dsh-web-plugin-manager

One-Line Positioning

A "Plugin Control Center" for DeepSeek Harness. Centralized view, enable/disable, install, uninstall, and update DSH plugins in the Web settings panel, with pre-installation quality gates, post-run health checks, and a third-party plugin marketplace — avoiding the crashes caused by manually editing cordis.patch.yml and running bare pnpm add.

Core Capabilities

View all installed plugins under a profile in the Web UI (both bundle and non-bundle types), enable or disable on demand without restarting the profile
One-click install/uninstall plugins, supporting npm package names, GitHub repositories, local paths, tarballs, and other sources
Check and execute plugin updates (including the manager itself), with quality gate validation and automatic rollback on failure
Health checks for dependency graphs, missing items, circular dependencies, duplicate line IDs, same-name registration conflicts, peer compatibility, and one-click fixes
Browse third-party plugin marketplace, browse/search/filter by topic, combined with server-side installed-status checks to avoid duplicate installations
Manage profile environments: enable/disable, copy/transfer plugins, create/rename/delete profiles (official read-only profiles cannot be modified), backup export and restore

Technical Implementation

Language: TypeScript (both server and browser sides are TS, client contains .tsx)
Key Dependencies: @deepseek-ai/cordis (host framework), @deepseek-ai/dsh-tools (agent tools and guards), @deepseek-ai/schemastery (Config validation), undici (marketplace network requests)
Architecture Pattern: Cordis dual-sided plugin — server side (src/index.ts) registers PluginManagerService and /api2/plugin-manager/* REST routes; browser side (src/client/index.ts) registers catalog/manager/environments three settings Tabs and kinds/marketplace two settings sections; communicates via same-origin fetch; installation chain installWithSource→installProtected is fully serial and mutually exclusive; uses live.ts to directly call loader entry.update so patch changes take effect without restart
Entry Files: src/index.ts:4669 (host apply) + src/client/index.ts:75 (client apply)

Applicable Scenarios

You will need it when encountering these situations during daily DSH usage: a profile crowded with plugins but forgotten what each does, wanting to install a third-party plugin but worried about breaking the profile, needing to copy a configured profile to another machine, or just trying to figure out which plugin depends on what and why something isn't working.

Prerequisites and Compatibility

Dependency	Minimum Version	Description
DSH Host	@deepseek-ai/cordis ^4.0.1, @deepseek-ai/dsh-tools ^0.1.0-rc.6	Declared by peerDependencies
Validation Library	@deepseek-ai/schemastery ^3.18.1, js-yaml ^4.3.1	Declared by peerDependencies
Node Types	@types/node ^22.0.0	devDependencies, not hard-constrained in engines
Runtime Platform	Node host (cross-platform) + Web profile browser side	client.platform=web; host uses undici and node:fs, no native modules
Native Modules	None	Node built-in modules and undici only

Installation

dsh plugin --profile web add github:LX2000WASD/dsh-web-plugin-manager

Configuration Options

Config	Type	Description	Default
profile	string	Determines the target profile name for agent tools (plugin_status/install/uninstall/toggle)	`web`

Other parameters (such as marketplace cache TTL, session TTL) are hardcoded in the source and not exposed via Config: SESSION_TTL_MS (15 minutes, src/installSession.ts:23), REGISTRY_MAX_AGE_MS (6 hours, src/registry.ts:80).

FAQ

Q: What is the relationship between this plugin and the official built-in plugin list?

A: It explicitly disables the official read-only list ui-settings-plugin-inventory via cordis.patch.yml:13-14, registering its own catalog and manager Tabs as replacements; after removing this plugin, the official list automatically restores.

Q: Strongly recommended to install the manager first before installing other plugins?

A: Yes. The manager's quality gates run dependency graphs, undeclared imports, official package duplicates, and bundle patch line validation on every installation; health checks are available both at runtime and statically, significantly reducing "breaks after install, won't start after restart" situations.

Q: What happens if I tell AI to install a plugin and it runs bare dsh plugin add?

A: The tool guard registered by src/guard.ts will intercept dsh plugin add/remove/update and profile-directed pnpm/npm/yarn/bun add/remove, directly pointing to plugin_install / plugin_uninstall / plugin_toggle tools or dshpm CLI in the rejection reason, and the model will switch to the protected chain. There's also a permanent system prompt rule reminding about this.

Q: What if environment variables like API Keys are needed during installation?

A: src/scan.ts scans the repository's README/.env/package.json/yaml/install scripts before installation, matching TOKEN/KEY/SECRET/PASSWORD/PASS/CREDENTIAL pattern variables; on match, installation pauses and a form appears in the UI for filling in values, which are only injected into pnpm subprocess according to whitelist, other host-sensitive keys won't be passed to third-party prepare scripts.

Q: How to use the command-line version?

A: The plugin comes with a dshpm bin (in the profile's node_modules), with commands including install / remove / update / mount / list / analyze / uninstall-kind, all changes go through the exact same protected chain as the Web UI, and --env KEY=value can be used in non-interactive scenarios to continue installation.

Q: How does the marketplace determine if a plugin I see is installed?

A: Server-side src/registry.ts comprehensively determines via package name, repository URL bidirectional matching, git source (gitHead), and local directory detection; same-name package conflicts are automatically resolved; lists mark "installed" and disable duplicate installation.

