@liangjiehappy/dsh-deepseekbase 0.0.0-stage → 0.1.1

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 deepseekbase
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,3 +1,135 @@
-# Temporary Holding Version
+# @liangjiehappy/dsh-deepseekbase
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+English | [中文](README.zh.md)
+
+**DeepSeek prices, plugin discovery and model specs inside DeepSeek Harness.**
+
+```bash
+dsh plugin --profile web add github:moldkey/dsh-deepseekbase
+```
+
+---
+
+## The part that matters: we test plugins for free
+
+Most plugin directories tell you a plugin **exists**.
+
+None tell you whether it **installs on your version of Harness**.
+
+So we run real sandbox installs on every DSH plugin we index — **for free, forever**:
+
+| Stage | What we do |
+|---|---|
+| 1 | Install it in a clean container (`dsh plugin add`) |
+| 2 | Confirm it shows up in `dsh plugin list` |
+| 3 | Confirm it mounts in the composed profile tree |
+| 4 | Boot the profile and check it stays alive |
+
+Stages 2–4 run with **`--network none`**, so even a malicious plugin has nowhere to send data.
+Containers are destroyed after each run.
+
+**Results so far: of the top 120 plugins, 13% cannot be installed at all on DSH 0.2.2-rc.1.**
+Eight fail on `engines.dsh` version ranges, five are not on npm anymore.
+
+Full results, updated as we test more:
+
+**→ [deepseekbase.com/ecosystem/plugin-tests](https://deepseekbase.com/ecosystem/plugin-tests/)**
+
+No sign-up. No API key. No rate limit on reading the results.
+
+---
+
+## What the plugin gives you
+
+| Tool | What it answers |
+|---|---|
+| `deepseekbase_price` | What does DeepSeek cost, and which provider is cheapest? |
+| `deepseekbase_plugin` | Which plugin does X, how popular, how risky? |
+| `deepseekbase_specs` | How big is the model, what context length, does it fit? |
+| `deepseekbase_trend` | How much is DeepSeek actually used? |
+
+### Example
+
+> **You:** compare DeepSeek V4.1 Flash prices across providers
+>
+> **Tool returns:**
+> ```
+> Official: off-peak in $0.15 / out $0.60 per 1M tokens
+> Cheapest third party: Particle AI — in $0.025 / out $0.25
+> ```
+> That is a 6x spread on the same model.
+
+---
+
+## Install
+
+```bash
+dsh plugin --profile web add github:moldkey/dsh-deepseekbase
+```
+
+Restart Harness. Four tools become available.
+
+From npm (once published):
+
+```bash
+dsh plugin --profile web add @liangjiehappy/dsh-deepseekbase
+```
+
+---
+
+## Permissions
+
+This plugin:
+
+- makes **outbound HTTPS requests** to `deepseekbase.com` only
+- does **not** read or write your files
+- does **not** read credentials or environment variables
+- does **not** execute shell commands
+
+The whole implementation is `lib/index.js` — one file, zero runtime dependencies.
+You can audit it in five minutes.
+
+---
+
+## Data sources
+
+| Endpoint | Used for |
+|---|---|
+| `POST https://deepseekbase.com/mcp` | prices, plugins, specs |
+| `GET https://deepseekbase.com/data/openrouter-tokens.json` | token trend |
+
+Everything is also browsable at <https://deepseekbase.com>.
+
+---
+
+## What is deepseekbase
+
+A third-party index of the DeepSeek ecosystem. Not affiliated with DeepSeek.
+
+| | |
+|---|---|
+| **283 pages** | pricing, providers, 7,164 derived models, 8,559 plugins, industry kits |
+| **21 open datasets** | every figure carries its source and verification date |
+| **Free plugin testing** | real sandbox installs, results published |
+| **MCP server** | `https://deepseekbase.com/mcp` for any MCP client |
+
+We label measurement bases explicitly. Where sources disagree, we say so instead of picking
+the flattering number.
+
+---
+
+## Contributing
+
+Found a bug? [Open an issue](https://github.com/moldkey/dsh-deepseekbase/issues).
+
+Maintain a plugin that failed our test? The error message tells you exactly why —
+take it and fix it. We are recording a fact, not judging your code.
+
+Want your plugin tested? It is free:
+<https://deepseekbase.com/ecosystem/plugin-tests/>
+
+---
+
+## Licence
+
+MIT. Compiled data is attributed per entry on the website.

