# 0.2.0-alpha.3 — official Desktop sign-in compatibility

This Alpha delivers [PR #317](https://github.com/franksong2702/dsh-codex-connect/pull/317). Official DSH Desktop opens the validated HTTPS authorization challenge externally without first requesting the rejected `about:blank` popup. Electron's null external-window handle does not block the sign-in flow; manual recovery and cancellation remain available. Desktop account-request rejection shows restart/version diagnostics rather than a Web-only origin-trust command. Ordinary Web popup behavior is preserved.

## Installation

For an existing Web profile, substitute its name for `web`:

```sh
dsh plugin --profile web add dsh-codex-connect@0.2.0-alpha.3
```

For official macOS Desktop, initialize its profile once, then fully quit Desktop before using its bundled CLI with the intended `DSH_HOME`:

```sh
"/Applications/DeepSeek Harness.app/Contents/Resources/runtime/cli/bin/dsh" plugin --profile desktop add dsh-codex-connect@0.2.0-alpha.3
```

Reopen Desktop after installation and verify plugin activation. Preserve default models, profile patches and account state. A Web profile installation does not enable the plugin in Desktop. See [the installation guide](../../INSTALL.md#official-desktop) for the scoped pnpm 11 optional-build-script workaround.

The five exact declared hosts remain `0.1.7-rc.1`, `0.1.7-rc.2`, `0.2.0-rc.1`, `0.2.0-rc.2` and `0.2.1-alpha.1`. This release does not add DSH `0.2.1-alpha.2` support or require a host upgrade. npm `alpha` is `0.2.0-alpha.3`; `latest` remains `0.2.0-alpha.1`. Existing npm versions are immutable; the packed README retains the prior pre-publication recommendation.

## Publication and verification

[Exact-main CI](https://github.com/franksong2702/dsh-codex-connect/actions/runs/38035495747) and the [protected publication](https://github.com/franksong2702/dsh-codex-connect/actions/runs/38036148904) succeeded for `174811c27ae151536f671069a0087be71bb72891`. Independent read-only verification returned `already-complete`: npm package identity, SHA-512 integrity, SHA-1 and exact archive bytes matched the original workflow artifact; the Git tag and [prerelease](https://github.com/franksong2702/dsh-codex-connect/releases/tag/v0.2.0-alpha.3) identify that commit. No recovery mutation or duplicate npm upload was needed.

The isolated local complete check passed 136 files / 1,610 tests, Chromium passed 12 files / 58 tests, and all five strict installed-host checks passed against the same archive. The public npm archive also matches those tested bytes, SHA-256 `05b873f251802ff794facd9ccab0b3f22289f13625bcc4379fbd87aece40f903`. All 11 advertised models prepared, defaults remained unchanged and disposal passed. Provider/image checks were synthetic and made zero real provider requests. See [the release evidence](../../.github/ALPHA3_DESKTOP_READINESS.md).

On 2026-10-10 the maintainer reported successful login and normal use on DSH Desktop `0.2.0-rc.2` using the identified local adaptation archive before the version bump. The released client differs from that tested client only by the package-version string. This report is not new live-account acceptance of the public npm archive, image generation/editing, full Windows/mobile acceptance or long-running network reliability.

No HTTP origin-trust widening, dependency refresh, model/OAuth library upgrade, account-storage change, experimental activation or default-model change is included. The previous session's upstream HTTP 503 failures are not claimed fixed. Publication does not upgrade the working Desktop installation or restart services on 3080/3081.

## 中文

本版发布官方 DSH Desktop 的登录适配：不再预先打开被拒绝的空白窗口，改为在取得并校验 HTTPS 授权链接后，通过系统浏览器打开。Electron 返回空窗口句柄时仍可继续登录，手动恢复与取消保留；Desktop 的账户请求错误显示重启、版本与诊断提示，不再推荐 Web 专用的 origin-trust 命令。普通 Web 登录行为不变。

请使用上方 `0.2.0-alpha.3` 精确版本命令。Desktop 使用独立的 `desktop` profile 和自带 CLI；安装前完整退出，安装后重新打开并确认插件已启用，保留默认模型、已有账号与 profile 配置。npm `alpha` 已更新，`latest` 保持 `0.2.0-alpha.1`。五个声明宿主版本不变，不扩大到 DSH `0.2.1-alpha.2`，也不要求升级宿主。已发布 npm 包不会覆盖；包内 README 保留发布前的推荐版本。

上述精确主分支 CI 与受保护发布运行均成功。独立只读核对确认 npm 完整性、公开安装包与原始发布产物及五宿主测试包逐字节一致，Git tag 和 prerelease 指向精确发布提交；未重复上传或执行恢复写入。本地通过 1,610 项单元测试、58 项 Chromium 测试和五宿主严格安装与运行检查。

维护者已报告本地适配包在 Desktop `0.2.0-rc.2` 可以登录并正常使用；发布客户端仅版本字符串与该客户端不同。这些证据不等于公开 npm 包的重新登录、真实图片、完整 Windows/移动端或长期网络稳定性验收。本版不声称修复上游 HTTP 503，不更改默认模型或账号存储，不启用冻结实验，也不升级当前 Desktop 或重启 3080/3081。