dsh-plugin-client

dsh-plugin-client is a skill for Claude Code, Codex from hackerFish/awesome-dsh-skills. It costs 46 tokens per session (785 once invoked), scanned A, original, MIT.

A development guide for the browser interface of a DSH plugin, including its package structure, registered interface locations, and build setup.

In plain words
What is it for?
Use it when building plugin UI components, registering buttons or panels in supported locations, connecting shared session and input state, and configuring a two-target TypeScript build.
Why use it?
It helps developers follow the verified interface contracts and produce the required browser and host bundles.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one.

Good fit Use it when building plugin UI components, registering buttons or panels in supported locations, connecting shared session and input state, and configuring a two-target TypeScript build.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/hackerfish/awesome-dsh-skills/dsh-plugin-client
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add hackerFish/awesome-dsh-skills --skill dsh-plugin-client
Clone the repo
git clone --depth 1 https://github.com/hackerFish/awesome-dsh-skills

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dsh-plugin-client

README.md
[![agentmods](https://agentmods.dev/badge/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client/github.svg)](https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client)
Your own site
<a href="https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client"><img src="https://agentmods.dev/badge/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for dsh-plugin-client

Your own site · 80×15
<a href="https://agentmods.dev/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client"><img src="https://agentmods.dev/badge/skills/hackerfish/awesome-dsh-skills/dsh-plugin-client.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 46 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 785 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00046 $0.00785
Opus 5 $0.00023 $0.00392
Sonnet 5 $0.00009 $0.00157
Haiku 4.5 $0.00005 $0.00078

Measured 9d ago against content hash 3ee2c34f0c80, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

dsh-plugin-client scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/dsh-plugin-client/SKILL.md · 47 lines

What it actually says

DSH 插件 client 半端(依据官方包实现与 dsh-voice-input 实战验证)

包结构

  • package.jsonexports"./client": "./lib/client/index.js"dsh.client 声明 { "platform": "web", "inject": [...] }
  • inject 按需列出依赖的 client 插件:@deepseek-ai/dsh-client-runtime(slots)、@deepseek-ai/dsh-client-locale(i18n)、以及插槽声明方(如 @deepseek-ai/dsh-client-ui-conversation@deepseek-ai/dsh-client-ui-settings
  • client 源码放 src/client/index.ts,导出 export const inject = ['slots']export function apply(ctx)

注册 UI(slots 契约)

ctx.slots.inject('conversation.input.right', () => ctx.slots.register({
  name: 'conversation.input.right',  // 插槽名(single/list/chain 由声明方定)
  id: 'my-button',
  order: 10,
  locale: 'my.ns',                    // 可选:声明后组件收到 t()
}, MyComponent))
  • 组件自动收到「标准 kit」:全局 useSessions/useWorkspaces;会话级 useSessionuseInput(draft 快照)、inputActions(setDraft/submit/…);以及 sessionIduseProjectionrenderSlott
  • 常用插槽:settings.plugins.tab(设置页标签)、conversation.input.left/right(输入条按钮区)、tool.call.toolview(工具调用视图,keyed 注册)、conversation.composer.dock

构建(tsup 双目标)

// tsup.config.ts:host 半端
{ entry: { 'host/index': 'src/host/index.ts' }, format: ['esm'], platform: 'node' }
// client 半端
{ entry: { 'client/index': 'src/client/index.ts' }, format: ['cjs'], platform: 'browser',
  external: ['react', 'react-dom'] }
  • 构建后必须按官方 client-modules 协议包装:window.__ModuleLoader__.load({ id: '<包名>', factory: (require) => { ...CJS... } })(react 由宿主加载器提供,不打进 bundle)
  • 自测:Node 里 mock window.__ModuleLoader__ 执行 bundle,断言 apply/inject 导出与注册发生

安装与调试

  • file: 协议是复制安装,改代码必须重装;link: 协议建 Junction 指向本地目录,改源码即时生效(开发推荐)
  • 验证 client 已加载:刷新页面看 UI 是否出现;host 加健康路由 GET /<prefix>/health 排查;页面 HTML 的 client 清单里应出现 "id":"<包名>"rev
  • 页面清单不更新 = 服务端未重启(rev 是启动时计算的);改 lib 后重启 dsh
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 9d ago First seen · 47 lines · 46 tokens per session scan A 3ee2c34f0c80

Subscribe to this mod's changes

dsh-plugin-client is a skill published in the GitHub repository hackerFish/awesome-dsh-skills (5 stars, last pushed 4d ago), licensed MIT. It adds 46 tokens to every session and 785 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

Other skills, from other repositories

web-artifact-designer

A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.

xulelenlp/dsh-web-artifact-designer · 115 tokens

dsh-web-skin-developer

Build a new skin for the dsh-web skin collection (DSH Web GUI) and publish it into the Skin Center — the first-level settings section — scaffold with scripts/dsh-skin-new, author the v2 skin.json manifest plus skin.css token remap (pure asset directory, no package.json, no build step), validate with scripts/dsh-skin…

zhu1090093659/dsh-web · 120 tokens

dsh-first-plugin

A step-by-step guide for building and installing a first DSH plugin. DSH is a software tool whose plugins can add tools, connect outside services, or respond to agent events.

pingfanfan/hello-dsh · 60 tokens

dsh-plugin-dev

A guide for building and debugging plugins for DeepSeek Harness, a developer-preview tool built on the Cordis component framework. It explains how plugins are exported, loaded, and connected to services.

pingfanfan/hello-dsh · 55 tokens

dsh-skill-dev

A specialist review agent for software that handles purchasing, suppliers, payments, or spending approvals.

pingfanfan/hello-dsh · 59 tokens

api-design

Guidance for designing public programming interfaces, meaning the methods and data structures other code is allowed to use. It emphasizes adding only interfaces with real callers and making invalid uses impossible to compile.

pingfanfan/hello-dsh · 54 tokens