package/README.zh.md

@@ -0,0 +1,135 @@
+# @liangjiehappy/dsh-deepseekbase
+
+[English](README.md) | 中文
+
+**把 DeepSeek 的價格、插件、模型參數和三調用量接進 DeepSeek Harness。**
+
+```bash
+dsh plugin --profile web add github:moldkey/dsh-deepseekbase
+```
+
+---
+
+## 最重要的一點：我們免費測插件
+
+大部分插件目錄只告訴你「這個插件存在」。
+
+**沒有人告訴你「它在你這個版本上裝得上嗎」。**
+
+所以我們對索引的每個 DSH 插件做真實沙箱安裝測試 —— **免費，永久**：
+
+| 階段 | 做什麼 |
+|---|---|
+| 1 | 在乾淨容器裡安裝（`dsh plugin add`）|
+| 2 | 確認它出現在 `dsh plugin list` |
+| 3 | 確認它掛載進組合後的配置樹 |
+| 4 | 啟動 profile，確認進程存活 |
+
+第 2-4 階段完全無網絡（`--network none`），所以即使插件有惡意行為也無處可去。
+容器跑完即毀。
+
+**目前的結果：頭部 120 個插件裡，13% 在 DSH 0.2.2-rc.1 上根本裝不上。**
+8 個栽在 `engines.dsh` 版本範圍，5 個在 npm 上已經不存在了。
+
+完整結果，隨測試持續更新：
+
+**→ [deepseekbase.com/ecosystem/plugin-tests](https://deepseekbase.com/ecosystem/plugin-tests/)**
+
+不用註冊、不需要 API Key、讀結果不限次數。
+
+---
+
+## 這個插件給你什麼
+
+| 工具 | 回答什麼 |
+|---|---|
+| `deepseekbase_price` | DeepSeek 多少錢？哪家服務商最便宜？ |
+| `deepseekbase_plugin` | 哪個插件能做 X？多少人用？風險多大？ |
+| `deepseekbase_specs` | 模型多大？上下文多長？裝得下嗎？ |
+| `deepseekbase_trend` | DeepSeek 到底被用了多少？ |
+
+### 例子
+
+> **你：** 比較一下 DeepSeek V4.1 Flash 各家服務商的價格
+>
+> **工具返回：**
+> ```
+> 官方：離峰 輸入 $0.15 / 輸出 $0.60 每百萬 token
+> 最便宜第三方：Particle AI —— 輸入 $0.025 / 輸出 $0.25
+> ```
+> 同一個模型，價差 6 倍。
+
+---
+
+## 安裝
+
+```bash
+dsh plugin --profile web add github:moldkey/dsh-deepseekbase
+```
+
+重啟 Harness，四個工具就可用。
+
+從 npm 安裝（發布後）：
+
+```bash
+dsh plugin --profile web add @liangjiehappy/dsh-deepseekbase
+```
+
+---
+
+## 權限
+
+這個插件：
+
+- 只對 `deepseekbase.com` 發出 **HTTPS 請求**
+- **不**讀寫你的文件
+- **不**讀憑證或環境變量
+- **不**執行 shell 命令
+
+整個實現就是 `lib/index.js` —— 一個文件、零運行時依賴。
+五分鐘可以審完。
+
+---
+
+## 數據來源
+
+| 端點 | 用於 |
+|---|---|
+| `POST https://deepseekbase.com/mcp` | 價格、插件、模型參數 |
+| `GET https://deepseekbase.com/data/openrouter-tokens.json` | token 走勢 |
+
+全部也可以在 <https://deepseekbase.com> 瀏覽。
+
+---
+
+## deepseekbase 是什麼
+
+一個 DeepSeek 生態的第三方索引站。不隸屬於 DeepSeek 官方。
+
+| | |
+|---|---|
+| **287 頁** | 價格、服務商、7,164 個衍生模型、8,559 個插件、行業套件 |
+| **21 份開放數據集** | 每個數字都帶來源和驗證日期 |
+| **免費插件測試** | 真實沙箱安裝，結果公開 |
+| **MCP Server** | `https://deepseekbase.com/mcp`，任何 MCP 客戶端可用 |
+| **插件開發指南** | 十章，含我們自己踩的坑 |
+
+我們會明確標註統計口徑。來源互相矛盾時，我們說出來，而不是挑好看的那個數字。
+
+---
+
+## 貢獻
+
+發現 bug？[提 issue](https://github.com/moldkey/dsh-deepseekbase/issues)。
+
+你的插件沒通過我們的測試？錯誤信息會告訴你具體原因 —— 拿去修就行。
+我們記錄的是一個事實，不是評價你的代碼質量。
+
+想讓你的插件被測試？免費：
+<https://deepseekbase.com/zh/ecosystem/plugin-tests/>
+
+---
+
+## 許可
+
+MIT。匯編的數據在網站上逐條標註來源。

package/cordis.patch.yml

@@ -0,0 +1,6 @@
+# Your patch layer for this dsh profile, applied after every bundle layer:
+# a top-level YAML array of loader patch entries (id-targeted config
+# overrides, disables, and insert lists; `!!js` expressions allowed).
+- insert:
+    - id: dsh-deepseekbase
+      name: '@liangjiehappy/dsh-deepseekbase'

