dsh-codex-subscription 1.4.0 → 1.4.1

package/AGENTS.md

@@ -6,7 +6,7 @@ Use this guide when a user asks an Agent to install, update, verify, or remove
 ## Safety
 
 - Confirm the target DSH installation and profile. Use `web` only when it is the user's target.
-- Use the exact `1.4.0` package below; do not install a moving branch.
+- Use the exact `1.4.1` package below; do not install a moving branch.
 - Never print OAuth credentials, account IDs, authorization callbacks, or credential-store contents.
 - Preserve the DSH profile, unrelated plugins, sessions, and saved sign-in.
 - Do not start, stop, or restart DSH without explicit permission.
@@ -14,23 +14,19 @@ Use this guide when a user asks an Agent to install, update, verify, or remove
 
 ## Locate DSH
 
-On Windows, check the command and common Portable entry points without recursively scanning disks:
+On Windows, check the standard DSH and official npm entry points without recursively scanning disks:
 
 ```powershell
 Get-Command dsh -ErrorAction SilentlyContinue
 Get-Command npx -ErrorAction SilentlyContinue
-Test-Path -LiteralPath '.\dsh.exe' -PathType Leaf
-Test-Path -LiteralPath "$env:USERPROFILE\Downloads\DSH-Portable\dsh.exe" -PathType Leaf
 Get-CimInstance Win32_Process -Filter "Name = 'node.exe'" |
   Where-Object { $_.CommandLine -match '@deepseek-ai[\\/]dsh[\\/]lib[\\/]bin\.js' } |
   Select-Object ExecutablePath, CommandLine
 ```
 
-A current DSH-Portable includes `dsh.exe`. Missing system Node.js or pnpm is normal; do not install
-either globally for this plugin. If the Portable copy does not contain `dsh.exe`, update DSH-Portable
-instead of recreating its package-manager environment in this installer. For a matching running process,
-the Portable root is the parent of `runtime`; use its `dsh.exe`. If several targets remain possible, stop
-and ask the user which one to change.
+DSH-Portable exposes the same standard `dsh plugin` contract. Missing system pnpm is normal; do not
+install it globally for this plugin. If several targets remain possible, stop and ask the user which one
+to change.
 
 ## Install or update
 
@@ -38,19 +34,13 @@ For an official DSH installation run through npm, keep the complete `npx` prefix
 run command does not create a global `dsh` command:
 
 ```sh
-npx -y @deepseek-ai/dsh@0.1.1-rc.2 plugin --profile web add dsh-codex-subscription@1.4.0
+npx -y @deepseek-ai/dsh@0.1.1-rc.2 plugin --profile web add dsh-codex-subscription@1.4.1
 ```
 
 With an existing global `dsh` command:
 
 ```sh
-dsh plugin --profile web add dsh-codex-subscription@1.4.0
-```
-
-From a DSH-Portable folder:
-
-```powershell
-.\dsh.exe plugin --profile web add dsh-codex-subscription@1.4.0
+dsh plugin --profile web add dsh-codex-subscription@1.4.1
 ```
 
 Use the same `add` command to update or repair. This is the complete package-changing operation.
@@ -66,11 +56,9 @@ dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```
 
-For DSH-Portable, replace `dsh` with `.\dsh.exe`. Static acceptance requires:
-
 For the official npm route, run the same checks with `npx -y @deepseek-ai/dsh@0.1.1-rc.2` in place of `dsh`.
 
-1. `dsh-codex-subscription` version `1.4.0` appears exactly once.
+1. `dsh-codex-subscription` version `1.4.1` appears exactly once.
 2. `codex-subscription` appears exactly once in the composed config.
 3. No unrelated plugin or profile was changed and DSH was not restarted.
 
