Plugins

Connects Qoder (Lingma CN / international) models to DSH through their PATs, with a per-region multi-account pool, daily check-in, automatic failover, and read-only credit visibility.

Project file explorer in the details column (multi-select, drag-move, upload, download, rename, trash, system-open) with an in-session read-only preview tab for Markdown/HTML/JSON/CSV/notebook/PDF + code highlighting, a live model throughput badge, and a multiline GoalBar.

Local security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.

Brings WorkBuddy desktop-app experts into DSH: a settings-page market scans the local WorkBuddy expert directory (experts land there after you summon them in WorkBuddy) read-only for browsing, search and category filtering, with one-click install (exported to ~/.dsh/experts/ as role prompt + skills + avatar), update and uninstall; a picker capsule next to the input box switches the current session's expert — swapping role prompt, skills and an optional tool whitelist wholesale while keeping full session history, applied at the next model-request boundary.

Encrypted local credentials vault for the Harness: a web settings page and vault_* tools to store, search and copy passwords, API keys, TOTP secrets and card data, with health audits, expiry rotation, imports/exports and read-only/ask access modes.

Lets one session read, write and run bash across several folders, not just the primary root — additional roots are registered from a sidebar Folders panel or the /workspace-folders command (inherit/read-only/read-write) and share the primary root's file-fence + OS-sandbox authorization; adds no new tools.

Patched build of dsh-pocket for DeepSeek Harness: a password-protected entry has its access password embedded in the QR code so the phone signs in with one scan, and a read-only /dsh-pocket/entry.json endpoint lets the phone app re-sync the current public URL and password while still on the LAN.

Offline schematic review for EasyEDA Pro, exposed to dsh as four tools — one-shot checkup reports, architecture skeletons, an install doctor, and a live-editor bridge that prefers read-only actions, all driven by the local boardwise CLI.

Read-only Git and SVN code review using the current DSH agent model, with change previews, explicit context and approval-gated model requests.

Layered plugin manager for DSH web: native plugins grouped read-only by system/WebUI/tools, user extensions with enable/disable, register, uninstall and editable descriptions.

Long-term cross-session markdown memory with an LLM-Wiki structure and a SOUL.md persona, injected at session start (by default only after the first user message and only in the active session), plus remember/recall/consolidate/forget workflows, an embedded memory skill, pack/unpack migration tooling, and an idle-time first-person recall nudge that surfaces real memories in a companion voice. Also gives the store observability and upkeep it lacked: a per-file boot-block budget that keeps the index routing table from being truncated, automatic last_access stamping so salience decay actually works, a read-only memory health dashboard (size, freshness, lint-parity checks), a declarative index compiler (pages declare summary:, one command re-lines the index), an interactive memory graph (page links plus shared tags, draggable, wheel zoom), structured queries (tag/type/salience/hot/stale filters), cross-link suggestions for pages that have no relationship yet, and a `checkup` report that ends in a prioritised action list. The boot payload was also cut by ~23% by moving operational detail into the on-demand skill. Its settings section now carries its own navigation mark (a brain half wired to a node cluster, since the shell offers no icon slot to plugins) and a feedback entry that opens this repository. Requires DSH session format v4 (official DeepSeek Harness 0.1.7+): injected messages declare the producer-owned source kind plugin:memory.

Standalone wallpaper background for the DSH Web UI and desktop app: built-in wallpapers, local image/video uploads stored in IndexedDB, and a read-only local Wallpaper Engine library served by the bundled wallpaper-engine-api service in the repository; renders images, video and scene workshop previews, with light-fog/dark-overlay, blur, brightness and safe-zoom controls plus a read-only follow-desktop-wallpaper mode.

Live security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.

Local-first persistent memory for DeepSeek Harness: bounded pre-step hot-memory injection, exact and Chinese-bigram BM25 cold recall, six agent tools, approval-gated lease-lock writes with recovery receipts, and read-only governance and trajectory-review candidates.

Database tools for agents: list/query/exec/schema/stats/health across SQLite/MySQL/PostgreSQL, with lexer-grade read-only protection, row caps, CSV/JSON query output and an approval-gated write path.

Biomimetic memory system for DeepSeek Harness: a single SQLite store (node:sqlite, WAL) whose Markdown tree is kept as a read-only mirror; memory tools, frozen-snapshot injection at session start, graded approval gating, on-demand extraction of the current session, near-duplicate merging, an archive and supersede lifecycle, memory metabolism (dream), memory pins, semantic recall over local embeddings, and the /memory command.

Copy and open `dsh://` session deep links, or paste them into another conversation to inject a bounded, read-only snapshot of the referenced session.

Zotero library in a read-only sidebar panel: browse collections, search items, read metadata and full text, and insert a single citation, a selected excerpt, or a whole collection into the conversation draft. A self-hosted bridge connects to the local Zotero integration MCP and registers its tools to the model as mcp__zotero__*, each one individually toggleable.

Keep declared workspace subpaths (e.g. .git) read-only, honor a read-only rules file at the workspace root, grant extra writable roots under workspace-write, and let the model request session-scoped write access; enforced for sandboxed CLI commands and the write/edit tools.

A governed swarm of six specialist DSH agents — orchestrator, planner, knowledge-base bridge, developer and two reviewers — turns a requirement into a strict phase pipeline where every delivery must prove itself with structured evidence before the next phase may start; reviewers are read-only, code merges only after a review pass, and an append-only event log gives full replay and audit on a live kanban board. Its design draws inspiration from the Hermes Agent kanban.

Static security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.

Floating glass status bar for DSH on Windows 11 x64: an always-on-top capsule that mirrors session progress, the current step and pending approvals from a local DSH web profile, with peek and detail views; approval cards stay read-only until DSH returns its own decision receipt, and connecting to the official Desktop app is experimental and unverified.

Turns the main model into a dispatcher: six pools (economy/mechanical/main/hard/vision/review) route each subtask to the right model, with ranking and per-route reasoning-effort pins. A context watermark (50k/90k/130k) nudges delegation early and, at the force level, forks a backup session, writes a handover doc, compacts, and continues without losing in-flight subagent work; /ctx-pause, /ctx-resume and /ctx-handover pause, resume or trigger the same machinery by hand. Optional Agent Teams mode adds persistent teammates and a shared task board; /vision lets text-only models handle images via the vision pool; tiered verification sends bigger diffs to a tester and an independent reviewer. Settings UI, READMEs and the conversation / code-comment / document language preferences all cover the same 11 languages (en, zh, zh-TW, ja, ko, de, es, fr, it, pt, ru); the plugin UI follows the DSH app locale unless forced otherwise. Bundles three skills: read-only MySQL/Redis verification, commit-message generation, and a requirements/design document convention.

Database explorer panel for DeepSeek Harness: connect SQLite, MySQL/MariaDB, PostgreSQL, SQL Server, MongoDB, ClickHouse, Redis, Elasticsearch and Qdrant from a third Conversation tab — browse schemas, page through data, edit cells, insert rows, design and drop tables, run SQL, import/export CSV/JSON/SQL/Markdown, and draw editable E-R diagrams. Read-only connections enforce statement-level allowlists, agent tools ship read-only by default with an opt-in write flag, and every write (including refused attempts) lands in an auditable log. Ships an MCP stdio server exposing the same connections to external AI clients.