dsh-copilot-catalog
面向账户的 GitHub Copilot 模型发现，以及适用于 DeepSeek Harness 的 Copilot 兼容线协议身份，封装现有的 pi-ai 适配器。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-copilot-catalog@0.2.9Copilot Catalog 以 dsh-copilot-catalog 发布，当前版本为 0.2.9。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Account-aware GitHub Copilot model discovery for DeepSeek Harness (DSH). Written in strict TypeScript; published as ESM JavaScript with type declarations.
This package now lives in packages/catalog in the pnpm monorepo. Its npm name,
public exports, configuration schema and runtime behavior are preserved. The
independent search plugin does not need this wrapper to be installed. The
repository root is private tooling, not an installable plugin.
This experimental, third-party plugin wraps @deepseek-ai/dsh-llm-pi-ai. Before the
adapter mounts, it reads your existing Copilot OAuth grant, fetches your account's
/models catalog, and updates the same in-memory pi-ai catalog the adapter uses.
No hard-coded application paths, credential-file edits, or signed-app modifications.
Shows picker-enabled models whose policy is enabled or absent and which do not explicitly reject tool calls.
Preserves upstream descriptors for known IDs, including mixed API protocols.
Builds descriptors for any newly discovered model ID, without a model-name
allowlist, sibling template, or vendor-name heuristic. Transport selection uses
the advertised supported_endpoints:
| Advertised endpoint | pi-ai transport |
|---|---|
/responses | openai-responses |
/v1/messages | anthropic-messages |
/chat/completions | openai-completions |
When multiple supported endpoints are offered, preference is Responses, native Messages, then Chat Completions, independent of array order or model name.
Uses live positive context/output limits, vision support, advertised reasoning efforts, and validated pricing for new models. Only unknown protocols, invalid request IDs, non-chat/non-streaming models, or insufficient limits are skipped. Missing pricing uses zero-valued unknown rates, not another model's prices.
Keeps Enterprise routing for discovery and inference, including known bundled models and API-key auth. A validated account endpoint is applied as an in-memory provider default even if the model listing later fails. Explicit configured API-key endpoints are preserved; no profile setting is rewritten.
Leaves the current catalog untouched if discovery fails or yields no supported models. On first startup this means all bundled defaults remain available.
Bounds the whole attempt to 10 seconds, including credential reads, refresh, auth resolution, fetch, and body parsing. Timed-out work cannot commit later.
Makes no credential-store writes. Expiring grants are refreshed only in memory; the original adapter owns normal persisted refresh and its cross-process lock.
Requires HTTPS Copilot subdomains, refuses redirects and unusual ports, and logs controlled error codes instead of potentially sensitive exception messages.
Installs a scoped, refcounted Copilot wire-identity interceptor while mounted; see Wire identity.
While this adapter is mounted, it installs a process-wide fetch interceptor for
trusted Copilot API hosts. The interceptor removes DSH's adapter attribution
User-Agent and the OpenAI/Anthropic SDK x-stainless-* fingerprints, then applies
the identity headers used by the installed official Copilot client:
User-Agent: GitHubCopilotChat/0.68.0, Editor-Version: vscode/1.140.0,
Editor-Plugin-Version: copilot-chat/0.68.0, Copilot-Integration-Id: vscode-chat.Editor-Device-Id, Vscode-SessionId, and Vscode-MachineId, read from the
local VS Code identity files when present, with UUID-shaped fallbacks.
X-Request-Id and X-Agent-Task-Id are generated per request when absent.X-GitHub-Api-Version, Openai-Intent,
X-Interaction-Type, Content-Type, X-Interaction-Id) are preserved exactly,
including absence. /models is not special-cased.Authorization, Accept, Content-Type, X-Initiator,
Copilot-Vision-Request, Anthropic-Version, and Anthropic-Beta are preserved.