@@ -85,12 +73,6 @@ the user explicitly asks for a live model, search, or image-generation check.
 dsh plugin --profile web remove dsh-codex-subscription
 ```
 
-For DSH-Portable:
-
-```powershell
-.\dsh.exe plugin --profile web remove dsh-codex-subscription
-```
-
 For the official npm route:
 
 ```sh

package/README.md

@@ -37,7 +37,7 @@ With an existing `dsh` command, install with:
 dsh plugin --profile web add dsh-codex-subscription
 ```
 
-From a DSH-Portable product folder, run `./dsh plugin ...` (`.\dsh.exe plugin ...` in Windows PowerShell). See below for the complete official npm, Agent, update, and uninstall routes.
+DSH-Portable exposes the same standard plugin command, so the command above also applies there. See below for the complete official npm, Agent, update, and uninstall routes.
 
 ## Why this plugin
 
@@ -117,7 +117,7 @@ npx -y @deepseek-ai/dsh@0.1.1-rc.2 --profile web --dump-config
 </details>
 
 <details>
-<summary>An existing <code>dsh</code> command or a DSH-Portable folder</summary>
+<summary>An existing <code>dsh</code> command</summary>
 
 ```sh
 dsh plugin --profile web add dsh-codex-subscription
@@ -125,8 +125,7 @@ dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```
 
-For DSH-Portable, replace `dsh` with `./dsh` (`.\dsh.exe` in PowerShell). The plugin list should contain
-one `dsh-codex-subscription`, and the config should contain one `codex-subscription` entry.
+The plugin list should contain one `dsh-codex-subscription`, and the config should contain one `codex-subscription` entry.
 
 </details>
 
@@ -198,14 +197,10 @@ dsh plugin --profile web remove dsh-codex-subscription
 
 </details>
 
-From a DSH-Portable folder, replace `dsh` above with `.\dsh.exe`.
-
 ## Troubleshooting
 
 - **`dsh` is not recognized:** the official npm route does not create a global `dsh` command; use the complete `npx -y @deepseek-ai/dsh@0.1.1-rc.2 ...` command above;
-- **`dsh.exe` is not recognized:** that file is not in the current folder; enter the DSH-Portable folder first or use the one-line Windows setup;
-- **DSH-Portable is not found:** enter its folder and rerun setup, or run `.\dsh.exe plugin --profile web add dsh-codex-subscription` directly;
-- **More than one DSH exists:** the one-line setup combines running copies with Portable folders detected in common locations; enter its number. For an Agent, use the intended folder or pass `-DshPath` explicitly;
+- **More than one DSH exists:** run the standard command from the intended DSH environment. For an Agent, specify the target or pass `-DshPath` explicitly;
 - **Setup still fails:** send the Agent guide above to an Agent. Do not delete the profile or change the system PATH to force an install.
 - **Need to report a problem:** generate a **Support diagnostics** report at the bottom of Settings, then open the [bug report form](https://github.com/WSL043/dsh-codex-subscription/issues/new?template=install-problem.yml). The form collects exact DSH/plugin versions and reproduction steps. The generated report excludes credentials and account identifiers; still do not attach sign-in URLs, authorization codes, or browser callback addresses.
 

package/README.zh-CN.md

@@ -38,7 +38,7 @@
 dsh plugin --profile web add dsh-codex-subscription
 ```
 
-DSH-Portable 用户在产品目录中运行 `./dsh plugin ...`，Windows PowerShell 使用 `.\dsh.exe plugin ...`。完整的官方 npm、Agent 安装、更新和卸载方式见下文。
+DSH-Portable 也提供相同的标准插件命令，因此同样使用上面的命令。完整的官方 npm、Agent 安装、更新和卸载方式见下文。
 
 ## 核心优势
 
@@ -117,7 +117,7 @@ npx -y @deepseek-ai/dsh@0.1.1-rc.2 --profile web --dump-config
 </details>
 
 <details>
-<summary>已经能运行 <code>dsh</code>，或位于 DSH-Portable 目录</summary>
+<summary>已经能运行 <code>dsh</code></summary>
 
