cv-superding/dsh-deepseek-web-login
Adds a deepseek-web provider that uses chat.deepseek.com web models in DSH, with browser login capture, PoW request signing, SSE streaming, and prompting-based tool calls.
Install
via npm
Resolves a published tarball rather than cloning the repository, and installs without any extra setup. Swap `web` for your profile name if you run another one.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/web/pnpm-workspace.yaml.
The desktop app keeps its own profile, desktop, and only the dsh command it ships may change it — the npm-installed dsh refuses that profile. Install the command from the app menu (Manage dsh Command…), open Desktop once, quit it fully, run the line below, then reopen Desktop.
via npm
Resolves a published tarball rather than cloning the repository.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/desktop/pnpm-workspace.yaml.
Our install check ran in a web profile on npm's dsh, not in the desktop app.
What happened when we ran it
Installed cleanly when we ran it
Every command here is run in a throwaway container against a clean profile, and the result is whatever the harness recorded — not a guess from the source. Last run 8d agoon DeepSeek Harness 0.2.2-rc.1.
Show it in your README
For maintainers: the badge serves this listing's latest sandbox verdict, so a re-run updates it on its own — and it links readers to the full result here.
Due diligence
Security
No build script was blocked in our run.
Source: our sandbox install on DeepSeek Harness 0.2.2-rc.1, 8d ago.
package.json declares no preinstall, install or postinstall script.
Source: package.json on GitHub, read at our last sync. prepare is not recorded; it runs only on a GitHub install, and shows up under build scripts when pnpm blocks it.
shell commands (bash, exec, spawn …)
Source: a keyword match on the README — a hint about what the plugin touches, not an analysis of its code.
Not an audit. These are the record of one install and two text scans; nobody has read this plugin's code on your behalf. Plugins run with your agent's permissions.
What it is — This plugin provides the deepseek-web provider for DeepSeek Harness, enabling access to chat.deepseek.com models via browser-captured login sessions, with PoW solving, session reuse, SSE streaming, and tool calls.
Who it is for — It suits users who need chat.deepseek.com web models to drive DSH agent tasks. Users who rely solely on official API key providers do not need this plugin.
Watch out — A starting Edge or Chrome browser is required. Sandbox test succeeded in a new profile with registration. No obvious issues found.
The verdict — I would install it, because the page can close after login and the plugin can still run in the background.
Generated by grok-4.6, and a starting point rather than a verdict. Where it says a plugin installs or does not, that is from a real run in a clean profile — everything else is read off the repository. Trust the source over this.
dsh-deepseek-web-login is a DeepSeek Harness plugin that adds a deepseek-web provider backed by the models and login state of chat.deepseek.com, rather than an official API key. DeepSeek Harness loads the provider through ctx.llm; during one-time login, an Electron window uses webRequest.onBeforeSendHeaders to read the browser's Authorization: Bearer value, cookies, x-hif-* anti-bot headers and x-client-* headers. The plugin stores the captured local login state, then constructs requests to private web endpoints such as /api/v0/chat/completion and /api/v0/file/upload_file. PoW challenges are solved with DeepSeek's SHA3 WASM in a real Edge or Chrome page context, and responses are consumed as SSE streams.
The plugin reuses a chat_session for each DeepSeek Harness session, including across restarts through resume-state.json. It converts tool definitions into a prompting-based JSON protocol because the web endpoint does not provide native function calling, and supports streamed thinking, text responses and image uploads. Settings include login capture, account switching, browser transport, request throttling and connectivity testing; the interface also provides a built-in Chromium view of chat.deepseek.com.
This is intended for developers who need to run an agent through an existing web login and accept an unofficial client for private web APIs. It is the wrong choice where an official API or subscription OAuth path is required, or where Edge/Chrome cannot be started: since 0.7.0, the plugin reports an error instead of falling back to Node-side PoW. The listed terminal-surface risk reflects access to the local browser process and its stored login state, as well as outbound requests to chat.deepseek.com.
DeepSeek Harness exposes a settings panel for the provider. It can show login status and the current account, capture a login from Microsoft Edge or another logged-in browser window, accept a manually pasted token, test connectivity, manage multiple accounts, and clear the current browser profile when signing out. The panel also controls request throttling, session cleanup, transport testing, context mode and the built-in browser. The README does not specify a separate configuration file or stable defaults for these controls.
At login time, Electron registers webRequest.onBeforeSendHeaders and reads request headers from the login window. The callback removes Electron branding from the user agent and UA-CH headers, then the window can close. Subsequent calls are made by the plugin to DeepSeek's private web endpoints rather than through a reverse proxy or DOM automation.
DeepSeek Harness sends requests through a real Edge or Chrome network context by default. The plugin obtains a challenge from create_pow_challenge, solves it with DeepSeek's sha3_wasm_bg.*.wasm, and sends the result in x-ds-pow-response. It parses SSE response/fragments and direct thinking/content streams, and uploads images through /api/v0/file/upload_file.
The provider is selected in the model picker as DeepSeek 网页 · 快速模式. The settings panel exposes host HTTP API routes under /deepseek-web-login/api/*. The environment variable DSH_NO_BROWSER_TRANSPORT=1 disables browser transport, but the README states that 0.7.0 and later require Edge or Chrome for PoW and will not silently use Node-side solving.
Tool calls are prompting-based rather than native function calls. The plugin depends on private web endpoints, captured login credentials and browser behaviour that may change. The README warns that these adjustments reduce, but do not remove, the possibility of rate limiting or account penalties, and describes the approach as unofficial and potentially contrary to the service terms.
Written from the project's own documentation and kept in sync with it. Where the two disagree, the source is authoritative — read the README on GitHub
Same category
Ebony-Vinyl
Adds free model lanes to DeepSeek Harness — DeepSeek V4.1 Flash, Kimi K3 and others — with no login, sign-up or API key, plus a local OpenAI-compatible gateway, fallback routing and a usage dashboard.
Installed cleanly when we ran it
zouyuxuan122
在 dsh 里装上这个插件即可，无需登录、注册或填 API Key，就能使用包括 Muse Spark 1.3、MiMo V2.6 在内的前沿模型——完全免费，不限量。 All you do is install this plugin in dsh: no login, no sign-up, no API key — the frontier models are just there, Muse Spark 1.3 and MiMo V2.6 among them. Completely free, with no usage cap.
Installed cleanly when we ran it
HunYiSage
DeepSeek Harness 破甲：让所有模型都能破甲，不同模型可换不同提示词；默认提示词面向国模「小码酱」。Jailbreak for every model — swap prompts per model. 求 Star 收藏 ⭐ 如要二开，请查看署名要求部分
Installed cleanly when we ran it
dingminhua
Connects locally signed-in WorkBuddy models, CN and international alike, to DSH, reading each model's credit multiplier from the upstream catalog on every refresh, with per-model image input toggles, account switching backed by an auto-failing-over pool, manual daily check-in, and read-only credit overviews shown as compact pills on the card and in the composer.
Installed cleanly when we ran it
keli-wen
Hire Google's Antigravity CLI (agy) as a fast Gemini staffer for Claude Code, OpenAI Codex, and DeepSeek Harness.
Installed cleanly when we ran it
Use ChatGPT (Codex), Claude, and Grok subscriptions as DeepSeek Harness LLM providers, with Settings login, model catalogs, usage, plus image_generate, video_generate, and x_search tools.
Installed cleanly when we ran it
