@pure01fx/dsh-openai-codex-auth 0.10.0 → 0.10.1

package/CHANGELOG.md

@@ -2,6 +2,13 @@
 
 ## Unreleased
 
+## 0.10.1
+
+- Targets DSH 0.1.5-rc.1 with exact SDK peers and runtime helpers; migrates Responses tool calls to ToolCallId.
+- Keeps browser-local model hiding active during catalog, selection projection, and reconnection updates, filtering before subscribers receive snapshots.
+- Accepts the real Node/ws successful send callback (`null`), avoiding false WebSocket send failures and unintended HTTP fallback; replaces the local ws declaration with official types and handles bounded RawData variants.
+- Adds actual target directory and LLM/tools service protocol regression coverage. Older DSH releases are not claimed by this candidate.
+
 ## 0.10.0
 
 ### Codex cloud tools

package/CODEX-COMPATIBILITY.md

@@ -1,6 +1,12 @@
 # Codex 云端能力兼容性跟踪
 
-## 当前实现与验证边界
+## DSH 0.1.5-rc.1 版本适配
+
+`0.10.1` 迁移 ToolCallId、精确 SDK 依赖和客户端服务提供包，隐藏策略在目录发布投影之前执行。`tests/target-directory.spec.ts` 执行官方 shell 的真实 store/Zustand/Immer 与目标目录/catalog 类，使用合成 Remote 响应和投影输入；这不是浏览器联合验收。`tests/target-services.spec.ts` 使用真实 Cordis/LlmRuntime/ToolRuntime、真实 loopback HTTP/SSE/WebSocket，验证工具 ID、工具执行、含加密 reasoning 的历史回放、永久错误和取消，并确认 WS 没有偷偷回退 HTTP。实际 socket 测试也修复了 ws 成功回调为 null 时的误判。
+
+该版本不运行真实 OAuth、账号刷新或付费请求，不改写既有用户数据；旧版兼容性不在声明范围。下面的线上账号结果来自原 0.10.0 验证，不能视作本版本的新验证。升级/回滚建议见 README。
+
+## 原 0.10.0 实现与验证边界
 
 本次范围为已确认的非语音 Codex 云端服务。参考上游 b348fc26674189f758d5941cdab3f78f258b2aa7（cloud 专用跟踪常量在 src/upstream.ts）；原 Provider 协议基线仍单独保留。四个工具是普通 DSH function 工具，不依赖专用模式，不覆盖现有工具。
 

package/README.md

@@ -17,7 +17,9 @@
 
 ## 快速开始
 
-当前 `0.10.0` 版本要求 DeepSeek Harness `0.1.1-rc.2`；仍运行 DSH `0.1.0-rc.6` 的 profile 应继续使用插件 `0.6.1`。
+版本 `0.10.1` 明确适配 DeepSeek Harness `0.1.5-rc.1`，SDK peers/runtime helpers 精确锁定该版本；不声明兼容旧 SDK。旧 DSH `0.1.1-rc.2` profile 应保留原插件 `0.10.0`，升级时在独立 profile 安装新版插件并保留原 profile/锁文件以便回滚。无需迁移账号文件或浏览器隐藏列表；`dsh.engines` 仅作兼容性说明，不当作宿主硬门禁。
+
+本版本通过真实目标 LLM/tools 服务与本地 HTTP/SSE/WebSocket 回放、错误/取消回归；模型隐藏覆盖真实目录/catalog/store 的投影更新、重连和重新加载。验证命令为 `pnpm typecheck && pnpm build && pnpm test`；当前版本未执行线上 OAuth/付费模型验收。
 
