플러그인

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Read-only workflow panel for DSH: overview, six gates, milestones, org template, task flow and roster - project data from a project.json file, roster from the live DSH state, ledger presence from the ledger directory. Ships as a Cordis bundle with two GET-only routes and writes nothing to the project or the DSH state file.

Travel expense reconciliation: ingest orders, invoices and card lines, deduplicate, run the three-way match and a read-only policy check, then export — 5 `travel.*` tools.

AI-native SDLC as a DeepSeek Harness bundle: task state machine and artifact chain, independent verification with structured verdicts, per-issue rework and re-verification, test freezing, RSI retrospectives, and a read-only dashboard.

One leader, many sessions: tell the leader the goal and it splits the work into cards, runs persistent worker sessions in the background, collects their reports, and keeps the facts on a per-project board in the right sidebar, so several features move in parallel instead of one at a time. Project-level LEADER.md and SLOTS.md prompts shape every request, and `read_worker_session` replays a worker transcript read-only without waking it.

IMAP mail triage and cleanup for DeepSeek Harness: incremental read-only scan, a hard-protection rule layer plus optional local-model classification, a Markdown report and a hashed manifest, an explicit approval card, and only then a move to the Trash mailbox — no expunge.

Read-only Linux port, service and Caddy route map: listening sockets with their owning unit or container, a reverse service view, and reverse_proxy liveness checks. Requires iproute2 (ss); docker and a Caddyfile are optional.

Computer cleanup for Mac and Windows: disk cleanup, storage cleanup, caches, leftovers, similar photos; scans read-only and moves files to the Trash on macOS or a quarantine folder on Windows, with undo.

Local-first, file-native long-term memory for DSH with per-turn preflight, compact context injection, citations, human-approved writes, manual consolidation, nightly report-only maintenance, and a Web panel that is read-only for knowledge while allowing workspace-config edits.

Diary and narrative memory for companion agents: daily first-person entries scoped per group or private chat, refs that can be checked against that day's messages, and a read-only journal page where hand-drawn doodles and photos follow the sentences they belong to.

One read-only index of every local AI-agent session (Codex, Claude Code, DSH, Trae, or any JSONL source) grouped by project, plus an append-only shared board for decisions and handoffs so switching agents leaves no context gap.

Read-only monitor for local DSH sessions: live task board, per-session tails, blocking reply wait, Markdown export, and optional IM push via dsh-im. Requires Python 3 with the zstandard package; IM push additionally needs the dsh-im plugin.

Manages the lifecycle of the local UM GenAI proxy (127.0.0.1:8788) that DSH's um-genai provider talks to: wakes it on demand for llm/stream calls, stops it after an idle period, and reports health plus a read-only status endpoint. Also ships a DSH settings page for port, always-on mode, idle minutes, interpreter and paths, plus the UM account and proxy API key, and a button that writes the providers.um-genai entry into the profile patch and fills in its model list, since a fresh profile has no provider and the model picker would otherwise stay empty. A renewal watchdog logs in to the campus gateway on a hidden Windows desktop when the upstream token expires. The proxy itself is um_opencode_setup.py, a single-file tool distributed by the University of Macau; a copy is vendored in vendor/ so a fresh install works out of the box, while a copy in ~/.um-opencode/ takes precedence when present. The plugin still does not produce tokens: those come from logging in to the campus gateway. Requires Windows (process discovery and idle shutdown use netstat/taskkill; renewal uses PowerShell and a hidden desktop), Python 3.10+ and a University of Macau account.

Turns the DSH web UI into the H.D.D Hollow Deep Dive terminal from Zenless Zone Zero: the sidebar and composer are reskinned. Ships a small read-only host half plus the web skin; switch it off and DSH returns to its native light UI.

사전 실행 훅으로 보호된 root의 읽기 전용 result zone 아래에 쓰는 경우만 거부합니다. 그 밖의 모든 경로는 통과시킵니다.

Obsidian 스타일 볼트를 위한 작업 검토 루프입니다. 날짜별 Dream과 번호가 매겨진 T/G 계획을 작성하고 routine으로 표시된 항목만 실행합니다(기본 읽기 전용, --live일 때만 로컬 commit). 7일을 ISO 주간 routine으로 묶고 모든 날짜와 주간 기록을 읽기 전용 사이드바 패널에 표시합니다.

검토 가능한 근거를 중심으로 dsh 데이터를 정리하고 대조합니다. 원본 출처는 읽기 전용으로 유지하고, 독립 확인 결과가 일치한 셀만 승인하며, 승인된 모든 값에 출처와 감사 기록을 남깁니다.

AI 코딩용 안전모입니다. 쓰기 권한을 L0 read-only / L1 workspace-only / L2 full로 등급화하고 권한이 높은 편집은 격리합니다. 필요한 단계보다 낮으면 쓰기를 거부하고 바로 붙여 넣을 수 있는 블록을 반환합니다. 모든 경로에 raw-string traversal 검사와 realpath 검증을 해 junction 탈출도 잡아냅니다.

DeepSeek Harness 플러그인을 감사합니다. 설치 전 읽기 전용 검사로 패키지 등급을 S~D로 평가합니다. runtime monitor는 플러그인 시작/중지, 민감한 tool call, 플러그인별 토큰 추정치를 Settings 패널에 기록합니다.

하나의 계정 저장소를 공유하는 두 기능입니다. 왼쪽 패널의 GitHub 저장소 뷰어는 구조상 읽기 전용입니다(GET endpoint 3개, 모든 비-GET 요청은 라우팅 전 405로 거부, request body는 읽지 않으며 token은 호스트를 떠나지 않음). github-manager skill은 github_accounts와 github_api 두 도구만 제공해 agent가 쓰기를 수행합니다. GitHub Device Flow로 로그인하고 mtime 변경 시 저장소를 무효화하므로 나중에 추가한 token도 재시작 없이 반영됩니다.

composer 버튼에서 OAuth device flow 또는 personal access token으로 GitHub 계정을 DSH에 연결하고 REST 호출용 github_api 도구를 제공합니다(저장소 생성, 파일 작성, pull request와 workflow run 읽기). 읽기 전용 스위치와 패널 내 호출 로그가 있습니다. Moon-shiyue/dsh-github-connect(MIT)를 다시 작성한 fork로 device-flow Client ID 거부를 수정하고 query string 및 비ASCII 경로, undici 필수 의존성 제거, 패널 4개 탭을 추가했습니다. github_api 이름과 credential namespace가 같아 함께 설치할 수 없습니다.

허용한 Microsoft OneNote 노트북만 읽습니다. device-code 로그인과 Settings의 노트북별 허용 목록을 사용하며 상태 확인, 페이지 목록, 검색, 페이지 내용 조회용 읽기 전용 도구 4개를 제공합니다.

REA의 리버스 엔지니어링 도구 207개(Ghidra / Hopper / IDA 백엔드)를 명령 3개와 읽기 전용 도메인 항목 6개로 묶어 상주 도구 텍스트를 757 KB 대신 약 5 KB로 줄입니다. 엔진은 포함하지 않습니다. rea-agents, Ghidra 12.1.x, JDK 21은 별도로 설치합니다.