v0.1.0-preview.5 — verified one-click install

Preview 5 makes the Store install button both functional on public DeepSeek Harness rc.8 and stricter about what it will install.

The install flow now:

• requires the catalog entry to have passed Leaderboard installation verification
• resolves the exact install command from the Leaderboard detail API
• accepts only a single npm package spec (no URLs, git specs, or shell syntax)
• invokes dsh plugin --profile web add -w <package>
• caps captured installer output and terminates installs after two minutes
• labels and disables unverified entries in the UI

End-to-end verification used an isolated public @deepseek-ai/dsh@0.1.0-rc.8 profile. The Store installed dsh-plugin-reactive-resume@0.1.0, wrote it to the profile dependencies, and activated its bundle. A catalog entry with action_required status was rejected with HTTP 400.

Install Preview 5:

curl -fL https://github.com/sandbaseai/dsh-plugin-store/releases/download/v0.1.0-preview.5/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz -o /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz
dsh plugin --profile web add -w /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.5.tgz

v0.1.0-preview.4 — verified rc.8 install

Preview 4 fixes the bundle patch for the public DeepSeek Harness 0.1.0-rc.8 schema and provides a lower-friction prebuilt install path.

Verified in an isolated DSH_HOME with the public rc.8 CLI:

• tarball installs into the web profile and is reconciled into dsh.profile.bundles
• composed config contains the stable sandbase-plugin-store row
• DSH Web boots on a random loopback port
• the plugin client module is served
• /api/plugin-store/catalog returns live catalog data (3,498 entries and 14 tag categories at verification time)

Install:

curl -fL https://github.com/sandbaseai/dsh-plugin-store/releases/download/v0.1.0-preview.4/sandbaseai-dsh-plugin-store-0.1.0-preview.4.tgz -o /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.4.tgz
dsh plugin --profile web add -w /tmp/sandbaseai-dsh-plugin-store-0.1.0-preview.4.tgz

Restart DSH Web, then open Settings → Store.

DSH Plugin Store v0.1.0-preview.3

Preview 3 aligns the installable package boundary with the public DeepSeek Harness 0.1.0-rc.8 packages.

Highlights:

• replaces runtime workspace:^ references with explicit public rc.8 peer dependencies
• ships the committed Host and Web client artifacts as a prebuilt release tarball
• verified in a clean npm environment with 72 resolved packages and a valid dependency tree
• verified Host import: name, apply, and Config load successfully
• preserves immutable-tag installation and the Preview stability label

Install:

dsh plugin --profile web add github:sandbaseai/dsh-plugin-store#v0.1.0-preview.3

Tarball SHA-256:
faebe2b6a16b368be3a75bc678639bcf951abfc60cf447a851ec485e3b2f12b4

This remains a community Preview. Review third-party plugin sources before installing them.

DSH Plugin Store v0.1.0 Preview 2

Install the preview

dsh plugin --profile web add github:sandbaseai/dsh-plugin-store#v0.1.0-preview.2

The explicit tag keeps the installed source pinned to this reviewed preview instead of following later changes on main. Restart DSH Web, open Settings, and select Store.

• Project site: https://sandbaseai.github.io/dsh-plugin-store/
• Repository: https://github.com/sandbaseai/dsh-plugin-store

GitHub-installable preview

Preview 2 includes the verified Host and Web client build artifacts in the repository so GitHub-source installs can resolve the declared entry points. This addresses the ERR_MODULE_NOT_FOUND advisory reported by the DSH 1024Store static review.

Changes since Preview 1

• Commit lib/index.js for the Host plugin entry point.
• Commit lib/client.js for the native Web Settings client.
• Commit the exported Host and client type declarations.
• Publish SECURITY.md with catalog, installation, and enterprise trust boundaries.
• Enable GitHub Private Vulnerability Reporting.
• Add the project to the DSH 1024Store curated source catalog.

Verification

The committed artifacts are byte-for-byte identical to the output produced in the DeepSeek Harness 0.1.0-rc.5 workspace:

pnpm --filter @sandbaseai/dsh-plugin-store typecheck  # passed
pnpm --filter @sandbaseai/dsh-plugin-store bundle     # passed
Host ESM: lib/index.js
Web client: lib/client.js

Compatibility boundary

This remains a prerelease targeting the Harness 0.1.0-rc.5 integration APIs. Review third-party plugin source before installation and use organizational allowlists, isolation, credential controls, and audit logs for enterprise deployment.

• Security policy: https://github.com/sandbaseai/dsh-plugin-store/security/policy
• Early tester report: #1
• Launch discussion: #5

If this improves your DSH workflow, star the repository and report the next compatibility case we should verify.

DSH Plugin Store v0.1.0 Preview 1

Native DSH Store preview

This preview publishes the complete Host + Web client source for a native DeepSeek Harness plugin marketplace.

Included

• Community and Installed views inside DSH Settings
• Search, server-side Tag filters, pagination, and ranking
• Catalog access for more than 2,900 community repositories
• Local Web profile installation with validation and error feedback
• Live Cordis Loader inventory
• Agent tools for search, catalog browsing, and reviewed install guidance
• English and Simplified Chinese source-integration documentation

Verified

Built in the DeepSeek Harness 0.1.0-rc.5 source workspace:

pnpm --filter @sandbaseai/dsh-plugin-store typecheck  # passed
pnpm --filter @sandbaseai/dsh-plugin-store bundle     # passed
Host ESM: lib/index.js
Web client: lib/client.js

Compatibility boundary

This is a source preview, not a stable npm release and not an official DeepSeek project. Clone the repository into packages/plugins/dsh-store of a compatible Harness source checkout and follow the README. A stable package command will be documented only after public DSH dependency versions align with the integration APIs.

Feedback

• Early tester template: #1
• Plugin author validation: #2
• Enterprise requirements: #3
• Launch discussion: #5

If this Store would improve your DSH workflow, star the repository and tell us which workflow should be verified next.