@tianyulinfeng1/dsh-plugin-deepseek-chat 1.0.0 → 1.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +67 -0
- package/README.en.md +166 -138
- package/README.md +186 -157
- package/cordis.patch.yml +3 -3
- package/docs/RELEASE_NOTES_v1.1.1.md +64 -0
- package/docs/login-persistence.md +187 -0
- package/docs/screenshot.png +0 -0
- package/lib/client.js +942 -549
- package/locale/en.json +6 -6
- package/locale/zh.json +6 -6
- package/package.json +67 -62
- package/scripts/patch-dsh-persistent-partition.cjs +174 -0
- package/scripts/patch-dsh-persistent-partition.mjs +16 -0
package/CHANGELOG.md
ADDED
|
@@ -0,0 +1,67 @@
|
|
|
1
|
+
# Changelog
|
|
2
|
+
|
|
3
|
+
All notable changes to this project are documented here.
|
|
4
|
+
|
|
5
|
+
## 1.1.1 — 2026-11-09
|
|
6
|
+
|
|
7
|
+
### Fixed
|
|
8
|
+
|
|
9
|
+
- **Switching panels/sessions no longer asks for a fresh QR scan.** v1.1.0 keyed the
|
|
10
|
+
desktop guest partition to the asynchronous DSH account probe. DSH's
|
|
11
|
+
`getState()` can transiently fail during a reconnect, so the partition changed
|
|
12
|
+
and handed the panel a brand-new cookie jar. The guest workspace is now the
|
|
13
|
+
constant `panel:deepseek-chat` and the conversation key is the constant
|
|
14
|
+
`dsh-plugin-deepseek-chat:last-url`.
|
|
15
|
+
- The DSH account status strip is now **display only**: it never feeds the lease
|
|
16
|
+
identity, an epoch, or the guest lifecycle. A transient `unknown` is ignored;
|
|
17
|
+
only a confirmed `signed-out` updates the strip.
|
|
18
|
+
- The guest starts on mount immediately instead of waiting for the async account
|
|
19
|
+
Remote, so a failed/late probe never blocks chat.
|
|
20
|
+
|
|
21
|
+
### Documentation
|
|
22
|
+
|
|
23
|
+
- Documented, with source evidence, why a pure plugin **cannot** make
|
|
24
|
+
`chat.deepseek.com` reuse the already-signed-in DSH account: the two use
|
|
25
|
+
different credentials (Platform `x-dsh-auth-token` vs the site's own Token),
|
|
26
|
+
the renderer bridge exposes no token/cookie API, and the archive has no SSO or
|
|
27
|
+
cookie-injection entry point.
|
|
28
|
+
- Reworked `docs/login-persistence.md` around the upstream
|
|
29
|
+
`docs/patch-dsh-persistent-partition.cjs`: DSH `0.2.1-rc.3+` (including
|
|
30
|
+
`0.2.2-rc.1`) ships per-file SHA256 **ASAR integrity**, so the patch must
|
|
31
|
+
recompute and sync `lib/main.js`'s hash. A byte-only replacement would crash
|
|
32
|
+
DSH on restart with "ASAR Integrity Violation".
|
|
33
|
+
- Added `scripts/patch-dsh-persistent-partition.cjs` (upstream script: equal-length
|
|
34
|
+
replacement, integrity re-sync, full-archive verification, `--dry-run`,
|
|
35
|
+
idempotency, automatic backup). The earlier byte-only `.mjs` script is
|
|
36
|
+
deprecated and now fails loudly.
|
|
37
|
+
|
|
38
|
+
### Verification
|
|
39
|
+
|
|
40
|
+
- Offline self-check: 35 cases, all passing (fixed partition, no rebuild on
|
|
41
|
+
account-state churn, partition reuse across panel switches, envelope parsing,
|
|
42
|
+
crash containment, popup allowlist).
|
|
43
|
+
- `app.asar` patch verified independently: 20519 files, 0 integrity failures;
|
|
44
|
+
`lib/main.js` header hash matches the actual SHA256 of the patched bytes.
|
|
45
|
+
|
|
46
|
+
### Packaging
|
|
47
|
+
|
|
48
|
+
- Published to npm as **`@tianyulinfeng1/dsh-plugin-deepseek-chat`** (the
|
|
49
|
+
registry name this project owns). `package.json` and `cordis.patch.yml` now
|
|
50
|
+
carry that scoped package name so an npm-installed copy mounts under the same
|
|
51
|
+
`deepseek-chat` bundle id; the GitHub install routes (`github:sweet560/...`)
|
|
52
|
+
are unchanged.
