xiaoshi7915/dsh-kb-manager

Name: xiaoshi7915/dsh-kb-manager
Author: xiaoshi7915

Plugin插件 Native原生 ⭐ 2 MIT Memory & Knowledge记忆与知识库

dsh-kb-manager is a local knowledge-base lifecycle plugin for DeepSeek Harness (dsh): multi-format import → CJK-aware smart chunking → SQLite-native vector + full-text indexes → hybrid search (vector KNN + BM25/FTS5 → RRF → optional rerank) → citation tracing — plus soft-delete + physical compaction, an async job system, import-path whitelisting with an SSRF guard, and per-KB audit.

catalog descriptioncatalog 简介 / catalog description：DSH local knowledge base plugin: multi-format import, smart chunking, vector index, hybrid search (BM25 + sqlite-vec + RRF) for agent long-term memory

Project Overview项目介绍

Edited by Zhiwei Agent (zhiwei)由知微Agent(zhiwei)编辑

This is a full-lifecycle local knowledge base plugin for DeepSeek Harness. It supports multi-format import, CJK-aware chunking, native SQLite hybrid search, 22 agent tools, and an optional web panel. Use it for local RAG deployments. Note that PDF/DOCX parsing and ONNX embedding are not fully implemented in this MVP.

这是DeepSeek Harness的本地知识库全生命周期管理插件，支持多格式文档导入、CJK智能分块、SQLite原生向量加全文混合检索，提供22个Agent工具和可选Web面板。适合需要搭建本地RAG的场景，注意当前PDF/DOCX解析暂未实现，ONNX嵌入功能尚未就绪。

View on GitHub在 GitHub 查看

Send to your DSH发给你的 DSH 安装

请帮我安装这个 DSH 插件。安装前先完成【兼容性检查 + 安全性检查】，检查通过再动手。

插件：dsh-kb-manager（xiaoshi7915/dsh-kb-manager）
仓库：https://github.com/xiaoshi7915/dsh-kb-manager
本站详情页：https://www.yhbd.top/plugins/xiaoshi7915-dsh-kb-manager/
本站登记：类型 plugin · 归类 原生 DSH 插件 · 许可证 MIT · ⭐ 2 · 最近提交 2026-09-02 · 主语言 JavaScript

按下面顺序执行，每步先把结论告诉我，再进入下一步：

【1 兼容性检查】
① 我这边：DSH 版本、Node 版本、操作系统、当前 profile（web / desktop）。
② 读它的 README、package.json、插件 manifest，列出它要求的 DSH 版本 / Node 版本 / 操作系统 / 外部依赖 / 需要另外先装的运行时。
③ 逐条比对，结论只写「满足 / 不满足 / 未知」三种；不满足的给出可行替代方案。
④ 检查是否和我已装的插件冲突：命令名重复、skill / tool 重名、端口占用、重复注册的 MCP server。

【2 安全性检查】
① 仓库可信度：和上面「本站登记」是否一致；star / fork 数、创建时间、最近提交，是否归档或长期停更。
② 安装脚本：逐行看 package.json 的 preinstall / install / postinstall，以及 install.sh、setup.ps1 之类脚本。出现 curl|bash、下载后直接执行、混淆代码、访问与插件功能无关的域名，立刻停下来告诉我，不要继续装。
③ 依赖：列出新增依赖，标出无人维护、或与知名包拼写近似的可疑包（typosquatting）。
④ 权限与副作用：它会读写哪些目录、访问哪些域名、需要哪些 DSH 权限（filesystem / network / shell / clipboard 等），以及怎么卸载和回滚。
⑤ 如果它要求 sudo / 管理员权限，或权限明显超出功能所需，先停下来问我。

【3 安装】
上面两步没有「不满足」和「高危项」时才执行；用官方推荐方式安装，不要自行提权。

【4 汇报】
用表格输出：检查项 / 结论 / 依据 / 是否需要我决策。拿不准的一律写「未知」并说明要我怎么确认——不要猜，也不要替我决定。

Send this message to DSH in your current session: it verifies compatibility and security first (answering met / not met / unknown item by item) and only installs once everything checks out — it will stop and ask you if it finds a high-risk item. The box scrolls; the copy is the full prompt. CLI install commands may not be accurate across systems, so DSH is the safer route.把上面这条消息直接发给当前会话里的 DSH：它会先核对兼容性与安全性（逐条给「满足 / 不满足 / 未知」），确认没问题再安装，有高危项会停下来问你。框内可滚动，复制到的是完整提示词；安装命令不一定准确，发给 DSH 更稳。

Pre-install check安装前体检Compatibility · Security兼容性 · 安全性 1 warning1 项注意

Only 2 stars - very few users, little community feedback星标只有 2，几乎没人在用，遇到问题缺少社区反馈

DSH walks through these 9 checksDSH 会逐条核对这 9 项

Compatibility兼容性

DSH, Node, OS and profile requirementsDSH 版本 / Node 版本 / 操作系统 / profile 是否满足要求
External dependencies and runtimes (Electron / Python / Docker, ...)外部依赖与运行时（Electron / Python / Docker 等）是否齐备
Conflicts with installed plugins: command names, skill / tool names, ports, duplicate MCP registration与已装插件是否冲突：命令名、skill / tool 重名、端口占用、重复 MCP 注册

