dsh-codex-connect 0.1.0-alpha.4.4 → 0.1.0-alpha.4.6

package/INSTALL.md

@@ -19,7 +19,7 @@ Install `dsh-codex-connect` into one requested DeepSeek Harness profile without
    dsh plugin --profile web add dsh-codex-connect@alpha
    ```
 
-   To pin this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.4`. If npm is unavailable, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.4'`.
+   After `0.1.0-alpha.4.6` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.6`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.6'`.
 
 3. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.
 4. Confirm the effective `agent-default-model` and `web.searchProvider` values are unchanged from before installation.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: 16d921296b08e7b01cb9cf3cf5ade516544acba5
-docs/README.zh.md: 3de5c7920bf27ec7e72cc8d67941578a31b5a00b
+README.md: 6eedfff99162f49458c9fc6f5fc4dff502aa7dfc
+docs/README.zh.md: 3fa64da86d3c1f1305f67a5e29e4255ca309eccb

package/README.md

@@ -6,10 +6,34 @@ English | [中文](docs/README.zh.md)
 
 Connect your ChatGPT subscription to DeepSeek Harness with OAuth, user-controlled defaults, Harness-native approvals, diagnostics, and reliable session recovery.
 
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/hero.jpg" alt="Codex Connect — ChatGPT OAuth for DeepSeek Harness" width="100%">
+</p>
+
 `dsh-codex-connect` adds the `openai-codex` model catalog and a separate ChatGPT OAuth login. Models run through Harness's normal LLM service, so streaming, tool calls, reasoning replay, compaction, filesystem controls, permission gates, and approval prompts remain Harness-owned. It does not turn a ChatGPT subscription into an OpenAI Platform API credential.
 
 Installation is additive. The bundle does not replace the current default model or search route, and its standalone search provider and `view_image` tool are disabled until explicitly enabled.
 
+## See it in Harness
+
+Sign in and manage the plugin from **Settings → Plugins → Plugin configuration → Codex Connect**.
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/oauth-status.jpg" alt="Codex Connect ChatGPT OAuth status inside Harness plugin configuration" width="720">
+</p>
+
+Optional Codex search and `view_image` capabilities remain explicit, profile-scoped choices:
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/plugin-configuration.jpg" alt="Codex Connect optional capability settings in DeepSeek Harness" width="720">
+</p>
+
+Codex models then appear in Harness's normal model picker alongside the existing providers:
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/model-selector.jpg" alt="OpenAI Codex models in the DeepSeek Harness model picker" width="320">
+</p>
+
 ## Install
 
 ```sh
@@ -17,7 +41,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 dsh web
 ```
 
-To pin this release exactly, use `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.4`. If npm is unavailable, use the GitHub tag fallback: `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.4'`. From a DeepSeek Harness source checkout, prefix commands with `pnpm`. For a local checkout, install `link:/absolute/path/to/dsh-codex-connect`.
+After `0.1.0-alpha.4.6` is published, pin it exactly with `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.6`. If npm is unavailable after its matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.6'`. From a DeepSeek Harness source checkout, prefix commands with `pnpm`. For a local checkout, install `link:/absolute/path/to/dsh-codex-connect`.
 
 Sign in from **Settings → Plugins → Plugin configuration → Codex Connect → Sign in with ChatGPT**, or use the CLI:
 
@@ -29,6 +53,8 @@ dsh plugin --profile web exec dsh-codex-connect doctor
 
 The doctor command reads process and filesystem metadata only. It never opens the OAuth document or prints a token, authorization URL, authorization code, account id, or auth-file content.
 
+For automation, `doctor --json` emits exactly one secret-free JSON document with schema version 1, package/version/Node metadata, credential-file state and safe mode, capabilities, conflict status, and hints; it omits the absolute credential path and OAuth/account/expiry data. `status --json` emits only signed-in or signed-out state with package metadata. `doctor --json` reads metadata only; `status --json` reads the credential solely to determine sign-in state, but neither mode prints credential contents or starts OAuth. Signed-out status still exits with code 1.
+
 ## Explicit configuration
 
 Open **Settings → Plugins → Plugin configuration → Codex Connect** to manage the ChatGPT account and optional capabilities in one card. Changes use Harness's revision-fenced settings store and apply live. **Save changes** affects only this plugin's capability section; it never selects a default model or global search route.

package/docs/README.zh.md

@@ -6,10 +6,34 @@
 
 通过 OAuth 将你的 ChatGPT 订阅连接到 DeepSeek Harness，同时保留用户自主默认项、Harness 原生审批、非敏感诊断和可靠的会话恢复。
 
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/hero.jpg" alt="Codex Connect — 通过 ChatGPT OAuth 连接 DeepSeek Harness" width="100%">
+</p>
+
 `dsh-codex-connect` 提供 `openai-codex` 模型目录和独立的 ChatGPT OAuth 登录。模型仍走 Harness 标准 LLM 服务，因此流式输出、工具调用、reasoning replay、压缩、文件系统控制、权限门禁和审批提示仍由 Harness 负责。ChatGPT 订阅不会因此变成 OpenAI Platform API 凭据。
 
 安装是增量的：bundle 不会替换当前主模型或搜索路由；独立搜索提供方和 `view_image` 工具也默认关闭，必须显式开启。
 
+## 在 Harness 中的样子
+
+在 **设置 → 插件 → 插件配置 → Codex Connect** 中登录并管理插件。
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/oauth-status.jpg" alt="Harness 插件配置中的 Codex Connect ChatGPT OAuth 状态" width="720">
+</p>
+
+Codex 搜索与 `view_image` 都是显式、按 profile 控制的可选能力：
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/plugin-configuration.jpg" alt="DeepSeek Harness 中的 Codex Connect 可选能力设置" width="720">
+</p>
+
+Codex 模型会和现有提供方一起出现在 Harness 原生模型选择器中：
+
+<p align="center">
+  <img src="https://raw.githubusercontent.com/franksong2702/dsh-codex-connect/main/docs/assets/model-selector.jpg" alt="DeepSeek Harness 模型选择器中的 OpenAI Codex 模型" width="320">
+</p>
+
 ## 安装
 
 ```sh
@@ -17,7 +41,7 @@ dsh plugin --profile web add dsh-codex-connect@alpha
 dsh web
 ```
 
-如需精确固定此版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.4`。若 npm 不可用，可使用 GitHub tag 兜底：`dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.4'`。在 DeepSeek Harness 源码 checkout 中运行时，在命令前加 `pnpm`。本地开发可安装 `link:/absolute/path/to/dsh-codex-connect`。
+在 `0.1.0-alpha.4.6` 发布后，如需精确固定此版本，使用 `dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.6`。在对应 GitHub prerelease 已创建且 npm 不可用时，可使用 `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.6'`。在 DeepSeek Harness 源码 checkout 中运行时，在命令前加 `pnpm`。本地开发可安装 `link:/absolute/path/to/dsh-codex-connect`。
 
 可在 **设置 → 插件 → 插件配置 → Codex Connect → 使用 ChatGPT 登录**，也可使用 CLI：
 
@@ -29,6 +53,8 @@ dsh plugin --profile web exec dsh-codex-connect doctor
 
 `doctor` 只读取进程与文件系统元数据，不打开 OAuth 文件，也不会输出 token、授权 URL、授权码、账户 ID 或认证文件内容。
 
+供脚本使用时，`doctor --json` 只输出一条可解析的非敏感 JSON，包含 schema version 1、包/版本/Node 信息、认证文件状态与安全 mode、能力、冲突状态和提示；它省略认证文件绝对路径以及 OAuth、账户和过期时间信息。`status --json` 只输出 signed-in 或 signed-out 状态及包元数据。`doctor --json` 只读取元数据；`status --json` 仅为判断登录态读取认证文件，但两者都不会输出认证文件内容或启动 OAuth；signed-out 状态仍返回退出码 1。
+
 ## 显式配置
 
