AdonisSheldon/dsh-openai-oauth

Sign in to ChatGPT from DeepSeek Harness and use available Codex models without an OpenAI API key or Codex CLI. The plugin keeps the standard DSH sessions, tools, permissions, and model selector.

Features

• Browser login with PKCE or Device Code login
• Web settings and a headless login command
• Automatic token refresh
• Codex models in the standard DSH model selector
• Credentials stored locally under the Harness home

Requirements

• DeepSeek Harness 0.1.0-rc.8
• Node.js ^22.19.0 or >=24.0.0
• pnpm on PATH
• A ChatGPT account with Codex access

Version 0.1.0 supports macOS and Linux. Windows support is not included yet.

Install

Install with an Agent (recommended)

Give this address to an Agent and ask it to follow the runbook:

https://raw.githubusercontent.com/AdonisSheldon/dsh-openai-oauth/main/AGENTS.md

When it finishes, you only need to approve any DSH restart and complete the ChatGPT login yourself.

Install with DSH

After the package is published:

dsh plugin --profile web add dsh-openai-oauth@0.1.0
dsh --profile web --dump-config

Install from the current checkout

pnpm install --frozen-lockfile
pnpm run check
pnpm pack
dsh plugin --profile web add ./dsh-openai-oauth-0.1.0.tgz
dsh --profile web --dump-config

Restart a running DSH Web process after installation.

Login and use

1. Open Settings → OpenAI OAuth.
2. Choose Browser login or Device Code.
3. Sign in with a ChatGPT account that has Codex access.
4. Open Models and select an openai-codex model.

Browser login waits for a callback on 127.0.0.1:1455. Use Device Code when that port is unavailable or the browser is on another machine.

For a headless profile:

dsh plugin --profile headless add ./dsh-openai-oauth-0.1.0.tgz
dsh plugin --profile headless exec dsh-openai-login

The command asks which login method to use. Non-interactive terminals must pass --browser or --device-code.

Update and uninstall

dsh plugin --profile web update dsh-openai-oauth
dsh plugin --profile web remove dsh-openai-oauth

Restart DSH after installing, updating, or removing the plugin. Login, logout, and token refresh do not require a restart.

Sign out in Settings → OpenAI OAuth before uninstalling if the stored credential should also be deleted. Uninstalling the package otherwise preserves it.

Notes

• This connects a ChatGPT account to the Codex model provider; it does not create an OpenAI API key.
• The Web integration supports only a local DSH Host bound to 127.0.0.1.
• Credentials are stored unencrypted at $DSH_HOME/plugins/dsh-openai-oauth/credentials.json.
• Model availability and quota depend on the signed-in account.
• OpenAI may change the Codex OAuth protocol independently of this plugin.
• This is an unofficial community project and is not affiliated with or endorsed by OpenAI or DeepSeek AI.

See SECURITY.md for security reporting and deployment notes.

MIT