Plugins

One repository, three parts: a runtime injector for DSH plugin packages (inject, hot-reload, unload, promote a dev staging tool to the front, route self-heal, plus a settings-page plugin manager that lists, unloads and drags folders in to internalize), a task-aware reasoning-mode router agent preset (router-standard / router-spec / router-react), and a graded two-level task protocol whose six tools (commit_star, lock_stage, revise_do, edit_plan, mark_task, redteam_verdict) pin task state to disk. The injector implementation ships in-tree, so the install carries its own behaviour rather than a dependency list.

Software-engineering method pack for coding agents, with skills for baseline-first planning, systematic debugging, prompt hygiene, verification before completion, and repair/retirement tracking.

Connects dsh to a local SandBase Harness runtime over stdio MCP for managing agents and sessions, streaming turns, inspecting artifacts and cancelling work.

Pi Host ABI compatibility engine: after one install, unmodified Pi extensions from npm mount as native DSH plugins with `dsh plugin add <pi-package>`. Verified end to end on stock DSH with pi-mcp-adapter (full MCP manager: OAuth, resources, prompts, MCP Apps, elicitation, sampling), @tintinweb/pi-subagents, pi-code, pi-hermes-memory and pi-background-tasks; `pi2dsh inspect` reports a package's compatibility before installing.

GitHub-topic-driven plugin & skill marketplace: a Settings page that browses the auto-collected registry (the whole dsh-plugin topic plus the skills index, CI-refreshed every 2 hours) with one-click install, type detection, install-script and host-shadow-dependency safety confirmations, env-key management, and the STANDARD.md recognition spec.

Long-term memory for DSH agents — durable, inspectable memories with recall, search, browse and knowledge-graph tools, import from ten other AI coding tools, and a settings page.

Profile-wide DSH governance and routing with a Web Control Center for responsibility and evidence inspection, plus compaction, scoped semantic memory, safety continuity, and verified delivery; compatible with DSH 0.1.5-rc.1.

Red-team engagement mode: send one target organization name and a planner session runs a five-role execution team (recon, asset triage, vulnerability discovery, exploitation, internal pivot) under a user-configurable concurrency limit (three by default, changed from the console and taking effect immediately), preflight-checking skills and resources and asking once for any missing key or VPS first, guided by a built-in first-run onboarding skill; scoring follows the merged intrusion scoring rules (8 categories / 25 points) with server-side caps, highest-privilege-wins and per-service dedup, and self-registered accounts never score — a login that fits no more specific category is scored as controlling a web application system rather than dropped; findings land in a local SQLite fact base with discovery timestamps, shown in a persistent right-side console of 9 tabs (asset mapping with a discovery timeline and the live test view, the agent roster with its concurrency setting and editable role prompts, session/tunnel state, findings — vulnerabilities, credentials and access sessions plus the attack files archived against each vulnerability — five-stage attack chain, scoring targets, an evidence-screenshot capability (register a screenshot per score point, at most three representative shots per point so a bulk result such as dozens of endpoints does not flood the console or the report, viewed inline in the console and embedded in the report, with on-site screenshots kept strictly apart from record-generated evidence cards), and a report that spells out how each score was obtained (actions, exact commands, credential provenance, tunnel build commands, a reproduction entry that is either a paste-ready HTTP request or a runnable command, plus success criteria and an evidence index), a category-organised POC/EXP knowledge base, and a skill library that reports for every unusable skill why it is unusable and the concrete steps to repair it); ships 14 reconnaissance/assessment skills (the npm package deliberately carries no tool auto-installer and no attack-chain skills — those ship as a separate toolkit Release attachment that the operator fetches and runs themselves), 56 redteam_* tools and one-command self-update.

Renders agent HTML output as real UI in the DeepSeek Harness web GUI, with visual cards, KaTeX math, Mermaid diagrams, built-in open-source fonts, and design-spec injection.

Search 65,600+ API docs from 20 Chinese open platforms through five read-only tools and a runtime skill.

Skill-driven harness/loop engineering workflow agent plugin.

Connect DSH to a MultiVibe gateway and inspect available models and connection status.

PC environment diagnostics & port control board: zero-dependency inspection of system, CLI toolchains, active listening ports with hover-to-kill release, and model key readiness. No external calls, zero plaintext secrets.

Docker container panel for the DSH Web GUI: containers (optionally including stopped), docker inspect details, logs, stats snapshots, image list and one-shot exec on the local machine or SSH hosts — read-only by default (mutations and exec are permission-gated), with a per-container terminal drawer embedded via the tty plugin.

MCP Connector for DeepSeek Harness: an MCP manager with one panel to connect servers, configure authorization, search tools across connections, and troubleshoot failures. Browse a continuously updated catalog of over one hundred connectors; filter by connection/server/status, inspect readable parameters and the last successful cache time, and rediscover tools. Supports OAuth 2.0 PKCE, API keys, stdio/HTTP, and mcpServers JSON import. Maintained by Qichacha/QCC.

Skill-driven harness/loop engineering workflow agent plugin.

Zotero as an evidence store for agents: search your library, inspect metadata and notes, retrieve evidence passages, open source PDFs, and generate citations and bibliographies.

Multi-model council for DeepSeek Harness: independent answers, anonymous peer reviews, and an inspectable final decision.

Local-only project memory with zero bundled runtime dependencies or external services: JSON as the source of truth plus generated PROJECT_MEMORY.md, token-bounded session-frozen Hot Memory for prompt-prefix cache stability, cached cross-project BM25 recall, trusted session/turn provenance, explainable pre-write duplicate/conflict governance, editable importance/pin/tags/supersede/archive lifecycle, configurable top-level turn-end distillation, and a bilingual Web GUI for search, inspection, diagnostics, and live settings.

DSH↔Godot engine runtime bridge: launch and drive a running Godot 4.x game through its in-game TCP interaction server — 16 tools (runtime control via ~130 game commands, scene/UI inspection, GDScript eval, input simulation, screenshots, headless static ops, project editing, export, script validation, engine-path setup), replaces godot-mcp.

Installs a multi-agent novel-writing preset for DeepSeek Harness: one conductor agent dispatches five specialized subagents — world-building, plotting, character management, prose writing, and QA review.

In-GUI skill hub for DeepSeek Harness: browse, search, toggle, inspect, diagnose and scaffold local skills from the official ctx.skills registry, plus a skill market with tracked source sync and one-click update-all.

Auto mode for DeepSeek Harness (dsh): an Auto entry in the Permissions selector whose approval prompts are answered by OpenGuardrails policy instead of a human — plus the full OGR guard engine underneath. No core changes.

Render and iterate on Blender scenes from DSH: 16 tools for scene specs, previews, visual review and delivery renders, with immutable revisions and an approval gate.