 打开 **设置 → 插件 → 插件配置 → Codex Connect**，可以在同一张卡片中管理 ChatGPT 账户和可选能力。更改通过 Harness 带 revision 防护的设置存储保存，并即时生效；**保存更改**只影响本插件的能力配置，绝不会选择默认模型或全局搜索路由。

package/lib/bin.js

@@ -1,11 +1,12 @@
 #!/usr/bin/env node
-import { A as logoutOpenAICodex, F as openAICodexAuthPath, j as openAICodexAuthStatus, k as loginOpenAICodex, w as diagnoseOpenAICodex } from "./src-BY1nv_E6.js";
+import { A as loginOpenAICodex, E as CODEX_CONNECT_VERSION, I as openAICodexAuthPath, M as openAICodexAuthStatus, j as logoutOpenAICodex, w as diagnoseOpenAICodex } from "./src-KKqkbCFT.js";
 import { spawn } from "node:child_process";
 import { realpathSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
 //#region src/bin.ts
 /** Standalone credential CLI for the optional OpenAI Codex bundle. */
+const JSON_SCHEMA_VERSION = 1;
 /** Open one trusted HTTPS URL with the platform browser, best effort. */
 function openBrowser(rawUrl) {
 	const url = new URL(rawUrl);
@@ -63,16 +64,39 @@ async function answerPrompt(prompt, deviceCode, question) {
 /** Print the standalone command help. */
 function printHelp() {
 	process.stdout.write([
-		"Usage: dsh-codex-connect <doctor|login|logout|status> [--device-code]",
+		"Usage: dsh-codex-connect <doctor|login|logout|status> [--device-code|--json]",
 		"",
 		"  doctor         inspect secret-free runtime and OAuth file metadata",
 		"  login          sign in with a separate ChatGPT OAuth session",
 		"  logout         remove the dsh credential without changing ~/.codex",
 		"  status         report non-secret dsh credential state",
 		"  --device-code  use headless device-code login (login only)",
+		"  --json         emit one secret-free JSON document (doctor/status only)",
 		""
 	].join("\n"));
 }
+function doctorExitCode(report) {
+	return report.credentialFile.state === "permissions-too-broad" || report.credentialFile.state === "not-a-regular-file" || report.credentialFile.state === "unreadable-metadata" ? 1 : 0;
+}
+/** Project the diagnostic report without its absolute credential pathname. */
+function doctorJson(report) {
+	return {
+		schemaVersion: JSON_SCHEMA_VERSION,
+		package: report.package,
+		version: report.version,
+		node: report.node,
+		credentialFile: {
+			state: report.credentialFile.state,
+			...report.credentialFile.mode === void 0 ? {} : { mode: report.credentialFile.mode }
+		},
+		capabilities: report.capabilities,
+		providerConflict: report.providerConflict,
+		hints: report.hints
+	};
+}
+function printJson(value) {
+	process.stdout.write(`${JSON.stringify(value)}\n`);
+}
 /** Execute one boot-free credential command. */
 async function run(argv) {
 	if (argv.length === 0 || argv[0] === "--help" || argv[0] === "-h") {
@@ -85,7 +109,9 @@ async function run(argv) {
 		return 1;
 	}
 	const action = rawAction;
-	if (flags.filter((flag) => flag !== "--device-code").length > 0 || flags.includes("--device-code") && action !== "login") {
+	const deviceCode = flags.includes("--device-code");
+	const jsonOutput = flags.includes("--json");
+	if (flags.filter((flag) => flag !== "--device-code" && flag !== "--json").length > 0 || deviceCode && action !== "login" || jsonOutput && (action === "login" || action === "logout" || deviceCode)) {
 		process.stderr.write(`dsh-codex-connect: invalid options for ${action}: ${flags.join(" ")}\n`);
 		return 1;
 	}
@@ -93,6 +119,10 @@ async function run(argv) {
 		switch (action) {
 			case "doctor": {
 				const report = await diagnoseOpenAICodex();
+				if (jsonOutput) {
+					printJson(doctorJson(report));
+					return doctorExitCode(report);
+				}
 				process.stdout.write([
 					`Codex Connect ${report.version} on ${report.node}`,
 					`OAuth file metadata: ${report.credentialFile.state} (${report.credentialFile.path})`,
@@ -101,10 +131,19 @@ async function run(argv) {
 					...report.hints.map((hint) => `Hint: ${hint}`),
 					""
 				].join("\n"));
-				return report.credentialFile.state === "permissions-too-broad" || report.credentialFile.state === "not-a-regular-file" || report.credentialFile.state === "unreadable-metadata" ? 1 : 0;
+				return doctorExitCode(report);
 			}
 			case "status": {
 				const status = await openAICodexAuthStatus();
+				if (jsonOutput) {
+					printJson({
+						schemaVersion: JSON_SCHEMA_VERSION,
+						package: "dsh-codex-connect",
+						version: CODEX_CONNECT_VERSION,
+						status: status.authenticated ? "signed-in" : "signed-out"
+					});
+					return status.authenticated ? 0 : 1;
+				}
 				if (!status.authenticated) {
 					process.stdout.write("Codex Connect: signed out\n");
 					return 1;
@@ -125,7 +164,7 @@ async function run(argv) {
 				});
 				try {
 					await loginOpenAICodex({
-						prompt: (prompt) => answerPrompt(prompt, flags.includes("--device-code"), (text, options) => readline.question(text, options)),
+						prompt: (prompt) => answerPrompt(prompt, deviceCode, (text, options) => readline.question(text, options)),
 						notify: (event) => notify(event, true)
 					});
 				} finally {

