dsh-AuthInOne: Provider Login and Cost Tracking Plugin for DeepSeek Harness
stormycry-cryp/dsh-authinone
All-in-one DSH plugin for provider login, model switching, vision fallback, and token/cost analytics.
Integrate authentication login, model switching, and token cost analytics for multiple LLM providers into DeepSeek Harness, making the DSH plugin's Models and Usage settings pages more powerful.
dsh plugin --profile web add github:stormycry-cryp/dsh-authinone- Category
- Models & Reasoning
- Platform
- DSH-Plugin
- Author
- stormycry-cryp
- Distribution
- Plugin
dsh-authinone Key Features
dsh-authinone Repository
dsh-authinone Repo Summary
dsh-AuthInOne is a DeepSeek Harness (DSH) plugin that integrates Provider login, API and custom OpenAI-compatible Provider setup, model switching, optional vision fallback for text-only models, token usage analytics, and cost tracking within DSH's native settings. It solves the pain point of managing authentication and cost attribution for multiple LLM providers inside DSH. Core capabilities include browser OAuth for OpenAI Codex (with state, S256 PKCE, and loopback callback), RFC 8628 device flow for Kimi Code, and experimental compatibility for xAI Grok, Anthropic, GitHub Copilot, Command Code, Cursor, Google Antigravity, and Kiro. The plugin is maintained by Stormycry-cryp, licensed under MIT, currently at Alpha v0.2.0-alpha.4, targeting official DSH commit 47f9438.
What core features does the dsh-AuthInOne DSH plugin support?
The plugin provides Provider status, model switching, vision fallback, token usage, and cost analytics within DSH's Models and Usage settings pages. It supports API keys and custom OpenAI-compatible Providers, and allows switching the default model for future sessions without affecting DSH's per-session selector. Vision fallback only uses a separately configured vision model to describe images when the selected main model explicitly declares text-only input. Cost tracking can reconstruct Provider/model/tool token usage and calculate auditable costs.
How do I install dsh-AuthInOne?
The install command is owned by the plugin package itself. It validates the running standard DSH Host, calls the official dsh plugin add path, then replaces that Host on the same URL. It does not require a patched DSH core, a manual profile edit, a second Web instance, or a temporary port. The install command is:
dsh plugin --profile web add github:stormycry-cryp/dsh-authinone
Alternatively, use the pnpm dlx method documented in the README:
pnpm dlx github:Stormycry-cryp/dsh-AuthInOne#v0.2.0-alpha.4 install --profile web
After installation, open DSH and go to Settings → Models or Settings → Usage to use it.
How secure is the authentication flow of dsh-AuthInOne?
The plugin keeps OAuth verifier, authorization code, device code, access token, and refresh token on the Host. It never imports ~/.codex/auth.json, OpenCodex state, cookies, browser storage, OTPs, or another product's credentials. The browser only receives aggregated usage, redacted status, an authorization URL, and a user code where required. Tests cover exchange/polling, refresh rotation, denial, timeout, cancellation, logout, route activation, and secret redaction.
Which DeepSeek Harness versions and platforms does dsh-AuthInOne support?
The plugin is a self-contained installer that uses the official DSH plugin CLI and returns Web on its original port. It targets official DSH commit 47f9438 for compatibility testing and does not require a patched core. It is currently in Alpha, and some Providers are marked as experimental compatibility, so caution is advised during installation.
What is the license and maintenance status of dsh-AuthInOne?
The plugin is licensed under MIT, community-maintained, and is not a DeepSeek or OpenAI product. The repository was created on 2026-08-14 and last updated on 2026-08-15. It currently has 9 stars, 0 forks, and no open issues.