (VS Code)",
+  "description": "Install the VS Code custom endpoint and Copilot conversation/compaction hooks.",
+  "protocol": "openai",
+  "homepage": "https://code.visualstudio.com/docs/copilot/overview",
+  "install": {
+    "commands": null,
+    "url": "https://code.visualstudio.com/docs/setup/copilot",
+    "method": "user",
+    "package": null,
+    "version": null,
+    "minimum_version": null,
+    "verified": true,
+    "note": "VS Code installed by the user. The provider API key is entered once in VS Code's Manage Language Models."
+  },
+  "runbook": {
+    "mode": "setup",
+    "setup_script": "install.sh",
+    "setup_actions": ["install", "status", "uninstall"]
+  },
+  "help": {
+    "usage": "subc [-p NAME] copilot [help|install|status|uninstall]",
+    "behavior": "Manages the VS Code model provider and Copilot correlation hooks.",
+    "options": [
+      ["help", "Show this help"],
+      ["install", "Install or update the provider and hooks (default action)"],
+      ["status", "Inspect the installed provider and hooks"],
+      ["uninstall", "Remove the Subconscious provider and hooks"]
+    ]
+  },
+  "prerequisites": [
+    { "command": "jq", "needed_for": "install", "required": true },
+    { "command": "curl", "needed_for": "install", "required": true }
+  ],
+  "launch": null,
+  "inputs": [
+    {
+      "name": "COPILOT_API_KEY",
+      "label": "Copilot hook API key",
+      "description": "Copilot hook credential override; blank uses API_KEY.",
+      "type": "secret"
+    },
+    {
+      "name": "COPILOT_MAX_INPUT_TOKENS",
+      "default": 5000000,
+      "label": "Maximum input tokens",
+      "description": "Input-token capacity advertised to VS Code.",
+      "type": "integer",
+      "min": 1
+    },
+    {
+      "name": "COPILOT_MAX_OUTPUT_TOKENS",
+      "default": 65536,
+      "label": "Maximum output tokens",
+      "description": "Output-token capacity advertised to VS Code.",
+      "type": "integer",
+      "min": 1
+    },
+    {
+      "name": "VSCODE_APP",
+      "label": "VS Code application",
+      "description": "Optional application override; blank enables auto-detection.",
+      "type": "choice",
+      "choices": ["", "Code", "Code - Insiders", "VSCodium"]
+    }
+  ],
+  "env": [],
+  "config": [
+    {
+      "kind": "file",
+      "path": "<VS Code user dir>/chatLanguageModels.json",
+      "lifetime": "persistent",
+      "value": {
+        "name": "Subconscious Gateway",
+        "vendor": "customendpoint",
+        "apiType": "messages",
+        "apiKey": "${input:chat.lm.secret.subconscious-gateway}",
+        "models.<id>.url": "{baseUrl}/v1/messages",
+        "models.<id>.maxInputTokens": "${COPILOT_MAX_INPUT_TOKENS}",
+        "models.<id>.maxOutputTokens": "${COPILOT_MAX_OUTPUT_TOKENS}",
+        "models.<id>.requestHeaders": {
+          "x-subconscious-client": "copilot"
+        }
+      },
+      "description": "Custom Endpoint provider, written by install.sh and merged into the user's list."
+    },
+    {
+      "kind": "file",
+      "path": "~/.copilot/hooks/subconscious-hooks.json",
+      "lifetime": "persistent",
+      "description": "UserPromptSubmit and PreCompact hooks."
+    },
+    {
+      "kind": "file",
+      "path": "~/.copilot/hooks/subconscious-hook.sh",
+      "lifetime": "persistent",
+      "description": "Hook script."
+    },
+    {
+      "kind": "file",
+      "path": "~/.copilot/subconscious-hooks.env",
+      "lifetime": "persistent",
+      "description": "SUBCONSCIOUS_GATEWAY_URL and SUBCONSCIOUS_API_KEY for the hook (mode 600)."
+    },
+    {
+      "kind": "dir",
+      "path": "~/.copilot/subconscious-compact-pending",
+      "lifetime": "persistent",
+      "description": "Pending-compaction markers written by the hook."
+    }
+  ],
+  "capabilities": {
+    "compaction": {
+      "default": "unknown",
+      "on": {
+        "set_by_subc": false,
+        "kind": null,
+        "name": null,
+        "value": null,
+        "verified": false,
+        "note": "subc only sets maxInputTokens; whether VS Code compacts from it is not confirmed here."
+      },
+      "off": {
+        "set_by_subc": false,
+        "kind": null,
+        "name": null,
+        "value": null,
+        "verified": false,
+        "note": "subc does not configure Copilot compaction."
+      },
+      "threshold": {
+        "set_by_subc": true,
+        "kind": "config-field",
+        "name": "models.<id>.maxInputTokens",
+        "value": "${COPILOT_MAX_INPUT_TOKENS}",
+        "verified": false,
+        "note": "subc sets this capacity; its effect on compaction is not confirmed here.",
+        "semantics": "window",
+        "config": "<VS Code user dir>/chatLanguageModels.json"
+      }
+    },
+    "mcp": {
+      "configured_by_subc": false,
+      "transports": null,
+      "verified": false,
+      "note": "subc configures no MCP servers."
+    },
+    "headers": [
+      {
+        "name": "x-subconscious-client",
+        "value": "copilot",
+        "on": "model requests and hook POSTs",
+        "set_by_subc": true,
+        "verified": true
+      },
+      {
+        "name": "Authorization",
+        "value": "Bearer {apiKey}",
+        "on": "hook POSTs to {baseUrl}/v1/agent-hooks",
+        "set_by_subc": true,
+        "verified": true
+      }
+    ],
+    "hooks": [
+      {
+        "event": "UserPromptSubmit",
+        "posts": "conversation_ensure, plus conversation_compaction phase=end when one is pending",
+        "endpoint": "{baseUrl}/v1/agent-hooks",
+        "config": "~/.copilot/hooks/subconscious-hooks.json",
+        "installed_by": ["install"],
+        "verified": true
+      },
+      {
+        "event": "PreCompact",
+        "posts": "conversation_compaction phase=start",
+        "endpoint": "{baseUrl}/v1/agent-hooks",
+        "config": "~/.copilot/hooks/subconscious-hooks.json",
+        "installed_by": ["install"],
+        "verified": true
+      }
+    ]
+  }
+}

