Plugins

Fast-execution runtime for dsh: context governance with 4 KB tool-result caps and field projection, zero-LLM fast-path templates with idempotency keys, PTC container scripts that keep intermediate results out of context, a three-tier sandbox with file/command/network rules, injection detection, secret redaction, snapshots with a recycle bin, and append-only audit logs; 10 runtime_kit_* slash commands, no business dependencies.

Evidence-gated teaching-material workbench with a Web UI: page model, per-page handout and slide editing, PAEG Chinese language checks, layered gates, checks center, version history, handout/deck/storyboard/Manim-script export and rights audit.

Career knowledge base vault with ten agent skills for setup, capture and import, audit, JD resumes, interview prep and review, plus Feishu interop.

Security review for DSH plugins: reads the manifest, install hooks, native dependencies and source for network egress, dangerous APIs and credential paths, cross-checks the curated market registry, and returns a 100-point verdict with itemised findings. Read-only — it never executes the audited code.

Audits and evolves agent context at four scopes: a single repository, a group of related repos, a knowledge hub, or the whole machine. Discovers projects, instruction files, skills, tools, knowledge, project state, evidence and credential references; reports drift, duplicate facts, broken pointers, paths left unverifiable in prose, budget overruns, unindexed knowledge, stale state and unregistered credentials; scores each scope on the dimensions that belong to it; and turns findings into reviewable migration plans that back up every file before moving it. The format contract behind the metrics is written down as a versioned spec (CTX rules, markdownlint-style IDs) that follows open conventions — AGENTS.md for instruction files, llms.txt-shaped link indexes. Also scaffolds a deliberately small hub for durable knowledge and project state. Ships a stdlib-only Python CLI plus two skills, with credentials referenced by path and never printed. Requires Python 3.9+ (stdlib only) and DSH 0.2.1-rc.2 or newer, below 0.3.0.

Treemap disk usage map with linked cleanup suggestions, a reviewed trash plan, and an append-only audit log on macOS.

Cross-session long-term memory for DSH: eight memory layers, four notebooks, hybrid SQLite FTS5/vector/graph retrieval, agent-driven automatic capture, write lifecycle hooks, optional write audit, project spaces, forgetting and a visual management page. Full FTS5/vector/graph retrieval needs the bundled Go service, which ships only as a Windows x64 prebuilt; on macOS/Linux, build it from source or the plugin falls back to Node SQLite without FTS5 and retrieval degrades.

QQ (OneBot 11 / NapCat) channel for DeepSeek Harness: bridges QQ private chats and group chats into their own dsh sessions. Ships group guardrails (mention-only, quiet hours, cooldowns, daily quota, peak-hour mute), a tool gate with write-action audit, an outbound filter that stops the model from echoing input tags, voice transcription, media and forwarded-card support, dryRun and usage stats. Forked from dsh-onebot-qq 0.9.4. Cannot be installed alongside the upstream dsh-onebot-qq (two QQ channels on one NapCat crash-loop DSH). Private chats answer admins only (an empty admin list means nobody); group chats default to all groups and answer any @-mention, so set groupPolicy to allowlist to restrict who can drive the agent.

一份能交出去的自查表、整改说明和合规证明

Agent application development evaluation skill (skill bundle) for DeepSeek Harness: offline/online suites judged from audit side effects, baseline diff with zero tolerance for safety regressions, and mutation tests proving the evaluators themselves catch regressions. Framework-agnostic - needs a callable chat endpoint and queryable tool-call records. DSH host compatibility is deliberately undeclared.

Per-turn cost in CNY, with 本轮 / 今日 / 会话 totals shown above the composer. Tokens are priced by model and by the moment they were spent (peak hours and holidays); native DeepSeek search spend can be folded in when the optional audit plugin is installed.

Read-only observer of native DeepSeek search model calls: appends each call token usage to a JSONL file so accounting plugins can price it. Requests and responses are not modified.

Requirement-to-evidence audit for DSH sessions: maps each requirement to tool calls, files and commands, records per-requirement verification, and sends missing items back to the agent.

Codex-inspired lifecycle command hooks for DSH, with explicit tool-input sharing, pre-tool deny policies, notifications, and local audit examples.

Connects the CallAI SEO MCP server: 10 SEO data tools plus a generic DataForSEO request tool for Google/Bing SERP (with AI Overview sources), keyword volume and difficulty, long-tail ideas, competitor keyword gaps, backlinks and page audits. Includes a callai-seo skill. Requires a CallAI API key; pay as you go.

Freight ratecard versioning, carrier bill audit, recovery summary and variance export.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Plan-native multi-agent workflow for DeepSeek Harness: plan directs, work coordinates, code writes, and review audits read-only. Ordinary tasks need no authorization card or budget form. Includes 14 chain_* tools for explicitly authorized controlled rounds, with a frozen T0 baseline, layered evidence, and blocking close gates. Provides per-role model settings. Requires the sibling l1-presets bundle. For new installs, Weihao654/dsh-workflow#role-chain provides this runtime and the four presets in a single bundle. Do not enable role-chain alongside either legacy l1-presets or l2-protocol.

Four agent presets for the default plan-native workflow in DeepSeek Harness: plan plans and delegates, work coordinates execution, code owns implementation changes, and review performs independent read-only audits. Each role has a defined tool-permission matrix. Works with the sibling l2-protocol bundle for opt-in controlled rounds. For new installs, Weihao654/dsh-workflow#role-chain provides these four presets and the controlled-round runtime in a single bundle. Do not enable role-chain alongside either legacy l1-presets or l2-protocol.

Logic-risk review before rewriting: audit the source, decide each fix, generate several drafts in parallel, and export with a per-draft audit report. Bring your own OpenAI-compatible API endpoint and key - the plugin ships no model and returns 403 until one is configured.

Skill shell that installs, runs and troubleshoots React-Monitor-Agent, a human-agent operation board built on review replay and checkpoints: the agent writes its work as a structured replay timeline of screenshot, diff, text, link and file nodes, and the human decides at plan, progress, risk and delivery checkpoints, with verdicts branching the timeline and rejected branches kept greyed-out for audit. The skill guides cloning the source repo and starting a zero-dependency Node event service on 127.0.0.1:8790 plus a React board on localhost:5173 that ships an offline FIXTURE demo mode. The bundle embeds the skill only; product source stays in the repo.

Computer Use for every DSH session: screen capture, mouse and keyboard, app launch, plan and skill replay, an audit log, guards for dangerous actions, a background code agent, and an OCR workflow (text and coordinates) for apps whose accessibility tree is empty. Verified on macOS only: Windows has a basic GUI backend that is unverified, Linux has no desktop backend (calls fail with unsupported_platform), and the window/AX/browser/clipboard tools register on macOS only.

Rclone backup tooling with four tools: target inventory, local/remote status, rclone check verification, and approved copy/sync transfers with dry-run previews and an audit line. Requires rclone installed and a remote configured with `rclone config`; the plugin never reads the rclone config or credentials.

Windows multi-drive dashboard that labels cleanable, caution, and system space in green, yellow, and red, audits download folders, and suggests how to split data across drives.