@mostkia/dsh-launcher
DeepSeek Harness 的电源控制（关机/重启），以及一个可重启它并显示其控制台输出的 Windows 托盘启动器。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:mostkia/dsh-launcher#9b642c980be4bb8894696b71faf05ecf6fc682d5
Launcher 以 @mostkia/dsh-launcher 发布，当前版本为 0.2.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Power controls for DeepSeek Harness (DSH) plus a Windows tray launcher that can start it, restart it and show its console output.
🌏 English · 简体中文
A complete power-and-launch plugin for stock DSH: shut-down and restart buttons (no more Ctrl+C in a terminal to stop the server), a real system launcher (a desktop shortcut plus start-at-logon), and tray management (no ugly console box left sitting on screen).
| Part | Where it lives | What it does |
|---|---|---|
| Power button | DSH's official sidebar foot slot | Opens a dialog with Shut down / Restart, plus a Start at logon switch at its foot |
| Tray launcher | Desktop shortcut and the system tray | Starts DSH, and lets you control and watch its running state |
| Power dialog, light | Power dialog, dark | Sidebar action |
|---|---|---|
| power dialog in the light theme | power dialog in the dark theme | the power action beside Settings in the sidebar |
The dialog follows the host theme because every colour, radius and shadow comes from theme tokens. The action itself uses the shell's own sidebar foot seat, beside Settings, and takes no row of its own.
# from GitHub; pinning the release tag keeps it reproducible:
dsh plugin --profile web add github:mostkia/dsh-launcher#v0.2.0
Then restart DSH once (dsh web or the existing launcher) so the new bundle is
composed, and refresh the page.
That is the whole install. The plugin carries the Windows tray and puts it in
place itself on that first start: %LOCALAPPDATA%\DSH-Launcher, a DSH Launcher
desktop shortcut, and an uninstaller next to it. A package manager will not run a
dependency's install script for us (pnpm 10+ blocks them) and the plugin command has no
hooks, so the plugin installs its own companion - and nothing in there needs
administrator rights, because the tray lives entirely in your user profile. It never
turns start-at-logon on; you opt in from the tray menu or the dialog.
Start DSH from the DSH Launcher shortcut when you want it supervised, which is what makes the power button's Restart able to relaunch it.
Changed your mind about the tray? Remove it (below) and the plugin leaves it alone from
then on. Prefer to install it by hand? tray\install.cmd in the package still does
that, and DSH_LAUNCHER_NO_TRAY_INSTALL=1 stops the automatic install entirely.
To uninstall — two independent halves, deliberately:
uninstall.cmd
from %LOCALAPPDATA%\DSH-Launcher, or tray\uninstall.cmd from the package). It
stops a running tray, clears the start-at-logon entry and the desktop shortcut, and
deletes the install directory. It never stops DSH: DSH simply stops being
supervised, and you close it whenever you like. Add -DryRun to see what it would
remove without changing anything, or -KeepState to keep the logs in state\.dsh plugin --profile web remove @mostkia/dsh-launcher, then restart
DSH. This does not remove the tray. The plugin cannot reliably notice its own
removal — measured on a real machine, the running process kept the plugin and never
saw the profile change — so rather than promise a cleanup that does not happen,
taking the tray off stays step 1. Removing the tray by hand is remembered: the
automatic install will not put it back.sidebar.footer.action,
ctx.appExit and the webServer registration API).^22.19.0 || >=24.0.0 (DSH's own requirement).Shut down exits DSH gracefully (code 0);
Restart exits with the restart code so the tray relaunches it.HKCU\Software\Microsoft\Windows\CurrentVersion\Run → DSHLauncher).All endpoints reject any Origin that is not this machine's loopback address
(403) and live under the plugin's own namespace. A request without an Origin
header (a script, curl) is allowed by design: a browser always sends one on a
POST, so an absent header is what a CSRF guard should ignore — while a present one
must never be trusted just because its host matches the request's Host, which is
exactly the DNS-rebinding hole an earlier version had.
| Method | Path | Meaning |
|---|---|---|
GET | /_dsh-launcher/status | platform, pid, supervised, autostart state |
POST | /_dsh-launcher/shutdown | graceful exit, code 0 |
POST | /_dsh-launcher/restart | graceful exit, code 42 (only when supervised) |
POST | /_dsh-launcher/autostart/enable | register the logon-start entry |
POST | /_dsh-launcher/autostart/disable | remove it |
Both halves ship with a test that needs no real DSH session:
# host half: endpoints, guards, exit codes, autostart states (23 checks)
node test/host-half.test.mjs
# client half: slot registration and locale completeness, no browser needed
node test/client-half.test.mjs
# tray: the supervision probe and both restart paths, against a fake DSH
powershell -NoProfile -ExecutionPolicy Bypass -File test\tray-supervision.ps1
The tray test runs test/fake-dsh.mjs (a tiny HTTP server that speaks the
plugin's endpoints) as the supervised child on a scratch port, so a real DSH is
never started, killed or restarted. It pins the decisions that matter: with a
supervised child the tray asks the plugin and waits for the restart code; with an
unsupervised one it refuses to call the endpoint (which would answer ok:false)
and forces the restart itself; and when the port is held by something that does
not speak the plugin's status route — the plugin failed to load, or another plugin
owns the path — it says so and forces the restart instead of claiming the plugin
agreed. Inside a confined shell taskkill is denied, so the kill step of the
forced path cannot be observed there; the runner notes the limitation and the fake
child exits on its own instead.
Maintainers: RELEASE.md carries the pre-flight checks, the
tagging steps and the optional market listing. Those suites, plus the
package-contents check, run in CI on every push and pull request
(.github/workflows/tests.yml).
@deepseek-ai/* is a
peerDependency, never a dependency: a package manager must never be able to
install a second physical copy of a shared DSH package into your profile,
because that splits private Symbols and breaks the host's scheduler lookup.@deepseek-ai/dsh-client-ui-* package
is required; the UI is hand-built from theme tokens (--dsw-alias-*,
--dsw-radius-*, --dsw-shadow-*) so it follows light/dark and the host
design language. All visible text goes through the client locale service
(zh + en).dsh-shutdown at the routing
level; each works when installed alone.The approach taken for some of these features was informed by
dsh-shutdown (MIT); no code from it is
included here. The tray icon is derived from DSH's own front-end favicon
(favicon.svg) and is used to identify the launcher.
MIT © 2026 mostkia