Codex OAuth model connector

Key features

• Subscription model accessregister pi-ai’s built-in openai-codex provider (openai-codex-responses online protocol) as the codex-oauth provider of dsh LLM seam
• The warehouse contains no secrets.
• The model directory is maintained with the installed pi-ai (such as gpt-5.3-codex-spark, gpt-5.4, gpt-5.5, gpt-5.6-, etc.).
• OAuth device code logingo to auth.openai.com (the same OAuth client as Codex CLI), headless and friendly, no need for local callback server.
• Credential securityrefresh/access token only exists in the dsh credential library $DSH_HOME/.credentials.yaml (0600), and does not enter the configuration, session log, or this warehouse