dsh-login-chatgpt

dsh-login-chatgpt

DeepSeek Harness plugin that adds an openai-codex-gptoauth provider route and an independent ChatGPT Login settings page. The route mirrors the installed openai-codex catalog and uses Pi's official ChatGPT OAuth device-code flow; no OpenAI API key is requested.

Install

npm install
dsh plugin --profile web add /absolute/path/to/dsh-gpt-oauth

The bundle installs the authorization service and uses the llm and credentials services supplied by the standard web profile.

Start Harness:

dsh web

Use

• Open Settings → ChatGPT Login.
• Select Login with ChatGPT.
• Open the displayed OpenAI authorization URL and enter the one-time code.
• Wait until the settings page reports Connected.
• In the conversation composer click Select model.
• Click the Model / Select model row to open the full catalog.
• Scroll to openai-codex-gptoauth and choose one of its GPT models.

The route appears in the conversation model selector, not on the Models settings page.

The login grant is stored by the DSH credentials service under llm-pi-ai/openai-codex-gptoauth. Model requests reuse that grant and its refresh flow automatically. OAuth tokens are never returned to the browser; only login status, the verification URL, and the one-time device code are shown.

Local login endpoint

The client bundle talks to a loopback-only helper on 127.0.0.1:3091. The helper accepts browser requests only from loopback origins. A port conflict fails plugin startup rather than silently disabling login.

Development checks

node --check index.js
node --check login-manager.js
node --check client.js
node --test login-manager.test.js

Release

Set the version in package.json and package-lock.json, commit it, then push a matching tag. Both 0.2.0 and v0.2.0 tag forms are accepted:

npm version 0.2.1 --no-git-tag-version
git add package.json package-lock.json
git commit -m "release: v0.2.1"
git tag v0.2.1
git push origin main v0.2.1

The tag workflow runs checks, publishes the exact package.json version to npm with provenance, and creates a GitHub Release. Following GitHub's Node.js package publishing workflow, the repository secret NPM_TOKEN is passed to npm as NODE_AUTH_TOKEN; publishing happens only in GitHub Actions.