dsh-codex-subscription 1.13.1 → 1.14.1

package/DIRECTORY.md

@@ -18,7 +18,7 @@ Use a ChatGPT subscription in DeepSeek Harness through independent OAuth sign-in
 - Codex CLI required: no
 - OpenAI API key required: no
 - Platforms: official DSH plus DSH-Portable product forms for Windows, macOS, and Linux
-- Main capabilities: Codex models, model-aware context windows, quota and expiring resets, web search, Beta image generation/editing with explicit references and native preview/download, optional composer quota, Fast mode, existing-proxy adaptation, secret-free actionable support diagnostics, and direct feedback
+- Main capabilities: Codex models, model-aware context windows, quota and expiring resets, web search, Beta image generation/editing with explicit references, native preview/download, and original host paths for new images, optional composer quota, Fast mode, existing-proxy adaptation, secret-free actionable support diagnostics, and direct feedback
 - Safety boundary: subscription failures remain visible and never silently fall back to another paid provider
 
 ## Install

package/README.en.md

@@ -22,6 +22,12 @@ No OpenAI API key or Codex CLI. Models, search, quota, and image generation stay
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/readme-hero-en.webp" width="900" alt="Your Codex subscription inside DSH: models, web search, quota and safe reset, image generation, and Fast mode">
 </p>
 
+## What's included in 1.14.1
+
+- The composer shows both 5-hour and weekly quota windows when returned by the service, so neither window is hidden.
+- Image edits validate attachment references, normalize bare SHA-256 digests, and resolve the actual attachment metadata from the current session. Paths produce an actionable error asking the model to obtain the correct reference with `read_image` and retry.
+- Location edits attach the clean source, a numbered annotation image, and coordinate instructions so the model can match each requested change to its location.
+
 ## Three-step start
 
 1. **Install the plugin.** Run the standard DSH bundle command:
@@ -33,7 +39,7 @@ No OpenAI API key or Codex CLI. Models, search, quota, and image generation stay
 2. **Sign in.** Restart DSH yourself, open **Settings -> Codex**, and choose browser sign-in. No Codex CLI and no pasted token are required.
 3. **Use Codex.** Select a Codex model. Quota, subscription search, image generation, and Fast mode remain inside DSH.
 
-DSH-Portable exposes the same standard plugin command, so the command above also applies there. See below for the complete official npm, Agent, update, and uninstall routes.
+DSH-Portable exposes the same standard plugin command, so the command above also applies there. See below for the complete official npm, update, and uninstall routes.
 
 ## Why this plugin
 
@@ -45,7 +51,7 @@ DSH-Portable exposes the same standard plugin command, so the command above also
 | **Composer quota** | Choose a compact percentage, progress bar, or no inline quota display |
 | **Safe quota reset** | See each reset credit separately and deliberately try one with a cooldown and acknowledgement |
 | **Subscription search** | Explicitly route search globally through DSH default search or the signed-in Codex subscription |
-| **Codex image generation and editing (Beta)** | Generate without references, or explicitly edit one selected image; preview, zoom, annotate regions, download the original, and continue in the same composer |
+| **Codex image generation and editing (Beta)** | Generate without references, or explicitly edit one selected image; preview, zoom, annotate regions, download the original, and get the original host path for new or edited images |
 | **Fast mode** | Switch between Standard and Fast directly in the composer |
 | **Model-aware context** | Keep catalog defaults, use each model's supported extended window, or enter a full numeric token limit for each model |
 | **Headless runs** | Use the same signed-in Codex provider for one-shot DSH tasks that print their answer and exit |
@@ -58,7 +64,7 @@ These capabilities reuse the same local ChatGPT sign-in. Subscription routing fa
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/context-settings-en.png" width="820" alt="Current Codex subscription settings in DeepSeek Harness with search, model-aware context, composer quota, and support diagnostics">
 </p>
 
-Captured from the installed official DeepSeek Harness `0.1.2-rc.1` product with the current plugin build.
+The screenshot illustrates the settings layout; available options can vary by DSH and plugin version.
 
