dsh-codex-subscription 0.2.8

package/AGENTS.md

@@ -0,0 +1,150 @@
+# Agent installation guide
+
+Use this guide when a user asks an Agent to install, update, verify, or remove
+`dsh-codex-subscription`.
+
+## Safety
+
+- Confirm the target DSH profile; use `web` only when it is the user's target.
+- Use the pinned `v0.2.8` release assets for a first install, never a moving branch.
+- Never print OAuth credentials, account IDs, authorization callbacks, or the
+  credential store.
+- Do not start, stop, or restart DSH without explicit permission.
+- Preserve the DSH profile, unrelated plugins, and stored OAuth credentials.
+  Signing out requires explicit permission.
+- Do not delete any DSH profile during install, update, verification, or uninstall.
+
+## Detect the installation
+
+On Windows, first run `Get-Command dsh-codex -ErrorAction SilentlyContinue`.
+When it exists, use `dsh-codex update` or `dsh-codex uninstall` instead of
+downloading the manager again.
+
+On Windows, prefer the release manager below. It supports both a normal DSH
+installation and DSH-Portable. It discovers a running portable instance, the
+current folder and its parents, the default installed location, and common
+Downloads or Desktop locations.
+
+Do not require a DSH-Portable user to install system Node.js or pnpm. The manager
+uses the portable runtime, sets its isolated `DSH_HOME`, and keeps its verified
+pnpm tool and store inside the portable data directory. A successful first install
+adds only the per-user `dsh-codex` command directory to PATH; it never modifies
+the machine PATH.
+
+If automatic discovery fails, locate the portable root with read-only checks and
+pass it explicitly as `-PortableRoot`. A valid root contains both:
+
+```text
+runtime\node\node.exe
+app\node_modules\@deepseek-ai\dsh\lib\bin.js
+```
+
+Before changing anything on an unfamiliar Windows computer, confirm that
+`powershell.exe` starts, note `$PSVersionTable.PSVersion`, and check
+`Get-Command curl.exe,dsh,node -ErrorAction SilentlyContinue`. Missing system
+Node.js or pnpm is normal for DSH-Portable and is not a reason to install either.
+If more than one DSH installation is present, stop automatic discovery and ask
+the user which installation is the target.
+
+## Windows manager
+
+Download the fixed release asset to a visible file, then invoke the requested action:
+
+```powershell
+curl.exe -fL https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex.ps1 -o "$env:TEMP\dsh-codex.ps1"
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
+```
+
+If `curl.exe` is unavailable, download the same pinned asset without executing
+remote text in memory:
+
+```powershell
+Invoke-WebRequest -UseBasicParsing -Uri 'https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex.ps1' -OutFile "$env:TEMP\dsh-codex.ps1"
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
+```
+
+The process-scoped `Bypass` is for this child process only; do not change the
+machine or user execution policy.
+
+For a custom portable location:
+
+```powershell
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install -PortableRoot 'C:\path\to\DSH-Portable'
+```
+
+After a successful first install, use these commands in a new PowerShell window:
+
+```powershell
+dsh-codex update
+dsh-codex uninstall
+```
+
+`dsh-codex update` resolves the latest immutable GitHub Release and verifies the
+downloaded manager with its SHA-256 asset before running it. If `Get-Command
+dsh-codex` does not find the command on an older installation, download the pinned
+manager above and invoke `Update` once; that also installs the command. The manager
+verifies the package list and composed config. It never restarts DSH and never
+deletes a profile. Uninstall removes the manager command but preserves the DSH
+profile and saved login.
+
+## Existing DSH CLI
+
+When `dsh`, Node.js, and pnpm are already available, install the fixed package
+asset directly:
+
+```sh
+dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+```
+
+Update by running the same `add` command again. When migrating from v0.2.1 by
+hand, remove `@wsl043/dsh-codex-subscription` only after the new package passes
+verification. The Windows manager performs this migration automatically and
+preserves the stored login. Uninstall the current package with:
+
+```sh
+dsh plugin --profile web remove dsh-codex-subscription
+```
+
+## Verify
+
+For the existing CLI path, run:
+
+```sh
+dsh plugin --profile web list dsh-codex-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+Success requires:
+
+1. The requested package version appears once.
