@tnnevol/dsh-codex-auth 0.1.0-rc.7.2 → 0.1.0-rc.8.1

package/README.md

@@ -1,54 +1,5 @@
 # @tnnevol/dsh-codex-auth
 
-一个独立的 DeepSeek Harness Codex OAuth 插件，适配 DSH `0.1.0-rc.7`。
+Codex Auth 插件的功能、交互、安装和调试文档已统一迁移到文档站的 [Harness 插件](https://fnapps-doc.tnnevol.cn/plugins/) 章节。
 
-## 功能
-
-- 在 DSH Web 的“插件”设置中提供 ChatGPT 登录和退出登录入口。
-- 通过 `@earendil-works/pi-ai` 发起 Codex device-code 授权，由插件展示一次性授权码并轮询登录结果。
-- 授权页面不要求选择工作空间；用户只需在 Codex 授权页面提交插件生成的一次性代码。
-- 复用 `dsh-codex-connect` 的凭据文件格式：`$DSH_HOME/.openai-codex-auth.json`。
-- 复用 `dsh-llm-pi-ai` 的官方模型设置入口，使 OpenAI Codex 在模型列表中显示登录状态，并直接展示可编辑的模型目录。
-- OAuth 登录成功后，将当前 access token 同步到 `OPENAI_CODEX_AUTH_TOKEN` 凭据引用；OAuth 文件仍是唯一登录源，凭据引用只是给通用 pi-ai adapter 和官方模型页使用的镜像。
-- Codex 编辑页隐藏通用的 API 密钥和 API 地址字段，避免用户误改 OAuth 管理的认证与端点；模型目录仍使用 DSH 官方编辑器。
-- 模型列表弹框增加“全选”，确认按钮文案为“确定”，并使用官方保存按钮的主色。
-- 在“设置 → 插件 → Codex Auth”中提供图片识别开关；开启后按 DSH 附件规范注册 `view_image`，仅允许当前图片模型读取经过文件系统权限控制的本地图片。
-- 图像生成开关会明确显示为当前不可用：DSH `rc.7` 的 Codex provider 只声明图片输入，不提供图像输出能力。
-- 通过 DSH `rc.7` 的 keyed slot `settings.plugin.item` 注册 UI，并显式提供 `key`。
-
-## 本地构建
-
-在仓库根目录执行：
-
-```sh
-pnpm --filter @tnnevol/dsh-codex-auth install
-pnpm --filter @tnnevol/dsh-codex-auth run check
-```
-
-## 使用本地 DSH CLI 调试
-
-先确保本地 DSH 源码已经安装依赖并可运行，然后在 DSH 仓库目录执行：
-
-```sh
-pnpm --filter @tnnevol/dsh-codex-auth run build
-pnpm dsh web --patch /absolute/path/to/fn-os-apps/plugins/dsh-codex-auth-plugin/cordis.patch.yml
-```
-
-`cordis.patch.yml` 使用包名加载 Host bundle；如果要调试尚未构建的源码，可将 patch 中的 `name` 改成源码入口的绝对路径，并使用 DSH skill 中的 `--patch` 调试流程。
-
-## 发布 rc 版本
-
-当前版本为 npm prerelease，发布时必须使用 `rc` dist-tag：
-
-```sh
-npm run publish:rc
-```
-
-## 安装到 profile
-
-```sh
-dsh plugin --profile web add @tnnevol/dsh-codex-auth
-dsh --profile web --dump-config
-```
-
-安装后重新启动 Web profile。该插件不应与旧的 `dsh-codex-connect` 同时注册同一套 Codex 模型能力；迁移时请先停用旧插件，再启用本插件。
+本 README 仅保留插件识别信息，不再维护具体功能说明。

package/compatibility.json

@@ -4,7 +4,7 @@
     "node": "^22.19.0 || >=24.0.0"
   },
   "dshPluginApi": {
-    "version": "0.1.0-rc.7",
+    "version": "0.1.0-rc.8",
     "packages": [
       "@deepseek-ai/dsh-atomic-write",
       "@deepseek-ai/dsh-attachment",

package/lib/auth-paths.d.ts

@@ -8,5 +8,7 @@ declare const CODEX_AUTH_LOGOUT_PATH = "/plugins/dsh-codex-auth-plugin/auth/logo
 declare const CODEX_USAGE_PATH = "/plugins/dsh-codex-auth-plugin/auth/usage";
 /** Same-origin settings endpoint used when DSH marks a NAS browser as remote. */
 declare const CODEX_AUTH_SETTINGS_PATH = "/plugins/dsh-codex-auth-plugin/auth/settings";
+/** Same-origin endpoint for the DSH-wide Codex default model selection. */
+declare const CODEX_GLOBAL_MODEL_PATH = "/plugins/dsh-codex-auth-plugin/auth/global-model";
 //#endregion
-export { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_USAGE_PATH };
+export { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_USAGE_PATH };

package/lib/auth-paths.js

@@ -8,5 +8,7 @@ const CODEX_AUTH_LOGOUT_PATH = "/plugins/dsh-codex-auth-plugin/auth/logout";
 const CODEX_USAGE_PATH = "/plugins/dsh-codex-auth-plugin/auth/usage";
 /** Same-origin settings endpoint used when DSH marks a NAS browser as remote. */
 const CODEX_AUTH_SETTINGS_PATH = "/plugins/dsh-codex-auth-plugin/auth/settings";
+/** Same-origin endpoint for the DSH-wide Codex default model selection. */
+const CODEX_GLOBAL_MODEL_PATH = "/plugins/dsh-codex-auth-plugin/auth/global-model";
 //#endregion
-export { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_USAGE_PATH };
+export { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_USAGE_PATH };

