codex-subscription-oauth-plugin
用于 ChatGPT Codex 订阅 OAuth 的树外 DSH 捆绑包
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:askdkc/dsh-codex#7037ff4542c4702f5e22117709cf4d25360dd0e3Codex Subscription Oauth Plugin 以 codex-subscription-oauth-plugin 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A small out-of-tree DSH command adapter for ChatGPT Codex subscription OAuth. It adds /codex-auth; the OAuth implementation remains in the existing DSH services.
dd6322d604e00eec1ba5e0c8541159906a21094a0.1.2-alpha.34.0.2From a DeepSeek Harness source checkout, install the bundle directly from GitHub into the target profile:
pnpm dsh plugin --profile web add github:askdkc/dsh-codex
Replace web with another profile name when needed. Restart a running profile after installation so the new Bundle membership takes effect.
This repository commits the built lib/ artifacts and cordis.patch.yml, so installation from the GitHub spec does not require an npm publication or GitHub Release tarball.
To inspect the composed profile without booting it:
pnpm dsh --profile web --dump-config
The dump should contain the codex-subscription-oauth row and providers.openai-codex under llm-pi-ai.
To remove the bundle:
pnpm dsh plugin --profile web remove codex-subscription-oauth-plugin
Run the command in DSH:
/codex-auth
The command selects the browser login path automatically and presents the OAuth authorization URL for you to open. It then waits for the localhost callback at http://localhost:1455/callback. If the callback cannot reach the running DSH process, the command asks for the manual redirect URL or authorization code instead. The callback and manual prompt are part of one bounded authorization attempt.
Credentials are owned by the existing credentials-local provider. This package does not implement OAuth, PKCE, callback exchange, refresh, revocation, or credential persistence. It also does not log or persist credentials and does not place authentication values in model context or command/session output.
Authentication is a host command, not a model tool. /codex-auth uses the DSH command and user-question surfaces, reports only fixed success, cancellation, or failure text, and keeps OAuth notices local to the current attempt. No model context, transcript, or long-lived application log is used for the authorization exchange.
localhost:1455.0.1.2-alpha.3 pre-release pin and compatible Cordis version.llm-pi-ai base configuration; the package includes a guard test for that replacement.MIT
See LICENSE.