dsh-chatgpt-connect 0.0.0 → 0.3.1-alpha.1

package/INSTALL.md

@@ -0,0 +1,338 @@
+# Installation Runbook for CLI Agents
+
+**This fork — `dsh-chatgpt-connect@0.3.1-alpha.1`, not yet published.** It is a self-maintained fork of [`franksong2702/dsh-codex-connect`](https://github.com/franksong2702/dsh-codex-connect). Its own install command is given in the quick-install section below. **Every `dsh-codex-connect@…` command in this document is upstream history under the previous package name and refers to a different npm artifact, not this fork.**
+
+**Published Alpha 12:** [`0.2.0-alpha.12`](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.12) retires Luna Reserve, adds exact stock DSH `0.2.2-alpha.3` with recovery-only Task handling and fixes the stock Auto review preset's unsupported Codex temperature. Registry version/alpha, matching source tag/prerelease and archive integrity have been independently verified. `latest` remains Alpha 10. See the bilingual [release and migration notes](docs/release-notes/0.2.0-alpha.12.md). No daily Host upgrade is implied.
+
+The published Alpha 12 pairing on exact alpha.3 retains saved Task inspection, authenticated Stop/manual takeover and existing strictly checked safe-disable/archive exits. It refuses automatic routing/resume/delegation without deleting saved data or resetting spent requests. The prior fourteen Hosts and closed public activation gate remain unchanged.
+
+**Historical Alpha 11:** [`0.2.0-alpha.11`](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.11) verifies exact DSH rc.4/rc.5 while retaining all twelve prior Hosts. Its final fourteen-Host archive, protected publication, registry/tag/prerelease and public exact-version installation have been verified. It also delivers Terra, the unified speed menu, seeded-fork originals, bounded bili preflight and the direct Undici minimum. See the [release record](docs/release-notes/0.2.0-alpha.11.md). Keyless/runtime fixtures do not establish real-account/Desktop acceptance; Computer Use and DSH 0.2.2-alpha.2 support are excluded. Daily installation or Host upgrade requires a separate user request.
+
+**Historical Alpha 10:** `0.2.0-alpha.10` adds only exact DSH `0.2.1-rc.3`, retaining the eleven previous pairings. Alpha 9 is not an rc.3 pairing. Public npm version/alpha, archive integrity and exact Git tag/prerelease have been independently verified; see the [publication record](#020-alpha10-verified-publication). The rc.3 upstream Git-source mapping remains unverified. Keyless checks do not establish real-account or Desktop acceptance.
+
+The recommended pair is Codex Connect `0.2.0-alpha.12` / DSH `0.2.1-rc.5`. Installation/runtime regression is verified with exact DSH `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`, `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`, `0.2.1-rc.3`, `0.2.1-rc.4`, `0.2.1-rc.5` or `0.2.2-alpha.3`, using a consistent host package set and plugin-owned pi-ai `0.85.1`. Alpha 9 adds an optional reasoning-effort fallback and independent Standard / Fast / Ultrafast defaults for new top-level and ordinary subagent conversations. Omitted/reset preferences retain legacy defaults, while explicit request effort and later manual choices win. Existing/resumed sessions remain respected; Ultrafast requires sign-in and an eligible model/account route, with eligibility/served tier still unknown. It retains the host range, finite SSE and existing opt-in defaults. Task remains paused. Keyless checks do not establish real-account, Desktop or authenticated browser acceptance. Earlier DSH pairings retain their separately published plugin versions below.
+
+The exact DSH `0.2.1-alpha.1` adaptation is published in `0.2.0-alpha.2`. The earlier `0.2.0-alpha.1` artifact remains unchanged and rejects this host. See the [release notes](docs/release-notes/0.2.0-alpha.2.md) for scope and verification limits; keyless compatibility does not establish live-account acceptance.
+
+Install `dsh-codex-connect` into one requested DeepSeek Harness profile without changing its current default model, search route, global configuration, or OAuth state.
+
+Channel snapshot on 2026-11-04: npm `alpha` points to `0.2.0-alpha.12`; `latest` remains `0.2.0-alpha.10`. Default installation still selects Alpha 10. Use the exact-version command for the installed DSH version; moving npm tags are not compatibility guarantees.
+
+## Safety requirements
+
+- Never read, print, copy, move, or modify `~/.codex/auth.json`.
+- Never print or inspect `$DSH_HOME/.openai-codex-auth.json`; `doctor` may inspect pathname metadata only.
+- Never add OAuth URLs, codes, tokens, account identifiers, or generated profile state to Git.
+- Preserve every unrelated profile dependency and patch row.
+- Do not start login unless the user explicitly asks to authenticate.
+
+## Install and validate
+
+### Select an exact version before installation
+
+Check `dsh --version` before changing the requested profile. Use `dsh --help` to locate the CLI if needed; from a Harness checkout use `pnpm dsh --version`. The CLI string alone does not identify every installed model-runtime package: a CLI reporting `0.1.5-rc.1` can resolve `0.1.5-rc.2` packages. When the plugin is already installed, use the [direct-bin diagnostic recipe](docs/runtime-identity.md#direct-standalone-doctor) with an explicitly identified installation anchor and inspect the selected `@deepseek-ai/dsh-llm`, `@deepseek-ai/dsh-llm-pi-ai`, and plugin-owned pi-ai versions. A `dsh plugin exec` wrapper may reconcile dependencies, so it is not a no-write diagnostic guarantee. An anchor selects metadata, not a running Host. Use the intended profile/home, not an unrelated Web installation. Select an exact pair from [verified-compatibility.json](verified-compatibility.json):
+
+| Installed DSH version | Codex Connect version to pin |
+| --- | --- |
+| `0.1.0-rc.7` | `0.1.0-alpha.4.14` |
+| `0.1.1-rc.2` | `0.1.0-alpha.4.21` |
+| `0.1.2-alpha.2` | `0.1.0-alpha.4.23` |
+| `0.1.2-rc.1` | `0.1.0-alpha.4.41` |
+| `0.1.2-alpha.5` | `0.1.0-alpha.4.25` |
+| `0.1.5-alpha.1` | `0.1.0-alpha.4.41` |
+| `0.1.5-rc.1` | `0.1.0-alpha.4.41` |
+| `0.1.5-rc.2` | `0.1.0-alpha.4.41` |
+| `0.1.7-rc.1` | `0.2.0-alpha.12` |
+| `0.1.7-rc.2` | `0.2.0-alpha.12` |
+| `0.2.0-rc.1` | `0.2.0-alpha.12` |
+| `0.2.0-rc.2` | `0.2.0-alpha.12` |
+| `0.2.1-alpha.1` | `0.2.0-alpha.12` |
+| `0.2.1-alpha.2` | `0.2.0-alpha.12` |
+| `0.2.1-alpha.3` | `0.2.0-alpha.12` |
+| `0.2.1-alpha.4` | `0.2.0-alpha.12` |
+| `0.2.1-alpha.5` | `0.2.0-alpha.12` |
+| `0.2.1-rc.1` | `0.2.0-alpha.12` |
+| `0.2.1-rc.2` | `0.2.0-alpha.12` |
+| `0.2.1-rc.3` | `0.2.0-alpha.12` |
+| `0.2.1-rc.4` | `0.2.0-alpha.12` |
+| `0.2.1-rc.5` | `0.2.0-alpha.12` |
+| `0.2.2-alpha.3` | `0.2.0-alpha.12` |
+
+If your exact DSH version is unknown or not listed, preserve the installed host, report that the combination is unverified, and verify it before making installation changes. A missing record does not prove incompatibility, and the catalog's latest verified DSH version is not the latest upstream release. Do not recommend upgrading or downgrading DSH merely to match a row. Investigate any specific failure and seek verification of the installed combination. Do not blindly install `dsh-codex-connect@alpha`: `alpha` is a moving tag, not a compatibility guarantee. Do not infer support for newer DSH versions from these rows.
