dsh Codex

English | 中文

Migration guide: repair Sessions created by dsh-codex versions before 0.3.0

Use a ChatGPT subscription in DeepSeek Harness through OpenAI's Codex sign-in flow—no OpenAI Platform API key required and no dsh source patch required.

dsh-codex is an independent dsh bundle. It adds:

• ChatGPT OAuth from the dsh Settings panel or a standalone CLI, with automatic token refresh
• the Codex GPT catalog, including vision-capable models when the account offers them
• a live client-side context-window capacity override for dsh's token meter and compaction policy
• streaming, tool calls, reasoning replay, prompt caching, and dsh compaction through the normal LLM service
• Codex standalone web search through dsh's existing web_search tool
• optional HTTP(S) URL input added to Harness's existing read_image tool
• an imagegen tool with a selectable GPT Image backend, workspace or conversation reference images, and automatic workspace output
• browser image input through dsh's existing paste and drop controls
• a per-conversation Fast Mode switch and compact weekly quota indicator in the Web composer
• optional backend-authorized model recovery, including hidden Luna Reserve routing
• a three-scope HTTP(S) proxy control for Codex-only or process-wide routing

ChatGPT subscription authentication and usage-based OpenAI API access are different products. This plugin uses the ChatGPT Codex backend only; it does not turn a subscription into a general-purpose OpenAI API credential.

Install

Install the prebuilt bundle from npm into the selected dsh profile:

dsh plugin --profile web add dsh-codex
dsh web

From a DeepSeek Harness source checkout, use pnpm dsh plugin --profile web add dsh-codex. A local plugin checkout can still be installed with link:/absolute/path/to/dsh-codex for development.

Open Settings → OpenAI Codex → Sign in with ChatGPT. The plugin opens OpenAI's authorization page and completes the localhost callback. The account page shows live Codex quota bars and exact remaining percentages; exact credit balances or workspace limits appear only when the account API supplies them.

Loopback Web pages are trusted automatically. If dsh runs on another machine, the account page shows the exact origin command that must be approved on the dsh host, for example dsh plugin --profile web exec dsh-codex trust-origin http://host:port. The allowlist is exact-origin, stored separately from OAuth credentials, and can be inspected or revoked with trusted-origins and untrust-origin.

The CLI remains available for terminal and headless installations:

dsh plugin --profile web exec dsh-codex login
dsh plugin --profile web exec dsh-codex login --device-code
dsh plugin --profile web exec dsh-codex status
dsh plugin --profile web exec dsh-codex doctor --json
dsh plugin --profile web exec dsh-codex logout

For dsh-tui, install the bundle into the same profile:

dsh plugin --profile dsh-tui add dsh-codex

…