package/lib/index.js

@@ -0,0 +1,232 @@
+/**
+ * dsh-deepseekbase
+ *
+ * Brings deepseekbase.com data into DeepSeek Harness.
+ *
+ * Tools:
+ *   deepseekbase_price   — official + third-party provider prices
+ *   deepseekbase_plugin  — plugin search WITH sandbox test results
+ *   deepseekbase_specs   — model technical specs
+ *   deepseekbase_trend   — weekly token volume trend
+ *
+ * Data comes from the public MCP endpoint at https://deepseekbase.com/mcp
+ * (JSON-RPC 2.0 over HTTP). Read-only, no API key required.
+ */
+
+import { defineTool } from "@deepseek-ai/dsh-tools";
+
+const MCP_ENDPOINT = "https://deepseekbase.com/mcp";
+const TIMEOUT_MS = 15000;
+
+/** Call one tool on the deepseekbase MCP server. */
+async function callMcp(toolName, args, signal) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+  // Abort if the harness cancels us first.
+  if (signal) {
+    if (signal.aborted) controller.abort();
+    else signal.addEventListener("abort", () => controller.abort(), { once: true });
+  }
+  try {
+    const res = await fetch(MCP_ENDPOINT, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "tools/call",
+        params: { name: toolName, arguments: args || {} },
+      }),
+      signal: controller.signal,
+    });
+    if (!res.ok) {
+      return `deepseekbase MCP returned HTTP ${res.status}. Try https://deepseekbase.com/data/ for the raw datasets.`;
+    }
+    const body = await res.json();
+    if (body.error) {
+      return `deepseekbase MCP error: ${body.error.message || JSON.stringify(body.error)}`;
+    }
+    const content = body.result && body.result.content;
+    if (Array.isArray(content) && content.length > 0) {
+      return content.map((c) => c.text || "").join("\n");
+    }
+    return "deepseekbase MCP returned an empty result.";
+  } catch (err) {
+    const reason = err && err.name === "AbortError" ? "timed out" : String(err);
+    return `Could not reach deepseekbase (${reason}). The site may be temporarily unreachable.`;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
+/** Shared output shape: a single text block. */
+const TEXT_OUTPUT = {
+  schema: {
+    type: "object",
+    additionalProperties: false,
+    properties: {
+      text: { type: "string", required: true },
+    },
+  },
+  render: (_args, value) => [
+    { type: "text", text: (value && value.text) || "" },
+  ],
+};
+
+export const name = "dsh-deepseekbase";
+
+export const inject = ["tools", "systemPrompt"];
+
+export function apply(ctx) {
+  ctx.systemPrompt.section({
+    name: "tool:deepseekbase",
+    order: 120,
+    text:
+      "Use the deepseekbase_* tools for DeepSeek pricing, plugin discovery with sandbox " +
+      "test results, model specs and token-volume trends. Data is a third-party index " +
+      "(deepseekbase.com), not official DeepSeek output — cite it as such.",
+  });
+
+  // ── 1. Prices ────────────────────────────────────────────────────────────
+  ctx.tools.register(
+    defineTool({
+      name: "deepseekbase_price",
+      description:
+        "Query DeepSeek model prices. Returns the official price table plus third-party " +
+        "provider quotes per 1M tokens, sorted cheapest first, with quantization notes. " +
+        "Use this when asked what DeepSeek costs or which provider is cheapest.",
+      parameters: {
+        model: {
+          type: "string",
+          description: "Model id or keyword, e.g. v4.1-flash. Omit for an overview.",
+        },
+        limit: {
+          type: "number",
+          description: "Maximum provider quotes to return. Defaults to 8.",
+        },
+      },
+      output: TEXT_OUTPUT,
+      isConcurrencySafe: () => true,
+      async execute(args, exec) {
+        const text = await callMcp(
+          "price_query",
+          { model: args.model || "", limit: Math.min(Number(args.limit) || 8, 30) },
+          exec && exec.signal,
+        );
+        return { text };
+      },
+    }),
+  );
+
+  // ── 2. Plugins with sandbox test results ─────────────────────────────────
+  ctx.tools.register(
+    defineTool({
+      name: "deepseekbase_plugin",
+      description:
+        "Search DeepSeek Harness plugins. Returns name, category, downloads, stars, security " +
+        "risk level, permissions and any known red lines. This index also runs real sandbox " +
+        "install tests, so check /ecosystem/plugin-tests/ on deepseekbase.com for whether a " +
+        "plugin actually installs on the current DSH version.",
+      parameters: {
+        query: {
+          type: "string",
+          description: "Keyword matched against name, description and repository.",
+        },
+        max_risk: {
+          type: "string",
+          description: "Only return plugins at or below this risk: low, medium or high.",
+        },
+        limit: {
+          type: "number",
+          description: "Maximum results. Defaults to 8.",
+        },
+      },
+      output: TEXT_OUTPUT,
+      isConcurrencySafe: () => true,
+      async execute(args, exec) {
+        const text = await callMcp(
+          "plugin_search",
+          {
+            query: args.query || "",
+            max_risk: args.max_risk || "",
+            limit: Math.min(Number(args.limit) || 8, 40),
+          },
+          exec && exec.signal,
+        );
+        return { text };
+      },
+    }),
+  );
+
+  // ── 3. Model specs ───────────────────────────────────────────────────────
+  ctx.tools.register(
+    defineTool({
+      name: "deepseekbase_specs",
+      description:
+        "Get DeepSeek model technical specs (layers, hidden size, context length, vocab, " +
+        "MoE or Dense). Use when asked about model size, context window or VRAM fit.",
+      parameters: {
+        model: {
+          type: "string",
+          description: "Model name keyword, e.g. V4-Flash.",
+        },
+        limit: {
+          type: "number",
+          description: "Maximum rows. Defaults to 8.",
+        },
+      },
+      output: TEXT_OUTPUT,
+      isConcurrencySafe: () => true,
+      async execute(args, exec) {
+        const text = await callMcp(
+          "model_specs",
+          { model: args.model || "", limit: Math.min(Number(args.limit) || 8, 25) },
+          exec && exec.signal,
+        );
+        return { text };
+      },
+    }),
+  );
+
+  // ── 4. Token volume trend ────────────────────────────────────────────────
+  ctx.tools.register(
+    defineTool({
+      name: "deepseekbase_trend",
+      description:
+        "Get the weekly token volume trend for DeepSeek models on OpenRouter, with derived " +
+        "per-day and per-second rates. Use when asked how much DeepSeek is actually used.",
+      parameters: {},
+      output: TEXT_OUTPUT,
+      isConcurrencySafe: () => true,
+      async execute(_args, exec) {
+        const text = await callMcp("official_resources", { kind: "sources" }, exec && exec.signal);
+        // The trend lives in a dataset rather than an MCP tool; fetch it directly
+        // and fall back to the official sources listing if that fails.
+        try {
+          const res = await fetch("https://deepseekbase.com/data/openrouter-tokens.json", {
+            headers: { Accept: "application/json" },
+            signal: exec && exec.signal,
+          });
+          if (res.ok) {
+            const d = await res.json();
+            const series = (d.series || [])
+              .map((p) => `${p.week_of}: ${p.tokens_trillion}T`)
+              .join("\n");
+            const der = d.derived || {};
+            return {
+              text:
+                "DeepSeek weekly token volume on OpenRouter\n" +
+                `Latest: ${der.latest_trillion}T/week (${der.per_second_tokens} tokens/sec)\n` +
+                `Growth since first point: ${der.growth_since_first_pct}%\n\n` +
+                `Series:\n${series}\n\n` +
+                `Source: ${d.source || "OpenRouter"} · collected ${d.verified_at || "unknown"}`,
+            };
+          }
+        } catch {
+          /* fall through to the MCP sources listing */
+        }
+        return { text };
+      },
+    }),
+  );
+}