package/lib/client.js

@@ -6,23 +6,24 @@ window.__ModuleLoader__.load({
 		Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 		let react = require("react");
 		let react_jsx_runtime = require("react/jsx-runtime");
+		let _deepseek_ai_dsh_client_ui_primitives = require("@deepseek-ai/dsh-client-ui-primitives");
 		//#region src/client/CodexCapabilities.tsx
 		/** Live optional-capability settings for the Codex Auth plugin. */
-		const sectionStyle = {
+		const sectionStyle$1 = {
 			display: "flex",
 			flexDirection: "column",
 			gap: 12,
 			borderTop: "1px solid var(--dsw-alias-border-l2)",
 			paddingTop: 14
 		};
-		const headingStyle = {
+		const headingStyle$1 = {
 			margin: 0,
 			fontSize: 14,
 			lineHeight: "20px",
 			fontWeight: 600,
 			color: "var(--dsw-alias-label-primary)"
 		};
-		const bodyStyle$1 = {
+		const bodyStyle$2 = {
 			margin: 0,
 			fontSize: 12,
 			lineHeight: "18px",
@@ -47,6 +48,7 @@ window.__ModuleLoader__.load({
 			cursor: "not-allowed",
 			opacity: .62
 		};
+		const checkboxStyle = { accentColor: "var(--dsw-alias-button-primary-fill)" };
 		const copyStyle = {
 			display: "flex",
 			flexDirection: "column",
@@ -58,7 +60,7 @@ window.__ModuleLoader__.load({
 			fontWeight: 500,
 			color: "var(--dsw-alias-label-primary)"
 		};
-		const actionsStyle = {
+		const actionsStyle$1 = {
 			display: "flex",
 			alignItems: "center",
 			justifyContent: "space-between",
@@ -69,7 +71,7 @@ window.__ModuleLoader__.load({
 			display: "flex",
 			gap: 8
 		};
-		const buttonStyle$1 = {
+		const buttonStyle$2 = {
 			boxSizing: "border-box",
 			minHeight: 30,
 			padding: "4px 12px",
@@ -81,18 +83,18 @@ window.__ModuleLoader__.load({
 			fontSize: 12,
 			cursor: "pointer"
 		};
-		const primaryButtonStyle$1 = {
-			...buttonStyle$1,
+		const primaryButtonStyle$2 = {
+			...buttonStyle$2,
 			border: 0,
 			background: "var(--dsw-alias-button-primary-fill)",
 			color: "var(--dsw-alias-label-primary-foreground)"
 		};
-		const errorStyle$1 = {
-			...bodyStyle$1,
+		const errorStyle$2 = {
+			...bodyStyle$2,
 			color: "var(--dsw-alias-state-error-primary, #d92d20)"
 		};
-		const successStyle = {
-			...bodyStyle$1,
+		const successStyle$1 = {
+			...bodyStyle$2,
 			color: "var(--dsw-alias-state-success-primary, #16825d)"
 		};
 		const UNAVAILABLE_SNAPSHOT = {
@@ -165,32 +167,32 @@ window.__ModuleLoader__.load({
 			const loading = snapshot.status === "loading";
 			const editable = snapshot.status === "ready" && snapshot.writable && !busy;
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
-				style: sectionStyle,
+				style: sectionStyle$1,
 				"aria-labelledby": "dsh-codex-capabilities-title",
 				children: [
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
 						id: "dsh-codex-capabilities-title",
-						style: headingStyle,
+						style: headingStyle$1,
 						children: t("capabilitiesTitle")
 					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 						style: {
-							...bodyStyle$1,
+							...bodyStyle$2,
 							marginTop: 3
 						},
 						children: t("capabilitiesIntro")
 					})] }),
 					loading ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: bodyStyle$1,
+						style: bodyStyle$2,
 						role: "status",
 						children: t("settingsLoading")
 					}) : null,
 					snapshot.status === "unavailable" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: errorStyle$1,
+						style: errorStyle$2,
 						role: "alert",
 						children: t("settingsUnavailable")
 					}) : null,
 					snapshot.status === "ready" && !snapshot.writable ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-						style: errorStyle$1,
+						style: errorStyle$2,
 						role: "alert",
 						children: t("settingsReadOnly")
 					}) : null,
@@ -201,6 +203,7 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 								style: rowStyle$1,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: checkboxStyle,
 									type: "checkbox",
 									checked: draft.enableImageTool,
 									onChange: (event) => {
@@ -212,7 +215,7 @@ window.__ModuleLoader__.load({
 										style: labelStyle,
 										children: t("enableImageRecognition")
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: bodyStyle$1,
+										style: bodyStyle$2,
 										children: t("enableImageRecognitionHelp")
 									})]
 								})]
@@ -220,6 +223,7 @@ window.__ModuleLoader__.load({
 							/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("label", {
 								style: rowStyle$1,
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: checkboxStyle,
 									type: "checkbox",
 									checked: draft.enableImageUpload,
 									onChange: (event) => {
@@ -231,7 +235,7 @@ window.__ModuleLoader__.load({
 										style: labelStyle,
 										children: t("enableImageUpload")
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: bodyStyle$1,
+										style: bodyStyle$2,
 										children: t("enableImageUploadHelp")
 									})]
 								})]
@@ -240,6 +244,7 @@ window.__ModuleLoader__.load({
 								style: disabledRowStyle,
 								title: t("imageGenerationUnavailableHelp"),
 								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("input", {
+									style: checkboxStyle,
 									type: "checkbox",
 									checked: false,
 									disabled: true,
@@ -251,7 +256,7 @@ window.__ModuleLoader__.load({
 										style: labelStyle,
 										children: t("enableImageGeneration")
 									}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-										style: bodyStyle$1,
+										style: bodyStyle$2,
 										children: t("imageGenerationUnavailableHelp")
 									})]
 								})]
@@ -259,27 +264,27 @@ window.__ModuleLoader__.load({
 						]
 					}),
 					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-						style: actionsStyle,
+						style: actionsStyle$1,
 						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 							"aria-live": "polite",
 							children: [feedback === "saved" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								style: successStyle,
+								style: successStyle$1,
 								children: t("settingsSaved")
 							}) : null, feedback === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
-								style: errorStyle$1,
+								style: errorStyle$2,
 								children: t("settingsSaveFailed")
 							}) : null]
 						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
 							style: buttonsStyle,
 							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: buttonStyle$1,
+								style: buttonStyle$2,
 								disabled: !dirty || busy,
 								onClick: discard,
 								children: t("discard")
 							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
 								type: "button",
-								style: primaryButtonStyle$1,
+								style: primaryButtonStyle$2,
 								disabled: !dirty || !snapshot.writable || busy,
 								onClick: () => {
 									save();
@@ -302,6 +307,566 @@ window.__ModuleLoader__.load({
 		const CODEX_USAGE_PATH = "/plugins/dsh-codex-auth-plugin/auth/usage";
 		/** Same-origin settings endpoint used when DSH marks a NAS browser as remote. */
 		const CODEX_AUTH_SETTINGS_PATH = "/plugins/dsh-codex-auth-plugin/auth/settings";
+		/** Same-origin endpoint for the DSH-wide Codex default model selection. */
+		const CODEX_GLOBAL_MODEL_PATH = "/plugins/dsh-codex-auth-plugin/auth/global-model";
+		//#endregion
