dsh-lineup-manager

DSH PLUGIN模型与账号接入

仓库 cheeri020/dsh-lineup-manager

模型与账号接入 L4 · 沙盒安装通过 安全审查:低风险 可信度:银 可安装插件
安装这个插件

dsh-lineup-manager 是 cheeri020 维护的 模型与账号接入 类 DSH 可安装插件, 仓库为 cheeri020/dsh-lineup-manager,许可证 MIT。 下面按「装什么、怎么装、验没验过、跑起来要注意什么」逐项列出。

一句话选型结论

按资料字段整理

dsh-lineup-manager 是模型与账号接入类的 DSH 可安装插件,验证等级 L4 · 沙盒安装通过,安全审查为低风险,有可直接复制的安装命令。验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么;涉及密钥或系统权限的,建议先在隔离环境试装。

分类模型与账号接入 收录类型可安装插件 验证等级L4 · 沙盒安装通过 安全审查低风险
验证等级 L4 L4 · 沙盒安装通过
GitHub 星标 0 复刻 0 · 未关闭 issue 0
最近更新 2026-10-23 创建于 2026-10-23
README 7.3 KB 正文体量,越大说明说明书写得越细

安装

可安装插件
在 DSH 里执行,装完用 dsh plugin list 确认已挂上;标了 L4 / L5 的命令已在沙盒里真实跑通
dsh plugin --profile web add github:cheeri020/dsh-lineup-manager#v0.2.0
  1. 1
    确认版本与运行环境

    仓库没有标注兼容版本与 Node.js 要求,先确认你的 DSH 版本能装,再继续。

  2. 2
    执行安装命令

    在 DSH 里执行上面的命令;多包仓库要注意区分具体子包名,别装错包。

  3. 3
    确认已挂载

    用 dsh plugin list 查看列表里是否出现这个插件,出现即挂载成功。

  4. 4
    试跑并检查权限

    加载后跑一个最小用例,确认它能正常工作;同时看它申请了哪些文件、命令或网络权限。

兼容 DSH 版本未标注版本不匹配时安装会报错
Node.js 要求未标注来自仓库 package.json 的 engines 字段
前置依赖无需要同时安装的同级依赖
npm 包名未发布到 npm可用 npm view 查看包信息

能做什么

模型与账号接入
字段来自项目仓库与公开索引,中文说明由本站标注

上游标签

deepseek-harnessdsh-pluginmodel-picker

验证等级与安全审查

L4 · 沙盒安装通过
自动化流程结论,不是人工审核
验证等级L4 · 沙盒安装通过安装命令在隔离沙盒内真实执行成功,无依赖错误
安全审查低风险静态分析结论,未标注不代表已通过审查
仓库健康度活跃按仓库活跃度与最近更新时间给出
可信度银综合仓库活跃度与验证结果

选择建议

装之前先看这几条
按条目字段给出的判断,不替你决定用不用

值得选的地方

  • 验证等级 L4:在沙盒里真实装过,依赖能装上,不是纸面声明。
  • 静态安全审查为低风险,没有发现明显可疑行为。
  • 有可直接复制的安装命令,不用自己翻文档找入口。

先想清楚的地方

  • 没有声明 Node.js 版本要求,版本不匹配可能装不上。
  • 验证通过不等于安全:插件会读写文件、执行命令或联网,装前先到仓库确认它做了什么。

更适合

  • 需要在模型与账号接入场景里给 DSH 补能力的人。
  • 想装完就能用、不想自己排依赖的人。
  • 能接受在本地装依赖、愿意自己确认权限的人。

不太适合

  • 只使用 DSH 官方内置能力、不接受第三方插件的人。

同类对比

6 个同类
同分类里挑最接近的几条,字段以各自详情页为准
插件验证等级安全审查星标兼容版本安装命令
dsh-lineup-manager当前 L4 · 沙盒安装通过 低风险 0 未标注 有
archify L4 · 沙盒安装通过 低风险 8.0 万 未标注 有
DeepSeek-Reasonix L4 · 沙盒安装通过 低风险 3.6 万 未标注 有
nocobase L3 · 安装规范通过 低风险 2.5 万 0.1.1-rc.2 无
learn-harness-engineering L4 · 沙盒安装通过 低风险 2.0 万 未标注 有
dsh-our-free-model 未做沙盒验证 未标注 8,064 未标注 无

