dsh-base-plugin

English | 中文

An enhancement plugin for DeepSeek Harness (DSH): plugin market, MCP management, session management, LAN access, notifications, terminal, file changes, prompt optimization — 12 capabilities delivered entirely through Settings pages and the tools dock, without touching DSH source code. Bilingual UI (follows the DSH language setting); every page adapts to phone screens.

Features

Feature	Entry	One-liner
Plugin Market	Settings → Plugins	Search GitHub ecosystem-certified plugins; one-click install/uninstall (DSH-plugin validation with auto-rollback)
MCP	Settings → MCP	Edit the server list as YAML, hot-reloads on save; per-server live status plus a health panel (calls / error rate / latency)
Skills	Settings → Skills	Browse registered skills; create/edit/delete under ~/.dsh/skills/ — writes hot-register instantly
System Prompt	Settings → System Prompt	Edit the global persona (effective for every session); {{model}}/{{cwd}} variables; hot-reload on save
Usage	Settings → Usage	Token totals across every session, per-model cost estimates (editable prices), 31-day trend, top sessions
Sessions	Settings → Sessions	Every persisted session in one list (filter/cross-session full-text search); delete (rows vanish from every sidebar live); export MD/Zip; time machine (fork from any turn)
Ops	Settings → Ops	Upstream version check (local vs latest official + behind-count); health check (service mounting / route probe / state-file permissions / DOM contracts / notification permission)
Notifications	Settings → Notifications	Turn finished / job settled / approval waiting / context nearly full → browser notifications (zero-config; the page must stay open — a background tab is fine, catches up on return) / Bark / ntfy / webhook
LAN Access	Settings → LAN Access	Pair by QR and use the full DSH UI from any device on the LAN (HMAC device cookies + exponential backoff)
File Changes	session ⋯ menu	Three tabs: Workspace Changes (git baseline diff, strictly read-only) + Commit History (local-unpushed / remote-pushed segments; click a commit to expand its diff) + Operation Log (AI read/write/bash trail with ±lines and success/failure)
Terminal	session ⋯ menu	Multiple PTY terminals: Enter to run, Ctrl+C interrupt, streaming output
Monitor	session ⋯ menu	Three tabs: Overview (turns/timing/tokens/context pressure), Tasks (background jobs + subagent tree), System (CPU/memory/load, pressure-based)
Prompt	session ⋯ menu	Type a rough idea → the default model rewrites it into a structured prompt; one-click copy
Message rail	in-session (automatic)	Slim tick bar beside the scrollbar: blue = user / green = AI messages; click to jump, hover for a preview
Service stop/restart	sidebar foot	Graceful exit (sessions flush first); restart reloads in place without a duplicate tab

All tool panels dock as a REAL column right of the chat (the app frame squeezes — nothing is covered); drag the left edge to resize; switch panels in place.

Requirements

• A running DeepSeek Harness (DSH) web deployment [TODO: minimum DSH version]
• Node.js ≥ 20 (ships with the DSH host) [TODO: confirmed minimum]
• git (optional — the File Changes panel needs it; the entry auto-hides without)
• pnpm (needed by the Plugin Market installer)

Quick Start

# 1. Install into the dsh web profile
cd ~/.dsh/profiles/web
pnpm add /path/to/dsh-base-plugin

# 2. Add the composition row to the PROFILE-level patch (NOT
#    ~/.dsh/cordis.patch.yml — the home patch applies to every profile,
#    while dsh-base-plugin resolves only where it is a dependency)
cat >> cordis.patch.yml <<'EOF'
- insert:
    - id: dsh-base-plugin
      name: dsh-base-plugin
EOF

# 3. Restart dsh web — new pages appear in Settings

Set GITHUB_TOKEN in the dsh process environment to raise the market's GitHub API rate limit.

Usage Examples

Install a market plugin: Settings → Plugins → Plugin Market tab → search (Chinese or English) → certified rows carry a "topic verified" badge → click Install → composition rows land in the managed block and hot-load.

Configure an MCP server: Settings → MCP → in the YAML editor:

- transport: stdio
  serverName: my-server
  command: npx
  args: [-y, @some/mcp-server]

Saves hot-load; the health panel starts accumulating this server's calls and error rate.

Fork a session from any turn: Settings → Sessions → a row's "Time machine" → every completed turn listed → pick one → "Fork here" → the child session appears in every sidebar immediately.

Optimize a prompt: session ⋯ menu → Prompt → type a rough idea (Cmd/Ctrl+Enter) → get a structured prompt → one-click copy.

