Entwicklung & Plugin-Tools

Read-only pass / age secrets with allowPrefixes; reveal defaults to false.

Sandboxed ripgrep / fd / ast-grep under allowRoots (defaults include ~/.dsh/im-workspace).

Read-only rclone listremotes / lsf / about.

Headless Playwright fetch (title + body text) in WSL.

Dependency tree summaries: npm / pip / cargo.

Local Ollama status / list / chat / embed for dsh on WSL (unreachable status includes Windows/WSL gateway hints).

Local media/doc pipeline: ffprobe, extract, thumbnail, PDF, ASR, pandoc, OCR, exif (allowRoots include IM inbox).

Mail list/search via himalaya / notmuch (no send).

OpenAI-compatible client for llama.cpp / Unsloth Desktop (default :8080).

Read-only kubectl get / describe / logs / contexts for dsh on WSL (configurable log tail).

Read-only Helm list / status / history.

Read-only glab MR / issue / ci status.

Capped Git status / diff --stat / log --oneline (no full patches).

Read-only psql + redis-cli probes.

Docker Compose ps/logs with richer status; up/down double-gated.

Read-only khal calendar list.

Bridges a WSL dsh agent to a Windows Obsidian vault on NTFS: status/list/search/read/write/append, wikilink resolve, write/append require confirm=true, plus obsidian:// open. Keep the vault under /mnt/<drive>/; Linux-disk vaults via \\wsl$ are unreliable.

Call TypeSafe Jev / OpenRouter System One for noul, choice, and score (jev_ask / jev_check / jev_rank).

Preflight checks for a DeepSeek Harness plugin before submitting it to the community list: verifies the dsh.bundle manifest, cordis.patch.yml wiring, client bundle shape, and peer ranges that silently exclude prerelease harness builds. CLI plus one read-only agent tool.

Back up your DSH profile configuration to a private GitHub Gist on a schedule, with merged restore.

Bridges Feishu, WeCom, DingTalk, QQ, Slack, Discord, Telegram and Mattermost into dsh agents (outbound WS/Stream/Gateway/long-poll/webhook), with im_status, optional local Whisper ASR, plain-text outbound for QQ/DingTalk/Telegram/Mattermost, and env CSV allowlists (DSH_IM_*_ALLOWED_USER_IDS). Empty allowedUserIds means EVERYONE can drive your agent — set a whitelist before exposing a bot.

Custom modes and custom prompts for DeepSeek Harness (dsh): edit a mode's system prompt on the settings page (it takes effect on the next model step), choose its base mode, switch plugins row by row, and keep several assistants side by side.

Ren'Py galgame production workbench: a host-side project service (write gateway plus git snapshots, a dialogue/scene dialect parser, derived progress, human-only review stamps, pinned-SDK validation and playtest, local publish) behind one seam, driven by an embedded web panel and agent tools.

Branch-aware code knowledge graph for DSH - callers, impact, trace and architecture over 158+ languages, freshness-gated, one dispatcher tool, zero MCP sessions.