> **English**: [README.md](README.md) | **ไธญๆ–‡**: [README.zh.md](README.zh.md) --- image # DSH Plugin Hub (dsh-plugin-hub) [![](https://img.shields.io/badge/powered_by-dsh-4D6BFE?style=flat-square&logo=deepseek&logoColor=white)](https://github.com/deepseek-ai/deepseek-harness) [![Awesome DSH Plugin](https://awesome-dsh-plugin.com/badge.svg)](https://awesome-dsh-plugin.com) [![GitHub stars](https://img.shields.io/github/stars/Noob-stupid/dsh-plugin-hub?style=flat-square&logo=github)](https://github.com/Noob-stupid/dsh-plugin-hub/stargazers) [![License](https://img.shields.io/github/license/Noob-stupid/dsh-plugin-hub?style=flat-square)](LICENSE) [![Last commit](https://img.shields.io/github/last-commit/Noob-stupid/dsh-plugin-hub?style=flat-square)](https://github.com/Noob-stupid/dsh-plugin-hub/commits/main) [![Registry CI](https://img.shields.io/github/actions/workflow/status/Noob-stupid/dsh-plugin-hub/registry.yml?label=registry%20CI&style=flat-square)](https://github.com/Noob-stupid/dsh-plugin-hub/actions/workflows/registry.yml) [![topic: dsh-plugin](https://img.shields.io/badge/topic-dsh_plugin-4D6BFE?style=flat-square)](https://github.com/topics/dsh-plugin) [![npm version](https://img.shields.io/npm/v/@noob-stupid/dsh-plugin-console?style=flat-square)](https://www.npmjs.com/package/@noob-stupid/dsh-plugin-console) [![npm downloads](https://img.shields.io/npm/dm/@noob-stupid/dsh-plugin-console?style=flat-square)](https://www.npmjs.com/package/@noob-stupid/dsh-plugin-console) [![GitHub Release](https://img.shields.io/github/v/release/Noob-stupid/dsh-plugin-hub?style=flat-square)](https://github.com/Noob-stupid/dsh-plugin-hub/releases)[![dsh.so security](https://www.dsh.so/badge/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub) [![dsh.so install](https://www.dsh.so/badge/install/dsh-plugin-hub.svg)](https://www.dsh.so/artifact/dsh-plugin-hub) > Manage all your DeepSeek Harness plugins in one panel: one-click enable/disable, > a 500+ plugin & skill marketplace with one-click install, and one-click framework > upgrade with auto-rollback. ## Why DSH Plugin Hub - ๐Ÿงฉ **Plugin & skill hub** โ€” auto-collected index of `dsh-plugin` repos (500+ by stars) plus a Skills tab; browse, search, one-click install, **zero GitHub API calls** (served via CDN). - ๐Ÿš€ **One-click framework upgrade** โ€” backup โ†’ online install (service stays up) โ†’ verify โ†’ **auto-rollback on failure**. Tested end-to-end. - ๐Ÿค– **AI Empower** โ€” give the console a package name or GitHub repo, the local AI reads its docs and drafts a safe, confirmable deployment plan (install / config / start / health-check); server components get an automatic control card. โ†’ [details](docs/ai-empower.md) ## Install ```sh # npm release (recommended: prebuilt, no git / build authorization needed) dsh plugin --profile web add @noob-stupid/dsh-plugin-console # or install from GitHub source (needs git; allowBuilds authorization on first add) dsh plugin --profile web add github:Noob-stupid/dsh-plugin-hub ``` Then restart the dsh service โ†’ refresh the page โ†’ **Settings โ†’ Plugins โ†’ Plugin Console**.