+2. `codex-subscription` appears once in the composed config after install
+   or update, and is absent after uninstall.
+3. No unrelated profile or plugin changed.
+4. A running DSH process was not restarted by the operation.
+
+Do not treat `dsh plugin --profile web peers check` as the completion test.
+If the user authorizes a live check, restart DSH manually, open
+**Settings -> Codex**, and verify the page loads. Confirm that Web
+search offers both **DSH default** and **Codex subscription**, and that the Beta
+composer quota switch starts off. Weekly-only usage is valid; Spark remains a
+separate bucket. Do not run a quota-consuming model turn unless the user
+explicitly asks.
+
+## Failure handling
+
+If `dsh-codex` is not found immediately after a successful install, start a new
+PowerShell window and run `Get-Command dsh-codex`. If it is still missing, check
+the current user's PATH and
+`$env:LOCALAPPDATA\Programs\dsh-codex\dsh-codex.cmd`; do not edit the machine
+PATH. The full command path may be used for verification while the shell refresh
+is pending.
+
+If download fails, distinguish DNS, proxy, TLS/certificate, HTTP status, and
+checksum failures. Never disable certificate validation or skip a checksum. If
+`MachinePolicy` or `UserPolicy` blocks the child process, report the applicable
+`Get-ExecutionPolicy -List` result and stop; do not change organization policy.
+
+On any failure, report the sanitized command error, DSH version, selected
+profile, requested release, installation mode, what changed, cleanup status, and
+what remains unverified. Do not patch DSH, switch to another paid route, wipe
+credentials, delete a profile, or claim success from a partial check.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 WSL043
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.en.md

@@ -0,0 +1,180 @@
+# DSH Codex Subscription
+
+[![CI](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml/badge.svg)](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
+[![GitHub stars](https://img.shields.io/github/stars/WSL043/dsh-codex-subscription?style=flat&logo=github&label=stars)](https://github.com/WSL043/dsh-codex-subscription/stargazers)
+
+[简体中文](README.md)
+
+Sign in to ChatGPT and use a Codex subscription directly in DeepSeek Harness.
+No OpenAI API key or Codex CLI installation is required. DSH conversations,
+tools, permissions, search choice, and quota stay in one place.
+
+[Agent install](#let-an-agent-install-it-recommended) · [Windows install](#manual-windows-install) · [Update or uninstall](#update-and-uninstall)
+
+![Codex subscription settings in DeepSeek Harness](docs/assets/settings-en.png)
+
+Settings shows sign-in, search source, and the separate standard Codex and Spark
+quota returned by the service.
+
+If this helps, open the [GitHub repository](https://github.com/WSL043/dsh-codex-subscription) and click **Star** in the upper-right corner so more DSH users can find it.
+
+## What it does
+
+- Uses your ChatGPT / Codex subscription directly inside DSH, with no OpenAI API key or Codex CLI required;
+- Signs in to ChatGPT from Settings and keeps credentials on the host;
+- Switches between DSH's default search and Codex subscription search;
+- Shows the quota, reset time, and freshness actually returned by the backend;
+- Can show the selected Codex model's remaining quota before the model name (Beta, off by default);
+- Keeps Codex-Spark, Credits, and other independent limits separate;
+- Fails visibly when subscription routing is unavailable instead of silently using another paid route.
+
+## Prepare DSH
+
+This plugin supports DeepSeek Harness `0.1.0-rc.6` and requires a ChatGPT account
+that currently has Codex access.
+
+- Do not want to configure Node.js? Use the [community DSH-Portable package](https://github.com/WSL043/DSH-Portable).
+- Prefer the official route? Follow the [DeepSeek Harness run guide](https://github.com/deepseek-ai/deepseek-harness#run).