+
+Historical Alpha 5 includes exact DSH `0.2.1-alpha.4`, `0.2.1-alpha.5` and `0.2.1-rc.1` support, the [client-state repair](docs/agent-notes/dsh-021-alpha4-compatibility.md) and [runtime-identity diagnostics](docs/runtime-identity.md). The immutable npm `0.2.0-alpha.4` package still supports only its original seven hosts. The [candidate verification record](docs/agent-notes/dsh-021-alpha5-rc1-compatibility.md) and publication evidence below describe separate stages; #339 remains open for real acceptance. Host upgrades or service restarts are separate operations.
+
+`0.2.0-alpha.12` requires one consistent DSH plugin API version from the fifteen modern rows above; its direct runtime imports include `@deepseek-ai/schemastery` `3.18.4` and plugin-owned `@earendil-works/pi-ai` `0.85.1` so an isolated profile need not already provide them. The host adapter can own a different nested pi-ai version, as verified on DSH 0.2.0-rc.2. Node.js remains `^22.19.0 || >=24.0.0`. `0.2.0-alpha.12` does not support the older DSH rows. Alpha 4.41 remains the choice for DSH `0.1.2-rc.1` with pi-ai `^0.84.2`, or `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` with pi-ai `0.85.1`. Mixed host versions and other DSH/pi-ai combinations remain unverified. Alpha 4.25 remains the verified choice for DSH `0.1.2-alpha.5`, Alpha 4.23 for DSH `0.1.2-alpha.2`, Alpha 4.21 for DSH `0.1.1-rc.2`, and Alpha 4.14 for DSH `0.1.0-rc.7`. Changing DSH is a separate operation requiring the user's explicit request; a plugin update request does not authorize it. The repository's `pnpm --silent run check:compatibility` remains a strict development/release dependency gate, not a recommendation to change a user's host.
+
+### 0.2.0-alpha.12 verified publication
+
+[Alpha 12](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.12) is published from `58ca6542dab3791c1ae83abe486cd5559ef9625c`, after [final main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/41780971601) and the [protected OIDC release](https://github.com/franksong2702/dsh-codex-connect/actions/runs/41783364661) succeeded. Independent npm version/alpha, unchanged `latest` Alpha 10, exact source tag and non-draft prerelease readback passed. The public archive matches the actual uploaded workflow artifact and all fifteen exact-Host installation checks byte-for-byte: SHA-256 `ad07fe2e0b2c9235a471d5d91f7bc6b37f5b0d18770bf2bc7783ca2064d4337f`, 73 files / 1,476,563 bytes, also verified against registry SHA-512/SHA-1. The normal exact public-registry entry installed all 73 frozen file hashes with unchanged defaults in an isolated stock alpha.3 profile; the explicit installation-anchor doctor and actual installed SDK synthetic runtime contracts passed. Unanchored standalone doctor remained unknown, as designed. This is not real-account, Windows Desktop, native GUI or live-model acceptance.
+
+The immutable archive retains its prepublication documentation snapshot. These repository recommendations are updated after publication without republishing the same version, changing its tag or upgrading a user's Host. Compare archive files with the [frozen proof at release source](https://github.com/franksong2702/dsh-codex-connect/blob/58ca6542dab3791c1ae83abe486cd5559ef9625c/docs/agent-notes/alpha12-final-package.json), not later repository README edits. Standalone doctor output without an installation anchor can remain unknown; use the already supported explicit `--install-anchor` only for a deliberately identified installation, as documented in [runtime identity](docs/runtime-identity.md). It is metadata observation, not proof that a Host is running.
+
+### 0.2.0-alpha.11 verified publication
+
+[Alpha 11](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.11) is published from `c670d67c36be037c796123536cfcfa9803484244`, after [final main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/41181683130) and [protected OIDC publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/41182902900) succeeded. Independent registry version/alpha and exact Git tag/non-draft prerelease checks passed; `latest` remains Alpha 10. The public archive is byte-identical to the actual workflow upload and the recorded fourteen-Host acceptance artifact: SHA-256 `535772fb35ebcc735523416561966d068b9f022ec3e0c96d11cc69dbbeb6008d`, 72 files / 1,476,318 bytes, matching registry SHA-512/SHA-1. The published exact-version command also passed startup/doctor and synthetic runtime checks on a fresh stock rc.5 profile, with unchanged defaults and all 72 installed files matching.
+
+npm metadata omits `gitHead`; source identity is bound by the original workflow/artifact and exact Git tag. The immutable npm archive retains its pre-publication README; this repository recommendation is updated after publication, without republishing the version or changing tags. No real-account/model, physical Desktop, daily profile or service acceptance is implied. [Final frozen-archive evidence](https://github.com/franksong2702/dsh-codex-connect/blob/c670d67c36be037c796123536cfcfa9803484244/docs/agent-notes/alpha11-final-acceptance.md).
