Plugins

Annotates bash results whose exit code 1 is an answer rather than an error (grep with no match, diff with differences, false test) so the agent does not re-investigate them.

Local-first research toolkit for DSH: registers kb_grep, kb_list, and kb_save model tools. kb_grep searches the markdown knowledge base with ripgrep when present and falls back to grep, while kb_list and kb_save go through the scoped ctx.fs filesystem service; the KB defaults to ~/dsh-kb. The repo also ships two skills (local-first-research and session-memory) that must be copied into a DSH skills directory yourself; they are not installed by the plugin bundle. The plugin is pure Node ESM with no npm runtime dependencies and ships a framework-free node test harness. Installable via plugin_manager install_bundle; no client UI is bundled.

Prove that a local image edit left every pixel outside its mask untouched. Original, generated and mask PNGs go in; a greppable `MASK_PIXEL_LOCK=PASS|FAIL|EMPTY` verdict, a difference heatmap, per-channel statistics, a bounding box and the largest changed pixels come out, plus a self-contained HTML report and `report.json` with a SHA-256 file hash, a canonical protected-pixel digest and a proof digest binding both to the policy. Supports edit and lock mask polarities, a mask threshold, tolerance and alpha-ignoring; PNG color types 0/2/3/4/6, bit depths 1-16, all five filters and Adam7. Zero dependencies, local only — no model call, no network, no upload.

Memory that outlives the session, kept as plain daily log files: one markdown file per day plus a generated index the agent greps instead of re-reading. Registers the annals skill, injects the write-it-down rules into the system prompt, and exposes three tools — annals_init builds the log directory, the index generator and a separate Git repository in one call; annals_query full-text searches past entries and returns them with file and line anchors; annals_links resolves which entry cites which. Reminds the agent once per turn when it changed files but wrote no log that day, and once more when the log was updated but the index was not. Adds a settings page for the six switches.

Live remote SSH workspaces with a resident Python RPC agent, remote shell/glob/grep execution, SSH port forwarding, ~/.ssh/config import, ProxyJump, and conflict-safe three-way cache sync.

Semantic workspace search: three model tools (`zg_search`, `zg_index`, `zg_status`) drive the `zg` CLI for hybrid BM25 + vector + RRF retrieval, with a search-first guard that makes `grep`/`rg` require a prior successful search in an indexed workspace.

Pixel-level screenshot diff for visual regression. Two local PNGs in; a machine-readable first line (`PIXEL_CHANGED=true|false`, greppable as an assertion), then the difference ratio, per-region bounding boxes, maximum channel delta and mean absolute error, plus a self-contained HTML comparison page. An ignore-region list with absolute or fractional coordinates excludes clocks, cursors and other per-render noise. It deliberately does no content recognition: it answers only "did this change", which is the part that can be made deterministic. Entirely local — no model call, no network, no upload.

Resident search index living in the host process: hot_find (fuzzy filename and path match, with frecency and git status), hot_fuzzy (content search that tolerates typos, including in Chinese), hot_grep (literal and regex content search), hot_plan (groups hits per file so a batch of files can be read in order) and hot_stats. One in-memory line index is built once and rebuilt on demand, so a query does not spawn a process.

session:// internal-URL scheme handler: read a session transcript, read one event as JSON, list sessions, and search past history through internal-URL-aware read/grep tools — standalone for DeepSeek Harness.

Semantic find tool for the pi coding agent and the DeepSeek Harness — a cascade-search port of jegrep / oh-my-pi jfind

DSH web plugin: a VS Code-style code editor view (file tree, Monaco, ripgrep search/replace, Markdown preview, git diff).

RTK (Reusable Token Kompressor) tool for DeepSeek Harness — token-optimized CLI proxy exposing read/ls/git/grep/err/test/json and more through the standard shell sandbox.

The dsh grep and glob tools executed in-process by the dsh-rs addon, with the packaged-ripgrep spawn as the fallback

Semgrep SAST bundle and model-facing scan tool for DeepSeek Harness.

此为 DSH 生态插件。Dolphin - 主动巡检型安全防御插件，支持本地扫描与远程 SSH 巡逻。将渗透测试方法论（信息收集→漏洞探测→利用验证→报告）转化为主动防御巡检流程：基于 Semgrep 的扫描层与基于 SSH 的执行层相融合，可对本地目录做静态扫描，也可将扫描命令经 SSH 下发至远程主机执行并回收结构化结果。

Makes ctx.logger output visible: a /logs chat command over a full-capture ring (level, name, grep, since filters) plus a default-on stderr exporter for warnings and errors, configurable per plugin; works headless. Also documents that dsh's default log buffer silently drops warn and debug records.

Resident-index grep for DeepSeek Harness that shadows the built-in grep/glob tools under the same names: repeated content searches hit an in-memory index ranked by access/modification frecency, and glob serves the built-in ripgrep semantics when available, falling back to the index otherwise.

FS-shaped internal URL schemes (conflict://, pr://, issue://, …) resolved through one registry behind the read/grep/write tools — a standalone service plugin for DeepSeek Harness with no upstream harness changes required.

DeepSeek Harness 基础工具增强：持久 bash、结构化 read、多模式 edit、原子 write、双引擎 grep/glob、图像直读，一个插件全覆盖

The ast_grep (structural code search) and ast_edit (structural rewrite) tools for DeepSeek Harness over the packaged ast-grep native engine — a standalone plugin with no upstream harness changes required.

Real-time code feedback for DeepSeek Harness — LSP, linters, formatters, type-checking, and structural analysis.

Code knowledge graph bridge for codebase-memory-mcp: semantic symbol search (BM25), source snippets, architecture overview with Leiden communities, call/data-flow/cross-service traces, graph-augmented grep.