dsh-plugin-market

Usage

• Discover: browse the whole GitHub dsh-plugin topic ranked by stars (50 per load, "Load more" to page; GitHub exposes at most 1000 results — the real total is shown, and search reaches the rest); in-flight ops are pinned to the top
• Search: live keyword search with zh/en thesaurus plus LLM translation; the UI shows "Translated as: …"
• My Favorites: ☆ on any community card saves it into your personal list (stored in the profile, survives restarts); favorites support install / update / uninstall / README exactly like the community list
• Install: click Install → the real source is downloaded and statically audited → auto-installs on pass; on block, an audit card is shown ("Install anyway" to force, "Cancel" to give up, or hand the plugin name to the Agent for manual review)
• Installed: sort by install time (toggle direction), hover/select to see install & update times; hot enable/disable (no restart), update and uninstall entry points; disabled plugins dim with a "Disabled" tag and stay disabled across restarts; the market itself cannot be disabled
• Installed rows link to their git: the spec text becomes a link and a "Source" button opens the repo — resolved from package.json repository (or GitHub homepage), the github: spec, or a README scan when the package declares no repository (e.g. dsh-plugin-audit)
• README (usage instructions): the "README" button opens the plugin's usage instructions in-market; language links inside the README reload the file in the dialog; garbled double-encoded READMEs are repaired automatically, with a badge when repair happened
• Plugins without a dsh.bundle declaration: a yellow notice appears after install with a "Let the Agent handle it" button — it opens a fresh session with a pre-filled diagnosis task so the Agent finishes the wiring for you

Configuration

Env var	Effect
DSHMARKET_AUDIT_GATE=off	Disables the audit gate (all sources are then refused outright — fail-closed)
DSHMARKET_GITHUB_TOKEN	Raises the GitHub search quota (unauthenticated is ~10 req/min). Note: the market also reads a plain GITHUB_TOKEN env var if DSHMARKET_GITHUB_TOKEN is unset — the token is only sent to api.github.com
DSHMARKET_TRANSLATE_PROVIDER / DSHMARKET_TRANSLATE_MODEL	Model used for query translation (defaults deepseek-official / deepseek-v4-flash, using the host's configured LLM credentials)
DSHMARKET_README_PROXY	Explicit HTTP proxy for README/audit downloads (otherwise auto-detected: env proxy → local port probe → direct)