dsh-AuthInOne

DeepSeek Harness's native Models page is great for managing API keys and custom endpoints, but if you want to sign in with OpenAI Codex or Kimi Code accounts, switch between multiple providers, and see unified token usage and cost analytics, the built-in tools fall short. dsh-AuthInOne fills that gap by integrating account authorization, provider configuration, model defaults, and usage analytics directly into DSH's own Models and Usage settings—no need to leave the familiar interface.

Core capabilities include browser OAuth with PKCE or RFC 8628 device flow for OpenAI Codex and Kimi Code, plus experimental compatibility logins for xAI, Anthropic, GitHub Copilot, Command Code, Cursor, Google Antigravity, and Kiro. The plugin preserves DSH's native cards and adds support for API keys, plan presets, and custom OpenAI-compatible base URLs, headers, and model mappings. You can also configure a separate vision model as a fallback that automatically describes images when the selected main model is text-only. The Usage page rebuilds session logs into token statistics and auditable cost estimates grouped by provider, model, tool, and time range.

On the security side, OAuth verifiers, authorization codes, device codes, access tokens, and refresh tokens all remain on the DSH Host; the plugin never reads ~/.codex/auth.json, browser storage, cookies, or credentials from other products. The self-contained bootstrap validates the running Host and uses the official DSH plugin CLI to replace it on the same port, without patching DSH core or manually editing configuration files. All login flows are verified up to the authorization confirmation boundary, with tests covering refresh rotation, denial, timeout, cancellation, logout, and secret redaction.

If you're a DSH user who juggles multiple AI providers and wants a single place to manage credentials, set a default model, and track costs, dsh-AuthInOne is a practical addition. Whether you rely on Codex or Kimi Code heavily or need to consolidate various OpenAI-compatible endpoints into DSH, this plugin reduces switching and maintenance overhead.