dshmarket 1.7.0 → 1.9.0

package/README.md

@@ -25,28 +25,13 @@ dsh plugin --profile web add dshmarket
 
 Restart `dsh web`, then open **Settings → Plugin Market**.
 
-### DSH Desktop
-
-On DSH Desktop builds that expose the public `desktopProfiles` and
-`desktopPnpm` services, install from **Open DSH Terminal** with:
-
-```sh
-dsh plugin add dshmarket
-```
-
-The market automatically targets the immutable active Desktop profile and
-uses Desktop's packaged pnpm operation service. It does not probe or install a
-system pnpm, and Desktop keeps ownership of application restart. Ordinary DSH
-continues to use the existing profile/argv/CLI path when those services are
-absent. The detection order follows Desktop's supported
-[cross-environment plugin contract](https://github.com/anywhere-labs/deepseek-harness-desktop/blob/4f68147091e585aaa1d815f99d30a657b3842d7c/dsh-plugin-desktop/docs/plugin-services.md#cross-environment-plugin-optional-desktop-adapter-and-ordinary-dsh-fallback).
-This compatibility does not mean the market is bundled with Desktop.
-
 ## What you get
 
-- **Browse & search** the full community catalog (300+ plugins, growing daily) — category filters, star counts, top/new sorting, bilingual descriptions that follow your UI language
+- **Browse & search** the full community catalog (800+ plugins, growing daily) — category filters, star counts, top/new sorting, bilingual descriptions that follow your UI language
+- **Screenshots** — AppStore-style screenshots in the install dialog: author-curated via the registry, with automatic README extraction as fallback; images load from GitHub hosting only, and only after you open the dialog
 - **Themes** — a dedicated tab for community themes and skins: install → active immediately, switch with one click (themes are mutually exclusive, your choice survives restarts), uninstall to revert
 - **One-click install** — confirm the source, watch live progress; most plugins go live after a page refresh, no restart
+- **Backup & restore** — export your profile's plugin list and configuration as readable JSON, import it on another machine, or store it on WebDAV with daily auto-backup; restores validate before writing and roll back on failure
 - **Updates** — per-plugin update checks (npm version or pinned commit vs HEAD), one-click update, or update everything at once; the market updates itself the same way
 - **Uninstall** — two-step confirm; plugins installed this session are removed live
 - **Restart when needed** — changes that cannot hot-load show a one-click restart beside the pending-change banner; the action is restricted to same-origin loopback requests
@@ -63,6 +48,7 @@ Installs prefer npm tarballs over full-repo GitHub downloads whenever a plugin p
 - Build scripts stay blocked by default (pnpm ≥10); allowing one is your explicit per-package choice
 - Terminal/CLI-surface plugins are flagged before you install them into the web profile
 - The install endpoint accepts same-origin POST only; the market never phones home
+- Backups can contain credentials from your profile config — the UI warns before export and upload; WebDAV sync is https-only, refuses private-network targets, and never stores your password in the browser
 - The restart endpoint additionally requires a direct loopback client (forwarded requests are rejected) and relaunches the exact DSH entry, arguments, environment, and working directory
 - One-click restart launches a detached replacement. If DSH is managed by systemd, launchd, pm2, or another supervisor, set the plugin option `allowRestart: false` and let the supervisor own restarts instead; the pending-change notice remains visible but the button is hidden
 - For terminal-attached launches, the detached replacement keeps running after the original terminal closes
@@ -81,13 +67,15 @@ Installs prefer npm tarballs over full-repo GitHub downloads whenever a plugin p
 
 Live from [awesome-dsh-plugin.com/plugins.json](https://awesome-dsh-plugin.com/plugins.json) — curated entries, npm mapping, and star counts refreshed daily by CI — with a bundled snapshot as offline fallback.
 
-## Related projects
+## Friends
 
-### DeepSeek Harness Desktop
+### modlens
 
-[DeepSeek Harness Desktop](https://github.com/anywhere-labs/deepseek-harness-desktop) is a modern desktop client for the DeepSeek Harness ecosystem — start and manage a local Harness service without a system Node.js installation. Compatible builds can host a user-installed dsh-market through their public profile and package-operation services; bundling remains a Desktop project decision.
+[modlens](https://github.com/liustack/modlens) — the first vision plugin for DeepSeek Harness: bolts visual understanding onto text-only models like DeepSeek and GLM. Paste an image, get structured JSON evidence back — OCR, layout, semantics. Available right in this market:
 
-[Website](https://www.dshdesktop.cn) · [GitHub](https://github.com/anywhere-labs/deepseek-harness-desktop)
+```sh
+dsh plugin --profile web add @liustack/modlens
+```
 