OpenAI-Organization, OpenAI-Project,
Anthropic-Dangerous-Direct-Browser-Access, and x-stainless-* are removed on
these requests.Modes are selected with DSH_COPILOT_WIRE_IDENTITY:
full (default): the complete identity above, including local VS Code
device/machine IDs.basic: only the User-Agent/editor/plugin/integration identity and SDK-fingerprint
removal; no device/machine/session/request IDs and no identity-file reads.0, off, or false: no interceptor, no ctx.effect, and no identity-file reads.The interceptor is scoped to HTTPS *.githubcopilot.com and
copilot-api.<tenant>.ghe.com origins with default ports, and to known message and
model paths. Explicit custom proxy/baseURL requests are not rewritten. It is
refcounted: concurrent installs share one identity, the last release deactivates
every wrapper it created (cached SDK clients then pass through untouched), and a
later install after an external globalThis.fetch replacement wraps the current
fetch.
full mode links DSH's Copilot traffic to the local VS Code identity by design;
basic avoids that. This is header-level mitigation only. TLS/JA3/JA4, HTTP/2,
header ordering, compression, body shape, timing, IP, WebSocket transport, custom
fetchers, api.github.com token/device flows, and other Copilot-host paths remain
identifiable or unmodified. It is not official-client equivalence and does not
guarantee acceptance; using Copilot through an unofficial client remains an
account-policy/terms risk.
| Component | Supported version |
|---|---|
DSH and @deepseek-ai/dsh-llm-pi-ai | 0.2.1-rc.5 |
@earendil-works/pi-ai | ^1.1.0 (tested at 1.1.0 and 1.3.0) |
| Node.js | >=22.19.0 |
| Runtime format | ESM only; no CommonJS entry |
DSH and pi-ai are peer dependencies, not vendored copies. Runtime resolution starts from the adapter's location, so nested or pnpm layouts do not cause the plugin to update a different pi-ai instance. Type-only imports are erased by the compiler. The public Copilot provider supplies OAuth hooks; private auth modules are not imported. Version ranges are deliberately conservative: verify a new DSH or pi-ai version before widening them.
Both GitHub.com Copilot Enterprise accounts and GitHub Enterprise Cloud accounts
on GHE.com are supported. These are distinct routing cases: a GitHub.com account
may use https://api.enterprise.githubcopilot.com, while a GHE.com account has an
enterprise tenant such as company.ghe.com. This is not general support for
arbitrary GitHub Enterprise Server domains.
For GHE.com, follow GitHub's account authentication guide
and network allowlist guidance.
Use the tenant URL/domain, for example https://company.ghe.com, in the normal
Copilot OAuth sign-in prompt. That is the authentication host, not the Copilot
API origin. The public pi-ai toAuth() hook derives the API origin from token
metadata first; without that metadata, it uses https://copilot-api.company.ghe.com
for this tenant. The wrapper preserves that upstream selection rather than
rewriting domains. The network guide describes tenant-scoped services; the
copilot-api fallback is derived by pi-ai, not an exhaustive endpoint list in
that guide.
This plugin also works around pi-ai's API-key path: an explicit API key bypasses
OAuth toAuth(), so upstream otherwise retains the bundled Individual endpoint.
The wrapper discovers an account endpoint and supplies it to the original adapter
as a runtime-only baseURL default, covering new and bundled models.
toAuth() to derive
the account endpoint. The original adapter still owns persisted refresh and
derives request auth normally; Enterprise grants do not become Individual keys.proxy-ep metadata to
derive the endpoint through the same read-only OAuth hook. This applies to stored
API-key records, explicit apiKeyEnv references, and ambient COPILOT_GITHUB_TOKEN.
An explicit reference wins over a different stored OAuth account, as in pi-ai.baseURL field explicitly, or use DSH's
normal Copilot OAuth sign-in, which preserves the GHE.com tenant in the grant.
Discovery reports MISSING_ENDPOINT rather than assuming the Individual API.For an explicit Enterprise API-key route, use a credential reference, not a literal key in your profile:
- id: llm-pi-ai-catalog
name: dsh-copilot-catalog
config:
providers:
github-copilot:
apiKeyEnv: COPILOT_ACCESS_TOKEN
baseURL: https://api.enterprise.githubcopilot.com
For an explicit GHE.com API-key route, reference a Copilot access token and use its Copilot API origin, not the tenant authentication URL:
- id: llm-pi-ai-catalog
name: dsh-copilot-catalog
config:
providers:
github-copilot:
apiKeyEnv: COPILOT_ACCESS_TOKEN
baseURL: https://copilot-api.company.ghe.com
Replace company with your enterprise tenant and use the endpoint belonging to
your account. Discovery trusts HTTPS *.githubcopilot.com origins and
copilot-api.<tenant>.ghe.com, where <tenant> is one valid DNS label. It does not
trust arbitrary *.ghe.com hosts, tenant authentication hosts, or copilot-proxy
origins. URLs with userinfo or non-default ports and redirects remain rejected.