 ```sh
 dsh plugin --profile web add dsh-codex-subscription
@@ -125,8 +125,7 @@ dsh plugin --profile web list dsh-codex-subscription --depth 0
 dsh --profile web --dump-config
 ```
 
-DSH-Portable 请把 `dsh` 换成 `./dsh`（PowerShell 使用 `.\dsh.exe`）。安装列表中应只有一个
-`dsh-codex-subscription`，配置中应只有一个 `codex-subscription` 条目。
+安装列表中应只有一个 `dsh-codex-subscription`，配置中应只有一个 `codex-subscription` 条目。
 
 </details>
 
@@ -196,14 +195,10 @@ dsh plugin --profile web remove dsh-codex-subscription
 
 </details>
 
-DSH-Portable 在其目录中把上述 `dsh` 换成 `.\dsh.exe`。
-
 ## 常见问题
 
 - **`dsh` 无法识别**：官方 npm 方式本来就不会创建全局 `dsh` 命令，请使用上面的完整 `npx -y @deepseek-ai/dsh@0.1.1-rc.2 ...` 命令；
-- **`dsh.exe` 无法识别**：当前目录没有该文件。请先进入 DSH-Portable 目录，或使用 Windows 单行助手；
-- **找不到 DSH-Portable**：进入它的目录后重新执行安装命令，或直接运行 `.\dsh.exe plugin --profile web add dsh-codex-subscription`；
-- **电脑上有多个 DSH**：单行助手会合并正在运行的副本与常用目录内检测到的 Portable，输入对应编号即可；交给 Agent 时让它进入目标目录，或明确传入 `-DshPath`；
+- **电脑上有多个 DSH**：请在目标 DSH 环境中运行标准命令；交给 Agent 时明确目标，或传入 `-DshPath`；
 - **安装仍然失败**：把上面的 Agent 文档链接发给 Agent，不要删除 profile 或随意修改系统 PATH。
 - **需要提交问题**：在设置页底部生成“支持诊断”，然后打开[使用问题表单](https://github.com/WSL043/dsh-codex-subscription/issues/new?template=install-problem.yml)。表单会收集准确的 DSH/插件版本和复现步骤；报告不含凭据和账号标识，仍不要附上登录链接、授权码或浏览器回调地址。
 

package/lib/index.js

@@ -503,7 +503,7 @@ function openaiCodexSubscriptionProvider({ resolveSpeedMode = () => void 0 } = {
 }
 //#endregion
 //#region src/version.js
-const PACKAGE_VERSION = "1.4.0";
+const PACKAGE_VERSION = "1.4.1";
 const USER_AGENT = `dsh-codex-subscription/${PACKAGE_VERSION}`;
 //#endregion
 //#region src/codex-search.js
@@ -643,6 +643,13 @@ const nonEmpty = (value) => typeof value === "string" && value.trim().length > 0
 function encodedLimit(decodedBytes) {
 	return Math.ceil(decodedBytes / 3) * 4;
 }
+function validBase64Body(value, end) {
+	for (let index = 0; index < end; index += 1) {
+		const code = value.charCodeAt(index);
+		if (!(code >= 65 && code <= 90 || code >= 97 && code <= 122 || code >= 48 && code <= 57 || code === 43 || code === 47)) return false;
+	}
+	return true;
+}
 async function readJsonWithin(response, maximumBytes) {
 	const contentLength = Number(response.headers.get("content-length"));
 	if (Number.isFinite(contentLength) && contentLength > maximumBytes) throw new Error("Codex image response exceeds the image size limit");
@@ -670,8 +677,8 @@ async function readJsonWithin(response, maximumBytes) {
 /** Strictly decode one PNG returned by the subscription backend. */
 function decodeCodexPng(value, maximumBytes) {
 	const encoded = nonEmpty(value);
-	if (encoded === void 0 || encoded.length % 4 !== 0 || !/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/u.test(encoded)) throw new Error("Codex returned an invalid base64 PNG");
-	const padding = encoded.endsWith("==") ? 2 : encoded.endsWith("=") ? 1 : 0;
+	const padding = encoded?.endsWith("==") ? 2 : encoded?.endsWith("=") ? 1 : 0;
+	if (encoded === void 0 || encoded.length % 4 !== 0 || !validBase64Body(encoded, encoded.length - padding)) throw new Error("Codex returned an invalid base64 PNG");
 	const decodedBytes = encoded.length / 4 * 3 - padding;
 	if (decodedBytes > maximumBytes) throw new Error("Codex image exceeds the image size limit");
 	const data = Buffer.from(encoded, "base64");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-codex-subscription",
-  "version": "1.4.0",
+  "version": "1.4.1",
   "description": "Use ChatGPT and Codex subscriptions in DeepSeek Harness with OAuth, quota, safe resets, web search, images, and Fast mode",
   "type": "module",
   "main": "./lib/index.js",