DeepSeek Harness Plugin

Scorp1o117/dsh-plugin-marketplace

Stars ★ 2 Downloads (30d) 12,293 Category Plugin Markets & Managers Added 2026-09-05 npm dsh-plugin-marketplace

Browse and search GitHub dsh-plugin repositories from Web UI Settings, sort by stars, and install plugins through the DSH CLI.

Install

# from npm (prebuilt)

dsh plugin --profile web add dsh-plugin-marketplace

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:Scorp1o117/dsh-plugin-marketplace

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

README

DSH 0.2.1-rc.2

Supports DSH 0.2.1-rc.2, including explicit prerelease engines.dsh and peer ranges. This host update adds DeepSeek V4.1 Flash 1017 and Search/Fetch APIs; the plugin APIs used here remain unchanged. Existing reasoning settings and the opt-in augmentation policy are preserved.

DSH 0.2.1-rc.1

Supports DSH 0.2.1-rc.1. Compatibility is declared through engines.dsh and matching peer ranges, including this exact prerelease. The existing 0.2.0-rc.2 support is retained.

Browse GitHub's dsh-plugin topic and manage plugins in the active DSH Web or Desktop profile. Version 0.5.2 requires DSH 0.2.0-rc.2 or later 0.2.x.

dsh plugin --profile desktop add dsh-plugin-marketplace@0.5.2

Use the Desktop-provided dsh command (Application → Manage dsh Command); use --profile web for Web. Restart DSH, then open Plugins → Installed → dsh-plugin-marketplace.

Plugin management

The configuration page lists the active profile's direct dependencies and built-in bundles. Enter an npm package name (including scoped names) to install, update individual installed packages to latest, refresh the list, or uninstall with an inline confirmation. Updates explicitly resolve package@latest, including dependencies pinned to an older version. Built-in bundles are listed as managed by DSH and cannot be overwritten or removed here. Transitive libraries are not independent profile plugins.

Operations use the official CLI carried by the current Host. Desktop uses its bundled Electron CLI and package manager with its own profile; it does not invoke the global Web CLI or the Desktop Host entry as a CLI. Operations are serialized across the suite and marketplace. Results refresh the actual installed inventory; a failed batch reports its failure and any partial installed state. Restart DSH after package changes, including updating or uninstalling this marketplace itself.

Bundle registration/removal is reconciled by DSH. Legacy manual mounts and their configuration patches are removed structurally on uninstall. Unrelated YAML configuration and comments are preserved. Settings requests are acknowledged outside HMR and consumed once; pending work is cancelled on unload.

The GitHub browser retains explicit search, star/update sorting, README previews and AI explanations using the configured model. Package names inferred from repository names should be checked against the author's installation instructions; the management form also accepts an explicit npm name. Both Chinese and English follow the DSH language setting.

Validation

npm test covers Desktop CLI routing, state writes, HMR, localization, pinned updates, uninstall cleanup, built-in protection, failed operations and serialization.

Content from the project README on GitHub ↗

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.