+
+If DSH already opens normally, continue with the plugin installation below.
+
+## Install
+
+### Let an Agent install it (recommended)
+
+Send the following URL directly to your Agent. The guide contains install,
+update, uninstall, and verification steps. It preserves the DSH profile and
+sign-in and never restarts DSH without permission:
+
+[Open the Agent installation guide](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md)
+
+```text
+https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md
+```
+
+### Manual Windows install
+
+Open PowerShell and paste these two lines in order. They support both a normal DSH install
+and DSH-Portable. Portable users do not need a system Node.js or pnpm.
+
+```powershell
+curl.exe -fL https://github.com/WSL043/dsh-codex-subscription/releases/latest/download/dsh-codex.ps1 -o "$env:TEMP\dsh-codex.ps1"
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
+```
+
+`Bypass` applies only to this child process and does not change the system
+PowerShell execution policy.
+
+The commands support both a normal DSH installation and DSH-Portable. Portable
+users do not need a separate Node.js or pnpm installation, and no administrator
+access is required. The installer finds DSH, verifies the result, and adds the
+per-user `dsh-codex` command. It does not change the system execution policy or
+restart DSH on its own.
+
+If the portable folder was renamed or moved, start the intended DSH-Portable copy
+once and install again. Restart DSH manually after installation.
+
+<details>
+<summary>macOS, Linux, or an existing <code>dsh</code> command</summary>
+
+```sh
+dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web list dsh-codex-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+The plugin list should contain one `dsh-codex-subscription`, and the config should
+contain one `codex-subscription` entry.
+
+</details>
+
+## Sign in and use
+
+1. Open **Settings -> Codex** in DSH.
+2. Sign in with a ChatGPT account that has Codex access.
+3. Choose DSH default search or Codex subscription search.
+4. Choose a Codex model from the model selector.
+
+Codex subscription search reuses the same ChatGPT sign-in and does not need an
+OpenAI API key. Changing the search source does not change the conversation
+model, and a failed source never silently falls back to another paid service.
+Existing DSH search remains the default after an upgrade; opt in to Codex
+subscription search when wanted.
+
+## How quota is shown
+
+![Codex quota inside the composer](docs/assets/composer-quota-en.png)
+
+- Settings always shows the detailed quota returned by the backend. The compact percentage is Beta and off by default;
+- When enabled, it appears inside the composer before the model name and only while a Codex model is selected;
+- Standard Codex models use the lowest remaining standard Codex window, avoiding an overly optimistic number;
+- A selected Spark model uses the separate Spark quota returned by the backend;
+- Only windows actually returned by the backend are shown; there is no hard-coded “5-hour + weekly” layout;
+- If the account currently reports only weekly usage, no 5-hour window is invented; it appears automatically if the backend restores it;
+- Independent Codex-Spark limits are not merged into standard Codex quota;
+- Credits and monthly spending caps appear only when the account or workspace actually returns them;
+- Percentages describe usage status, not billing amounts or billing guarantees.
+
+## Update and uninstall
+
+Windows installer users only need these short commands:
+
+| Action | PowerShell command |
+| --- | --- |
+| Update | `dsh-codex update` |
+| Uninstall | `dsh-codex uninstall` |
+
+Update verifies the latest Release manager script with SHA-256. Uninstall removes
+the plugin and `dsh-codex` command while preserving the DSH profile, unrelated
+plugins, and saved sign-in. If an older installation has no short command, run
+the two Windows first-install commands above once.
+
+<details>
+<summary>Update or uninstall with an existing <code>dsh</code> command</summary>
+
+Update and verify:
+
+```sh
+dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web list dsh-codex-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+Uninstall:
+
+```sh
+dsh plugin --profile web remove dsh-codex-subscription
+```
+
+When updating manually from v0.2.1, remove the old package name only after the new
+package installs successfully:
+
+```sh
+dsh plugin --profile web remove @wsl043/dsh-codex-subscription
+```
+
+</details>
+
+If DSH is running, restart it manually after installation or update.