|
|
53
|
+
|
|
54
|
+
## 1.1.0 — 2026-11-09
|
|
55
|
+
|
|
56
|
+
- Added support for DSH `0.2.2-rc.1` (`engines.dsh >=0.2.2-rc.1`).
|
|
57
|
+
- Added a DSH account status strip via the official `ctx.remote.account` Remote
|
|
58
|
+
(correct generated `{ ok, value }` envelope parsing).
|
|
59
|
+
- Tightened conversation and popup URL validation; removed the dead guest element
|
|
60
|
+
before showing Retry.
|
|
61
|
+
- **Note:** keyed the guest partition to account state, which broke login
|
|
62
|
+
persistence. Fixed in 1.1.1.
|
|
63
|
+
|
|
64
|
+
## 1.0.0
|
|
65
|
+
|
|
66
|
+
First local release: sidebar entry, full-width embedded chat, last-conversation
|
|
67
|
+
memory, and crash containment.
|
package/README.en.md
CHANGED
|
@@ -1,138 +1,166 @@
|
|
|
1
|
-
# dsh-plugin-deepseek-chat
|
|
2
|
-
|
|
3
|
-
English | [中文](
|
|
4
|
-
|
|
5
|
-
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
13
|
-
|
|
14
|
-
|
|
15
|
-
-
|
|
16
|
-
-
|
|
17
|
-
- **
|
|
18
|
-
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
42
|
-
|
|
43
|
-
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
48
|
-
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
|
|
54
|
-
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
|
|
72
|
-
|
|
73
|
-
|
|
74
|
-
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
|
|
78
|
-
|
|
79
|
-
|
|
80
|
-
|
|
81
|
-
|
|
82
|
-
|
|
83
|
-
|
|
84
|
-
|
|
85
|
-
|
|
86
|
-
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
90
|
-
|
|
91
|
-
|
|
92
|
-
|
|
93
|
-
|
|
94
|
-
|
|
95
|
-
|
|
96
|
-
|
|
97
|
-
|
|
98
|
-
|
|
99
|
-
-
|
|
100
|
-
-
|
|
101
|
-
-
|
|
102
|
-
|
|
103
|
-
##
|
|
104
|
-
|
|
105
|
-
|
|
106
|
-
|
|
107
|
-
|
|
108
|
-
|
|
109
|
-
|
|
110
|
-
|
|
111
|
-
|
|
112
|
-
|
|
113
|
-
|
|
114
|
-
|
|
115
|
-
|
|
116
|
-
|
|
117
|
-
|
|
118
|
-
|
|
119
|
-
|
|
120
|
-
|
|
121
|
-
|
|
122
|
-
|
|
123
|
-
|
|
124
|
-
|
|
125
|
-
|
|
126
|
-
|
|
127
|
-
|
|
128
|
-
|
|
129
|
-
|
|
130
|
-
##
|
|
131
|
-
|
|
132
|
-
|
|
133
|
-
|
|
134
|
-
|
|
135
|
-
|
|
136
|
-
|
|
137
|
-
|
|
138
|
-
|
|
1
|
+
# dsh-plugin-deepseek-chat
|
|
2
|
+
|
|
3
|
+
English | [中文](README.md)
|
|
4
|
+
|
|
5
|
+
> **Current version: v1.1.1** | Targets DSH **0.2.2-rc.1**
|
|
6
|
+
|
|
7
|
+
Adds a **DeepSeek Chat** entry to the **DeepSeek Harness (DSH) desktop** sidebar. Clicking it opens `chat.deepseek.com` full-width in the main area, remembers the last conversation, and shows the current DSH account state.
|
|
8
|
+
|
|
9
|
+
> Repository: [GitHub](https://github.com/sweet560/dsh-plugin-deepseek-chat) | [Gitee mirror](https://gitee.com/wtt520wyl/dsh-plugin-deepseek-chat)
|
|
10
|
+
|
|
11
|
+
|
|
12
|
+
|
|
13
|
+
## Features
|
|
14
|
+
|
|
15
|
+
- Sidebar icon entry, placed between **Plugins** and **Scheduled tasks**.
|
|
16
|
+
- Full-width embedded `https://chat.deepseek.com/` (Electron `<webview>` through the desktop guest-lease bridge `window.dshDesktop.browser`).
|
|
17
|
+
- **Last-conversation memory**: switching panels/sessions or restarting the app reopens the conversation you left, not a new chat.
|
|
18
|
+
- Auth pages never overwrite that memory; a dead conversation falls back to the site root.
