feat(deepseek-web): full DeepSeek web API executor with PoW solver by oyi77 · Pull Request #2295 · cheaper-inference/OmniRoute

oyi77 · 2026-05-16T01:23:04Z

Summary

Adds a complete executor for DeepSeek's native web API (deepseek-web provider) with full feature support:

Authentication: ds_session_id cookie → Bearer token from /api/v0/users/current
Proof-of-Work: DeepSeekHashV1 solver using custom Keccak sponge (exact port from DeepSeek's Web Worker)
SSE Streaming: Parses DeepSeek's native fragment format → OpenAI-compatible SSE output
Web Search: Toggle via search_enabled in request body
Deep Thinking: Toggle via thinking_enabled + x-thinking-enabled header
File Attachments: Pass file IDs via ref_file_ids in request body
Auto-refresh: Session validation and retry on auth failures

API Flow

ds_session_id cookie
  → GET /api/v0/users/current → Bearer token
  → POST /api/v0/chat_session/create → session ID
  → POST /api/v0/chat/create_pow_challenge → PoW challenge
  → Solve PoW (DeepSeekHashV1 custom Keccak)
  → POST /api/v0/chat/completion with x-ds-pow-response header
  → SSE stream → OpenAI-compatible chunks

Files Changed

File	Description
`open-sse/executors/deepseek-web.ts`	Main executor (530 lines)
`open-sse/executors/deepseek-web-with-auto-refresh.ts`	Auto-refresh wrapper
`open-sse/lib/deepseek-pow.ts`	PoW solver TypeScript wrapper
`open-sse/lib/deepseek-pow-solver.cjs`	Exact Keccak sponge from DeepSeek worker
`open-sse/executors/index.ts`	Executor registration
`src/shared/constants/providers.ts`	Provider constant
`src/lib/providers/wrappers/deepseekWeb.ts`	Provider wrapper
`tests/unit/deepseek-web.test.ts`	23 unit tests (all passing)
`tests/live/deepseek-web-live.test.ts`	Live integration test

Test Plan

23/23 unit tests pass
TypeScript compilation clean
ESLint clean
Live test: DeepSeek returns "Hello" via Playwright + Node.js PoW solver
PoW solver verified against captured DeepSeek worker output
SSE stream parsing verified with real DeepSeek response

Live Test Proof

[1] Token: KvJNH5/Ns8DFcZrNaShwwYg+/2ZPWJMpw7HdbfSvz0gmOfHFmfOPXMYuIIaf...
[2] Session: 3e48e74f-1ed0-42ee-a736-f52ce48c5c81
[3] Challenge: difficulty=144000, algo=DeepSeekHashV1
[4] PoW solved: nonce=65112
[5] Verify: hash(65112) = a77891f7a3020f6abc44cc932f0c48d3... ✅ Match
[6] Status: 200
[7] Content: 'Hello'

✅ LIVE TEST PASSED! DeepSeek says: 'Hello'

Unit Test Results

ok 1 - DeepSeekWebExecutor registered as deepseek-web and ds-web
ok 2 - getExecutor returns DeepSeekWebWithAutoRefreshExecutor
ok 3 - alias ds-web resolves same executor
ok 4 - provider name is deepseek-web
ok 5 - execute returns 400 without ds_session_id cookie
ok 6 - execute returns 400 with empty credentials
ok 7 - testConnection returns false with empty credentials
ok 8 - testConnection returns false without ds_session_id
ok 9 - execute: full flow with mocked API (streaming)
ok 10 - execute: full flow with mocked API (non-streaming)
ok 11 - execute: sends PoW response header
ok 12 - execute: handles API error (token fetch fails)
ok 13 - execute: handles 401 from DeepSeek
ok 14 - execute: handles DeepSeek JSON error (40003 INVALID_TOKEN)
ok 15 - execute: maps model to deepseek_r1 with thinking
ok 16 - DeepSeekWebWithAutoRefresh extends DeepSeekWebExecutor
ok 17 - isSessionValid starts false
ok 18 - execute: handles abort signal gracefully
ok 19 - execute: passes search_enabled from body
ok 20 - execute: search_enabled defaults to false
ok 21 - execute: thinking_enabled from body overrides model mapping
ok 22 - execute: passes ref_file_ids from body
ok 23 - execute: maps expert model with thinking

