dsh-codex-oauth

English | 中文

A standalone DeepSeek Harness plugin for using ChatGPT Plus/Pro Codex models through OpenAI's Codex OAuth flow.

It uses the official openaiCodexProvider from @earendil-works/pi-ai and DSH's public dsh-llm-pi-ai adapter. It supports streaming, tool calls, reasoning, images, replay, compaction, automatic token refresh, and the Codex model catalog.

This is the ChatGPT Codex backend, not a general OpenAI Platform API-key adapter.

Install

dsh plugin --profile web add dsh-codex-oauth
dsh web

For an npx installation:

npx @deepseek-ai/dsh plugin --profile web add dsh-codex-oauth
npx @deepseek-ai/dsh web

Sign in

The plugin owns its own credential file and login flow. No Pi installation or token copying is needed.

Web UI

Open Settings → OpenAI Codex and click Sign in with ChatGPT. A browser window opens for the OAuth approval; after it completes, return to DSH and select openai-codex in the model picker.

CLI

dsh plugin --profile web exec dsh-openai-codex login
# headless machines:
dsh plugin --profile web exec dsh-openai-codex login --device-code

dsh plugin --profile web exec dsh-openai-codex status
dsh plugin --profile web exec dsh-openai-codex logout

The browser login opens OpenAI's authorization page and completes through a localhost callback. --device-code is the fallback for machines without a usable browser.

After signing in, choose openai-codex in the DSH model picker.

Credentials

Credentials are stored at:

$DSH_HOME/.openai-codex-auth.json

The default is ~/.dsh/.openai-codex-auth.json. The file is written atomically with owner-only permissions, and refresh/login/logout operations use a cross-process file lock. The plugin never reads or modifies ~/.pi/agent/auth.json or ~/.codex/auth.json.

Development

npm test

npm test rebuilds the Web bundle before running the smoke checks.

The test requires the DSH and pi-ai peer dependencies supplied by a DSH profile.

Limitations

• ChatGPT plan eligibility, model access, quotas, and backend behavior are controlled by OpenAI and may change.
• Codex endpoints are not public OpenAI Platform API endpoints.
• Filesystem, shell, MCP, permissions, attachments, and other DSH capabilities come from the active profile.

License

MIT