仓库档案

模型与账号接入
字段来自项目仓库与公开索引,中文说明由本站标注
作者 / 维护方cheeri020仓库 dsh-lineup-manager · 默认分支 main
分类模型与账号接入ai
收录类型可安装插件声明了 dsh.bundle、可用 dsh plugin add 安装的条目
开发语言未标注仓库主语言
许可证MIT商用或二次分发前请确认条款原文
星标 / 复刻 / issue0 / 0 / 0收录时的数值,非实时
创建 / 更新2026-10-23 · 2026-10-23最后推送 2026-10-23
本站收录2026-10-30首次进入本站目录的时间

README 全文

7.3 KB
作者原文,中文版优先;只做安全转义,不改内容

dsh-lineup-manager

Pick which model lineups appear in DeepSeek Harness's model picker — grouped by provider, and refreshed live from each platform.

English · 简体中文 · Español · Português · हिन्दी

Compatibility

Surface Status
Harness DeepSeek Harness 0.2.1-rc.2
Node ^22.19.0 || >=24.0.0
Platforms All (plain ESM; no native code, no build toolchain)

The problem

DSH groups its model dropdown by provider, but how many entries show up depends on your config:

  • a provider that declares a models: list in cordis.patch.yml → only those lineups appear
  • a provider with no models: list → the picker shows the adapter's entire catalog, which can be hundreds of entries

So keeping only the free lineups means hand-editing YAML. This plugin turns that into checkboxes in Settings.

Platforms change their lineup every few days — new models appear, free tiers vanish. Refresh pulls the live list and marks the difference, so you can see what moved without leaving the panel.

Features

  • Per-provider checkboxes for every declared lineup
  • Bulk per provider: All / None / Free only
  • Refresh — pulls the platform's current lineup list and flags new and gone entries. Available per provider and as Refresh all
  • Live-added models become selectable immediately, before they exist in your config
  • Writes are surgical and reversible: only the target provider's models: block is replaced, with a timestamped backup, a structural check, and a read-back verification that rolls back on mismatch

Install

From a tarball (recommended)

pnpm pack                       # produces dsh-external-dsh-lineup-manager-.tgz
dsh plugin add ./dsh-external-dsh-lineup-manager-0.2.0.tgz

Restart DSH afterwards.

From a git checkout

dsh plugin add github:/dsh-lineup-manager

The prepare script builds dist/ on install. pnpm >=10 refuses to run git dependencies' build scripts by default; if the first add fails, add this to the profile's pnpm-workspace.yaml and retry:

allowBuilds:
"@dsh-external/dsh-lineup-manager": true

Only allow this for sources you trust, and pin a commit: github:/dsh-lineup-manager#.

Manual

pnpm install
pnpm build                     # emits dist/ and verifies it

Then copy the package into $DSH_HOME/profiles//node_modules/ and restart DSH.

Usage

  1. Open Settings → the "Lineups" button at the top
  2. The panel lists every provider in your cordis.patch.yml with a checkbox per lineup
  3. Per provider, use All / None / Free only, then Save that group
  4. Restart DSH for the model picker to reflect the change

Unsaved changes are flagged; closing the panel asks for confirmation.

Refresh

Press Refresh on a provider (or Refresh all in the footer) to pull that platform's current list:

  • a green new badge = the platform offers it, you have not checked it
  • a struck-through grey gone badge = you checked it, the platform no longer offers it

Refresh never writes. It only labels. Nothing reaches the config until you check boxes and press Save, which still goes through the backup / structural check / read-back-rollback path.

Strongly recommended: declare a baseURL for every provider

openrouter:
apiKeyEnv: OPENROUTER_API_KEY
api: openai-completions
baseURL: https://openrouter.ai/api/v1

Without a baseURL, the plugin must infer the endpoint by reading the installed pi-ai catalog out of app.asar. That path depends on the host environment and fails poorly when it does — as an unwritten response the client can only report as HTTP 400 (empty body). Declaring baseURL goes straight to the network and never touches that code.

Verified endpoints:

Provider baseURL
openrouter https://openrouter.ai/api/v1
opencode https://opencode.ai/zen/v1
nvidia https://integrate.api.nvidia.com/v1

A baseURL change needs a DSH restart.

Safety

Editing a config file is risky — a corrupted cordis.patch.yml can stop DSH from starting — so writes are guarded four ways:

Guard What it does
Surgical replace Only the target provider's models: line block is rewritten; other providers and sections are untouched
Backup first Every write emits cordis.patch.yml.bak-lineup- beforehand
Structural check In-memory validation (no duplicate providers, legal model ids) before anything is written; rejects on failure
Read-back verify Re-reads from disk and compares; restores the backup on mismatch

Also: unknown providers are refused with 409; duplicate or whitespace-containing ids are rejected; request bodies are capped at 256 KB.

