Show and tell: dsh-subscribe v2 ? Steam-style plugin marketplace (535-plugin registry, one-command sync, in-chat market tools)

[zoahdev]

Show and tell: dsh-subscribe v2

English below · 中文见后

dsh-subscribe v2 — a Steam-style plugin marketplace for DeepSeek Harness: subscribe once, sync with one command.

Repo: zoahdev/dsh-subscribe · Storefront: https://zoahdev.github.io/dsh-subscribe/

What's new in v2

• 536+ plugin registry — full mirror of awesome-dsh-plugin.com plus a small verified layer (20 plugins audited by us: CI, release, install path, runtime invocation).
• Bilingual storefront (中文/EN): Steam-style subscribe buttons, search, category filters, star/verified sorting, per-plugin one-click copy install command, subscription list import/export, and a 3-step wizard.
• Zero-dependency CLI: list / search / subscribe / unsubscribe / status / export / install / sync (with --dry-run and --json), driving the real dsh plugin --profile <p> add <spec> underneath.
• In-harness plugin: market_search, market_stats, market_install_command — ask your agent to find plugins and produce exact install commands right in the chat. Ships a bundled registry snapshot, so it works offline.

# install the in-harness market tools
dsh plugin --profile web add github:zoahdev/dsh-subscribe#path:/plugin

# or subscribe on the web storefront, export subscriptions.json, then:
node scripts/dsh-subscribe.mjs sync --profile web

Verification (not just "it loads")

CI and local runs prove:

1. registry contract checks (unique ids/specs, verified entries declare versions),
2. CLI end-to-end (subscribe → sync --dry-run),
3. plugin unit tests,
4. packed tarball installed into a fresh project → real apply()/ctx.tools.register → all three handlers executed and asserted (offline snapshot path),
5. fresh DSH profile → tarball install → --dump-config contains dsh-subscribe → dsh web boots to HTTP 200 (bounded 30s retry).

Relationship to dsh-market

dsh-market is a great visual market inside the web UI (one-click install, themes, updates, hot reload). dsh-subscribe is complementary, not a replacement: Steam-style subscription workflow, zero-dependency CLI, in-chat agent tools, and a 536+ registry with an explicit verified layer. Use both.

Honest limits: listed community entries are discovery only (verified: false), not security audits; the web UI one-click install remains dsh-market's domain.

Feedback welcome — especially on the registry contract (registry.json v2), the in-harness tools, and the CLI sync flow.

---

dsh-subscribe v2 — DeepSeek Harness 的 Steam 式插件市场：订阅一次，一条命令装齐。

仓库：zoahdev/dsh-subscribe · 商店页：https://zoahdev.github.io/dsh-subscribe/

v2 新增

• 536+ 插件注册表：完整镜像 awesome-dsh-plugin.com，外加 20 个 zoahdev 已验证插件（CI/发布/安装路径/运行时调用全部实测）。
• 中英双语商店页：Steam 式订阅、搜索、分类、星级/已验证排序、每个插件一键复制安装命令、订阅清单导入/导出、三步向导。
• 零依赖 CLI：list / search / subscribe / unsubscribe / status / export / install / sync（支持 --dry-run、--json），底层驱动真实 dsh CLI。
• in-harness 插件：market_search / market_stats / market_install_command，在对话里让 agent 帮你找插件、生成安装命令；内置注册表快照，离线可用。

验证（不只是「能加载」）

CI 与本地实测：注册表契约校验 → CLI 端到端 → 插件单测 → 打包产物装进全新工程、真实注册、真实执行三个 handler 并断言 → 装进全新 DSH profile、--dump-config 验证、dsh web 启动到 HTTP 200（30 秒有界重试）。

和 dsh-market 的关系

dsh-market 在 Web UI 里做可视化一键安装/主题/更新，做得很好；dsh-subscribe 是互补方案：订阅工作流、零依赖 CLI、对话内 agent 工具、536+ 全量注册表 + 明确 verified 分层。两个一起用体验最佳。

诚实边界：社区条目仅作发现用途（verified: false），不是安全审计；Web UI 内一键安装仍是 dsh-market 的主场。

欢迎反馈 —— 尤其是注册表契约（registry.json v2）、in-harness 工具和 CLI 同步流程。

[zoahdev]

v0.3.0 milestone: the plugin now ships a full in-harness storefront at /dsh-subscribe/ ? browse/search the 536-plugin registry, then install / uninstall / update / approve build scripts with one click (same-origin POSTs, curated-only specs, live progress, sanitized log export). Verified end-to-end in CI: fresh DSH profile ? dsh web boots ? HTTP POST install actually runs the dsh CLI ? installed list updated. Release: https://github.com/zoahdev/dsh-subscribe/releases/tag/v0.3.0

[zoahdev]

Progress roundup (all verified, all linked):

• dsh plugin check surface exists: dsh-plugin-doctor v1.7.0 check <dir> (exit 0/1/2, --json) ? https://github.com/zoahdev/dsh-plugin-doctor/releases/tag/v1.7.0 ; RFC RFC: Community plugin registry contract + first-class plugin checks (registry v2 ? dsh plugin check ? dsh doctor) #1846 now linked inside the official scaffolding RFC RFC: official plugin scaffold — template repo + pnpm create dsh-plugin to unblock the ecosystem #1629
• Three cherry-pick-ready patches: Bug: installing any plugin that depends on @deepseek-ai/dsh-tools breaks every tool call (Cannot read properties of undefined (reading 'prepare')) #1697 symbol guard, Bug: profile package.json with UTF-8 BOM crashes dsh web (Unexpected token ... is not valid JSON) #1842 BOM strip, 【Bug】Windows 上官方 minimal（极简模式）预设的 bash 无法启动：默认 shellPath /bin/bash 不可解析（实测+修复建议） #1856 Windows bash resolution ? https://github.com/zoahdev/deepseek-harness/tree/fix/terminal-bash-win32-shell
• Ecosystem health reporting: release-compat reports now include awesome-dsh-plugin totals (573 plugins, category distribution) ? https://github.com/zoahdev/dsh-ecosystem/blob/main/docs/release-compat/0.1.0-rc.6.md
• Tutorials 29 pages incl. in-harness market + doctor triage: https://zoahdev.github.io/dsh-tutorials/
• Storefront now shows the verified-train badge + report link: https://zoahdev.github.io/dsh-subscribe/
• Engagement dossier: https://github.com/zoahdev/dsh-ecosystem/blob/main/docs/official-engagement.md

[zoahdev]

Milestone: dsh-subscribe is now listed on awesome-dsh-plugin ? PR #492 merged (Plugin Markets & Managers): awesome-dsh-plugin/awesome-dsh-plugin#492. The awesome site rebuild picks it up automatically. Thanks to the maintainers for the quick review!