dsh-llm-grok-oauth
为 DeepSeek Harness 提供固定版本且强化安全性的动态实时目录 SuperGrok OAuth 提供程序
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Kaizin0226/dsh-supergrok#03f481828b503ceab88879b29f29f1105e59a437Llm Grok Oauth 以 dsh-llm-grok-oauth 发布，当前版本为 0.8.0-hardened.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Developer preview · unofficial experimental integration. For developers who can build and troubleshoot Windows + Node.js 24 setups. This is not a stable release or an officially supported third-party OAuth client.
DSH compatibility: 0.1.5-rc.2 with this repository's required core patches,
matching local functional reference 0.1.5-rc.2.grok.3 with four patched core packages at 0.1.5-rc.2.grok.1. Other DSH versions have not been
validated. Use this repository's build and installation workflow
to install the complete compatible combination; installing only the provider into
an unpatched DSH installation does not supply the full integration.
This repository covers two capabilities:
Sign in with your own account inside DSH; no xAI API key is required. Available models and reasoning options come from the authenticated live catalog and depend on account access and a compatible installation.
The OAuth provider, Grok preset, required core patches, native work-state and historical-image extensions, build/install tools and tests support these two capabilities. The first supported installation target is Windows with Node.js 24. This preview provides source and build/install tools, without precompiled release downloads or npm publication.
| Component | Version / contract |
|---|---|
| SuperGrok provider | 0.8.0-hardened.1; required explicit loopback HTTP proxy |
| Grok-optimized preset | 0.9.1 |
| DSH core packages | Four packages at 0.1.5-rc.2.grok.1, based on exact tag commit fb2c4b9e698e30edb738bca4cf0618587db7d203 |
| Upstream CLI | @deepseek-ai/dsh@0.1.5-rc.2, with source-built core overrides |
| Attachment history, recall tool, work-state context | 1.2.0 each |
See component lock, source provenance and Windows build/install guide.
proxyUrl. Only unauthenticated HTTP proxy endpoints
on numeric 127.0.0.1 or [::1] are accepted. Missing/invalid settings fail
before network access. No system-proxy lookup or direct fallback is used.
Changing the proxy requires reloading the provider.{attachmentId, occurrence?}.standard. Both local standard and grok-optimized
mount image recall once. Only Grok mode mounts deterministic work-state
context. The upstream standard has neither local extension; provenance
distinguishes all three compositions.The optional request-boundary event allows extensions to reject a model POST or disable its automatic authentication replay.
From a fresh checkout, run npm ci --ignore-scripts, then npm run verify.
Use npm run build:dsh -- --work-dir <external-build-directory> followed by
npm run build:suite -- --work-dir <same-build-directory> to create a portable
bundle. The installation guide supplies complete
PowerShell commands, default-dry-run installation, fresh data initialization,
manual launch and recoverable rollback.
Tests use synthetic credentials and mocked services. Source builds and npm installation download public dependencies; offline tests make no real OAuth, model-catalog or inference requests. Installed web/headless composition tests exercise actual DSH loading with a synthetic adapter and a fixture-owned local HTTP listener. Passing them does not establish production UI or live model acceptance. See validation results and scope.
Read the service-access review before signing in. Source licensing and successful login do not establish third-party service authorization. Protocols and account eligibility can change. Live OAuth, model and image inference, and the production usage-panel UI have not been accepted for this release. macOS/Linux and existing data migration are outside the supported preview workflow. The frozen upstream build dependencies have known advisories; review dependency findings and build constraints. No availability or production-support promise is made.
DSH owns credentials, sessions, permission enforcement and native tools. The old xAI API contracts are historical reference and are excluded from the default build/install route.
Preserve the original MIT license, NOTICE, and applicable third-party licenses. Code licensing does not grant subscription access or service authorization. This is an independent integration.
See contributing, security reporting, preview release notes and the release policy, available in English and Simplified Chinese. Issues should contain minimal synthetic reproductions only; report vulnerabilities privately. Maintenance is best-effort, without a response time or compatibility guarantee beyond the documented tested combination.