+		//#region src/client/CodexGlobalModel.tsx
+		/** DSH-wide Codex default model controls. */
+		const sectionStyle = {
+			display: "flex",
+			flexDirection: "column",
+			gap: 12,
+			borderTop: "1px solid var(--dsw-alias-border-l2)",
+			paddingTop: 14
+		};
+		const headingStyle = {
+			margin: 0,
+			fontSize: 14,
+			lineHeight: "20px",
+			fontWeight: 600,
+			color: "var(--dsw-alias-label-primary)"
+		};
+		const bodyStyle$1 = {
+			margin: 0,
+			fontSize: 12,
+			lineHeight: "18px",
+			color: "var(--dsw-alias-label-secondary)"
+		};
+		const fieldsStyle = {
+			display: "flex",
+			alignItems: "center",
+			minWidth: 0
+		};
+		const actionsStyle = {
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: 10,
+			flexWrap: "wrap"
+		};
+		const buttonStyle$1 = {
+			boxSizing: "border-box",
+			minHeight: 30,
+			padding: "4px 12px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 16,
+			background: "var(--dsw-alias-bg-layer-1)",
+			color: "var(--dsw-alias-label-primary)",
+			font: "inherit",
+			fontSize: 12,
+			cursor: "pointer"
+		};
+		const primaryButtonStyle$1 = {
+			...buttonStyle$1,
+			border: 0,
+			background: "var(--dsw-alias-button-primary-fill)",
+			color: "var(--dsw-alias-label-primary-foreground)"
+		};
+		const errorStyle$1 = {
+			...bodyStyle$1,
+			color: "var(--dsw-alias-state-error-primary, #d92d20)"
+		};
+		const successStyle = {
+			...bodyStyle$1,
+			color: "var(--dsw-alias-state-success-primary, #16825d)"
+		};
+		async function request(method, body) {
+			const response = await fetch(CODEX_GLOBAL_MODEL_PATH, {
+				method,
+				headers: {
+					accept: "application/json",
+					...body === void 0 ? {} : { "content-type": "application/json" }
+				},
+				...body === void 0 ? {} : { body: JSON.stringify(body) },
+				credentials: "same-origin"
+			});
+			const payload = await response.json().catch(() => void 0);
+			if (!response.ok) throw new Error(typeof payload === "object" && payload !== null && "error" in payload && typeof payload.error === "string" ? payload.error : `HTTP ${response.status}`);
+			return payload;
+		}
+		function codexModels(groups) {
+			return groups.find((group) => group.id === "openai-codex")?.models ?? [];
+		}
+		const choiceButtonStyle = {
+			boxSizing: "border-box",
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: 8,
+			width: "100%",
+			minHeight: 34,
+			padding: "5px 9px",
+			border: "1px solid var(--dsw-alias-border-l2)",
+			borderRadius: 8,
+			background: "var(--dsw-alias-bg-layer-1)",
+			color: "var(--dsw-alias-label-primary)",
+			font: "inherit",
+			fontSize: 13,
+			textAlign: "left",
+			cursor: "pointer"
+		};
+		const choicePanelStyle = {
+			position: "absolute",
+			zIndex: 20,
+			top: "calc(100% + 6px)",
+			left: 0,
+			width: "max(100%, 220px)",
+			maxHeight: 260,
+			overflowY: "auto",
+			boxSizing: "border-box",
+			padding: 6,
+			border: "1px solid var(--dsw-alias-border-l1, var(--dsw-alias-border-l2))",
+			borderRadius: 10,
+			background: "var(--dsw-alias-bg-layer-3, var(--dsw-alias-bg-layer-2))",
+			boxShadow: "var(--dsw-alias-shadow-popover, 0 12px 30px rgb(0 0 0 / 24%))"
+		};
+		const choiceItemStyle = {
+			display: "flex",
+			alignItems: "center",
+			justifyContent: "space-between",
+			gap: 10,
+			width: "100%",
+			minHeight: 34,
+			padding: "6px 9px",
+			border: 0,
+			borderRadius: 7,
+			background: "transparent",
+			color: "var(--dsw-alias-label-primary)",
+			font: "inherit",
+			fontSize: 13,
+			textAlign: "left",
+			cursor: "pointer"
+		};
+		function ChevronDown() {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+				"aria-hidden": "true",
+				style: {
+					display: "inline-flex",
+					alignItems: "center",
+					color: "var(--dsw-alias-label-tertiary)",
+					lineHeight: 1
+				},
+				children: /* @__PURE__ */ (0, react_jsx_runtime.jsx)(_deepseek_ai_dsh_client_ui_primitives.IconChevronDownOutline14, { size: 14 })
+			});
+		}
+		const pickerButtonStyle = {
+			...choiceButtonStyle,
+			width: "fit-content",
+			maxWidth: "100%",
+			minHeight: 30,
+			padding: "3px 4px",
+			border: 0,
+			borderRadius: 7,
+			background: "transparent",
+			fontSize: 14
+		};
+		const pickerPanelStyle = {
+			...choicePanelStyle,
+			display: "flex",
+			position: "absolute",
+			gap: 0,
+			width: "min(210px, calc(100vw - 32px))",
+			maxHeight: 260,
+			padding: 5,
+			overflow: "visible"
+		};
+		const pickerColumnStyle = {
+			display: "flex",
+			width: "100%",
+			flexDirection: "column",
+			gap: 2
+		};
+		const pickerSubmenuStyle = {
+			position: "absolute",
+			zIndex: 1,
+			top: 5,
+			left: "calc(100% + 4px)",
+			width: "210px",
+			maxHeight: 250,
+			overflowY: "auto",
+			boxSizing: "border-box",
+			display: "flex",
+			flexDirection: "column",
+			gap: 2,
+			padding: 5,
+			border: "1px solid var(--dsw-alias-border-l1, var(--dsw-alias-border-l2))",
+			borderRadius: 10,
+			background: "var(--dsw-alias-bg-layer-3, var(--dsw-alias-bg-layer-2))",
+			boxShadow: "var(--dsw-alias-shadow-popover, 0 12px 30px rgb(0 0 0 / 24%))"
+		};
+		function PickerRow({ label, value, disabled, active, onClick }) {
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+				type: "button",
+				disabled,
+				style: {
+					...choiceItemStyle,
+					minHeight: 34,
+					padding: "4px 8px",
+					background: active ? "var(--dsw-alias-interactive-bg-active, var(--dsw-alias-interactive-bg-hover))" : "transparent",
+					opacity: disabled ? .5 : 1,
+					cursor: disabled ? "not-allowed" : "pointer"
+				},
+				onMouseEnter: (event) => {
+					if (!disabled) event.currentTarget.style.background = "var(--dsw-alias-interactive-bg-hover, var(--dsw-alias-bg-layer-1))";
+				},
+				onMouseLeave: (event) => {
+					event.currentTarget.style.background = active ? "var(--dsw-alias-interactive-bg-active, var(--dsw-alias-interactive-bg-hover))" : "transparent";
+				},
+				onClick,
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+					style: {
+						minWidth: 0,
+						overflow: "hidden",
+						textOverflow: "ellipsis",
+						whiteSpace: "nowrap",
+						fontSize: 13
+					},
+					children: label
+				}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+					style: {
+						display: "inline-flex",
+						alignItems: "center",
+						gap: 6,
+						minWidth: 0,
+						color: "var(--dsw-alias-label-secondary)",
+						fontSize: 13
+					},
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						style: {
+							maxWidth: 140,
+							overflow: "hidden",
+							textOverflow: "ellipsis",
+							whiteSpace: "nowrap"
+						},
+						children: value
+					}), !disabled ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						"aria-hidden": "true",
+						style: {
+							fontSize: 18,
+							lineHeight: 1
+						},
+						children: "›"
+					}) : null]
+				})]
+			});
+		}
+		function GlobalModelPicker({ modelMenuLabel, effortMenuLabel, modelLabel, modelPlaceholder, effortLabel, selectedModelId, selectedEffortId, modelOptions, effortOptions, activeMenu, onToggle, onOpenSubmenu, onChooseModel, onChooseEffort }) {
+			const open = activeMenu !== null;
+			const modelValue = modelLabel === "" ? modelPlaceholder : modelLabel;
+			const buttonValue = effortLabel === "" ? modelValue : `${modelValue} · ${effortLabel}`;
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+				style: {
