dsh-commandcode-provider

一句话定位

这个插件把 Command Code 接入 DSH，让你可以在 DSH 的模型选择器中浏览并使用 Command Code 提供的模型。它还提供独立的设置页、账户用量查看和按套餐整理模型列表的功能。

核心能力

• 接入 Command Code 模型：注册 commandcode 模型提供方，把 DSH 的对话、工具调用和流式输出转换为 Command Code 请求。
• 同步模型目录：从 Command Code 获取实时模型列表，并在网络异常时使用本地缓存继续显示已有目录。
• 显示模型使用信息：在模型选择器中标注最低套餐、活动优惠、图片能力和上下文窗口，并按套餐等级排序。
• 按账户套餐筛选模型：默认隐藏订阅套餐无法使用的模型；账单信息不确定时会保留完整列表，实际权限仍由服务端判断。
• 支持推理强度和图片输入：为已知模型提供可选推理强度；Vision 模型可接收图片，图片通过 DSH 附件服务读取。
• 查看账户用量：通过 /commandcode 命令和设置页的账户卡片查看请求数、花费、Token、额度、时间窗口限制和订阅信息。

技术实现

• 语言: TypeScript
• 关键依赖: @deepseek-ai/dsh-llm、@deepseek-ai/dsh-settings、@deepseek-ai/dsh-credentials、React
• 架构模式: DSH bundle 同时注册 Host 侧模型适配器和可配置 provider，并通过 Cordis patch 插入插件配置；Web 客户端另外注册 Command Code 设置页。账户用量由 Host 侧通过 Remote 网关获取，浏览器不直接持有 API key。
• 入口文件: src/index.ts；模型请求与目录适配位于 src/adapter.ts，浏览器入口位于 src/client/index.ts。

适用场景

适合希望在 DSH 中使用 Command Code 账号和模型、并在同一个模型选择器里查看套餐与图片能力的用户。对于需要了解账户额度、请求花费或 5 小时/每周窗口用量的用户，也可以直接使用设置页或 /commandcode 命令查看。

前置依赖与兼容性

安装方式

dsh plugin --profile web add github:Mars-Sea/dsh-commandcode-provider

配置项

常见问题

Q: 这个插件需要 API key 吗？

A: 模型目录可以在没有 key 时浏览，但发送请求和查看账户用量需要可用的 Command Code API key。插件会先检查直接配置，再通过 DSH 凭据服务解析；没有凭据服务时才读取启动环境，最后回退到 ~/.commandcode/auth.json。

Q: 支持哪些图片输入？

A: 只有源码登记为 Vision 的模型接受图片，并且 DSH 需要启用附件服务。文本模型不会偷偷丢弃图片，而是返回不支持内容的错误。

Q: 为什么模型列表里没有某个模型？

A: 默认的模型选择器会按照账户订阅套餐隐藏超出权限的模型。账单查询失败、套餐未知或存在按需余额时会失败开放；关闭 filterModelsByPlan 也能显示完整目录，但服务端仍可能返回套餐权限错误。

Q: 长时间思考时请求中断怎么办？

A: 默认等待首字节 60 秒，并允许流空闲 300 秒。网络较慢或模型长时间不输出时，可以在设置页调大 requestTimeoutMs 或 streamIdleTimeoutMs；请求连接失败、限流和部分服务端错误会按 DSH 默认策略重试。

Q: 为什么请求返回 MODEL_NOT_IN_PLAN？

A: 这表示所选模型不在当前 Command Code 套餐中。可以改选当前套餐包含的模型，或调整账户套餐；模型列表中的套餐标记只用于提示，服务端才是最终权限来源。

Q: 支持 stop 序列吗？

A: 不支持。Command Code 的请求格式没有 stop 字段，带有该选项的请求会明确返回不支持选项错误。

Q: 设置页显示未配置，但请求仍然成功，为什么？

A: 可能是 key 来自官方 CLI 登录文件 ~/.commandcode/auth.json，而不是 DSH 凭据库。把 key 保存到设置页后，设置页可以准确显示已配置状态。

Q: 卸载插件会删除 API key 吗？

A: 不会。卸载命令只移除插件包和它的配置层，DSH 凭据库及 ~/.commandcode/auth.json 中的 key 会保留。

上手难度

入门 — 安装插件后主要通过“设置 → Command Code”填写 API key 和连接参数，再从模型选择器选择模型；需要根据套餐或网络情况调整选项时再查看高级配置。

已知问题与限制

• 不支持 stop 序列；带有该选项的请求会返回 UNSUPPORTED_OPTION。
• 图片输入受 Vision 模型清单限制，并依赖 DSH 附件服务；在含图片的会话中切换到文本模型也会被 DSH 拒绝。
• 模型能力、套餐、优惠和峰谷价格是源码内的静态快照，官方目录或套餐变化后需要插件更新才能完全同步。
• 模型目录刷新失败时会回退到本地缓存；缓存不存在或无效时，模型选择器可能没有可显示的旧目录，但显式请求模型仍由服务端处理。
• 账户用量依赖 Command Code 的账户接口和 API key；各接口独立降级，部分接口失败时报告会保留其他可用数据。
• 默认流空闲超时为 300 秒，极长的推理过程或网络持续停顿超过该值仍会被判定为超时。
• 插件只读取官方 CLI 的 ~/.commandcode/auth.json 作为最后兜底，不读取 pi/OMP 等其他工具的认证文件。

English | 简体中文

Unofficial DeepSeek Harness LLM provider plugin for Command Code, ported from pi-commandcode-provider (MIT). It registers a commandcode provider whose requests are translated to Command Code's Provider API (POST /alpha/generate, reverse-engineered by the pi plugin, [email protected]).

This is a community integration. You need your own Command Code account and API key or subscription, and Command Code's terms apply. This project is not affiliated with Command Code, Inc.

What you get

• Plugin bundle installable into any dsh profile with dsh plugin add, plus a commandcode provider route with a live catalog (GET {apiBase}/provider/v1/models, cached at ~/.commandcode/models-cache.json).
• Dedicated "Command Code" settings page (Settings → Command Code) with an API-key field, connection knobs (API base, working directory, request/stream timeouts), a live "Account usage" card (stats, credits, window-limit bars, subscription plan badge) and a Hide out-of-plan models toggle. The key is stored through the dsh credentials service; connection fields land in the llm-commandcode section and apply to the very next request, no restart.
• API key resolution order: config.apiKey → credential ref apiKeyEnv (default COMMANDCODE_API_KEY) → launch environment → the official CLI auth file (~/.commandcode/auth.json, from command-code login).
• Model-picker annotations: every model shows the minimum plan that includes it (KNOWN_PLANS), an active deal or FREE badge (KNOWN_DEALS, expiry-aware so lapsed discounts hide themselves), the current peak/off-peak state (Peak/Half) for time-of-day-priced models, an Image marker for Vision models, and the context window (1M / 256K / 262K) — e.g. "Go · 50% off · Image · 1M", "Go · Half · 1M". The list is sorted by plan tier (Go → GOAT → Pro → Provider/Max), so the models your plan can use lead the picker.
• Plan-aware picker filtering: the picker hides models above your subscription tier outright (resolved live from your account's billing state). It fails open — an unreachable billing endpoint, an unknown plan, or a positive on-demand credit balance (which the official CLI treats as unlocking every model) all keep the full catalog visible — and the server stays the final gate. Set Hide out-of-plan models off on the settings page (or filterModelsByPlan: false in the llm-commandcode settings section) to always list every model.
• Reasoning-effort support for models the official catalog marks as such (KNOWN_EFFORTS, matching [email protected]); reasoning models without effort levels still think automatically, exactly like the official CLI.
• Image input for Vision-capable models (sent in the official wire format via the dsh attachment service); text-only models refuse images loudly (UNSUPPORTED_CONTENT) rather than dropping them.

Getting an API key

Command Code API keys never expire. The easiest path is the official CLI (Node.js 22+):

npm i -g command-code@latest
cmd login        # macOS/Linux; native Windows: cmdc login

cmd login opens a browser to authenticate; the key is written to ~/.commandcode/auth.json — picked up automatically as a last-resort fallback. Alternatively create a key in the browser (Command Code Studio) and paste it into Settings → Command Code, or export COMMANDCODE_API_KEY="user_...".

Install

From npm (recommended)

The bare name dsh-commandcode-provider is taken by an unrelated package, so this plugin is published as @mars-sea/dsh-commandcode-provider:

dsh plugin --profile web add @mars-sea/dsh-commandcode-provider

From GitHub

# Pin a release tag (recommended — readable and immutable)
dsh plugin --profile web add github:Mars-Sea/dsh-commandcode-provider#v0.2.2
# Or pin any exact commit by its SHA
dsh plugin --profile web add github:Mars-Sea/dsh-commandcode-provider#<full-commit-sha>

The #<ref> suffix pins one exact revision (pnpm git-dependency syntax). Without it the install tracks the default branch, so a later push can silently change what you get.

A git install fetches sources, so the package's prepare script builds lib/ after install. pnpm ≥10 blocks that script by default — run the add, then copy the exact package key pnpm prints into ~/.dsh/profiles/web/pnpm-workspace.yaml:

allowBuilds:
  '@mars-sea/dsh-commandcode-provider@github:Mars-Sea/dsh-commandcode-provider#<full-commit-sha>': true

and re-run the add.

