dsh-super-subscriptions

A unified subscription-provider bundle for DeepSeek Harness (DSH), combining account login, model routing, quota visibility, search, and media capabilities in one Cordis plugin.

繁體中文

What it does

dsh-super-subscriptions lets a DSH Web profile use subscription-backed accounts through one integration surface. It consolidates the provider and UI responsibilities that would otherwise be installed as separate, overlapping plugins.

The bundle provides:

• OAuth and local account management for ChatGPT/Codex, Grok, and Google AntiGravity.
• Optional Claude and GitHub Copilot integrations retained from the upstream subscription plugin.
• Provider-aware model discovery, default-account selection, account pools, token refresh, and failover.
• A full-width sidebar usage panel grouped by provider, with five-hour, weekly, and other reported windows.
• A Web Settings page for login, account status, quota refresh, routing, proxy, and diagnostics.
• Unified image_generate, video_generate, x_search, and view_image tools.
• Native Codex Connect image generation registration and durable local image previews.
• Legacy openai-codex route migration to the unified codex route.

This is an independent community project for DSH. It is not affiliated with or endorsed by DeepSeek AI, OpenAI, xAI, Google, Anthropic, or GitHub.

Provider matrix

Provider	Default	Route	Authentication	Included capabilities
ChatGPT / Codex	On	codex	OAuth PKCE	Responses streaming, account pool, quota refresh, GPT image generation
Grok	On	grok	OAuth PKCE	Responses streaming, account pool, X search, Grok image and video generation
Google AntiGravity	On	antigravity / agy	Google OAuth or existing agy credentials	Model discovery, thinking stream, account pool, quota and CLI bridge
Claude	Off	claude	Claude Code credentials or OAuth	Opt-in provider retained from the subscription integration
GitHub Copilot	Off	copilot	GitHub device flow	Opt-in provider retained from the subscription integration

Provider availability, model names, quota windows, and media endpoints are controlled by the corresponding service. A successful login does not guarantee that every model or capability is available on every subscription tier.

Requirements and compatibility

• DeepSeek Harness 0.1.1-rc.2 or a compatible current 0.1.x Web profile.
• Node.js 20 or newer.
• pnpm 9 or newer for development and local installation.
• A supported subscription account for each provider you enable.
• For AntiGravity, either the agy executable or the built-in Google OAuth flow. The built-in flow requires your own AGY_CLIENT_ID and AGY_CLIENT_SECRET environment variables.

Version 1.0.1 was typechecked, tested, and built against DSH 0.1.1-rc.2, Node.js 24, and pnpm 11 on Windows.

Installation

Install the public GitHub repository

The repository is currently distributed through GitHub rather than npm:

dsh plugin --profile web add github:JoeeLiu/dsh-super-subscriptions

Restart the Web profile after installation:

dsh web

When an npm release is published, the package form will be documented here as well. Until then, do not use dsh plugin --profile web add dsh-super-subscriptions as an npm install command.

For the fixed v1.0.1 prebuilt package, use the GitHub Release tarball:

dsh plugin --profile web add https://github.com/JoeeLiu/dsh-super-subscriptions/releases/download/v1.0.1/dsh-super-subscriptions-1.0.1.tgz

Local development installation

git clone https://github.com/JoeeLiu/dsh-super-subscriptions.git
cd dsh-super-subscriptions
pnpm install
pnpm run check

To mount a working tree into a local Web profile, use a file: dependency in that profile's package.json. Keep only this bundle enabled when it replaces the overlapping upstream provider bundles.

Uninstall and rollback

Remove the package from the target profile and restart DSH:

dsh plugin --profile web remove dsh-super-subscriptions
dsh web

If you are replacing an older overlapping setup, restore the profile's package and Cordis patch backups before restarting. Do not delete local credential stores unless you explicitly want to remove the accounts as well.