+					position: "relative",
+					width: "fit-content",
+					maxWidth: "100%"
+				},
+				children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+					type: "button",
+					"aria-haspopup": "menu",
+					"aria-expanded": open,
+					style: pickerButtonStyle,
+					onClick: onToggle,
+					children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+						style: {
+							minWidth: 0,
+							overflow: "hidden",
+							textOverflow: "ellipsis",
+							whiteSpace: "nowrap",
+							color: modelLabel === "" ? "var(--dsw-alias-label-dimmed)" : "var(--dsw-alias-label-primary)"
+						},
+						children: buttonValue
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(ChevronDown, {})]
+				}), open ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+					role: "menu",
+					style: pickerPanelStyle,
+					children: [
+						/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+							style: pickerColumnStyle,
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(PickerRow, {
+								label: modelMenuLabel,
+								value: modelValue,
+								active: activeMenu === "model",
+								onClick: () => {
+									onOpenSubmenu("model");
+								}
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)(PickerRow, {
+								label: effortMenuLabel,
+								value: effortLabel,
+								active: activeMenu === "effort",
+								onClick: () => {
+									onOpenSubmenu("effort");
+								}
+							})]
+						}),
+						activeMenu === "model" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							role: "menu",
+							"aria-label": modelMenuLabel,
+							style: pickerSubmenuStyle,
+							children: modelOptions.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+								type: "button",
+								role: "menuitemradio",
+								"aria-checked": option.id === selectedModelId,
+								style: option.id === selectedModelId ? {
+									...choiceItemStyle,
+									background: "var(--dsw-alias-interactive-bg-active, var(--dsw-alias-interactive-bg-hover))"
+								} : choiceItemStyle,
+								onClick: () => {
+									onChooseModel(option.id);
+								},
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									style: {
+										minWidth: 0,
+										overflow: "hidden",
+										textOverflow: "ellipsis",
+										whiteSpace: "nowrap"
+									},
+									children: option.label
+								}), option.id === selectedModelId ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									"aria-hidden": "true",
+									children: "✓"
+								}) : null]
+							}, option.id))
+						}) : null,
+						activeMenu === "effort" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("div", {
+							role: "menu",
+							"aria-label": effortMenuLabel,
+							style: pickerSubmenuStyle,
+							children: effortOptions.map((option) => /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("button", {
+								type: "button",
+								role: "menuitemradio",
+								"aria-checked": option.id === selectedEffortId,
+								style: option.id === selectedEffortId ? {
+									...choiceItemStyle,
+									background: "var(--dsw-alias-interactive-bg-active, var(--dsw-alias-interactive-bg-hover))"
+								} : choiceItemStyle,
+								onClick: () => {
+									onChooseEffort(option.id);
+								},
+								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", { children: option.label }), option.id === selectedEffortId ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+									"aria-hidden": "true",
+									children: "✓"
+								}) : null]
+							}, option.id))
+						}) : null
+					]
+				}) : null]
+			});
+		}
+		/** Set the model used by new DSH sessions and the host-backed agent entry point. */
+		function CodexGlobalModel({ connection, t }) {
+			const [models, setModels] = (0, react.useState)([]);
+			const [current, setCurrent] = (0, react.useState)();
+			const [draftModel, setDraftModel] = (0, react.useState)("");
+			const [draftEffort, setDraftEffort] = (0, react.useState)("");
+			const [status, setStatus] = (0, react.useState)("loading");
+			const [busy, setBusy] = (0, react.useState)(false);
+			const [feedback, setFeedback] = (0, react.useState)("idle");
+			const [openMenu, setOpenMenu] = (0, react.useState)(null);
+			const fieldsRef = (0, react.useRef)(null);
+			const load = (0, react.useCallback)(async () => {
+				setStatus("loading");
+				try {
+					const [global, catalog] = await Promise.all([request("GET"), connection.api.llm.models({})]);
+					if (!catalog.result.ok) throw new Error(catalog.result.error.message);
+					const available = codexModels(catalog.result.value.groups);
+					setModels(available);
+					setCurrent(global.globalModel);
+					setDraftModel(global.globalModel?.model ?? "");
+					setDraftEffort(global.globalModel?.reasoningEffort ?? "");
+					setStatus("ready");
+				} catch {
+					setStatus("error");
+				}
+			}, [connection]);
+			(0, react.useEffect)(() => {
+				load();
+			}, [load]);
+			(0, react.useEffect)(() => {
+				if (openMenu === null) return;
+				const onPointerDown = (event) => {
+					if (event.target instanceof Node && fieldsRef.current?.contains(event.target)) return;
+					setOpenMenu(null);
+				};
+				const onKeyDown = (event) => {
+					if (event.key === "Escape") setOpenMenu(null);
+				};
+				document.addEventListener("pointerdown", onPointerDown);
+				document.addEventListener("keydown", onKeyDown);
+				return () => {
+					document.removeEventListener("pointerdown", onPointerDown);
+					document.removeEventListener("keydown", onKeyDown);
+				};
+			}, [openMenu]);
+			const selected = (0, react.useMemo)(() => models.find((model) => model.id === draftModel), [draftModel, models]);
+			const efforts = selected?.reasoning?.efforts ?? [];
+			const modelLabel = selected?.name ?? draftModel;
+			const modelOptions = [
+				{
+					id: "",
+					label: t("globalModelUnset")
+				},
+				...draftModel !== "" && !models.some((model) => model.id === draftModel) ? [{
+					id: draftModel,
+					label: draftModel
+				}] : [],
+				...models.map((model) => ({
+					id: model.id,
+					label: model.name
+				}))
+			];
+			const effortOptions = [{
+				id: "",
+				label: t("globalModelProviderDefault")
+			}, ...efforts.map((effort) => ({
+				id: effort.id,
+				label: effort.name
+			}))];
+			const dirty = draftModel.length > 0 && (current?.model !== draftModel || (current?.reasoningEffort ?? "") !== draftEffort);
+			const save = async () => {
+				if (!dirty || busy) return;
+				setBusy(true);
+				setFeedback("idle");
+				try {
+					const result = await request("PUT", {
+						model: draftModel,
+						...draftEffort.length === 0 ? {} : { reasoningEffort: draftEffort }
+					});
+					setCurrent(result.globalModel);
+					setDraftModel(result.globalModel?.model ?? draftModel);
+					setDraftEffort(result.globalModel?.reasoningEffort ?? "");
+					setFeedback("saved");
+				} catch {
+					setFeedback("error");
+				} finally {
+					setBusy(false);
+				}
+			};
+			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
+				style: sectionStyle,
+				"aria-labelledby": "dsh-codex-global-model-title",
+				children: [
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("h3", {
+						id: "dsh-codex-global-model-title",
+						style: headingStyle,
+						children: t("globalModelTitle")