 ## Prepare DSH
 
@@ -86,18 +92,6 @@ dsh plugin --profile headless add dsh-codex-subscription
 dsh --profile headless "Reply with only the word: ok"
 ```
 
-### Let an Agent install it
-
-Send this link directly to your Agent:
-
-**[Agent install, update, and uninstall guide](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md)**
-
-```text
-https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md
-```
-
-The guide includes verification steps and tells the Agent to preserve the DSH profile, sign-in, and other plugins.
-
 <details>
 <summary>Official npm route (Node.js installed)</summary>
 
@@ -154,8 +148,8 @@ The plugin can follow an existing HTTPS proxy from the process environment or op
 </p>
 
 Choose Off, Percent, Progress bar, or Beta Runway in Settings. The compact display appears only for a selected Codex model. Runway is opt-in and estimates pace only from official remaining-percentage observations. It needs at least three samples; sustained high use usually produces a range in 5–10 minutes, while low use takes longer or reports a stable state. Non-sensitive observations from the last 24 hours are kept locally so calibration can continue after restart; a quota reset, account switch, or disabling the feature starts a new calibration period.
-Standard Codex uses the lowest remaining window returned by the service; Spark uses its independent quota. The plugin does not hard-code a
-“5-hour + weekly” layout or invent Credits and spending caps that the service did not return.
+The composer shows each returned quota window with its duration. When Plus returns both five-hour and weekly limits, both are visible. Spark keeps its independent quota. Accounts with only a weekly window still show only that window; the plugin does not invent a
+five-hour limit, Credits, or spending caps that the service did not return.
 
 ### Safe quota reset
 
@@ -167,19 +161,19 @@ clicks are single-flight, and an uncertain network result is never retried autom
 
 ### Image generation and editing (Beta)
 
-When `dsh-image-viewer` is installed, generated images delegate to its unified preview first. The subscription viewer is only a fallback when that service is absent or declines the request, so the two plugins never compete for the same entry point. Image Viewer owns zoom, pan, fit, preview downloads, and region notes; this plugin owns Codex image generation/editing, exact-original authorization, and the continue-editing handoff.
-Both paths expose dimensions and numbered region notes. The standard **Download** action retrieves the permission- and integrity-checked exact original by default; only legacy sessions without an exact original fall back to the conversation preview.
-Press **Enter** to save and collapse a region note; use **Shift+Enter** for a new line. Notes remain available when the
-same image is reopened during the current DSH page session.
-**Continue editing in composer** attaches exactly the image you opened and writes the region notes into the draft without
-sending it. A new image request does not silently include earlier images. GPT Image 2 can take longer than a normal text
-turn, and detailed text, exact composition, or repeated-character consistency may still need another pass.
+A basic viewer derived from `dsh-image-viewer` is now built in, with no extra installation required. Plugin-generated image cards use the built-in viewer to keep annotation and continue-editing actions available. You can zoom, pan, fit, add region notes, and download the image. The standard **Download** action retrieves the permission- and integrity-checked exact original by default; only legacy sessions without an exact original fall back to the conversation preview.
+
+New and edited images return the exact original path on the current DSH host in the tool result, so a model or Agent can read or copy the file. The path is on the host running DSH, not a browser download link; original downloads remain session-authorized. Uninstalling the plugin does not delete generated originals.
+
+**Continue editing in composer** does not send automatically. With annotations, it attaches the clean source and a numbered location-reference image, and includes matching numbers, coordinates, notes, and instructions to exclude the markers from the result. Without annotations, it attaches only the opened image. Every marker needs a note; reference preparation failures stop the handoff. Press **Enter** to save and collapse a region note; use **Shift+Enter** for a new line. Notes remain available when the same image is reopened during the current DSH page session.
+
+A new image request does not silently include earlier images. GPT Image 2 can take longer than a normal text turn, and detailed text, exact composition, or repeated-character consistency may still need another pass.
 
 <p align="center">
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/image-preview-annotations-en.png" width="800" alt="Generated image, region note, and continue editing inside the DSH Image Viewer">
 </p>
 
-The exact bytes returned by GPT Image are stored separately under the current DSH home because DSH may normalize the conversation preview for display and later model input. Original files are integrity-checked and available only to the creating session or a fork that inherited that image result; forks created earlier and unrelated sessions are denied. Raw image bytes are never placed in the session log. Uninstalling the plugin does not delete already generated originals.
+The screenshot above illustrates image viewing and on-image notes. Version 1.14.0 includes the same basic experience; available buttons can vary with the image and installed viewer version.
 
 ### Composer speed
 
@@ -189,12 +183,19 @@ see the [OpenAI Codex Speed documentation](https://learn.chatgpt.com/docs/agent-
 
 ## Update and uninstall
 
-Use the same DSH plugin lifecycle to update, verify, or uninstall:
+### Update and verify
 
