Plugins

Multi-threaded downloader plugin for DeepSeek Harness with bundled aria2: probes the target for Range support, then picks aria2 (4 or 8 connections by file size) or falls back to curl.

Optional read-only bridge plugin that publishes live dsh session and token statistics as one JSON snapshot for the standalone dsh-minato toolkit to read.

Runs the standalone opencode2api backend (jasonxu114514/opencode2api, Windows x64/ARM64, no Docker or OpenCode CLI) with DSH and on exit stops only the process it launched; its settings card installs, updates or rolls back the backend from checksum-verified GitHub releases, copies the initial admin password and syncs /v1/models into an opencode2api provider with context, vision and reasoning efforts, re-syncing every 10 minutes. Frozen archive: 26.10.31 is the last version, and the author points to dsh-magpie as the replacement.

Runs the standalone opencode2api backend (jasonxu114514/opencode2api, Windows x64/ARM64, no Docker or OpenCode CLI) with DSH and on exit stops only the process it launched; its settings card installs, updates or rolls back the backend from checksum-verified GitHub releases, copies the initial admin password and syncs /v1/models into an opencode2api provider with context, vision and reasoning efforts, re-syncing every 10 minutes.

Starts the WorkBuddy Panel backend (wb2api.exe from workbuddy2api-panel, Windows) with DSH and on exit stops only the process it launched; optionally syncs the backend's /v1/models into the workbuddy provider, and its settings card picks models, shows credit multipliers and installs, updates or rolls back the backend from checksum-verified GitHub releases.

Controls an existing aria2 JSON-RPC service from DSH with four tools: submit a single HTTP/HTTPS link (optional directory, filename, checksum, per-task proxy), read one task, list tasks, and pause/resume/cancel. A task it submitted that finishes or fails reports back to the session that started it. A settings page holds host, port, secret and timeout, with a connection test that does not save or create anything; it never bundles, starts or manages aria2 itself. Creating and controlling downloads only works in full-access mode (not plan mode).

Hands secrets and PII to the agent without them entering its context, with checksum-validated extraction and masked content classification.

Rewrites pwsh and bash tool commands through `rtk rewrite` and executes the compact equivalent; falls back to the original command when rtk is missing or has no equivalent, and ships a checksum-verified `/rtk install` downloader.

Moves DSH plugins between machines and profiles: export a migration bundle where local plugins keep their source and remote ones reinstall by version, restore it elsewhere with the bundle's own restore.mjs, copy plugins to another profile, or pack the whole environment (config, memory, sessions, attachments, plugin sources) into checksummed volumes with a restore script.

Pack a directory into a deterministic tar, read an archive's contents without extracting it, unpack while refusing every member that could reach outside the destination, and verify what came out against what went in by SHA-256. No external dependency — the tar format is written and read in this plugin. Extraction is deliberately more permissive on reading than on writing, because a reader's job is to report what an archive says, while a writer must never emit what it cannot read back. A tar has no central index, so the walk tracks whether it reached the end-of-archive marker: without that, a half-file checksums fine and reads as complete.

Offline identifier checks and Chinese money/tax arithmetic. Checksum-verified identifiers (mainland ID, USCC, bank card, plate, VIN, ISBN, IMEI, IBAN, EAN/UPC) plus amount-in-words, IIT, VAT, mortgage schedules and 调休-aware workday counts.