package/lib/client.js

@@ -666,7 +666,7 @@ window.__ModuleLoader__.load({
 				height: 9,
 				borderRadius: "50%",
 				flex: "0 0 auto",
-				background: status === "signed-in" ? "var(--dsw-alias-state-success-primary, #22a06b)" : status === "error" ? "var(--dsw-alias-state-error-primary, #d92d20)" : status === "signing-in" || status === "loading" ? "var(--dsw-alias-brand-primary, #1677ff)" : "var(--dsw-alias-label-dimmed, #9aa0a6)"
+				background: status === "signed-in" ? "var(--dsw-alias-state-success-primary, #22a06b)" : status === "error" || status === "reauth-required" ? "var(--dsw-alias-state-error-primary, #d92d20)" : status === "signing-in" || status === "loading" ? "var(--dsw-alias-brand-primary, #1677ff)" : "var(--dsw-alias-label-dimmed, #9aa0a6)"
 			};
 		}
 		async function jsonRequest(path, method = "GET", signal) {
@@ -768,7 +768,7 @@ window.__ModuleLoader__.load({
 					if (mounted.current) setBusy(false);
 				}
 			};
-			const label = status.status === "signed-in" ? t("signedIn") : status.status === "loading" ? t("loadingAccount") : status.status === "signing-in" ? t("signingIn") : status.status === "error" ? t("requestFailed") : t("signedOut");
+			const label = status.status === "signed-in" ? t("signedIn") : status.status === "loading" ? t("loadingAccount") : status.status === "signing-in" ? t("signingIn") : status.status === "reauth-required" ? t("reauthRequired") : status.status === "error" ? t("requestFailed") : t("signedOut");
 			return /* @__PURE__ */ (0, react_jsx_runtime.jsxs)("section", {
 				style: embedded ? embeddedPageStyle : pageStyle,
 				...embedded ? { "aria-label": t("title") } : { "aria-labelledby": "openai-codex-settings-title" },
@@ -813,10 +813,10 @@ window.__ModuleLoader__.load({
 								onClick: () => {
 									signIn();
 								},
-								children: busy ? t("working") : status.status === "error" ? t("loginAgain") : t("login")
+								children: busy ? t("working") : status.status === "error" || status.status === "reauth-required" ? t("loginAgain") : t("login")
 							})]
 						}),
-						status.status === "error" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
+						status.status === "error" || status.status === "reauth-required" ? /* @__PURE__ */ (0, react_jsx_runtime.jsx)("p", {
 							style: errorStyle,
 							children: status.message
 						}) : null,
@@ -938,6 +938,7 @@ window.__ModuleLoader__.load({
 			signedOut: "Not signed in",
 			signingIn: "Waiting for browser authorization…",
 			signedIn: "Signed in",
+			reauthRequired: "Sign in again",
 			login: "Sign in with ChatGPT",
 			loginAgain: "Sign in again",
 			logout: "Sign out",
@@ -996,6 +997,7 @@ window.__ModuleLoader__.load({
 			signedOut: "尚未登录",
 			signingIn: "正在等待浏览器授权…",
 			signedIn: "已登录",
+			reauthRequired: "需要重新登录",
 			login: "使用 ChatGPT 登录",
 			loginAgain: "重新登录",
 			logout: "退出登录",