+					}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: {
+							...bodyStyle$1,
+							marginTop: 3
+						},
+						children: t("globalModelIntro")
+					})] }),
+					status === "loading" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: bodyStyle$1,
+						children: t("settingsLoading")
+					}) : null,
+					status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						style: errorStyle$1,
+						role: "alert",
+						children: t("globalModelLoadFailed")
+					}) : null,
+					status === "ready" ? /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						ref: fieldsRef,
+						style: fieldsStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)(GlobalModelPicker, {
+							modelMenuLabel: t("globalModelModel"),
+							effortMenuLabel: t("globalModelThinking"),
+							modelLabel,
+							modelPlaceholder: t("globalModelUnset"),
+							effortLabel: effortOptions.find((option) => option.id === draftEffort)?.label ?? t("globalModelProviderDefault"),
+							selectedModelId: draftModel,
+							selectedEffortId: draftEffort,
+							modelOptions,
+							effortOptions,
+							activeMenu: openMenu,
+							onToggle: () => {
+								setOpenMenu((current) => current === null ? "root" : null);
+							},
+							onOpenSubmenu: (menu) => {
+								setOpenMenu(menu);
+							},
+							onChooseModel: (id) => {
+								setDraftModel(id);
+								setDraftEffort("");
+								setFeedback("idle");
+								setOpenMenu(null);
+							},
+							onChooseEffort: (id) => {
+								setDraftEffort(id);
+								setFeedback("idle");
+								setOpenMenu(null);
+							}
+						}), selected === void 0 && modelLabel !== "" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+							style: bodyStyle$1,
+							children: t("globalModelUnavailable")
+						}) : null]
+					}) : null,
+					/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
+						style: actionsStyle,
+						children: [/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							"aria-live": "polite",
+							children: [feedback === "saved" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: successStyle,
+								children: t("settingsSaved")
+							}) : null, feedback === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("span", {
+								style: errorStyle$1,
+								children: t("settingsSaveFailed")
+							}) : null]
+						}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("span", {
+							style: {
+								display: "flex",
+								gap: 8
+							},
+							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: buttonStyle$1,
+								disabled: status === "loading" || busy,
+								onClick: () => {
+									load();
+								},
+								children: t("refreshUsage")
+							}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+								type: "button",
+								style: primaryButtonStyle$1,
+								disabled: !dirty || busy,
+								onClick: () => {
+									save();
+								},
+								children: busy ? t("saving") : t("setGlobalModel")
+							})]
+						})]
+					})
+				]
+			});
+		}
+		//#endregion
+		//#region src/client/copy-to-clipboard.ts
+		async function copyTextToClipboard(text, environment = {}) {
+			const navigatorRef = environment.navigator ?? globalThis.navigator;
+			const documentRef = environment.document ?? globalThis.document;
+			try {
+				if (typeof navigatorRef?.clipboard?.writeText === "function") {
+					await navigatorRef.clipboard.writeText(text);
+					return;
+				}
+			} catch {}
+			if (documentRef === void 0) throw new Error("Clipboard is unavailable");
+			const textarea = documentRef.createElement("textarea");
+			textarea.value = text;
+			textarea.setAttribute("readonly", "");
+			textarea.style.position = "fixed";
+			textarea.style.top = "0";
+			textarea.style.left = "-9999px";
+			textarea.style.opacity = "0";
+			documentRef.body.appendChild(textarea);
+			textarea.focus();
+			textarea.select();
+			try {
+				if (!documentRef.execCommand("copy")) throw new Error("Copy command was rejected");
+			} finally {
+				documentRef.body.removeChild(textarea);
+			}
+		}
 		//#endregion
 		//#region src/client/CodexAuthCard.tsx
 		/** Expandable account card for the DSH Plugins settings section. */
@@ -485,7 +1050,7 @@ window.__ModuleLoader__.load({
 			maxWidth: 192,
 			height: 8,
 			borderRadius: 999,
-			background: "var(--dsw-alias-bg-layer-3, rgba(127, 127, 127, 0.28))"
+			background: "rgba(127, 127, 127, 0.28)"
 		};
 		const usageFillStyle = {
 			height: "100%",
@@ -617,13 +1182,15 @@ window.__ModuleLoader__.load({
 				})
 			});
 		}
-		/** Render a standalone login/logout card in the rc.7 keyed Plugin slot. */
-		function CodexAuthCard({ t, configScope }) {
+		/** Render a standalone login/logout card in the rc.8 keyed Plugin slot. */
+		function CodexAuthCard({ t, configScope, connection }) {
 			if (t === void 0) throw new Error("Codex auth card requires its translation function");
+			if (connection === void 0) throw new Error("Codex auth card requires the DSH connection");
 			const [open, setOpen] = (0, react.useState)(false);
 			const [status, setStatus] = (0, react.useState)({ status: "loading" });
 			const [busy, setBusy] = (0, react.useState)(false);
 			const [challenge, setChallenge] = (0, react.useState)();
+			const [copyStatus, setCopyStatus] = (0, react.useState)("idle");
 			const [usage, setUsage] = (0, react.useState)({ status: "hidden" });
 			const refreshUsage = (0, react.useCallback)(async () => {
 				if (status.status !== "signed-in") return;
@@ -641,7 +1208,10 @@ window.__ModuleLoader__.load({
 				try {
 					const next = await jsonRequest(CODEX_AUTH_STATUS_PATH);
 					setStatus(next);
-					if (next.status !== "signing-in") setChallenge(void 0);
+					if (next.status !== "signing-in") {
+						setChallenge(void 0);
+						setCopyStatus("idle");
+					}
 				} catch (error) {
 					setStatus(error instanceof AccountRequestError && error.code === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
 						status: "error",
@@ -687,6 +1257,7 @@ window.__ModuleLoader__.load({
 				setBusy(true);
 				setStatus({ status: "signing-in" });
 				setChallenge(void 0);
+				setCopyStatus("idle");
 				try {
 					const next = await jsonRequest(CODEX_AUTH_LOGIN_PATH, "POST");
 					setChallenge(next);
@@ -694,6 +1265,7 @@ window.__ModuleLoader__.load({
 				} catch (error) {
 					popup.close();
 					setChallenge(void 0);
+					setCopyStatus("idle");
 					setStatus(error instanceof AccountRequestError && error.code === "remote-web-origin-not-trusted" ? { status: "remote-web-origin-not-trusted" } : {
 						status: "error",
 						message: error instanceof Error ? error.message : t("requestFailed")
@@ -709,6 +1281,7 @@ window.__ModuleLoader__.load({
 					setStatus({ status: "signed-out" });
 					setUsage({ status: "hidden" });
 					setChallenge(void 0);
+					setCopyStatus("idle");
 				} catch (error) {
 					setStatus({
 						status: "error",
@@ -718,6 +1291,15 @@ window.__ModuleLoader__.load({
 					setBusy(false);
 				}
 			};
+			const copyAuthorizationCode = async () => {
+				if (challenge === void 0) return;
+				try {
+					await copyTextToClipboard(challenge.userCode);
+					setCopyStatus("copied");
+				} catch {
+					setCopyStatus("failed");
+				}
+			};