package/package.json

@@ -1,6 +1,65 @@
 {
   "name": "@liangjiehappy/dsh-deepseekbase",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
+  "version": "0.1.1",
+  "description": "DeepSeek prices, plugins with sandbox test results, model specs and token trends inside DeepSeek Harness — powered by deepseekbase.com",
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "deepseek",
+    "pricing",
+    "plugin-discovery",
+    "model-specs",
+    "ecosystem"
+  ],
+  "homepage": "https://deepseekbase.com",
+  "bugs": {
+    "url": "https://github.com/moldkey/dsh-deepseekbase/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/moldkey/dsh-deepseekbase.git"
+  },
+  "license": "MIT",
+  "author": {
+    "name": "deepseekbase",
+    "url": "https://deepseekbase.com"
+  },
+  "type": "module",
+  "main": "lib/index.js",
+  "exports": {
+    ".": {
+      "default": "./lib/index.js"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "README.zh.md"
+  ],
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    }
+  },
+  "engines": {
+    "dsh": ">=0.2.0-rc.2"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "*",
+    "@deepseek-ai/dsh-tools": "*"
+  },
+  "peerDependenciesMeta": {
+    "@deepseek-ai/cordis": {
+      "optional": true
+    },
+    "@deepseek-ai/dsh-tools": {
+      "optional": true
+    }
+  },
+  "publishConfig": {
+    "access": "public"
+  }
 }