dsh-plugin-marketplace

GitHub: Scorp1o117/dsh-plugin-marketplace 锟斤拷 npm: dsh-plugin-marketplace

Part of the DeepSeek Harness Enhancement Suite 锟斤拷 Vision 锟斤拷 Soul/Persona 锟斤拷 Long-term Memory 锟斤拷 Plugin Marketplace.

A plugin marketplace inside the DeepSeek Harness Web UI: browse
github.com/topics/dsh-plugin right
from the settings page 锟斤拷 no terminal needed.

• Search the topic by keyword, sort by stars or last update
• Plugin cards with description, stars, language, and update date
• Detail panel: GitHub README summary, install command, repo/npm links
• AI explain: one click asks the configured default model what a plugin
  roughly does, answered in the UI 锟斤拷 no need to read the README yourself
• Powered by the public GitHub search API (CORS-enabled, no key needed;
  unauthenticated rate limit 60 req/h)
• Zero client dependencies (React only), no build step 锟斤拷 hand-written
  ModuleLoader bundle

Install

As a profile bundle (recommended):

dsh plugin --profile web add dsh-plugin-marketplace

or via the package's dsh.bundle.patch layer 锟斤拷 add dsh-plugin-marketplace
to dsh.profile.bundles in $DSH_HOME/profiles/web/package.json.

Manual mount in $DSH_HOME/profiles/web/cordis.patch.yml:

- insert:
    - id: plugin-marketplace
      name: 'dsh-plugin-marketplace'

Upgrading from 锟斤拷 0.2.2? If you previously mounted the plugin manually,
remove that row from cordis.patch.yml before switching to the bundle
install 锟斤拷 the bundle layer already inserts the entry, and two entries with
the same id abort boot with duplicate loader entry id: plugin-marketplace.
The two ways are alternatives, not both.

Then restart dsh web (new client plugins require a process restart to be
scanned into the browser roster) and open Settings 锟斤拷 Plugin Marketplace.

If the install button answers settings namespace "plugin-marketplace" is not exposed to configuration clients: the host apiproxy only lets a
hard-coded allowlist through, and this plugin patches that allowlist on its
first boot 锟斤拷 the running process still answers settings-not-exposed until
dsh web is restarted. Restart once; if the error persists, check the boot
log for [settings-expose] lines (the fix line names the file to edit 锟斤拷
WEB_SETTINGS_NAMESPACES in dsh-host-apiproxy/lib/index.js).

How it works

Layer	File	Role
host shell	index.js	settings-backed install + AI-explain flows; dsh.bundle.patch makes the package a proper profile bundle
browser half	client.js	registers the settings.section "marketplace" tab; fetches GitHub search API; renders cards + detail; "AI explain" button
manifest	package.json	dsh.bundle: { patch: "./cordis.patch.yml" } + dsh.client: { platform: "web" } + exports["./client"] 锟斤拷 discovered by dsh-client-modules

The browser half needs no dsh.client.inject packages: it only uses react
(provided by the web runtime) and the slots / locale client services.

Notes

• The GitHub search API returns at most 1000 results; the topic currently has
  280+ repos, so paging covers everything.
• READMEs are fetched per plugin on demand and truncated to ~1200 chars.
• If you see "rate-limited", wait an hour or run the web through a proxy that
  adds a GitHub token.

License

MIT