dsh-plugin-marketplace

GitHub: Scorp1o117/dsh-plugin-marketplace · npm: dsh-plugin-marketplace

Part of the DeepSeek Harness Enhancement Suite — Vision · Soul/Persona · Long-term Memory · Plugin Marketplace.

A plugin marketplace inside the DeepSeek Harness Web UI: browse
github.com/topics/dsh-plugin right
from the settings page — no terminal needed.

• Search the topic by keyword, sort by stars or last update
• Plugin cards with description, stars, language, and update date
• Detail panel: GitHub README summary, install command, repo/npm links
• AI explain: one click asks the configured default model what a plugin
  roughly does, answered in the UI — no need to read the README yourself
• Powered by the public GitHub search API (CORS-enabled, no key needed;
  unauthenticated rate limit 60 req/h)
• Zero client dependencies (React only), no build step — hand-written
  ModuleLoader bundle

Install

As a profile bundle (recommended):

dsh plugin --profile web add dsh-plugin-marketplace

or via the package's dsh.bundle.patch layer — add dsh-plugin-marketplace
to dsh.profile.bundles in $DSH_HOME/profiles/web/package.json.

Manual mount in $DSH_HOME/profiles/web/cordis.patch.yml:

- insert:
    - id: plugin-marketplace
      name: 'dsh-plugin-marketplace'

Upgrading from ≤ 0.2.2? If you previously mounted the plugin manually,
remove that row from cordis.patch.yml before switching to the bundle
install — the bundle layer already inserts the entry, and two entries with
the same id abort boot with duplicate loader entry id: plugin-marketplace.
The two ways are alternatives, not both.

Then restart dsh web (new client plugins require a process restart to be
scanned into the browser roster) and open Settings → Plugin Marketplace.

DSH 0.1.0-rc.7 and newer expose every registered settings namespace, so the
marketplace works without patching official files. Version 0.2.8 and newer
therefore require DSH 0.1.0-rc.7 or newer. DSH 0.1.0-rc.6 users must pin
dsh-plugin-marketplace@0.2.6, the last release carrying the legacy
settings-allowlist compatibility patch.

How it works

The browser half needs no dsh.client.inject packages: it only uses react
(provided by the web runtime) and the slots / locale client services.

Notes

• The GitHub search API returns at most 1000 results; the topic currently has
  280+ repos, so paging covers everything.
• READMEs are fetched per plugin on demand and truncated to ~1200 chars.
• If you see "rate-limited", wait an hour or run the web through a proxy that
  adds a GitHub token.

License

MIT