kilo-zen2dsh
Kilo Gateway free models for DeepSeek Harness (DSH)
- Stars
- 6
- Language
- TypeScript
- Created
- Aug 31, 2026
- Updated
- Oct 3, 2026
Introduction
kilo-zen2dsh
Kilo Gateway and OpenCode Zen free models, natively inside DSH (DeepSeek Harness).
Kilo's free lane is keyless. OpenCode Zen is an independent, compatibility lane whose anonymous availability is controlled by the Zen gateway.
English | 简体中文
kilo-zen2dsh registers native DSH LlmAdapters backed by two independent
OpenAI-compatible gateways:
kilo2dsh→ Kilo Gateway (/api/gateway/modelsand/api/gateway/chat/completions)opencode2dsh→ OpenCode Zen (/zen/v1/modelsand the model-specific/chat/completionsor/responsesendpoint)
Kilo requests are genuinely keyless: the plugin suppresses the generated
Authorization header on the wire. Zen's compatibility lane uses the public
Bearer public placeholder and OpenCode-compatible request markers by default;
the gateway may still require its own anonymous eligibility, quota, or a user
account. Neither provider is an authentication or billing bypass.
Highlights
- Native adapter, no child process or local port in the published package.
- Dynamic free-model discovery using Kilo's
isFree/is_freeflag, withkilo-auto/freeand:freesuffix compatibility fallbacks. - Independent OpenCode Zen catalog and adapter (
opencode2dsh) with the documented free model IDs, a separate cache, and Responses API routing formuse-spark-1.2-contributor-free. - Text-output and tool-capable models only, suitable for DSH agent turns.
- Startup retry, periodic refresh, seven-day disk cache, and a health snapshot.
- Optional authenticated Kilo or Zen token for compatible deployments; no account token is enabled by default.
Install
dsh plugin --profile web add @huanx/kilo-zen2dsh
When using this checkout before the npm package is published, build a local tarball instead:
cd packages/plugin
pnpm install
pnpm pack
dsh plugin --profile web add ./huanx-kilo-zen2dsh-0.4.5.tgz
Restart dsh web, open the model picker, and choose a model in either the
kilo2dsh (Kilo) or opencode2dsh (Zen) provider group. Node.js 20 or newer is
required.
Configuration
The defaults are keyless and point at the public Kilo gateway:
- id: kilo2dsh
name: '@huanx/kilo-zen2dsh'
config:
mode: adapter
providerId: kilo2dsh
gatewayBaseUrl: https://api.kilo.ai/api/gateway
refreshSeconds: 300
requireTools: true
zenEnabled: true
To use an authenticated gateway token, set upstreamApiKeyEnv explicitly.
Leaving it empty is intentional; the plugin will not pick up
KILO_API_KEY (or another ambient secret) by accident.
| Option | Default | Description |
|---|---|---|
mode | adapter | Native adapter. sidecar is an optional legacy Go bridge. |
providerId | kilo2dsh | DSH route name. |
gatewayBaseUrl | https://api.kilo.ai/api/gateway | Kilo-compatible gateway base URL. |
refreshSeconds | 300 | Model catalog refresh interval. |
requireTools | true | Hide free models that do not advertise tools. |
maxOutputTokens | 524288 | Kilo gateway compatibility output ceiling; null disables it. Per-model budgets are derived from the context window and need no configuration. |
upstreamApiKeyEnv | empty | Environment variable to opt into an explicit token. |
anonymousKey | empty | Optional token for a private compatible gateway; empty means no auth header. |
zenEnabled | true | Register the independent OpenCode Zen adapter in adapter mode. |
zenProviderId | opencode2dsh | DSH route name for Zen. |
zenBaseUrl | https://opencode.ai/zen | OpenCode Zen root URL. |
zenUserAgent | empty | Optional compatibility User-Agent; empty derives the OpenCode format. |
zenApiKeyEnv | empty | Optional Zen account-token environment variable. |
zenAnonymousKey | public | Zen anonymous placeholder; set empty for a header-less private deployment. |
Set zenEnabled: false when you only want Kilo, or when the Zen gateway is
returning an anonymous-lane 429. sidecar mode is the legacy Go bridge and
currently exposes Kilo only; the two-provider setup is implemented in native
adapter mode.
Wire behavior
Kilo:
GET https://api.kilo.ai/api/gateway/models
POST https://api.kilo.ai/api/gateway/chat/completions
(no Authorization header for the default free lane)
OpenCode Zen:
GET https://opencode.ai/zen/v1/models
POST https://opencode.ai/zen/v1/chat/completions
(Bearer public + OpenCode compatibility headers)
POST https://opencode.ai/zen/v1/responses
(used for Responses-only free models)
The Kilo adapter sends ordinary OpenAI-compatible JSON/SSE plus Kilo correlation
headers (X-KILOCODE-EDITORNAME, X-KILOCODE-TASKID, and
X-KILOCODE-PROJECTID). The Zen adapter sends the OpenCode compatibility
marker and correlation headers required by the current anonymous lane. This is
an upstream compatibility requirement, not a guarantee that Zen will accept
third-party clients.
The model filter is deliberately conservative:
isFreeoris_freeis authoritative when present.- If the flag is absent,
kilo-auto/free,openrouter/free, and IDs ending in:free/-freeare accepted. - Image-output models and models without advertised tool support are hidden by default.
Automatic context and output-limit reconciliation
Kilo model-directory records are not always internally consistent: a limit may
be present on the top-level record, top_provider, or a nested limit(s)
object, and compatible gateways use several spellings. The adapter merges
those declarations and uses the smallest positive context limit. It keeps the
advertised context window for prompt history, while calculating a separate
safe output budget.
The current gateway catalog advertises minimax/minimax-m3:free with a
943,718-token completion limit, but the backend rejects requests above
524,288. The adapter therefore applies a 524,288-token gateway compatibility
ceiling (or the smaller model-specific limit) to defaultMaxTokens and to
both max_tokens and max_completion_tokens immediately before the wire
request. An oversized default supplied by DSH is consequently reduced
automatically; callers do not need to edit their model configuration. This
keeps a 1M-token context declaration available for input while preventing the
400 error shown by MiniMax-M3. The compatibility ceiling is Kilo-specific;
OpenCode Zen keeps the limits reported by its own catalog.
Output budgets scale with the window
A gateway's max_completion_tokens is a per-request maximum, while DSH reads
defaultMaxTokens as the budget it must reserve on every request. Kilo's free
lane reports the OpenRouter-style 90%-of-window figure, which breaks the harness
twice: the request asks for an answer as large as the remaining window (prompt +
output exceeds the limit, and the gateway answers 400 requested about 262507 tokens ... maximum context length is 262144), and compaction-basic reserves the
same figure, so contextWindow - maxTokens - headroomTokens <= 0 leaves it
without a pressure budget and automatic compaction stops working exactly when it
is needed.
The adapter therefore translates the number itself, with no configuration:
- Declared budget scales with the window —
defaultMaxTokensnever exceeds 25% of the context window (a smaller model-specific declaration still wins).qwen/qwen3.8-27b:freedrops from 235,929 to 65,536, which leaves 196,608 tokens of prompt budget and a 131,072-token compaction pressure budget; declarations that equal the window (stepfun/step-3.7-flash:free) collapse the same way. Note the pressure budget is only positive for windows above ~87,381 tokens, because compaction-basic reserves a fixed 65,536-token headroom of its own: smaller windows stay outside automatic compaction at any share, which no output declaration can fix. - Each request is clamped against the estimated prompt — before dispatch the
adapter estimates input tokens from the prompt's structure and limits
max_tokenstowindow - estimate - safety margin, so prompt + answer always fit, however large the conversation has grown. pi-ai applies a similar clamp of its own, but it assumes ~4 characters per token everywhere, which is optimistic for tool payloads; the adapter's estimate is what protects those. - The estimate is conservative by construction — measured against
cl100k_base, one chars-per-token constant cannot cover content whose real density spans 5.58 (prose) to 0.38 (emoji) characters per token. The estimator therefore classifies each whitespace-separated run: word-sized runs are charged fragment by fragment, while long runs are split into code-like (structural punctuation), data-like (base64, hex, ids — checked by vowel fraction, sincesha512-…looks nothing like a word) and word-like, each with its own measured cost. The test suite pins eleven such classes to counts recorded fromcl100k_baseand asserts the estimate is never below them — an earlier version charged every ASCII letter at 4.3 chars/token and under-counted base64 by 2.6x, which reproduced the very 400 this budget exists to prevent. - The estimate learns from the gateway — every successful response carries
the endpoint's own prompt count. The adapter folds that ratio back into a
per-model calibration factor (exponential moving average, bounded to
[0.5, 4]), which removes the systematic drift the constants leave behind: the estimator is deliberately pessimistic (up to 2.0x on tag-heavy HTML), and a route whose real prompt turns out even denser than any measured class can now be corrected upward, which a clamp at 1.0 made impossible. The cached part of the prompt is added back before folding, because DSH reports cached input separately (inputTokensis the uncached remainder) and a long cached session would otherwise look like a prompt an order of magnitude too small. - A prompt that leaves no room reports a recognizable overflow — instead of
spending a request the gateway is guaranteed to reject, the adapter returns
CONTEXT_WINDOW_EXCEEDEDwith the overflow wording both pi-ai and dsh-llm recognize plus what to do about it (compact the session, use a larger-window model, or start a new one), so DSH runs context-overflow compaction and retries. The adapter refuses only when under 2,048 answer tokens would fit: that constant is a refusal threshold, not an output cap — the budget actually sent is alwayswindow - prompt - safety.
maxOutputTokens (default 524,288, null disables it) remains available as the
only knob, and only to rewrite the gateway compatibility ceiling. No per-model
configuration is needed.