+
+## Troubleshooting
+
+- If `dsh-codex` is not found after installation, close and reopen PowerShell;
+- If DSH-Portable is not found, start the intended portable copy once and retry;
+- If `curl.exe` is missing, more than one DSH is present, or the command still
+  fails, send the Agent guide URL above to an Agent. Do not change the machine
+  PATH or execution policy, and do not delete a profile to force an install.
+
+## Boundaries and support
+
+- This package connects a ChatGPT subscription; it does not create an OpenAI API key;
+- The ChatGPT Codex backend and DeepSeek Harness can change independently;
+- This is a community project with no affiliation or endorsement from DeepSeek or OpenAI.
+
+Use [GitHub Issues](https://github.com/WSL043/dsh-codex-subscription/issues) for
+project feedback. For general DSH plugin discussion, visit
+[DeepSeek Harness Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions).
+Read [SECURITY.md](SECURITY.md) before reporting sensitive issues.
+
+[MIT](LICENSE)

package/README.md

@@ -0,0 +1,166 @@
+# DSH Codex Subscription
+
+[![CI](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml/badge.svg)](https://github.com/WSL043/dsh-codex-subscription/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/license-MIT-111111.svg)](LICENSE)
+[![GitHub stars](https://img.shields.io/github/stars/WSL043/dsh-codex-subscription?style=flat&logo=github&label=stars)](https://github.com/WSL043/dsh-codex-subscription/stargazers)
+
+[English](README.en.md)
+
+在 DeepSeek Harness 中直接登录 ChatGPT 并使用 Codex 订阅，不需要 OpenAI API Key，
+也不依赖 Codex CLI。保留 DSH 原有的会话、工具和权限，还能切换联网搜索来源并查看额度。
+
+[交给 Agent 安装](#交给-agent推荐) · [Windows 手动安装](#windows-手动安装) · [更新与卸载](#更新与卸载)
+
+![DeepSeek Harness 的 Codex 订阅设置](docs/assets/settings.png)
+
+设置页会显示登录状态、搜索来源，以及服务端实际返回的普通 Codex 与 Spark 独立额度。
+
+如果它帮到了你，欢迎在 [GitHub 仓库](https://github.com/WSL043/dsh-codex-subscription)的右上角点一下 **Star**，也方便其他 DSH 用户发现。
+
+## 能做什么
+
+- 在 DSH 中直接使用 ChatGPT / Codex 订阅，不需要 OpenAI API Key 或 Codex CLI；
+- 在设置页登录 ChatGPT，凭据保留在本机；
+- 可在 DSH 默认搜索与 Codex 订阅搜索之间切换；
+- 展示服务端实际返回的额度、重置时间和更新时间；
+- 可在模型名称左侧显示当前 Codex 模型的剩余额度（Beta，默认关闭）；
+- 单独显示 Codex-Spark、Credits 等独立额度，不把它们混在一起；
+- 订阅路由不可用时明确报错，不会静默切换到其他付费路由。
+
+## 准备 DSH
+
+本插件适配 DeepSeek Harness `0.1.0-rc.6`，还需要一个当前具有 Codex 使用资格的
+ChatGPT 账户。
+
+- 不想配置 Node.js：使用 [DSH-Portable（社区便携包）](https://github.com/WSL043/DSH-Portable)；
+- 想按官方方式运行：查看 [DeepSeek Harness 官方说明](https://github.com/deepseek-ai/deepseek-harness#run)。
+
+已经能正常打开 DSH 的用户可以直接继续安装插件。
+
+## 安装
+
+### 交给 Agent（推荐）
+
+把下面的链接直接发给 Agent。文档包含安装、更新、卸载和验收步骤；Agent 不应删除
+DSH profile、登录信息或擅自重启 DSH。
+
+[打开 Agent 安装文档](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md)
+
+```text
+https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md
+```
+
+### Windows 手动安装
+
+打开 PowerShell，依次粘贴下面两行：
+
+```powershell
+curl.exe -fL https://github.com/WSL043/dsh-codex-subscription/releases/latest/download/dsh-codex.ps1 -o "$env:TEMP\dsh-codex.ps1"
