dsh-oauth-login

中文 | English

Install

DSH Studio desktop app (recommended)

Open Settings → Plugins → Add plugin and enter this in “Package name or address”:

dsh-oauth-login@0.2.9

The desktop plugin manager owns the Desktop profile and bundled package manager. This release includes built lib/; normal use needs no clone, build, or DSHX installation. Follow the app if it asks you to reload or reopen after installation.

Web CLI

dsh plugin --profile web add dsh-oauth-login@0.2.9

This official CLI command writes only the web profile; it cannot modify the Desktop App profile. Follow the installer's activation result and reopen the original launcher only when a restart is required.

OAuth login for ChatGPT, Claude, Grok, Copilot, OpenRouter, and Kimi on DeepSeek Harness, plus Zhipu GLM Coding Plan via its official plan API key. Credentials go only to $DSH_HOME/.dsh-oauth-auth.json.

Official codex login, Claude Code, grok CLI, and Pi Agent ~/.pi/agent/auth.json are not read or written.

The UI is Settings → 订阅登录.

Install

Node 22.19+ and official DeepSeek Harness 0.2.0-rc.2 (@deepseek-ai/dsh@0.2.0-rc.2, tag dsh-v0.2.0-rc.2, SHA 639ed015397290b3745d163aafe02ffee4aa3f84). The @deepseek-ai/dsh peer is >=0.2.0-rc.1 <0.2.1: it accepts 0.2.0-rc.2 and stable 0.2.0, and rejects 0.2.0 alphas and 0.1.7-rc.2.

That github: command works because this package declares dsh.bundle.patch and commits built lib/. You do not need Creator Mode or a second toolchain.

If dsh is not on PATH:

npx @deepseek-ai/dsh plugin --profile web add dsh-oauth-login@0.2.9

Use file: only when you are editing a local clone (development/local testing; do not drop the prefix):

git clone https://github.com/aa2246740/dsh-oauth-login.git
dsh plugin --profile web add file:./dsh-oauth-login

Keep the file: prefix. A bare ./dsh-oauth-login becomes a symlink and peer dependencies will not resolve.

Open Settings → 订阅登录. Pick a pi-… route in chat.

dsh plugin --profile web exec dsh-oauth-login login openai-codex
dsh plugin --profile web exec dsh-oauth-login login xai
dsh plugin --profile web exec dsh-oauth-login login zai-coding-cn
dsh plugin --profile web exec dsh-oauth-login status

status does not print tokens. Legacy .pi-login-auth.json is renamed on the next write.

Providers

Radius is not implemented.

OpenRouter pulls the official catalog after OAuth and refreshes about every 15 minutes while signed in. The model menu can filter free models. The catalog cache is $DSH_HOME/.dsh-oauth-openrouter-models.json and holds no credentials. See OpenRouter model sync.

Zhipu 连接套餐 opens the official Coding Plan page. Paste the key back into DSH. The API is https://open.bigmodel.cn/api/coding/paas/v4. BigModel cookies are not read. From 0.2.1 the list includes both glm-5.3 and glm-5.3-flash.

Do not paste this auth file, API keys, callback URLs, codes, or tokens into public issues. Private reports: SECURITY.md.

Hosted search and images

On these routes the plugin removes DSH web_search / web_fetch and attaches the vendor tools:

Copilot, OpenRouter, Kimi, and Zhipu do not get hosted tools. To keep DSH search:

- id: llm-oauth-login
  name: dsh-oauth-login
  config:
    nativeTools: false

nativeImage: false keeps search and drops image generation.

Codex uses its own tool declaration. codexSearch: cached sends external_web_access: false; live explicitly enables external access; off leaves the DSH client web tools available. Cached results may be stale. Account or backend rejections remain visible, and the plugin never silently changes model or search mode. Codex does not inherit generic Responses image-generation tools. Grok and Anthropic retain their own protocols.

Chat retries use official dsh-llm-retry. HTTP 429 is not the same as quota exhaustion. Settings → 订阅登录 → 网络代理 affects only this plugin.

License

Apache-2.0. See LICENSE.