🤖 Generated with OpenClaude

Adds a complete executor for DeepSeek's native web API with: - Authentication via ds_session_id cookie → Bearer token from /users/current - Proof-of-Work (DeepSeekHashV1) solver using custom Keccak sponge - SSE stream response parsing with OpenAI-compatible output - Web search toggle (search_enabled) - Deep thinking toggle (thinking_enabled + x-thinking-enabled header) - File attachment support (ref_file_ids) - Auto-refresh executor for session management - 23 unit tests covering all features + live integration test API flow: /users/current → /chat_session/create → /create_pow_challenge → PoW solve → /chat/completion with native DeepSeek body format Co-Authored-By: OpenClaude (mimo-v2.5-pro) <openclaude@gitlawb.com>

gemini-code-assist

Code Review

This pull request introduces the DeepSeekWebExecutor and DeepSeekWebWithAutoRefreshExecutor to support the DeepSeek web API, including handling Proof-of-Work (PoW) challenges and session management. Feedback highlights several critical improvements: ensuring SSE stream errors are propagated rather than swallowed (violating Rule 6), offloading the synchronous PoW solver to a worker thread to prevent blocking the Node.js event loop, and using Zod schemas for request body validation as per Rule 8. Additionally, the reviewer recommended removing empty code blocks and replacing any types with specific interfaces for better type safety.

gemini-code-assist · 2026-05-16T01:24:14Z

+      } catch (err) {
+        // Stream error — emit what we have
+      }


This block violates the repository style guide (Rule 6), which prohibits silently swallowing errors in SSE streams. Instead of just catching the error and allowing the stream to close normally, you should propagate the error to the controller so the client is aware of the failure.

Suggested change

} catch (err) {

// Stream error — emit what we have

}

} catch (err) {

controller.error(err);

}

References

Never silently swallow errors in SSE streams — propagate them or abort the stream cleanly.

gemini-code-assist · 2026-05-16T01:24:14Z

+  for (let nonce = 0; nonce < difficulty; nonce++) {
+    if (h.copy().update(String(nonce)).digest("hex") === challenge) {
+      return nonce;
+    }
+  }


The PoW solver is a CPU-intensive task that runs synchronously on the main thread. In a Node.js environment, this will block the event loop for the duration of the calculation, significantly impacting the server's ability to handle concurrent requests. For a production-grade executor, this should be offloaded to a Worker Thread. If a worker is not feasible, at least consider yielding the event loop periodically using setImmediate or process.nextTick within the loop.

gemini-code-assist · 2026-05-16T01:24:14Z

+    const bodyObj = (body || {}) as Record<string, unknown>;
+    const messages = (Array.isArray(bodyObj.messages) ? bodyObj.messages : []) as Array<{
+      role: string;
+      content: string;
+    }>;


Adhere to the repository style guide (Rule 8) by validating the request body using Zod schemas from src/shared/validation/schemas.ts. Manual extraction and casting of fields from an unknown body bypasses type safety and validation logic.

References

Always validate inputs with Zod schemas from src/shared/validation/schemas.ts.

gemini-code-assist · 2026-05-16T01:24:14Z

+            if ((data as any)?.click_behavior !== undefined) {
+              // close event — emit [DONE] if not already
+            }
+          }


This block is empty and serves no functional purpose. It should either be implemented to handle the click_behavior event or removed to keep the code clean.

gemini-code-assist · 2026-05-16T01:24:14Z

+            }
+
+            // Extract content from DeepSeek fragments
+            const fragments = (data as any)?.v?.response?.fragments;


Avoid using any for type casting when processing API responses. Defining a specific interface for the DeepSeek response structure would improve type safety and maintainability.

…2295) - DeepSeekWebExecutor with ds_session_id cookie auth - DeepSeekWebWithAutoRefreshExecutor for session management - Keccak-based PoW solver (DeepSeekHashV1) - SSE stream transformation to OpenAI format - Provider constant and alias (ds-web) - 23 unit tests + live integration test Authored-by: Paijo <oyi77@users.noreply.github.com>

diegosouzapw · 2026-05-16T03:28:25Z

✅ Merged into release/v3.8.0 — DeepSeek Web executor with PoW solver fully integrated. Thanks @oyi77!