+
+### 0.2.0-alpha.10 verified publication
+
+[Alpha 10](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.10) publishes #384, #380 and the exact rc.3 compatibility candidate #389. Release SHA `ab491482a8d9a44d1f5b6bc2b81229459d7ea2f5` passed [all eight main checks](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39939916049), including both Node versions and twelve-host installation, recovery/crash and model-selection matrices. Independent public download matches the same original verified artifact used by all twenty-four final main installation reports: SHA-256 `2650a9a0ebf91a700dc9f44b1532c5fd8e9b8b907456a9c3a931031ceb25f0a1`, 71 files, 1,471,956 bytes, matching registry SHA-512 and SHA-1. Version/alpha are Alpha 10, latest remains Alpha 1, and the Git tag/non-draft prerelease target that exact release SHA. npm metadata omits gitHead; the original-run/tag/artifact binding is recorded without inventing it.
+
+The [original protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39941532769) accepted the npm upload with a processing notice, then failed bounded readback with twelve E404/old-tag observations. That run remains failed. After exact public version/alpha and archive verification, the unchanged read-only recovery helper verified original CI, authorized publication and artifact identity; [protected recovery-only run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39942737043) created only missing GitHub records, with no npm republication or tag promotion. The immutable npm archive retains its pre-publication recommendation; use the exact repository commands. No daily Host upgrade/service restart or real OAuth/model/Desktop acceptance is implied. rc.3's upstream Git-source mapping remains unverified.
+
+### 0.2.0-alpha.9 verified publication
+
+[Alpha 9](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.9) publishes #371 and #372. Exact release SHA `61bb8f47a32838249ce0a0d14fa2df95dbae7641` passed [main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39363461911), including both Node versions and eleven-target installation/model-selection matrices, before the successful [protected OIDC publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39364552953). Independent verification matched the published npm archive to that workflow's original artifact (SHA-256 `4480b9fceb76de8c6f995d7c0abbb4b530b51a5e33a3799f214f2e06b8392fe1`, 176 files, 1,660,048 bytes), the exact Git tag/prerelease, npm `alpha` at Alpha 9 and `latest` unchanged at Alpha 1. All twenty-two final main matrix reports use identical package bytes. These are isolated/keyless checks; no daily profile/service change or real-account/Desktop acceptance is implied. The immutable npm archive retains its pre-publication README recommendation; use the exact repository commands.
+
+### 0.2.0-alpha.8 verified publication
+
+[Alpha 8](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.8) publishes maintenance #361–#368. Exact release SHA `289d370a8f11264de0ee4c53b349622373fd56e5` passed [main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39346428684) and security checks before the [protected OIDC publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39348119314). Independent verification matched the npm archive to the original workflow artifact (SHA-256 `5227dd98260326c1e4dc79ef678acb49b3d28c5102040ec7e6ec11dc5e34c8d1`), confirmed the exact Git tag/prerelease, npm `alpha` at Alpha 8 and `latest` unchanged at Alpha 1, then installed that same published archive into an isolated DSH `0.2.1-rc.2` profile with unchanged Host model/profile and optional-feature defaults plus synthetic runtime checks. The complete eleven-host candidate matrix uses identical package bytes; no daily profile/service or real-account/Desktop acceptance is implied. The original upload succeeded but the bounded npm readback failed before later registry availability. The [recovery-only run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39349244917) verified the original evidence and completed the missing GitHub tag/prerelease without republishing npm or promoting tags; the original run remains recorded as failed. The npm archive can retain its pre-publication README recommendation; use the exact repository commands.
+
+### 0.2.0-alpha.7 verified publication
+
+[Alpha 7](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.7) publishes the image preview recovery merged in #357. Exact release SHA `e26041d780ad88037e56c9a58cdf15220f9404ae` passed [main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39235244297) and security checks before the [protected OIDC publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39237597262). Independent readback matched the npm archive to the original verified workflow artifact (SHA-256 `752bc2dc6b138de5c759d2fa8e81f6d82716e03ee2421dc6ce5bb031d267c128`), confirmed the exact Git tag/prerelease, npm `alpha` at `0.2.0-alpha.7`, and `latest` unchanged at `0.2.0-alpha.1`. The eleven-host matrix uses identical package bytes and synthetic providers; this is not new real-account image or Desktop acceptance. No existing profile or daily service was upgraded by publication. The npm archive can retain its pre-publication README recommendation; use the exact commands in this repository.
+
+### 0.2.0-alpha.5 verified publication
+
+On 2026-10-17, [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39031929533) passed for `ed4148465587e4b3bcb39778a8cbf875346ce0de`. The [original protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39032943463) uploaded npm successfully but failed its bounded public readback while npm was processing the package; GitHub prerelease creation was skipped. It was not rerun. After the public version appeared, [protected recovery](https://github.com/franksong2702/dsh-codex-connect/actions/runs/39033973530) verified the original artifact and created only the missing tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.5).
+
+Independent read-only verification returned `already-complete`: public npm bytes exactly matched the original workflow artifact and all ten host-matrix archives (SHA-256 `6535af925d497ba9670f93894a4f47135241d0eb3c891d01165cbd910fdd199e`). Package identity, registry SHA-512/SHA-1, exact tag commit and prerelease checks passed. At readback, npm `alpha` was `0.2.0-alpha.5` and `latest` remained `0.2.0-alpha.1`. No npm republish, tag movement, latest promotion or service upgrade occurred. The immutable package keeps its pre-publication README recommendation; use the exact commands in this repository.
+
+This release includes the Sol61 capability-policy provenance update from #345; its historical research note remains dated to the pre-publication review. Context defaults, native-provider metadata precedence and experimental defaults are unchanged. Real OAuth/accounts, real model/image requests, authenticated new-host browsers, physical Windows/Desktop and full user acceptance remain unverified. #339 stays open for separate acceptance.
+
+### Historical 0.2.0-alpha.4 verified publication
+
+On 2026-10-14, the [protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/38608580194) succeeded for `16802d430f403979afe11ff8d28cb8a84053fdf4`, with the matching `v0.2.0-alpha.4` tag and [GitHub prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.4). Independent fresh npm archive readback matched the canonical artifact byte-for-byte (SHA-256 `d4c2ab9d2305b75fd5c53d97eb70bf532dcd78a0a95529ce1e0c721f591b27b9`). Publication does not establish new Desktop or live-account acceptance; `latest` was not promoted.
+
+### Historical 0.2.0-alpha.3 Desktop published delivery
+
+[PR #317](https://github.com/franksong2702/dsh-codex-connect/pull/317) adds official Desktop OAuth browser-launch compatibility and Desktop-specific account diagnostics without changing Web behavior, host support or default models. [Exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/38035495747) and the [protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/38036148904) succeeded for `174811c27ae151536f671069a0087be71bb72891`; the matching [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.3) is available.
