v1.1.0 — 插件自己在界面上提示补丁与扩展 / in-interface notices for patches and the extension

⚠️ 只支持 DSH 1.5

本插件只支持 DSH 1.5（>=0.1.5-rc.2 <0.2.0）。DSH 出新版本会跟进更新。

DSH 1.5 only (>=0.1.5-rc.2 <0.2.0). Newer DSH releases will be supported in follow-up updates.

---

装好插件，它自己会告诉你要打什么补丁（或怎么装扩展）

这个版本的核心是界面提示：需要打补丁的插件，装好后第一次打开界面会弹一次窗，写清楚

• 哪个插件 → 哪条补丁（补丁 id、改哪个包的哪个文件、为什么需要它、「必须」还是「建议」）；
• 怎么打（三种，任选一种）：A 点「复制提示词」把整段发给你自己的 agent；B 补丁库脚本 node apply.mjs --check / --apply --only <id>；C 手动 git apply -p1；
• 补丁库 https://github.com/xiamubumu/dsh-patch-library；
• 检测系统：内容 sha256 对补丁库清单的 patched / pristine（精确）→ 补丁自带的 marker 标记串（上游有差异时兜底）→ 都不成立就明说「无法判定」，绝不猜「已打」；
• 打完就不再弹；「稍后再说」只关这一次，「不再提醒」是永久的、且按补丁 id 记 —— 将来新增的补丁仍然会提醒你。

弹窗还会列出其余官方补丁（不绑定本插件，按症状决定打不打），一条不漏。

安装

dsh plugin --profile web add /path/to/dsh-composer-launcher-1.1.0.tgz

直接从 Release URL 安装会失败（部分部署不把 tgz URL 当路径）—— 先下载再本地安装。

本版其它

• 打开外链的路由收紧：只认写死的补丁库地址，且拒绝跨源 POST；
• 「不再提醒」从一刀切改为按补丁 id 记；
• 教程里的官方补丁总表统一为 10 条，并新增「检测系统」一节。

本插件专属

浏览器扩展只属于本插件，所以扩展的安装弹窗也由本插件弹：为什么不能自动装（Chromium 硬规则）、三条路（零人工 / 装进日常浏览器 / 图文教程）、扩展目录、检测系统（扩展推过标签页即视为已装）。浏览器分组另加「安装说明」按钮，随时可调出。本插件本身不需要打任何补丁。

---

Install the plugin and it tells you which patches it needs (or how to load the extension)

The point of this release is the in-interface notice: a plugin that needs patches announces them once, in one dialog, spelling out

• which plugin → which patch (patch id, the package and file it edits, why it is wanted, required or recommended);
• how to apply it (any one of three): A press "Copy the prompt" and hand it to your own agent; B the library script node apply.mjs --check / --apply --only <id>; C apply by hand with git apply -p1;
• the patch library https://github.com/xiamubumu/dsh-patch-library;
• detection: a content hash against the library manifest (patched / pristine) → the patch marker string as a fallback for upstream drift → and when neither decides, an outright "cannot tell" rather than a guess of "applied";
• no more nagging once applied; "Later" closes it once, "Do not remind me again" is permanent and recorded per patch id, so a patch added later is still announced.

The dialog also lists the other official patches (owned by no plugin — apply them by symptom), so nothing goes unseen.

Install

dsh plugin --profile web add /path/to/dsh-composer-launcher-1.1.0.tgz

Installing straight from the Release URL fails on some deployments — download the tarball first.

Elsewhere in this release

• the outbound-link route was tightened: only the hard-coded library URLs, and cross-origin POSTs are rejected;
• "do not remind me again" became per-patch-id instead of all-or-nothing;
• the tutorials now carry a unified ten-patch table and a "detection system" section.

Specific to this plugin

The browser extension belongs to this plugin, so the extension notice is this plugin's own: why it cannot install itself (Chromium hard rule), three routes (zero-click / into your everyday browser / written guide), the staged folder, and the detection rule (a received tab push means "installed"). The browser group also gained a "How to install" button. This plugin needs no DSH patches itself.

v1.0.0 — 1.0.0

Install

dsh plugin --profile web add github:xiamubumu/dsh-composer-launcher

Then restart DSH — the bundle mechanism registers it into dsh.profile.bundles by itself; no file edits, no paths to fill in.

Air-gapped machine (or no git on the box): download the dsh-composer-launcher-1.0.0.tgz asset below and install it by path:

dsh plugin --profile web add /path/to/dsh-composer-launcher-1.0.0.tgz

Do not pass this release's asset URL to dsh plugin add.
dsh plugin --profile web add https://github.com/xiamubumu/dsh-composer-launcher/releases/download/v1.0.0/dsh-composer-launcher-1.0.0.tgz fails on the pnpm bundled with DSH (10.34.5):
ERR_PNPM_MISSING_TARBALL_INTEGRITY — see pnpm#14351, fixed upstream only in pnpm >= 12.5.1.
Installing a second plugin that way always fails. Measured: asset URL 3/3 fail, github: shorthand 4/4 pass, local tarball path 4/4 pass.

📚 Tutorials (shipped inside this tarball)

• tutorial-install-and-official-patches.md / .zh-CN.md — how to install the four plugins (both verified routes) and what to do about the official patches, including a copy-paste prompt that lets your own agent apply them safely: back up each file as .orig, only touch the DSH install root, one patch at a time, node --check after each.
• tutorial-browser-extension.md / .zh-CN.md — the browser extension: route A (a browser this plugin launches loads it itself, zero manual steps, verified), route B (your everyday browser, one click now), route C (enterprise policy, not provided here); how to verify it loaded and what to do when it does not.

💡 Companion advice

dsh-context-reclaim + dsh-aux-degrade keep the request from growing and the cache prefix from wobbling — they do not turn long history into a summary. Pair them with a context-compression plugin. Measured over a long continuous run: context stayed under 200K, prefix-cache hit rate ~98%, roughly ¥3 for half an hour. That is the best case — not the normal case, not a promise and not a quote. In everyday use you will often do worse: breaking the prefix (changing the system prompt, the model or the tool set, reordering context), material that keeps arriving (a new skill catalogue, new MCP tools, very long documents), compression happening too late, inflated tool results, switching tasks or opening fresh sessions often, and provider-side pricing or cache-policy changes all push it up. We name one third-party plugin, billion-context; it is not ours, not a dependency, and any equivalent works.

• Requires DSH 0.1.5-rc.2 <= version < 0.2.0 (the 1.5 series). Desktop and web are both supported.
• Zero runtime dependencies; every peer dependency is an official @deepseek-ai/* package.
• Source, docs and the patch health check: https://github.com/xiamubumu/dsh-composer-launcher