dsh-codex-connect 0.1.0-alpha.4.45 → 0.1.0-alpha.4.46

package/INSTALL.md

@@ -4,7 +4,7 @@ Published Alpha 4.43 is verified with the exact DSH `0.1.7-rc.1` model-runtime p
 
 Install `dsh-codex-connect` into one requested DeepSeek Harness profile without changing its current default model, search route, global configuration, or OAuth state.
 
-Channel snapshot on 2026-09-24: npm `alpha` points to `0.1.0-alpha.4.43`; `latest` remains on `0.1.0-alpha.4.41`. Use the exact-version command for the installed DSH version. Publishing an Alpha and promoting the default installation channel are separate actions.
+Channel snapshot on 2026-09-24: npm `alpha` and `latest` both point to `0.1.0-alpha.4.45`. Use the exact-version command for the installed DSH version. Publishing an Alpha and promoting the default installation channel are separate actions.
 
 ## Safety requirements
 
@@ -30,7 +30,7 @@ Check `dsh --version` before changing the requested profile. Use `dsh --help` to
 | `0.1.5-alpha.1` | `0.1.0-alpha.4.41` |
 | `0.1.5-rc.1` | `0.1.0-alpha.4.41` |
 | `0.1.5-rc.2` | `0.1.0-alpha.4.41` |
-| `0.1.7-rc.1` | `0.1.0-alpha.4.43` |
+| `0.1.7-rc.1` | `0.1.0-alpha.4.45` |
 
 If your exact DSH version is unknown or not listed, preserve the installed host, report that the combination is unverified, and verify it before making installation changes. A missing record does not prove incompatibility, and the catalog's latest verified DSH version is not the latest upstream release. Do not recommend upgrading or downgrading DSH merely to match a row. Investigate any specific failure and seek verification of the installed combination. Do not blindly install `dsh-codex-connect@alpha`: `alpha` is a moving tag, not a compatibility guarantee. Do not infer support for newer DSH versions from these rows.
 
@@ -76,7 +76,7 @@ Alpha 4.33 omits the `modelErrors` profile field required by RC model packages,
    For the exact DSH `0.1.7-rc.1` pairing, use Alpha 4.43:
 
    ```sh
-   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.43
+   dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.45
    ```
 
    For DSH `0.1.2-alpha.5`, use Alpha 4.25:
@@ -85,7 +85,7 @@ Alpha 4.33 omits the `modelErrors` profile field required by RC model packages,
    dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.25
    ```
 
-   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.41'` only for the DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` combinations, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.43'` only for DSH `0.1.7-rc.1`.
+   If npm is unavailable after the matching GitHub prerelease is created, use `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.21'` only for the DSH `0.1.1-rc.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.23'` only for the DSH `0.1.2-alpha.2` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.25'` only for the DSH `0.1.2-alpha.5` combination, `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.41'` only for the DSH `0.1.2-rc.1`, `0.1.5-alpha.1`, `0.1.5-rc.1`, and `0.1.5-rc.2` combinations, or `dsh plugin --profile web add 'github:franksong2702/dsh-codex-connect#v0.1.0-alpha.4.45'` only for DSH `0.1.7-rc.1`.
 
 3. Run `dsh web --help` once to compose the installed profile without starting the server. DSH `0.1.2-rc.1` prepares profile plugin dependency fallback during this step.
 4. Run `dsh --profile web --dump-config` and require exactly one `llm-openai-codex` row loading `dsh-codex-connect`.