 将插件安装到 DSH 的 `web` profile：
 

package/client.js

@@ -112,6 +112,9 @@ window.__ModuleLoader__.load({
           dispose: directory.dispose,
           wrappedLoad: undefined,
           wrappedDispose: undefined,
+          set: directory.store && directory.store.set,
+          wrappedSet: undefined,
+          visibleGroups: undefined,
           generation: 0,
           rawGroups: directory.store && typeof directory.store.getSnapshot === 'function'
             ? directory.store.getSnapshot().groups : [],
@@ -124,15 +127,30 @@ window.__ModuleLoader__.load({
             const groups = visibleModelGroups(rawGroups)
             return value && typeof value === 'object' ? { ...value, groups } : value
           }
-          record.rawGroups = rawGroups
+          if (rawGroups !== record.visibleGroups) record.rawGroups = rawGroups
           const groups = render(directory, record.rawGroups)
+          record.visibleGroups = groups
           return value && typeof value === 'object' ? { ...value, groups } : value
         }
         record.wrappedDispose = function (...args) {
           ++record.generation
           tracked.delete(directory)
+          if (directory.store.set === record.wrappedSet) directory.store.set = record.set
           return record.dispose.apply(this, args)
         }
+        // Target ModelDirectory publishes catalog/selection/reconnect snapshots through set.
+        // Filter before publication so no subscriber can observe a hidden row.
+        if (typeof record.set === 'function') {
+          record.wrappedSet = function (state) {
+            if (state.groups !== record.visibleGroups) record.rawGroups = state.groups
+            const available = codexModels(record.rawGroups)
+            if (available.length > 0) writeAvailableModels(available)
+            const groups = visibleModelGroups(record.rawGroups)
+            record.visibleGroups = groups
+            return record.set.call(this, { ...state, groups })
+          }
+          directory.store.set = record.wrappedSet
+        }
         directory.load = record.wrappedLoad
         directory.dispose = record.wrappedDispose
         tracked.set(directory, record)
@@ -148,7 +166,9 @@ window.__ModuleLoader__.load({
         for (const directory of resolver.live.directories.values()) track(directory)
       }
       const refresh = () => {
-        for (const [directory, record] of tracked) render(directory, record.rawGroups)
+        for (const [directory, record] of tracked) {
+          record.visibleGroups = render(directory, record.rawGroups)
+        }
       }
       window.addEventListener(MODEL_VISIBILITY_EVENT, refresh)
 
@@ -159,6 +179,7 @@ window.__ModuleLoader__.load({
           ++record.generation
           if (directory.load === record.wrappedLoad) directory.load = record.load
           if (directory.dispose === record.wrappedDispose) directory.dispose = record.dispose
+          if (directory.store.set === record.wrappedSet) directory.store.set = record.set
         }
         tracked.clear()
       }

package/lib/native-websocket-socket.js

@@ -68,11 +68,15 @@ class NodeNativeCodexWebSocket {
                 this.fail(failure('native Codex WebSocket returned a binary frame', 'WS_PROTOCOL_ERROR'));
                 return;
             }
-            if (data.byteLength > maxFrameBytes) {
+            const bytes = Array.isArray(data)
+                ? data.reduce((total, chunk) => total + chunk.byteLength, 0) : data.byteLength;
+            if (bytes > maxFrameBytes) {
                 this.fail(failure('native Codex WebSocket frame exceeded the size limit', 'WS_FRAME_TOO_LARGE'));
                 return;
             }
-            this.push({ type: 'text', text: data.toString('utf8') }, data.byteLength);
+            const buffer = Array.isArray(data) ? Buffer.concat(data, bytes)
+                : Buffer.isBuffer(data) ? data : Buffer.from(data);
+            this.push({ type: 'text', text: buffer.toString('utf8') }, bytes);
         });
         socket.on('close', (code, reason) => {
             this.ended = true;
@@ -124,7 +128,7 @@ class NodeNativeCodexWebSocket {
             signal?.addEventListener('abort', abort, { once: true });
             this.socket.send(text, (error) => {
                 signal?.removeEventListener('abort', abort);
-                if (error === undefined)
+                if (error === undefined || error === null)
                     resolve();
                 else
                     reject(failure('native Codex WebSocket send failed', 'WS_RETRYABLE', error));

package/lib/responses.d.ts

@@ -1,4 +1,4 @@
-import { CallId, LlmError, type ContentBlock, type GenerateOptions, type StreamChunk, type TokenUsage, type ToolSchema } from '@deepseek-ai/dsh-llm';
+import { ToolCallId, LlmError, type ContentBlock, type GenerateOptions, type StreamChunk, type TokenUsage, type ToolSchema } from '@deepseek-ai/dsh-llm';
 import { type ParseSseOptions } from './sse.js';
 import { type NativeCodexReplaySource } from './replay.js';
 export declare const DEFAULT_CODEX_INSTRUCTIONS = "You are Codex, an AI coding agent. Help the user with software engineering tasks.";
@@ -11,7 +11,7 @@ export interface ResolvedImagePart {
 }
 export interface ResolvedToolResultPart {
     type: 'tool-result';
-    toolCallId: CallId;
+    toolCallId: ToolCallId;
     content: readonly ResolvedContentPart[];
     isError?: boolean;
 }