package/lib/index.js

@@ -1,2 +1,2 @@
-import { A as logoutOpenAICodex, C as assertNoOpenAICodexProviderConflict, D as parseOpenAICodexUsage, E as OPENAI_CODEX_USAGE_URL, F as openAICodexAuthPath, M as OPENAI_CODEX_AUTH_FILENAME, N as OPENAI_CODEX_PROVIDER, O as readOpenAICodexRateLimits, P as OpenAICodexCredentialStore, S as VIEW_IMAGE_TOOL_NAME, T as openAICodexConflictMessage, _ as decodeOpenAICodexSettings, a as name, b as installOpenAICodexSearchEvent, c as OPENAI_CODEX_SEARCH_URL, d as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, f as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, g as OPENAI_CODEX_SETTINGS_NAMESPACE, h as DEFAULT_OPENAI_CODEX_SETTINGS, i as inject, j as openAICodexAuthStatus, k as loginOpenAICodex, l as OpenAICodexSearchProvider, m as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, n as OPENAI_CODEX_SETTINGS_NS, o as OPENAI_CODEX_BASE_URL, p as DEFAULT_OPENAI_CODEX_SEARCH_MODE, r as apply, s as OPENAI_CODEX_SEARCH_PROVIDER, t as Config, u as mapOpenAICodexSearchResponse, v as resolveOpenAICodexSettings, w as diagnoseOpenAICodex, x as recordOpenAICodexSearchRequest, y as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT } from "./src-BY1nv_E6.js";
+import { A as loginOpenAICodex, C as assertNoOpenAICodexProviderConflict, D as OPENAI_CODEX_USAGE_URL, F as OpenAICodexCredentialStore, I as openAICodexAuthPath, M as openAICodexAuthStatus, N as OPENAI_CODEX_AUTH_FILENAME, O as parseOpenAICodexUsage, P as OPENAI_CODEX_PROVIDER, S as VIEW_IMAGE_TOOL_NAME, T as openAICodexConflictMessage, _ as decodeOpenAICodexSettings, a as name, b as installOpenAICodexSearchEvent, c as OPENAI_CODEX_SEARCH_URL, d as DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, f as DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, g as OPENAI_CODEX_SETTINGS_NAMESPACE, h as DEFAULT_OPENAI_CODEX_SETTINGS, i as inject, j as logoutOpenAICodex, k as readOpenAICodexRateLimits, l as OpenAICodexSearchProvider, m as DEFAULT_OPENAI_CODEX_SEARCH_MODEL, n as OPENAI_CODEX_SETTINGS_NS, o as OPENAI_CODEX_BASE_URL, p as DEFAULT_OPENAI_CODEX_SEARCH_MODE, r as apply, s as OPENAI_CODEX_SEARCH_PROVIDER, t as Config, u as mapOpenAICodexSearchResponse, v as resolveOpenAICodexSettings, w as diagnoseOpenAICodex, x as recordOpenAICodexSearchRequest, y as OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT } from "./src-KKqkbCFT.js";
 export { Config, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS, DEFAULT_OPENAI_CODEX_SEARCH_MODE, DEFAULT_OPENAI_CODEX_SEARCH_MODEL, DEFAULT_OPENAI_CODEX_SETTINGS, OPENAI_CODEX_AUTH_FILENAME, OPENAI_CODEX_BASE_URL, OPENAI_CODEX_PROVIDER, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT, OPENAI_CODEX_SEARCH_PROVIDER, OPENAI_CODEX_SEARCH_URL, OPENAI_CODEX_SETTINGS_NAMESPACE, OPENAI_CODEX_SETTINGS_NS, OPENAI_CODEX_USAGE_URL, OpenAICodexCredentialStore, OpenAICodexSearchProvider, VIEW_IMAGE_TOOL_NAME, apply, assertNoOpenAICodexProviderConflict, decodeOpenAICodexSettings, diagnoseOpenAICodex, inject, installOpenAICodexSearchEvent, loginOpenAICodex, logoutOpenAICodex, mapOpenAICodexSearchResponse, name, openAICodexAuthPath, openAICodexAuthStatus, openAICodexConflictMessage, parseOpenAICodexUsage, readOpenAICodexRateLimits, recordOpenAICodexSearchRequest, resolveOpenAICodexSettings };