More install options (deploy script / hand it to an AI) ### Option 2: deploy script (fallback when network is restricted) Windows (PowerShell): ```powershell git clone https://github.com/Noob-stupid/dsh-plugin-hub "$env:TEMP\dsh-plugin-console" 2>$null; & "$env:TEMP\dsh-plugin-console\deploy.ps1" ``` Linux / macOS: ```bash git clone https://github.com/Noob-stupid/dsh-plugin-hub /tmp/dsh-plugin-console 2>/dev/null; bash /tmp/dsh-plugin-console/deploy.sh ``` The script copies the plugin into `$DSH_HOME/profiles//node_modules/` and idempotently appends an enable entry to `cordis.patch.yml`. Afterwards: 1. Restart the dsh service (host code changes need a process restart; CLI restarts the process, the desktop client exits and reopens); 2. Refresh the page โ†’ Settings โ†’ Plugins โ†’ **Plugin Console**. ### Option 3: hand it to an AI in one sentence > Install the DSH plugin hub (dsh-plugin-hub): run `dsh plugin --profile web add @noob-stupid/dsh-plugin-console` (npm release); if there is no dsh CLI, clone https://github.com/Noob-stupid/dsh-plugin-hub to `~/.dsh/profiles/web/node_modules/` and register it in `cordis.patch.yml` (id: plugin-console, name: @noob-stupid/dsh-plugin-console). Restart dsh web afterwards. Requires: DSH โ‰ฅ 0.1.0-rc.6 (web profile, with `dsh-client-modules` / `dsh-host-plugin-inventory`).
--- ## Highlights | | Benefit | Detail | |---|---|---| | ๐Ÿค– | **AI Empower ** | Give the console a package name or GitHub repo โ€” the local AI reads docs, drafts a **deployment plan** (install / write config / start service / health check) and executes it safely after your confirmation; server-type components get an automatic control card | | ๐Ÿ›ก๏ธ | **Framework upgrade safety & adapt gate ** | Force-disables plugins incompatible with the new framework (enable locked; ใ€ŒCheck update โ†’ Update & adaptใ€auto-verifies and unlocks); full-tree checkpoint before upgrade, automatic rollback on relaunch failure, one-click rollback to the previous version | | ๐Ÿ  | **Family-bundle cards & safety ** | Same-root subpath exports group into one family card (collapse/expand, batch check-update, one-click unlock-adapted, known-check preview); never-crash safety (pre-enable import probe + patch auto-heal + exports fallback); adapt-gate source-scan hard criterion & migrate detection; deleting a bundle sub-row disables only that row | | ๐Ÿš€ | **Server component cards** | Left-side floating card auto-aligned to the main panel: start / stop / status / **open Web UI** buttons, multi-server dropdown, collapsible | | ๐Ÿงฉ | **Plugin & skill hub** | Auto-collected index of `dsh-plugin` topic repos (**500+** by stars) plus a **Skills tab** (`agent-skills` โˆช `claude-skills` โˆช `dsh-skill`, up to 300) โ€” browse, search, one-click install, no GitHub API calls | | ๐Ÿค– | **Auto-collection CI** | GitHub Actions reruns `build-index` every 6 hours (manual trigger available); authors just add the `dsh-plugin` / `agent-skills` / `claude-skills` / `dsh-skill` topic โ€” no application needed | | โšก | **Instant, rate-limit-free** | The index is served as a static `marketplace/index.json` via jsDelivr CDN (10-min host cache); terminal users make **zero GitHub API calls** | | ๐Ÿ”„ | **Version detection & one-click update** | Semver-based; installed entries match npm `dist-tags.latest` / `beta`; subpackage mismatch warnings prevent mixed-version breakage | | ๐Ÿ”€ | **Multi-source** | GitHub / Gitee (direct-repo mode) / custom search sources (URL template + header auth + private http); `โŠž` merges GitHub + all custom sources in parallel | | ๐Ÿ”’ | **Safe by default** | Loopback-only routes; AI fallback behind an explicit cost-consent modal; infrastructure rows are toggle-protected |
