dsh-oauth-login 0.2.9

dsh-oauth-login 0.2.9

Codex subscription routes now declare hosted search with an explicit mode: codexSearch: cached by default, live for external web access, or off to retain the client's web tools. Cached search sends external_web_access: false; live search sends true. Codex requests no longer inherit hosted image-generation declarations from the generic Responses path.

The payload is checked again after a caller's onPayload hook so that the selected search mode remains effective. Existing transcript tool changes, system messages, usage observation and hosted trace filtering are preserved. Unsupported account capabilities still surface as errors; no model or search mode is silently substituted.

macOS acceptance used a bounded GPT-6 Sol max cached-search request through the actual Desktop Host. This does not establish upstream search counts, billing, or support for every account and mode. Native Electron UI interaction remains unverified.

Validation

All 213 tests passed on macOS, including local TLS fixtures and Codex SDK payload serialization that stops before network transport. Type checking, build, DSHX checks and archive validation passed. Server and client entry files exactly match the previously accepted v9 installation. No additional real-model calls or production Host installation were performed during registry artifact verification.

Published artifact verification

• npm: dsh-oauth-login@0.2.9
• Source commit: 9c2f305ca567686d9d56d48049d85d10af5b3ac1
• Successful tag publish workflow
• Registry tarball SHA-256: 38807446b88acea26bd4ff4d3b933a8987be8d8e401add4b0db7cf99586aba56
• The attached tarball was downloaded from the npm registry. Registry signatures, publish and SLSA attestations were cryptographically verified; the signed subject digest, repository, tag, source commit and workflow run all match.
• The attached verification report and provenance preserve these checks. SHA256SUMS.txt covers the tarball and both JSON records.

v0.2.7 · DSH 0.2.0-rc.2

dsh-oauth-login 0.2.7

DeepSeek Harness compatibility

Built and tested against DeepSeek Harness 0.2.0-rc.2 (639ed015397290b3745d163aafe02ffee4aa3f84). Use the prebuilt release package or this repository’s compiled artifacts with the official plugin installer.

RC2 updates pi-ai to 0.87.1. Provider requests now preserve transcript system messages and tool additions/removals, while filtering DSH web tools before adding provider-native tools. This release requires DSH RC2 and pi-ai 0.87.x.

Validation was performed on macOS arm64. This release does not claim new Windows or Linux runtime acceptance.

v0.2.6

Official installation

Desktop: Settings → Plugins → Add plugin → github:aa2246740/dsh-oauth-login#v0.2.6.

Web CLI: dsh plugin --profile web add github:aa2246740/dsh-oauth-login#v0.2.6. It changes only the Web profile; reopen an already-running Web Host once, then reload its page. Built artifacts are included, so normal users do not need a source checkout, build, or DSHX.

Stable release for DSH Studio 0.1.7-rc.2.

Includes the current subscription login and model-selection client integration.

Validation: 206 automated tests, TypeScript checks, and production build.

dsh-oauth-login v0.2.5

Accept DeepSeek Harness 0.1.7-rc.1 (@deepseek-ai/dsh@0.1.7-rc.1, tag dsh-v0.1.7-rc.1). This does not target the 0.1.7 alpha line.

Highlights:

• @deepseek-ai/dsh-client-connection is >=0.1.7-rc.1 <0.1.8, which accepts 0.1.7-rc.1 and refuses 0.1.7 alphas.
• Dev dependencies used to compile and test are pinned to the 0.1.7-rc.1 packages (Cordis 4.0.4, schemastery 3.18.4, pi-ai 0.85.1).
• Request-only user inputs stay intact when hosted assistant images are stripped. Composer model selection settles from RemoteResult.

Not published to npm.

dsh-oauth-login v0.2.4

Accept DeepSeek Harness 0.1.5-rc.3 (@deepseek-ai/dsh@0.1.5-rc.3). This does not target the 0.1.7 alpha line.

Highlights:

• @deepseek-ai/dsh-client-connection is >=0.1.5-rc.3 <0.1.6, which accepts 0.1.5-rc.3 and refuses 0.1.6 and 0.1.7 prereleases.
• @earendil-works/pi-ai is ^0.85.1, matching the catalog this Host ships.
• Dev dependencies used to compile and test are pinned to the 0.1.5-rc.3 packages.

Validation recorded on the pull request:

• dsh --version reported 0.1.5-rc.3.
• dsh plugin --profile web add installed dsh-oauth-login.
• The Web Host logged [my-plugins/dsh-oauth-login] loaded.
• One real MiniMax CN turn completed with the reply Tokyo.
• pnpm test: 205 passed. Server and client typecheck passed against the rc.3 packages.

dsh-pi-login v0.1.0

First public release of dsh-pi-login.

Highlights:

• Independent DSH-owned OAuth grants; never reads or writes Pi Agent auth.
• ChatGPT Codex, Claude Pro/Max, xAI Grok, GitHub Copilot, OpenRouter, and Kimi For Coding.
• Automatic proxy discovery: inherited environment, DSH_OAUTH_PROXY, macOS system proxy, verified loopback proxy, then direct.
• DSH settings UI under OAuth Login and composer model selection.
• Legacy DSH auth filename migration.

Validation:

• 19/19 tests passed.
• TypeScript typecheck and production build passed.
• Real DSH pi-openai-codex request succeeded without proxy environment variables.