Inferred API-key routing is a startup snapshot; restart after changing accounts
or moving a key to a different endpoint. If no endpoint can be identified, the
original adapter remains mounted with its original configuration, so an opaque
Enterprise key still needs an explicit baseURL.
The wrapper does not write credentials, switch accounts, migrate active profiles,
or add a separate github-copilot-ghe route. A local plugin supplying that route
remains independently configured; enabling this wrapper does not replace it.
Adapter replacement, not an add-on adapter. The included DSH bundle disables the standard
llm-pi-aientry and insertsllm-pi-ai-catalog, configured forgithub-copilot. Do not enable another adapter for the same provider route.Existing custom routes/settings are not copied automatically. Before enabling the bundle, back up your profile patch and copy every provider and override you want to retain to the replacement entry. Its settings namespace is
llm-pi-ai-catalog; your OAuth grant keeps the originalllm-pi-ai/github-copilotkey. A later profile/home patch that re-enables the original adapter must be fixed.
Install the bundle through DSH's Plugins page, or use the CLI for your chosen
profile (for example desktop or web):
dsh plugin --profile <profile> add dsh-copilot-catalog
Restart DSH after installing or changing this host-side plugin. The code has no browser component and does not modify or rebuild DSH's web UI.
Run development commands from the repository root. Do not install the root Git URL as a plugin: its manifest is private monorepo tooling. Build and link the catalog leaf, or install its published package/tarball.
pnpm install --frozen-lockfile --ignore-scripts
pnpm --filter dsh-copilot-catalog run build
pnpm --filter dsh-copilot-catalog run verify
# Only if you choose to enable it in an actual DSH profile:
dsh plugin --profile <profile> add -w packages/catalog
# Alternatively, pack compiled output without lifecycle scripts:
pnpm --dir packages/catalog pack --pack-destination ../../artifacts --config.ignore-scripts=true
Local linking affects that profile; it is not part of the automated test suite. Neither this repository nor its tests automatically edits your active profile.
Add a higher-priority override to your own profile patch before enabling the bundle. Copy the full provider configuration from your original adapter, including custom URLs, models, headers and overrides, as needed:
- id: llm-pi-ai-catalog
name: dsh-copilot-catalog
config:
providers:
github-copilot: {}
openai:
apiKeyEnv: OPENAI_API_KEY
All original adapter configuration fields remain valid. The wrapper exports the
original Config schema unchanged; it adds no secret or custom discovery settings.
An inferred endpoint is overlaid only while the adapter reads the configuration;
settings persistence, explicit URLs, and other providers are left untouched.
If your original adapter has a different entry ID, adjust the disabling override
in your profile accordingly.
Successful discovery logs Copilot catalog synced with the supported model count
and JSON-escaped unsupported IDs. Failures log one of TIMEOUT, HTTP_ERROR,
INVALID_CATALOG, UNTRUSTED_ENDPOINT, INVALID_AUTH, MISSING_ENDPOINT,
IMMUTABLE_CATALOG, or DISCOVERY_FAILED; startup still delegates to the original
adapter. Missing Copilot credentials keep the defaults. A validated runtime
endpoint is logged separately without any token or credential value. Sign in through DSH's normal Copilot authorization
flow, then restart to perform account discovery.
Set DSH_COPILOT_WIRE_IDENTITY=0 to disable only the wire-identity interceptor
without removing the bundle. To remove the bundle, use DSH's Plugins page, remove
any profile overrides that still enable the replacement, and re-enable the standard
llm-pi-ai entry if your own profile has disabled it. Restore your backed-up
provider configuration and restart the whole DSH process to reset its in-memory
catalog. Do not delete the OAuth grant. The wrapper does not patch the signed
application or store a catalog on disk.
