dsh-AuthInOne

English | 简体中文

dsh-AuthInOne is a DeepSeek Harness plugin for Provider login, API and custom OpenAI-compatible Provider setup, model switching, optional vision fallback for text-only models, token usage analytics, and cost tracking inside DSH's native Models and Usage settings.

OpenAI Codex uses browser OAuth with state, S256 PKCE, and a loopback callback. Kimi Code opens the Provider's complete authorization link backed by an RFC 8628 device flow; the link carries the short code, so the user normally only signs in and confirms. xAI Grok, Anthropic, GitHub Copilot, Command Code, Cursor, Google Antigravity, and Kiro are explicitly marked Experimental compatibility. Installed-Host validation reached each Provider's authorization boundary and stopped before user consent; mock/fixture tests cover exchange or polling, refresh rotation, denial, timeout, cancellation, logout, route activation, and secret redaction.

Alpha v0.2.0-alpha.4 · exact compatibility target: official DSH 47f9438 · the self-contained bootstrap uses the official DSH plugin CLI and returns Web on its original port · release notes · MIT · community-maintained and not a DeepSeek or OpenAI product.

pnpm dlx github:Stormycry-cryp/dsh-AuthInOne#v0.2.0-alpha.4 install --profile web

The command is owned by this package. It validates the running standard DSH Host, calls the official dsh plugin add path, then replaces that Host on the same URL. It does not require a patched DSH core, a manual profile edit, a second Web instance, or a temporary port. See Install, upgrade, and remove for source-checkout and non-default-port forms.

If AuthInOne is useful to you, a Star on GitHub is a welcome way to support the project.

Open DSH, then go to Settings → Models or Settings → Usage. The browser receives aggregated usage, redacted status, an authorization URL, and where required a user code. OAuth verifier, authorization code, device code, access token, and refresh token stay on the Host; the plugin never imports ~/.codex/auth.json, OpenCodex state, cookies, browser storage, OTPs, or another product's credentials.

Agent instruction: Run the documented pnpm dlx … install --profile web command as one operation. Do not split it into a manual dsh plugin add plus an improvised restart. The AuthInOne bootstrap must verify the listener, install through the official DSH plugin CLI, return the original URL, and report ready before UI acceptance. Never start a second Web instance, choose a temporary port, patch DSH, edit profile YAML, or read credentials. If the bootstrap rejects an unknown launcher or DSH owner fingerprint, stop and show that error instead of guessing.

Use this plugin when

• you want OpenAI Codex or Kimi Code login inside DSH, or knowingly opt into a labeled compatibility flow;
• you manage API-key or custom OpenAI-compatible Providers in DSH's native Models page;
• you switch the future-session default model without replacing DSH's per-session selector;
• you want a separately configured vision model to describe images only when the selected main model explicitly declares text-only input;
• you need reconstructable Provider/model/tool token usage and auditable calculated cost.

…