DSH Plugin Marketplace

The DeepSeek Harness action layer for DSH Index discovery, user-confirmed installs, issue tracking, and labelled community knowledge.

Status: release foundation implemented; not published to npm yet. The package, dsh-index CLI, DSH manifest, consent gates, provider adapters, release workflow, Marketplace API contract, and supported Web entry points are in this repository. The DSH Index Marketplace API is live with production D1, rate-limit bindings, and an inaccessible Worker secret; the npm package still awaits its first public release. This release is verified against the local DeepSeek Harness 0.1.0-rc.5 checkout.

Search a source, then select Install. Marketplace adds an editable Install plugin prompt to the current Harness message box; it never installs a discovered repository silently.

DSH Index and Marketplace are complementary:

Product	Responsibility	It does not do
DSH Index	Public discovery, daily snapshots, observed movement, and moderated community reference	Certify a repository, audit security, or recommend an installation
Marketplace	DeepSeek Harness action layer: search, inspect, user-confirmed install, issue drafts/status, and contributions	Silently install packages, silently file issues, or publish raw user data

Intended one-command install

The release package will be @dshindex/dsh-plugin-marketplace and will declare both a DSH bundle patch and a Web client bundle. Once the first npm release is published, the complete Marketplace installation will be:

dsh plugin --profile web add @dshindex/dsh-plugin-marketplace

Then restart dsh web. This is the official DSH profile-plugin flow: dsh plugin forwards to pnpm in the selected profile, detects the package's dsh.bundle.patch, and mounts the patch on the next boot. The Marketplace package will include its host plugin, client plugin, and CLI in that one package.