dsh-changelog-panel

简体中文

Primary repo: https://github.com/HLhhh/dsh-changelog-panel · Gitee mirror: https://gitee.com/huang-lin-java/dsh-changelog-panel

A bilingual changelog, security-advisory, and storage panel for DeepSeek Harness. Install it and the sidebar gains one entry: what changed in every release, which CVE/GHSA records affect your install, and how much disk space DSH itself is holding.

• Version timeline with category-grouped feature cards and keyword search
• A Security tab: 13 advisories with severity, affected range, fixed version, and source links
• An installed-version badge that tells you how it compares to the official latest
• Per-panel language switch (zh / en) that neither follows nor changes the rest of the shell
• A companion storage dashboard: what DSH leaves on disk, what each item costs, which conversation owns it, and which parts are reclaimable

What it looks like

┌──────────────────────────────────────────────────────────────────────┐
│ Changelog & Security   7 versions · 50 records  [Changelog][Security]│
├──────────────┬───────────────────────────────────────────────────────┤
│ Versions     │ 0.2.0-rc.2   latest   2026-09-29                      │
│ ┌──────────┐ │ One-line summary…                                     │
│ │0.2.0-rc.2│ │ ● Agent · 6                                           │
│ │latest·33 │ │   ┌───────────────────────────────────────────────┐   │
│ └──────────┘ │   │ ● Title / summary / related packages          │   │
│ 0.2.0-rc.1   │   └───────────────────────────────────────────────┘   │
│ 0.1.7-rc.2   │ ● Tools · 8   ● Sessions · 5   ● UI · 7 …             │
└──────────────┴───────────────────────────────────────────────────────┘

Install / Update

Not published to npm yet — install straight from GitHub.

With the dsh CLI

dsh plugin --profile web add github:HLhhh/dsh-changelog-panel

Replace web with your profile name (desktop for the desktop app).

With the plugin_manager tool (inside an agent)

Call install_bundle with target set to:

github:HLhhh/dsh-changelog-panel

From a local checkout

git clone https://github.com/HLhhh/dsh-changelog-panel.git
dsh plugin --profile web add /absolute/path/to/dsh-changelog-panel

The prebuilt lib/client.js is committed, so no build step is required to install. Restart DSH (or let HMR pick it up) and refresh the page.

Uninstall:

dsh plugin --profile web remove dsh-changelog-panel

Features

Changelog

• Version timeline on the left, opening on the version you actually have installed
• Entries grouped by category: agent, UI, tools, sessions, security, platform, plugins
• Search across titles, summaries, and related package names
• At most 12 release entries rendered per version; older ones are reachable from the timeline

Security

• 13 advisories and CVE/GHSA records with severity, status, affected range, fixed version, and links
• A "search scope" note stating what was searched and what was not found — no unsupported claims

Live data

The panel talks to two public endpoints directly from your browser; no third-party server is involved:

Source	Used for
registry.npmjs.org/@deepseek-ai/dsh-base	Version list and publish times
api.github.com/repos/deepseek-ai/deepseek-harness/releases	Official release notes

• Refreshes once on the first open of each day, plus a manual refresh button with the last refresh time
• New versions are merged into the timeline but never overwrite the verified built-in dataset
• Rate limiting is reported explicitly instead of failing silently

Storage dashboard

The same plugin also ships a storage view: what DSH has written to your disk (session logs, attachments, caches, runtime binaries), how much each item costs, which conversation owns it, and what can be moved to the OS trash. It only reports — it never deletes on your behalf — and categories that must not be reclaimed say why.

Configuration

None. Language is the panel's own state (the 中文 / EN toggle in its header); it follows the shell locale by default and only affects this panel.

Compatibility

Surface	Status
DeepSeek Harness	0.2.x (developed and tested on 0.2.1-rc.2)
Node	^22.19.0 || >=24.0.0
Platforms	Web (browser and desktop)
Dependencies	Only the peer dependency @deepseek-ai/cordis ~4.0.4; no host package is bundled

Known limitations

• No npm release yet — GitHub or a local path only
• The built-in dataset is a point-in-time snapshot; use the manual refresh for current data
• Live refresh needs api.github.com and registry.npmjs.org to be reachable; otherwise only the built-in dataset is shown
• Storage figures come verbatim from the scan report; nothing is extrapolated
• Chinese entries are paraphrases, not quotations of the original advisories — consult the linked sources for compliance decisions

Development

npm run build        # regenerate lib/client.js from src/
npm run data:verify  # validate the dataset

lib/client.js is generated — edit src/ and rebuild; do not hand-edit the bundle.

License

MIT — see LICENSE.