 ```sh
 dsh plugin --profile web update dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
+```
+
+### Uninstall
+
+Run this only when you want to remove the plugin:
+
+```sh
 dsh plugin --profile web remove dsh-codex-subscription
 ```
 
@@ -203,10 +204,17 @@ These operations preserve the DSH profile, other plugins, and saved sign-in.
 <details>
 <summary>Official npm fallback</summary>
 
+### Update and verify
+
 ```sh
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web update dsh-codex-subscription
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web list dsh-codex-subscription --depth 0
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 --profile web --dump-config
+```
+
+### Uninstall
+
+```sh
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web remove dsh-codex-subscription
 ```
 
@@ -216,7 +224,7 @@ npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web remove dsh-codex-subscri
 
 - **`dsh` is not recognized:** the official npm route does not create a global `dsh` command; use the complete `npx -y @deepseek-ai/dsh@0.1.2-rc.1 ...` command above;
 - **More than one DSH exists:** run the standard command from the intended DSH environment so that product selects the corresponding profile;
-- **Setup still fails:** send the Agent guide above to an Agent. Do not delete the profile or change the system PATH to force an install.
+- **Setup still fails:** confirm the command is running in the intended DSH environment. Do not delete the profile or change the system PATH to force an install.
 - **Need to report a problem:** generate a **Support diagnostics** report at the bottom of Settings, then open the [bug report form](https://github.com/WSL043/dsh-codex-subscription/issues/new?template=install-problem.yml). The report includes the OS/runtime, bounded sign-in phase, and safe request-failure categories, but excludes credentials, account identifiers, proxy addresses, raw responses, and full logs. Paste it into the required diagnostics field; never attach sign-in URLs, authorization codes, or browser callback addresses.
 
 The ChatGPT Codex backend and DSH can change independently. This community project is not affiliated with or endorsed by DeepSeek or OpenAI.

package/README.md

@@ -23,6 +23,12 @@
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/readme-hero.webp" width="900" alt="Codex 订阅直接用在 DSH：订阅模型、联网搜索、额度与安全重置、图片生成和高速模式">
 </p>
 
+## 1.14.1 重点变化
+
+- 输入框同时显示服务端返回的 5 小时与每周额度，避免其中一个额度窗口被隐藏。
+- 图片编辑会检查附件引用，自动补全裸 SHA-256，并从当前会话取回真实附件元数据；误填路径时提示模型通过 `read_image` 获取正确引用并重试。
+- 部位修改会同时附上干净原图、编号标注图和坐标说明，让模型能够对应每条修改要求。
+
 ## 三步开始
 
 1. **安装插件**：直接运行 DSH 标准 bundle 命令：
@@ -34,7 +40,7 @@
 2. **登录订阅**：手动重启 DSH，打开 **设置 -> Codex 订阅**，点击浏览器登录。无需 Codex CLI，也不要粘贴 token。
 3. **开始使用**：在模型选择器中选择 Codex；额度、订阅搜索、图片生成和高速模式都在 DSH 内使用。
 
-DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的命令。完整的官方 npm、Agent 安装、更新和卸载方式见下文。
+DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的命令。完整的官方 npm、更新和卸载方式见下文。
 
 ## 核心优势
 
@@ -46,7 +52,7 @@ DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的
 | **输入框额度** | 可选择紧凑百分比、进度条或完全关闭输入框额度显示 |
 | **安全额度重置** | 每张重置卡单独显示，并通过冷静期和知情确认主动尝试重置 |
 | **订阅搜索** | 可将全部模型的搜索明确路由到 DSH 默认搜索或已登录的 Codex 订阅 |
-| **Codex 图片生成与编辑（Beta）** | 可无参考图全新生成，也可明确选择会话图片继续编辑；支持预览、缩放、区域备注、下载原图并衔接回当前输入框 |
+| **Codex 图片生成与编辑（Beta）** | 可无参考图全新生成，也可明确选择会话图片继续编辑；支持预览、缩放、区域备注、下载原图，并为新生成或编辑的图片提供 DSH 主机上的原图路径 |
 | **高速模式** | 直接在输入框切换标准或高速，无需离开当前会话 |
 | **模型感知上下文** | 可保留目录默认值、按模型启用扩展窗口，或为每个模型填写完整数字 Token 上限 |
 | **Headless 任务** | 使用同一份已登录的 Codex Provider 运行一次性 DSH 任务，输出答案后自动退出 |
@@ -59,7 +65,7 @@ DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/context-settings.png" width="820" alt="当前 DeepSeek Harness Codex 订阅设置，包含搜索来源、模型感知上下文、输入框额度和支持诊断">
 </p>
 
-图片来自已安装的官方 DeepSeek Harness `0.1.2-rc.1` 与当前插件构建。
+截图用于说明设置页布局；可用选项会随 DSH 与插件版本变化。
 
 ## 准备 DSH
 
@@ -87,18 +93,6 @@ dsh plugin --profile headless add dsh-codex-subscription
 dsh --profile headless "只回复：ok"
 ```
 
