DeepSeek Harness is designed around the philosophy that “everything is a plugin.” When using a model provider, in addition to an API Key, subscription services (such as ChatGPT Plus or Claude Pro) are also a common need. At the framework level, the relevant OAuth flows have actually already been registered. This includes six OAuth-capable providers in @deepseek-ai/dsh-llm-pi-ai (such as the subscription versions of Anthropic and OpenAI), but the original registration logic is isolated by ctx.inject, and there is no command-line or panel entry point to invoke it. As a result, although these flows exist, they cannot be reached. The purpose of the dsh-provider-login plugin is to fill this missing piece: it mounts the authorization registry and registers the corresponding commands, allowing users to complete subscription authorization through a browser.

What It Is

This is an MIT-licensed plugin maintained by shaneconner. Its core function is to drive the subscription login process for DeepSeek Harness model providers. It leverages OAuth authorization, enabling users to use already purchased ChatGPT Plus/Pro or Claude Pro/Max subscriptions instead of relying directly on an API Key.

Core Features

  • Drives OAuth flows: supports subscription login for Claude Pro/Max and ChatGPT Plus/Pro.
  • Command-line interface: provides /login (lists available login items) and /logout commands.
  • Registry mounting: mounts the @deepseek-ai/dsh-authorization registry into the context.
  • Browser authorization: handles browser-based OAuth authorization flows; credentials are written to Harness’s credential file and support automatic refresh.

Installation and Enablement

Installing the plugin requires restarting the dsh process. The command is as follows:

dsh plugin --profile web add dsh-provider-login

Typical Usage

After installation and restart, run the following commands in the terminal or session:

/login                  # 查看可用的登录项以及已登录的项
/login openai-codex     # 使用 ChatGPT Plus 或 Pro 进行登录
/login anthropic        # 使用 Claude Pro 或 Max 进行登录
/logout openai-codex    # 退出登录

After running /login, a browser page will open. After authorizing on the page, the session will complete automatically, and the credentials will be saved to Harness’s credential file.

Applicable Scenarios and Notes

  • Confusion risk: Do not confuse this with another plugin named dsh-login, which is an unrelated package used for Web port password access control.
  • Anthropic billing: When logging into an Anthropic account through this plugin, the resulting billing will be deducted from additional usage and billed by token, rather than from the Claude Pro/Max plan quota. To use Claude plan quota, it must be implemented through an Agent SDK-driven CLI tool (such as pi-claude-bridge).
  • OAuth providers only: This plugin only lists providers that offer OAuth login. For providers that only support API Key, configuration is still required via apiKeyEnv.
  • Environment requirements: A browser environment is required to complete the authorization flow. Its dependencies are marked as optional.

Conclusion

This plugin addresses the missing subscription login entry point in the Harness framework, allowing developers to more conveniently utilize existing subscription resources. The relevant code and directory information is as follows: