dsh-yunpa:本地凭据与登录态抓取

Preface

When an agent accesses sites like Tieba, NGA, Pixiv, and Alice Book House within DeepSeek Harness (DSH), the common obstacle is the login wall: either pasting cookies manually every time or writing account credentials into the conversation. The latter neither aligns with credential management practices nor facilitates reusing login states for structured scraping. dsh-yunpa is a networking plugin for DSH maintained by binskyz. It integrates “local encrypted credential vault,” “headless browser login state,” and “scraping tools with login state” into a single workflow, allowing the agent to reuse the state via tools after a single login. The following sections explain the positioning, capabilities, installation, and typical usage based on the GitHub repository README and package information.

What is it

dsh-yunpa (npm package name dsh-yunpa, current version 0.10.3, MIT license) targets content “behind login walls”: credentials are stored locally only (DPAPI-wrapped master key + AES-256-GCM; plaintext not saved to disk or sent to the conversation); the browser defaults to headless-shell no-window mode and blocks external connections to 11 Google backend domains. The action layer is implemented via the Chrome DevTools Protocol (CDP). The README specifies 31 auth_* and browser_* tools with no third-party dependencies. The settings entry is located under “Cloud Crawl” in DSH settings, featuring five tabs: Overview, Credential Vault, Password Vault, Sites, and Diagnostics.

Community directory page: https://www.skillhub.cn/plugins/binskyz/dsh-yunpa. The DSH ecosystem emphasizes “everything is a plugin”; SkillHub is an independent community directory with no official affiliation with DeepSeek / Hypothesis.

Core Functions

Credentials & Login

  • Local encrypted credential vault: auth_vault for remembering or forgetting account passwords; can also import cookies via auth_cookie.
  • Browser login: auth_login with mode=browser is the only path in the README that triggers a popup (e.g., saying “login to Tieba,” “help me log in to NGA” in the conversation).
  • Form login: auth_login with mode=form; requires providing the CAPTCHA code before calling it again.
  • Login state maintenance: auth_capture captures the login state (optional wipeProfile to wipe profile after capture); auth_status checks the current login state.

Fetching with Login

  • Single-chain scraping: auth_fetch, kind:"posts" for posts/floors, kind:"threads" for forum lists, etc.
  • Multi-page: auth_fetch {pages:20}, using pn for Tieba and page for NGA, with merging and deduplication, and continuous post numbers.

The README summarizes a chain example as follows:

Tieba: Forum list (kind=threads) → Post floors (kind=posts, pages=20) → Structured JSON saved to disk
NGA  : Post floors (pages=N)   → Author + Content
Pixiv: Work/Series page → Content
Book House: Book list → Chapters → Content

Edge Password Migration

Edge Password Vault v20 (App-Bound) cannot be decrypted offline; the plugin completes migration via “browser auto-fill → read DOM”: auth_edge_list to view entries in Edge, auth_pw_open → auto-fill once → auth_pw_grab to capture.

Settings Page & Self-Check

  • After installation, “Cloud Crawl” appears in DSH settings, with a cloud icon on the left sidebar.
  • For first-time use, it is recommended to run environment self-check and browser version check first (see the next section for commands).
  • Development-oriented self-checks: node check-all.mjs (13 items), node smoke.mjs (load-time smoke test, no browser required).

Installation & Enablement

Recommended installation from npm; commands must match the official README:

dsh plugin add dsh-yunpa

Restart DSH after installation. Upon success, “Cloud Crawl” appears in “Settings,” and tools mount with the bundle.

Runtime environment: package.json requires Node >=22.19. The README explicitly states Windows-only (dependencies like DPAPI, icacls, PowerShell, etc.).

When modifying plugin source code or troubleshooting mounting issues, the repository provides scripts like node install.mjs, node install.mjs --check, node recover.mjs; symptoms differ if one of the four installation conditions (profile dependencies, bundles, directory links, cordis entries) is missing. See the README table for details. The text body does not expand on “git clone” source code installation steps; please read the repository documentation directly if needed.

Typical Usage

Tool Side (Triggered in Conversation)

Say Action
Login Tieba / Help me log in to NGA auth_login mode=browser
Login with account password auth_login mode=form
Capture login state auth_capture (can use wipeProfile)
Check login state auth_status
Scrape this link auth_fetch (kind:"posts" / kind:"threads")
Scrape with pagination auth_fetch {pages:20}
Remember account password / Forget it auth_vault set / forget
I’ll give you the cookie auth_cookie
What passwords are in Edge auth_edge_list
Migrate passwords out auth_pw_open → auto-fill → auth_pw_grab

CLI Self-Check Before First Use

Execute in the plugin directory or as per README instructions:

node check-all.mjs          # 13-item self-check, proceed only when all green
node upgrade.mjs            # View browser version (--apply to update, includes sha256 and version check)

When not using the browser debug port, you can call auth_browser_close to close it; CDP defaults to binding to 127.0.0.1:9333–9336, any local process can connect; the README requires awareness of this limitation.

Scenarios & Warnings

Who is it for: Developers running DSH on Windows who need an agent to stably access the aforementioned Chinese communities or Pixiv and Book House, and wish to keep credentials local while reusing login states for scraping posts and pagination.

Please verify yourself before use:

  1. The plugin runs with the user privileges of the current DSH process and has no OS-level isolation; it is recommended to browse the source code and MIT license before installation to confirm it aligns with your security policy.
  2. Cookies in the profile are v10 format and can be decrypted by the same user process; for sensitive sites, it is recommended to use auth_capture {wipeProfile:true}.
  3. Windows only; Linux / macOS are not within the README support scope.
  4. For use only on your own accounts and devices; credential security depends on local DPAPI and system account boundaries.

Conclusion

dsh-yunpa combines the encrypted credential vault, headless browser login state, and CDP scraping into a set of DSH tools, reducing the frequency of writing passwords and cookies into the conversation, while covering common login wall scenarios like Tieba, NGA, Pixiv, and Alice Book House. Install using dsh plugin add dsh-yunpa. After enabling, rely on the “Cloud Crawl” settings page and auth_* tools as the main path.

羽毛球分组比赛记分
小程序二维码

欢迎使用《羽毛球分组比赛记分》微信小程序

Xiaoye