DSH Plugin Marketplace — one-click plugin installer for the GitHub dsh-plugin topic

[bradeGithub]

DSH Plugin Marketplace — one-click plugin installer for the GitHub dsh-plugin topic（中文摘要见文末）

Hi DSH community! I built a plugin marketplace that turns the GitHub dsh-plugin topic into an installable app inside DSH itself.

What it does

• Pulls all repos tagged dsh-plugin (450+ and growing) from a static registry (jsDelivr CDN, rebuilt every 2 hours by GitHub Actions — end users make zero GitHub API calls and hit no rate limits)
• One-click install with automatic type detection: skills → ~/.dsh/skills/, agent presets, cordis plugins (deps installed, registered into the web profile), install scripts (with an explicit confirmation dialog first)
• Installed recognition (four-way: manifest + directory heuristics + package-name mapping + self-identification), version detection (button turns into «Update» when a newer version exists), search, dark/light theme, and a bilingual UI that follows DSH's language setting
• Security: CSRF-protected endpoints, package-name/path validation, npm deps installed with --ignore-scripts by default, third-party script confirmation, body-size limits — the independent review report lives in the repo (review.md)

Try it — one command:

irm https://raw.githubusercontent.com/bradeGithub/DSH-Plugins-Marketplace/main/install.ps1 | iex

curl -sL https://raw.githubusercontent.com/bradeGithub/DSH-Plugins-Marketplace/main/install.sh | bash

Then restart dsh web → Settings → DSH Plugin Marketplace. (Prefer delegating? The README includes a one-liner you can paste to any command-capable AI agent.)

Repo: https://github.com/bradeGithub/DSH-Plugins-Marketplace — MIT, v1.0.0 released.

---

中文摘要：我为 DSH 写了个插件市场插件：自动聚合 GitHub dsh-plugin 话题下全部插件（450+），在设置页一键安装/更新/识别已安装，覆盖 skill、agent 预设、cordis 插件、安装脚本四类，中英双语，静态索引每 2 小时自动刷新（零限流）。安装只需一行命令（见上方），装完重启 dsh web → 设置 → DSH插件市场。仓库：github.com/bradeGithub/DSH-Plugins-Marketplace（MIT，v1.0.0）。

Feedback and feature ideas are very welcome!

[avaritiachaos]

Hi! Submitting 4 production-grade plugins built by @shion-lab to the marketplace:

1. 🧠 @shion-lab/dsh-plugin-memory

Triple-Layer Persistent Memory & Reflection Engine

• Layer 1: Git-tracked human-readable Markdown rules (.dsh/MEMORY.md).
• Layer 2: Dense vector embeddings with Cosine Similarity ranking (supports Ollama & OpenAI).
• Layer 3: 30-day half-life decay & frequency reinforcement (Hybrid RRF scoring).
• RFC Discussion: [RFC / Proposal] Triple-Layer Persistent Memory (Markdown Rules + Vector Embeddings + Hybrid Vitality Ranking) for DeepSeek Harness #1881

---

2. 🪟 @shion-lab/dsh-plugin-windows

Windows Platform Compatibility & Process Tree Safety Guard

• Safe recursive process tree termination (taskkill /F /T /PID) preventing zombie orphaned background servers.
• Cross-platform drive letter & path normalization.
• UTF-8 BOM cleansing & CRLF normalization.

---

3. 🔪 @shion-lab/dsh-plugin-smart-patch

4-Tier Micro-Surgical Fault-Tolerant Code Patch Engine

• Survives indentation drift (tabs vs spaces) and non-essential comment shifts.
• 4-tier cascading matching: Exact -> Normalized Whitespace -> Context Anchor -> Levenshtein fallback.

---

4. 🔌 @shion-lab/dsh-plugin-mcp

Anthropic Model Context Protocol (MCP) Stdio Client Bridge

• Connects any standard MCP server (GitHub, SQLite, PostgreSQL, Brave) into DeepSeek agent tool calling.

All 4 plugins are zero-fork, MIT-licensed, and include 100% passing test suites!

[bradeGithub]

Thanks for submitting! I checked all four repos — here is the exact status and what to do:

How listing works here: the marketplace auto-aggregates the GitHub dsh-plugin topic (static index rebuilt every 2 hours). There is no manual submission/PR needed — repos that carry the topic appear automatically.

