dsh-codex-connect-plus

dsh plugin --profile web add dsh-codex-connect-plus

Codex Connect Plus



English | [中文](docs/README.zh.md)

<p align="center">

<img src="docs/assets/hero.jpg" alt="Codex Connect Plus — ChatGPT subscription to Codex models and gpt-image-2 without an OpenAI Platform API key" width="100%">

</p>

Use your ChatGPT/Codex subscription inside DeepSeek Harness for Codex models and gpt-image-2 generation/editing—without an OpenAI Platform API key.

Sign in once with ChatGPT OAuth. Codex model requests use the signed-in account's subscription capacity; image generation/editing uses the same OAuth session and remains subject to account availability, region, limits, and upstream policy.

What you get

• Codex models in the normal DSH model picker — no separate CLI workflow.
• gpt-image-2 generation and editing — create images from prompts or edit 1–8 local references, with inline previews and local output files.
• No OpenAI Platform API key or pay-as-you-go API billing setup — authorization comes from your user-approved ChatGPT/Codex OAuth session.
• Quota-conscious defaults — automatic model retries default to 0, and image requests are never silently retried.

<p align="center">

<img src="docs/assets/demo-codex-image-and-models.png" alt="Real DeepSeek Harness UI showing Codex model selection and gpt-image-2 image generation" width="920">

</p>

<p align="center">_{Real DSH UI: select a Codex model and generate an attached image with <code>gpt-image-2</code> in the same conversation.}</p>

Community derivative. Not affiliated with or endorsed by OpenAI, DeepSeek, or the upstream Codex Connect maintainers.

Features

• ChatGPT/Codex OAuth login and provider-native automatic refresh.
• OpenAI Codex model catalog through Harness's normal LLM service.
• Optional standalone Codex search provider.
• Optional view_image tool for vision-capable models.
• codex_image_generate for 1-4 gpt-image-2 outputs.
• codex_image_edit for 1-8 local PNG/JPEG/WebP references and an optional mask.
• Durable DSH attachments, session-authorized replay, inline preview, and local files under outputs/codex-image.
• Fixed upstream origins, no redirects, bounded inputs/responses, cancellation, timeout, strict image signatures, and redacted provider errors.

Requirements

• DeepSeek Harness 0.1.1-rc.2. This build targets the rc.2 Client APIs. DSH 0.1.2-alpha.1 requires plugin 0.1.0-beta.6 instead.
• Node.js ^22.19.0 || >=24.0.0.

DSH version · Compatible plugin · npm selector

0.1.0-rc.5 / 0.1.0-rc.6 · 0.1.0-beta.2 · dsh-codex-connect-plus@0.1.0-beta.2

0.1.0-rc.7 · 0.1.0-beta.4 · dsh-codex-connect-plus@0.1.0-beta.4

0.1.1-rc.2 · 0.1.0-beta.5 · dsh-codex-connect-plus@latest

0.1.2-alpha.1 · 0.1.0-beta.6 · dsh-codex-connect-plus@beta

Install

Install the default npm release for DSH 0.1.1-rc.2:

dsh plugin --profile web add dsh-codex-connect-plus@latest

Immutable GitHub fallback:

dsh plugin --profile web add 'github:stoneface10/dsh-codex-connect-plus#v0.1.0-beta.5'

A matching .tgz is also attached to the GitHub prerelease.

For local development:

dsh plugin --profile web add link:/absolute/path/to/dsh-codex-connect-plus

Do not install dsh-codex-connect, dsh-codex-image-connect, and this combined package in the same profile: they own the same provider and tool names.

Configure

Open Settings → Plugins → Plugin configuration → Codex Connect Plus.

1. Sign in with ChatGPT.

2. Keep or change optional capability toggles.

3. Save profile settings.

Default capability and quota-safety settings:

modelMaxRetries: 0
enableSearch: false
enableImageTool: false
enableImageGeneration: true

The package does not take over the profile's default model or global search route. modelMaxRetries: 0 avoids silently repeating a full subscription-backed request after a transient failure; users may deliberately select one or two retries in Plugin configuration when reliability matters more than quota conservation. Image generation/editing remains non-retrying because the provider may already have processed a timed-out request. Leave enableImageTool disabled when direct multimodal uploads and DSH's native read_image cover the workflow; enable it only when the model must open credential-free public HTTP(S) image URLs directly.

Image tools

Example requests:

Use codex_image_generate to create a high-quality portrait travel poster.

Use codex_image_edit with refs ["photo.png"] to replace the background.

Generated files resolve from the current DSH session cwd and are stored under:

outputs/codex-image/

Reference images are limited to 4 MB each and 8 images per edit request. Generation can take several minutes. A timeout or transport failure is not retried automatically because the upstream may already have processed the request.

Security and API status

• OAuth credentials remain in DSH's dedicated credential file. On POSIX systems the plugin checks owner-only permissions; do not copy, commit, or disclose this file.
• Refresh is performed by the pi-ai Codex provider through the locked credential store; the image module neither stores nor refreshes refresh tokens itself.
• Image requests use fixed HTTPS ChatGPT/Codex application endpoints and reject HTTP redirects.
• Before provider-controlled errors are surfaced, their length is bounded and recognized Bearer tokens, JWTs, authorization/token fields, b64_json, and image data URLs are redacted.
• Generated attachmen

…(truncated)