+
+Independent read-only verification returned `already-complete` and matched the public npm archive byte-for-byte to the workflow artifact and all five strict installed-host checks. SHA-256: `05b873f251802ff794facd9ccab0b3f22289f13625bcc4379fbd87aece40f903`. Package identity, registry SHA-512/SHA-1, exact tag commit and prerelease passed. At that historical publication readback, npm `alpha` was `0.2.0-alpha.3` and `latest` was `0.2.0-alpha.1`. The immutable archive keeps the pre-publication README recommendation; use this repository's exact commands. See [the release notes](docs/release-notes/0.2.0-alpha.3.md) and the separate [Desktop local-build acceptance](#official-desktop). No daily installation upgrade, service restart, dependency refresh, new live-account npm acceptance or experimental activation is included.
+
+### Historical 0.2.0-alpha.2 published delivery
+
+[PR #305](https://github.com/franksong2702/dsh-codex-connect/pull/305) prepares the exact DSH `0.2.1-alpha.1` compatibility repair from #304 and cross-route image selection handle repair from #302. [Exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/37164650566) and the [protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/37165294347) succeeded for `0c186e73ebe7495d2fe16dc8c8cb38021293251d`; the matching [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.2) is available.
+
+Independent post-publication verification matched the public npm archive byte-for-byte to the protected workflow artifact and the five-host installation matrix. SHA-256: `95a4599300eef03badcbe51452751f72c0295695876128805897c6fd9b0153d1`. Registry SHA-512 integrity, SHA-1, package identity, exact new-host peer and removal of the retired invariant peer also passed. At that historical publication readback, npm `alpha` was `0.2.0-alpha.2` and `latest` was `0.2.0-alpha.1`. The immutable package retains the previous pre-publication README recommendation; use this repository's updated exact installation command. No daily-service upgrade, real OAuth/model/image request, new-host authenticated browser acceptance or physical Windows/mobile acceptance is included. Task remains paused and experimental defaults remain off.
+
+### Historical 0.2.0-alpha.1 published delivery
+
+[PR #299](https://github.com/franksong2702/dsh-codex-connect/pull/299) adds the `gpt-6.1-sol` catalog fallback and simplifies independent plugin numbering. It retains the four exact host targets, Alpha status and existing maintenance scope; no host upgrade or stored-data migration is required. The full pi-ai/OAuth dependency upgrade remains outside this release.
+
+[Exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36727783111) passed for `ba75aa66579bdb22f179c949628e9593b60bf469`. The [original publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36728803256) uploaded npm but failed bounded public readback. The [protected recovery](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36730584814) verified the published archive against the original artifact and created only the missing tag/[prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.1). SHA-256: `afe0c5e9cb08d10912ddf215c8b7f601b9a6d51adfa5cb0cb34e2e7ae8c7258a`. npm `latest` was subsequently promoted with explicit maintainer approval; no package was republished. These release checks are synthetic, not full live-account acceptance or a daily-service deployment.
+
+### Historical Alpha 4.54 DSH 0.2.0 compatibility delivery
+
+[Alpha 4.54](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.54) delivers the normal-request and dependency-ownership diagnostic repairs from [#294](https://github.com/franksong2702/dsh-codex-connect/pull/294), prepared by [#296](https://github.com/franksong2702/dsh-codex-connect/pull/296). It preserves initial system instructions and tool definitions for the pinned provider on DSH 0.2.0-rc.2 and strengthens the Canary request probe. Dynamic system/tool changes remain explicitly unsupported; frozen experimental features remain off.
+
+[Exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36657684473) and the [publication workflow](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36658367825) passed for `bf4fe177decb06b1b224fa642a6233594f66e40b`. Local verification passed 1,548 tests, 53 browser tests and all four same-artifact installations. Independent read-only verification matched the public npm archive to the workflow artifact (SHA-256 `3fe58fabf0aa16ab41d0d54e5d787779245bcfac45b6fe25e75573dc76e338ad`) and confirmed the release tag. These are keyless checks, not live OAuth or full user acceptance. No daily-service deployment or latest promotion is included.
+
+### Alpha 4.53 core maintenance delivery
+
+[Alpha 4.53](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.53) delivers the maintenance scope, explicit Task policy wiring and frozen activation-form retirement from #288–#290, prepared by #292. Existing-task recovery and safety remain. Exact-main CI passed at `d15638b614cbc0b9388768aefd30c417afa79c5a`; local checks passed 1,537 unit tests, 53 browser tests and both same-artifact host installations. These are keyless checks, not real-account acceptance.
+
+The [original publication run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36558018123) uploaded npm but failed public readback. Recovery verified the npm archive against the original artifact (SHA-256 `1c83247e5c29fe3e9706960ad38beff2612c3a91be011b29c7ee20e70288a487`) and created only missing tag/prerelease records. No npm republish, old-tag movement or latest promotion occurred. Installation recommendations were updated only after version, alpha, tag and prerelease readback agreed.
+
+### Historical Alpha 4.52 request-metrics delivery
+
+[PR #284](https://github.com/franksong2702/dsh-codex-connect/pull/284) adds optional local request evidence and the offline report CLI, without the internal evaluation runner or a metrics panel. Upgrading alone does not enable collection. Configure a private directory only in the intended profile and restart that profile explicitly; [English](docs/request-metrics.md) and [Chinese](docs/request-metrics.zh.md) guides cover configuration, unknown usage, retention and disabling. Task remains paused.
+
+Fresh independent static source review found no blocker. Local checks passed 132 files / 1,533 tests, Chromium 73 tests, and both stock rc.1/rc.2 same-artifact installation/runtime checks including metrics startup/CLI tests. The final PR-head checks and [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36366815118) passed. These are synthetic engineering checks, not new real-model/image/Reserve acceptance or evidence of savings.
+
+The original workflow uploaded npm but failed afterward. It was not rerun; recovery verified the original artifact byte-for-byte and created only missing tag/release records. [Original release run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36367211049); release commit `21504f83f0bed1d5737cb2b1972bcd3246b8d3a1`. Final independent read-only verification returned `already-complete`; the public npm archive exactly matched the original verified artifact (SHA-256 `5cab311ed632fb2156188a13633d0bf5ca4c569dad8415da4c95ad4d5063e4a4`). Version, alpha, tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.52) agree. latest remains 4.50. No duplicate upload, old-tag movement or daily-service upgrade occurred. [Publication record](docs/experiments/evidence/alpha-452-publication.json).
