Foreword

In DeepSeek Harness (DSH), plugins are one way to extend the Web UI. However, plugins themselves are often scattered across GitHub repositories. Before installation, you need to locate the repository, verify the version, download the package, and install it to a specific Web Profile. Afterwards, updates and removals must be handled separately.

dsh-plugin-installer consolidates these steps into the DSH Web UI. It adds a Plugin marketplace tab under Settings → Plugins, designed to discover DSH plugins from GitHub, verify installability, and install plugins into the selected DSH Profile.

This is a third-party community project and does not represent an official app store from DeepSeek / High-Flyer. DSH adopts a plugin-based extension model, and this project integrates discovery, installation, updates, and Profile switching into a single web interface.

What Is This

dsh-plugin-installer is maintained by Toukaiteio and is positioned as:

An in-app marketplace and Profile switcher for DeepSeek Harness.

It integrates into the DSH official Web UI plugin slot, providing a Plugin marketplace page to discover repositories under GitHub dsh-plugin and dsh topics, and perform DSH bundle verification before installation. It runs within the DSH Web Profile and is not a standalone management site.

Core Features

  • Discovers plugin repositories online from GitHub dsh-plugin and dsh topics.
  • Excludes the DeepSeek Harness host repository to prevent the host repository from appearing in marketplace results.
  • Verifies dsh.bundle.patch in the root package.json before installation.
  • Prioritizes using published .tgz build artifacts from GitHub Releases; source installation is only allowed when a checked-in JavaScript entry exists.
  • Supports selecting Release versions from the marketplace list; defaults to prioritizing stable releases.
  • Validates the SHA-256 of Release archives when GitHub provides a digest.
  • Installs into the selected DSH Profile.
  • Detects installed status via GitHub dependency specs and package repository metadata.
  • Performs automatic update checks for GitHub Release versions and provides in-page update and removal actions.
  • Supports self-update checks for the marketplace plugin itself, allowing one-click updates to the active profile and applying changes via a restart action.
  • UI text and date formats follow the official DSH language preference.
  • Provides Web Profile list, quick open Profile, and create Web Profile.
  • Offers restart guidance and a one-click restart action after installation to the active profile.
  • Uses 12-minute per-query, per-sort, per-page caching on both server and client sides to reduce GitHub API pressure and speed up repeated access.
  • Infinite scrolling fetches the next GitHub search page before the current list ends.
  • Preserves the two GitHub-supported repository search orderings: updated time and star count.
  • Supports configuring a GitHub API token within the marketplace UI, with an environment-variable fallback.

Installation Requirements

  • Node.js >=22.19.0
  • pnpm >=10
  • DeepSeek Harness 0.1.0-rc.6 or a compatible release
  • A running DSH Web Profile for the in-app UI

Installation and Activation

Windows

On Windows, you can run the following PowerShell installer:

irm https://raw.githubusercontent.com/Toukaiteio/dsh-plugin-installer/main/scripts/Install-DshPluginInstaller.ps1 | iex

macOS and Linux

On macOS or Linux, first download the Bash installer, then execute it:

curl --fail --location --remote-name https://raw.githubusercontent.com/Toukaiteio/dsh-plugin-installer/main/scripts/install-dsh-plugin-installer.sh
bash ./install-dsh-plugin-installer.sh

To install to another Profile or to avoid starting DSH Web after installation, you can pass explicit parameters:

bash ./install-dsh-plugin-installer.sh --profile work --no-start

Manual Installation

If using a local package file, you can add it to the target Web Profile:

dsh plugin --profile web add ./dsh-plugin-installer-<version>.tgz
dsh web

After starting, open:

Settings → Plugins → Plugin marketplace

GitHub API Token

If the anonymous GitHub API limit is reached, you can configure a token within the marketplace:

Settings → Plugins → Plugin marketplace → GitHub request settings

After saving, the token is not returned to the browser. The plugin saves its configuration at:

$DSH_HOME/config/dsh-plugin-installer.json

For unattended installation, a server-side GITHUB_TOKEN environment variable is also supported; it is used when no plugin-saved token is present.

Installation Verification

The marketplace treats GitHub topics only as discovery clues, not as trust judgments. Upon choosing to install, the DSH host side reads the repository metadata and latest Release, then fetches the root package.json and requires a valid dsh.bundle.patch.

It prioritizes selecting a <package-name>-<version>.tgz Release asset that matches the package and verifies the digest when GitHub provides one. If no Release is available, a commit-pinned source install is only allowed if a checked-in JavaScript entry exists in the corresponding commit.

If a repository has neither a usable Release archive nor a verifiable built JavaScript entry, the marketplace rejects the installation and provides an explanation. Source fallbacks requiring a prepare build script will require individual confirmation per plugin.

Installed Plugin Management

The marketplace follows DSH’s language preference and formats repository dates accordingly.

The installed plugin status can be detected via GitHub dependency specs and package repository metadata. For GitHub Release versions, the marketplace performs automatic update checks and allows in-page update and removal actions.

The marketplace plugin itself also has self-update checks, supporting one-click updates to the active profile and applying new builds via a restart action.

Use Cases and Notes

Suitable for the following scenarios:

  • You frequently need to install, update, or remove plugins within the DSH Web UI.
  • You need to quickly find projects under the dsh-plugin / dsh topics on GitHub.
  • You need to switch between, open, or create multiple DSH Web Profiles.
  • You want to see Release verification, package verification, and failure reasons before installation.

Please note before use:

  • Plugins run within the current DSH process; it is recommended to review the source code and license before installation; the package lists LICENSE in files.
  • Do not use NODE_TLS_REJECT_UNAUTHORIZED=0 to bypass certificate verification.
  • The GitHub token is used to handle API limits; it is not returned to the browser after saving.
  • Marketplace results come from GitHub topics and do not constitute a final endorsement of repository security.
  • This is a community project and has no official affiliation with DeepSeek / High-Flyer.

Conclusion

dsh-plugin-installer consolidates the DSH plugin installation path—from manually locating repositories, downloading packages, and installing plugins—into a single web page, covering discovery, verification, installation, updates, and Profile switching.

Project entry (GitHub):

https://github.com/Toukaiteio/dsh-plugin-installer