package/lib/{src-BY1nv_E6.js → src-KKqkbCFT.js}

@@ -252,6 +252,27 @@ async function openAICodexAuthStatus(store = new OpenAICodexCredentialStore()) {
 /** Fixed endpoint used by the official Codex client for ChatGPT rate limits. */
 const OPENAI_CODEX_USAGE_URL = "https://chatgpt.com/backend-api/wham/usage";
 const USAGE_REQUEST_TIMEOUT_MS = 15e3;
+/** Stable public discriminant for an expired or revoked Codex OAuth session. */
+const OPENAI_CODEX_REAUTH_REQUIRED_CODE = "OPENAI_CODEX_REAUTH_REQUIRED";
+/** Fixed, secret-free message for a browser-facing reauthorization prompt. */
+const OPENAI_CODEX_REAUTH_REQUIRED_MESSAGE = "OpenAI Codex authorization must be renewed";
+/**
+* Raised when the usage endpoint rejects the current OAuth session.
+*
+* The error intentionally carries no response, credential, or account data so
+* callers can safely pass its fixed message across the Web boundary.
+*/
+var OpenAICodexReauthRequiredError = class extends Error {
+	code = OPENAI_CODEX_REAUTH_REQUIRED_CODE;
+	constructor() {
+		super(OPENAI_CODEX_REAUTH_REQUIRED_MESSAGE);
+		this.name = "OpenAICodexReauthRequiredError";
+	}
+};
+/** Identify the dedicated reauthorization failure without comparing messages. */
+function isOpenAICodexReauthRequiredError(error) {
+	return error instanceof OpenAICodexReauthRequiredError;
+}
 function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -363,7 +384,10 @@ async function readOpenAICodexRateLimits(store) {
 		},
 		signal: AbortSignal.timeout(USAGE_REQUEST_TIMEOUT_MS)
 	});
-	if (!response.ok) throw new Error(response.status === 401 || response.status === 403 ? "OpenAI Codex sign-in needs to be renewed" : `OpenAI Codex usage request failed with HTTP ${response.status}`);
+	if (!response.ok) {
+		if (response.status === 401 || response.status === 403) throw new OpenAICodexReauthRequiredError();
+		throw new Error(`OpenAI Codex usage request failed with HTTP ${response.status}`);
+	}
 	let value;
 	try {
 		value = await response.json();
@@ -507,6 +531,10 @@ var OpenAICodexWebAuth = class {
 				usage: await readOpenAICodexRateLimits(this.store)
 			};
 		} catch (error) {
+			if (isOpenAICodexReauthRequiredError(error)) return {
+				status: "reauth-required",
+				message: OPENAI_CODEX_REAUTH_REQUIRED_MESSAGE
+			};
 			return {
 				status: "signed-in",
 				usage: { rateLimits: [] },
@@ -618,7 +646,7 @@ function registerOpenAICodexAuthRoutes(ctx, store) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.4";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.6";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */
@@ -1481,4 +1509,4 @@ function apply(ctx, config) {
 	scheduleCapabilities();
 }
 //#endregion
