dsh-plugin-updater
DeepSeek Harness 的包级插件管理器：设置页面列出已安装的配置文件插件，并检测最新版本（npm dist-tags / git 提交与标签），支持一键安装、更新和移除；同时提供 GitHub 市场，搜索 dsh-plugin 主题以直接安装
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:hyqhyq3/dsh-plugin-updater#5dc8f8517222e1a6362820be4ea9555910121325Plugin Updater 以 dsh-plugin-updater 发布，当前版本为 0.3.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 简体中文
Package-level plugin manager with update detection for DeepSeek Harness (DSH).
It adds a Settings → 插件包 page to the DSH web UI that lists every plugin
package installed in the current profile, shows the installed version and
the latest available one, and can install, update, and remove packages —
dsh plugin (a thin pnpm forwarder) with a browser UI.
This is a community plugin, not an official DeepSeek package. It manages the
install state of a profile (npm packages and the dsh.profile.bundles layer
list); for runtime enable/disable of loader entries see
dsh-plugin-manager
— the two are complementary.
dependency of the current profile with its installed version,
source (npm / Git / local / built-in), and whether it is an active bundle
layer (dsh.profile.bundles).pnpm view <name> dist-tags (runs inside
the profile directory, so the configured registry and credentials apply).github:owner/repo, git+…, …#ref) — the installed commit
(from the profile lockfile) vs git ls-remote <url> <ref>; the newest
semver tag is displayed as the latest version when the repo has tags.link: / file:) — direction-aware check against origin:
the checkout's HEAD is compared with git ls-remote origin HEAD, and
when they differ a fetch + rev-list --count decides who moved — origin
ahead → 可更新; local ahead (unpushed work) → no update offered; diverged
→ flagged for manual handling.@deepseek-ai/* bundles — version shown, updated together
with the dsh installation.<name>@latest for npm,
re-fetch of the recorded spec for Git), and remove, each running
pnpm add/remove in the profile directory followed by the same bundle
reconciliation dsh plugin performs (a dependency resolving to a package
that declares dsh.bundle.patch joins the layer list; a removed one leaves).dsh-plugin topic (forks excluded),
sortable by relevance / stars / last push, with pagination, and installs any
result directly as a github:owner/repo dependency. Repos already present
in the profile are badged 已安装. Results are cached ~5 min; set
DSH_GITHUB_TOKEN (or GITHUB_TOKEN / GH_TOKEN) to raise GitHub's
unauthenticated search quota.allowBuilds entry pnpm suggests into the profile's pnpm-workspace.yaml
and re-runs the install. Allowing means consenting to run that package's
install scripts — do it only for repos you trust.~/.dsh/plugin-updater.json; no
background polling of registries.dsh plugin --profile web add github:hyqhyq3/dsh-plugin-updater
dsh --profile web # restart, then open Settings → 插件包
Or from a local checkout:
dsh plugin --profile web add link:/path/to/dsh-plugin-updater
lib/index.js — discovers the profile it is installed in
(the profile whose node_modules/dsh-plugin-updater realpaths to its own
package directory; override with DSH_PLUGIN_UPDATER_PROFILE), reads the
install state (package.json, node_modules/*/package.json,
pnpm-lock.yaml), runs update checks (pnpm view, git ls-remote), and
exposes a same-origin JSON API at /plugin-updater/api/* on the GUI
webserver. Mutations spawn pnpm in the profile directory and re-apply the
bundle reconciliation.lib/client.js — a hand-written module factory registering
the Settings section; polls /api/state every 3 s. The UI follows DSH’s
Settings → General → Language through the updater locale namespace
(zh / en); the plugin has no language setting of its own. Server-generated
messages follow the same locale, while external tool output stays verbatim.
API requests carry ?lang=zh or ?lang=en (absent or invalid values default
to zh). Legacy cached check results are discarded once on upgrade.HTTP API:
| Method | Path | Purpose |
|---|---|---|
| GET | /plugin-updater/api/ping | liveness + discovered profile |
| GET | /plugin-updater/api/state | plugins, versions, check results, op status |
| GET | /plugin-updater/api/search | GitHub marketplace (?q=&sort=best|stars|updated&page=&per_page=) |
| POST | /plugin-updater/api/check | re-check updates ({name?}) |
| POST | /plugin-updater/api/install | pnpm add <spec> + reconcile |
| POST | /plugin-updater/api/update | pnpm add <name>@latest / re-add spec |
| POST | /plugin-updater/api/remove | pnpm remove <name> + reconcile |
Plain ESM JavaScript, zero dependencies (Node built-ins only; Node
^22.19 || >=24, pnpm on PATH, git for Git update checks). No build step —
lib/*.js ships exactly as written.
dsh plugin --profile <name> remove dsh-plugin-updater.#ref or the
default branch HEAD); a moved tag is not treated as an update.link: install without a .git target is listed but not checked.DSH_GITHUB_TOKEN raises the quota.dependencies of the profile manifest are managed; runtime loader
rows (enable/disable) are out of scope.None. This plugin adds no model-facing surfaces: it registers no tools and injects no prompt context; it only serves the Settings page and its JSON API.
MIT