The following introduces the dsh-native-codex-oauth plugin. DeepSeek Harness (DSH) has a built-in openai-codex model provider, but its Web interface lacks corresponding native login controls. This plugin connects DSH’s native interfaces and introduces native ChatGPT login controls to the Web model page.

What It Is

This plugin adds native ChatGPT login controls to the openai-codex provider in DeepSeek Harness.

  • Maintainer: kfc966
  • License: MIT
  • Positioning: It does not create a second Codex adapter or copy local authentication files. It only “stitches” the native interfaces of DSH’s built-in llm-pi-ai, credentials, and authorization modules into the Web model page.

Core Features

The plugin mainly contributes the following capabilities:

  • Connects native interfaces to the Web model page
  • Provides a host authorization controller
  • Generates a remote descriptor
  • Provides a Web UI model page
  • Native ChatGPT login controls

Install and Enable

  1. Install the plugin into the Web profile:
dsh plugin --profile web add github:kfc966/dsh-native-codex-oauth
  1. Restart the Web service:
dsh web
  1. Open the interface: Settings → Models → Add provider → OpenAI Codex

Typical usage

After opening the page above, click Sign in with ChatGPT, complete the provider’s own OAuth flow, save the provider, and then select a Codex model in the model selector.

Use cases and caveats

  • Compatibility: This Alpha build targets the 0.1.2-alpha.3 source line of DeepSeek Harness. It depends on the native settings.models.provider-card slot and the llm-pi-ai authorization flow. Releases published as 0.1.0-rc.x and lacking any of the above capabilities are not supported.
  • Security:
    • The browser receives only flow labels, prompts, notices, and redacted credential status.
    • OAuth authorizations are stored only in the Harness host credential service.
    • Password prompts use a password input box and are sent only as answers to the exact opaque prompt ID.
    • Signing out deletes the owner credential record through the host service.
  • Build and distribution: The repository commits prebuilt lib/ artifacts, with no install-time lifecycle scripts. Local checkouts do not require allowBuilds permissions.
  • Responsibility: Users are responsible for their account eligibility and compliance with the relevant provider’s terms.

Summary

This plugin fills the gap in the authentication experience for DSH’s built-in openai-codex provider in the Web interface. It does not alter core logic; it only performs connection work.

  • Repository: https://github.com/kfc966/dsh-native-codex-oauth
  • Directory: https://www.skillhub.cn/plugins/kfc966/dsh-native-codex-oauth