dsh-github-hub
DSH GitHub 插件中心：登录 GitHub 账号并保存登录记录，搜索 GitHub / npm 上的 deepseek-harness (dsh-plugin) 插件，并一键安装到当前 DSH profile。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:GuaPiaaaaa/DSHplugin#0fc81f980e537fc0575dcbcc5b8574833b5de7d4Github Hub 以 dsh-github-hub 发布，当前版本为 1.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A native DSH panel (host half + browser half) that signs in to your GitHub account, keeps a
sign-in history, searches GitHub / npm for deepseek-harness (dsh-plugin) plugins, and installs
them into the current profile with one click — through exactly the same path as
Settings → Plugins and dsh plugin add.
Chinese documentation: README.zh.md
topic:dsh-plugin, topic:deepseek-harness,
dsh-plugin in:name,description,readme, …) or npm packages (keywords:dsh-plugin).
Inspect reads the repository's package.json and tells you whether it really is an
installable DSH plugin (does it declare dsh.bundle.patch? does it ship a dsh.client half?).
Install runs the profile's own pnpm path with a live log, cancel support, and an
"allow the blocked build scripts and retry" button when pnpm withholds lifecycle scripts.client_id; no client secret needed). Sign-in / sign-out history
is persisted and can be cleared.git
and pnpm, plus which rung of the TLS trust ladder the current requests use.dsh plugin --profile desktop add dsh-github-hub
# local development
dsh plugin --profile desktop add link:/absolute/path/to/dsh-github-hub
Then restart the desktop app — reloading the page is not enough, because DSH collects its boot
injection table once per host start, and a new plugin's client bundle only enters that manifest on
the next start (the web profile needs its dsh web process restarted for the same reason).
A git-branch icon then appears in the left sidebar and opens the panel in the central area.
Beyond the panel, the host half exposes a few read-only endpoints for troubleshooting (all require the browser session cookie):
| Endpoint | Purpose |
|---|---|
GET /dsh-github/state | account, settings, sign-in history, trust ladder, client-bundle graph state |
GET /dsh-github/health | GitHub API, npm, DNS, hosts, git, pnpm checks plus plain-language notes |
GET /dsh-github/client | the graph rev and real URL of the client bundle, next to the rev computed from the file on disk (a mismatch means edits are not loaded yet) |
GET /dsh-github/search?source=github|npm&q=… | search |
POST /dsh-github/repo/package | read a repository's package.json and judge it |
POST /dsh-github/inspect | pre-flight one spec through the real plugin manager (performs the GitHub connection check, installs nothing) |
tls=default (144 system roots were
merged into the process default chain at startup), so no insecure rung was needed;pnpm add github:<owner>/<repo> and pnpm add git+https://github.com/<owner>/<repo>.git both
fetch and link a real package (37s and 19s, peer dependencies included);pluginManager.installBundle completed end to end for a link: spec
(pnpm log events → progress polling → bundle activation);POST /inspect on github:<owner>/<repo> returns {status:'accepted', kind:'git', host:'github.com'};sec-fetch-site: cross-site 403.read:user
(add repo for private repositories) and paste it into the panel.
It is stored in the DSH credential service as the record dsh-github-hub/github
(kind grant) and is never sent to the page; the UI only shows login, avatar, scopes and
the last four characters.client_id,
start the flow, enter the one-time code at https://github.com/login/device.| Item | Location |
|---|---|
| GitHub token | DSH credential service (record dsh-github-hub/github) |
| Settings + sign-in history | $DSH_HOME/.dsh-github-hub.json (no token, max 200 entries) |
| Install logs | $DSH_PROFILE_DIR/.plugin-manager/logs/operation-*/pnpm.log |
All endpoints live under ctx.webServer at /dsh-github/* behind three fences: loopback (or
explicitly trusted) Host, no cross-site requests, and write requests accepted only from the
local machine.
Accelerators such as Watt Toolkit / Steam++ rewrite github.com, api.github.com and
raw.githubusercontent.com to 127.0.0.1 and re-serve them through a local reverse proxy with
its own CA, which Node does not trust by default (unable to verify the first certificate).
This plugin walks a trust ladder instead of failing:
node --use-system-ca);tls: local-interceptor when it happens.Installing from GitHub uses pnpm's github:owner/repo (git) transport, so git must be on
PATH; the plugin manager performs a bounded connection check before pnpm starts.
package.json verdict, but does not audit code.$DSH_HOME.MIT — see LICENSE.