package/lib/responses.js

@@ -1,6 +1,6 @@
 /** Pure DSH-to-Codex Responses request and stream translation. */
 import { createHash } from 'node:crypto';
-import { CallId, CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, isContextWindowExceededError, isQuotaExceededError, LlmError, QUOTA_EXCEEDED_CODE, } from '@deepseek-ai/dsh-llm';
+import { ToolCallId, CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, isContextWindowExceededError, isQuotaExceededError, LlmError, QUOTA_EXCEEDED_CODE, } from '@deepseek-ai/dsh-llm';
 import { parseSse } from './sse.js';
 import { NativeCodexReplayCapture, replayAssistantInput, replayableItemId, } from './replay.js';
 export const DEFAULT_CODEX_INSTRUCTIONS = 'You are Codex, an AI coding agent. Help the user with software engineering tasks.';
@@ -312,7 +312,7 @@ function closeBlock(block) {
         return { type: 'text', text: block.text };
     if (block.kind === 'reasoning')
         return { type: 'reasoning', text: block.text };
-    return { type: 'tool-call', id: CallId(block.callId), name: block.name ?? '', arguments: block.text };
+    return { type: 'tool-call', id: ToolCallId(block.callId), name: block.name ?? '', arguments: block.text };
 }
 /** Stateful, transport-free Responses event to DSH chunk translator. */
 export class ResponsesStreamTranslator {
@@ -398,7 +398,7 @@ export class ResponsesStreamTranslator {
                 this.sawToolCall = true;
                 const block = this.open(`${item.id}:call`, 'tool-call', chunks, item.call_id, item.name);
                 chunks.push({
-                    type: 'tool-call-delta', index: block.index, id: CallId(block.callId),
+                    type: 'tool-call-delta', index: block.index, id: ToolCallId(block.callId),
                     name: item.name, argumentsDelta: '',
                 });
                 return chunks;
@@ -430,7 +430,7 @@ export class ResponsesStreamTranslator {
                 const delta = eventDelta(event);
                 this.append(block, delta);
                 chunks.push({
-                    type: 'tool-call-delta', index: block.index, id: CallId(block.callId),
+                    type: 'tool-call-delta', index: block.index, id: ToolCallId(block.callId),
                     ...block.name === undefined ? {} : { name: block.name }, argumentsDelta: delta,
                 });
                 return chunks;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pure01fx/dsh-openai-codex-auth",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "Native ChatGPT Codex provider, device-code-first login, and same-origin Web integration for DeepSeek Harness",
   "license": "MIT",
   "publishConfig": {
@@ -86,16 +86,22 @@
     "LICENSE",
     "CODEX-COMPATIBILITY.md"
   ],
+  "scripts": {
+    "build": "tsc",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "prepack": "pnpm build"
+  },
   "dsh": {
     "engines": {
-      "dsh": "0.1.1-rc.2"
+      "dsh": "0.1.5-rc.1"
     },
     "bundle": {
       "patch": "./cordis.patch.yml"
     },
     "client": {
       "inject": [
-        "@deepseek-ai/dsh-client-runtime",
+        "@deepseek-ai/dsh-client-ui-renderer",
         "@deepseek-ai/dsh-client-ui-model-selection",
         "@deepseek-ai/dsh-client-ui-conversation",
         "@deepseek-ai/dsh-client-ui-settings"
@@ -105,19 +111,19 @@
   },
   "peerDependencies": {
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2"
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-shell": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.1"
   },
   "dependencies": {
-    "@deepseek-ai/dsh-atomic-write": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-atomic-write": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-home-paths": "0.1.5-rc.1",
     "@deepseek-ai/schemastery": "^3.18.1",
     "https-proxy-agent": "7.0.6",
     "image-size": "^2.0.2",
@@ -125,23 +131,26 @@
     "ws": "8.21.3"
   },
   "devDependencies": {
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-web-frontend": "0.1.5-rc.1",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-agent": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-attachment": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-attachment-local": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-credentials": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-fs": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-llm": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-sandbox-policy": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-scope": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-session": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-shell": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-system-prompt": "0.1.1-rc.2",
-    "@deepseek-ai/dsh-tools": "0.1.1-rc.2",
+    "@deepseek-ai/dsh-agent": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-attachment-local": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-credentials": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-fs": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-host-webserver": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-llm": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-sandbox-policy": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-scope": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-session": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-shell": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-system-prompt": "0.1.5-rc.1",
+    "@deepseek-ai/dsh-tools": "0.1.5-rc.1",
     "@types/node": "^22.20.0",
     "@types/proxy-from-env": "1.0.4",
+    "@types/ws": "8.18.1",
     "sharp": "^0.35.4",
     "typescript": "^6.0.3",
     "vitest": "^4.1.8"
@@ -165,9 +174,5 @@
     "@deepseek-ai/dsh-sandbox-policy": {
       "optional": true
     }
-  },
-  "scripts": {
-    "build": "tsc",
-    "test": "vitest run"
   }
-}
+}