@thepigdestroyer

…, #2291, #2294, #2295, #2299 - Add 8 missing contributor PR entries to [Unreleased] section - Add 3 new contributors to the community table: @thepigdestroyer (2 PRs), @josephvoxone (1 PR), @mrmm (1 PR) - Update counts: @oyi77 12→14, @backryun 8→9, @ddarkr 3→4, @hartmark 2→4 - Compensates for cherry-picked PRs that couldn't be properly merged via GitHub (branch deleted or fork restriction)

Rahulsharma0810 · 2026-05-20T22:45:28Z

@oyi77 it not accepting

ds_session_id=YOUR_NEW_FRESH_VALUE_HERE

oyi77 · 2026-05-20T22:58:09Z

@oyi77 it not accepting

ds_session_id=YOUR_NEW_FRESH_VALUE_HERE

try paste your full cookie string

Rahulsharma0810 · 2026-05-21T17:39:55Z

Not working with any model in Deepseek Web

…heaper-inference#2295) - DeepSeekWebExecutor with ds_session_id cookie auth - DeepSeekWebWithAutoRefreshExecutor for session management - Keccak-based PoW solver (DeepSeekHashV1) - SSE stream transformation to OpenAI format - Provider constant and alias (ds-web) - 23 unit tests + live integration test Authored-by: Paijo <oyi77@users.noreply.github.com>

…-web-executor-v2 Integrated into release/v3.8.0

@thepigdestroyer

…heaper-inference#2288, cheaper-inference#2289, cheaper-inference#2290, cheaper-inference#2291, cheaper-inference#2294, cheaper-inference#2295, cheaper-inference#2299 - Add 8 missing contributor PR entries to [Unreleased] section - Add 3 new contributors to the community table: @thepigdestroyer (2 PRs), @josephvoxone (1 PR), @mrmm (1 PR) - Update counts: @oyi77 12→14, @backryun 8→9, @ddarkr 3→4, @hartmark 2→4 - Compensates for cherry-picked PRs that couldn't be properly merged via GitHub (branch deleted or fork restriction)

…heaper-inference#2295) - DeepSeekWebExecutor with ds_session_id cookie auth - DeepSeekWebWithAutoRefreshExecutor for session management - Keccak-based PoW solver (DeepSeekHashV1) - SSE stream transformation to OpenAI format - Provider constant and alias (ds-web) - 23 unit tests + live integration test Authored-by: Paijo <oyi77@users.noreply.github.com>

…-web-executor-v2 Integrated into release/v3.8.0

@thepigdestroyer

…heaper-inference#2288, cheaper-inference#2289, cheaper-inference#2290, cheaper-inference#2291, cheaper-inference#2294, cheaper-inference#2295, cheaper-inference#2299 - Add 8 missing contributor PR entries to [Unreleased] section - Add 3 new contributors to the community table: @thepigdestroyer (2 PRs), @josephvoxone (1 PR), @mrmm (1 PR) - Update counts: @oyi77 12→14, @backryun 8→9, @ddarkr 3→4, @hartmark 2→4 - Compensates for cherry-picked PRs that couldn't be properly merged via GitHub (branch deleted or fork restriction)

…heaper-inference#2295) - DeepSeekWebExecutor with ds_session_id cookie auth - DeepSeekWebWithAutoRefreshExecutor for session management - Keccak-based PoW solver (DeepSeekHashV1) - SSE stream transformation to OpenAI format - Provider constant and alias (ds-web) - 23 unit tests + live integration test Authored-by: Paijo <oyi77@users.noreply.github.com>

…-web-executor-v2 Integrated into release/v3.8.0

@thepigdestroyer

…heaper-inference#2288, cheaper-inference#2289, cheaper-inference#2290, cheaper-inference#2291, cheaper-inference#2294, cheaper-inference#2295, cheaper-inference#2299 - Add 8 missing contributor PR entries to [Unreleased] section - Add 3 new contributors to the community table: @thepigdestroyer (2 PRs), @josephvoxone (1 PR), @mrmm (1 PR) - Update counts: @oyi77 12→14, @backryun 8→9, @ddarkr 3→4, @hartmark 2→4 - Compensates for cherry-picked PRs that couldn't be properly merged via GitHub (branch deleted or fork restriction)

oyi77 requested a review from diegosouzapw as a code owner May 16, 2026 01:23

oyi77 mentioned this pull request May 16, 2026

feat: DeepSeek web API executor with native auth, PoW solver, and full feature support #2296

