dsh-codex

dsh Codex

English | 中文

Migration guide: repair Sessions created by dsh-codex versions before 0.3.0

Use a ChatGPT subscription in DeepSeek Harness through OpenAI's Codex sign-in flow—no OpenAI Platform API key required and no dsh source patch required.

dsh-codex is an independent dsh bundle. It adds: ChatGPT OAuth from the dsh Settings panel or a standalone CLI, with automatic token refresh the Codex GPT catalog, including vision-capable models when the account offers them a live client-side context-window capacity override for dsh's token meter and compaction policy streaming, tool calls, reasoning replay, prompt caching, and dsh compaction through the normal LLM service Codex standalone web search through dsh's existing web_search tool optional HTTP(S) URL input added to Harness's existing read_image tool an imagegen tool with a selectable GPT Image backend, workspace or conversation reference images, and automatic workspace output browser image input through dsh's existing paste and drop controls a per-conversation Fast Mode switch and compact weekly quota indicator in the Web composer optional backend-authorized model recovery, including hidden Luna Reserve routing a three-scope HTTP(S) proxy control for Codex-only or process-wide routing

ChatGPT subscription authentication and usage-based OpenAI API access are different products. This plugin uses the ChatGPT Codex backend only; it does not turn a subscription into a general-purpose OpenAI API credential. Install

Install the prebuilt bundle from npm into the selected dsh profile:

From a DeepSeek Harness source checkout, use pnpm dsh plugin --profile web add dsh-codex. A local plugin checkout can still be installed with link:/absolute/path/to/dsh-codex for development.

Open Settings → OpenAI Codex and choose Browser sign-in or Device code. Browser sign-in shows an authorization link; click it to open the system browser, which returns to the dsh host's localhost callback when both run on the same machine. Device code works when the browser is on another machine. The account page shows live Codex quota bars and exact remaining percentages; exact credit balances or workspace limits appear only when the account API supplies them.

Loopback Web pages are trusted automatically. If dsh runs on another machine, the account page shows the exact origin command that must be approved on the dsh host, for example dsh plugin --profile web exec dsh-codex trust-origin http://host:port. The allowlist is exact-origin, stored separately from OAuth credentials, and can be inspected or revoked with trusted-origins and untrust-origin.

The CLI remains available for terminal and headless installations:

For dsh-tui, install the bundle into the same profile: