Preface¶
When an agent accesses sites like Tieba, NGA, Pixiv, and Alice Book House within DeepSeek Harness (DSH), the common obstacle is the login wall: either pasting cookies manually every time or writing account credentials into the conversation. The latter neither aligns with credential management practices nor facilitates reusing login states for structured scraping. dsh-yunpa is a networking plugin for DSH maintained by binskyz. It integrates “local encrypted credential vault,” “headless browser login state,” and “scraping tools with login state” into a single workflow, allowing the agent to reuse the state via tools after a single login. The following sections explain the positioning, capabilities, installation, and typical usage based on the GitHub repository README and package information.
What is it¶
dsh-yunpa (npm package name dsh-yunpa, current version 0.10.3, MIT license) targets content “behind login walls”: credentials are stored locally only (DPAPI-wrapped master key + AES-256-GCM; plaintext not saved to disk or sent to the conversation); the browser defaults to headless-shell no-window mode and blocks external connections to 11 Google backend domains. The action layer is implemented via the Chrome DevTools Protocol (CDP). The README specifies 31 auth_* and browser_* tools with no third-party dependencies. The settings entry is located under “Cloud Crawl” in DSH settings, featuring five tabs: Overview, Credential Vault, Password Vault, Sites, and Diagnostics.
Community directory page: https://www.skillhub.cn/plugins/binskyz/dsh-yunpa. The DSH ecosystem emphasizes “everything is a plugin”; SkillHub is an independent community directory with no official affiliation with DeepSeek / Hypothesis.
Core Functions¶
Credentials & Login¶
- Local encrypted credential vault:
auth_vaultfor remembering or forgetting account passwords; can also import cookies viaauth_cookie. - Browser login:
auth_loginwithmode=browseris the only path in the README that triggers a popup (e.g., saying “login to Tieba,” “help me log in to NGA” in the conversation). - Form login:
auth_loginwithmode=form; requires providing the CAPTCHA code before calling it again. - Login state maintenance:
auth_capturecaptures the login state (optionalwipeProfileto wipe profile after capture);auth_statuschecks the current login state.
Fetching with Login¶
- Single-chain scraping:
auth_fetch,kind:"posts"for posts/floors,kind:"threads"for forum lists, etc. - Multi-page:
auth_fetch {pages:20}, usingpnfor Tieba andpagefor NGA, with merging and deduplication, and continuous post numbers.
The README summarizes a chain example as follows:
Tieba: Forum list (kind=threads) → Post floors (kind=posts, pages=20) → Structured JSON saved to disk
NGA : Post floors (pages=N) → Author + Content
Pixiv: Work/Series page → Content
Book House: Book list → Chapters → Content
Edge Password Migration¶
Edge Password Vault v20 (App-Bound) cannot be decrypted offline; the plugin completes migration via “browser auto-fill → read DOM”: auth_edge_list to view entries in Edge, auth_pw_open → auto-fill once → auth_pw_grab to capture.
Settings Page & Self-Check¶
- After installation, “Cloud Crawl” appears in DSH settings, with a cloud icon on the left sidebar.
- For first-time use, it is recommended to run environment self-check and browser version check first (see the next section for commands).
- Development-oriented self-checks:
node check-all.mjs(13 items),node smoke.mjs(load-time smoke test, no browser required).
Installation & Enablement¶
Recommended installation from npm; commands must match the official README:
dsh plugin add dsh-yunpa
Restart DSH after installation. Upon success, “Cloud Crawl” appears in “Settings,” and tools mount with the bundle.
Runtime environment: package.json requires Node >=22.19. The README explicitly states Windows-only (dependencies like DPAPI, icacls, PowerShell, etc.).
When modifying plugin source code or troubleshooting mounting issues, the repository provides scripts like node install.mjs, node install.mjs --check, node recover.mjs; symptoms differ if one of the four installation conditions (profile dependencies, bundles, directory links, cordis entries) is missing. See the README table for details. The text body does not expand on “git clone” source code installation steps; please read the repository documentation directly if needed.
Typical Usage¶
Tool Side (Triggered in Conversation)¶
| Say | Action |
|---|---|
| Login Tieba / Help me log in to NGA | auth_login mode=browser |
| Login with account password | auth_login mode=form |
| Capture login state | auth_capture (can use wipeProfile) |
| Check login state | auth_status |
| Scrape this link | auth_fetch (kind:"posts" / kind:"threads") |
| Scrape with pagination | auth_fetch {pages:20} |
| Remember account password / Forget it | auth_vault set / forget |
| I’ll give you the cookie | auth_cookie |
| What passwords are in Edge | auth_edge_list |
| Migrate passwords out | auth_pw_open → auto-fill → auth_pw_grab |
CLI Self-Check Before First Use¶
Execute in the plugin directory or as per README instructions:
node check-all.mjs # 13-item self-check, proceed only when all green
node upgrade.mjs # View browser version (--apply to update, includes sha256 and version check)
When not using the browser debug port, you can call auth_browser_close to close it; CDP defaults to binding to 127.0.0.1:9333–9336, any local process can connect; the README requires awareness of this limitation.
Scenarios & Warnings¶
Who is it for: Developers running DSH on Windows who need an agent to stably access the aforementioned Chinese communities or Pixiv and Book House, and wish to keep credentials local while reusing login states for scraping posts and pagination.
Please verify yourself before use:
- The plugin runs with the user privileges of the current DSH process and has no OS-level isolation; it is recommended to browse the source code and MIT license before installation to confirm it aligns with your security policy.
- Cookies in the profile are v10 format and can be decrypted by the same user process; for sensitive sites, it is recommended to use
auth_capture {wipeProfile:true}. - Windows only; Linux / macOS are not within the README support scope.
- For use only on your own accounts and devices; credential security depends on local DPAPI and system account boundaries.
Conclusion¶
dsh-yunpa combines the encrypted credential vault, headless browser login state, and CDP scraping into a set of DSH tools, reducing the frequency of writing passwords and cookies into the conversation, while covering common login wall scenarios like Tieba, NGA, Pixiv, and Alice Book House. Install using dsh plugin add dsh-yunpa. After enabling, rely on the “Cloud Crawl” settings page and auth_* tools as the main path.
- Community directory: https://www.skillhub.cn/plugins/binskyz/dsh-yunpa
- Source code & documentation: https://github.com/binskyz/dsh-yunpa