dsh-workshop: Lightweight Plugin Toggle
dsh-workshop is a lightweight plugin management panel maintained by Zlyraz, designed to address issues in DeepSeek Harness (DSH) such as unclear plugin provenance, the lack of intuitive toggles, and insufficient risk control. The plugin determines package identity by analyzing `pnpm-lock.yaml`, and supports NPM packages, GitHub repositories, and local development mode. Its "vocal switch" enables hot updates by modifying the configuration file, and it includes a manually maintained risk list. Security validations include route loopback restrictions, same-origin request checks, and atomic file replacement mechanisms. Additionally, the plugin has specific requirements for module ID constraints and property access patterns, and developers should be mindful of permission-related risks.
Read Moredsh-workshop: Adding a Local Plugin Store to the DSH Web UI
dsh-workshop is a Steam-style plugin marketplace integrated into the DeepSeek Harness Web UI, designed to address the issues of scattered community plugins, inconsistent installation sources, and unstable GitHub access. It provides a "Workshop" entry in the sidebar, offering browsing of 850+ plugins, category filtering, and bilingual descriptions in both Chinese and English. Core capabilities include one-click installation with npm as the primary source and automatic fallback to GitHub sources, built-in mirror speed testing across 7 mirrors to accelerate downloads, and safety mechanisms such as a TUI plugin blacklist, installation pre-checks, artifact verification, and automatic rollback. Additionally, it supports unified management and updates for installed plugins. Users require a Node.js 18.17+ environment and can use the tool by adding plugins via the command line and restarting the service. This tool is positioned as a local development aid, providing basic security
Read More