Restart DSH
Adds a Restart DSH button to DSH Desktop → Settings → General (通用设置). It sits
directly below「繁忙时 Enter 键行为」and lets you restart the DSH Desktop application
with one click, using DSH's official graceful restart facility.
Features
- Restart DSH Desktop from Settings → General (官方 slot：
settings.general.item)
- Uses the official DSH Desktop restart API
(
ctx.desktopRuntime.requestRestart() → graceful Cordis teardown +
app.relaunch() + app.exit(0)) — no shell, no kill, no sudo
- Native confirmation dialog (native
Modal + Button primitives) before restarting
- Single-flight protection: while a restart is pending the button shows
「正在重启…」and is disabled
- Light / Dark theme via DSH design tokens (
--dsw-alias-*) — no hardcoded colors
- i18n: zh-CN + en
- No telemetry, no network access, no credential access, no filesystem access
Installation
Local install into a DSH web profile (additive, backed-up edits):
- Add to
~/.dsh/profiles/web/package.json dependencies:
"dsh-restart-button": "link:/path/to/dsh-restart-button"
- Add
dsh-restart-button to dsh.profile.bundles.
- Run
pnpm install in the profile directory.
- Restart DSH Desktop once so the new bundle's loader row activates.
Naming rule (DSH Desktop ≥ 2.0.2): the dependency key must be exactly the
plugin's package.json name (dsh-restart-button, unscoped). The desktop
validates that every bundle's resolved manifest name matches its reference name
and otherwise refuses to load the whole profile with
profile package identity is invalid. Do not alias the key to a scoped name.
The plugin's own cordis.patch.yml registers the Loader entry; the host half is
loaded by Cordis and the browser half is served as
/plugins/dsh-restart-button/client.js.
Compatibility
- DSH Desktop (Electron shell) running in
compatibility or advanced mode —
provides the desktopRuntime service, so the button is enabled.
- Pure
dsh web (headless browser, no desktop shell): the button renders but is
disabled with a note — the restart capability is not available there.
- DSH core packages at
^0.1.0-rc.6 (compatible with the DeepSeek Harness Desktop runtime 0.1.0-rc.7; v0.1.1 widened the range so the DSH Desktop market verifier accepts the package).
Restart mechanism
The host half registers a browser-trust-fenced route (/dsh-restart-button/api,
loopback / same-origin only) and calls the official
ctx.desktopRuntime.requestRestart() when a desktop shell is present. The
official implementation disposes the whole Cordis plugin tree (flushing settings /
session state, 5 s grace), then app.relaunch() + app.exit(0). This is a
graceful restart — never a process kill. If the desktop runtime is absent, the
route reports restartable: false and the client disables the button.
Security
- No shell execution — restart goes through the official
desktopRuntime
service; the plugin never spawns kill/pkill/osascript/sudo.
- No network — the only route is a loopback, same-origin-fenced HTTP route.
- No credential / token access — the plugin reads no .env, API keys, or
session content.
- No telemetry — the only runtime side effect is an optional boot marker under
/tmp/dsh-restart-button-test/ used purely for local verification, and it is
never shipped as telemetry.
- Minimal permissions — the host only requires
webServer (route) and
optionally desktopRuntime; the client only slots/locale.
Development
pnpm installpnpm typecheck (tsc, no emit)pnpm test (node --test; real Cordis integration tests)pnpm build (scripts/build.mjs → lib/index.js + lib/client.js)