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "$env:TEMP\dsh-codex.ps1" Install
+```
+
+普通安装版和 DSH-Portable 都能使用。便携版不需要另装 Node.js 或 pnpm，整个过程不需要
+管理员权限。安装器会自动寻找 DSH、验证安装结果，并添加当前用户的 `dsh-codex` 命令；
+它不会修改系统执行策略或擅自重启 DSH。
+
+如果便携文件夹改过名字或位置，先启动一次正确的 DSH-Portable，再执行安装。完成后手动
+重启 DSH，让插件生效。
+
+<details>
+<summary>macOS、Linux，或已有 <code>dsh</code> 命令</summary>
+
+```sh
+dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web list dsh-codex-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+安装列表中应只有一个 `dsh-codex-subscription`，配置中应只有一个
+`codex-subscription` 条目。
+
+</details>
+
+## 登录与使用
+
+1. 打开 DSH 的 **设置 -> Codex 订阅**；
+2. 登录具有 Codex 使用资格的 ChatGPT 账户；
+3. 选择使用 DSH 默认搜索，或使用 Codex 订阅搜索；
+4. 在模型选择器中选择 Codex 模型。
+
+Codex 订阅搜索复用同一份 ChatGPT 登录，不需要 OpenAI API Key。切换搜索来源不会改变
+当前对话模型，也不会在失败时自动改走另一个付费服务。升级后默认保留 DSH 原有搜索，
+需要使用 Codex 订阅搜索时再主动切换。
+
+## 额度如何显示
+
+![输入框内的 Codex 剩余额度](docs/assets/composer-quota-en.png)
+
+- 设置页始终展示服务端返回的详细额度；快捷百分比是 Beta 功能，默认关闭；
+- 开启后，百分比会显示在输入框内、模型名称左侧，只在选择 Codex 模型时出现；
+- 普通 Codex 模型取标准 Codex 窗口中剩余最少的一项，避免给出过于乐观的数字；
+- 选择 Spark 模型时，快捷百分比使用服务端返回的 Spark 独立额度；
+- 只显示服务端实际返回的窗口，不写死“5 小时 + 每周”；
+- 当前只有每周额度时不虚构 5 小时窗口，以后服务端恢复时会自动显示；
+- Codex-Spark 等独立额度不会与普通 Codex 额度合并；
+- Credits 和月度消费上限仅在账户或工作区真实返回时显示；
+- 百分比表示使用状态，不是账单金额或计费承诺。
+
+## 更新与卸载
+
+Windows 安装器用户只需要两条短命令：
+
+| 操作 | PowerShell 命令 |
+| --- | --- |
+| 更新 | `dsh-codex update` |
+| 卸载 | `dsh-codex uninstall` |
+
+更新会校验最新 Release 管理脚本的 SHA-256。卸载会移除插件和 `dsh-codex` 命令，但保留
+DSH profile、其他插件和已保存的登录信息。旧版本如果还没有短命令，重新执行一次上面的
+Windows 首次安装命令即可。
+
+<details>
+<summary>使用现有 <code>dsh</code> 命令更新或卸载</summary>
+
+更新并检查：
+
+```sh
+dsh plugin --profile web add https://github.com/WSL043/dsh-codex-subscription/releases/download/v0.2.8/dsh-codex-subscription.tgz
+dsh plugin --profile web list dsh-codex-subscription --depth 0
+dsh --profile web --dump-config
+```
+
+卸载：
+
+```sh
+dsh plugin --profile web remove dsh-codex-subscription
+```
+
+从 v0.2.1 手动更新时，确认新包安装成功后再移除旧包名：
+
+```sh
+dsh plugin --profile web remove @wsl043/dsh-codex-subscription
+```
+
+</details>
+
+如果 DSH 正在运行，安装或更新后请手动重启。
+
+## 常见问题
+
+- 找不到 `dsh-codex`：关闭并重新打开 PowerShell；
+- 找不到 DSH-Portable：先启动一次正确的便携版，再重新安装；
+- 没有 `curl.exe`、检测到多个 DSH，或仍然失败：把 Agent 文档链接发给 Agent，
+  不要自行修改系统 PATH、执行策略或删除 profile。
+
+## 边界与支持
+
+- 本项目接入 ChatGPT 订阅，不会把订阅转换成 OpenAI API Key；
+- ChatGPT Codex 后端和 DeepSeek Harness 都可能变化，兼容性以当前发布说明为准；
+- 本项目为社区项目，与 DeepSeek、OpenAI 无隶属或背书关系。
+
+本项目的问题反馈请使用 [GitHub Issues](https://github.com/WSL043/dsh-codex-subscription/issues)；
+DSH 插件相关交流也可以前往
+[DeepSeek Harness Discussions](https://github.com/deepseek-ai/deepseek-harness/discussions)。
+敏感问题请先阅读 [SECURITY.md](SECURITY.md)。
+
+[MIT](LICENSE)

package/SECURITY.md

@@ -0,0 +1,32 @@
+# Security policy
+
+## Supported version
+
+Security fixes are applied to the latest tagged release. DeepSeek Harness is a developer preview, so compatibility fixes may require upgrading both DSH and this bundle.
