dsh-hiddify

dsh-hiddify

Drive a local Hiddify installation from DeepSeek Harness — without opening its desktop GUI. The plugin runs HiddifyCli.exe in standalone mode to start and stop the core, hot-switch split-tunnel modes, rotate exit nodes, and search or fetch pages through the proxy.

Part of Cjrrrrrrrr/dsh-plugins. Windows only.

What it solves

Seven tools

Requirements

• Windows (uses taskkill, reg, powershell and Get-NetRoute).
• Hiddify installed, with a subscription already added in the client. The plugin drives Hiddify's own HiddifyCli.exe; it does not ship or replace it.
• No administrator rights. The system proxy is written under HKCU only.

Install

dsh plugin add github:Cjrrrrrrrr/dsh-plugins#path:/packages/dsh-hiddify

Then set two paths. The defaults point at the author's own install location, and Hiddify has no fixed install path — edit both lines in your profile patch before starting the core:

- id: hiddify
  name: '@local/dsh-hiddify'
  config:
    cliPath: 'C:\path\to\Hiddify\HiddifyCli.exe'
    workDir: 'C:\path\to\Hiddify'

Configuration

The three split-tunnel modes

Private networks stay direct in every mode, so the LAN never drops: 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16, 127.0.0.0/8, 169.254.0.0/16, 100.64.0.0/10, fc00::/7, fe80::/10, ::1/128. Internal suffixes: localhost, .local, .lan, .internal, .home.arpa, .arpa (resolved by the system resolver, dns-local).

Verified behaviour

Measured on Windows on 2026-10-16:

Search engines measured through the proxy (2026-10-16)

Conclusion: the engines that actually work from outside are DuckDuckGo (plus Lite) and Bing, and both rate-limit or poison results by exit IP. The search layer therefore self-checks relevance and automatically rotates the node and retries when the hit count is too low.

Layout

lib/index.js   Cordis plugin — registers the seven tools
lib/core.js    HiddifyCli control layer (find subscription / build / inject split-tunnel / start & stop / Clash API)
lib/net.js     system-proxy switch + three-way connectivity probe
lib/proxy.js   zero-dependency CONNECT-tunnel HTTP client
lib/search.js  multi-engine search + HTML-to-text
test/          end-to-end smoke test, seven-tool mock-host test, and a long-running-core helper
data/          runtime state, generated configs and logs (created at run time)

Known limits

• Windows only — depends on taskkill, reg, powershell and Get-NetRoute.
• The system proxy is changed under HKCU only and needs no administrator rights. TUN mode is not enabled by this plugin: it needs administrator rights and the Wintun driver, so hiddify_start uses the system proxy plus a local port instead.
• hiddify_fetch extracts text only — no JavaScript rendering, so single-page apps yield just their skeleton.
• No Google in the search layer: it is behind a JS wall and no workaround was implemented.

License

MIT