SuperGrok for DeepSeek Harness (DSH)
English | 简体中文
English
Developer preview · unofficial experimental integration. For developers
who can build and troubleshoot Windows + Node.js 24 setups. This is not a stable
release or an officially supported third-party OAuth client.
DSH compatibility: 0.1.5-rc.2 with this repository's required core patches,
matching local functional reference 0.1.5-rc.2.grok.3 with four patched core packages at 0.1.5-rc.2.grok.1. Other DSH versions have not been
validated. Use this repository's build and installation workflow
to install the complete compatible combination; installing only the provider into
an unpatched DSH installation does not supply the full integration.
This repository covers two capabilities:
- SuperGrok subscription access in DSH through OAuth.
- A dedicated Grok-optimized mode within DSH.
Sign in with your own account inside DSH;
no xAI API key is required. Available models and reasoning options come from
the authenticated live catalog and depend on account access and a compatible
installation.
The OAuth provider, Grok preset, required core patches, native work-state and
historical-image extensions, build/install tools and tests support these two
capabilities. The first
supported installation target is Windows with Node.js 24. This preview
provides source and build/install tools, without precompiled release downloads
or npm publication.
Components
| Component | Version / contract |
|---|
| SuperGrok provider | 0.8.0-hardened.1; required explicit loopback HTTP proxy |
| Grok-optimized preset | 0.9.1 |
| DSH core packages | Four packages at 0.1.5-rc.2.grok.1, based on exact tag commit fb2c4b9e698e30edb738bca4cf0618587db7d203 |
| Upstream CLI | @deepseek-ai/dsh@0.1.5-rc.2, with source-built core overrides |
| Attachment history, recall tool, work-state context | 1.2.0 each |
See component lock, source provenance
and Windows build/install guide.
Behavior
- OAuth, model catalog, read-only usage and inference share one dispatcher
configured by required
proxyUrl. Only unauthenticated HTTP proxy endpoints
on numeric 127.0.0.1 or [::1] are accepted. Missing/invalid settings fail
before network access. No system-proxy lookup or direct fallback is used.
Changing the proxy requires reloading the provider.
- The usage panel reports the account's quota response and cache freshness.
Missing or expired data stays visibly unavailable/stale; quota is not an
API-token price or a calculated bill.
- Image preparation validates owned DSH attachments, records preparation
notices through the host, and accounts for the complete serialized request.
The default budget is 40,000,000 bytes; oversized inference requests are
rejected before sending. Recall input remains
{attachmentId, occurrence?}.
- Global default stays
standard. Both local standard and grok-optimized
mount image recall once. Only Grok mode mounts deterministic work-state
context. The upstream standard has neither local extension; provenance
distinguishes all three compositions.
- Child agents inherit the selected model unless the native explicit
cross-model option is enabled. The preset does not pin a Grok model or add
an external agent runtime.
The optional request-boundary event allows extensions to reject a model POST or disable its automatic authentication replay.
Build and verify
From a fresh checkout, run npm ci --ignore-scripts, then npm run verify.
Use npm run build:dsh -- --work-dir <external-build-directory> followed by
npm run build:suite -- --work-dir <same-build-directory> to create a portable
bundle. The installation guide supplies complete
PowerShell commands, default-dry-run installation, fresh data initialization,
manual launch and recoverable rollback.
Tests use synthetic credentials and mocked services. Source builds and npm
installation download public dependencies; offline tests make no real OAuth,
model-catalog or inference requests. Installed web/headless composition tests
exercise actual DSH loading with a synthetic adapter and a fixture-owned local
HTTP listener. Passing them does not establish production UI or live model
acceptance. See validation results and scope.
Boundaries
Read the service-access review before signing in.
Source licensing and successful login do not establish third-party service
authorization. Protocols and account eligibility can change. Live OAuth, model
and image inference, and the production usage-panel UI have not been accepted
for this release. macOS/Linux and existing data migration are outside the
supported preview workflow. The frozen upstream build dependencies have known
advisories; review dependency findings and build constraints.
No availability or production-support promise is made.
DSH owns credentials, sessions, permission enforcement and native tools.
The old xAI API contracts are historical reference
and are excluded from the default build/install route.
Preserve the original MIT license, NOTICE, and applicable
third-party licenses. Code licensing does not grant
subscription access or service authorization. This is an independent integration.
Contributing and support
See contributing, security reporting,
preview release notes and the
release policy, available in English and
Simplified Chinese. Issues should contain minimal synthetic reproductions only;
report vulnerabilities privately. Maintenance is best-effort, without a response
time or compatibility guarantee beyond the documented tested combination.