 			const label = status.status === "signed-in" ? t("signedIn") : status.status === "loading" ? t("loading") : status.status === "signing-in" ? t("signingIn") : status.status === "remote-web-origin-not-trusted" ? t("remoteOrigin") : status.status === "error" ? t("requestFailed") : t("signedOut");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("li", {
 				style: {
@@ -827,34 +1409,56 @@ window.__ModuleLoader__.load({
 								flexDirection: "column",
 								gap: 8
 							},
-							children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
-								style: bodyStyle,
-								children: t("authorizationCodeHelp")
-							}), /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
-								style: {
-									display: "flex",
-									alignItems: "center",
-									flexWrap: "wrap",
-									gap: 8
-								},
-								children: [/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
-									"aria-label": t("authorizationCodeLabel"),
-									style: codeStyle,
-									children: challenge.userCode
-								}), /* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
-									href: challenge.verificationUri,
-									target: "_blank",
-									rel: "noreferrer",
+							children: [
+								/* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: bodyStyle,
+									children: t("authorizationCodeHelp")
+								}),
+								/* @__PURE__ */ (0, react_jsx_runtime.jsxs)("div", {
 									style: {
-										...buttonStyle,
-										display: "inline-flex",
+										display: "flex",
 										alignItems: "center",
-										textDecoration: "none"
+										flexWrap: "wrap",
+										gap: 8
 									},
-									children: t("openAuthorization")
-								})]
-							})]
+									children: [
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("code", {
+											"aria-label": t("authorizationCodeLabel"),
+											style: codeStyle,
+											children: challenge.userCode
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("button", {
+											type: "button",
+											style: buttonStyle,
+											onClick: () => {
+												copyAuthorizationCode();
+											},
+											children: copyStatus === "copied" ? t("authorizationCodeCopied") : t("copyAuthorizationCode")
+										}),
+										/* @__PURE__ */ (0, react_jsx_runtime.jsx)("a", {
+											href: challenge.verificationUri,
+											target: "_blank",
+											rel: "noreferrer",
+											style: {
+												...buttonStyle,
+												display: "inline-flex",
+												alignItems: "center",
+												textDecoration: "none"
+											},
+											children: t("openAuthorization")
+										})
+									]
+								}),
+								copyStatus === "failed" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+									style: errorStyle,
+									children: t("authorizationCodeCopyFailed")
+								}) : null
+							]
 						}) : null,
+						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CodexGlobalModel, {
+							connection,
+							t
+						}),
 						/* @__PURE__ */ (0, react_jsx_runtime.jsx)(CodexCapabilities, {
 							scope: configScope,
 							t
@@ -1646,6 +2250,9 @@ window.__ModuleLoader__.load({
 			remoteOrigin: "This browser origin is not trusted by the DSH Web server.",
 			authorizationCodeHelp: "The plugin generated a one-time authorization code. Enter it on the opened Codex authorization page; no workspace selection is required.",
 			authorizationCodeLabel: "Codex authorization code",
+			copyAuthorizationCode: "Copy",
+			authorizationCodeCopied: "Copied",
+			authorizationCodeCopyFailed: "Unable to copy the authorization code. Please select and copy it manually.",
 			openAuthorization: "Open authorization page",
 			usageTitle: "General usage limits",
 			refreshUsage: "Refresh",
@@ -1671,7 +2278,7 @@ window.__ModuleLoader__.load({
 			enableImageUpload: "Enable image upload",
 			enableImageUploadHelp: "Allow image-capable Codex models to receive images pasted or dropped into the conversation.",
 			enableImageGeneration: "Enable image generation",
-			imageGenerationUnavailableHelp: "Not supported by the Codex provider and DSH rc.7 model adapter.",
+			imageGenerationUnavailableHelp: "Not supported by the Codex provider and DSH rc.8 model adapter.",
 			settingsLoading: "Loading plugin settings…",
 			settingsUnavailable: "Plugin settings are unavailable in this dsh profile.",
 			settingsReadOnly: "This profile exposes plugin settings as read-only.",
@@ -1679,7 +2286,16 @@ window.__ModuleLoader__.load({
 			settingsSaveFailed: "Unable to save settings.",
 			discard: "Discard",
 			save: "Save",
-			saving: "Saving…"
+			saving: "Saving…",
+			globalModelTitle: "Global model",
+			globalModelIntro: "Choose the default Codex model for new DSH sessions.",
+			globalModelModel: "Model",
+			globalModelThinking: "Reasoning effort",
+			globalModelProviderDefault: "Provider default",
+			globalModelUnset: "Select a model",
+			globalModelLoadFailed: "Unable to load the Codex model catalog.",
+			globalModelUnavailable: "This model is no longer in the current catalog.",
+			setGlobalModel: "Set as global model"
 		};
 		const zh = {
 			title: "Codex Auth",
@@ -1698,6 +2314,9 @@ window.__ModuleLoader__.load({
 			remoteOrigin: "当前浏览器来源未被 DSH Web 服务信任。",
 			authorizationCodeHelp: "插件已生成一次性授权码。请在打开的 Codex 授权页面中输入此代码，无需选择工作空间。",
 			authorizationCodeLabel: "Codex 授权码",
+			copyAuthorizationCode: "复制",
+			authorizationCodeCopied: "已复制",
+			authorizationCodeCopyFailed: "授权码复制失败，请手动选中并复制。",
 			openAuthorization: "打开授权页面",
 			usageTitle: "通用使用限额",
 			refreshUsage: "刷新",
@@ -1723,7 +2342,7 @@ window.__ModuleLoader__.load({
 			enableImageUpload: "启用图片上传",
 			enableImageUploadHelp: "允许具备图片输入能力的 Codex 模型接收粘贴或拖入对话的图片。",
 			enableImageGeneration: "启用图像生成",
-			imageGenerationUnavailableHelp: "当前 Codex 提供方和 DSH rc.7 模型适配器暂不支持图像输出。",
+			imageGenerationUnavailableHelp: "当前 Codex 提供方和 DSH rc.8 模型适配器暂不支持图像输出。",
 			settingsLoading: "正在加载插件设置…",
 			settingsUnavailable: "此 dsh profile 无法使用插件设置。",
 			settingsReadOnly: "此 profile 的插件设置为只读。",
@@ -1731,7 +2350,16 @@ window.__ModuleLoader__.load({
 			settingsSaveFailed: "设置保存失败。",
 			discard: "放弃",
 			save: "保存",
-			saving: "保存中…"
+			saving: "保存中…",
+			globalModelTitle: "全局模型",
+			globalModelIntro: "设置新 DSH 会话使用的 Codex 默认模型。",
+			globalModelModel: "模型",
+			globalModelThinking: "思考强度",
+			globalModelProviderDefault: "提供方默认",
+			globalModelUnset: "请选择模型",
+			globalModelLoadFailed: "加载 Codex 模型目录失败。",
+			globalModelUnavailable: "当前模型已不在可用目录中。",
+			setGlobalModel: "设置为全局模型"
 		};
 		//#endregion
 		//#region src/client/index.tsx
@@ -1751,7 +2379,8 @@ window.__ModuleLoader__.load({
 				en
 			}), "dsh-codex-auth-plugin: locale");
 			const t = ctx.locale.bind(namespace);
-			const remoteScope = ctx.get("connection").isLoopback ? void 0 : new CodexAuthRemoteSettingsScope();
+			const connection = ctx.get("connection");
+			const remoteScope = connection.isLoopback ? void 0 : new CodexAuthRemoteSettingsScope();
 			const configScope = remoteScope ?? ctx.settingsScope.bind({
 				namespace: "dsh-codex-auth",
 				decode: decodeCodexAuthSettings
@@ -1767,7 +2396,8 @@ window.__ModuleLoader__.load({
 				key: CODEX_AUTH_SETTINGS_NAMESPACE,
 				inject: () => ({
 					t,
-					configScope
+					configScope,
+					connection
 				})
 			}, CodexAuthCard));
 		}

