@deepseek-ai/dsh-client-ui-settings-plugin-inventory

@deepseek-ai/dsh-client-ui-settings-plugin-inventory

English | 中文

Web Settings contributions for the Plugins section: the read-only Plugin list tab (all) and Marketplace (marketplace). The Host starts one GitHub-backed catalog refresh in the background at DSH startup; the lazily mounted Marketplace reads the current snapshot and can explicitly retry a failed refresh.

The Marketplace supports text and category filters plus stars, recent heat, and recent-update sorting. A separate requirement field ranks the cached entries with deterministic bilingual lexical matching: typing and submitting a need make no LLM or network request. Installing a plugin requires confirmation and shows card-local progress or failure.

Browsing, searching, requirement matching, and installation never request a GitHub credential. The first click on a star control is the only credential check. If GITHUB_TOKEN is absent, an optional connection dialog appears; the user may cancel without affecting any other Marketplace feature. Saving a token uses the shared credential API, synchronizes the viewer's stars, and resumes the pending star. Later clicks star or unstar through the Host Remote.

The list tab remains a searchable two-column catalog of current Loader entries. Registrations use ctx.slots.inject(), so they follow late tab declaration, redeclaration, locale changes, and teardown without importing the section owner.

Model Experience

None, as Marketplace requirement matching is deliberately local and deterministic and the package registers nothing model-facing.

KV Cache effect

None; this package neither assembles nor sends a provider request.

Known Limitations and Deferred Work

• One automatic refresh per DSH startup — the Host starts exactly one background refresh. A user can explicitly retry a failed refresh from the Marketplace error state.
• GitHub tokens are user supplied — this surface stores a personal access token only after an explicit star click; it does not implement OAuth itself.
• Restart required after installation — an installed package joins the active Profile after the next DSH start; the Marketplace does not mutate the live Loader tree.