简体中文
开发者预览版 · 非官方实验性集成。 面向能够自行构建和排查 Windows＋Node.js 24 环境的开发者。
尚非稳定正式版，也不代表第三方 OAuth 客户端已获官方支持。
DSH 适配基线为 0.1.5-rc.2，必须搭配本仓库核心补丁；功能参考为
0.1.5-rc.2.grok.3，四个补丁包的版本均为 0.1.5-rc.2.grok.1。 其他 DSH 版本尚未验证。请使用本仓库的
构建与安装流程安装完整兼容组合；
仅在未打补丁的原版 DSH 中安装 provider，无法获得本项目的完整集成功能。
本仓库仅覆盖两项功能：
- 通过 OAuth 将 SuperGrok 订阅接入 DSH。
- 在 DSH 内提供专属 Grok 优化模式。
通过自己的 DSH 登录授权，无需 xAI API key；可用模型与 reasoning 选项以账户实时目录和兼容安装为准。
Provider、Grok 预设、必需的核心补丁、原生工作状态与历史图片扩展，以及构建安装工具和测试，
均为这两项功能的配套实现。
首版安装支持 Windows + Node.js 24，提供源码与构建、安装工具；不发布 npm 包或预编译发行附件。
兼容组合
| 组件 | 版本与用途 |
|---|
| SuperGrok provider | 0.8.0-hardened.1，新增必填显式代理 |
| Grok 优化预设 | 0.9.1 |
| DSH 核心补丁包 | 四个包均为 0.1.5-rc.2.grok.1，上游精确提交 fb2c4b9e698e30edb738bca4cf0618587db7d203 |
| 上游启动器 | @deepseek-ai/dsh@0.1.5-rc.2，搭配本仓库构建的四个核心包 |
| 图片历史、图片召回、工作状态扩展 | 均为 1.2.0 |
完整来源与锁定关系见 组件锁、源码来源。
主要行为
- 必须配置
proxyUrl：首版接受无认证的本地 loopback HTTP 代理，仅限数字地址 127.0.0.1 或 [::1]。
OAuth、目录、额度和推理共用同一 dispatcher；未配置或配置非法时明确报错且不联网。
不读取系统代理，不直连回退；修改代理后需要重新加载 provider。
- 额度看板只读展示服务返回值及缓存新鲜度。额度缺失、过期分别呈现，不将额度换算为 token 单价或账单。
- 图片准备提示由 host 记录并可回放；请求预算覆盖完整序列化请求，默认 40,000,000 字节，超限在发送推理前拒绝。
历史图片召回输入保持
{attachmentId, occurrence?}，附件权限和身份由 DSH 校验。
- 全局默认仍为
standard。本地 standard 与 Grok 模式各挂载一次图片召回，工作状态扩展仅属于 grok-optimized。
来源锁明确区分上游 standard、本地 standard 扩展和 Grok 专属能力。
- 子 Agent 默认继承模型，跨模型选择沿用原生显式开放机制。不写死 Grok 型号，不启动另一套 Agent 运行时。
可选的请求发送检查接口允许扩展拒绝推理 POST，或禁止其自动认证重试。
构建、安装与验证
干净检出后先运行 npm ci --ignore-scripts、npm run verify。
Windows 指南 提供完整构建、安装、初始化、启动及回滚命令。
构建输出位于明确指定的仓库外目录，不依赖已安装的 DSH、私有压缩包或个人 staging 路径。
安装默认 dry-run，应用时验证输入哈希和精确目标；先安装候选目录，再可恢复替换。
数据初始化仅支持新目录，保留既有会话与设置，工具不管理 DSH 进程。
测试只使用合成凭据和模拟服务。源码及依赖下载需要网络，离线测试不请求真实 OAuth、模型目录或模型。
组合测试在独立安装中加载 web/headless，并使用合成 adapter 和自有本地 HTTP 服务。
离线测试、生产加载和真实模型验证覆盖不同范围；详见 验证结果与范围。
凭据、会话、权限校验和原生工具由 DSH 管理。
旧 xAI API 合约 仅作历史参考，不进入默认安装流程。
原 MIT 版权声明 保留，自有新增内容沿用 MIT；适用的 Grok Build 衍生内容保留
Apache-2.0 许可与署名。源码许可不代表订阅授权或服务使用授权。
本项目是独立集成。
接入边界与已知限制
登录前请阅读服务接入评估。源码许可及登录成功均不构成第三方服务接入授权。
上游协议与账户资格可能变化。本预览版未验证真实 OAuth、模型推理、图片推理及生产额度面板。
macOS／Linux 和既有数据迁移不属于首版支持流程。上游冻结构建依赖存在已知告警，
请阅读依赖检查与构建约束；不承诺持续可用或生产支持。
贡献与反馈
请参阅贡献指南、私密安全反馈、预览版说明
和发行规范，相关指南均提供中英文。
普通 Issue 只提交最小合成复现，漏洞通过私密渠道反馈。维护采取尽力而为原则，
不承诺响应时间，也不扩大到兼容表之外的组合。