+
+### Historical Alpha 4.51 maintenance delivery
+
+The historical Alpha 4.51 recommendation followed [PR #283](https://github.com/franksong2702/dsh-codex-connect/pull/283), successful [exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36362680011), and independent final source review of the diagnostic type/lifecycle repair. Frozen local checks passed 127 files / 1,466 tests, Chromium 73 tests, and stock rc.1/rc.2 same-artifact installation/runtime checks. Experimental defaults and Task pause remain unchanged; no draft metrics/evaluation feature is included.
+
+The [original protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36363043413) uploaded npm successfully but failed public readback. It was not rerun. Recovery-only verification matched the public package byte-for-byte to the original artifact (SHA-256 `6d8ffe3b9335e0f874592f6d5f67d2fe872e809a24a4ae4e2c1d8f14e29857e6`), then created only the missing tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.51). Final independent verification returned `already-complete`: version, alpha, tag and release match commit `2ac612385ea3c3fcfc1078dc18619d7b1dc49b9a`; latest remains 4.50. See [the publication record](docs/experiments/evidence/alpha-451-publication.json). No duplicate npm upload, old-tag movement, daily-service upgrade or new real-model/image acceptance occurred.
+
+### Historical Alpha 4.50 delivery evidence
+
+The Alpha 4.50 recommendation follows [PR #275](https://github.com/franksong2702/dsh-codex-connect/pull/275), [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36222707376) and a successful [protected publication run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36222974006) at `6baa422b7b9cd513340948f659b51b0b9d76a724`. The same candidate passed unmodified rc.1 and rc.2 isolated installations without exemptions; Chromium passed 73 tests on each host. The rc.1 frozen full check passed 1,452 tests; rc.2 source types and focused image/auth/transport/compaction suites passed. An independent source reviewer found a mandatory UI-peer consistency gap; five red/green controls covered the correction before the final source review passed. See [the exact scope and evidence](docs/experiments/dsh-017rc2-compatibility.md).
+
+Independent post-publication verification returned `already-complete`, matching the npm archive byte-for-byte to the original verified release artifact (SHA-256 `e974ef71d77b3153c8a41fa454d6e53de41227cf1ee96cee99db42f73a43b58d`). The version, `alpha`, Git tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.50) agree. This release's publication workflow succeeded; no recovery mutation or duplicate publication was needed. `latest` remains 4.47. This is not new live-account/image/Reserve or physical Windows/mobile acceptance. All mandatory host peers, including UI peers, are checked by the full capability/strict compatibility checks; the compact doctor report alone is not a full peer audit. Optional commands-service behavior is not certified by the mandatory-peer check. Task controls remain paused and defaults are unchanged.
+
+Historical Alpha 4.49 evidence:
+
+The Alpha 4.49 recommendation follows [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36212638824) on Node 22/24, browser and keyless Windows checks, plus the stock DSH `0.1.7-rc.1` same-artifact installation matrix. It fixes both independently reproduced Alpha 4.48 image-editing defects: reuploaded copies could select historical originals, and safe actionable input errors were hidden. The three original reproduction tests pass; a separate ephemeral GPT-6 Astra process reviewed the correction's source without implementation history and found no blockers in that scope.
+
+The [original 4.49 publish run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36212860716) successfully published npm but failed its bounded public-readback step. It was not rerun. The [recovery-only run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/36213209903) verified npm metadata and exact archive bytes against the original verified artifact, then created the [matching tag and prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.49). npm exact version and `alpha` were independently read back as 4.49; `latest` remains 4.47. These checks do not claim new real-account image/selection acceptance, physical Windows/mobile behavior or pixel-perfect edits. Stock rc.1 keeps Task controls paused. The 4.48 package and tag remain unchanged and affected; select 4.49 for the corrected behavior.
+
+Historical Alpha 4.47 evidence:
+
+The Alpha 4.47 recommendation follows [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35994106350) on Node 22/24, browser and keyless Windows checks, plus the stock DSH `0.1.7-rc.1` same-artifact installation matrix. The [original publish run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35994578156) uploaded the verified package but failed during npm public readback; do not rerun publication. Recovery-only local verification matched the public npm archive byte-for-byte to the original artifact and created the [Git tag and prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.1.0-alpha.4.47) without republishing. npm `alpha` and `latest` were independently read back as 4.47. These checks are not fresh real Chrome OAuth, live model/tool/image requests, or Windows application acceptance. Stock rc.1 keeps Task controls paused; migration of old Task grants across a Harness upgrade remains unverified.
+
+Historical Alpha 4.46 evidence:
+
+The Alpha 4.46 recommendation follows [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35982530538) on Node 22/24, browser and keyless Windows checks, plus the stock DSH `0.1.7-rc.1` same-artifact installation matrix. The [original publish run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35983101557) uploaded the verified package but timed out waiting for npm's public readback; it must not be rerun. After the exact version and `alpha` tag appeared, the [recovery-only run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35984180679) matched the public npm archive byte-for-byte to the original artifact and created the Git tag and prerelease without republishing. The fix's real Chrome OAuth and quota refresh on the original Windows PC remain unverified; these checks did not promote npm `latest` or establish real-account acceptance. Stock rc.1 keeps Task controls paused; migration of old Task grants across a Harness upgrade remains unverified.
+
+The historical Alpha 4.43 recommendation followed [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35887810404) on Node 22/24, Chromium and Windows checks, plus the stock DSH `0.1.7-rc.1` same-artifact installation matrix. The [original publish run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35888766215) uploaded the verified npm package but timed out waiting for public registry readback; do not rerun publication. Once npm exposed the exact version and `alpha` tag, the [recovery-only run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35889959811) verified the archive against that original artifact and created the matching Git tag and prerelease without republishing. These checks used synthetic providers, not a real ChatGPT account. Stock rc.1 keeps Task controls paused; migration of old Task grants across a Harness upgrade remains unverified.