Current status of the four repos (verified just now):

Repo	dsh-plugin topic	DSH plugin manifest	Result
dsh-plugin-memory	❌ no topics at all	❌ no dsh field / no @deepseek-ai/* deps	not visible, and not installable yet
dsh-plugin-windows	❌	❌	same
dsh-plugin-smart-patch	❌	❌	same
dsh-plugin-mcp	❌	❌	same

Two steps to get them on the market:

1. Add the dsh-plugin topic to each repo (Settings → Topics, or the topics API) — that puts them in the index within ≤2 h.
2. Declare the DSH plugin contract in package.json: the marketplace (and DSH itself) recognizes a plugin by the dsh field (e.g. "dsh": { "client": { "inject": [...] }, "bundle": {...} }) or by depending on @deepseek-ai/cordis / @deepseek-ai/dsh-*. Without one of these markers the index will flag them as "not a DSH plugin" and one-click install stays blocked — even with the topic.

A quick way to see the expected manifest shape: any already-listed plugin (e.g. dsh-ads, dsh-balance-monitor) or the official plugin template in the DSH repo.

One heads-up for dsh-plugin-windows: it kills process trees (taskkill /F /T) — totally fine to list, users will see explicit confirmations before execution, just make sure the README calls that out clearly.

Once both steps are done, ping me here and I will verify them in the next index refresh. 🚀

[avaritiachaos]

@bradeGithub Thanks a ton for the swift and crystal-clear guidance!

Both steps have been completed across all 4 repositories:

1. ✅ GitHub Topics Added: dsh-plugin, deepseek-harness, and cordis tags added to all 4 repos.
2. ✅ DSH Plugin Manifest Configured: Declared the standard "dsh": { "displayName": ..., "service": ..., "icon": ... } contract block along with @deepseek-ai/dsh and cordis peerDependencies in package.json.
3. ✅ Process Tree Note Highlighted: Added clear callouts in dsh-plugin-windows README regarding the recursive taskkill /F /T process guard.

All four packages are ready for the next 2-hour index refresh. Thanks for maintaining the marketplace! 🚀

[ylwl1997]

提醒一下 👋 我们发现 dsh-plugin topic 被不少非 DSH 仓库蹭标签（openhanako 6047★ 是独立 AI agent、EchoBird 3016★ 是跨工具切换器、exo 是另一个 harness）——这些不是 DSH 插件、装了跑不起来。收录前建议校验 bundle 清单（cordis.patch.yml / cordis.yml）。

我们 dshbase.com 一直在努力做这件事——bundle 清单校验 + topic 检查 + DeepSeek 读 README 鉴别 + 实际安装实测，靠这套清掉了 19 个非插件项目，这是我们的核心优势。详见 #2099。

[bradeGithub]

感谢您的提醒。我们核查了相关代码，项目确实建有可安装性校验机制（bundle 清单校验 + 非插件识别），但由于一个路径 bug，该机制在索引构建中一直未能生效——目前已定位根因并修复。非常感谢您和团队的无私奉献与提醒！

[weijiafu14]

pi2dsh 已经符合这个市场的两条自动收录规则，给市场补一个“生态桥”类型的测试样本：

• 仓库已带 dsh-plugin topic
• package.json 已声明标准 dsh.bundle
• npm 当前版本：pi2dsh@0.11.0

它不是单个功能插件，而是让 DSH 直接挂载现有 Pi 插件的兼容引擎。安装引擎后，Pi 包仍按原 npm 包名安装，不需要 fork 或改源码：

dsh plugin --profile web add pi2dsh@0.11.0
dsh plugin --profile web add @kassing/pi-vision

仓库：https://github.com/weijiafu14/pi2dsh

按这里的规则应该会由索引自动发现，不需要手工提交。它也可以用来验证 Marketplace 对 Cordis bundle 类插件的识别、安装和后续依赖插件安装路径。

[bradeGithub]

感谢提交！我已按市场规则核对了 pi2dsh：topic ✅、标准 bundle 声明 ✅、已被索引自动收录 ✅，无需任何人工操作。非常感谢您的项目，经过测试您的项目可以被Marketplace自动识别并正常安装