@snow-the/dsh-search
DeepSeek Harness 的通用搜索工具包：统一的网页搜索提供商（Bing/DDG/SearXNG/Exa/Tavily，支持回退链和缓存）、页面抓取、GitHub 搜索、向量语料库、深层网络探测，以及本地代码库语义搜索（search_code）。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:snow-The/dsh-search#8fef6c24ca033da113b0302463a93568b123e498Search 以 @snow-the/dsh-search 发布，当前版本为 0.5.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Universal search toolkit for DeepSeek Harness — browser-less, GPU-free, works on headless/remote hosts.
| Tool | What it does |
|---|---|
search_fetch | Fetch a URL without a browser, return extracted page text |
search_github | First-party GitHub search (repos / code / issues / commits) — direct GitHub REST API, no Google |
search_corpus_add | Fetch + extract + chunk + embed + index URLs into an ephemeral SQLite vector corpus |
search_corpus_search | Semantic top-k search over the corpus (cosine on float32 vectors) |
search_corpus_clear | Clear the throwaway corpus |
node:http)doubao-embedding-large when ARK_API_KEY present (search_code semantic layer; pure-local BM25+rerank core works with no key and no network) (DSH_BROWSER_EMBED_MODEL overridable); local 64-dim n-gram hash fallback — offline-safeGITHUB_TOKEN/GH_PAT env or ~/.dsh/.credentials.yaml refs (line-based parse). Code search requires auth (GitHub rule). Unauthenticated: 10 req/minnode:http: set DSH_SEARCH_HTTP_PORT (loopback only):
GET /health, GET /fetch?url=, GET /github?q=&type=repo|code|issue|commit, POST /corpus {urls}, GET /corpus/search?q=&k=, DELETE /corpusDSH_SEARCH_HTTP_TOKEN
(≥16 chars) and every request must carry Authorization: Bearer <token>; anything else gets
401 + WWW-Authenticate: Bearer. Port set without a token = the daemon refuses to start
and says so, rather than silently serving unauthenticated.ctx.webServer:
dsh-host-webserver (ctx.webServer) is a bare router with no authentication at all
(measured: zero authorization/token/401/403/origin mentions in that package), so mounting
there would inherit no fence while putting generic paths like /fetch and /corpus on the
GUI port, sharing the GUI's bind range (which may be 0.0.0.0) and competing for path space.
The official Host/Origin + browser-auth fence does exist — in ctx.connection
(dsh-client-connection), not in the webserver (isTrustedApiRequest → 403,
requestRejection → 401). It targets browser-initiated cross-site calls and admits requests
with no Origin header, so it is the wrong control for this daemon's non-browser consumers:
a separate loopback-only port and a bearer token are. If these routes ever need to be callable
from the GUI's browser session, use ctx.connection.requestRejection() (see dsh-busyloop's
createRequestFence() for the working call shape).lang:ts stars:>100, repo:owner/name, org:google, is:issue is:open — anything the GitHub search API accepts.
The plugin ships with a distilled search methodology extracted from 3 professional books (OCR, line-cited):
docs/search-methods.md — quick reference: operators, engine architecture, investigation workflow, and how each maps to the toolsdocs/book-osint-techniques.md — OSINT Techniques 11th: Google/X-Twitter operators, platform lists, recon workflow (110+ items)docs/book-ai-powered-search.md — AI-Powered Search: signal boosting, semantic/dense-vector search, ANN, quantization, RRF hybrid ranking (138 items)docs/book-bellingcat.md — We Are Bellingcat: verification workflows, geolocation, disinformation defense (70+ items)Add @snow-the/dsh-search to your profile dependencies and dsh.profile.bundles, then pnpm install + restart.