๐Ÿ“‘ ็›ฎๅฝ• / Table of Contents - [Highlights](#highlights) - [AI ่ต‹่ƒฝไธŽๆœๅŠกๅ™จ็ป„ไปถๆŽงๅˆถ](#ai-่ต‹่ƒฝไธŽๆœๅŠกๅ™จ็ป„ไปถๆŽงๅˆถ) - [One-click install](#one-click-install) - [Usage](#usage) - [Features](#features) - [How it works](#how-it-works) - [Compatibility](#compatibility) - [Project layout](#project-layout) - [HTTP endpoints](#http-endpoints) - [Security](#security) - [Known limitations](#known-limitations) - [Help & Ecosystem](#help--ecosystem) - [Contributing](#contributing) - [Changelog](#changelog) - [License](#license)
--- ## Usage 1. Restart DSH โ†’ open the Web GUI โ†’ **Settings โ†’ Plugins โ†’ Plugin Console**. 2. **Installed list**: toggle plugins on/off (HMR applies within ~1s), search by name/id, expand details (version, repository, README summary). 3. **Marketplace**: empty query on the GitHub source opens the static index (instant); type a query to search live. Switch sources via the login pill (GitHub / Gitee / custom); `โŠž` merges all sources; `โ˜…` filters to `dsh plugin add`-installable packages. 4. **Skills tab**: switch ๆ’ไปถ/ๆŠ€่ƒฝ next to the search box to browse and install skills (cloned into `~/.dsh/skills//`). 5. **Install**: click ๆทปๅŠ ๅˆฐๆœฌๅœฐ โ†’ the chain runs in the background (safe to leave the page); ใ€Œๆฃ€ๆต‹ๆ›ดๆ–ฐใ€/ใ€Œๆ›ดๆ–ฐ โ†’ vXใ€ appear automatically for installed entries. --- ## Features ### Installed plugins (one-click toggle + details) - **Shows only third-party plugins by default** (extra/non-bundled), tagged "Third-party" with a delete entry; click "All" to see the full list (1.5s flash feedback); - Lists every plugin entry (name, load state, enabled state); search by name/id; - Disable = append `- id: X` + `disabled: true` to the user patch layer, effective via HMR; - Enable = remove that entry; bundle-layer rows disabled by default are overridden with `disabled: false`; - Tags "Patch-disabled / Patch-forced" distinguish user patch state; - **Infrastructure protection**: host transport/hmr/storage/settings chain plugins (70+ rows) are marked "Protected" and cannot be toggled โ€” disabling them would break HMR; - **Details panel**: version, repository/homepage links and a README summary for each plugin; - **Version check**: ๆฃ€ๆต‹ๆ›ดๆ–ฐ reads npm `dist-tags.latest` (curl channel, works even when node networking is blocked) and warns about subpackages that need syncing (depsOutdated). ### Framework one-click upgrade (deepseek-harness card) - The **deepseek-harness** card shows **ใ€Œๆก†ๆžถๅ‡็บง โ†’ vXใ€** when a newer framework version is available (stable `latest` preferred; `next` channel when `latest` equals the installed version); clicking runs the full flow: backup config + framework snapshot (rollback point) โ†’ **online install** (service stays up, page never disconnects) โ†’ version verification โ†’ **auto-restart to apply**; - **Real-time progress**: a `DSH-Upgrade` console window pops up showing live pnpm download progress; the in-panel progress card shows the waiting time; - **Upgrade protection**: failed installs **auto-rollback** (robocopy, backup verified before upgrade), version check catches fake success, 15-min hard timeout, stall detection (no debug-log updates โ†’ auto switch registry), global trap fallback, and 15-min stale-state cleanup โ€” the framework is never left broken; - **pnpm channel**: npm-cli.js freezes at startup in the schtasks task environment (0-byte debug log, no network requests ever sent); upgrades use `corepack pnpm` (starts in ~0.4s, installed rc.8 in 11.5s) against the **npmmirror (China) registry**, with `dangerouslyAllowAllBuilds` so native modules (node-pty/koffi) compile; - **Runtime bin resolution**: under the pnpm layout `@deepseek-ai/dsh` is a Junction โ€” the relaunch step resolves `bin.js` at runtime (follows the Junction to the current version) instead of using a path baked in at script-generation time; - **Card dismiss semantics**: terminal states (done/failed) are permanently