dsh-market/dsh-market
(Recommended) The plugin market inside DSH: a Settings page to browse and search the full community catalog by category, with confirmed one-click installs and an installed-plugins view.
Install
via npm
Resolves a published tarball rather than cloning the repository, and installs without any extra setup. Swap `web` for your profile name if you run another one.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/web/pnpm-workspace.yaml.
Due diligence
dsh-market is a DeepSeek Harness plugin that adds a plugin catalogue and management page to DSH Settings. It lets an agent operator browse and search the curated community catalogue, filter by category, inspect screenshots and descriptions, install or update plugins after confirming their sources, manage themes, and view installed plugins.
The market reads its live catalogue from https://awesome-dsh-plugin.com/plugins.json, with a bundled snapshot as an offline fallback. It uses registry-verified npm tarballs where available and otherwise obtains plugins from GitHub. Installation, updates and uninstallation change the DSH profile; some changes become active after a page refresh, while others require a restart. The plugin also offers JSON backup and restore, optional WebDAV storage, diagnostics, and sanitised log export. Restart handling can be disabled with allowRestart: false.
It is intended for developers who want a graphical way to discover and maintain DSH plugins in the web profile. It is the wrong choice when a manually controlled, non-catalogue installation process is required: only sources in the curated registry are accepted, listed plugins are third-party code, and terminal or CLI-surface plugins are flagged before web-profile installation. The plugin can reach profile configuration and, when backup or WebDAV features are used, handle credentials contained there; WebDAV uploads are restricted to HTTPS targets.
The market loads plugin metadata from https://awesome-dsh-plugin.com/plugins.json. This includes curated entries, npm mappings and star counts; CI refreshes the data daily. A bundled snapshot is used as an offline fallback. Only sources listed in that registry are accepted. When a plugin is published to npm, installation prefers an npm tarball and verifies it against the repository. GitHub-only installs depend on the connection to GitHub.
The Settings page provides category filters, search, star-count and top/new sorting, bilingual descriptions, screenshots, source confirmation and live progress. Screenshots are author-curated through the registry or extracted from a README; they are loaded from GitHub only after the install dialog is opened. Most installations take effect after a page refresh. Plugins installed during the current session can be removed live.
Updates can check an npm version or a pinned commit against HEAD. The interface supports per-plugin updates and updating all plugins. Build scripts remain blocked by default with pnpm version 10 or later; allowing a build script is an explicit per-package choice. Missing pnpm can be detected and set up through the interface.
A profile's plugin list and configuration can be exported as readable JSON or imported on another machine. The interface can store backups on WebDAV with daily automatic backup. Restore validation occurs before writing, with rollback on failure. Backups may contain credentials from the profile configuration. WebDAV requires HTTPS, refuses private-network targets, and does not store the password in the browser.
Diagnostics show plugin load order, bundle entries, official/community badges, duplicate loaders, dependency-version mismatches, multiple core-package versions, overrides and invalid configuration entries. Log export produces a sanitised plain-text file; home paths and credential shapes are masked, and the log is not sent elsewhere.
For changes that cannot hot-load, the page shows a pending-change notice and can offer a restart action. The restart request accepts same-origin POST requests and additionally requires a direct loopback client; forwarded requests are rejected. The replacement relaunches the exact DSH entry, arguments, environment and working directory. Set allowRestart: false when a supervisor such as systemd, launchd or pm2 owns restarts.
Written from the project's own documentation and kept in sync with it. Where the two disagree, the source is authoritative — read the README on GitHub
Same category
bradeGithub
GitHub-topic-driven plugin & skill marketplace: a Settings page that browses the auto-collected registry (the whole dsh-plugin topic plus the skills index, CI-refreshed every 2 hours) with one-click install, type detection, install-script and host-shadow-dependency safety confirmations, env-key management, and the STANDARD.md recognition spec.
Sanqi-normal
In-harness plugin market for the dsh web GUI: browse the awesome-dsh-plugin.com catalog and install/uninstall plugins into a profile from Settings → Plugins → Plugin Market.
whyihaveyou
In-app plugin store for the DSH Web UI: browse, search, one-click install, compat badges.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
Noob-stupid
A plugin management panel: one-click enable/disable for installed plugins plus a GitHub dsh-plugin marketplace with details and one-click installs.
yyyyukari
Steam Workshop-style in-app plugin browser: search, hot/newest/trending (7/30/90-day) sorting, Chinese keyword mapping, bilingual descriptions and README translation, plugin-signature filtering, and one-click install/update.
buhuikongpan
Layered plugin manager for DSH web: native plugins grouped read-only by system/WebUI/tools, user extensions with enable/disable, register, uninstall and editable descriptions.
