Plugin

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Read-only workflow panel for DSH: overview, six gates, milestones, org template, task flow and roster - project data from a project.json file, roster from the live DSH state, ledger presence from the ledger directory. Ships as a Cordis bundle with two GET-only routes and writes nothing to the project or the DSH state file.

Travel expense reconciliation: ingest orders, invoices and card lines, deduplicate, run the three-way match and a read-only policy check, then export — 5 `travel.*` tools.

AI-native SDLC as a DeepSeek Harness bundle: task state machine and artifact chain, independent verification with structured verdicts, per-issue rework and re-verification, test freezing, RSI retrospectives, and a read-only dashboard.

One leader, many sessions: tell the leader the goal and it splits the work into cards, runs persistent worker sessions in the background, collects their reports, and keeps the facts on a per-project board in the right sidebar, so several features move in parallel instead of one at a time. Project-level LEADER.md and SLOTS.md prompts shape every request, and `read_worker_session` replays a worker transcript read-only without waking it.

IMAP mail triage and cleanup for DeepSeek Harness: incremental read-only scan, a hard-protection rule layer plus optional local-model classification, a Markdown report and a hashed manifest, an explicit approval card, and only then a move to the Trash mailbox — no expunge.

Read-only Linux port, service and Caddy route map: listening sockets with their owning unit or container, a reverse service view, and reverse_proxy liveness checks. Requires iproute2 (ss); docker and a Caddyfile are optional.

Computer cleanup for Mac and Windows: disk cleanup, storage cleanup, caches, leftovers, similar photos; scans read-only and moves files to the Trash on macOS or a quarantine folder on Windows, with undo.

Local-first, file-native long-term memory for DSH with per-turn preflight, compact context injection, citations, human-approved writes, manual consolidation, nightly report-only maintenance, and a Web panel that is read-only for knowledge while allowing workspace-config edits.

Diary and narrative memory for companion agents: daily first-person entries scoped per group or private chat, refs that can be checked against that day's messages, and a read-only journal page where hand-drawn doodles and photos follow the sentences they belong to.

One read-only index of every local AI-agent session (Codex, Claude Code, DSH, Trae, or any JSONL source) grouped by project, plus an append-only shared board for decisions and handoffs so switching agents leaves no context gap.

Read-only monitor for local DSH sessions: live task board, per-session tails, blocking reply wait, Markdown export, and optional IM push via dsh-im. Requires Python 3 with the zstandard package; IM push additionally needs the dsh-im plugin.

Manages the lifecycle of the local UM GenAI proxy (127.0.0.1:8788) that DSH's um-genai provider talks to: wakes it on demand for llm/stream calls, stops it after an idle period, and reports health plus a read-only status endpoint. Also ships a DSH settings page for port, always-on mode, idle minutes, interpreter and paths, plus the UM account and proxy API key, and a button that writes the providers.um-genai entry into the profile patch and fills in its model list, since a fresh profile has no provider and the model picker would otherwise stay empty. A renewal watchdog logs in to the campus gateway on a hidden Windows desktop when the upstream token expires. The proxy itself is um_opencode_setup.py, a single-file tool distributed by the University of Macau; a copy is vendored in vendor/ so a fresh install works out of the box, while a copy in ~/.um-opencode/ takes precedence when present. The plugin still does not produce tokens: those come from logging in to the campus gateway. Requires Windows (process discovery and idle shutdown use netstat/taskkill; renewal uses PowerShell and a hidden desktop), Python 3.10+ and a University of Macau account.

Turns the DSH web UI into the H.D.D Hollow Deep Dive terminal from Zenless Zone Zero: the sidebar and composer are reskinned. Ships a small read-only host half plus the web skin; switch it off and DSH returns to its native light UI.

Hook pre-esecuzione che nega solo le scritture in una zona risultati di sola lettura dentro root protette. Tutti gli altri percorsi passano.

Ciclo di revisione del lavoro per un vault in stile Obsidian: scrive il Dream del giorno e un piano T/G numerato, esegue solo gli elementi segnati come routine (sola lettura per impostazione predefinita; commit locali solo con --live), riunisce sette giorni in una routine settimanale ISO e mostra ogni giorno e settimana in un pannello laterale di sola lettura.

Pulizia e riconciliazione dei dati dsh basate su evidenze verificabili: le fonti originali restano in sola lettura; una cella è accettata solo quando controlli indipendenti concordano e ogni valore approvato conserva provenienza e traccia di audit.

Casco per il coding AI: livelli di scrittura L0 sola lettura / L1 solo workspace / L2 completo; le modifiche privilegiate sono confinate. Sotto il livello richiesto, rifiuta la scrittura e restituisce un blocco pronto da incollare. Ogni percorso passa un controllo raw-string traversal e realpath, che rileva anche fughe tramite junction.

Verifica i plugin DeepSeek Harness: controllo pre-installazione in sola lettura con voto da S a D, più monitor runtime che registra avvio/arresto, chiamate sensibili agli strumenti e stime dei token per plugin nel pannello Settings.

Due parti condividono uno store account: il visualizzatore di repository GitHub nel pannello sinistro è read-only per progetto (tre endpoint GET; ogni richiesta non-GET è rifiutata con 405 prima del routing, il body non viene letto e i token non lasciano l’host). Lo skill github-manager espone esattamente due strumenti, github_accounts e github_api, così scrive l’agente. Accesso con GitHub Device Flow; lo store si invalida al cambio mtime e rileva token aggiunti successivamente senza riavvio.

Collega un account GitHub a DSH dal pulsante del composer (OAuth device flow o personal access token) ed espone github_api per chiamate REST: creare repository, scrivere file, leggere pull request e workflow run. Include modalità sola lettura e registro chiamate nel pannello. Fork riscritto di Moon-shiyue/dsh-github-connect (MIT): accetta Client ID device-flow, supporta query string e percorsi non ASCII, rimuove undici come dipendenza obbligatoria e aggiunge quattro schede. Non installabile insieme all’altro plugin perché condividono github_api e il namespace delle credenziali.

Legge solo i blocchi appunti Microsoft OneNote autorizzati, con accesso device-code, allow-list per notebook in Settings e quattro strumenti di sola lettura per stato, elenco pagine, ricerca e contenuto della pagina.

Raggruppa i 207 strumenti di reverse engineering REA (backend Ghidra / Hopper / IDA) in 3 comandi e 6 voci di dominio in sola lettura: circa 5 KB di testo strumenti residente invece di 757 KB. Nessun engine incluso; rea-agents, Ghidra 12.1.x e JDK 21 si installano separatamente.