Introduction¶

DeepSeek Harness (DSH) adopts the Cordis architecture of “everything is a plugin.” The final structure of a DSH Web Profile is typically determined by plugins, Groups, cordis.patch.yml, and the runtime Loader state together. When reading YAML directly, it may not be possible to quickly answer: which plugins are currently actually loaded, which Group they belong to, what state nodes are in, and what Patch a single configuration override will eventually form.

dsh-plugin-visual-composer is a community plugin running in the DeepSeek Harness Web interface. It converts the current Profile’s Cordis plugin tree into a visual canvas for viewing the plugin tree, adding drafts, adjusting overrides, and reviewing sanitized changes before saving.

What is This¶

The dsh-plugin-visual-composer introduced below is maintained by VanillaCreamer under the MIT license. It is an independent community prototype and is not an official DeepSeek AI plugin.

Verified data provides the following version information:

Package version: 0.1.0
Currently verified DeepSeek Harness version: 0.1.0-rc.6
Node.js: ^22.19.0 or >=24.0.0
Target runtime: DSH Web Profile

DeepSeek Harness is currently still in Developer Preview, and the plugin interface may change in subsequent RC versions.

Core Features¶

View the Real Plugin Tree of the Current Profile¶

The plugin reads the current DSH Web Profile’s real Loader tree and displays nested Groups, plugin status, module names, Entry IDs, injection information, and configuration. It also allows filtering the plugin tree by ID, module name, or Label.

Add and Orchestrate Draft Nodes¶

You can add plugin or Group drafts from the left Palette and drag Composer-managed green nodes into the Root or any Group. For existing Entries, you can create disabled and full config overrides.

Review Sanitized Diff Before Saving¶

Before saving, it displays the Composer-managed block Diff after sanitization. The plugin uses preview signatures to ensure that the “reviewed draft” and the “actually written draft” are consistent, and writes configurations using optimistic Revision, anti-concurrency overrides, and atomic replacement.

Hot Module Replacement (HMR), Backup, and Rollback¶

When HMR is available, the plugin waits for the root Include transaction to actually commit before reporting success; if HMR is rejected or times out, it automatically restores the file before modification. The plugin also automatically creates rotation backups and supports one-click rollback of the most recent backup in the Web UI.

Sensitive Configuration Protection¶

The plugin performs sanitization and edit protection on credentials, authentication fields, !!js expressions, and sensitive configurations. Verified data indicates that sensitive configurations will not be sent directly to the browser, including API Key, Token, Secret, Password, Authorization, Cookie, Credential, Secret Key, Authentication URL, !!js expressions, etc.

Installation and Enablement¶

Install Release tarball¶

Download dsh-plugin-visual-composer-0.1.0.tgz from the Releases of this repository, then install it to the Web Profile:

dsh plugin --profile web add ./dsh-plugin-visual-composer-0.1.0.tgz

Start DSH Web:

dsh --profile web

Build from Source¶

git clone https://github.com/VanillaCreamer/dsh-plugin-visual-composer.git
cd dsh-plugin-visual-composer
npm ci
npm run pack

After building, execute the installation and startup:

dsh plugin --profile web add ./dsh-plugin-visual-composer-0.1.0.tgz
dsh --profile web

Uninstall¶

dsh plugin --profile web remove dsh-plugin-visual-composer

Note: Uninstalling does not actively delete historical backups, nor does it remove the Composer-managed blocks that have been written.

Typical Usage¶

Open DSH Web.
Go to Settings → Plugins → Visual Composer.
Add installed modules or Groups from the left Palette.
Drag the green draft nodes to the Root or target Group.
After selecting a node, adjust the disabled status or configuration override.
Preview the changes and read the sanitized Diff.
Confirm and save.
When HMR is available, wait for the transaction to commit successfully.

If you need to install a third-party plugin package, the sample command is:

dsh plugin --profile web add <package-name-or-local-path>

Applicable Scenarios and Notes¶

Suitable for developers who need to maintain the Cordis plugin tree of the current Profile in DSH Web, especially those who need to view Group nesting, Entry status, configuration overrides, backup rollback, and other operations.

Pay attention to the following when using it:

This plugin is designed as a high-privilege configuration interface limited to the local machine.
It runs within DSH and can modify the plugin configuration of the current Profile; you should check the source code, license, and permission boundaries before installing.
The API requires the TCP endpoint to be loopback, the Host to be localhost, 127.0.0.0/8, or [::1], the Origin to be consistent, POST to carry a CSRF Token, and the request body size to be limited.
The plugin only maintains areas explicitly marked in cordis.patch.yml, preserving other text and comments.
config overrides are complete replacements, not deep merges; you need to confirm the complete configuration before submitting.
DeepSeek Harness is currently still in Developer Preview, and the plugin interface may change in subsequent RC versions.

Conclusion¶

The value of dsh-plugin-visual-composer lies in transforming the Cordis plugin tree of the DSH Web Profile from “reading YAML” to “viewing the canvas, reviewing Diff, safe saving, and rollback.”

Verified data does not provide a confirmed community directory page URL, so this article does not use it as a valid link. The repository address is:

GitHub: https://github.com/VanillaCreamer/dsh-plugin-visual-composer

dsh-plugin-visual-composer: Cordis Plugin Tree Visual Orchestrator in DeepSeek Harness Web