Settings extensions for DSH.
Install
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:omdsh-dev/ex-setting
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
English | 中文
The automatic DSH Web settings bundle. It combines the host-side configuration crawler with its browser settings navigation in one external package: the host enumerates registered settings namespaces and schema-bearing composition rows, while the client projects them into first-level settings sections and editors.
Repository shape
package.json # host/client package and dsh.bundle/dsh.client manifests
cordis.patch.yml # profile layer that mounts the crawler
src/index.ts # host crawler plugin (service provide)
src/routes.ts # crawler-owned webserver composition route
src/composition-contract.ts # host/client composition wire types
src/composition-ops.ts # host-side path edit application
src/client/ # browser settings page (store, section, crawler wire, nav scroll)
src/invariant.ts # crawler invariant companion
lib/ # generated host/client artifacts
docs/ # detailed host and client protocol references
tests/host/ # crawler, route, export, invariant, and loader tests
tests/client/ # browser store, section, and wire tests
tests/client-bundles/ # reusable closure-bundle test seeds
tests/module-loader.ts # module-table materialization harness
scripts/ # declaration assembly and built bundle contract checks
.agents/skills/ # dsh-plugin-* contributor workflow
The two runtime faces share one package identity so the release/profile installation has one root artifact. The browser face is exported as @deepseek-ai/dsh-ex-setting/client and is selected by the package's dsh.client manifest. Its pure schema-form path helpers are inlined into the browser closure instead of requiring a separate dynamic @deepseek-ai/dsh-client-schema-form row, which keeps the release compatible with profiles whose settings UI owns the schema service. The package's own declaration pass writes to lib/.client-dts and removes it before packing; only lib/client.js is served to the browser.
The consuming profile supplies the DSH host peers; this bundle has no Stent runtime or host bundle-rewrite
dependency. The browser client installs its navigation fallback directly, while cordis.patch.yml
remains the DSH bundle layer that mounts the crawler row.
Bundle behavior
Installing the bundle adds the web-config-crawler row. That is the deployment-level decision to mount the crawler, expose schema-carrying composition rows, and enable the composition editor through the Web configuration plane. The host gateway serves registered settings namespaces independently. A profile can disable the crawler row:
- id: web-config-crawler
disabled: true
The crawler redacts secrets, applies path-addressed edits with schema resolution, persists complete rows into the personal overlay, and removes rows to restore lower bundle layers. The browser page keeps settings namespaces and composition rows source-distinct and renders schema fields, secret controls, reset, revision conflicts, restart notices, and live invalidation refreshes.
External zero-change design
This bundle ships with zero out-of-package host changes. Three mechanisms make that possible:
- Host-served settings namespaces — the DSH gateway serves every namespace registered by the active composition. Mounting this bundle adds the crawler and composition editor; it does not transform or replace the gateway's exposure decision.
- Crawler-owned composition route — the browser half reads and edits composition rows through the crawler's own webserver route (
/dsh-config/crawler/composition,src/routes.ts) instead of a gateway RPC domain, so the write path adds nothing toapiproxyorconnection. - Browser-owned navigation fallback — the browser half installs the semantic scroll rules directly as a fiber-owned effect, so the settings dialog remains usable without a host bundle transform. The style is idempotent and removed on plugin disposal.
The settings/composition wire protocol, API proxy handlers, slot host, and browser shell are supplied by the DSH version selected by the profile.
Development
The host packages (@deepseek-ai/dsh-*, @deepseek-ai/cordis) install from the npm registry: every runtime import declares them as peer + dev dependencies at the ^0.1.0-rc.0 series, and development imports resolve from this repository's own node_modules — no sibling checkout is required. The devDependencies also enumerate the peer closure of the test-only host tree (the apiproxy composition test imports the real gateway).
pnpm install
pnpm run typecheck
pnpm test
pnpm run build
pnpm pack --dry-run --json
The release artifact is built from src/ before packing. The declaration pass writes to a temporary ignored directory, scripts/assemble-client-dts.mjs promotes only the public client declarations, and the final runtime pass alone writes lib/client.js; scripts/verify-client-bundle.mjs rejects plain ESM, dynamic imports, and unexpected module-table requests. Profile installation consumes ready-made lib/ output and does not run an install-time prepare hook.
CI
The repository has one GitHub Actions workflow:
.github/workflows/release.yml— every push tomain: installs from the frozen lockfile, runs typechecking, tests, the build (including the final client artifact gate), packs the ready-made tarball and checksum, and creates a new GitHub Release taggedv<version>whenpackage.jsonchanged. Non-version pushes only validate the package; an existing tag fails rather than being overwritten.
Model Experience
This bundle adds no model-visible prompt text or tools. It exposes configuration only through the loopback Web settings surface; the owning DSH settings, composition, session, and permission services retain logging, redaction, and authorization semantics.
Known Limitations and Deferred Work
- Native Zod composition Config schemas remain file-configurable but are not rendered by the generic editor, which requires schemastery
toJSON(). - The crawler is intentionally broad; deployments that do not want automatic composition editing should disable the row and keep the gateway allowlist posture.
Links
More in this category
zhu1090093659/dsh-web#packages/dsh-task-board★ 8076
Task board for the dsh web GUI: a sidebar multi-column kanban whose cards run in real DSH agent sessions and can also be scheduled with cron expressions, executed host-side even with the browser closed.
zhu1090093659/dsh-web#packages/dsh-web-all★ 8076
Plugin and skin collection for the DSH Web UI: task board, Git graph, right-side panel, remote mobile UI, pet, live token stats, and a skin center.
omdsh-dev/DSH-better-sidebar★ 3828
Full sidebar workbench with file rendering and editing, terminal, Git, and subagents; third-party plugins can register new tabs.
ccch1mneyyy/dsh-TUI★ 3661
Claude Code-style full-screen terminal UI: pixel-whale header, live status line, and streaming thought expansion.
MeteorNOX/DeepSeek-Balance-Whale-Widget★ 3277
A fixed-corner whale widget for the DSH web GUI — balance, today's usage and per-turn cost with peak/off-peak pricing, editable balance-alert and daily-budget bubbles, a module-based custom bubble queue with A/B weighted choices and random lines or images, 30+ vendor templates (OpenAI, OpenRouter, Kimi, SiliconFlow, Ark, Zhipu, MiniMax and more) with per-model balance and subscription quota, plus task-end sound, imported audio, custom roles and a resource manager. Local-only, no telemetry.
Devin-AXIS/deepseek-design#deepseek-idesign★ 1628
Visual design studio for websites, app prototypes, posters, cards, reports, and magazines, with templates, direct element editing, selection-aware AI draft handoff, and export.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.