package/bin/runbook/copilot/install.sh

@@ -64,23 +64,17 @@
 set -euo pipefail
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-source "${SCRIPT_DIR}/../model-capabilities.generated.sh"
+source "${SCRIPT_DIR}/../lib.sh"
 HOOK_SRC="${SCRIPT_DIR}/hook.sh"
 HOOKS_TEMPLATE="${SCRIPT_DIR}/hooks.json"
 
-# Load shared env from SUBC_ENV_FILE, or a sibling .env / env.example.
-SHARED_ENV="${SUBC_ENV_FILE:-${SCRIPT_DIR}/../.env}"
-[[ -f "$SHARED_ENV" ]] || SHARED_ENV="${SCRIPT_DIR}/../env.example"
-if [[ -f "$SHARED_ENV" ]]; then set -a; source "$SHARED_ENV"; set +a; fi
-
 # Default to `install` so `./install.sh --gateway-url URL` works without an
 # explicit `install` subcommand. `status` / `uninstall` still work.
 COMMAND="install"
 GATEWAY_URL="${GATEWAY_URL:-}"
 API_KEY="${COPILOT_API_KEY:-${API_KEY:-}}"
-MODEL="${MODEL:-subconscious/glm-5.3-marathon}"
-MAX_INPUT_TOKENS="${COPILOT_MAX_INPUT_TOKENS:-5000000}"
-MAX_OUTPUT_TOKENS="${COPILOT_MAX_OUTPUT_TOKENS:-65536}"
+MAX_INPUT_TOKENS="${COPILOT_MAX_INPUT_TOKENS:-}"
+MAX_OUTPUT_TOKENS="${COPILOT_MAX_OUTPUT_TOKENS:-}"
 VSCODE_APP="${VSCODE_APP:-}"  # auto-detected: Code | Code - Insiders | VSCodium
 