From a local checkout

npm install
npm run build                          # git/tarball installs do this via `prepare` automatically
dsh plugin --profile web add /path/to/dsh-commandcode-provider

After changing src/, re-run npm run build and restart the app.

What the install does

dsh plugin add links the package into the profile (pnpm records it under the true package name @mars-sea/dsh-commandcode-provider), appends that name to dsh.profile.bundles, and activates the cordis.patch.yml layer:

- insert:
    - id: llm-commandcode
      name: "@mars-sea/dsh-commandcode-provider"
      config:
        apiKeyEnv: COMMANDCODE_API_KEY

The patch name must be the full package specifier, quoted — the loader imports it as a module from the profile's node_modules, where pnpm only links the scoped name. A bare name fails with ERR_MODULE_NOT_FOUND and crashes the app on boot; an unquoted @mars-sea/... fails YAML parsing (see Troubleshooting).

Verify the composed layer, then (re)start the web app:

dsh --profile web --dump-config          # shows a "# == @mars-sea/dsh-commandcode-provider" layer
dsh web                                  # or restart your running instance

Updating

The patch layer is read from the installed package at every boot, so updating the package brings the fixed row automatically — no need to hand-edit cordis.patch.yml unless you copied it into your own profile layer.

# npm: always the latest published release
dsh plugin --profile web update @mars-sea/dsh-commandcode-provider

# GitHub (pinned): point at the new tag — no uninstall needed, pnpm swaps it in place
dsh plugin --profile web add github:Mars-Sea/dsh-commandcode-provider#v0.2.2

# local checkout: pull, rebuild, restart
git -C /path/to/dsh-commandcode-provider pull
npm run build --prefix /path/to/dsh-commandcode-provider
dsh web

Then restart the web app. Verify with dsh --profile web --dump-config — the layer should show name: '@mars-sea/dsh-commandcode-provider'.

update says "Already up to date" but the version did not move (pnpm ≥ 11)? pnpm 11's minimumReleaseAge supply-chain policy can refuse a freshly published version. Pin the exact version instead: dsh plugin --profile web add @mars-sea/[email protected] (or pnpm config set minimumReleaseAge 0 --location project inside the profile directory).

Upgrading from ≤0.1.6 (or a broken hand-edited profile): if you copied the old patch row into your profile's own cordis.patch.yml, that copy still wins over the bundle layer — fix it to name: "@mars-sea/dsh-commandcode-provider" or remove it (see Troubleshooting).

To uninstall instead: dsh plugin --profile web remove @mars-sea/dsh-commandcode-provider (the scoped name — pnpm records the dependency under its real name). Your API key in the dsh credential store and ~/.commandcode/auth.json are left untouched.

Verify it works

After restart: Settings → Command Code shows the dedicated page — enter your API key and click Save (the badge flips to 已配置/Configured once the Host holds it). Settings → Models shows a Command Code card; the model picker lists the live catalog under commandcode. Send a message with a model your plan includes — deepseek/deepseek-v4-flash works on entry-level plans, and open-weight models (DeepSeek/Qwen/Kimi/MiniMax) generally do, while frontier models (Claude/GPT/Gemini/Grok) may require Pro/Max plans or on-demand usage.

Usage dashboard

The plugin registers a /commandcode slash command (requires the dsh commands service, present in the standard web profile) showing your account state from the official account endpoints:

/commandcode        (or /commandcode status)

Each endpoint degrades independently — a temporary failure of one leaves the rest visible and notes the failure inline.

Configure

Settings → Command Code is the primary surface: an API-key field (stored in $DSH_HOME/.credentials.yaml via the credentials service; write-only, reports whether a key is set), plus API base URL, working directory, and request/stream timeout fields, all written to the llm-commandcode section. The catalog is browsable without a key. The working directory is optional — leave it blank and the placeholder shows the process cwd it resolves to.

Once a key is configured, the page header shows a live Account usage card — the same account, spend, credit, and window-limit facts as /commandcode, plus your subscription plan badge and billing period end — fetched Host-side (the key never leaves it) and rendered natively:

The same knobs live in $DSH_HOME/settings.yaml (per-request overrides, no restart):

llm-commandcode:
  apiKeyEnv: COMMANDCODE_API_KEY   # credential reference resolved per request
  apiBase: https://api.commandcode.ai
  workingDir: /path/to/project     # reported to the API (project slug, config block)
  modelsCachePath: ~/.commandcode/models-cache.json
  requestTimeoutMs: 60000          # max wait for the first response byte (default 60s)
  streamIdleTimeoutMs: 300000      # stream stall before treated as dead (default 300s — generous, so long-thinking models are not cut off)

The composition-entry config (cordis.patch.yml) accepts the same keys; a literal apiKey there takes precedence over the credential reference.

