@naivg/dsh-network
dsh-native Web 套件（CLI + 主机插件）。让 DeepSeek Harness 无缝访问互联网。以官方 CSS 风格为设计参考。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @naivg/dsh-network@1.4.0
Network 以 @naivg/dsh-network 发布，当前版本为 1.4.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
dsh-network gives DeepSeek Harness a full web toolkit: five model-facing tools
(plus an opt-in downloader), a Network settings section, a sidebar
web-search panel, and tool cards that render like first-party ones. It replaces
the official tool-web web_search / web_fetch with a long-lived loopback
Node process. It's also ready to use right out of the box.
Requires dsh 0.1.0.rc2 or later. See One thing to know.
dsh plugin --profile web add @naivg/dsh-network
See Installation.
DeepSeek Harness ships web_search and web_fetch, and they cover the ground
until a long page returns cut off at the inline limit; a link to a .pdf or
.docx hands the model binary bytes; a feed URL arrives as a wall of XML
instead of a list of posts; a task that needs a raw POST, an authoritative
portal lookup, or a file on disk has no tool at all. If the model needs to perform
specific tasks, it can only use external tools such as curl or wget, or write a
tmp_xxx.py script first(and there's no guarantee it will work right the first time).
The usual workaround is install a browser-automation plugin(e.g.browser-use): open
the page, snapshot the DOM or a screenshot, click, scroll, repeat. That is the
right instrument for a page that only works through interaction, and an expensive(really)
one for reading text. Every step pays for a fresh page snapshot plus the tokens
to read it, and the loop only moves as fast as the page renders, so one article
can cost many times the context of its own prose while most of those tokens go to
navigation, banners and markup the reader never needed.
dsh-network was born to fill this gap. Documents and feeds arrive as
parsed Markdown, one entry per feed item, and a body over the inline cap lands
in a server-side cache the model can page through, so a long page is read in
full rather than losing its tail. Search runs an engine chain (Bing →
DuckDuckGo → Baidu by default, keyless) that can be pinned to one engine per
call, and every hit carries a title, link, snippet and date; when the engines
disagree, the answer says so instead of looking empty. http_request,
web_sitemap and web_config cover the jobs the official pair had no tool
for, the settings section and sidebar panel make all of it editable and usable
by hand, and every request — including the opt-in downloader — goes through one
fenced transport: per-redirect SSRF validation, IP pinning, private-range
blocking and a protocol lock. The only cost is one extra Node process, owned by the
plugin, and the web seam stays claimed until you uninstall it.
| Tool | What it does |
|---|---|
web_search | Searches through the configured engine chain (default Bing → DuckDuckGo → Baidu) and returns citeable sources (title, link, snippet, date), a summary, a status flag, and uncertainty notes. An engine argument pins one engine for the call. |
web_fetch | Fetches one HTTP(S) URL, returning Markdown by default or the raw body on request, with outgoing links and warnings. PDF, OOXML (docx/pptx/xlsx), ODF (odt/odp/ods) and EPUB responses are converted to Markdown. Feeds are recognized by their root element — <rss>, <feed>, <rdf:RDF> — and rendered item by item, so RSS 2.0, RSS 1.0 (RDF) and Atom 1.0 read as entries (details). |
http_request | Issues a low-level HTTP(S) request with full method, header and body control. |
web_sitemap | Looks up a curated table of 178 authoritative portals in 23 categories (arxiv, MDN, package registries, Q&A, government, news, video…) by domain, category, priority or free text, optionally returning a paste-able digest. |
web_config | Reads the live dsh-network configuration, or applies a partial patch once you enable the safety toggle (see Settings). Full behaviour: configuration.md. |
web_download | Off by default. Saves a binary file (image, archive, media, font) to disk and returns its path, on the same transport as every other tool rather than a socket of its own. See Safety for the fences. |
web_fetch and http_request bodies over the inline cap (about 20 KB) return
a preview plus a cacheId; the model pages the rest with one more call, and an
oversized feed preview always stops on a whole entry boundary, so it can jump
straight to entry 40 without re-fetching the URL. See
CLI and cache paging.
Every tool renders as a first-party-style dsh card — a borderless disclosure row over the result body:
web_search tool
web_sitemap tool
http_request tool
web_config tool
web_config uses the same card. A read collapses to
Network config · Read config · N engines; a write expands and lists each
changed field with the value that was stored, so a field the host clamped
(ask for searchMaxResults: 50, get 20) reads as a clamp rather than as the
request, and a write the safety toggle refused shows as an amber refused
block instead of a silent no-op. The live config sits underneath in labelled
groups (engine chain with key chips, timeouts, protections, allowlist, caps,
tool switches, GitHub) above the raw JSON.
| Engine id | Credential |
|---|---|
deepseek-official(HOST ONLY) | DSH native account/credentials (optional; usage may be billed) |
bing | none |
duckduckgo | none |
baidu | none |
so360 | none (IP rate limit) |
github | token optional |
searxng | none (your own instance) |
brave | keyed, billed |
mojeek | none (Altcha-gated) / keyed, billed |
tavily | keyless (rate-limited) / keyed, billed |
Bing → DuckDuckGo → Baidu is the default chain; the other are opt-in. See Search engines for more details.