|
|
19
|
+
- **Stable login session (fixed in v1.1.1)**: the guest partition is the constant `panel:deepseek-chat`; switching panels/sessions back no longer rebuilds the partition or asks for a fresh QR scan.
|
|
20
|
+
- **DSH account status**: a strip shows "Synced with the DSH account · name" / "No account" / "Account state unavailable" via the official `ctx.remote.account` Remote. **Display only — it never participates in the guest lifecycle.**
|
|
21
|
+
- **Crash containment**: if the embedded page's process dies, is destroyed, or never starts, the panel shows a Retry card — the app window no longer goes blank (fixed in v0.4.0).
|
|
22
|
+
- Inert on the plain Web surface (`dsh web`): the site sends `frame-ancestors 'none'`, so an iframe cannot carry it, and the guest bridge only exists in the desktop shell.
|
|
23
|
+
|
|
24
|
+
## Requirements
|
|
25
|
+
|
|
26
|
+
| Item | Requirement |
|
|
27
|
+
|---|---|
|
|
28
|
+
| DSH | Desktop `0.2.2-rc.1` or newer |
|
|
29
|
+
| Platform | Windows / macOS / Linux desktop shell |
|
|
30
|
+
| git | Only for the GitHub install route (pnpm fetches the repository) |
|
|
31
|
+
|
|
32
|
+
## Install
|
|
33
|
+
|
|
34
|
+
npm package: **`@tianyulinfeng1/dsh-plugin-deepseek-chat`** (the GitHub repository is still named `dsh-plugin-deepseek-chat`).
|
|
35
|
+
|
|
36
|
+
### Option 1 — npm (recommended)
|
|
37
|
+
|
|
38
|
+
```powershell
|
|
39
|
+
dsh plugin --profile desktop add @tianyulinfeng1/dsh-plugin-deepseek-chat
|
|
40
|
+
```
|
|
41
|
+
|
|
42
|
+
You can also enter the package name `@tianyulinfeng1/dsh-plugin-deepseek-chat` in the Plugins page.
|
|
43
|
+
|
|
44
|
+
### Option 2 — Plugins page (GitHub)
|
|
45
|
+
|
|
46
|
+
1. Open DSH desktop and click **Plugins** in the sidebar.
|
|
47
|
+
2. Click **Install a third-party plugin** above the list.
|
|
48
|
+
3. Enter:
|
|
49
|
+
|
|
50
|
+
```
|
|
51
|
+
github:sweet560/dsh-plugin-deepseek-chat
|
|
52
|
+
```
|
|
53
|
+
|
|
54
|
+
`https://github.com/sweet560/dsh-plugin-deepseek-chat` works too.
|
|
55
|
+
4. Click **Install** and wait for pnpm to finish.
|
|
56
|
+
5. The plugin is enabled automatically; **DeepSeek Chat** appears in the sidebar.
|
|
57
|
+
|
|
58
|
+
### Option 3 — CLI (GitHub)
|
|
59
|
+
|
|
60
|
+
```powershell
|
|
61
|
+
dsh plugin --profile desktop add github:sweet560/dsh-plugin-deepseek-chat
|
|
62
|
+
```
|
|
63
|
+
|
|
64
|
+
Then open **Plugins → Installed plugins** and make sure **DeepSeek Chat** is switched on (the CLI only installs the package).
|
|
65
|
+
|
|
66
|
+
### Option 4 — local checkout (development)
|
|
67
|
+
|
|
68
|
+
```powershell
|
|
69
|
+
dsh plugin --profile desktop add file:"<absolute path to this repository>"
|
|
70
|
+
```
|
|
71
|
+
|
|
72
|
+
## Why the web chat cannot reuse the DSH sign-in
|
|
73
|
+
|
|
74
|
+
**A pure plugin cannot make chat.deepseek.com reuse the already-signed-in DSH account.** This is an architecture limit of DSH 0.2.2-rc.1, verified against its source:
|
|
75
|
+
|
|
76
|
+
| | DSH desktop account | chat.deepseek.com web |
|
|
77
|
+
|---|---|---|
|
|
78
|
+
| Credential | platform.deepseek.com `x-dsh-auth-token` (Host-only `getPlatformSession()`) | the site's own Token (`api/v0/users/current` returns `40002 Missing Token` without it) |
|
|
79
|
+
| Storage | Host credential store | httpOnly cookie in the guest session |
|
|
80
|
+
| Exchange | **None** — zero `chat.deepseek.com` references, no SSO, no cookie injection in the whole archive | — |
|
|
81
|
+
|
|
82
|
+
- The renderer bridge `globalThis.dshDesktop` exposes only `browser.acquire/release/onOpenRequested` etc. — **no** `getAuthToken`, cookie write, or "open Platform to fetch token" API. `getAuthToken()` exists only in the desktop shell's embedded Platform view (`usage` / `top_up`) preload, main-frame + origin restricted.
