try-works/dsh-paper-design
DeepSeek Harness 的 Paper Design 插件
Project Overview项目介绍
DSH plugin bridging Paper Desktop's MCP server (127.0.0.1:29979/mcp), registering every Paper tool as a native paper_* entry on ctx.tools with schemas normalized to the enforced DSH subset. Screenshot image blocks decode and persist through ctx.attachments for image-capable models. The bridge injects Cursor-parity design guidance, Paper skills, a /paper-reconnect command, and an RFC 8414/7591/7636 OAuth 2.1 client surfaced via /paper-auth-status|login|logout, dormant when Paper Desktop runs unauthenticated. Use it to drive Paper design and HTML editing through a DSH agent. Requires Paper Desktop open with a file, a profile mounting base services, and an image-capable model route for screenshots.
DSH 插件,作为 Paper Desktop MCP 服务器(127.0.0.1:29979/mcp)的桥接层,把所有 Paper 工具以原生 paper_* 形式注册到 ctx.tools,并将 JSON-Schema 规范化为 DSH 子集;get_screenshot 的图像块经 ctx.attachments 转发,附带回传 image-capable 模型;同步注入 Cursor 风格的 system-prompt 规则、Paper 技能及 /paper-reconnect 命令;内置 RFC 8414/7591/7636 OAuth 2.1 客户端及 /paper-auth-* 命令,本地无认证场景下保持静默。适用于通过 DSH agent 操作 Paper Desktop 设计稿(含截图回传、HTML/样式改写)。前提:Paper Desktop 需已开启且有打开文件,宿主 profile 须挂载 tools/systemPrompt/attachments/skills/commands/llm 服务,并配置可处理图像的模型路由。
请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】,检查通过再动手。
插件:dsh-paper-design(try-works/dsh-paper-design)
仓库:https://github.com/try-works/dsh-paper-design
本站详情页:https://www.yhbd.top/plugins/try-works-dsh-paper-design/
本站登记:类型 plugin · 归类 原生 DSH 插件 · 许可证 MIT · ⭐ 2 · 最近提交 2026-08-17 · 主语言 TypeScript
按下面顺序执行,每步先把结论告诉我,再进入下一步:
【1 兼容性检查】
① 我这边:DSH 版本、Node 版本、操作系统、当前 profile(web / desktop)。
② 读它的 README、package.json、插件 manifest,列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对,结论只写「满足 / 不满足 / 未知」三种;不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突:命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。
【2 安全性检查】
① 仓库可信度:和上面「本站登记」是否一致;star / fork 数、创建时间、最近提交,是否归档或长期停更。
② 安装脚本:逐行看 package.json 的 preinstall / install / postinstall,以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名,立刻停下来告诉我,不要继续装。
③ 依赖:列出新增依赖,标出无人维护、或与知名包拼写近似的可疑包(typosquatting)。
④ 权限与副作用:它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限(filesystem / network / shell / clipboard 等),以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限,或权限明显超出功能所需,先停下来问我。
【3 安装】
上面两步没有「不满足」和「高危项」时才执行;用官方推荐方式安装,不要自行提权。
【4 汇报】
用表格输出:检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜,也不要替我决定。
Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH:它会先核对兼容性与安全性(逐条给「满足 / 不满足 / 未知」),确认没问题再安装,有高危项会停下来问你。框内可滚动,复制到的是完整提示词;安装命令不一定准确,发给 DSH 更稳。
- Only 2 stars - very few users, little community feedback星标只有 2,几乎没人在用,遇到问题缺少社区反馈
DSH walks through these 9 checksDSH 会逐条核对这 9 项
Compatibility兼容性
- DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
- External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时(Electron / Python / Docker 等)是否齐备
- Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突:命令名、skill / tool 重名、端口占用、重复 MCP 注册
Security安全性
- Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致,是否归档或长期停更
- Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
- curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
- Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
- Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需(filesystem / network / shell / clipboard)
- Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限,以及卸载与回滚方式
Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照,不能替代安全审计。
Or use CLI install (for developers)或使用命令行安装(适合开发者)
CLI Install命令行安装
dsh plugin --profile web add github:try-works/dsh-paper-design
把 try-works/dsh-paper-design 加入你的 DSH 配置(web profile)即可启用。
READMEREADME
dsh-paper-design
Paper Design MCP bridge as a DeepSeek Harness bundle.
Connects to the Paper Desktop MCP server (http://127.0.0.1:29979/mcp), registers every Paper tool as a native paper_* tool with image screenshot support, injects Cursor-parity design guidance, registers the Paper skills, and exposes reconnect + OAuth auth commands.
What it provides
paper_*tools — every tool advertised by Paper Desktop MCP (get_basic_info,get_screenshot,write_html,update_styles, …), registered natively onctx.tools. Raw MCPinputSchemas are normalized to the enforced DSH JSON-Schema subset ($schema/format/pattern/propertyNames/min*/max*stripped,anyOf→oneOf).- Image screenshot forwarding —
get_screenshotimage blocks are decoded and durably committed throughctx.attachments(saveImage), then emitted as attachment-backed image blocks (and deferred as plugin-sourced context for nestedrun_codedispatches), so screenshots reach image-capable models. - Cursor-parity guidance — standing rules injected as a system-prompt section (order 150), plus the full
paper-mcp-instructionsguide injected for the first 2 agent turns after connect/reconnect.paper_get_guidealso caches the guide body. - Skills —
code-to-design,design-to-code(Cursor Paper plugin bodies verbatim), andpaper-design(progressive-disclosure tool reference index). /paper-reconnect— re-initializes the MCP session, clears the guide cache, and resets the early-turn guide-injection budget.- MCP OAuth auth (Cursor parity) — a discovery-driven OAuth 2.1 client: RFC 8414/OIDC discovery probe → RFC 7591 dynamic client registration → PKCE (RFC 7636) authorization via loopback redirect → token exchange/refresh → bearer-token attachment with 401/403
WWW-Authenticatechallenge handling (RFC 9728). Tokens persist to$DSH_HOME/paper-design/oauth.json. Paper Desktop currently runs unauthenticated on localhost (no discovery/challenge), so the bridge stays dormant there and the auth layer activates only when a server advertises or challenges auth. Commands:/paper-auth-status— show mode (unauthenticated vs oauth), configured/authenticated state, expiry, discovery endpoints, last challenge/error./paper-auth-login— start the OAuth authorization flow (opens the browser; falls back to printing the URL)./paper-auth-logout— clear stored tokens.
Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要,完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →
nexu-io/open-design
EthanYoQ/AI-Novel-Writer
fufankeji/deepseek-harness-studio
EthanYoQ/Invoice-Downloader
Clarklevis1995/dsh-mobile
ZSeven-W/dsh-ios
THU-MAIC/dsh-openmaic
988hj7tczd-oss/dsh-computer-use