 ## License
 

package/README.zh.md

@@ -25,26 +25,13 @@ dsh plugin --profile web add dshmarket
 
 重启 `dsh web`，打开 **设置 → 插件市场**。
 
-### DSH Desktop
-
-如果 DSH Desktop 版本提供公开的 `desktopProfiles` 与 `desktopPnpm`
-服务，可从 **Open DSH Terminal** 安装：
-
-```sh
-dsh plugin add dshmarket
-```
-
-市场会自动使用该代 Desktop 已锁定的活动 profile，以及 Desktop 内置的
-pnpm 操作服务；不会探测或安装系统 pnpm，应用重启仍由 Desktop 负责。
-没有这些服务的普通 DSH 会继续使用现有 profile/argv/CLI 路径。检测顺序遵循
-Desktop 支持的[跨环境插件 contract](https://github.com/anywhere-labs/deepseek-harness-desktop/blob/4f68147091e585aaa1d815f99d30a657b3842d7c/dsh-plugin-desktop/docs/plugin-services.zh.md#跨环境插件可选-desktop-adapter-与普通-dsh-fallback)。
-兼容 Desktop 并不代表市场已预装或捆绑进 Desktop。
-
 ## 你会得到
 
-- **逛与搜**——完整社区目录（300+ 插件，每天在涨），分类筛选、star 数、最热/最新排序，中英描述跟随界面语言
+- **逛与搜**——完整社区目录（800+ 插件，每天在涨），分类筛选、star 数、最热/最新排序，中英描述跟随界面语言
+- **截图展示**——安装弹窗内 App Store 式截图：作者可在 registry 里策展，没有则自动从 README 抽取；图片仅从 GitHub 图床加载，且只在你打开弹窗后才发请求
 - **主题**——独立主题页：装完立即生效，点一下切换（主题互斥、选择跨重启保留），卸载即恢复
 - **一键安装**——确认来源，实时进度；多数插件刷新页面即可用，无需重启
+- **备份与恢复**——把 profile 的插件清单与配置导出为可读 JSON，换机导入，或存到 WebDAV 并每日自动备份；恢复前校验、失败自动回滚
 - **更新**——逐插件检测（npm 版本或锁定 commit 对比 HEAD），一键更新或全部更新；市场自己也走同一通道升级
 - **卸载**——两步确认防误触；本次会话装的插件即点即卸
 - **按需重启**——无法热加载的变更会在待重启提示旁显示一键重启；操作仅接受本机同源请求
@@ -61,6 +48,7 @@ Desktop 支持的[跨环境插件 contract](https://github.com/anywhere-labs/dee
 - 构建脚本默认禁止执行（pnpm ≥10）,放行与否由你按包显式决定
 - 终端/命令行类插件装进网页版前会被明确提醒
 - 安装接口只接受同源 POST;市场不会向任何地方上报数据
+- 备份可能包含 profile 配置里的密钥——导出与上传前 UI 会明确提醒;WebDAV 同步仅限 https、拒绝内网地址,且密码永不落盘浏览器
 - 重启接口还要求客户端直接来自环回地址（拒绝代理转发请求），并使用原入口、参数、环境和工作目录重新启动 DSH
 - 一键重启会启动脱离终端的替代进程。若 DSH 由 systemd、launchd、pm2 等进程管理器托管，请设置插件选项 `allowRestart: false`，交由管理器负责重启；待重启提示仍会显示，但按钮会隐藏
 - 从终端启动时，替代进程脱离原终端，关闭原终端后仍会继续运行
@@ -81,11 +69,13 @@ Desktop 支持的[跨环境插件 contract](https://github.com/anywhere-labs/dee
 
 ## 友情链接
 
-### DeepSeek Harness Desktop
+### modlens
 
-[DeepSeek Harness Desktop](https://github.com/anywhere-labs/deepseek-harness-desktop) 是一款为 DeepSeek Harness 生态打造的现代化桌面端，无需在系统中安装 Node.js 即可启动和管理本地 Harness 服务。兼容版本可通过公开的 profile 与包操作服务运行用户自行安装的 dsh-market；是否预装仍由 Desktop 项目决定。
+[modlens](https://github.com/liustack/modlens)——全网第一个 DeepSeek Harness 视觉插件，为 DeepSeek、GLM 等纯文本模型外挂视觉能力，粘贴图片即得结构化 JSON 证据（OCR、版面、语义）。本市场内即可直接安装：
 
-[访问官网](https://www.dshdesktop.cn) · [GitHub](https://github.com/anywhere-labs/deepseek-harness-desktop)
+```sh
+dsh plugin --profile web add @liustack/modlens
+```
 
 ## 许可