Troubleshooting

• Command Code API request to .../alpha/generate failed with retries — a transport-layer failure: fetch() never got an HTTP response (a 401/403/429 would say "API error"). Since 0.1.8 the message names the real root cause (ECONNREFUSED, ENOTFOUND, CERT_HAS_EXPIRED, socket hang up, …). Common causes: a required proxy (Node's fetch/undici ignores HTTP_PROXY/HTTPS_PROXY — configure a dispatcher or whitelist api.commandcode.ai), connection reset/throttled (firewall, GFW-style interference, unstable Wi-Fi), TLS interception (corporate MITM), or a transient blip retry recovers from.
• A long generation stops mid-stream — since 0.1.8 the adapter aborts after requestTimeoutMs (60s) with no first byte, and treats a stream stalling past streamIdleTimeoutMs (300s by default) as dead. Both surface as TIMEOUT with the stall duration; tune the knobs for slow-but-stable networks.
• "Reconnects" when a reasoning model thinks for a long time — the stream idle watchdog used to default to 120s, which is shorter than a frontier reasoning model's silent thinking phase (xhigh/max effort can stay quiet for minutes, and the official CLI sets no idle cap at all). Since 0.2.3 the default is 300s; if you still hit spurious timeouts on very long thinking, raise streamIdleTimeoutMs in the llm-commandcode section or on the settings page.
• Boot crash: ERR_MODULE_NOT_FOUND: Cannot find package 'dsh-commandcode-provider' — the patch row's name is the bare name, but pnpm only links the scoped name. Fix the row to name: "@mars-sea/dsh-commandcode-provider" — note the quotes (an unquoted @-prefixed scalar fails YAML parsing) — then restart.
• MODEL_NOT_IN_PLAN (403) — the model isn't in your plan. Pick an open-weight model or upgrade; the error names the model and links the docs.
• MISSING_CREDENTIAL — no key anywhere. Store one via the settings page, export COMMANDCODE_API_KEY, set config.apiKey, or run command-code login. The route and catalog stay browsable without a key.
• Models card shows "not configured" but requests work — the key came from ~/.commandcode/auth.json (the cmd login fallback), not the credential store. Paste it into the card once; both coexist fine.
• A reasoning model returns no visible text on short requests — it consumes output tokens on reasoning first; a small maxTokens can be exhausted before visible text. Normal.
• allowBuilds errors on dsh plugin add from git — copy the exact package key pnpm printed into pnpm-workspace.yaml and re-run (see Install).

Notes & limitations

• Image input is model-gated: only models the official registry lists with Vision accept images (see KNOWN_IMAGE_MODELS in src/adapter.ts). Text-only models throw UNSUPPORTED_CONTENT; Command Code's own CLI's client-side VISION fallback is not reproduced here — switch to a Vision model instead. Image input also requires the dsh attachment service.
• Switching to a text-only model in an image-bearing session is rejected by dsh itself — a harness-level guard (dsh-host-apiproxy's selectModel) refuses model-unavailable and cannot be relaxed from the plugin side. This bundle makes the message friendlier via its client half: it rewrites the rejection to "当前会话已包含图片，而模型 <model> 不支持图片输入；请选择支持图片的模型，或先移除会话中的图片。" (the error code and details pass through unchanged). Select a model the picker marks Image, remove the images first, or use an image-routing bundle (e.g. @deepseek-ai/dsh-llm-image-routing).
• No stop sequences (the wire format has none): requests carrying one throw UNSUPPORTED_OPTION.
• Reasoning blocks are not replayed into later turns (matches the official CLI); only tool calls with a paired tool result are replayed.
• The catalog endpoint is public; /alpha/generate requires your key.

Permissions & privacy

This plugin operates entirely within your dsh profile and your Command Code account. Local files: reads ~/.commandcode/auth.json only as a last-resort key fallback; reads/writes ~/.commandcode/models-cache.json; reads your key from $DSH_HOME/.credentials.yaml via the standard credential seam (never logged). Network: GET {apiBase}/provider/v1/models (public catalog) and POST {apiBase}/alpha/generate (your requests, authenticated), the body including your configured workingDir. No telemetry — the only outbound host is the Command Code API (api.commandcode.ai by default, configurable via apiBase).

Disabling / uninstalling

• Disable without removing: edit your profile's cordis.patch.yml and comment out (or remove) the llm-commandcode row, or set disabled: true, then restart.

• Uninstall completely:

  dsh plugin --profile web remove @mars-sea/dsh-commandcode-provider
  

  This removes the bundle dependency and its layer; your API key in the dsh credential store and ~/.commandcode/auth.json are left untouched.

Development

npm install
npm run typecheck   # tsc --noEmit
npm run build       # tsdown -> lib/

Community & feedback

• GitHub Repository
• GitHub Releases
• npm Package
• Linux.do 社区

License

MIT — see LICENSE. Portions ported from pi-commandcode-provider (MIT).