|
|
83
|
+
- The `browserAcquire` IPC only allocates a partition/lease by workspace string; `configureSession()` sets permissions and download interception, **it injects no credentials**. The guest is forced to `sandbox / contextIsolation / webSecurity`.
|
|
84
|
+
- So the DSH account state can only be **displayed**; it cannot become a web-session login. One manual QR sign-in is still required.
|
|
85
|
+
|
|
86
|
+
**What went wrong in v1.1.0 (fixed in v1.1.1)**: the guest partition had been keyed to the asynchronous account probe. DSH's `getState()` can transiently fail during a reconnect or session switch; changing the partition hands the panel a brand-new cookie jar → a fresh QR scan every time you switched back. Now:
|
|
87
|
+
|
|
88
|
+
- `acquire()`'s workspace is the constant `panel:deepseek-chat`, and the conversation key is the constant `dsh-plugin-deepseek-chat:last-url`;
|
|
89
|
+
- account state changes only update the strip — no epoch, no guest rebuild, no partition change;
|
|
90
|
+
- a transient `unknown` is ignored; only a confirmed `signed-out` updates the display;
|
|
91
|
+
- the guest starts on mount immediately, without waiting for the async Remote (a failed probe never blocks chat);
|
|
92
|
+
- popup navigation is allowlisted to `chat.deepseek.com` and `platform.deepseek.com` (HTTPS, default port).
|
|
93
|
+
|
|
94
|
+
> To also avoid re-scanning **after restarting DSH**, run [scripts/patch-dsh-persistent-partition.cjs](scripts/patch-dsh-persistent-partition.cjs) per [docs/login-persistence.md](docs/login-persistence.md) to change DSH's random in-memory partition into a deterministic `persist:` one (an `app.asar` edit — modifying the installed app, at your own risk). **It also syncs the per-file SHA256 ASAR integrity required by 0.2.2-rc.1** — a byte-only replacement (the deprecated `.mjs` script) would crash DSH on restart. It requires fully exiting DSH first. That patch preserves web cookies across restarts; it does not make the web chat reuse the DSH token.
|
|
95
|
+
|
|
96
|
+
## Usage
|
|
97
|
+
|
|
98
|
+
- The first visit shows the chat.deepseek.com sign-in page; sign in once.
|
|
99
|
+
- Within one app run, switching panels or sessions keeps you signed in (fixed partition since v1.1.1).
|
|
100
|
+
- **Sign in again after restarting DSH**: DSH currently gives embedded browsers a random in-memory partition (`dsh-sidebar-browser-<uuid>`, no `persist:` prefix), so cookies are dropped when the process exits. This plugin does not modify DSH's installation files; to sign in once and stay signed in, apply the equal-length byte patch described in **[docs/login-persistence.md](docs/login-persistence.md)**.
|
|
101
|
+
- The conversation URL is stored under the fixed key `dsh-plugin-deepseek-chat:last-url`, so the last conversation is restored after a restart (while signed in and while it still exists).
|
|
102
|
+
|
|
103
|
+
## Persistent login (optional)
|
|
104
|
+
|
|
105
|
+
DSH hands embedded browsers an **in-memory partition** (`dsh-sidebar-browser-${randomUUID()}`, no `persist:` prefix), so every app restart drops the cookies. To sign in once and stay signed in, replace that partition with a fixed `persist:` one inside `resources/app.asar` — the two statements are the same length, so the archive can be patched byte-for-byte in place.
|
|
106
|
+
|
|
107
|
+
Cause, script, verification, rollback and per-platform paths:
|
|
108
|
+
|
|
109
|
+
**→ [docs/login-persistence.md](docs/login-persistence.md)**
|
|
110
|
+
|
|
111
|
+
Note: this modifies the installed application and is outside DSH's support; a DSH update overwrites `app.asar` and the patch must be re-applied (the `Partitions` data survives). Back up first and proceed at your own risk.
|
|
112
|
+
|
|
113
|
+
## Known limitations
|
|
114
|
+
|
|
115
|
+
- chat.deepseek.com detects the Electron embedding and occasionally shows a "usage environment is abnormal" notice. That is site-side behaviour, unrelated to this plugin.
|
|
116
|
+
- Desktop only; `dsh web` in a browser shows no entry.