开发者预览版 · 非官方实验性集成。 面向能够自行构建和排查 Windows＋Node.js 24 环境的开发者。 尚非稳定正式版，也不代表第三方 OAuth 客户端已获官方支持。
DSH 适配基线为 0.1.5-rc.2，必须搭配本仓库核心补丁；功能参考为
0.1.5-rc.2.grok.3，四个补丁包的版本均为 0.1.5-rc.2.grok.1。 其他 DSH 版本尚未验证。请使用本仓库的
构建与安装流程安装完整兼容组合；
仅在未打补丁的原版 DSH 中安装 provider，无法获得本项目的完整集成功能。
本仓库仅覆盖两项功能：
通过自己的 DSH 登录授权，无需 xAI API key；可用模型与 reasoning 选项以账户实时目录和兼容安装为准。
Provider、Grok 预设、必需的核心补丁、原生工作状态与历史图片扩展，以及构建安装工具和测试， 均为这两项功能的配套实现。 首版安装支持 Windows + Node.js 24，提供源码与构建、安装工具；不发布 npm 包或预编译发行附件。
| 组件 | 版本与用途 |
|---|---|
| SuperGrok provider | 0.8.0-hardened.1，新增必填显式代理 |
| Grok 优化预设 | 0.9.1 |
| DSH 核心补丁包 | 四个包均为 0.1.5-rc.2.grok.1，上游精确提交 fb2c4b9e698e30edb738bca4cf0618587db7d203 |
| 上游启动器 | @deepseek-ai/dsh@0.1.5-rc.2，搭配本仓库构建的四个核心包 |
| 图片历史、图片召回、工作状态扩展 | 均为 1.2.0 |
proxyUrl：首版接受无认证的本地 loopback HTTP 代理，仅限数字地址 127.0.0.1 或 [::1]。
OAuth、目录、额度和推理共用同一 dispatcher；未配置或配置非法时明确报错且不联网。
不读取系统代理，不直连回退；修改代理后需要重新加载 provider。{attachmentId, occurrence?}，附件权限和身份由 DSH 校验。standard。本地 standard 与 Grok 模式各挂载一次图片召回，工作状态扩展仅属于 grok-optimized。
来源锁明确区分上游 standard、本地 standard 扩展和 Grok 专属能力。可选的请求发送检查接口允许扩展拒绝推理 POST，或禁止其自动认证重试。
干净检出后先运行 npm ci --ignore-scripts、npm run verify。
Windows 指南 提供完整构建、安装、初始化、启动及回滚命令。
构建输出位于明确指定的仓库外目录，不依赖已安装的 DSH、私有压缩包或个人 staging 路径。
安装默认 dry-run，应用时验证输入哈希和精确目标；先安装候选目录，再可恢复替换。
数据初始化仅支持新目录，保留既有会话与设置，工具不管理 DSH 进程。
测试只使用合成凭据和模拟服务。源码及依赖下载需要网络，离线测试不请求真实 OAuth、模型目录或模型。 组合测试在独立安装中加载 web/headless，并使用合成 adapter 和自有本地 HTTP 服务。 离线测试、生产加载和真实模型验证覆盖不同范围；详见 验证结果与范围。
凭据、会话、权限校验和原生工具由 DSH 管理。 旧 xAI API 合约 仅作历史参考，不进入默认安装流程。
原 MIT 版权声明 保留，自有新增内容沿用 MIT；适用的 Grok Build 衍生内容保留 Apache-2.0 许可与署名。源码许可不代表订阅授权或服务使用授权。 本项目是独立集成。
登录前请阅读服务接入评估。源码许可及登录成功均不构成第三方服务接入授权。 上游协议与账户资格可能变化。本预览版未验证真实 OAuth、模型推理、图片推理及生产额度面板。 macOS／Linux 和既有数据迁移不属于首版支持流程。上游冻结构建依赖存在已知告警， 请阅读依赖检查与构建约束；不承诺持续可用或生产支持。
请参阅贡献指南、私密安全反馈、预览版说明 和发行规范，相关指南均提供中英文。 普通 Issue 只提交最小合成复现，漏洞通过私密渠道反馈。维护采取尽力而为原则， 不承诺响应时间，也不扩大到兼容表之外的组合。