package/README.i18n.yaml

@@ -2,5 +2,5 @@
 # side as of the last confirmed-consistent state. Both languages carry equal authority;
 # after editing either side, bring the other along and re-record with:
 #   git hash-object README.md docs/README.zh.md
-README.md: 1944b620eca818c50a7fa94e694706f0cd43f654
-docs/README.zh.md: dec04b07db9a90fd2babd153073716d9d9b69409
+README.md: 3dd09c3af313022796d95809cad3b53130eb6a1a
+docs/README.zh.md: 3c5b9bf71227a795131522821424574b72d24088

package/README.md

@@ -16,7 +16,7 @@ This guide describes the published pairing below. Check `dsh --version` first an
 
 | Requirement | Verified pairing |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.43` |
+| Codex Connect | `0.1.0-alpha.4.45` |
 | DeepSeek Harness | `0.1.7-rc.1` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | Account | ChatGPT OAuth with access to the requested Codex model; availability is decided by OpenAI |
@@ -28,7 +28,7 @@ On stock DSH `0.1.7-rc.1`, ordinary Composer works, but Task controls remain pau
 ### 1. Install
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.43
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.45
 dsh web
 ```
 
@@ -75,7 +75,7 @@ All options below are off on a fresh installation. Edit them in **Settings → P
 
 | Capability | Enable with | Important behavior |
 |---|---|---|
-| Proxy | `enableProxy` | Credential-free HTTP(S), scoped to this plugin's traffic. A failed proxy request does not silently retry directly. |
+| Proxy | `enableProxy` | Credential-free HTTP(S), scoped to this plugin's traffic, including compressed OAuth and quota responses. Unrelated Fetch calls retain the host's original transport. A failed proxy request does not silently retry directly. |
 | Codex Search | `enableSearch` | Selects Codex for the entire profile's search route; disabling restores the previously active route. |
 | Luna Reserve | `enableReserveFallback` | Uses the hidden Reserve route only when the backend explicitly authorizes it for the captured account; never changes global defaults or retries a generic `429`. |
 | Image viewing | `enableImageTool` | Adds `view_image` to vision-capable models for local files and validated public HTTP(S) images. |

package/docs/README.zh.md

@@ -16,7 +16,7 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 
 | 要求 | 已验证组合 |
 |---|---|
-| Codex Connect | `0.1.0-alpha.4.43` |
+| Codex Connect | `0.1.0-alpha.4.45` |
 | DeepSeek Harness | `0.1.7-rc.1` |
 | Node.js | `^22.19.0 \|\| >=24.0.0` |
 | 账户 | 通过 ChatGPT OAuth 使用所请求的 Codex 模型；可用性由 OpenAI 决定 |
@@ -28,7 +28,7 @@ Codex Connect 为标准 Harness agent loop 添加 `openai-codex` 模型提供方
 ### 1. 安装
 