|
|
117
|
+
- If the site changes its conversation URL scheme (currently `/a/chat/s/<id>`), the memory falls back to the site root.
|
|
118
|
+
- The DSH account status is display-only; it cannot turn the DSH OAuth token into a chat.deepseek.com web session, so the web chat still needs one manual sign-in on first use.
|
|
119
|
+
- `getProfile()` is used only for the display name. If it is temporarily unavailable the strip may lag briefly, but it **never** affects the guest or the login state.
|
|
120
|
+
- Restarting DSH still requires a fresh web sign-in unless the persistent-partition patch in [docs/login-persistence.md](docs/login-persistence.md) is applied.
|
|
121
|
+
|
|
122
|
+
## Crash containment (v0.4.0)
|
|
123
|
+
|
|
124
|
+
Earlier versions could leave the whole app a blank window a second or two after opening the panel, with no crash dialog and no `crash-*.log`.
|
|
125
|
+
|
|
126
|
+
Root cause: React runs effect cleanups after it has removed the DOM, and Electron's `<webview>` throws from `getURL()` once detached. DSH treats any uncaught plugin error as `slot entry crashed in 'root'` and unmounts the root slot — the entire UI.
|
|
127
|
+
|
|
128
|
+
The current implementation guards every guest call behind an `isConnected` check and `try/catch`, reads the URL before removing the element, wraps every event handler, puts a React error boundary around the panel, listens for `render-process-gone` / `destroyed` / `did-fail-load`, and has a 15-second start watchdog. On failure the dead guest element is removed **before** the Retry card, so retrying cannot stack webviews; a listener-registration failure never starts a guest, and popup URLs are allowlisted (v1.1.0).
|
|
129
|
+
|
|
130
|
+
## Version history
|
|
131
|
+
|
|
132
|
+
| Version | Changes |
|
|
133
|
+
|---|---|
|
|
134
|
+
| **1.1.1** | **Fixes the "scan the QR code again on every panel switch" regression**: the guest partition and conversation key are constants; account state is display-only and never touches the guest lifecycle; a transient `unknown` is ignored; the guest no longer waits for the async probe; self-check now asserts a fixed partition and no rebuild on state churn (35 cases). Documents why a pure plugin cannot reuse the DSH token. |
|
|
135
|
+
| 1.1.0 | DSH `0.2.2-rc.1`: DSH account status strip; correct generated Remote envelope parsing; stricter conversation and popup URL validation; dead guest removal on failure. **This release keyed the partition to account state and broke login persistence (fixed in 1.1.1).** |
|
|
136
|
+
| 1.0.0 | First local release: sidebar entry, full-width chat, conversation memory, crash containment. |
|
|
137
|
+
|
|
138
|
+
## Development
|
|
139
|
+
|
|
140
|
+
```powershell
|
|
141
|
+
git clone https://github.com/sweet560/dsh-plugin-deepseek-chat.git
|
|
142
|
+
cd dsh-plugin-deepseek-chat
|
|
143
|
+
node test/check-client.mjs
|
|
144
|
+
```
|
|
145
|
+
|
|
146
|
+
`test/check-client.mjs` loads `lib/client.js` in a `node:vm` sandbox with fake React/DOM/bridge objects and checks registration, Remote envelope parsing, a fixed partition/key, no rebuild on account-state churn, partition reuse across panel switches, conversation memory, lease release, popup allowlisting and crash containment.
|
|
147
|
+
|
|
148
|
+
```
|
|
149
|
+
lib/index.js host half (empty; it only gives the client bundle a Loader entry)
|
|
150
|
+
lib/client.js browser half: entry, panel, account status strip, webview lifecycle, crash containment
|
|
151
|
+
cordis.patch.yml bundle patch that inserts this plugin's Loader row
|
|
152
|
+
locale/{zh,en}.json Plugins-page title/description
|
|
153
|
+
icon.svg Plugins-page icon
|
|
154
|
+
docs/login-persistence.md optional byte patch for DSH's in-memory browser partition
|
|
155
|
+
test/check-client.mjs offline self-check
|
|
156
|
+
```
|
|
157
|
+
|
|
158
|
+
## Uninstall
|
|
159
|
+
|
|
160
|
+
```powershell
|
|
161
|
+
dsh plugin --profile desktop remove @tianyulinfeng1/dsh-plugin-deepseek-chat
|
|
162
|
+
```
|
|
163
|
+
|
|
164
|
+
## License
|
|
165
|
+
|
|
166
|
+
[MIT](LICENSE)
|