First-run setup

1. Start DSH Web and open http://127.0.0.1:3080 in a normal browser tab.
2. Open Settings → Plugins → Super Subscriptions.
3. Enable the providers you want to use.
4. Select Sign in for ChatGPT/Codex, Grok, or AntiGravity and complete the provider's OAuth flow in the browser. For AntiGravity, configure the OAuth environment variables first, or use the existing agy CLI login.
5. Return to DSH and refresh the provider status and model list.

Use a normal browser profile for the launcher when the provider login depends on existing browser cookies. An isolated embedded browser or a temporary profile will not automatically share those cookies.

After logging in, select a model from the provider route. The route is selected by the model id; no API key is required for the subscription flows. API-key-based integrations are outside the scope of this plugin.

Configuration

The bundled patch in cordis.patch.yml enables the supported defaults:

- insert:
    - id: llm-super-subscriptions
      name: dsh-super-subscriptions
      config:
        providers:
          chatgpt:
            enabled: true
          grok:
            enabled: true
          antigravity:
            enabled: true
            permissionMode: skip
          claude:
            enabled: false
          copilot:
            enabled: false
        codexRoute: codex
        migrateOpenAiCodex: true
        enableSearch: true
        enableImageTool: true
        enableImageGeneration: true

The configuration schema is:

interface SuperSubscriptionsConfig {
  providers?: {
    chatgpt?: { enabled?: boolean; streamIdleTimeoutMs?: number }
    grok?: { enabled?: boolean; streamIdleTimeoutMs?: number }
    antigravity?: {
      enabled?: boolean
      agyBin?: string
      permissionMode?: 'skip' | 'plan' | 'accept-edits'
      workspaceRoot?: string
      defaultModel?: string
      defaultEffort?: string
    }
    claude?: { enabled?: boolean; streamIdleTimeoutMs?: number }
    copilot?: { enabled?: boolean; streamIdleTimeoutMs?: number }
  }
  codexRoute?: string
  migrateOpenAiCodex?: boolean
  enableSearch?: boolean
  enableImageTool?: boolean
  enableImageGeneration?: boolean
}

AntiGravity's built-in Google OAuth flow reads AGY_CLIENT_ID and AGY_CLIENT_SECRET from the DSH process environment. These are intentionally not bundled in the public repository. If you do not want to register an OAuth client, sign in with agy and let the plugin use the local agy credentials instead.

Do not enable dsh-plugin-subscriptions, dsh-agy-link, or dsh-codex-connect alongside this bundle unless you deliberately configure non-overlapping routes. Those plugins register related providers, tools, or UI slots and can cause duplicate registration or conflicting account stores.

Tools and media

Tool	Provider	Purpose
image_generate	ChatGPT/Codex or Grok	Unified image generation; pass provider: "gpt" or provider: "grok" when needed
codex_connect_image_generate	ChatGPT/Codex	Native Codex Connect GPT Image 2 route with DSH attachment preview
view_image	Local attachment store	Resolve and display generated or attached images
video_generate	Grok	Generate and save short Grok Imagine video output
x_search	Grok	Search X posts and related public content through the hosted xAI tool

The subscription image paths use gpt-image-2 and grok-imagine-image-2.0 where the provider account and endpoint support them. Generated image bytes are stored in the local DSH attachment area; they are not committed to this repository.

Account storage, permissions, and privacy

• Provider tokens are stored locally under the DSH home directory, normally ~/.dsh/plugins/super-subscriptions/.
• Imported legacy subscription credentials are read non-destructively; the old store is not deleted.
• AntiGravity may also use its own local credential format under the user's home directory so the agy binary can access the account.
• The optional AntiGravity OAuth client credentials are supplied by environment variables and are never stored in this repository.
• The plugin makes outbound HTTPS requests to the provider OAuth, model, quota, search, and media endpoints required by enabled capabilities.
• The Web settings and loopback callback servers bind to local DSH endpoints. They are protected by callback state/PKCE checks and trusted-origin validation where applicable.
• Proxy settings are optional and stored in the local DSH profile.
• No token, API key, browser cookie, private account data, or generated media belongs in Git. The repository .gitignore excludes local credentials, environment files, build output, and the upstream reference tree.

