Codex DSH MCP

Codex 规划与独立审核，DeepSeek Harness 实施。本地 stdio MCP，无需 Docker，不抢浏览器标签页。非 OpenAI / DeepSeek 官方项目。

状态 / Status

0.2.0 开发版，尚未完成真实双端验收。

已实现并有本地测试：会话读取/派单适配、重复请求保护、原 Codex 审核者绑定、每轮完成票据、持久待审核队列、Codex app-server 通知适配、有限重试、审核通过/退回、轮次上限、归档与恢复。完成报告不等于通过审核。

本机真实检查仍有两项连接阻塞：DSH Web 返回 AUTH_REQUIRED；Codex 共享 app-server proxy 不可连接。因此不能宣称本机已能自动唤醒桌面任务。 不读取浏览器凭据、不修改会话数据库、不启动另一台同名服务绕过。

Development implementation; authenticated live DSH dispatch and notification to the intended Codex runtime remain unverified. No stable Release published.

使用 / Usage

新增独立网页任务通道：web_task 保存任务、标签页绑定、提交前防重记录和待审核结果，支持最多三轮同聊天修改与已审核结果导出。OOChat 只读案例已实测文字往返、修改、网页出图及 PNG 保存；实际操作由 Codex 浏览器工具完成，不是无人值守浏览器服务。视频和自动桌面唤醒尚未验收。

See setup and recovery, configuration example, security, and the optional companion skill.

Requires Node 22+, PowerShell 7.2+, the supported Windows DSH Web launch layout, and a reachable Codex app-server proxy for automatic notifications. Paths, port and allowed projects are configurable. Keep DSH_MCP_CONFIG, authentication and state outside this repository.

Codex -> workflow_dispatch -> DSH implementation
                             -> signed completion report
       <- app-server tool output <- persistent worker
Codex -> independent review -> accept / bounded rework

With autoRunner enabled, dispatch requests a detached completion scanner. Or run node runner.mjs manually. Restart the runner after machine restart; no global startup service is installed. Credentials never go in prompts. Tickets are private files. Same-user filesystem access is trusted, not a hostile-process security boundary.

Testing

npm test
node doctor.mjs

Set TEMP/TMP to a writable temporary directory. Tests cover local protocol, receipts, duplicate writes, stale rounds, rework, notification uncertainty and role binding. They are not live DSH/Codex acceptance.

References

Workflow design separates transport, orchestration and optional specialist profiles. Scope prompts are not hooks or a sandbox. Referenced projects were not installed and their code was not imported.

PowerShell bridge provenance: adapted from locally installed dsh-delegator scripts; originals unchanged. Redistribution license selection remains pending; public visibility is not a license grant.