@yfzhou/dsh-llm-codex-subscription

Registers a codex LLM provider that reuses the Codex CLI's local login, so DSH can talk to ChatGPT subscription models (gpt-5.6-sol and friends) with no API key. It reads the same ~/.codex/auth.json that codex login writes, fresh on every request, so logging in or switching accounts through the CLI takes effect immediately; expired tokens are refreshed and written back atomically, exactly as the CLI does. Requests go to the OpenAI Responses API over SSE, with reasoning, text, and tool calls mapped to the matching DSH blocks.

Requires Node.js 20+ and a codex login. Quota is metered by OpenAI per account and shared with the Codex CLI.

Install

dsh plugin --profile web add @yfzhou/dsh-llm-codex-subscription

The package supplies its own DSH bundle row; do not add a separate cordis.patch.yml entry. Restart DSH and Codex (ChatGPT subscription) appears in the model picker.

Configuration

Machine-specific settings live in $DSH_HOME/settings.yaml, never in the package. The ChatGPT backend usually needs a proxy, and Node's fetch ignores system proxy variables:

llm-codex-subscription:
  proxy: http://127.0.0.1:7890
  account: personal
  accounts:
    personal: ~/.codex-personal/auth.json
    work: ~/.codex-work/auth.json

agent-default-model:      # optional: make Codex the default
  provider: codex
  model: gpt-5.6-sol

| Key | Effect | | --- | --- | | proxy | Takes precedence over HTTPS_PROXY, then HTTP_PROXY; NO_PROXY hosts connect directly. | | accounts / account | Your own aliases for separate auth files, and which one is live. Switching applies to the next request; refreshes only write to the selected file. Not OpenAI's account_id — that still comes from the file's tokens.account_id. | | authFile | Single auth file, when accounts is unset. Defaults to ~/.codex/auth.json. | | writeBack | false keeps refreshed tokens in memory instead of updating auth.json. | | staticModels / modelsCacheFile | Override the catalog, which otherwise comes from the API, then ~/.codex/models_cache.json, then a built-in list. | | clientVersion | Version string sent upstream. |

The section hot-reloads. Image attachments are sent as Responses API input_image data URLs, with the local attachment-local pixel ceiling raised to 200,000,000 — upstream limits still apply.

Troubleshooting

| Symptom | Fix | | --- | --- | | MISSING_CREDENTIAL | Run codex login. | | TRANSPORT: Connect Timeout | Backend unreachable directly; configure proxy. | | HTTP 401 after a failed refresh | Subscription expired or flagged; codex login again. | | HTTP 429 | Quota or rate limit; retry later. | | Empty model list | Live discovery failed with no cache; the static list is used. | | INVALID_REQUEST: Unsupported parameter | The adapter strips parameters the subscription backend rejects; upgrade the plugin. |

License

MIT