feat(subscription-ai): Community ChatGPT subscription-backed AI (gated) - #2371
Draft
HaijieChen wants to merge 5 commits into
Draft
feat(subscription-ai): Community ChatGPT subscription-backed AI (gated)#2371HaijieChen wants to merge 5 commits into
HaijieChen wants to merge 5 commits into
Conversation
Wire the subscription Codex app-server path so allowlisted DB tools reach the loopback MCP bridge: answer serverRequests with correct shapes (requestUserInput answers, permissions decision), allow MCP functionCall namespace, keep CodeMode off, sandbox network for tools/call, and stop text2sql from nested API-key chatSync fencing the attempt. Live gpt-5.5 verified list/schema/execute_sql tool_ok; text2sql delegated under tests.
Add subscription account panel, model selection groups, migration wizard, attempt banners, and Zustand store with i18n for the ChatGPT-backed path. Wire AI chat input/select and settings so Community can pick subscription models without changing the existing API-key flow.
Introduce a gated, user-confirmed import path for encrypted API-key configs: tools boundary + H2 ledger ports, JCEF query interceptor that keeps secrets out of generic console logging, and importLegacy config APIs that never silently overwrite an existing backend default.
…l config Make subscription chat chrome usable without opening the model dropdown by resolving reasoning efforts from option map, snapshots, and ChatGPT defaults, and by rebuilding send-time model options when local map state lags. Redesign the model config modal as a dual-zone page with multi-vendor cards (~2–3 per row) plus full API-key CRUD, switch request routing to a live javaQuery probe, and document packaging gates plus remaining CHG plans.
…UM findings Harden MCP permission auto-approval to chat2db_subscription + allowlisted tools, disable parallel tool advertising, drop CodeMode host from packaging and CI staging, surface reauth/rate-limit turn failures, and bind secret- import item ids to secret revisions. Preserve explicit API-key selection on ready-to-use bootstrap, wire conversation-scoped model preferences, isolate secret-import ledger startup failures, and close renderer gates for default-off modal, migration entry, disabled options, late javaQuery, and CONNECTING expiry cleanup.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
CHAT2DB_PACKAGE_SUBSCRIPTION_AI/CHAT2DB_ENABLE_SUBSCRIPTION_AI), using a pinned Codex app-server path so Chat2DB never stores OAuth tokens.javaQuerydesktop probe.Commits (on top of main)
00dd7ccfix(subscription-ai): make MCP tools/call work end-to-end on ChatGPTe3e7e3cfeat(subscription-ai): add Community subscription frontend UIe6b4da5feat(subscription-ai): add encrypted legacy API-key secret import0e10a4dfeat(subscription-ai): ready-to-use effort control and dual-zone model configProduct / safety notes
Test plan
build:web:communitybash -n script/package/stage-codex-app-server.sh+test-codex-app-server-staging.shtools/call(no token leakage in logs)Source
feature/subscription-backed-ai@0e10a4d