 ```sh
-dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.43
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.45
 dsh web
 ```
 
@@ -75,7 +75,7 @@ Alpha 4.40 还会在旧提供方目录缺失时补充 `gpt-6-sol` 和 `gpt-6-lun
 
 | 能力 | 启用字段 | 重要行为 |
 |---|---|---|
-| 代理 | `enableProxy` | 不带凭据的 HTTP(S)，只作用于本插件流量。代理请求失败不会静默改走直连。 |
+| 代理 | `enableProxy` | 不带凭据的 HTTP(S)，只作用于本插件流量，包括压缩的 OAuth 和额度响应；无关的 Fetch 请求仍使用宿主原来的传输方式。代理请求失败不会静默改走直连。 |
 | Codex 搜索 | `enableSearch` | 将整个 profile 的搜索路由切换为 Codex；关闭后恢复之前的路由。 |
 | Luna Reserve | `enableReserveFallback` | 只在服务端为当前已固定账户明确授权时使用隐藏的 Reserve 路由；不修改全局默认模型，也不因普通 `429` 重试。 |
 | 图片查看 | `enableImageTool` | 为视觉模型添加 `view_image`，读取本地文件和经过校验的公网 HTTP(S) 图片。 |

package/docs/agent-notes/windows-proxy-compressed-fetch.md

@@ -0,0 +1,7 @@
+# Keep compressed Fetch responses decodable through the Codex proxy
+
+On Windows with Node 24, the plugin's npm Undici 8 `ProxyAgent` can serve Node's built-in Fetch through its legacy v1 dispatcher bridge, but the returned response may lose `content-encoding` while retaining gzip bytes. The resulting HTTP 200 fails JSON parsing during OAuth exchange or quota refresh. A credential-free Windows probe reproduced `content-encoding: null` and the gzip magic bytes with the published Alpha 4.45 package. The equivalent macOS probe succeeded; local macOS tests alone do not prove the Windows path.
+
+The proxy manager now routes Fetch calls made inside its `AsyncLocalStorage` scope through the same npm Undici runtime that owns its proxy agent. Outside that scope, the original host Fetch remains the fallback. The wrapper is installed only while a proxy manager owns it, follows a third-party Fetch replacement on the next acquisition, and restores the previous function on final disposal if still owned. Native `Request` instances are converted into their URL and request options because npm Undici's separate `Request` class does not accept them directly. The existing legacy dispatcher bridge remains for other Node HTTP clients; this fix does not alter direct requests or retry a failed proxy request without the proxy.
+
+The keyless test serves gzip JSON through a local CONNECT proxy, checks both URL and native `Request` inputs, confirms the proxy was used, and checks Fetch restoration. PR CI runs that test on Windows Node 24.15.0 in addition to Ubuntu. It does not use real OAuth credentials or prove a browser login until the patched plugin is installed and exercised there.

package/docs/release-notes/alpha-4.46.md

@@ -0,0 +1,21 @@
+# Codex Connect Alpha 4.46 — Windows proxy response decoding
+
+## English
+
+When the optional Codex proxy is enabled on Windows, Alpha 4.45 can receive a successful compressed response but expose its gzip bytes without the encoding header. OAuth token exchange or quota refresh can then fail while parsing JSON. Alpha 4.46 routes Fetch calls inside the plugin's proxy scope through the same Undici runtime as its proxy agent; unrelated Fetch calls keep the host's original transport. A failed proxy request still does not retry directly.
+
+This release targets DeepSeek Harness `0.1.7-rc.1`. The published 4.45 failure was reproduced without credentials on a Windows PC. The fix passed keyless Windows CI, including compressed JSON and proxy ownership checks. Real Chrome OAuth and quota refresh with the patched package on that PC remain unverified. This release does not address the separate, still-unconfirmed message-source report in Issue #261. Publishing to `alpha` does not promote npm `latest` or install the plugin in an existing profile.
+
+After npm publication is independently confirmed, install this exact version with:
+
+```sh
+dsh plugin --profile web add dsh-codex-connect@0.1.0-alpha.4.46
+```
+
+## 中文
+
+在 Windows 上启用可选的 Codex 代理时，Alpha 4.45 可能收到成功的压缩响应，却丢失编码标头、把 gzip 原始字节交给调用方，导致 OAuth 换取凭据或额度刷新在解析 JSON 时失败。Alpha 4.46 让插件代理作用域内的 Fetch 使用与代理组件相同的 Undici 运行时；无关的 Fetch 仍使用宿主原有传输方式。代理请求失败时仍不会静默改走直连。
+
+本版针对 DeepSeek Harness `0.1.7-rc.1`。已在 Windows PC 上不使用凭据复现发布版 4.45 的故障；修复通过了无凭据的 Windows CI，包括压缩 JSON 和代理所有权测试。该 PC 上安装修复包后的真实 Chrome OAuth 与额度刷新仍未验收。本版不处理 Issue #261 尚未确认的消息来源报告。发布到 `alpha` 不会同步提升 npm `latest`，也不会自动安装到现有 profile。