+
+## Reporting a vulnerability
+
+Use a private GitHub security advisory at:
+
+https://github.com/WSL043/dsh-codex-subscription/security/advisories/new
+
+Do not open a public issue containing access tokens, refresh tokens, account identifiers, callback URLs with authorization codes, raw DSH credential data, or private prompts. Include the affected version, operating system, DSH version, a minimal reproduction, and impact. Replace all credentials with unmistakably fake placeholders.
+
+## Trust boundary
+
+- The plugin runs with the privileges of the DSH host process.
+- OAuth credentials remain in DSH's host credential service.
+- The browser settings client can call only a loopback-authorized, redacted RPC surface.
+- Login links are restricted to the HTTPS `auth.openai.com` origin before they are returned or opened.
+- Usage requests are host-side, use a bounded timeout, refuse redirects, and return parsed quota projections rather than provider payloads.
+- Cache telemetry stores no prompts, responses, session IDs, tokens, account IDs, or returned fingerprint hashes. Its per-session state is bounded and process-local.
+- The bundle defines no API-key or cross-provider fallback.
+
+Installing any DSH plugin grants its host code access to the services named in its composition. Review the tag or commit you install. Prefer a tagged version or a full commit hash over a moving branch.
+
+## Out of scope
+
+- availability or policy changes in ChatGPT, Codex, OpenAI OAuth, or DeepSeek Harness
+- compromised host machines or compromised DSH installations
+- secrets deliberately pasted into prompts, logs, issues, or screenshots
+- provider billing or quota disputes

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,12 @@
+# Third-party notices
+
+This project depends on software distributed under its own terms. The dependency lockfile records the exact resolved graph used for the release.
+
+| Project | Role | License | Source |
+| --- | --- | --- | --- |
+| DeepSeek Harness packages | Plugin host, client slots, credential and LLM interfaces | MIT | https://github.com/deepseek-ai/deepseek-harness |
+| `@earendil-works/pi-ai` 0.82.1 | OpenAI Codex OAuth, model catalog, Responses transport, and WebSocket continuation | MIT | https://github.com/earendil-works/pi |
+| React | DSH settings component runtime | MIT | https://github.com/facebook/react |
+| tsdown | Development-time bundler | MIT | https://github.com/rolldown/tsdown |
+
+No third-party project endorses this community plugin. See each installed package for its complete license text and transitive dependency notices.

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# One plugin owns the provider route, selectable subscription search,
+# host-only account RPC, and settings surface. It leaves DSH's model and
+# persistent web configuration untouched.
+- insert:
+    - id: codex-subscription
+      name: 'dsh-codex-subscription'