 # VS Code's customendpoint provider requires the apiKey to be a
@@ -101,7 +95,7 @@ MARKER="subconscious-hook.sh"
 usage() {
   cat <<'EOF'
 Usage:
-  subc copilot install [--gateway-url URL] [--api-key KEY] [--model MODEL]
+  subc copilot install [--gateway-url URL] [--api-key KEY]
   subc copilot uninstall
   subc copilot status
 
@@ -117,15 +111,14 @@ paste the key once via Manage Language Models).
 The API key for the hooks is read from the profile env or --api-key and
 stored in ~/.copilot/subconscious-hooks.env (mode 600).
 
-Reads GATEWAY_URL, API_KEY, and MODEL from the profile env by
-default. Restart VS Code after install.
+Reads GATEWAY_URL, API_KEY, the model catalog, and the COPILOT_* settings
+from the env subc passes. Restart VS Code after install.
 
 Options:
-  --gateway-url URL         Gateway origin (default: $GATEWAY_URL from .env)
-  --api-key KEY             Gateway API key for hooks (default: $API_KEY from .env)
-  --model MODEL             Model id (default: subconscious/glm-5.3-marathon)
-  --max-input-tokens N      Model context window input tokens (default: 5000000)
-  --max-output-tokens N     Model max output tokens (default: 65536)
+  --gateway-url URL         Gateway origin (default: $GATEWAY_URL)
+  --api-key KEY             Gateway API key for hooks (default: $API_KEY)
+  --max-input-tokens N      Model context window input tokens (default: COPILOT_MAX_INPUT_TOKENS)
+  --max-output-tokens N     Model max output tokens (default: COPILOT_MAX_OUTPUT_TOKENS)
   --vscode-app APP          Code, Code - Insiders, or VSCodium (auto-detected)
 
 Requires: jq, curl. Restart VS Code after install, then enter your model API
@@ -147,10 +140,6 @@ while [[ $# -gt 0 ]]; do
       API_KEY="${2:-}"
       shift 2
       ;;
-    --model)
-      MODEL="${2:-}"
-      shift 2
-      ;;
     --max-input-tokens)
       MAX_INPUT_TOKENS="${2:-}"
       shift 2
@@ -175,29 +164,6 @@ while [[ $# -gt 0 ]]; do
   esac
 done
 
-DEFAULT_SUBCONSCIOUS_MODELS="subconscious/glm-5.3-marathon
-subconscious/glm-5.2
-subconscious/tim-qwen3.6-27b
-subconscious/deepseek-v4-flash-marathon
-subconscious/deepseek-v4.1-flash-marathon"
-SUPPORTED_MODELS=()
-
-add_supported_model() {
-  local model_id="$1" existing
-  [[ -n "$model_id" ]] || return 0
-  if [[ "${#SUPPORTED_MODELS[@]}" -gt 0 ]]; then
-    for existing in "${SUPPORTED_MODELS[@]}"; do
-      [[ "$existing" == "$model_id" ]] && return 0
-    done
-  fi
-  SUPPORTED_MODELS+=("$model_id")
-}
-
-add_supported_model "$MODEL"
-while IFS= read -r model_id; do
-  add_supported_model "$model_id"
-done <<< "${SUBCONSCIOUS_MODELS:-$DEFAULT_SUBCONSCIOUS_MODELS}"
-
 PROVIDER_NAME="Subconscious Gateway"
 MARKER='Subconscious Gateway'
 
