Plugins

以 dsh-bridge 为根基、融合 remote-gateway 能力的 DSH 远程访问网关：局域网 / Cloudflare 隧道 / 自建隧道之外，新增「公网直连网关」（0.0.0.0 监听 + 自带 HTTPS 自签证书 + 强制登录门禁），解决移动端外网直连操控电脑。

P0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.

Shared toolkit for authoring DeepSeek Harness plugins, published as @perrylink/dsh-plugin-kit: a pluggable provider registry seam, fail-closed approval and session-event gates, shared sanitize/pricing/judge modules and a new-plugin skeleton.

Password-protected HTTPS login gate that lets LAN devices securely access the DeepSeek Harness web UI over the network.

Login gate for the dsh web UI: unauthenticated visitors get a login/register page and the first registrant becomes admin; includes user and role management plus login and access audit logs.

Policy plugin that gates kubectl by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.

DSH GitHub connector: review PRs, triage issues, debug CI, prepare changes (18 tools, gh-first + REST fallback, approval-gated writes).

Sidebar badge and panel that aggregate per-session pending, running, and completed states across workspaces, with one click to open a session.

Local token usage and cost dashboard for DeepSeek Harness: four-segment token breakdown (miss/cache-hit/cache-write/output), cache savings estimate against the miss/hit price gap, per-session drill-down with context-growth curves and anomaly flags, global filters with shareable URLs, monthly budget progress with month-end projection, and day/month aggregate fast-path queries (O(days)) with incremental rescan.

Self-evolution actuator: consumes problem tickets mined from session logs, synthesizes skill candidates (zero-code tiers by default) behind an eval gate with hold-out canaries, then promotes to project .dsh/skills with human confirm and deterministic rollback.

An approval-gated OME engineering delivery preset with session-isolated lifecycle evidence.

Product Design workflow suite for DeepSeek Harness - a router plus nine pd-* skills carrying ideas from a minimum design brief through visual directions, evidence-grounded research and audits, URL cloning, frontend builds and a blocking design-QA gate.

Share the DSH workspace over the local network: phones, tablets and other computers browse, download and upload files via browser with no DSH login. Token gate, path boundary, read-only mode and rate limit. Zero-dependency (node:http).

Text-to-image and image-to-image generation via OpenRouter's unified Image API: configurable model aliases with parameters gated against the live model capability listing, reference-image inputs, a settings card, and inline chat display of results.

Image generation workbench and agent tool for DSH: one tool (ark9_generate_image) paints text-to-image and image-to-image via any OpenAI-compatible API. Channels are entirely user-configured - no bundled endpoint, you bring your own baseURL, key and model name (manual input supported). Agent-initiated generations are approval-gated by default: requests queue in the floating panel and nothing bills until you approve; approval is non-blocking (the agent replies "awaiting your approval" immediately, and results, denials or timeouts are injected back so the agent reports them in the next turn). Floating glass workbench with five tabs (Generate / Approvals / Prompts / History / About), aspect-ratio grid with quality-budget + 16px-alignment sizing, transparent background, batch up to 10 images as aggregated sub-tasks, prompt library with custom JSON sources fetched through a host proxy, persistent generation logs with one-click retry, multi-channel aggregation with per-channel model fetching, bilingual UI (zh/en), stroke-SVG icon set, config import/export. Registers as a Better Sidebar tab when dsh-better-sidebar is installed; stacks above the dsh-cua FAB when both are present.

OpenAI-completions-compatible adapter for custom gateways (vLLM / LM Studio / self-hosted proxies): always role:"system", thinking driven by the model config, Qwen-style response split, and vision-model image input (single / multiple).

Per-provider concurrency gate on the llm/stream waterfall: holds surplus model requests in a FIFO queue inside DSH so main agent, subagents and compaction take turns on a single-slot local server (llama.cpp --parallel 1) instead of timing out; maxConcurrent / maxQueued / queueTimeoutMs.

Runs a parallel code review squad of read-only reviewer subagents (security, correctness, tests, style), each optionally on its own model, and aggregates one severity-grouped report from /review or a code_review tool call.

Verifiable issue-to-PR delivery chain: an 11-stage pipeline (analysis, search, code understanding, hypothesis, planning, implementation, patch ledger, tests, review, failure classification, PR build) with 4 human review gates, GitHub/GitLab/CodeArts credential connections, a 5-page workbench and a draggable AI assistant panel.

Drive your real logged-in browser through OpenCLI — browser primitives plus 170+ site adapters as deterministic one-shot commands, with in-session adapter authoring, a write-approval gate and a settings management panel.

DSH tools for operating a self-hosted Talebook library: search, download, upload and manage books and audiobooks, manage Legado book sources, and admin operations, with approval-gated writes.

Decision log for DeepSeek Harness: record key decisions (chosen option + why) into a versionable DECISIONS.md via decision_log / decision_list / decision_audit tools, and auto-inject the summary into future sessions so decisions stay traceable and are never re-litigated.

Sidebar badge and panel that aggregate per-session pending, running, and completed states across workspaces, with one click to open a session.

Git workspace manager for DeepSeek Harness: a repo-gated composer button opens a settings-style panel for diff/commit, branch, conflict, and worktree management, plus a commit history with branch-graph lines.