Q: Can health checks fix problems?

A: Yes. Level A issues (duplicate line IDs, circular dependencies affecting startup) can be fixed with one click; Level B issues (peer version warnings, official package duplicates) require confirmation before fixing; semantic conflicts (same logic different names) cannot be detected because there's no same name to compare.

Learning Curve

Beginner — after installation, new Tabs appear in "Settings", most operations can be done by clicking the UI; documentation only needed for advanced scenarios like CLI/quality gate whitelists.

Known Issues and Limitations

Disabling dependent entries may cause profile startup failure (official fail-loud design); need to manually delete the managed block in cordis.patch.yml to restore
Installing bundle from git requires approving pnpm allowBuilds in terminal (command output echoes missing items)
Random lines (mount lines without explicit IDs) cannot be enabled/disabled via this manager, because IDs change on every mount
Git sub-package installation for monorepos requires specifying subdirectory with #path:<dir> convention, subdirectory must be within clone cache
Quality gate may falsely flag plugins with undeclared runtime dependencies (conservative strategy), can be exempted via whitelist
Official packages can only be peerDependencies by default, regular dependencies will install a second copy and hijack official loader lines; exemption whitelist is @deepseek-ai/schemastery and @deepseek-ai/cosmokit (see src/analyze.ts:55)
Installation guard only intercepts agent tool calls, cannot prevent users from manually executing bare dsh plugin in terminal
Local directory installation (non-git) update detection reports "undetectable"; git URL source requires manifest to record installed commit (gitHead)
Health checks are static + best-effort: same-name registration conflicts rely on source code regex scanning (dynamically constructed names cannot be detected); semantic conflicts have no same name to check, not within detection scope
Dependencies manually installed via official CLI will not be automatically mounted, this manager will show "not mounted" and provide "mount"/dshpm mount, won't擅自 change profile behavior
Environment variable filtering only covers TOKEN/KEY/SECRET/PASSWORD/PASS/CREDENTIAL patterns, unmatched host variables may still enter pnpm resolution process during git source installation (installed as link semantics, third-party scripts not executed)
Marketplace proxy only reads HTTP_PROXY/HTTPS_PROXY; system proxy/rule-based accelerators are ineffective on Node processes (undici doesn't read system proxy)
Marketplace index project (DSH-Plugins-Marketplace) is third-party maintained; GitHub API unauthenticated rate limit of 60/h only affects star count enrichment for catalog unique entries, list itself is unaffected

能力	说明
查看	合并展示层栈/依赖/挂载行/运行条目；手动安装未挂载的依赖显示"未挂载"并可一键挂载
实时启停/卸载	managed 块编辑 patch，经 loader 直接应用，实时生效、重启后持久；删除已装插件（含 bundle）同步实时卸载其运行条目与遗留 managed 块，客户端启动表立即清除（删除后刷新不再加载已删的 bundle 脚本）；禁用/卸载插件时按归属标记管理其自带 agent 预设（卸载清原版、用户改过的保留并报告；禁用零损失归档、重新启用自动恢复；归属标记 `.dsh-preset-owner.json` 中立标准 + 兼容 gamelike/dsh-agent-rp 既有标记，经宿主 agentPresets 服务删除）
安装	官方 dsh plugin CLI + 质量门 + 自动回滚；非 bundle 自动写挂载行并实时加载；git 源自动 clone、已发布 npm 优先；多类型安装：skill（SKILL.md→`~/.dsh/skills`，热加载）与 agent 预设（agent.cordis.yml→`~/.dsh/.agent-presets`，官方发现机制直接可见）直装+记录；非插件/skill/预设仓库拒绝并加入市场屏蔽名单；git 源安装前扫描仓库所需环境变量（TOKEN/KEY/SECRET 形态），缺则暂停询问、行内填写后继续，answers 仅按扫描白名单注入（防 PATH/HOME 注入），宿主敏感键不传给第三方脚本
更新	检查更新（npm dist-tag / git HEAD / 安装 commit），更新带质量门与回滚；含管理器自身（自更新）——管理页可直接点更新升级，失败自动装回旧版本
健康检查	依赖图/缺失/循环/重复行 id/同名注册冲突（服务/工具/section/路由）/peer 版本/官方包重复；运行中追加 pending 与失败诊断；A 级问题一键修复、B 级建议确认后修复
环境管理	启停、复制/转移插件、创建/重命名/删除 profile（官方 profile 只读）、备份导出/导入恢复（差异对比后逐项受保护恢复）
市场	静态索引（topic:dsh-plugin 全量 ~3100 条，多源兜底 + gzip + 磁盘缓存 + 新鲜度门控）+ awesome 精选覆盖层 + dsh.so 独立验证/安全扫描徽标（L1-L5 + 风险等级叠加）；服务端已安装判定（包名/repository 双向/git 源/目录探测）；更新检测（索引版本对比）；同名包冲突消解；24h 缓存、超时预算、代理支持、失败负缓存
agent 工具	plugin_status/search/install/uninstall/toggle + 安装守卫（拦截裸命令并引导）+ 提示词注入；plugin_search 自然语言检索市场（name/topics/描述加权），结果提示安装前先浏览仓库