-### 交给 Agent
-
-把这个链接直接发给 Agent：
-
-**[Agent 安装、更新与卸载文档](https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md)**
-
-```text
-https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/AGENTS.md
-```
-
-Agent 文档包含安装、更新、卸载和验收步骤，并要求保留 DSH profile、登录信息和其他插件。
-
 <details>
 <summary>官方 npm 方式（已安装 Node.js）</summary>
 
@@ -154,8 +148,8 @@ dsh --profile web --dump-config
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/composer-quota.png" width="800" alt="中文 DSH 输入框内的 Codex 剩余额度进度条">
 </p>
 
-可在设置中选择关闭、百分比、进度条或 Beta 续航预测；紧凑额度只在选择 Codex 模型时显示。续航预测仅在用户主动选择后，根据官方剩余百分比估算当前消耗速度。它至少需要 3 个样本；持续高消耗时通常 5–10 分钟即可给出范围，消耗较低时会延长观察或显示稳定。最近 24 小时的无敏感信息观测会保存在本机，重启后可以继续校准；额度重置、账号切换或关闭功能会开启新的校准周期。普通 Codex 使用服务端返回窗口中剩余最少的一项，
-Spark 使用独立额度。插件不会写死“5 小时 + 每周”，也不会虚构服务端没有返回的 Credits 或消费上限。
+可在设置中选择关闭、百分比、进度条或 Beta 续航预测；紧凑额度只在选择 Codex 模型时显示。续航预测仅在用户主动选择后，根据官方剩余百分比估算当前消耗速度。它至少需要 3 个样本；持续高消耗时通常 5–10 分钟即可给出范围，消耗较低时会延长观察或显示稳定。最近 24 小时的无敏感信息观测会保存在本机，重启后可以继续校准；额度重置、账号切换或关闭功能会开启新的校准周期。输入框分别显示服务端返回的各额度窗口，并标明窗口时长：Plus 返回 5 小时和每周额度时，两项都会显示。
+Spark 使用独立额度。只返回每周额度的账号仍只显示每周，不会虚构 5 小时窗口、Credits 或消费上限。
 
 ### 安全使用额度重置
 
@@ -165,17 +159,19 @@ ChatGPT 返回可用重置卡时，设置页会把每张卡分别显示为紧凑
 
 ### 图片生成与编辑（Beta）
 
-如果安装了 `dsh-image-viewer`，生成图片会优先交给它统一预览；订阅插件自己的查看器仅在该服务不存在或拒绝打开时兜底，不会与图片查看器争抢入口。图片查看器负责缩放、拖动、适合窗口、会话预览下载和区域备注，订阅插件只负责 Codex 图片生成/编辑、精确原图权限和“继续编辑”交接。
-两条路径都支持查看尺寸和编号区域备注；标准“下载”按钮默认获取经过权限与完整性校验的精确原图，只有旧会话没有精确原图时才下载会话预览图。
-按 Enter 保存并收起当前备注，Shift+Enter 可以换行；在当前 DSH 页面会话内重新打开同一张图片时，备注仍会保留。
-点击“在输入框中继续编辑”时，只会附上当前打开的这一张图，并把部位标注写入草稿，不会自动发送。
-新的图片请求不会静默带入历史图片。GPT Image 2 的耗时可能明显长于文本回复，复杂文字、精确构图和连续角色一致性也可能需要再次调整。
+订阅插件已内置基于 `dsh-image-viewer` 的基础查看器，无需额外安装。插件生成图片的工具卡片使用内置查看器，确保标注和继续编辑功能可用。你可以缩放、拖动、适合窗口、添加区域备注并下载图片。标准“下载”默认获取经过权限与完整性校验的精确原图；旧会话没有精确原图时才下载会话预览图。
+
+新生成或编辑的图片会在工具结果中返回当前 DSH 主机上的原图路径，模型或 Agent 可以读取或复制该文件。该路径位于运行 DSH 的主机，并非浏览器下载链接；原图下载仍按会话授权。卸载插件不会删除已生成的原图。
+
+点击“在输入框中继续编辑”不会自动发送。有标注时会附上干净源图和带编号标记的定位参考图，草稿包含对应编号、坐标、备注，以及不得把标记绘入成品的说明；没有标注时只附上当前图片。每个标记必须填写备注，参考图准备失败时会中止回填。按 Enter 保存并收起备注，Shift+Enter 换行；在当前 DSH 页面重新打开同一张图片时，备注仍会保留。
+
+新的图片请求不会静默带入历史图片。GPT Image 2 可能比文本回复耗时更长，复杂文字、精确构图和连续角色一致性也可能需要再次调整。
 
