Foreword

DeepSeek Harness (DSH) adopts an “everything is a plugin” architecture, allowing users to enhance functionality through extensions. In the absence of a unified catalog and lifecycle management tools, manually managing plugin sources, permissions, and versions can easily introduce security risks. DSH Store is a third-party plugin marketplace and secure lifecycle manager that runs within the DSH Settings page. It is designed to provide DSH with a controlled mechanism for plugin discovery, installation, updates, and rollback.

Core Features

DSH Store is built on the standard DSH Bundle + Host Plugin + Client Bundle structure and provides the following capabilities within the Settings page:

  1. Plugin Marketplace: Provides third-party plugin browsing, permission viewing, and installation entry, supports hierarchical Catalog indexing, and lazy-loads details page by page.
  2. Automated Management: Provides an automatic submission entry that reads the necessary files automatically, without manually filling in the Catalog.
  3. Security Guardian: Provides a Guardian process to verify Profile and Boot ID, and monitor health status. Guardian is the sole startup owner of the DSH web Profile.
  4. Precise Rollback: Provides a secure fixer supporting precise rollback of Catalog-pinned Commits.

Installation and Enablement

Before installation, the following conditions must be met: the target Profile has the Web client enabled (for example, web), and the local environment has Node.js ^22.19.0 or >=24.0.0 installed.

1. Back Up Configuration Files

Because the Guardian has not been run during the first installation, automatic backup and health check protection are unavailable. Please manually back up the following files for the target Profile first:
* package.json
* pnpm-lock.yaml
* pnpm-workspace.yaml
* cordis.patch.yml (if the file exists)

2. Install the Marketplace

Install using a fixed GitHub Commit via the official DSH CLI. Do not use floating branches:

dsh plugin --profile web add 'git+https://github.com/AI-Scarlett/DSH-Store.git#0bc733064bfc8ff16f6e8144188a7ac563092e12'

3. Verify Configuration

Run the following command to confirm that the configuration can be successfully synthesized:

dsh --profile web --dump-config

4. Install Guardian

In the marketplace, install the bundled DSH Guardian using a standalone plan. Guardian runs outside the DSH process via macOS launchd and is responsible for verifying the heartbeat, starting the Host, and monitoring health status.

Typical Usage

After installation, all plugin operations (installation, update, migration, deactivation, activation, and uninstallation) will enter a one-time plan workflow with precise confirmation, pre-hash validation, backup, and rollback on failure.

First Installation Process

  1. Execute the installation command.
  2. Synthesize the configuration and accept it.
  3. Install Guardian in the marketplace.
  4. After confirming that the Guardian heartbeat is normal, generate the RESTART DSH <profile> plan and restart.

Security Fix

When an error occurs during the marketplace or plugin update, the fix page will only display the command after the Catalog Pin is completed. At that time, you can use the fixer provided by the marketplace to perform a precise rollback.

Notes and Applicable Scenarios

  1. Commit Pinning: Installation must use a specific GitHub Commit ID; do not replace it with a floating branch such as main.
  2. Guardian Exclusivity: Guardian is the sole startup owner. Starting a second instance will contend for 127.0.0.1:3080 and exit with EADDRINUSE. After installing Guardian, do not manually run dsh web or pnpm dsh web.
  3. Manual Operation Risk: The marketplace only displays the Catalog-pinned Commit and the manual GitHub command; this operation is not protected by the marketplace’s backup and health check mechanisms.
  4. Script Handling: All plugin updates are run with --ignore-scripts; only scripts explicitly listed in the Catalog use the package-specific --allow-build=<package>.
  5. External Directories: External directories only provide candidates pending review and do not provide direct installation.

Summary

DSH Store provides DSH users with one-stop infrastructure from plugin discovery to secure maintenance, ensuring traceability and security in plugin management.