+
+The Alpha 4.41 recommendation follows successful [exact-release main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35817909046) on Node 22 and 24 (1,282 unit tests each), 52 Chromium tests, and a four-host same-artifact installation matrix. After npm processing completed, the [recovery verification](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35819017165) matched the public npm archive byte-for-byte to the original verified release artifact, then created the matching Git tag and GitHub prerelease. The [original release run](https://github.com/franksong2702/dsh-codex-connect/actions/runs/35818489220) remains failed because npm's public readback was not available within its bounded retry period; do not rerun publication. These are synthetic-provider installation/lifecycle checks, not new real-account acceptance or a newly exercised published-package upgrade. Task-level model control remains opt-in; a new grant preselects only GPT-5.6 Sol / Medium and displays its scope and request limit before Start. Existing grants are not silently narrowed. Stock DSH 0.1.6-alpha.1 and alpha.2 remain undeclared; their separate compatibility trackers are not broadened by this release.
+
+Historical Alpha 4.35 evidence (not relabeled as 4.37):
+
+The Alpha 4.35 rows reflect successful release-commit CI on Node 22.19.0 and 24.20.0 (840 tests each), 28 Chromium tests, Windows canary contracts, and the four-host installation/Reserve matrix. Independent post-publication checks installed the exact npm version on all four hosts, matched all 63 installed plugin files to the verified published archive, and exercised a 4.34-to-4.35 upgrade on rc.2. All eight advertised models resolved and prepared, defaults were unchanged, all optional capabilities remained disabled, and provider disposal and synthetic Reserve transitions passed. These checks are not fresh real OAuth, live Reserve/model/tool/image, or full Windows application acceptance. See [.github/ALPHA_435_RELEASE_READINESS.md](.github/ALPHA_435_RELEASE_READINESS.md) for publication, installation evidence, and limitations. Historical rows remain the repository's existing verification record. This guidance does not change upstream DSH behavior or resolve [Issue #64](https://github.com/franksong2702/dsh-codex-connect/issues/64).
+
+Alpha 4.33 omits the `modelErrors` profile field required by RC model packages, producing `Cannot read properties of undefined (reading 'get')`. Alpha 4.34 contains the fix, retained in 4.35. Reauthorization or repeated model-list retries do not add a missing profile field. Pin the corrected plugin version for a verified host combination; do not delete credentials or change DSH merely to work around this failure. DSH `0.1.5-alpha.2` remains unverified.
+
+### Install the selected version and validate
+
+**This fork — `dsh-chatgpt-connect@0.3.1-alpha.1`, not yet published.** The exact-version commands further down target the **previous package name** and do not install this fork; they are kept only to reproduce older upstream pairings.
+
+```sh
+dsh plugin --profile web add dsh-chatgpt-connect@0.3.1-alpha.1
+```
+
+Then continue with the validation steps in this section.
+
+1. Complete the version selection above. The commands below use `web`; substitute only the requested profile.
+2. Install the selected exact version. For DSH `0.1.0-rc.7`:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.14
+   ```
+
+   For DSH `0.1.1-rc.2`, use Alpha 4.21:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.21
+   ```
+
+   For DSH `0.1.2-alpha.2`, use Alpha 4.23:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.23
+   ```
+
+   For DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, or `0.1.5-rc.2`, use Alpha 4.41:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.41
+   ```
+
+   For exact DSH `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`, `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`, `0.2.1-rc.3`, `0.2.1-rc.4`, `0.2.1-rc.5` or `0.2.2-alpha.3`, use `0.2.0-alpha.12`:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.2.0-alpha.12
+   ```
+
+   For DSH `0.1.2-alpha.5`, use Alpha 4.25:
+
+   ```sh
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.25
+   ```
+
+   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.41'` only for the DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` combinations, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.46'` only for DSH `0.1.7-rc.1`.
+
+   For current DSH `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, `0.2.0-rc.2`, `0.2.1-alpha.1`, `0.2.1-alpha.2`, `0.2.1-alpha.3`, `0.2.1-alpha.4`, `0.2.1-alpha.5`, `0.2.1-rc.1`, `0.2.1-rc.2`, `0.2.1-rc.3`, `0.2.1-rc.4`, `0.2.1-rc.5` or `0.2.2-alpha.3`, if npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.2.0-alpha.12'`.
+
+3. Run `dsh web --help` once to compose the installed profile without starting the server. DSH `0.1.2-rc.1` prepares profile plugin dependency fallback during this step.
+4. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.
+5. Confirm the effective `agent-default-model` and `web.searchProvider` values are unchanged from before installation.
+6. Run the already installed bin directly for package-manager-free diagnostics, with independently identified paths and the correct `DSH_HOME`:
+
+   ```sh
+   node /absolute/profile/node_modules/dsh-codex-connect/lib/bin.js doctor --json \
+     --install-anchor /absolute/dsh/node_modules/@deepseek-ai/dsh/package.json
+   ```
+
+   See [runtime identity](docs/runtime-identity.md) for packaged Desktop/ASAR, selected-vs-running evidence and the development settings receipt. `dsh plugin exec` can perform dependency reconciliation; do not use it as a no-write diagnostic guarantee.
+
+7. If the user explicitly requests login, open **Settings → Plugins → Plugin configuration → Codex Connect**, or check `status` and then use `login` or `login --device-code`. OAuth approval belongs to the user.
+
+   Alpha 4.25 offers the same account actions in **Settings → Models → Openai-Codex**, plus a shared **More settings** dialog for model visibility, proxy, search, image, context-budget, and Auto-review controls. The original Plugin settings entry remains available; neither entry automatically starts login or changes model/search defaults.
+
+   When signed out, select **Authorize**. When signed in, use **Sign out** or **View quota**; use **More settings** for plugin options. If authorization is abandoned, use **Reopen authorization** or **Cancel sign-in** and retry; cancellation does not delete an existing account. Pending authorization expires after 10 minutes by default (`oauthTimeoutMs` in plugin configuration, applied on load).
+
+### Official Desktop
+
+Desktop uses the same plugin package, but owns a separate `desktop` profile and its bundled runtime. Check the installed Desktop version against the exact host table above; a Web installation does not enable the plugin in Desktop. Do not replace Desktop's runtime or copy a Web profile over it.
+
+Install the exact published version using Desktop's own **Plugins** page or its bundled CLI. On macOS the bundled CLI is:
+
+```sh
+"/Applications/DeepSeek Harness.app/Contents/Resources/runtime/cli/bin/dsh" --version
+"/Applications/DeepSeek Harness.app/Contents/Resources/runtime/cli/bin/dsh" plugin --profile desktop add dsh-codex-connect@0.2.0-alpha.12
+```
+
+Start Desktop once to initialize its profile and fully quit it before CLI package operations. Use the intended `DSH_HOME`; do not inherit an unrelated Web instance's home. Preserve profile patches, default models, optional capabilities and OAuth state. Reopen Desktop after installing. Its Plugins page can enable an installed but inactive bundle; a dependency entry alone is not proof of activation.
