dsh-openai-oauth

dsh-openai-oauth

Use your ChatGPT subscription in DeepSeek Harness Desktop through official Sign in with ChatGPT (SIWC).

English | 简体中文

Independent community plugin; not affiliated with OpenAI or DeepSeek. This is not the legacy fixed-client Codex OAuth/backend-api integration.

Features

• Continue with ChatGPT, dynamic Agent registration, persistent host identity, and verified ID Tokens.
• Account-specific models and reasoning levels in DSH's existing model selector.
• Public Responses streaming, verified image/document input, local function tools, tool results, and compatible history replay.
• Multiple saved account/workspace registrations, explicit account selection, rotating refresh, and scoped sign-out.
• Keeps DeepSeek Account, API-key providers, other sources, and existing sessions independent. No silent billing fallback.
• Stable account/session-scoped Responses affinity for cache reuse, without sending raw session identifiers.
• No Codex CLI, API key, patched ASAR, or replacement pi-ai installation.

Compatibility

Validated Desktop releases: 0.2.1-rc.2, 0.2.1-rc.1 and 0.2.0-rc.2. Development/install helpers require Node.js 24+.

Forward-eligible range: 0.2.0-rc.2 || >=0.2.1-rc.1 <0.3.0-0. Later 0.2.x releases are candidates, not validated releases: installation and direct-update startup require isolated native checks before real-account activation. Next-minor prereleases/final, mixed components and failed contracts are rejected. See forward compatibility.

See compatibility and verification. Do not bypass compatibility contracts or upgrade bundled framework dependencies to force compatibility.

Install from source

No npm publication is required or currently promised.

git clone https://github.com/pyh-pan/dsh-openai-oauth.git
cd dsh-openai-oauth
npm ci
npm test
npm run check
npm run test:package
npm run doctor
npm run dsh -- plugin --profile desktop add -w .

The dsh helper discovers the installed desktop executable and invokes its own bundled CLI; it does not install another Host. Use DSH_APP for a nonstandard installation. See installation for Windows PowerShell and macOS examples.

Only restart DSH after running tasks have finished. A window close may hide the application to the tray; use its normal Quit action.

Use a reviewed archive

For a clean/archive installation only. If the package is already linked to a checkout, keep it linked and use native add -w from the reviewed checkout instead; do not remove then install an archive over the Junction. See the safe linked-update procedure.

npm run pack
npm run dsh -- plugin --profile desktop add ./artifacts/pyh-pan-dsh-openai-oauth-0.3.6.tgz

Do not keep the old private bundle and this bundle enabled simultaneously: they deliberately preserve the same provider/credential identity. See migration.

Sign in and use

1. Open Settings → Models → ChatGPT subscription.
2. Click Continue with ChatGPT, then open the official authorization link in your browser.
3. Name/approve the Agent on OpenAI's page. Finish authentication yourself; never copy tokens from another client.
4. Read the first-use notice and select Use this account. Signing in alone does not switch your conversation's model.
5. Select ChatGPT Subscription in the existing model picker. Its Reasoning level submenu shows only choices advertised by that model.
6. Use Manage usage to review the Agent, quota, limits, and access at ChatGPT Settings → Usage.

Accounts without the granted direct-inference scope remain signed in but disabled for inference. Explicitly enable subscription inference to request consent again. Reauthorization reuses the registration; adding a different account is a separate action.

Limits and security

• Models, reasoning choices and quota are account/server dependent, not an unlimited or universal model entitlement.
• Supports text, normalized images and supported documents through inline Responses input when accepted by the selected model. Local per-request limits include 20 images, 10 files, 20 MiB per file and 40 MiB total file bytes. See attachment types, native contracts and verification boundaries.
• Audio/video, the Files upload API and hosted MCP/tool-search are not implemented. Unknown binary formats and over-limit history fail explicitly, rather than silently dropping attachments.
• Explicit maxTokens/temperature remain rejected under this provider's conservative SIWC preview contract, not silently ignored; clear them before ordinary chat. On Desktop 0.2.1-rc.2, 0.3.6 integrates SIWC compaction and per-session coverage safety into the same provider bundle for standard/cordis/ptc/minimal, in memory without writing user presets. No separate local compatibility bundle is needed. Other runtime versions and custom compositions do not automatically acquire this validation.
• Subscription failures never switch to an API-key/balance provider.
• Tokens stay in the native Host credentials service, not browser storage or ordinary plugin settings. Native local storage is not a promise of OS-keychain encryption.
• Sign-out attempts remote revocation and clears this account's local tokens, retaining its registration. Unconfirmed remote revocation is reported; review access in ChatGPT settings.
• Read SECURITY.md, protocol design, and third-party notices.

Development

npm ci
npm test
npm run check
npm run test:package
npm run test:native
npm run test:race
npm run test:compaction # Desktop 0.2.1-rc.2 hook
npm run test:presets    # real main entry + all supported preset realms

Pure tests use generated identities and mock upstreams. Native tests use an installed DSH and temporary credentials; they do not read your grant or spend inference quota. Real-account desktop validation is separately documented and always user-controlled.

Source is published directly as ESM; no generated lib/ or vendor snapshot is necessary. See CONTRIBUTING.md.

Update / remove

If both the source and authorization settings disappear after a DSH upgrade, check version compatibility troubleshooting before signing in again. An incompatible bundle is skipped before its code runs.

For a linked checkout, review/pull changes, run checks, then restart DSH safely. For an archive, install the reviewed replacement using the native plugin command. To remove:

npm run dsh -- plugin --profile desktop remove @pyh-pan/dsh-openai-oauth

Removal preserves stored credentials. If you want to disconnect this Agent, sign out or manage access in ChatGPT settings first; do not delete the entire DSH profile.

MIT