@@ -274,9 +240,11 @@ strip_subconscious() {
     echo "[]"
     return
   fi
-  jq --arg name "$PROVIDER_NAME" \
-    'map(select(.name != $name and ((.name // "") | test("subconscious"; "i") | not)))' \
-    "$file" 2>/dev/null || echo "[]"
+  jq --arg name "$PROVIDER_NAME" '
+    if type != "array" then error("model configuration must be an array")
+    elif any(.[]; type != "object") then error("model providers must be objects")
+    else map(select(.name != $name)) end
+  ' "$file"
 }
 
 write_config() {
@@ -294,10 +262,13 @@ write_config() {
 
   mkdir -p "$user_dir"
   local existing
-  existing="$(strip_subconscious "$models_json")"
+  if ! existing="$(strip_subconscious "$models_json")"; then
+    echo "Cannot read $models_json; leaving it unchanged" >&2
+    return 1
+  fi
 
   local provider_models='[]' model_id vision
-  for model_id in "${SUPPORTED_MODELS[@]}"; do
+  while IFS= read -r model_id; do
     vision=false
     if subc_model_supports_vision "$model_id"; then vision=true; fi
     provider_models=$(jq -cn \
@@ -319,8 +290,8 @@ write_config() {
         thinking: true,
         streaming: true,
         requestHeaders: { "x-subconscious-client": "copilot" }
-      }]')
-  done
+      }]') || return 1
+  done <<< "$SUBC_MODEL_IDS"
 
   local new_provider
   new_provider=$(jq -n \
@@ -333,14 +304,17 @@ write_config() {
       apiKey: $apiKeyRef,
       apiType: "messages",
       models: $models
-    }')
+    }') || return 1
 
   local merged
-  merged=$(echo "$existing" | jq --argjson p "$new_provider" '. + [$p]')
+  merged=$(echo "$existing" | jq --argjson p "$new_provider" '. + [$p]') || return 1
 
-  umask 077
-  echo "$merged" >"$models_json"
-  umask 022
+  local tmp
+  tmp="$(mktemp "${models_json}.XXXXXX")" || return 1
+  if ! printf '%s\n' "$merged" >"$tmp" || ! mv "$tmp" "$models_json"; then
+    rm -f "$tmp"
+    return 1
+  fi
   echo "$models_json"
 }
 
@@ -348,13 +322,18 @@ uninstall_config() {
   local user_dir="$1"
   local models_json="${user_dir}/chatLanguageModels.json"
   if [[ -f "$models_json" ]]; then
-    if grep -qi "$MARKER" "$models_json" 2>/dev/null; then
+    local existing
+    if ! existing="$(strip_subconscious "$models_json")"; then
+      echo "Cannot read $models_json; leaving it unchanged" >&2
+      return 1
+    fi
+    if jq -e --arg name "$PROVIDER_NAME" 'any(.[]; .name == $name)' "$models_json" >/dev/null; then
       local tmp
-      tmp="$(mktemp)"
-      jq --arg name "$PROVIDER_NAME" \
-        'map(select(.name != $name and ((.name // "") | test("subconscious"; "i") | not)))' \
-        "$models_json" >"$tmp"
-      mv "$tmp" "$models_json"
+      tmp="$(mktemp "${models_json}.XXXXXX")"
+      if ! printf '%s\n' "$existing" >"$tmp" || ! mv "$tmp" "$models_json"; then
+        rm -f "$tmp"
+        return 1
+      fi
       echo "Removed Subconscious provider from $models_json"
     else
       echo "No Subconscious provider found in $models_json"
@@ -383,7 +362,10 @@ install_hook_script() {
 }
 
 write_hooks_json() {
-  sed "s|HOOK_SH_PATH|${HOOK_DST}|g" "$HOOKS_TEMPLATE" >"$HOOKS_JSON"
+  local hook_command
+  hook_command="$(jq -rn --arg path "$HOOK_DST" '$path | @sh')"
+  jq --arg command "$hook_command" '.hooks[][].command = $command' \
+    "$HOOKS_TEMPLATE" >"$HOOKS_JSON"
 }
 
 uninstall_hooks() {