Run from the monorepo root:
pnpm install --frozen-lockfile --ignore-scripts
pnpm run check:secrets
pnpm --filter dsh-copilot-catalog run typecheck
pnpm --filter dsh-copilot-catalog run build
pnpm --filter dsh-copilot-catalog run test
pnpm --filter dsh-copilot-catalog run test:integration
pnpm --filter dsh-copilot-catalog run test:types
pnpm --filter dsh-copilot-catalog run test:pack
pnpm run verify # both plugins and shared tooling
The tests use synthetic credentials and response/SSE fixtures. They cover arbitrary new IDs, three advertised protocols, prototype-sensitive IDs, reasoning metadata, unknown pricing, read-only refresh, endpoint restrictions, deadlines, late responses, fail-open delegation, and safe diagnostics. Integration tests mount the actual DSH adapter and exercise real SDK request construction for OAuth Enterprise grants, API-key overrides, stored access tokens, explicit URLs, and failed model listing. Every mocked discovery/inference request is asserted to target the Enterprise origin. No live Copilot request or authentication flow is run automatically.
src/index.ts: DSH entry point.src/runtime.ts: shared adapter/pi-ai resolution.src/catalog.ts: pure selection and pricing.src/discovery.ts: bounded read-only discovery.src/plugin.ts: adapter lifecycle and safe logging.src/types.ts: public interfaces and upstream type integration.For scripts that only need model selection, the dsh-copilot-catalog/catalog
subpath is side-effect-free. Pass an explicit bundled catalog:
import { selectAccountModels } from 'dsh-copilot-catalog/catalog';
import { GITHUB_COPILOT_MODELS } from '@earendil-works/pi-ai/providers/github-copilot.models';
const { models, unsupported } = selectAccountModels(response, GITHUB_COPILOT_MODELS);
The package root loads the adapter peers but does not read credentials or perform
network I/O until apply() or syncCopilotCatalog() is called. The
dsh-copilot-catalog/discovery helper takes explicit injected dependencies for tests
and tooling.
This package keeps the existing dsh-copilot-catalog name and independent version.
Version 0.2.2 adds GHE Cloud discovery and inference routing support.
Version 0.2.1 packages the preserved catalog runtime from its pnpm workspace.
Version 0.2.0 was already published; every subsequent release must use a new
manifest version and matching changelog entry.
Use a package-specific tag dsh-copilot-catalog-vX.Y.Z. The shared release
workflow checks that it exactly matches this leaf's version/repository directory,
verifies both plugins with pnpm, and stages only the catalog leaf. Legacy root
vX.Y.Z tags no longer select a package.
The existing npm Trusted Publisher uses this repository, workflow publish.yml
and environment npm. Native pnpm stage publish uses short-lived OIDC identity
and provenance, with exact package-specific release gating for the tagged checkout.
Dependency management, builds, checks and package inspection also use pnpm. A maintainer
reviews the Staged Package and approves it with 2FA. No npm token is stored in
GitHub and no publication happens automatically during development.
For a fork, update root/leaf repository metadata, preserving this package's
repository.directory: packages/catalog, and configure its Trusted Publisher.
See the monorepo's contributing and release instructions.
CI verifies both plugins on Linux, macOS and Windows with Node 22/24. Generated
dist/ stays out of Git; tarballs contain only compiled runtime/declarations,
manifest, bundle patch, README, changelog and license. Tests, root tooling,
source and credentials are not published.
modelOverrides if
its gateway needs additional compatibility settings.none maps to
off). Absent/unrecognized effort metadata does not invent reasoning settings;
native Anthropic thinking: true without an effort list uses standard budget
levels. Native Messages effort lists use adaptive thinking. Endpoint metadata is
not a guarantee that every optional feature works identically on every gateway.models lists, and
modelOverrides still apply. This plugin neither enables account policies nor
changes stored availableModelIds; an upstream credential allowlist can still
hide a model until normal refresh/sign-in updates it.*.githubcopilot.com and
copilot-api.<tenant>.ghe.com origins with a single valid tenant DNS label, no
userinfo, and the default HTTPS port. Other GHE services, arbitrary enterprise
domains, and redirects are rejected; normal adapter behavior remains available
as fallback.MIT. Original DSH and pi-ai packages retain their own licenses; they are not redistributed in this tarball.