WZZNNE/DSH-CyberWorkStation--plugins-dsh-credentials-keyring ↗★ 11
dsh-credentials-keyring
Windows Credential Manager backend for DeepSeek Harness credentials: the stock local provider with its reference half stored in the system keyring instead of a plaintext file. Secrets migrate on write; every keyring failure falls back to the inherited behavior.
安装
此插件尚未提供可验证的 bundle,或兼容性检查未通过。请先阅读仓库说明。 阅读完整 README ↗
说明文档
阅读完整 README ↗dsh-credentials-keyring
中文 | English below
把 dsh 的凭据存进 Windows 凭据管理器,替换本体默认的明文 .credentials.yaml 提供者(同一个 credentials 服务,其它插件无感)。
- 记录名
dsh:(如dsh:OPENROUTER_API_KEY);环境变量仍然优先;写入即迁移(第一次在任何面板「保存密钥」时,该引用从旧文件搬进钥匙串);钥匙串故障一律记警告、回退只读。 - 凭据中心页(启动器 / dsh 设置)里「来源:windows-credential-manager」就是它。
安装(不是 bundle)
这个插件没有 dsh.bundle.patch:它要替换本体的 credentials 提供者,必须先把本体那条禁用,所以只能作为 profile 自己 cordis.patch.yml 的一层。setup.cmd 通过 launcher/dsh-patch-layers.mjs 幂等地写入这两段(手工亦可):
- id: credentials
disabled: true
- insert:
- id: credentials-keyring
name: 'dsh-credentials-keyring'
启动器「自检」按 profile 的 patch 文件识别它(bundles 列表里不会有它,这是正常的)。
Stores dsh credentials in the Windows Credential Manager (dsh: records) instead of the stock plaintext file; environment variables still win, secrets migrate on the first write, and a keyring failure degrades to read-only with a warning. It replaces the stock credentials provider, so it is a layer of the profile's own cordis.patch.yml (written idempotently by launcher/dsh-patch-layers.mjs from setup.cmd), not a bundle; the launcher self-check reads that file to find it.