package/lib/index.d.ts

@@ -1,4 +1,4 @@
-import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH } from "./auth-paths.js";
+import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH } from "./auth-paths.js";
 import { a as CODEX_AUTH_FILENAME, c as codexAuthPath, i as logoutCodex, n as codexAuthStatus, o as CODEX_PROVIDER, r as loginCodex, s as CodexCredentialStore, t as CodexAuthStatus } from "./auth-BBBeI24-.js";
 import { CredentialProvider } from "@deepseek-ai/dsh-credentials";
 import "@deepseek-ai/dsh-settings";
@@ -124,4 +124,4 @@ declare const name = "dsh-codex-auth-plugin";
 declare const inject: string[];
 declare function apply(ctx: Context): void;
 //#endregion
-export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, type CodexAuthStatus, CodexCredentialMirror, CodexCredentialStore, type CodexLoginChallenge, CodexUsageService, CodexWebAuth, type CodexWebAuthStatus, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };
+export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, type CodexAuthStatus, CodexCredentialMirror, CodexCredentialStore, type CodexLoginChallenge, CodexUsageService, CodexWebAuth, type CodexWebAuthStatus, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };

package/lib/index.js

@@ -1,5 +1,5 @@
 import { a as CODEX_PROVIDER, i as CODEX_AUTH_FILENAME, n as loginCodex, o as CodexCredentialStore, r as logoutCodex, s as codexAuthPath, t as codexAuthStatus } from "./auth-DQ2F4vc6.js";
-import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_USAGE_PATH } from "./auth-paths.js";
+import { CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_SETTINGS_PATH, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_USAGE_PATH } from "./auth-paths.js";
 import { createModels } from "@earendil-works/pi-ai";
 import { openaiCodexProvider } from "@earendil-works/pi-ai/providers/openai-codex";
 import { basename } from "node:path";
@@ -158,6 +158,7 @@ const CODEX_AUTH_URL_TIMEOUT_MS = 3e4;
 const REMOTE_WEB_ORIGIN_NOT_TRUSTED = "remote-web-origin-not-trusted";
 const CODEX_USAGE_UNAVAILABLE = "codex-usage-unavailable";
 const CODEX_SETTINGS_INVALID = "codex-settings-invalid";
+const CODEX_GLOBAL_MODEL_INVALID = "codex-global-model-invalid";
 const CODEX_SETTINGS_BODY_LIMIT = 8192;
 function signedInStatus(expiresAt) {
 	return expiresAt === void 0 ? { status: "signed-in" } : {
@@ -393,6 +394,56 @@ function decodeSettingsWrite(value) {
 	if (typeof record["enableImageTool"] !== "boolean" || typeof record["enableImageUpload"] !== "boolean") return;
 	return decodeCodexAuthSettings(record);
 }
+function codexGlobalModelOf(selection) {
+	if (selection.provider !== "openai-codex") return void 0;
+	return {
+		model: selection.model,
+		...selection.reasoningEffort === void 0 ? {} : { reasoningEffort: selection.reasoningEffort }
+	};
+}
+function decodeGlobalModelWrite(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	const record = value;
+	if (typeof record.model !== "string" || record.model.trim().length === 0) return void 0;
+	if (record.reasoningEffort !== void 0 && (typeof record.reasoningEffort !== "string" || record.reasoningEffort.trim().length === 0)) return void 0;
+	return {
+		model: record.model.trim(),
+		...typeof record.reasoningEffort === "string" ? { reasoningEffort: record.reasoningEffort } : {}
+	};
+}
+/** Register the plugin-owned bridge to DSH rc.8's shared Agent default model. */
+function registerCodexGlobalModelRoute(ctx, defaultModel, llm) {
+	ctx.effect(() => {
+		const authorize = (req, res) => {
+			if (trustedRequest(req)) return true;
+			json(res, 403, { error: REMOTE_WEB_ORIGIN_NOT_TRUSTED });
+			return false;
+		};
+		return ctx.webServer.register({
+			kind: "exact",
+			path: CODEX_GLOBAL_MODEL_PATH,
+			handler: async (req, res) => {
+				if (req.method !== "GET" && req.method !== "PUT") return json(res, 405, { error: "method not allowed" });
+				if (!authorize(req, res)) return;
+				if (req.method === "GET") return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
+				try {
+					const next = decodeGlobalModelWrite(await readJsonBody(req));
+					if (next === void 0) return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
+					const resolved = await llm.resolveCallConfig({
+						provider: CODEX_PROVIDER,
+						model: next.model,
+						...next.reasoningEffort === void 0 ? {} : { reasoningEffort: next.reasoningEffort }
+					});
+					if (resolved.provider !== "openai-codex") return json(res, 400, { error: CODEX_GLOBAL_MODEL_INVALID });
+					await defaultModel.saveSelection(resolved);
+					return json(res, 200, { globalModel: codexGlobalModelOf(defaultModel.currentSelection()) });
+				} catch (error) {
+					return json(res, 400, { error: safeMessage(error) });
+				}
+			}
+		});
+	}, "dsh-codex-auth-plugin: global Codex model route");
+}
 /** Register the plugin-owned settings endpoint for browsers opened through a NAS authority. */
 function registerCodexSettingsRoute(ctx, settings) {
 	ctx.effect(() => {
@@ -715,6 +766,8 @@ function viewImageTool(ctx) {
 /** OpenAI Codex adapter assembled from dsh's public pi-ai extension seam. */
 /** Keep the Codex stream open while the provider is still producing output. */
 const CODEX_STREAM_IDLE_TIMEOUT_MS = 3e5;
+/** Match dsh rc.8's default request-level image payload bound. */
+const CODEX_MAX_REQUEST_IMAGE_BYTES = 20971520;
 /**
 * Give dsh's generic adapter the bearer token resolved by the plugin-owned
 * OAuth store. This keeps the provider-native login flow separate from model
@@ -745,6 +798,7 @@ function createCodexAdapter(credentials, resolveAttachments) {
 		provider: CODEX_PROVIDER,
 		displayName: "OpenAI Codex",