+
+For a local build, build and pack its exact source, then replace the package spec in the command with an absolute archive path. A local archive is not the immutable npm package even if its version is unchanged; retain its source commit and SHA-256 separately.
+
+On Desktop with pnpm 11, `ERR_PNPM_IGNORED_BUILDS` may leave the package installed but inactive. In the requested Desktop profile's `pnpm-workspace.yaml`, explicitly decline the two observed optional dependency build scripts, preserving other settings:
+
+```yaml
+allowBuilds:
+  '@google/genai': false
+  protobufjs: false
+```
+
+Then repeat the selected package installation and verify activation. Do not blanket-enable dependency scripts or bypass peer compatibility checks. This is a scoped installation workaround, not a claim that all Desktop package operations are certified.
+
+The Desktop adaptation detects only the official `dsh-app://app` document for OAuth launch behavior: it opens the validated HTTPS authorization link directly through the desktop shell, rather than preopening a blank window. A null window handle is expected when Electron opens an external browser; it is not proof that the browser successfully opened. **Open login in browser**, cancellation and manual callback remain available. Never add `dsh-app://app` to the HTTP trusted-origin list. A Desktop-specific rejected-origin error calls for restart/version diagnostics, not a `--profile web trust-origin` command.
+
+On 2026-10-10 the maintainer reported successful login and normal use on DSH Desktop `0.2.0-rc.2` with the local adaptation archive (SHA-256 `9ac6fd1ea1def6bfaa6440c4727e5ea3587c2c9f3fd1c2cb9bb4377dcf001d41`). This is user-reported acceptance of that exact local build, not independent live-account verification of a later npm artifact. Synthetic UI/browser tests and isolated Desktop Host startup cover separate checks; image generation/editing and full Windows/mobile acceptance are not established by this report.
+
+### Remote browser access
+
+The default Web OAuth boundary is loopback-only. When DSH runs on one device and you open it from another device on a trusted network through an IP address or domain, run the following on the device that runs DSH with the exact origin from the browser address bar:
+
+```sh
+dsh plugin --profile web exec dsh-codex-connect trust-origin http://192.168.1.20:3080
+dsh plugin --profile web exec dsh-codex-connect trusted-origins
+```
+
+The value is a full `http://` or `https://` origin including its port, not a bare device IP and not a path/query/fragment. Use `untrust-origin <origin>` to remove it. Restrict this to a trusted network and never expose the route publicly; use an SSH tunnel when that is safer. The Web client does not edit this list.
+
+## Optional configuration
+
+Use **Settings → Plugins → Plugin configuration → Codex Connect** for live, staged Save/Discard edits organized under Account & quota, Models, Network, and Capabilities. Switching modules preserves the draft. The same settings control `enableSearch`, `enableImageTool`, `enableImageGeneration`, and `enableAutoReview`; all four default to `false`. Luna Reserve has been removed: legacy `enableReserveFallback` values are ignored and old `gpt-reserve` conversations require an explicit ordinary-model selection. Old return files are preserved untouched. Enabling Auto-review permits bounded approval context, tool arguments, working directory, and the planned action to be sent to `chatgpt.com`; failures return to human approval. Enabling image generation uses the image generation capability included with the current GPT subscription and saves results as DSH attachments. Enabling search registers the provider and selects it while the capability remains enabled; disabling restores the previous provider before unregistering Codex Search. Setting `agent-default-model` to `openai-codex` remains a separate explicit change.
+
+Apply only requested choices and preserve unrelated keys:
+
+```yaml
+- id: llm-openai-codex
+  config:
+    enableSearch: true
+    enableImageTool: false
+    enableImageGeneration: false
+    enableAutoReview: false
+    searchMode: live
+
+- id: agent-default-model
+  config:
+    provider: openai-codex
+    model: gpt-5.6-sol
+```
+
+Do not add a separate `web` row for this UI action. Do not add the `agent-default-model` row unless the user separately requested that default.
+
+## Conflict handling
+
+`openai-codex` can have only one adapter. If startup reports a collision, inspect the effective config and remove only the old `dsh-codex` bundle or manual `openai-codex` provider row after confirming it is the conflicting owner. Do not delete auth files or unrelated providers.
+
+## Update and removal
+
+The update card checks Codex Connect releases only. It does not assess the installed host or recommend a DSH upgrade or downgrade. Run `doctor --json` explicitly for local dependency diagnostics; an `unverified` result (and its nonzero exit code) means the installed combination is outside the declared support set, not that it is known to fail. See the [diagnostic statuses](docs/reference.md#local-installation-diagnostics).
+
+Before updating, repeat the exact-version selection above. Use `@alpha` only after verifying that the version it currently resolves to is compatible with the installed DSH; otherwise pin the selected version in the update command.
+
+```sh
+dsh plugin --profile web update dsh-codex-connect@alpha
+dsh plugin --profile web remove dsh-codex-connect
+```
+
+Use an exact npm version when a reproducible update is required; use a GitHub tag only as the npm-unavailable fallback.
+
+A separate [published-package lifecycle check](docs/agent-notes/alpha1-install-lifecycle.md) verified removal and reinstallation on isolated DSH `0.2.0-rc.2`. Removal unselects the bundle and removes its profile dependency; user patch rows and data remain. Reinstallation of the same version can therefore restore retained configuration. Package-manager caches are not a credential or data cleanup mechanism.
+
+Removal of the package and removal of its separate OAuth file are different actions. Run `dsh plugin --profile web exec dsh-codex-connect logout` only with explicit credential-deletion authorization.
+
+## Completion report
+
+Report the profile, installed version, effective default model, effective search route, enabled optional capabilities, signed-in/signed-out state only if checked, and Web client detection. Never report OAuth URLs, codes, token timestamps, account ids, or auth-file contents.

package/LICENSE

@@ -0,0 +1,202 @@
+Apache License
+Version 2.0, January 2004
+http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+"License" shall mean the terms and conditions for use, reproduction,
+and distribution as defined by Sections 1 through 9 of this document.
+
+"Licensor" shall mean the copyright owner or entity authorized by
+the copyright owner that is granting the License.
+
+"Legal Entity" shall mean the union of the acting entity and all
+other entities that control, are controlled by, or are under common
+control with that entity. For the purposes of this definition,
+"control" means (i) the power, direct or indirect, to cause the
+direction or management of such entity, whether by contract or
+otherwise, or (ii) ownership of fifty percent (50%) or more of the
+outstanding shares, or (iii) beneficial ownership of such entity.