Review the source and provider terms before installing. This plugin executes with the permissions of the DSH process and can access the enabled subscription accounts.

Troubleshooting

Login completes but DSH still shows logged out

Keep the DSH page open at the same loopback origin, complete the callback in a normal browser tab, and wait for the Settings page to poll the callback result. If the callback tab says login succeeded but the UI is stale, refresh the provider status rather than restarting the OAuth flow immediately.

Grok or ChatGPT returns a streaming/parser error

Make sure only this unified provider bundle owns the grok and codex routes. Version 1.0.1 emits the DSH text-delta, reasoning-delta, tool-call-delta, reasoning, and tool-call chunk variants and refreshes expired access tokens before retrying.

Grok returns a request validation error

The Grok adapter omits tool-only request fields when no tools are present. Update to 1.0.1 and verify that an older duplicate Grok adapter is not still active in the profile.

AntiGravity says payload.provider must be one of ...

That message usually means an uncompiled or duplicate AntiGravity tool definition reached the host. Keep only this bundle active, restart DSH, and refresh the provider status and model list.

Images are generated but the UI shows only an attachment id

The Web client must load the attachment through the DSH attachment RPC. Update both the host and client bundle to the same 1.0.1 build, then refresh the Web page.

Quota is unavailable

Quota APIs are provider- and account-tier-dependent. Refresh the provider from Settings, check that the account token is current, and inspect the provider status before treating an empty window as zero usage.

Development

pnpm install
pnpm run typecheck
pnpm test
pnpm run build

pnpm run check runs typechecking, the complete Vitest suite, and the production bundle build. Provider changes should include focused tests for authentication, request shape, stream translation, quota behavior, and error recovery.

The .upstream/ directory is a local reference cache used while developing the integration. It is intentionally ignored and is not part of the published repository or package.

Architecture and project layout

src/
├── index.ts                    Cordis host entry and registrations
├── config.ts                   Schemastery configuration and defaults
├── auth/                       OAuth, callbacks, device flow, and token stores
├── core/                       migration, RPC, token lifecycle, security helpers
├── providers/
│   ├── codex/                  ChatGPT/Codex adapter and auth
│   ├── grok/                   Grok adapter, auth, search, and media support
│   ├── antigravity/            Google AntiGravity and agy bridge
│   ├── claude/                 Optional Claude integration
│   └── copilot/                Optional GitHub Copilot integration
├── features/                   search, image transport, proxy, and diagnostics
├── tools/                      model-callable search, image, and video tools
└── client/                     Settings, sidebar usage, tool views, and locales

See docs/architecture-overview.md and the ADRs under docs/architecture/ for design decisions.

DSH Market metadata and submission

The package manifest includes the DSH market metadata under dsh.market, including bilingual display names, descriptions, category, icon, feature tags, and default provider behavior. The repository also declares the dsh-plugin keyword and ships a root dsh.bundle.patch entry, which are the signals used by community DSH catalogs.

The public listing copy and submission checklist are maintained in docs/DSH-MARKET.md. A public GitHub repository and the dsh-plugin topic are prerequisites; a catalog listing is only claimed after the market registry accepts or discovers the repository.

Versioning and release

This project follows Semantic Versioning and Keep a Changelog. Release 1.0.1 is the first integrated release with the ChatGPT/Codex, Grok, AntiGravity, quota UI, and image capability repairs documented in CHANGELOG.md.

License and attribution

Licensed under the Apache License 2.0. This project incorporates source code and architectural patterns from the upstream projects listed in NOTICE and THIRD_PARTY_NOTICES. Each upstream license remains applicable to its original material.

Security reports should follow SECURITY.md, not a public issue.