Plugins

UI-level access gate + process-wide agent tool brake for DeepSeek Harness: shared session, strict 60-minute idle lock, native settings module. NOT server-side authentication.

Cut LLM costs: a Jev (System One) classifier vets each turn against a declarative policy and recommends the subagent model route, so routine work runs at flash rates while the main model keeps the hard parts; explicit /route trigger, runtime delegation-capability gate, credential redaction, and offline policy replay over the verdict log.

Declares the OpenCode Go and Command Code route wire protocol and endpoint (so the API address never has to be typed), adds the DeepSeek V4.1 models to the OpenCode Go route and puts them first, completes the Command Code model list from its public catalog, and attaches a per-conversation x-opencode-session header to OpenCode requests (fixes 400 MissingSessionID).

Token usage dashboard in the DSH settings page: nine metric cards (total, today, yesterday, peak day, longest session, active-day streak, active days, sessions, subagent tokens), a GitHub-style daily/weekly/cumulative heatmap, and an activity insight list, aggregated locally from session logs and projection caches, keeping token history after a session is deleted.

Bridges LobsterAI (Youdao Lobster) into DSH: its free daily check-in credits become usable inside DeepSeek Harness, so conversations, workflows and skill packs run on those credits. Requires the LobsterAI desktop app (Windows); new-account login and gateway sync need the separate LobsterDaddy console (not in this repo). Unmaintained since 2026-10-21.

Local Ollama status / list / chat / embed for dsh on WSL (unreachable status includes Windows/WSL gateway hints).

Docker Compose ps/logs with richer status; up/down double-gated.

Clusters arXiv, first-party lab, official artifact, hardware-vendor, and opt-in X signals into versioned release evidence bundles, then gates claim-level reproduction on commands, artifacts, metrics, and verifiers.

21 read-only lifecycle governance tools in one self-contained DSH plugin: task tiering, state/plan/evidence validation, gate precheck and aggregation, release/install audits, context and progress analysis, critical path, resume reconciliation, and a mutation preview that always denies execution. Installs from npm as @240xu/dsh-tech-lead.

Usage statistics panel for DeepSeek Harness: historical token and money aggregates folded from every durable session log, drawn as a rolling-year heatmap.

Motor-design AI assistant plugin: requirement parsing → parameter identification → candidate matrix → Top10 verification. L0 is a millisecond-level broad filter (pure JS, zero solver dependency) that ranks candidates and emits the handoff payload for the L1/L2 precision tools; usable as a local agent preset and Cordis plugin. L1 (RMxprt) and L2 (Motor-CAD) are reserved in this version — the level gate fails fast above l0.

Bridges Feishu, WeCom, DingTalk, QQ, Slack, Discord, Telegram and Mattermost into dsh agents (outbound WS/Stream/Gateway/long-poll/webhook), with im_status, optional local Whisper ASR, plain-text outbound for QQ/DingTalk/Telegram/Mattermost, and env CSV allowlists (DSH_IM_*_ALLOWED_USER_IDS). Empty allowedUserIds means EVERYONE can drive your agent — set a whitelist before exposing a bot.

Pre-install compatibility gate for DSH plugins: locks the resolved version, checks peer/engines declarations, dry-installs into an isolated DSH_HOME and boots it with a timeout, blocks on any failure, and restores the profile if the real install fails. Optionally intercepts dsh-market install/update clicks. Compatible with DeepSeek Harness 0.2.x.

Ren'Py galgame production workbench: a host-side project service (write gateway plus git snapshots, a dialogue/scene dialect parser, derived progress, human-only review stamps, pinned-SDK validation and playtest, local publish) behind one seam, driven by an embedded web panel and agent tools.

Branch-aware code knowledge graph for DSH - callers, impact, trace and architecture over 158+ languages, freshness-gated, one dispatcher tool, zero MCP sessions.

Session Steward for DSH: browse and bulk-prune the official session archive set, and run a four-gate health checkup (log integrity, projection cache, lossless JSON, cold read) that ends in a reversible, backup-first prescription. Never rewrites session logs.

Makes the AI default to Mermaid diagrams in development conversations — system prompt guidance, a mermaid_validate syntax-check tool with real-parser validation, and an output gate that auto-fixes or removes broken diagrams. Rendering via dsh-mermaid.

Model channel manager: several provider/model candidates share one virtual route (roundrobin/<group>) with failover, retry, timeout and cooldown; a settings tab edits providers and groups, runs per-model speed tests and real single-model request tests, and a seven-day health panel aggregates latency, failures and upstream token usage (input, output, cache and reasoning).

Language-pack framework that rewrites model replies: A is an independent LLM rewrite, B injects FTS5 terminology retrieval into that rewrite, C applies local dictionary and regex rules, and composite runs a pipeline such as B then A then C. Ships a GitHub pack marketplace, a ZIP installer with path, size and file-type checks, and a mandatory risk disclaimer gate.

Turns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.

Workspace session monitor: aggregates per-session pending/running/completed state into a sidebar footer badge and a floating per-workspace panel, so switching between workspaces never hides a forgotten session; an additive core seam (upstream-seam.patch)

以 dsh-bridge 为根基、融合 remote-gateway 能力的 DSH 远程访问网关：局域网 / Cloudflare 隧道 / 自建隧道之外，新增「公网直连网关」（0.0.0.0 监听 + 自带 HTTPS 自签证书 + 强制登录门禁），解决移动端外网直连操控电脑。

Password-protected HTTPS login gate that lets LAN devices securely access the DeepSeek Harness web UI over the network.

Login gate for the dsh web UI: unauthenticated visitors get a login/register page and the first registrant becomes admin; includes user and role management plus login and access audit logs.