@young1lin/dsh-gpt-sub 0.1.0

package/cordis.patch.yml

@@ -0,0 +1,44 @@
+# dsh-gpt-sub bundle patch, two rows over the profile root.
+#
+# Row 1 (insert): the plugin itself -- token sync, host-scoped proxy routing,
+# and the quota panel. Later user patch layers address this row by id and
+# replace its whole config.
+#
+# Row 2 (edit, no insert:): seeds the llm-pi-ai route that turns the token
+# this plugin publishes into selectable models with zero user configuration.
+# It edits the dormant llm-pi-ai row @deepseek-ai/dsh-base inserts, so that
+# bundle must come earlier in dsh.profile.bundles; a missing row is warned
+# and skipped by the loader, not an error. A user `llm-pi-ai:` settings
+# section merges per provider on top of this, so providers declared there are
+# additive and field edits win.
+- insert:
+    - id: gpt-sub
+      name: '@young1lin/dsh-gpt-sub'
+      config:
+        # Proxy for reaching the Codex hosts. Empty means direct.
+        proxyUrl: 'http://127.0.0.1:7890'
+        # Codex CLI credential file, shared with the codex command.
+        authFile: '~/.codex/auth.json'
+        # Refresh the access token when less than this many minutes remain.
+        refreshMarginMinutes: 30
+        # Credential the seeded openai-codex route reads as its api-key auth.
+        # Must match the apiKeyEnv in the llm-pi-ai row below; the regression
+        # test in tests/cordis-patch.spec.ts holds them together.
+        tokenRef: 'CODEX_NATIVE_TOKEN'
+        # How often to re-read auth.json and republish the token.
+        syncIntervalMinutes: 10
+# Edit row against the dsh-base row: a patch replaces the whole config block,
+# and dsh-base ships the row with no config, so this only adds the route.
+- id: llm-pi-ai
+  name: '@deepseek-ai/dsh-llm-pi-ai'
+  config:
+    providers:
+      openai-codex:
+        # The live Codex access token dsh-gpt-sub republishes. Naming it
+        # grafts an api-key method beside the catalog provider's OAuth one --
+        # exactly the seam the plugin fills.
+        apiKeyEnv: 'CODEX_NATIVE_TOKEN'
+        displayName: 'Codex Subscription'
+        # models omitted on purpose: the installed pi-ai catalog serves
+        # gpt-5.6-sol/terra/luna unchanged -- context windows, input
+        # modalities, and thinking levels (minimal -> low, xhigh, max).

package/lib/index.d.ts

@@ -0,0 +1,52 @@
+/**
+ * Direct ChatGPT/Codex subscription access for DeepSeek Harness.
+ *
+ * This plugin owns no transport. pi-ai already ships an `openai-codex`
+ * provider that knows the Codex wire format -- it sets `store`, derives
+ * `chatgpt-account-id` from the access token's own JWT claim, and speaks the
+ * codex-responses protocol -- but it authenticates only through OAuth, and
+ * `dsh-llm-pi-ai` runs no login flow and holds no OAuth store. Naming a
+ * credential on the route grafts an api-key method beside the provider's own,
+ * which is the seam this plugin fills: it keeps a live Codex access token in
+ * the harness credential store, refreshing it from `~/.codex/auth.json` before
+ * it expires.
+ *
+ * The result needs no loopback port, no shared local key, and no external
+ * proxy binary. The `codex` CLI still owns the login.
+ *
+ * @module dsh-gpt-sub
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import z from '@deepseek-ai/schemastery';
+import type { Config as ConfigShape } from './types.ts';
+export type Config = ConfigShape;
+/** Cordis plugin name. */
+export declare const name = "gpt-sub";
+/**
+ * Required services. Without this declaration cordis's context proxy throws
+ * `cannot get property "credentials" without inject` the moment the plugin
+ * reads `ctx.credentials`, and the plugin sits dead with no retry.
+ */
+export declare const inject: string[];
+/**
+ * Plugin config schema.
+ *
+ * Typed input-then-output: every field has a default, so a config document may
+ * supply any subset, and what comes back out is a fully resolved `ConfigShape`.
+ */
+export declare const Config: z<Partial<ConfigShape>, ConfigShape>;
+/**
+ * Publish the current Codex access token into the credential store, and keep
+ * publishing it for as long as the plugin is loaded.
+ *
+ * Async on purpose: cordis awaits a thenable returned from plugin startup and
+ * collects the function it resolves to as the fiber's disposer. A missing or
+ * unreadable `auth.json` therefore fails the fiber visibly at start instead of
+ * leaving a route configured against a credential nothing maintains.
+ *
+ * @param ctx - the cordis context.
+ * @param config - validated plugin configuration.
+ * @returns the teardown that stops the sync timer and closes the dispatcher.
+ */
+export declare function apply(ctx: Context, config: ConfigShape): Promise<() => Promise<void>>;
+//# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,CAAC,MAAM,0BAA0B,CAAA;AAsBxC,OAAO,KAAK,EAAE,MAAM,IAAI,WAAW,EAAE,MAAM,YAAY,CAAA;AAKvD,MAAM,MAAM,MAAM,GAAG,WAAW,CAAA;AAEhC,0BAA0B;AAC1B,eAAO,MAAM,IAAI,YAAY,CAAA;AAE7B;;;;GAIG;AACH,eAAO,MAAM,MAAM,UAA+B,CAAA;AA2ClD;;;;;GAKG;AACH,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,WAAW,CAqBtD,CAAA;AAOF;;;;;;;;;;;;GAYG;AACH,wBAAsB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,CAwhB3F"}