dsh-plugin-shop 0.7.3-beta.1 → 0.7.3-beta.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +53 -18
  2. package/package.json +11 -1
package/README.md CHANGED
@@ -18,23 +18,6 @@ English | [中文](https://github.com/LivXue/dsh-plugin-shop/blob/main/packages/
18
18
 
19
19
  ---
20
20
 
21
- ## 🖼️ Screenshots
22
-
23
- <div align="center">
24
- <img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-light.png" alt="The plugin shop shelf inside dsh Settings" width="860">
25
- </div>
26
-
27
- <table>
28
- <tr>
29
- <td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/gate-light.png" alt="Installing an unreviewed plugin requires an explicit acknowledgement"></td>
30
- <td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-dark.png" alt="The same shelf in the dark theme"></td>
31
- </tr>
32
- <tr>
33
- <td align="center"><sub>Installing an unreviewed plugin requires an explicit acknowledgement</sub></td>
34
- <td align="center"><sub>The same shelf in the dark theme</sub></td>
35
- </tr>
36
- </table>
37
-
38
21
  ## 📦 Install
39
22
 
40
23
  Two tracks below. They do the same thing; pick the one that matches who is reading.
@@ -113,17 +96,69 @@ bundle is not.
113
96
  | `no profile directory found above <path>` | the plugin could not locate its profile | Please report it — this is resolved from `ctx.baseUrl` and should not fail |
114
97
  | The tab is missing after a restart | the bundle is not in the profile's `bundles` | Re-run step 3; if it is absent, step 2 did not complete |
115
98
 
99
+ ## 🖼️ Screenshots
100
+
101
+ <div align="center">
102
+ <img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-light.png" alt="The plugin shop shelf inside dsh Settings" width="860">
103
+ </div>
104
+
105
+ <table>
106
+ <tr>
107
+ <td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/gate-light.png" alt="Installing an unreviewed plugin requires an explicit acknowledgement"></td>
108
+ <td width="50%"><img src="https://raw.githubusercontent.com/LivXue/dsh-plugin-shop/main/docs/images/shelf-dark.png" alt="The same shelf in the dark theme"></td>
109
+ </tr>
110
+ <tr>
111
+ <td align="center"><sub>Installing an unreviewed plugin requires an explicit acknowledgement</sub></td>
112
+ <td align="center"><sub>The same shelf in the dark theme</sub></td>
113
+ </tr>
114
+ </table>
115
+
116
116
  ## ✨ What it does
117
117
 
118
118
  | | |
119
119
  |---|---|
120
- | **Browse & search** | 1800+ packages harvested from npm by the `dsh-plugin` and `deepseek-harness` keywords, shown with the author's own summary when they declared one |
120
+ | **Browse & search** | Thousands of plugins, harvested from the whole public npm registry by the `dsh-plugin` and `deepseek-harness` keywords and from GitHub repositories using them as topics — shown with the author's own summary when they declared one, and sorted into seven categories |
121
121
  | **Install** | One confirmation. An unreviewed plugin requires an explicit acknowledgement first — an installed plugin holds the same privileges as a built-in one |
122
122
  | **Enable / disable** | Applies to an installed plugin without a restart |
123
123
  | **Installed state** | An installed plugin shows an Installed label on its card — or an Update button when the catalog has a newer version — plus an Uninstall button; the Installed filter in the category bar shows only installed plugins |
124
124
  | **Restart** | After an install, update, or uninstall, the shop offers to restart dsh — stating the cost first: the page disconnects and in-flight work is interrupted |
125
125
  | **Self-update** | The shop shows its own version next to the search box, checks npm for a newer release, and updates itself with the pinned version — then the usual restart |
126
126
 
127
+ ## 🔎 Where the shelf comes from
128
+
129
+ The catalog is not a list anyone curates by hand. Six steps run every day, and two of
130
+ them are the reason the shelf is worth reading:
131
+
132
+ 1. **Harvest the whole registry.** Every npm package carrying `dsh-plugin` or
133
+ `deepseek-harness`, plus every GitHub repository using them as topics. Nothing is
134
+ submitted; there is no queue.
135
+ 2. **Gate every candidate.** Most of what is harvested never reaches the shelf; the
136
+ live badges on the
137
+ [repository README](https://github.com/LivXue/dsh-plugin-shop) count both sides.
138
+ A package with no `dsh.bundle` is a library, not a plugin. No
139
+ license or no repository means nothing can be audited. Deprecated on npm is out; a
140
+ repository listing additionally needs no build scripts and no `workspace:`
141
+ dependencies, either of which would fail the install on your machine. A name a hair
142
+ away from a popular one is held until someone clears it. Seventeen recorded
143
+ reasons, all mechanical, and every rejection carries a line its author can read.
144
+ 3. **Classify and record.** Seven categories, and the peer modules each plugin
145
+ declares — names only, never version ranges.
146
+ 4. **Publish.** Content-addressed JSON, to npm and GitHub Pages at once.
147
+ 5. **Fetch here.** This package races the origins and verifies the sha256 before
148
+ trusting a byte.
149
+ 6. **Check dependencies here too.** Your installation resolves each recorded peer name
150
+ against *your* profile — the same question dsh's loader asks at mount time. A card
151
+ whose modules are absent reads **Incompatible** and names them. That verdict is
152
+ computed on your machine, because it depends on the harness you are actually
153
+ running, not the one the build ran on.
154
+
155
+ The full pipeline diagram lives in the
156
+ [repository README](https://github.com/LivXue/dsh-plugin-shop#-how-it-fits-together).
157
+
158
+ One thing this does **not** do: no listing has been read by a human. `verified.yml` is
159
+ empty today, every entry is community-tier, and every install asks you to acknowledge
160
+ that. Mechanical filtering is not review.
161
+
127
162
  ## 🧩 How it is put together
128
163
 
129
164
  Two halves ship in this one package, and the split between them is the security
package/package.json CHANGED
@@ -1,7 +1,17 @@
1
1
  {
2
2
  "name": "dsh-plugin-shop",
3
- "version": "0.7.3-beta.1",
3
+ "version": "0.7.3-beta.2",
4
4
  "description": "The DeepSeek Harness plugin shop: browse, install, enable, and update dsh plugins from a git-auditable catalog.",
5
+ "keywords": [
6
+ "dsh-plugin",
7
+ "deepseek-harness",
8
+ "dsh",
9
+ "deepseek",
10
+ "plugin-manager",
11
+ "plugin-marketplace",
12
+ "plugin-catalog",
13
+ "harness"
14
+ ],
5
15
  "repository": {
6
16
  "type": "git",
7
17
  "url": "git+https://github.com/LivXue/dsh-plugin-shop.git"