+
+"You" (or "Your") shall mean an individual or Legal Entity
+exercising permissions granted by this License.
+
+"Source" form shall mean the preferred form for making modifications,
+including but not limited to software source code, documentation
+source, and configuration files.
+
+"Object" form shall mean any form resulting from mechanical
+transformation or translation of a Source form, including but
+not limited to compiled object code, generated documentation,
+and conversions to other media types.
+
+"Work" shall mean the work of authorship, whether in Source or
+Object form, made available under the License, as indicated by a
+copyright notice that is included in or attached to the work
+(an example is provided in the Appendix below).
+
+"Derivative Works" shall mean any work, whether in Source or Object
+form, that is based on (or derived from) the Work and for which the
+editorial revisions, annotations, elaborations, or other modifications
+represent, as a whole, an original work of authorship. For the purposes
+of this License, Derivative Works shall not include works that remain
+separable from, or merely link (or bind by name) to the interfaces of,
+the Work and Derivative Works thereof.
+
+"Contribution" shall mean any work of authorship, including
+the original version of the Work and any modifications or additions
+to that Work or Derivative Works thereof, that is intentionally
+submitted to Licensor for inclusion in the Work by the copyright owner
+or by an individual or Legal Entity authorized to submit on behalf of
+the copyright owner. For the purposes of this definition, "submitted"
+means any form of electronic, verbal, or written communication sent
+to the Licensor or its representatives, including but not limited to
+communication on electronic mailing lists, source code control systems,
+and issue tracking systems that are managed by, or on behalf of, the
+Licensor for the purpose of discussing and improving the Work, but
+excluding communication that is conspicuously marked or otherwise
+designated in writing by the copyright owner as "Not a Contribution."
+
+"Contributor" shall mean Licensor and any individual or Legal Entity
+on behalf of whom a Contribution has been received by Licensor and
+subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+copyright license to reproduce, prepare Derivative Works of,
+publicly display, publicly perform, sublicense, and distribute the
+Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+this License, each Contributor hereby grants to You a perpetual,
+worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+(except as stated in this section) patent license to make, have made,
+use, offer to sell, sell, import, and otherwise transfer the Work,
+where such license applies only to those patent claims licensable
+by such Contributor that are necessarily infringed by their
+Contribution(s) alone or by combination of their Contribution(s)
+with the Work to which such Contribution(s) was submitted. If You
+institute patent litigation against any entity (including a
+cross-claim or counterclaim in a lawsuit) alleging that the Work
+or a Contribution incorporated within the Work constitutes direct
+or contributory patent infringement, then any patent licenses
+granted to You under this License for that Work shall terminate
+as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+Work or Derivative Works thereof in any medium, with or without
+modifications, and in Source or Object form, provided that You
+meet the following conditions:
+
+(a) You must give any other recipients of the Work or
+    Derivative Works a copy of this License; and
+
+(b) You must cause any modified files to carry prominent notices
+    stating that You changed the files; and
+
+(c) You must retain, in the Source form of any Derivative Works
+    that You distribute, all copyright, patent, trademark, and
+    attribution notices from the Source form of the Work,
+    excluding those notices that do not pertain to any part of
+    the Derivative Works; and
+
+(d) If the Work includes a "NOTICE" text file as part of its
+    distribution, then any Derivative Works that You distribute must
+    include a readable copy of the attribution notices contained
+    within such NOTICE file, excluding those notices that do not
+    pertain to any part of the Derivative Works, in at least one
+    of the following places: within a NOTICE text file distributed
+    as part of the Derivative Works; within the Source form or
+    documentation, if provided along with the Derivative Works; or,
+    within a display generated by the Derivative Works, if and
+    wherever such third-party notices normally appear. The contents
+    of the NOTICE file are for informational purposes only and
+    do not modify the License. You may add Your own attribution
+    notices within Derivative Works that You distribute, alongside
+    or as an addendum to the NOTICE text from the Work, provided
+    that such additional attribution notices cannot be construed
+    as modifying the License.
+
+You may add Your own copyright statement to Your modifications and
+may provide additional or different license terms and conditions
+for use, reproduction, or distribution of Your modifications, or
+for any such Derivative Works as a whole, provided Your use,
+reproduction, and distribution of the Work otherwise complies with
+the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+any Contribution intentionally submitted for inclusion in the Work
+by You to the Licensor shall be under the terms and conditions of
+this License, without any additional terms or conditions.
+Notwithstanding the above, nothing herein shall supersede or modify
+the terms of any separate license agreement you may have executed
+with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+names, trademarks, service marks, or product names of the Licensor,
+except as required for reasonable and customary use in describing the
+origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+agreed to in writing, Licensor provides the Work (and each
+Contributor provides its Contributions) on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+implied, including, without limitation, any warranties or conditions
+of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+PARTICULAR PURPOSE. You are solely responsible for determining the
+appropriateness of using or redistributing the Work and assume any
+risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+whether in tort (including negligence), contract, or otherwise,
+unless required by applicable law (such as deliberate and grossly
+negligent acts) or agreed to in writing, shall any Contributor be
+liable to You for damages, including any direct, indirect, special,
+incidental, or consequential damages of any character arising as a
+result of this License or out of the use or inability to use the
+Work (including but not limited to damages for loss of goodwill,
+work stoppage, computer failure or malfunction, or any and all
+other commercial damages or losses), even if such Contributor
+has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+the Work or Derivative Works thereof, You may choose to offer,
+and charge a fee for, acceptance of support, warranty, indemnity,
+or other liability obligations and/or rights consistent with this
+License. However, in accepting such obligations, You may act only
+on Your own behalf and on Your sole responsibility, not on behalf
+of any other Contributor, and only if You agree to indemnify,
+defend, and hold each Contributor harmless for any liability
+incurred by, or claims asserted against, such Contributor by reason
+of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+To apply the Apache License to your work, attach the following
+boilerplate notice, with the fields enclosed by brackets "[]"
+replaced with your own identifying information. (Don't include
+the brackets!) The text should be enclosed in the appropriate
+comment syntax for the file format. We also recommend that a
+file or class name and description of purpose be included on the
+same "printed page" as the copyright notice for easier
+identification within third-party archives.
+
+Copyright 2026 Yan-Zero
+Copyright 2026 Frank Song (modifications and additional work)
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.