Closed

gemini-code-assist Bot reviewed May 16, 2026

View reviewed changes

diegosouzapw changed the base branch from main to release/v3.8.0 May 16, 2026 03:07

diegosouzapw closed this May 16, 2026

diegosouzapw reopened this May 16, 2026

diegosouzapw merged commit 3046705 into cheaper-inference:release/v3.8.0 May 16, 2026
3 checks passed

mrmm mentioned this pull request May 16, 2026

fix(deepseek-web): lazy-load PoW solver to unblock standalone build #2307

Closed

This was referenced May 16, 2026

Release v3.8.0 #2248

Merged

Release v3.8.0 — next development cycle #2323

Merged

Release v3.8.0 — post-release hotfixes #2402

Merged

Release/v3.8.0 — full changelog with 660+ commits #2419

Merged

This was referenced May 20, 2026

fix(deepseek-web): rewrite auth to userToken Bearer + WASM PoW solver #2452

Merged

fix(deepseek-web): rewrite auth to userToken Bearer + WASM PoW solver #2501

Closed

This was referenced May 26, 2026

[bug] deepseek-web pow-solver fails to load: "onmessage is not defined" in strict mode #2724

Closed

[feature] Add Web Cookie providers: Qwen, Kimi, GLM/Z.ai, Xiaomi MiMo, MiniMax (umbrella) #2725

Closed

HouMinXi pushed a commit to HouMinXi/OmniRoute that referenced this pull request Aug 2, 2026

Merge pull request cheaper-inference#2295 from oyi77/feature/deepseek…

40aed40

…-web-executor-v2 Integrated into release/v3.8.0

Poid-ZA pushed a commit to Poid-ZA/OmniRoute that referenced this pull request Aug 5, 2026

Merge pull request cheaper-inference#2295 from oyi77/feature/deepseek…

89b1f2b

…-web-executor-v2 Integrated into release/v3.8.0

diegosouzapw mentioned this pull request Aug 27, 2026

fix(deepseek-web): replace unlicensed PoW artifacts #11732

Merged

muhamadgalihsaputra pushed a commit to niyatna/NiyatnaRoute that referenced this pull request Sep 27, 2026

Merge pull request cheaper-inference#2295 from oyi77/feature/deepseek…

73c4a31

…-web-executor-v2 Integrated into release/v3.8.0

Navigation Menu

Repository navigation

feat(deepseek-web): full DeepSeek web API executor with PoW solver - #2295

feat(deepseek-web): full DeepSeek web API executor with PoW solver#2295
diegosouzapw merged 1 commit into
cheaper-inference:release/v3.8.0from
oyi77:feature/deepseek-web-executor-v2

oyi77 commented May 16, 2026

Uh oh!

gemini-code-assist Bot left a comment

Uh oh!

gemini-code-assist Bot May 16, 2026

Uh oh!

gemini-code-assist Bot May 16, 2026

Uh oh!

gemini-code-assist Bot May 16, 2026

Uh oh!

gemini-code-assist Bot May 16, 2026

Uh oh!

gemini-code-assist Bot May 16, 2026

Uh oh!

diegosouzapw commented May 16, 2026

Uh oh!

Uh oh!

Rahulsharma0810 commented May 20, 2026

Uh oh!

oyi77 commented May 20, 2026

Uh oh!

Rahulsharma0810 commented May 21, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

oyi77 commented May 16, 2026

Summary

API Flow

Files Changed

Test Plan

Live Test Proof

Unit Test Results

Uh oh!

gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

Code Review

Uh oh!

gemini-code-assist Bot May 16, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot May 16, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot May 16, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot May 16, 2026

Choose a reason for hiding this comment

Uh oh!

gemini-code-assist Bot May 16, 2026

Choose a reason for hiding this comment

Uh oh!

diegosouzapw commented May 16, 2026

Uh oh!

Uh oh!

Rahulsharma0810 commented May 20, 2026

Uh oh!

oyi77 commented May 20, 2026

Uh oh!

Rahulsharma0810 commented May 21, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Rahulsharma0810 commented May 21, 2026 •

edited

Loading