+
+独立确认 npm 发布后，可使用上面的精确版本命令安装。

package/lib/bin.js

@@ -765,7 +765,7 @@ async function detectCompatibility(options = {}) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.45";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.46";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */

package/lib/client.js

@@ -6526,7 +6526,7 @@ window.__ModuleLoader__.load({
 		}
 		//#endregion
 		//#region src/version.ts
-		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.45";
+		const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.46";
 		//#endregion
 		//#region src/client/OpenAICodexModelsCard.tsx
 		/** Compact Models account entry with quota disclosure and shared configuration. */

package/lib/index.js

@@ -4184,6 +4184,37 @@ let previousDispatcher;
 const legacySymbol = Symbol.for("undici.globalDispatcher.1");
 let installedLegacy;
 let previousLegacy;
+let installedFetch;
+let previousFetch;
+const scopedUndiciFetch = fetch$1;
+function installScopedFetch(fallback) {
+	previousFetch = fallback;
+	installedFetch = (input, init) => {
+		if (proxyScope.getStore() === void 0) return fallback(input, init);
+		if (input instanceof Request) {
+			const request = new Request(input, init);
+			return scopedUndiciFetch(request.url, {
+				method: request.method,
+				headers: request.headers,
+				signal: request.signal,
+				redirect: request.redirect,
+				cache: request.cache,
+				credentials: request.credentials,
+				integrity: request.integrity,
+				keepalive: request.keepalive,
+				mode: request.mode,
+				referrer: request.referrer,
+				referrerPolicy: request.referrerPolicy,
+				...request.body === null ? {} : {
+					body: request.body,
+					duplex: "half"
+				}
+			});
+		}
+		return scopedUndiciFetch(input, init);
+	};
+	globalThis.fetch = installedFetch;
+}
 function installLegacy(fallback, bridge) {
 	previousLegacy = fallback;
 	installedLegacy = { dispatch: (...args) => {
@@ -4199,6 +4230,7 @@ function ensureInstalled(owner) {
 		installedDispatcher = new ScopedProxyDispatcher(current);
 		setGlobalDispatcher(installedDispatcher);
 		installLegacy(legacy, Reflect.get(globalThis, legacySymbol));
+		installScopedFetch(globalThis.fetch);
 	} else if (current !== installedDispatcher) {
 		installedDispatcher = new ScopedProxyDispatcher(current);
 		previousDispatcher = current;
@@ -4208,6 +4240,7 @@ function ensureInstalled(owner) {
 		setGlobalDispatcher(installedDispatcher);
 		installLegacy(legacy, Reflect.get(globalThis, legacySymbol));
 	}
+	if (globalThis.fetch !== installedFetch) installScopedFetch(globalThis.fetch);
 	activeOwners.add(owner);
 }
 function removeOwner(owner) {
@@ -4221,8 +4254,11 @@ function removeOwner(owner) {
 	previousDispatcher = void 0;
 	if (getGlobalDispatcher() === installed && previous !== void 0) setGlobalDispatcher(previous);
 	if (restoreLegacy !== void 0) Reflect.set(globalThis, legacySymbol, restoreLegacy);
+	if (globalThis.fetch === installedFetch && previousFetch !== void 0) globalThis.fetch = previousFetch;
 	installedLegacy = void 0;
 	previousLegacy = void 0;
+	installedFetch = void 0;
+	previousFetch = void 0;
 }
 function isPromiseLike(value) {
 	return typeof value === "object" && value !== null && "then" in value && typeof value.then === "function";
@@ -5294,7 +5330,7 @@ function registerOpenAICodexOriginalImageRoute(ctx, trustedOrigins, assets) {
 }
 //#endregion
 //#region src/version.ts
-const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.45";
+const CODEX_CONNECT_VERSION = "0.1.0-alpha.4.46";
 //#endregion
 //#region src/doctor.ts
 /** Secret-free diagnostics and duplicate-provider guidance. */

package/package.json

@@ -2,7 +2,7 @@
   "name": "dsh-codex-connect",
   "displayName": "Codex Connect",
   "description": "ChatGPT OAuth and Codex models for DeepSeek Harness.",
-  "version": "0.1.0-alpha.4.45",
+  "version": "0.1.0-alpha.4.46",
   "author": "Frank Song",
   "contributors": [
     "Yan-Zero (original dsh-codex author)"