DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

Update — DeepSeek Harness 插件(DSH Plugin)
DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录
← Plugins

@linxin666/dsh-update

Update

用于 dsh Web GUI 的自更新插件:探测 npm 上是否有更新的系列版本,并在原地运行所属配置的 pnpm 更新;可通过设置图标旁侧边栏中的触发器启动,并显示发布说明面板

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add @linxin666/dsh-update@0.4.6
README兼容性版本

兼容性与来源证明

Update 以 @linxin666/dsh-update 发布,当前版本为 0.4.6。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
web
发布来源
npm
Registry 更新时间
2026/10/16

版本

0.4.6stable
2026/10/10
0.4.5stable
2026/10/5
0.4.4stable
2026/9/29
查看其余 1 个版本收起版本
0.4.3stable
2026/9/26

相关插件

正在加载相关插件…

最新版
0.4.6
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
420.6 kB
文件数
68
Surface
web
许可证
Apache-2.0
发布源
npm
GitHub
★ 8.8k
周下载
21,198
安全扫描
✓ v0.4.6 扫描通过
最近提交
2026/10/16
查看源码 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题

相关插件

继续浏览 developer-tools 分类下经过校验的插件。

Web App@deepseek-ai/dsh-web-appdsh 浏览器界面捆绑包:位于 dsh-base 之上的 Web 补丁层,加上运行时粘合插件(提供前端 dist、Web 界面提示符、bash 运行时变量和 URL 行)Sdk App@deepseek-ai/dsh-sdk-appdsh SDK 配置包:基于 dsh-base 提供 stdio JSON-RPC 服务和进程生命周期管理Experimental Inspector@deepseek-ai/dsh-experimental-inspector用于 Host 调试和 Client Runtime 检查的实验性跨 realm CDP hubExperimental Inspector Profile@deepseek-ai/dsh-experimental-inspector-profile用于原始 Session 日志和 Chat 节点检查的可选 Web 捆绑包

README

dsh-update · Plugin Ecosystem Version Check & Update Notifier for DeepSeek Harness (DSH)

English | 中文

   

Plugin Ecosystem Version Check & Update Notifier for DeepSeek Harness (DSH)
Sidebar Footer Trigger · npm Auto-Detection · Release Notes Integration · Verified Update Pipeline

In-GUI auto-update extension for the DeepSeek Harness (DSH) family: a download trigger alongside the settings button in the sidebar footer that checks npm for newer @linxin666/dsh-web-* versions and runs a verified pnpm update --latest inside the active profile.

This package is an external plugin for DeepSeek Harness (DSH), structured as a cordis bundle: the host half mounts the /api/update route family while the browser half renders the sidebar trigger and update modal.

The feature is deliberately structured as an independent plugin row (row id update, aggregate row web-ui-update) rather than sharing a seat with dsh-remote-web-ui: disabling remote access must never remove the update path.

What it does

  • Sidebar trigger: a download control in the official sidebar.footer.action seat beside the settings trigger. It marks the button with a text badge when a newer release exists, checks the registry on open, and lets the user confirm the update from the result view.
  • Web pages only: the trigger mounts on pages a web transport delivered — the loopback GUI in a browser, a LAN or tunnel deployment. The official DSH Desktop shell serves its page from dsh-app://app/ and owns its own updater, so the seat is not mounted there at all; that page's seat keeps the phone-remote trigger alone.
  • Verified install: the run endpoint executes pnpm update --latest in the profile the web GUI was booted from, then re-reads the installed versions. The pnpm 11 minimumReleaseAge gate can silently keep same-day releases, so a green exit alone is not reported as success.
  • Release notes: the panel fetches the matching GitHub release notes and lists the component versions it moved.
  • Restart hint: a successful update asks the user to restart dsh web, which is when the new package versions load.

Requirements

  • DSH >= 0.2.0-rc.2.
  • The profile must own the family packages through npm: the aggregate @linxin666/dsh-web-all, or the family packages installed directly. A profile whose family is installed with local link: specs is reported as local development mode and the update is refused (sync the checkout instead).

Install

# Recommended: install directly from npm
dsh plugin --profile <profile> add @linxin666/dsh-update

# Or from a checkout (development loop)
dsh plugin --profile <profile> add link:<repo>/packages/dsh-update

In the family aggregate the row is already present; disable it per row in the plugin manager if a profile should not offer self-update.

Configuration

The plugin ships no settings namespace of its own: a profile either mounts the row or not, and the plugin manager's per-row switch is the only control. The host surface is fixed — the two loopback routes below — and the sidebar trigger always registers into the official sidebar.footer.action seat.

Use

  1. Open the dsh web GUI and look at the sidebar foot: the download trigger sits beside the settings trigger (a 36px circle in the collapsed rail, a pill in the wide column).
  2. Click it. The panel probes the registry and shows either "up to date" or the newer release with its notes.
  3. Confirm with Update now. The panel shows the pnpm run, then the outcome and the component versions.
  4. Restart dsh web for the new packages to load.

Routes

Both routes are exact matches on the host web server and answer only to the local machine:

RouteMethodMeaning
/api/update/statusGETRegistry probe: install mode, owning profile, per-package current/latest, release notes
/api/update/runPOSTRuns the verified pnpm update --latest in the owning profile

A paired remote desktop reaches them through the dsh-remote-web-ui gated /remote/api channel, which is why that plugin's channel rules keep /api/update/ on the paired path.

Security model

  • The run endpoint executes a real install on this machine. It is fenced to the loopback authority and refuses cross-site browser markers, so a LAN or tunnel origin can never trigger it directly.
  • The update target is the host process's own module graph. The anchor manifest is resolved from the running host (@linxin666/dsh-web-all first, falling back to this package), so the update always writes the profile that serves the page — never a path supplied by the client.
  • Local links are refused, not rewritten: a link: spec cannot be updated from the registry, and silently replacing it would detach the user's checkout.
  • The panel prints the captured pnpm output, which can contain local paths. No credentials are read from or written to the profile by this plugin.

Known limitations

  • The desktop shell (dsh-app:// pages) has no update seat by design: use the desktop application's own updater there, or open the GUI in a browser to drive the family update.
  • A profile whose family packages are installed with local link: specs reports local development mode and cannot self-update; sync the checkout instead.
  • pnpm must be resolvable on the host (pnpm, corepack, or npx); the panel names the candidate that failed when none works.
  • pnpm 11's minimumReleaseAge gate can hold back same-day releases. When the installed versions did not move, the panel explains the minimumReleaseAgeExclude / minimumReleaseAge: 0 remedy.
  • The captured pnpm output is shown verbatim and can contain local paths.
  • The wide sidebar row that puts the footer actions beside the settings trigger is declared by dsh-remote-web-ui. With that plugin disabled the update trigger falls back to the shell's own stacked foot: it still renders and works, only the shared-row layout is lost.

Development

pnpm --filter @linxin666/dsh-update typecheck
pnpm --filter @linxin666/dsh-update test
pnpm --filter @linxin666/dsh-update build

Checks

Focused gates: pnpm --filter @linxin666/dsh-update test, pnpm typecheck, pnpm test:standards, and pnpm libs:check after the aggregate is rebuilt.

Telemetry

One anonymous install heartbeat per browser per UTC day (package name only, silent failure), following docs/telemetry.md. No session content, paths, or update results are reported.

Dependency rationale

@deepseek-ai/* entries are the official SDK used for types and host faces; react/react-dom are the GUI's own platform modules. The @deepseek-ai/dsh-client-ui-primitives icons ride the platform module table.