@deepseek-ai/dsh-client-ui-plugin-center

Desktop Plugin Center UI

English | 中文

Desktop-only Plugin Center and Plugin Discovery entries: sidebar.primary.action supplies both navigation actions and main.page supplies their independent pages. Plugin Center searches a verified catalog, switches between ordinary Plugins and Bundle-wrapped Skill packs, opens exact-version detail in the same page, and reports cache freshness. Plugin Discovery presents the public Plugin catalog as a compact editorial view with search, metadata-backed capability categories, the server-owned Featured, Popular, and Recent orders, a right-side exact-version detail panel, and the same trusted-install confirmation. A failed exact-detail read keeps the selected entry open, explains that npm may be rate-limited or temporarily unavailable, and retries both detail and compatibility in place. “Let Agent find plugins” accepts a plain-language scenario and asks the current Agent to use the bundled find-plugins Skill against the public dsh-plugin catalog. Missing DeepSeek configuration opens the existing Models settings; recommendations return to chat, while installation still uses Plugin Center compatibility and confirmation. Exact Install preflight presents current Desktop/DSH/Node/platform/Profile facts, ordered denial reasons, restart expectation, capabilities, and broad-authority risk. When the exact version is already installed, Discovery shows whether it is enabled or disabled and sends the user to Manage without running a duplicate-install preflight. The installed manager joins system, catalog, and local sources with enabled, runtime, update, and pending-operation facts; Discovery sends installed entries back to that manager instead of duplicating lifecycle controls. Catalog-owned rows expose confirmed enable, disable, exact update, and uninstall journeys. Uninstall retains configuration and plugin-owned data by default, then offers a separate bounded deletion confirmation only after commit. Incompatible reviewed Bundles remain visible and explain why activation is unavailable.

On Windows Desktop, catalog title bars reserve the native caption-control lane, so freshness metadata and refresh actions remain separate from the minimize, maximize, and close buttons.

Preset Square is a third first-level page beside Plugin Center and Plugin Discovery. Its Square view owns public search, download/newest order, details, and verified .dshpreset installation; its Installed view owns the live local roster, protected system rows, user-row removal, and starting a blank session with a selected preset. Both views stay on the page through their mutations, and a remote catalog failure does not hide local presets. Browser development provides deterministic read-only fixtures and identifies installation, removal, and session selection as Desktop-only operations.

The catalog presents seven application-bundled workflows in a dedicated Fufan Official (赋范官方) group before community entries, including the LLM Wiki Producer workflow backed by the LLM Wiki 全栈工程师 Agent Preset. Cards and detail views explicitly state that this is Fufan-maintained content rather than official DeepSeek Harness content. The LLM Wiki detail also identifies its Agent prompt, bundled find-plugins Skill, standard tools, and runtime workspace/global Skill discovery before installation. Installing one still creates an ordinary user Preset, so the Installed view can remove it and the catalog can install it again.

Use pnpm run dev:desktop:web for browser development (dev:plugin-center remains a compatibility alias). This entry sets DSH_DESKTOP=1 so it composes the same Desktop client UI roster and skin while isolating DSH_HOME under project artifacts. Plugin Center exposes its development marker and hover explanation on the page root. The default scenario replays install and installed-item actions into one session-backed operation and cumulative installed projection, including post-uninstall owned-data confirmation; pluginCenterScenario=compatibility-denied also presents one app-update-incompatible disabled Bundle. pluginCenterScenario=stale denies stale catalog authority, and pluginCenterRecovery=failed presents the runtime-mismatch safe mode with no-write diagnostic export and retry. This lane validates UI and state journeys only: its installed result, mutations, data deletion, and diagnostic export are simulated, and it has no real MCP process, Electron preload, filesystem, package-manager, or Host-restart authority.

The renderer receives fixed catalog methods, operation-state methods, and recovery retry and diagnostic-export intents that accept only operationId. It sends the installation intent only after the user confirms the exact version and acknowledges broad application authority. The intent contains only plugin id, exact version, and an idempotency key; it never accepts a package name, registry, URL, path, evidence, environment, policy, command, or raw Skill source. Desktop enables recovery-backed lifecycle mutations. A runtime-inventory recovery mismatch automatically opens the installed manager in safe mode; the renderer and main-process IPC both permit only disable or uninstall, while install, update, and enable remain unavailable. The current Agent is invoked only when the user explicitly submits a “Let Agent find plugins” requirement. The page sends the length-bounded original requirement as /find-plugins arguments. The on-demand bundled Skill uses a read-only script to search the public npm catalog and requires the model to recommend at most five returned packages. Plugin metadata remains untrusted content, and the Agent never installs or changes plugin state automatically. When DeepSeek is not configured, no request is sent and the existing Models settings opens instead.

Model Experience

None, as the Desktop catalog UI and its development marker register nothing model-facing.

KV Cache effect

Ordinary catalog browsing has no effect. Agent finding adds one user turn and loads stable Skill instructions on demand; the requirement and live catalog results are dynamic, so no cross-request cache hit is promised.

Known Limitations and Deferred Work

• F001 uses a bundled reviewed fixture — F006 owns the production catalog service, publication, ranking, and withdrawal flow.
• Discovery does not invent growth metrics — the page preserves the current server-owned Featured, Popular, and Recent orders and renders only categories derived from reviewed summary metadata; a growth view requires a future catalog field carrying auditable growth evidence.
• Agent finding covers only the installable public catalog — the bundled Skill recommends only npm packages tagged dsh-plugin that declare an exact Bundle patch and immutable distribution evidence; it does not present arbitrary GitHub repositories or general Skills as currently installable plugins.
• Safe mode requires a healthy restored Host — only an exact runtime-inventory mismatch reaches the normal Plugin Center; snapshot, Profile, package, lock, and Host-health failures remain on the protected recovery page.
• The browser development bridge has no system authority — real Profile, MCP, Electron IPC, filesystem, package-manager, and Host-restart behavior requires Desktop acceptance.