 		streamIdleTimeoutMs: CODEX_STREAM_IDLE_TIMEOUT_MS,
+		maxRequestImageBytes: CODEX_MAX_REQUEST_IMAGE_BYTES,
 		retryPolicy: resolveRetryPolicy(void 0, "dsh-codex-auth-plugin retryPolicy"),
 		configuredMaxTokens: /* @__PURE__ */ new Map(),
 		piProvider: requestProvider(provider)
@@ -765,7 +819,9 @@ const name = "dsh-codex-auth-plugin";
 const inject = [
 	"webServer",
 	"settings",
-	"credentials"
+	"credentials",
+	"agentDefaultModel",
+	"llm"
 ];
 function apply(ctx) {
 	const settings = ctx.settings.register(CODEX_AUTH_SETTINGS_NS, CodexAuthSettingsSchema);
@@ -785,6 +841,7 @@ function apply(ctx) {
 	}, "dsh-codex-auth: credential mirror");
 	registerCodexAuthRoutes(ctx, store, mirror);
 	registerCodexSettingsRoute(ctx, settings);
+	registerCodexGlobalModelRoute(ctx, ctx.agentDefaultModel, ctx.llm);
 	let stopped = false;
 	let imageFiber;
 	let imageTail = Promise.resolve();
@@ -827,4 +884,4 @@ function apply(ctx) {
 	scheduleImageTool();
 }
 //#endregion
-export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, CodexCredentialMirror, CodexCredentialStore, CodexUsageService, CodexWebAuth, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };
+export { CODEX_API_KEY_ENV, CODEX_API_KEY_REF, CODEX_AUTH_FILENAME, CODEX_AUTH_LOGIN_PATH, CODEX_AUTH_LOGOUT_PATH, CODEX_AUTH_SETTINGS_NAMESPACE, CODEX_AUTH_STATUS_PATH, CODEX_GLOBAL_MODEL_PATH, CODEX_PROVIDER, CODEX_STREAM_IDLE_TIMEOUT_MS, CodexCredentialMirror, CodexCredentialStore, CodexUsageService, CodexWebAuth, apply, codexAuthPath, codexAuthStatus, createCodexAdapter, inject, loginCodex, logoutCodex, name, normalizeCodexUsagePayload, registerCodexAuthRoutes, trustedRequest };

package/package.json

@@ -2,7 +2,7 @@
   "name": "@tnnevol/dsh-codex-auth",
   "displayName": "Codex Auth",
   "description": "Standalone ChatGPT OAuth account management for DeepSeek Harness.",
-  "version": "0.1.0-rc.7.2",
+  "version": "0.1.0-rc.8.1",
   "author": "tnnevol",
   "repository": {
     "type": "git",
@@ -64,6 +64,7 @@
         "@deepseek-ai/dsh-client-runtime",
         "@deepseek-ai/dsh-client-ui-conversation",
         "@deepseek-ai/dsh-client-ui-model-selection",
+        "@deepseek-ai/dsh-client-ui-primitives",
         "@deepseek-ai/dsh-client-ui-settings",
         "@deepseek-ai/dsh-client-ui-settings-plugins",
         "@deepseek-ai/dsh-client-locale"
@@ -74,52 +75,56 @@
   "peerDependencies": {
     "@earendil-works/pi-ai": "0.82.1",
     "@deepseek-ai/cordis": "^4.0.1-rc.1",
-    "@deepseek-ai/dsh-attachment": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-settings": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-credentials": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-fs": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-launch-environment": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-timeout": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-attachment": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-invariants": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-settings": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-credentials": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-fs": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-launch-environment": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-timeout": "0.1.0-rc.8",
     "@deepseek-ai/schemastery": "3.18.1",
     "react": "^18.2.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "0.82.1",
     "@deepseek-ai/cordis": "^4.0.1",
-    "@deepseek-ai/dsh-api-remotes": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-attachment": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-conversation": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-credentials": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-fs": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-invariants": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-launch-environment": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-settings": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-tools": "0.1.0-rc.7",
-    "@deepseek-ai/dsh-timeout": "0.1.0-rc.7",
+    "@deepseek-ai/dsh-api-remotes": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-agent-default-model": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-attachment": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-atomic-write": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-connection": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-locale": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-runtime": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-conversation": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-model-selection": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-primitives": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-settings": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-settings-plugins": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-client-ui-slots": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-credentials": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-home-paths": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-fs": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-host-webserver": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-invariants": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-launch-environment": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-llm-pi-ai": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-settings": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-tools": "0.1.0-rc.8",
+    "@deepseek-ai/dsh-timeout": "0.1.0-rc.8",
     "@deepseek-ai/schemastery": "3.18.1",
     "@types/node": "^22.20.0",
     "@types/react": "~18.3.1",