dsh-extension-manager
DeepSeek Harness (DSH) 的统一插件与技能管理器：清单管理、更新检查和安全的事务性更新。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:NewBeeJack/dsh-extension-manager#db82329791690cf45f9aae8a1593703d41716cfe
Extension Manager 以 dsh-extension-manager 发布，当前版本为 0.1.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A native DSH (DeepSeek Harness) plugin that inventories, checks and safely updates the Plugins and Skills installed on your machine — from one page inside the DSH Web GUI.
It is a real settings section, not a standalone site: Settings → 扩展管理器 (Extension Manager). All data comes from Host-side reads of the plugin manager, the live Skills registry, profile manifests, pnpm lockfiles, npm registries, GitHub and git ls-remote. Updates run as durable transactions with verified backups and automatic rollback.
Extension Manager — Plugins page
git ls-remote; Skills through GitHub trees API and .skill-lock.json folder hashes. Failures and rate limits are reported, never rendered as “up to date”.409 update-busy), durable history and backup retention.| Skills page | Diagnostics |
|---|---|
| Skills page | Diagnostics dialog |
| Item | Requirement |
|---|---|
| DSH | 0.2.1-rc.2 (compatibility baseline) |
| Node.js | >=22.19.0 (Node 24 verified) |
| pnpm | provided through dsh plugin |
| git | optional — required only for git-installed plugins/skills |
| Network | npm registry and/or GitHub; HTTPS_PROXY / HTTP_PROXY / NO_PROXY and GITHUB_TOKEN / GH_TOKEN are honored |
dsh plugin --profile web add dsh-extension-manager
# pin a version: dsh plugin --profile web add dsh-extension-manager@0.1.1
The npm package name also works directly in DSH's Plugins → Add plugin dialog. Then enable the bundle and restart DSH as described below.
Download dsh-extension-manager-0.1.1.tgz from the latest release.
Install it into a DSH profile (example: web):
dsh plugin --profile web add "<absolute path>/dsh-extension-manager-0.1.1.tgz"
Enable the bundle. dsh plugin forwards to pnpm and does not select the bundle, so add "dsh-extension-manager" to dsh.profile.bundles in $DSH_HOME/profiles/web/package.json, or enable it from the DSH plugin manager UI.
Restart DSH (or let HMR recompose the profile). Open Settings → 扩展管理器.
npm ci
npm run build # lib/index.js (Host ESM) + lib/client.js (Web client)
npm test # 98 unit tests
npm pack # dsh-extension-manager-0.1.1.tgz
Then install the packed tarball as above. For iterative development use dsh plugin --profile web add "link:<path-to-checkout>" and rebuild; the client bundle hot-swaps and node scripts/dev/reload-host.mjs can trigger a Host recomposition.
Open Settings → 扩展管理器. The toolbar provides search, source/status/range filters, a Skills workspace picker, refresh, diagnostics, check all updates and update all safe updates (N).
state.json.PREFLIGHT → BACKUP → DOWNLOAD → STAGE → INSTALL → VALIDATE → PENDING_RESTART / VERIFIED
failures: FAILED → RECOVERY → RECOVERED / RECOVERY_REQUIRED
package.json, pnpm-lock.yaml, pnpm-workspace.yaml, cordis.patch.yml, compatibility.json) are hash-verified before any destructive step.listBundles() back and checks the lockfile commit; a zero exit code alone is not success.$DSH_HOME/extension-manager/backups/<txid>/; the newest 20 transactions are kept (open transactions are never pruned). Logs are JSON Lines with credential masking.ctx.pluginManager, ctx.skills, ctx.webServer, profileContext, ctx.connection.admit, optional loader/configEditor/workspaceRegistry/hmr.The full limitation list and detailed rules are in README.zh.md §9 (Chinese; a complete user/maintenance guide).
npm ci
npm run typecheck
npm test
npm run build
test/*.test.ts — 98 unit tests (native Node TS runner, no build step): registry/git/lockfile parsing, compatibility, transaction state machine, backups, archive extraction, rollback and crash recovery.
Isolated acceptance environment (never touches your real ~/.dsh / ~/.agents):
node scripts/test-env/setup.mjs [root]
node scripts/test-env/start.mjs --port 3099 [--root <root>]
node scripts/test-env/run-all.mjs
node scripts/test-env/stop.mjs
The scenarios cover npm/git/Skills updates, rollback, local-modification conflicts, batch/concurrency, interrupted-install recovery and Windows file locks.
Dialog layout regression (CDP, headless Chrome):
node scripts/dev/verify-dialog-layout.mjs --url "http://127.0.0.1:3080/?token=..." \
--cookie scripts/dev/cookie.json --sizes "1920x1080,1536x864,1366x768,1093x614,911x512,683x384"
It opens every dialog, asserts 24px/24px top/bottom spacing, no footer overlap, scrollable body with a readable last line, multiple viewport sizes and dark mode. See docs/dialog-layout.md.
src/host/ Host plugin: inventory, update checkers, transactions, routes, backups
src/client/ Web client: settings section, list, dialogs, update task panel, styles
src/shared/ Shared types and API contract
test/ Unit tests
scripts/ Build, isolated acceptance environment, browser verification helpers
docs/ Architecture, dialog-layout contract, test/acceptance summary
Issues and pull requests are welcome — see CONTRIBUTING.md. Please run npm run typecheck && npm test && npm run build before opening a PR. For security reports, follow SECURITY.md.