Backups accumulate. Clean up cordis.patch.yml.bak-lineup-* once you are happy with the config.

How refresh works (and the traps)

It must bypass pi-ai's built-in catalog

discoverModels returns the installed catalog — frozen at your DSH version — the moment it receives a provider argument. That is silent staleness: the feature looks like it works while showing months-old data. Refresh therefore sends baseURL and never provider. Guarded by test-refresh.mjs (R2).

Namespace

dsh-llm-pi-ai registers model discovery under its own loader entry id — llm-pi-ai as declared in the profile. This plugin runs under a different entry, so deriving the namespace from ctx.fiber.entry.options.id yields dsh-lineup-manager and the kernel answers NO_DISCOVERY. The namespace is a constant. Guarded by test-refresh.mjs (R9).

asar reads

The catalog lives inside app.asar (~174 MB). Reading it whole costs ~125 ms and hundreds of MB of RSS, multiplied across a refresh-all. The reader seeks: header plus the one entry's byte range. Measured 4 concurrent resolutions drop from ~905 MB to ~69 MB. Guarded by test-asar.mjs.

Keys that expired

A platform answering 401 api_key_expired makes that provider show a failure badge. Other providers are unaffected and your config is untouched — refresh reporting this is the point, not a bug.

Layout

src/                  runtime sources
index.js            host half: HTTP API over cordis.patch.yml
client.js           browser half: the Settings panel
cordis.patch.yml    bundle patch
scripts/build.mjs     emits dist/, verifies the copy
tests/                plain-Node test suites
dist/                 build output (not tracked)

Development

pnpm build        # emit + verify dist/
pnpm test         # 66 checks across four suites
pnpm test:live    # hits real provider endpoints; needs real credentials
Suite Covers
test-server.mjs config read/write, the four write guards (17)
test-accept.mjs install integrity + end-to-end (22)
test-refresh.mjs refresh diffing, catalog bypass, namespace, read-only (21)
test-asar.mjs asar reader memory behavior (6)

The four suites run entirely in temporary directories and never touch a real profile. test-live.mjs does hit the network and reads your real credentials; it also asserts the config is unchanged afterwards.

License

MIT

常见问题

6 问
答案由本站依据条目字段整理,不引用上游原文
dsh-lineup-manager 怎么安装?

在 DSH 里执行 `dsh plugin --profile web add github:cheeri020/dsh-lineup-manager#v0.2.0` 即可。

dsh-lineup-manager 的验证等级是什么意思?

L4 · 沙盒安装通过。安装命令在隔离沙盒内真实执行成功,无依赖错误

dsh-lineup-manager 安全吗?

低风险。

dsh-lineup-manager 装之前要先确认什么?

先看它会读写哪些文件、执行哪些命令、连接哪些网络地址;验证等级只说明装得上、跑得起来,不等于安全。涉及密钥或系统权限的,建议先在隔离环境试装。

dsh-lineup-manager 用的是什么许可证?

上游标注为 MIT。商用或二次分发前请到仓库确认许可证原文。

这条记录的数据可靠吗?

本站按仓库名去重后合并整理,字段以作者仓库与 npm 元数据为准;安装命令、仓库地址与 README 保持原文,带 L4 / L5 标记的安装命令已在隔离沙盒里真实跑通。

模型与账号接入
按星标排序,可作替代方案

archify

archify

从仓库或系统描述生成经过校验的自包含交互式架构图、流程图、时序图、数据流图和生命周期图。

L4 · 沙盒安装通过 8.0 万 星

nocobase

nocobase

L3 · 安装规范通过 2.5 万 星

dsh-our-free-model

dsh-our-free-model

为 DeepSeek Harness 挂载免登录、免 API Key 的免费前沿模型通道,装完即用,并附用量看板与 OpenAI 兼容本地转

未标注验证等级 8,064 星

dsh-purge

dsh-purge

dsh-purge 是一款 DeepSeek Harness 设置插件,可修改默认副本、权限策略和工具限制,并添加规则卡片以分组应用补丁,支

L5 · 运行验证通过 4,573 星

插件的元信息来自作者仓库;分类、验证等级与安全结论的中文说明为中文整理,最近核验 —。