Add DeepSeek (native) in Settings → Network → Search engines, then use the move controls to choose its fallback position. Existing chains remain unchanged. The plugin runs the official provider in an isolated Cordis scope using DSH-managed native settings and credentials. Verified with DSH 0.2.0-rc.2; no host patch or duplicate Cordis installation is needed. Native failures fall back, valid empty results stop, and cancellation terminates the chain. Standalone CLI native searches report that a DSH host is required. See native search for configuration and test details.
The dsh web UI gains a Web Search entry in the sidebar, after Plugins and
Schedules. The panel runs the same search path as the web_search tool and is
gated by the same toggle.
# from npm:
dsh plugin --profile web add @naivg/dsh-network
# or from GitHub (builds the CLI bundle during install):
dsh plugin --profile web add github:NaivG/dsh-network --allow-build=@naivg/dsh-network
# or from a local checkout:
dsh plugin --profile web add link:<path-to-this-checkout>
cd <path-to-checkout> # link installs only
pnpm install
pnpm build
dsh web
The loader then applies cordis.patch.yml for you: the web seam providers
switch to dsh-network, the legacy tool-web web_search / web_fetch get
disabled, and the plugin row is inserted with default settings.
Why
--allow-build? The CLI bundle (dist/cli.cjs) is built during install by the package'spreparescript, and pnpm 12 blocks build scripts of git-hosted dependencies unless you allow them. If tool calls fail withdsh-network CLI bundle is missing, see Troubleshooting.
dsh web, then open Settings → Network. Everything this
plugin does is configured there.web_search card shows the
engines' answer with the sources underneath.Nothing needs configuring on a fresh install: the default chain is keyless, and an engine that would cost you something (or need a server of yours) is never enabled behind your back.
Everything lives in Settings → Network and takes effect on the next tool call:
key=value options. See search engines.webSearchTool, webFetchTool, httpRequestTool,
webSitemapTool, and downloadTool (off by default: it is the only tool
here that writes to disk, and the model can neither read nor flip that
switch, exactly like allowConfigEdit). Flipping a switch off makes the
matching tool fail fast and answers 403 on the sidebar route; restarting dsh
unregisters the tool entirely.web_config
writes.Settings persist to ~/.dsh/dsh-network.json; delete that file to reset.
Secrets (GitHub token, engine API keys) are stored there too — the browser only
ever shows whether a key is configured, never the key itself. The full field
reference, including the loopback routes, is in
configuration.md.
undici. The plugin never shells out to
curl.exe, nslookup.exe, or any other external binary.web_download, and it takes the
same transport rather than opening its own socket.127.0.0.1 only, and request bodies are capped.web_config's set action is gated by a toggle the model can neither read
nor write, so a bad patch can never lock the model out of its own write path.web_download adds three more fences. The filename cannot escape its
destination root (separators, .. and Windows device names are neutralized,
and the resolved path is re-checked before the write). Executable extensions
(.exe/.ps1/.sh/.js/.bat/…) are refused under both the declared and
the sniffed name. And a body over the byte cap fails instead of
truncating, with an atomic .part → rename write, so a file that exists is a
whole file.We officially support dsh 0.1.0.rc2 and later. That's because the API has become
more stable since this version.
But there is one exception: native deepseek search API function use API (DEEPSEEK_PROVIDER_ID, namespace, Config, apply all present), which is manully verified with DSH 0.0.1.rc3 and later, so it might be compatible with older DSH versions. But we do not declare support for any versions prior to 0.1.0.rc2.
npx @naivg/dsh-network doctor prints the resolved configuration —
engine chain, timeouts, which API keys are configured — without contacting
anything. Safe offline, and the first thing to check.dsh-network CLI bundle is missing — the CLI build was skipped, which can
only happen on a git or link install (the published tarball ships dist/).
Reinstall the GitHub route with --allow-build=@naivg/dsh-network, or run
pnpm install && pnpm build in the checkout (link installs). See
development.md.json under search.formats in your
instance's settings.yml. See
search engines.~/.dsh/dsh-network.json
(DSH_NETWORK_CONFIG_FILE overrides the path) and restart dsh.MIT. See LICENSE.