dismissed on โœ• (persisted); in-progress dismissal is session-only and the card returns after a refresh. ### Marketplace (multi-source) - **Source switcher**: click the login pill to switch between **GitHub / Gitee / custom sources** (persisted); title, loading text, placeholder and note all follow the source; - **GitHub**: default query `dsh-plugin`, browser-direct with server fallback; - **Gitee**: official search API is retired, so it uses **direct-repo mode** โ€” enter `owner/repo` (Chinese paths and full URLs supported) to find and install a repository; - **Custom sources**: add in Source Manager (URL template with `{q}`/`{page}` placeholders), optional **header auth** (e.g. `Authorization: Bearer ...`), and **local/private http URLs**; - **Multi-source summary**: the `โŠž` toggle searches GitHub + all custom sources in parallel, merging results with source labels; - **โ˜… official filter**: shows only packages installable via `dsh plugin add` โ€” root packages with a `dsh.bundle` manifest (official) or aggregate repos whose **subpackage carries `dsh.bundle`** (subpackage-installable); markers are enriched by the server (curl dual-channel) with a client-side fallback; - **Type badges**: ๅฎ˜ๆ–น / ่šๅˆ / ๆŠ€่ƒฝ (repo contains SKILL.md) recognized automatically. ### Static index market (plugin & skill tabs) > **Hybrid architecture**: browsing uses the static index (instant, zero GitHub API calls), > searching uses live channels (GitHub search API / multi-source parallel) โ€” they complement > each other: a brand-new repo can be found by live search even before it enters the index. - Empty query on the GitHub source shows the **static index** (`marketplace/index.json`, jsDelivr CDN + 10-min host cache): 500+ plugins by stars, instant, **zero GitHub API calls**; - **ๆ’ไปถ / ๆŠ€่ƒฝ tabs** next to the search box: the skills tab lists auto-collected `agent-skills` โˆช `claude-skills` โˆช `dsh-skill` repos (up to 300); - **Auto version check**: installed entries in the market are checked against npm `dist-tags.latest` in the background โ€” cards turn into **ใ€Œๆ›ดๆ–ฐ โ†’ vXใ€** buttons; - **Skill install**: skill entries install by git-clone into `~/.dsh/skills//` (frontmatter `name` wins over repo name; SKILL.md found at repo root or first-level subdirectory). Installed skills show a grey ใ€Œๅทฒ่ฃ…ใ€ badge. ### Source Manager The floating "Sources" button (right of the title row, semi-transparent) opens the manager: ![Source Manager](https://github.com/user-attachments/assets/ef712900-65ae-4f6f-9584-bacdd8d34ea1) - **Install sources (registry)**: add / inline edit / set primary / restore defaults; private and intranet addresses supported; **deletion is protected** (install-critical); - **Search sources**: built-in GitHub, Gitee + custom search sources (add/remove, `๐Ÿ”’` shows header count); - **Gitee login (optional)**: direct mode needs no login; login only raises rate limits โ€” create a third-party app (gitee.com โ†’ Data management โ†’ Third-party apps, scopes user_info, projects), fill client_id / client_secret, save, then authorize. --- ## Documentation - [AI Empower ไธŽๆœๅŠกๅ™จ็ป„ไปถๆŽงๅˆถ](docs/ai-empower.md) - [Framework upgrade safety & plugin adapt gate](docs/upgrade-safety-adapt-gate.md) - [How it works](docs/how-it-works.md) ยท [Compatibility](docs/compatibility.md) ยท [Project layout](docs/project-layout.md) - [HTTP endpoints](docs/http-endpoints.md) ยท [Local AI fallback & consent](docs/ai-fallback.md) - [Framework patch (cordis.patch.yml)](docs/framework-patch.md) ยท [Security & disclaimer](docs/security-disclaimer.md) --- ## Known limitations - Host code changes require a **service restart** (the panel's restart button is watchdog-safe); client changes just need a page refresh; - Live GitHub search depends on GitHub reachability (browser-direct + server