Security安全性

Repo matches the facts registered here; archived or abandoned?仓库是否与页面登记一致，是否归档或长期停更
Safety of preinstall / install / postinstall and install.sh / setup.ps1preinstall / install / postinstall 与 install.sh、setup.ps1 是否安全
curl|bash, download-then-execute, obfuscation, unrelated domains → stop immediatelycurl|bash、下载即执行、混淆代码、无关域名 → 立刻停止
Typosquatting or unmaintained packages among the new dependencies新增依赖里有没有 typosquatting 或无人维护的包
Requested permissions vs. what the feature actually needs申请了哪些权限、是否超出功能所需（filesystem / network / shell / clipboard）
Any sudo / admin requirement, plus uninstall and rollback是否要求 sudo / 管理员权限，以及卸载与回滚方式

Anything uncertain must be marked unknown with a note on how to confirm it. This site's signal screen is a static snapshot, not a security audit.拿不准的必须标「未知」并说明要我怎么确认。本站的信号筛查是静态快照，不能替代安全审计。

Or use CLI install (for developers)或使用命令行安装（适合开发者）

CLI Install命令行安装

dsh plugin add github:xiaoshi7915/dsh-kb-manager

把 xiaoshi7915/dsh-kb-manager 加入你的 DSH 配置（web profile）即可启用。

READMEREADME

12.8 KB · 缓存于 2026-09-04 19:38:58 · 12.8 KB

English · 简体中文

dsh-kb-manager — local knowledge base lifecycle for DeepSeek Harness: import, chunk, index, hybrid search

Import once. Retrieve with confidence.

dsh-kb-manager is a local knowledge-base lifecycle plugin for DeepSeek Harness (dsh): multi-format import → CJK-aware smart chunking → SQLite-native vector + full-text indexes → hybrid search (vector KNN + BM25/FTS5 → RRF → optional rerank) → citation tracing — plus soft-delete + physical compaction, an async job system, import-path whitelisting with an SSRF guard, and per-KB audit.

Ask in natural language. The plugin exposes 22 Agent tools (async jobs + sync ops incl. rename_kb / compact_index / cancel_job / list_snapshots / configure) and an optional Web panel (KB list, create, detail, in-KB hybrid search, import with live job progress, rebuild, two-step delete, snapshot history) — no separate RAG server required.

Design spec: DESIGN.md (v2.1).

Why dsh-kb-manager?

Capability	What it changes
22 unified tools	async 6 (`import_document` / `rebuild_index` / `compact_index` / `cancel_job` / `get_job` + export/import jobs) + sync 16: `create_kb` / `list_kbs` / `get_kb` / `rename_kb` / `delete_kb` / `list_documents` / `delete_document` / `search_kb` / `multi_kb_search` / `get_chunk` / `get_kb_stats` / `configure` / `create_snapshot` / `list_snapshots` / `restore_snapshot` / `export_kb` / `import_kb`; every tool returns `{ ok, data
SQLite-native indexes	sqlite-vec KNN + FTS5 full-text (per-KB `kb.db`); no external vector-DB process.
CJK-aware tokenization	`Intl.Segmenter` (built-in, zero deps) splits Chinese / Japanese / Korean for BM25.
Hybrid retrieval	Vector + BM25 → RRF → optional rerank; rerank state is explicit: `applied
Async job system	Import / rebuild return a `job_id` immediately; `get_job` polls progress; crash recovery (`JOB.INTERRUPTED`) + cooperative cancellation.
Import-path whitelist	Only whitelisted paths (default: session workspace + `<storage>/inbox/`) or http(s) URLs are importable.
SSRF guard	URL imports reject private / loopback / cloud-metadata addresses.
Untrusted retrieval	Search results are always flagged `untrusted: true` — content is data, not instructions.
Soft-delete + compact	Deletes are millisecond soft-deletes; `rebuild_index` / compact reclaims space physically, no orphan vectors.
Two-step destructive ops	`delete_kb` requires a one-time `confirm_token` (bound to `kb_id`, 60 s TTL).
Audit trail	Per-KB audit table records every mutation.
Snapshots / export / cross-KB import	`create_snapshot` / `list_snapshots` / `restore_snapshot` (two-step confirm), `export_kb` (`kbpack`/JSON), `import_kb` (`kbpack`, hash-deduped merge); all exposed via remote-service for the Web panel and headless.

Showing the opening section of the README — the full document lives in the repository以上为 README 开头摘要，完整文档在仓库内 · View the full README on GitHub →在 GitHub 查看完整 README →

渲染基于仓库 xiaoshi7915/dsh-kb-manager 的 README.md。在 GitHub 查看原文 →