Introduction

The DSH plugin ecosystem emphasizes “everything is a plugin”. If a developer wants to use pi-ai’s openai-codex models in DSH while keeping login credentials separated from DSH’s built-in llm-pi-ai settings, dsh-openai-codex provides an independent entry point.

dsh-openai-codex is an experimental, out-of-tree DeepSeek Harness plugin. It registers pi-ai’s openai-codex models to the public ctx.llm adapter seam of DSH and manages ChatGPT OAuth login via an independent credential file. It does not patch or replace installed DSH packages. Below is an introduction to its positioning, core functions, installation and enabling, typical usage, and precautions.

Positioning and Boundaries

  • dsh-openai-codex is an experimental, out-of-tree DeepSeek Harness plugin, licensed under MIT.
  • It targets @deepseek-ai/dsh 0.1.0-rc.7, pinned to pi-ai 0.82.1.
  • It requires Node ^22.19.0 || >=24.
  • It registers pi-ai’s openai-codex models to DSH’s public ctx.llm adapter seam.
  • It manages ChatGPT OAuth login in an independent credential file.
  • It uses ChatGPT subscription-backed access, not OpenAI Platform API billing.
  • It does not patch or replace installed DSH packages.
  • It does not provide a native dsh auth top-level command, nor a DSH Web UI OAuth card.
  • Repository path is bufeibufei/dsh-openai-codex; the source material does not provide an explicit maintainer field, so this article does not treat the owner as a confirmed fact.

Core Capabilities

The following are verified capabilities:

  1. After installation in a DSH profile, one can select the provider openai-codex and a listed model in DSH’s Models settings.
  2. Provides a dsh-codex-auth command supporting login, status, models, path, and logout.
  3. Supports installation from a tagged GitHub release or published tarball.
  4. Fixes the transport to SSE.
  5. Does not read, reuse, or override the codex login state in ~/.codex/auth.json.
  6. Does not provide endpoint override or custom-header settings.
  7. Sends the managed OAuth token only via pi-ai’s fixed https://chatgpt.com/backend-api Codex provider.

Installation and Enabling

First, confirm version requirements: the target DSH is @deepseek-ai/dsh 0.1.0-rc.7, and the Node requirement is ^22.19.0 || >=24.

Install the tagged release in the DSH profile where Codex needs to be exposed:

dsh plugin --profile headless add github:bufeibufei/dsh-openai-codex#v0.1.1

The source material also lists a published tarball installation method but does not provide a specific command usable in this article; if offline or local installation is needed, execute the corresponding installation command using the plugin file path from the release artifact.

After the steps above, the plugin will be installed into the specified DSH profile. Model selection is still completed via DSH’s Models settings.

Login and Verification

First, execute the login command:

dsh plugin --profile headless exec dsh-codex-auth login

When the terminal uses HTTP_PROXY or HTTPS_PROXY, set this before starting DSH:

$env:NODE_USE_ENV_PROXY = '1'

The following commands are used to check login status, available models, credential path, and to log out:

dsh plugin --profile headless exec dsh-codex-auth status
dsh plugin --profile headless exec dsh-codex-auth models
dsh plugin --profile headless exec dsh-codex-auth path
dsh plugin --profile headless exec dsh-codex-auth logout

After logging in, open DSH’s Models settings, select the provider openai-codex, and then select one of the listed models.

You can use the following command to verify the bundle layer without starting the agent:

dsh --profile headless --dump-config

Credentials and Security

The credential file location is:

$DSH_HOME/.dsh-openai-codex/auth.json

If DSH_HOME is not set, it is located at:

~/.dsh/.dsh-openai-codex/auth.json

Permissions only protect against other OS users. This plugin runs via the DSH plugin mechanism, and permissions come from the environment of the current DSH process; do not commit this file, do not attach it to diagnostics, and do not paste its contents.

The OAuth token managed by dsh-codex-auth is sent only via pi-ai’s fixed https://chatgpt.com/backend-api Codex provider. The plugin does not provide endpoint override or custom-header settings, and fixes the transport to SSE.

Applicable Scenarios and Precautions

Suitable for:

  • Developers who want to integrate ChatGPT subscription-backed access into DSH.
  • Users who want to use an independent dsh-codex-auth login flow instead of OpenAI Platform API billing.
  • Users who use DSH profiles and are willing to select the provider/model in DSH’s Models settings.

Precautions:

  • This is an experimental, out-of-tree plugin, and changes to endpoints or policies may render it unavailable.
  • Do not configure the openai-codex route in DSH’s built-in llm-pi-ai settings simultaneously.
  • The plugin does not provide a native dsh auth top-level command, nor a DSH Web UI OAuth card.
  • It does not read, reuse, or override the codex login state in ~/.codex/auth.json.
  • It is recommended to check the source code and license before installation and to confirm the target DSH and Node versions.

Links

GitHub:

https://github.com/bufeibufei/dsh-openai-codex

The directory page link comes from source material clues and does not appear in the scraped material; the community directory is an independent site, not the DSH official app store:

https://www.skillhub.cn/plugins/bufeibufei/dsh-openai-codex