fallback; during network-blackout windows retry later); - Version detection works for npm-published packages; skill-type repos have no version concept; - The static index is capped (500 plugins / 300 skills per build); authors bump their star count or wait for the 6h CI cycle to enter the index; - Skills are discovered by `dsh-skill-filesystem` โ€” if the current profile does not enable that plugin, installed skills stay dormant until it is enabled and DSH restarted. --- ## Help - **Panel missing**: restart dsh โ†’ refresh โ†’ Settings โ†’ Plugins โ†’ Plugin Console. - **Toggle does nothing**: infrastructure rows are "Protected" (by design); normal toggles take effect via HMR within 1-3s. - **Compatibility warning**: a breaking upstream release arrived; see Compatibility. - **Search empty/fails**: GitHub uses browser-direct (falls back to the server channel); Gitee is direct-repo mode (enter `owner/repo`); check custom-source URL/headers; retry during network blackout windows. - **โ˜… filter empty**: โ˜… shows only `dsh plugin add`-installable packages (official + subpackage-bundle aggregates); markers are backfilled in 1-3s โ€” no false "none" report. - **Install fails**: confirm the repo has package.json and the package is published; npm failures fall back to git install; switch the primary source if npmmirror is unstable. - **Skill not found by DSH**: enable `@deepseek-ai/dsh-skill-filesystem` in the profile (`cordis.yml`) and restart; skills live in `~/.dsh/skills//`. --- ## Ecosystem & discoverability - Listed on [awesome-dsh-plugin](https://github.com/awesome-dsh-plugin/awesome-dsh-plugin) (the community main list) and [DSH Directory](https://dsh.directory); - This hub's own auto-collection index (500+ plugins / 300 skills, refreshed by CI every 6h) includes **any** repo tagged `dsh-plugin` / `agent-skills` / `claude-skills` / `dsh-skill` โ€” tag your repo and it appears in the market automatically, no application needed; - If you build DSH plugins, this panel is your distribution channel: one-click install for every user of the hub. ## Support If this panel saves you time or makes DSH more fun to use: - โญ **Star this repo** โ€” it directly helps more DSH users find it; - Share it with DSH users or in DSH communities; - Submit your own plugin (tag it `dsh-plugin`) to grow the ecosystem; - Found a bug or want a feature? [Open an issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues). --- ## Contributing Contributions of all kinds are welcome โ€” issues, PRs, docs, translations. - **Guidelines**: [CONTRIBUTING.md](CONTRIBUTING.md) - **Code of Conduct**: [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md) - **Security policy**: [SECURITY.md](SECURITY.md) (report vulnerabilities privately) - **Issue templates**: bug reports & feature requests via the [new issue](https://github.com/Noob-stupid/dsh-plugin-hub/issues/new/choose) page --- ## Changelog See [CHANGELOG.md](CHANGELOG.md). --- ## License MIT --- --- ## Preview (experimental ยท not for production) The layered-refactor preview lives in its **own repository**: [**`Noob-stupid/dsh-plugin-hub-refactor`**](https://github.com/Noob-stupid/dsh-plugin-hub-refactor) - **What it is**: the monolithic `lib/index.js` (7637 lines) split into layers โ€” `lib/index.js` **142 lines** + `lib/server/**` **36 modules**; **feature-equivalent to `0.3.53`**, maintainability only; - **Verified**: 18 test suites green ยท 8 architecture-guard assertions ยท **47/47 routes identical** (`status` + response fields) against the stable build; - **Not yet exercised**: real framework upgrade / rollback, restart guardian, real install/uninstall, component start/stop, real AI run, Gitee OAuth (~10โ€“25% long-tail risk, subjective); - **For everyday use** stick to npm `@noob-stupid/dsh-plugin-console@0.3.53`, or `main` of this repo.