Thinking levels come from the catalog
DSH shows a thinking-level selector only for models whose adapter declares
reasoning.efforts on resolveModel(). Without a declaration the harness has
nothing to offer, rejects any explicit effort before provider I/O, and the
adapter falls back to its own default — which, with pi-ai's openrouter thinking
format, used to be an explicit {"reasoning":{"effort":"none"}} that turned
thinking off on every reasoning model.
The adapter now translates Kilo's capability list into that contract:
- any model whose
supported_parametersincludereasoning,include_reasoning, orreasoning_effortadvertises the full pi-ai scale —minimal,low,medium,high,xhigh,max(307 of the live catalog's 401 records qualify, every free-lane model among them); - no
defaultEffortis pinned: measured onqwen/qwen3.8-27b:free, omitting the level sends noreasoningfield and the provider then spends the strongest tier it offers, so pinning a lower level would silently make every session think less than the model would on its own; thinkingLevelMap: { off: null, xhigh: 'xhigh', max: 'max' }makes an omitted effort send no reasoning field instead of"none", and keeps pi-ai from clamping the two high tiers down tohigh.
Measured effort→wire behaviour on the live gateway (qwen/qwen3.8-27b:free,
reasoning tokens for one step-by-step prompt): none 0, minimal/low 399,
medium/high 429, xhigh/max 499, no field 499. xhigh and max answered
200 on every other free model probed too (stepfun/step-3.7-flash:free,
nvidia/nemotron-3-super-120b-a12b:free, apodex/apodex-1.1-mini:free,
dots-studio/dots-3-note-preview:free), so all six levels are offered instead of
stopping where OpenRouter's documented scale does.
The level list lives in packages/plugin/src/adapter/catalog.ts
(KILO_REASONING_EFFORTS).
Note that pi-ai's own reasoningEfforts settings editor and the third-party
thinking-level slider plugin (dsh-better-reasoning-effort) are hard-wired to
the llm-pi-ai settings namespace, so they only manage models declared under
llm-pi-ai. Dynamic adapter providers such as this one have no settings
namespace; their levels come from this declaration and are edited through the
official model selector.
For Zen, the public model directory currently contains minimal OpenAI records,
so the adapter accepts the documented big-pickle exception and IDs ending in
-free/:free, while treating an explicit future isFree/is_free flag as
authoritative. The live catalog replaces the bootstrap list after a successful
refresh.
Health and troubleshooting
Kilo adapter status is written to ~/.kilo2dsh/adapter-status.json; Zen status
is written to ~/.kilo2dsh/zen-adapter-status.json. Their caches are
kilo-models.json and zen-models.json respectively.
Kilo's anonymous free usage is controlled by Kilo and is rate-limited by IP (the current documentation describes 200 requests per hour per IP). A 429 or an unavailable model is an upstream service decision; wait, choose another free model, or configure an authenticated token.
Zen's free models are promotional and can be withdrawn or rate-limited. The
current OpenCode documentation describes them as limited-time models, and the
gateway has rejected non-OpenCode user agents with 429 FreeUsageLimitError in
some deployments. Treat Zen as best-effort, avoid sending confidential data to
free models, and use zenApiKeyEnv if your Zen account requires a token.
For the optional legacy bridge:
cd legacy
go build ./cmd/agent
go test ./...
It keeps a local authenticated /v1 endpoint for DSH, but its upstream Kilo
requests use the same keyless behavior and /api/gateway paths. Use native
adapter mode for the independent Zen provider.
Adaptation source
This project is adapted from the FishBottle7/opencode2dsh DSH/OpenCode integration prototype. The Kilo adapter is the migration target; the original Zen free-tier behavior is retained as a separate optional native adapter rather than being mixed into Kilo's keyless transport. The Kilo, Zen, and QwenPaw protocol references are listed below.
Development
cd packages/plugin
pnpm install
pnpm typecheck
pnpm test
pnpm build
References
- Kilo Gateway authentication
- Using Kilo for Free
- Kilo Gateway API reference
- OpenCode Zen documentation
- OpenCode provider source (
apiKey: publicfree lane) - OpenCode issue: anonymous Zen user-agent behavior
- QwenPaw Kilo provider
- @earendil-works/pi-ai
License
MIT © FishBottle7