@syncended/dsh-codex
适用于 DeepSeek Harness 的 OpenAI Codex（ChatGPT Plus/Pro）提供商，支持 Web UI 和 CLI 设备代码 OAuth 登录。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @syncended/dsh-codex@0.0.10Codex 以 @syncended/dsh-codex 发布，当前版本为 0.0.10。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Use a ChatGPT Plus or Pro subscription as an LLM provider in DeepSeek Harness.
The plugin adds device-code OAuth login through the Web settings UI and an interactive Harness /codex slash command. It does not run a browser callback server or localhost listener. After login, Codex models appear with other providers, tokens refresh automatically, and Web shows 5-hour and weekly limits in a Codex limits popup.
Dark-theme OpenAI Codex usage limits popup in DeepSeek Harness
Rendered by the real plugin UI with sanitized demonstration balances.
The limits view uses OpenAI's undocumented Codex usage endpoint. Its availability and response shape may change without notice.
0.1.0-rc.6 or a compatible release.dsh plugin command.auth.openai.com and chatgpt.com.DSH reconciles plugins per profile. Install the package in every profile where the provider or /codex command is needed; web is shown here:
dsh plugin --profile web add -w @syncended/dsh-codex
For local development, install a checkout instead:
dsh plugin --profile web add -w /absolute/path/to/deepseek-harness-openai-codex
The package declares a DSH bundle. It registers the openai-codex route and maps its credential automatically, so no dsh settings set command is needed. Restart the selected profile after installing or upgrading.
To remove it:
dsh plugin --profile web remove @syncended/dsh-codex
openai-codex/... model from the standard model selector and send a test prompt.Like other DSH credential settings, Web login is restricted to a loopback/same-origin Host session. For a remote Host, use an authenticated SSH/local tunnel to its loopback Web UI rather than exposing credential operations publicly.
/codex is a Harness slash command, not a shell executable. Run it inside an interactive profile that has this plugin installed:
| Command | Description |
|---|---|
/codex login | Start the device-code flow and print the verification URL and code. |
/codex status | Show token status and expiry. |
/codex logout | Delete the stored token file and unpublish the live credential. |
{ access, refresh, expires } in $DSH_HOME/openai-codex.json by default.OPENAI_CODEX_TOKEN.llm-pi-ai route uses the openai-codex-responses API, keeps the installed pi-ai Codex models, and adds a gpt-6-astra fallback until pi-ai ships that catalog entry.Protect $DSH_HOME: the token file is sensitive local credential state. /codex logout removes it and clears the published credential.
The defaults normally need no changes. To override them, edit the existing openai-codex row in $DSH_HOME/profiles/<profile>/cordis.patch.yml and restart that profile:
- id: openai-codex
config:
# clientId: app_EMoamEEZ…hrann
credentialRef: OPENAI_CODEX_TOKEN
deviceCodeTimeoutSeconds: 900
refreshWindowMs: 300000
# dshHome: /absolute/path/to/dsh-home
# tokenFile: /absolute/private/path/openai-codex.json
| Key | Default | Description |
|---|---|---|
clientId | built in | OpenAI OAuth client ID used by the device flow. |
credentialRef | OPENAI_CODEX_TOKEN | DSH credential ref receiving the live access token. |
deviceCodeTimeoutSeconds | 900 | Maximum time to approve a device login. |
refreshWindowMs | 300000 | Refresh-loop scheduling window; the implementation still refreshes only near expiry. |
dshHome | normal DSH home | Alternate base directory used to derive the default token path. |
tokenFile | $DSH_HOME/openai-codex.json | Absolute token persistence path; takes precedence over dshHome. |
Token-path precedence is tokenFile, then dshHome, then DSH_HOME, then ~/.dsh.
If credentialRef is changed, update the matching provider mapping in the existing llm-pi-ai row as well; otherwise the route continues reading OPENAI_CODEX_TOKEN:
- id: llm-pi-ai
config:
providers:
openai-codex:
displayName: OpenAI Codex
apiKeyEnv: MY_CODEX_TOKEN_REF
/codex status reports a credential./codex login, and approve before the 15-minute timeout.credentialRef matches the llm-pi-ai provider mapping.npm test
npm pack --dry-run
Tag-driven publication is documented in RELEASING.md.
MIT — see LICENSE.