-export { logoutOpenAICodex as A, assertNoOpenAICodexProviderConflict as C, parseOpenAICodexUsage as D, OPENAI_CODEX_USAGE_URL as E, openAICodexAuthPath as F, OPENAI_CODEX_AUTH_FILENAME as M, OPENAI_CODEX_PROVIDER as N, readOpenAICodexRateLimits as O, OpenAICodexCredentialStore as P, VIEW_IMAGE_TOOL_NAME as S, openAICodexConflictMessage as T, decodeOpenAICodexSettings as _, name as a, installOpenAICodexSearchEvent as b, OPENAI_CODEX_SEARCH_URL as c, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as d, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as f, OPENAI_CODEX_SETTINGS_NAMESPACE as g, DEFAULT_OPENAI_CODEX_SETTINGS as h, inject as i, openAICodexAuthStatus as j, loginOpenAICodex as k, OpenAICodexSearchProvider as l, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as m, OPENAI_CODEX_SETTINGS_NS as n, OPENAI_CODEX_BASE_URL as o, DEFAULT_OPENAI_CODEX_SEARCH_MODE as p, apply as r, OPENAI_CODEX_SEARCH_PROVIDER as s, Config as t, mapOpenAICodexSearchResponse as u, resolveOpenAICodexSettings as v, diagnoseOpenAICodex as w, recordOpenAICodexSearchRequest as x, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT as y };
+export { loginOpenAICodex as A, assertNoOpenAICodexProviderConflict as C, OPENAI_CODEX_USAGE_URL as D, CODEX_CONNECT_VERSION as E, OpenAICodexCredentialStore as F, openAICodexAuthPath as I, openAICodexAuthStatus as M, OPENAI_CODEX_AUTH_FILENAME as N, parseOpenAICodexUsage as O, OPENAI_CODEX_PROVIDER as P, VIEW_IMAGE_TOOL_NAME as S, openAICodexConflictMessage as T, decodeOpenAICodexSettings as _, name as a, installOpenAICodexSearchEvent as b, OPENAI_CODEX_SEARCH_URL as c, DEFAULT_OPENAI_CODEX_SEARCH_CONTEXT_SIZE as d, DEFAULT_OPENAI_CODEX_SEARCH_MAX_OUTPUT_TOKENS as f, OPENAI_CODEX_SETTINGS_NAMESPACE as g, DEFAULT_OPENAI_CODEX_SETTINGS as h, inject as i, logoutOpenAICodex as j, readOpenAICodexRateLimits as k, OpenAICodexSearchProvider as l, DEFAULT_OPENAI_CODEX_SEARCH_MODEL as m, OPENAI_CODEX_SETTINGS_NS as n, OPENAI_CODEX_BASE_URL as o, DEFAULT_OPENAI_CODEX_SEARCH_MODE as p, apply as r, OPENAI_CODEX_SEARCH_PROVIDER as s, Config as t, mapOpenAICodexSearchResponse as u, resolveOpenAICodexSettings as v, diagnoseOpenAICodex as w, recordOpenAICodexSearchRequest as x, OPENAI_CODEX_SEARCH_MODEL_REQUEST_EVENT as y };

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-codex-connect",
   "displayName": "Codex Connect",
   "description": "ChatGPT OAuth and Codex models for DeepSeek Harness.",
-  "version": "0.1.0-alpha.4.4",
+  "version": "0.1.0-alpha.4.6",
   "author": "Frank Song",
   "contributors": [
     "Yan-Zero (original dsh-codex author)"
@@ -43,6 +43,7 @@
     "test": "vitest run",
     "typecheck": "tsc -p tsconfig.json && tsc -p tsconfig.client.json",
     "pack:check": "node scripts/check-pack.mjs",
+    "check:dsh-install": "node scripts/check-dsh-install.mjs",
     "check": "pnpm run lint && pnpm run typecheck && pnpm run test && pnpm run build && pnpm run pack:check",
     "prepublishOnly": "pnpm --config.minimum-release-age=0 run check"
   },