DeepSeek Harness plugin

dsh-openai-codex-auth-z3312257

Installable OpenAI Codex device-login provider for DeepSeek Harness pi-ai routes

Jump to install

Source facts

Repository
z331225718/dsh-openai-codex-auth
Latest update
Aug 15, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/z331225718/dsh-openai-codex-auth
Plugin: dsh-openai-codex-auth-z3312257
Author: z331225718

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.mdSource · read only
README language

@sipi/dsh-openai-codex-auth

English | 中文

An independently versioned, installable OpenAI Codex device-login plugin for @deepseek-ai/dsh-llm-pi-ai. It contributes OAuth storage and the openai-codex interactive-auth controller without adding a second model adapter.

Install

dsh plugin --profile web add @sipi/dsh-openai-codex-auth

The bundle inserts one openai-codex-auth configuration row. Remove the same package to unload its controller and credential contribution without changing the base adapter:

dsh plugin --profile web remove @sipi/dsh-openai-codex-auth

The Models page then offers a ChatGPT device-code login. OAuth requests run in the DSH Node process; on Node 24, proxy environment variables require NODE_USE_ENV_PROXY=1 (or --use-env-proxy).

Configuration

Structured credentials are stored at $DSH_HOME/.llm-oauth.json. path overrides that file, dshHome changes the default home, lockTimeoutMs defaults to 30 seconds, lockStaleMs to 60 seconds, loginTimeoutMs to 16 minutes, and startupTimeoutMs to 30 seconds.

- id: openai-codex-auth
  name: '@sipi/dsh-openai-codex-auth'
  config:
    dshHome: ~/.dsh

The store serializes mutations in process and across processes. A provider generation prevents a login completing after logout from restoring a deleted credential. POSIX files are atomically replaced at mode 0600; Windows users must protect DSH_HOME with their account ACL. Browser RPC state never includes tokens or raw provider responses.

Extension Role

The plugin claims openai-codex in ctx.piAiCredentials and registers its controller on ctx.llm. dsh-llm-pi-ai snapshots that mapping with each Models collection, so an active request retains its original store while later requests observe load or unload. A second plugin claiming the provider fails loud.

Development

The current DSH release has no published pi-ai credential contribution seam. Develop this package beside the SIPI-patched deepseek-harness checkout that provides ctx.piAiCredentials and ctx.llm.registerProviderAuth(). Installing against an unpatched upstream release fails at startup rather than silently losing OAuth persistence. See [compatibility notes](COMPATIBILITY.zh.md).

Model Experience

OAuth authentication

#### What the model sees

Nothing. openai-codex login state and OAuth credentials stay outside model requests.

#### Token effect

Zero direct token effect.

#### KV Cache effect

Independent of cache identity. The selected openai-codex model request determines provider cache behavior.

Known Limitations and Deferred Work

  • One login method — only OpenAI's device authorization is exposed.
  • pi-ai catalog dependency — activation fails when the installed catalog does not expose openai-codex OAuth.