 <p align="center">
   <img src="https://raw.githubusercontent.com/WSL043/dsh-codex-subscription/main/docs/assets/image-preview-annotations.png" width="800" alt="DSH 图片查看器中的生成图、区域备注和继续编辑">
 </p>
 
-GPT Image 返回的精确字节会单独保存在当前 DSH 主目录中，因为 DSH 可能为会话展示和后续模型输入规范化预览图。原图下载前会校验完整性，只允许创建会话或确实继承了该图片结果的 Fork 会话访问；提前创建的 Fork 和无关会话会被拒绝。原图字节不会写入会话日志，卸载插件也不会删除已经生成的原图。
+上图展示图片查看与图上备注的基本交互。1.14.0 已内置相同的基础体验；具体按钮会随图片和所安装的查看器版本变化。
 
 ### 输入框速度
 
@@ -185,12 +181,19 @@ GPT Image 返回的精确字节会单独保存在当前 DSH 主目录中，因
 
 ## 更新与卸载
 
-更新、校验和卸载继续使用同一套 DSH 插件生命周期：
+### 更新并检查
 
 ```sh
 dsh plugin --profile web update dsh-codex-subscription
 dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
+```
+
+### 卸载
+
+确认需要移除插件后再运行：
+
+```sh
 dsh plugin --profile web remove dsh-codex-subscription
 ```
 
@@ -199,10 +202,17 @@ dsh plugin --profile web remove dsh-codex-subscription
 <details>
 <summary>官方 npm 备用方式</summary>
 
+### 更新并检查
+
 ```sh
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web update dsh-codex-subscription
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web list dsh-codex-subscription --depth 0
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 --profile web --dump-config
+```
+
+### 卸载
+
+```sh
 npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web remove dsh-codex-subscription
 ```
 
@@ -212,7 +222,7 @@ npx -y @deepseek-ai/dsh@0.1.2-rc.1 plugin --profile web remove dsh-codex-subscri
 
 - **`dsh` 无法识别**：官方 npm 方式本来就不会创建全局 `dsh` 命令，请使用上面的完整 `npx -y @deepseek-ai/dsh@0.1.2-rc.1 ...` 命令；
 - **电脑上有多个 DSH**：请从目标 DSH 环境运行标准命令，由该产品自身选择对应 profile；
-- **安装仍然失败**：把上面的 Agent 文档链接发给 Agent，不要删除 profile 或随意修改系统 PATH。
+- **安装仍然失败**：确认命令是在目标 DSH 环境中运行，不要删除 profile 或随意修改系统 PATH。
 - **需要提交问题**：在设置页底部生成“支持诊断”，然后打开[使用问题表单](https://github.com/WSL043/dsh-codex-subscription/issues/new?template=install-problem.yml)。报告包含系统/运行时、有限的登录阶段和安全的请求失败分类，但不含凭据、账号标识、代理地址、原始响应或完整日志；请粘贴到必填诊断栏，且不要附上登录链接、授权码或浏览器回调地址。
 
 ## 边界与支持

package/THIRD_PARTY_NOTICES.md

@@ -7,6 +7,7 @@ This project depends on software distributed under its own terms. The dependency
 | DeepSeek Harness packages | Plugin host, client slots, credential and LLM interfaces | MIT | https://github.com/deepseek-ai/deepseek-harness |
 | `@earendil-works/pi-ai` 0.82.1 | OpenAI Codex OAuth, model catalog, Responses transport, and WebSocket continuation | MIT | https://github.com/earendil-works/pi |
 | React | DSH settings component runtime | MIT | https://github.com/facebook/react |
+| dsh-image-viewer 0.1.0-beta.9 (3d121d3) | Adapted built-in image viewer, interaction state, and styles | MIT, Copyright (c) 2026 WSL043; full license included in LICENSE | https://github.com/WSL043/dsh-image-viewer |
 | Heroicons | Composer speed icon | MIT | https://github.com/tailwindlabs/heroicons |
 | `https-proxy-agent` 7.0.6 | HTTPS proxy transport for Codex OAuth token requests | MIT | https://github.com/TooTallNate/proxy-agents |
 | QuotaPin for Codex | Design basis for the opt-in local quota runway forecast | MIT | https://github.com/WSL043/QuotaPin-for-Codex |