Project Layout

dsh-base-plugin/
├── index.js               # host-half entry: state migration, managed block, route registration, notify/proxy wiring
├── client.js              # browser half (build artifact; single-file protocol constraint)
├── lib/                   # host feature modules
│   ├── routes.js          # /dsh-base-plugin/api/* table dispatcher (single-flight / same-origin / Host allowlist)
│   ├── routes/            # per-domain route modules
│   ├── market.js          # GitHub market search (cache / single-flight / soft matching)
│   ├── installer.js       # pnpm install + id-collision fence + spec allowlist
│   ├── monitor.js         # session monitor data plane (projections + token fold + subagent tree)
│   ├── mcp-health.js      # MCP health aggregation (two-level aggregate + epoch fence)
│   ├── file-ops.js        # operation-log fold (write/edit/read/bash)
│   ├── export.js          # Markdown transcript fold
│   ├── timemachine.js     # turn listing + official fork
│   ├── notify.js          # notification bridge (browser default + Bark/ntfy/webhook + context guard)
│   ├── prompt-optimizer.js# prompt optimizer (official llm service)
│   ├── sessions.js        # session deletion (five-step idempotent) + export/time machine
│   ├── git.js             # baseline/status/diff (numstat -z)
│   ├── sysres.js          # system resource sampling (pressure-based memory)
│   ├── mobile/            # LAN access (proxy/auth/QR/PWA)
│   └── ...
├── src/                   # browser-half sources (25 modules, concatenated into client.js)
├── scripts/
│   ├── build-client.mjs   # build chain (hooks check / ORDER assertion / byte-identical verify)
│   ├── check-hooks.mjs    # React hooks-order static check
│   └── verify-routes.mjs  # route-surface golden snapshot
└── cordis.patch.yml       # this package's composition layer

FAQ

Empty session list on the phone? The mobile proxy ships a crypto.randomUUID polyfill (LAN HTTP is not a secure context); if still empty, check that the proxy port is not firewalled.

Market search rate-limited? Without a token, GitHub allows 10 searches/minute. Set GITHUB_TOKEN in the dsh process environment and restart.

Restart opened a duplicate browser tab? Fixed (the re-exec appends --no-open). Upgrade if you are on an older version.

File Changes says "no changes"? The panel shows the diff relative to the git baseline (the last commit) — not a disk inventory. A fully-committed workspace correctly shows empty; click Refresh inside the panel for the latest.

Operation Log misses files changed via bash? By design: the Operation Log covers the AI's write/edit tool trail; bash-made file changes surface in the Workspace Changes (git) tab — the two tabs are complements.

A removed MCP server came back? The managed block is always regenerated from $DSH_HOME/dsh-base-plugin.json. Remove servers via the Settings page; never hand-edit the managed block of cordis.patch.yml (content outside the markers is yours to edit).

Security Notes

• The state file is written 0o600 (it carries the HMAC secret), same standard as DSH's own credentials
• Pairing: 8-char code (~40 bits), single-use, per-IP exponential backoff; device cookies are HMAC-SHA256 signed, HttpOnly, 30-day sliding renewal, individually revocable or rotatable all at once
• HTTP boundary: same-origin checks on every method + a loopback Host allowlist (DNS-rebinding defense); shell-free process execution + spec allowlist; kebab-case skill-name validation (no traversal)
• Mobile access transports plain HTTP on the LAN — pair over an encrypted overlay like Tailscale when remote

Development

The browser half is protocol-constrained to a single file but authored split. After editing src/:

pnpm build:client     # regenerate client.js (hooks check + syntax check included)
pnpm check:client     # verify byte-identical sync (a pre-commit hook auto-rebuilds)

The build chain carries three guards: a hooks-order static check, byte-identical src↔artifact comparison, and a route-surface golden snapshot (node scripts/verify-routes.mjs).

How It Works (brief)

• The host half (index.js + lib/) serves /dsh-base-plugin/api/* on the DSH web server
• Authoritative state lives in $DSH_HOME/dsh-base-plugin.json; the managed block of ~/.dsh/cordis.patch.yml (between # >>> dsh-base-plugin managed markers) is always regenerated from it — dsh hot-watches that file, so changes take effect without a restart
• The browser half (client.js) registers UI through standard slots and localizes via the DSH locale service
• Statistics / health / operation logs fold incrementally from official services and the durable log (seq cursors + single-flight + epoch fences) — polling is near-zero cost

License

MIT