Plugins

Manage skills and MCP servers from one DSH settings panel. Skills are read from disk: browse, search, preview the body, create, rename and delete, with a backup written before every removal. Global MCP servers are the real cordis.patch.yml loader rows; per-project entries mount only for sessions in that project. Each expanded card lists the tools that server actually registered, and a per-server allow/deny rule keeps only the ones you need — a blocked tool never enters the tool registry, so it costs no context on every turn. Every MCP card carries a connection status tag (connected with a tool count, retrying, gave up, activation failed) plus a one-click reconnect, so a server that fails at startup is visible instead of silently missing its tools. Imports existing configs from 26 other MCP clients.

每日检查 dsh 本体是否有更新（源码 checkout 走 git，npx / npm 安装走 registry），并在 Web GUI 中交由用户决定更新、延期或回退。

Codex-style per-session memory draft for DeepSeek Harness: one session one draft (rollout_summaries), restrained & passive (write only on explicit user request), layered disclosure (summary + registry), idempotent integration watermark. / 一会话一草稿记忆插件。

iPhone-style agent phone: dual-panel calls & SMS, RCS group chat with trust gates, cross-device agent messaging via the registry inbox bridge, L0–L4 trust badges and evidence audit. Experimental: trust summaries are not a security guarantee, and SMS/signalling is relayed through the operator's inbox (visible to them); E2E encryption is planned.

Adds a net_doctor tool that reports proxy environment, NODE_USE_ENV_PROXY, and reachability of the DeepSeek API and the npm registry, and sets NODE_USE_ENV_PROXY on bash and npm child processes.

One-click health check for the DSH Web GUI: a sidebar button runs the ops kit's check-health.ps1 through a plain HTTP route (independent of the tool registry) and renders a structured report card; colors follow the active theme, Windows/PowerShell.

Plugin compiler with a blueprint registry (scaffold → validate → deploy) exposed as a runtime service, three model tools, and a blueprint-gallery settings page.

Unreal Engine .uasset inspection (resolve/registry/load) and restricted Blueprint node editing through built-in UE Python.

Check installed DSH registry plugins for compatible updates, then choose which versions to apply.

Sidebar registry for SSH servers, expiry dates and service URLs, with Windows DPAPI-encrypted password and private-key storage, explicit host-key verification, login tests, and agent SSH execution that asks per command by default or can follow the session permission.

Runtime monitor for the plugins installed in a DSH profile: the panel lists every bundle and plugin entry with its Cordis fiber state and load diagnostics, scores risk from failed entries, missing bundles, version exemptions, install scripts, bin entries, a missing license and non-registry sources, keeps a timeline of state changes, and can disable a plugin entry or a whole bundle without leaving the panel.

Adds two rows to the DSH general settings section. Version update asks the npm registry for a newer @deepseek-ai/dsh, installs it as a background job and streams the install output into the row; restart DSH stops the running process so its supervisor can start a fresh one. A second restart request is refused, and a systemd unit that reports no main process is refused rather than respawned beside it. The row also reports the process uptime and identity, so a page reconnect can be told apart from a real restart.

Per-session supervision with role assignments and handoff workflows; off until enabled with /supervise. Requires @harzva/dsh-role-registry 0.1.0-alpha.1 (not on npm) installed first from its GitHub tag archive.

Session operations for DeepSeek Harness: really delete persisted sessions (ungrouped, temp, archive and subagent filters; guards on running, live and workspace sessions) and move sessions between workspaces (log relocation, header.cwd rewrite, workspace registry follow). Ships the shared session-store library.

Ships the Codex UI 1.1.49 sidebar inside the plugin itself, so no upstream release can change the interface, and adds a real delete to the session menu: it provides the remote.workspaceRegistry.deleteSession service, unhides the per-session ... button, and permanently removes the session log, workspace records and projection cache, with subagent and forked conversations selectable in a family-tree dialog. Bundles the Codex UI 1.1.49 sidebar from MichengAI/dsh-codex-ui (Apache-2.0) — do not install both; the delete engine is adapted from Lzcdebear/better-dsh-session-deletetool (MIT).

Audits the skills and plugins you already installed: routes a task description to the tool it needs, flags version drift against the npm registry and runtime faults from host logs, and reports which of a plugin's tools you never call. Registers 9 tools: can, find, status, recommend, check, scan, probe, run and suggest. Runs on Python 3.8+ with no third-party dependencies. Registered tool ids all carry the skill_audit_ prefix, for example skill_audit_can and skill_audit_find.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Adds a logon autostart switch for the DeepSeek Harness desktop app on Windows. It manages a single shortcut in the user Startup folder: no registry writes, no admin rights, no extra background process.

Standalone prompt assembly with a source registry, custom text, strategy editing and previews, and per-session strategy snapshots through DSH public hooks.

Time-based model routing: a settings panel defines weekday peak and off-peak windows and the provider/model each one uses, the choices are read from the harness registry (API keys and subscription logins alike), and a global switch decides whether that policy sets the model and reasoning effort of every request. The switch is independent per session, each session row carries a light showing its own state, and the settings panel names the model in force right now and why. A day no window matches — every weekend and holiday — uses the primary model of the first plan; the advanced thinking model is a separate axis, used only when a session itself asks for max reasoning.

Drag-and-drop reordering, official/third-party dividers and a stash panel for the buttons DSH renders in the sidebar, the sidebar footer, the conversation tabs, the composer dock and Settings. Only display position changes; the plugin registry is untouched.

Read-only Windows registry access from WSL, restricted to an allowlist of key prefixes; list a key's values or its child keys.

Registers the imagegen skill on the skill registry, so generating and editing raster images needs no hand-copied files under $DSH_HOME/skills. The agent drives a bundled image_gen.py CLI against any OpenAI-compatible GPT Image endpoint for text-to-image, reference-image editing, and transparent-background cutouts.