Introduction

DSH’s plugin model emphasizes “everything is a plugin”. However, plugin sources are scattered, and handling enablement, restart, and uninstallation after installation can be fragmented when using the command line alone. dsh-plugin-market is a web platform plugin that integrates the mydsh.dev plugin catalog into the DeepSeek Harness settings page, used for categorized browsing, searching, installing, enabling, disabling, uninstalling, security assessment, and one-click automatic restart.

This plugin is produced by the non-official community mydsh.dev and is not the DeepSeek official app store.

What is this

dsh-plugin-market provides a “Plugin Market” entry in the DeepSeek Harness settings page for browsing the mydsh.dev plugin catalog. The data source currently has 5,596 candidates, of which 3,656 have been verified as directly usable, and 1,940 invalid ones have been hidden.

This plugin only displays DSH plugins that have been verified as directly usable; unknown, unparsable, pure UI packages, and incomplete packages will not be displayed.

The repository owner field is Jason Jiang <uluckystar>, the license is MIT, and dsh.client.platform in package.json is web.

Core Features

Categorized Browsing

The plugin market displays plugins in 10 categories:

All / Agent / MCP / Dev Tools / UI / Visual / LLM / Memory / Data / Integration

Categories include counts, are sorted by star count, and support “Load More”.

Local search is used for millisecond-level matching of plugin names, bilingual descriptions, and topics.
When “AI” is checked, it calls mydsh.dev’s AI search service to return results based on semantic understanding of the query.

Installation & Lifecycle

The install action only downloads the plugin and does not enable it automatically. Whether to enable it is decided by the user’s subsequent operations.
Supports install, enable, disable, and uninstall. After enabling or disabling, a one-click automatic restart can be performed to make the configuration take effect. This capability adapts to the following environments:

PM2 / Manual Start / Docker / systemd / Windows

The plugin lifecycle consists of seven states:

Not Installed / Installed · Not Enabled / Enabled · Restart Effective / Enabled / Disabled · Restart Effective / Incompatible · Not Recommended / Install Failed

Failed installations are logged and can be retried.

Security

Security assessment queries the mydsh.dev security report; if no report exists, it guides the user to submit one.
The following protections are in place during plugin execution:
- Auto-backup before writing config
- Post-write validation
- Auto-rollback on failure
- DSH core component protection
- Incompatible plugins are prevented from enabling
- Failed installations are logged and retryable
- Plugin name whitelist
- Same-origin check
- Request body limit

Installation & Enabling

When installing from GitHub, use the following command:

dsh plugin --profile web add github:uluckystar/dsh-plugin-market

Restart DSH after installation and view the plugin in Settings → Plugins → Plugin Market.
If it is a local development directory, you can use:

dsh plugin --profile web add /path/to/dsh-plugin-market

Plugins installed via the plugin market later need to be “enabled” first, and then take effect after restarting DSH as prompted.

Configuration

The configuration given in the README is located in cordis.patch.yml and includes the following configuration items:

- id: plugin-market
  name: dsh-plugin-market
  config:
    marketBaseUrl: 'https://mydsh.dev'
    profileName: 'web'
    pnpmCommand: 'npx -y pnpm@11.7.0'
    proxyUrl: 'http://127.0.0.1:7897'
    catalogCacheMs: 21600000
    installTimeoutMs: 300000
    githubToken: ''

githubToken is optional; without a token, it uses raw/HEAD + proxy validation. catalogCacheMs corresponds to the plugin catalog cache TTL, which is 6 hours in the example.

Typical Interfaces

The following interfaces are used to operate the plugin market; the interface names and parameters are as follows:

POST /api/plugin-market/browse
Parameters: {category, limit} (limit=0 means full list)

POST /api/plugin-market/search
Parameters: {query, ai}

POST /api/plugin-market/install
Parameters: {repo}; installation only downloads, does not auto-enable

POST /api/plugin-market/enable
Parameters: {repo}

POST /api/plugin-market/disable
Parameters: {repo}

POST /api/plugin-market/uninstall
Parameters: {repo}

POST /api/plugin-market/restart
One-click automatic restart of DSH

POST /api/plugin-market/assess
Parameters: {repo}

Caching & Performance

The plugin catalog uses disk-persistent cache with the path:

$DSH_HOME/storages/plugin_market_catalog.json

The cache TTL is 6 hours and is strictly validated. Category switching is pure local filtering. AI search has a 6-second timeout protection.

Applicable Scenarios & Notes

Suitable for developers who use DSH to manage web profile plugins and need to centrally browse and enable community plugins. Notes before use:
- This plugin is produced by the non-official community mydsh.dev and is not the DeepSeek official app store.
- Plugins run with the current dsh process permissions; check the target plugin’s source code, license, and dependencies before installation.
- Installation only downloads; it does not auto-enable. You need to restart DSH as prompted after enabling or disabling.
- Incompatible plugins will be rejected from enabling; failed installations are logged and can be retried.

Related Links

It consolidates plugin browsing, enabling, restarting, and security checks into one settings page, reducing scattered operations.

GitHub: https://github.com/uluckystar/dsh-plugin-market
mydsh.dev plugin catalog (data source): https://mydsh.dev/plugins