Plugins

Framework-upgrade safety and plugin gating for DSH: a pre-upgrade session-format contract preflight that adapts incompatible plugins and agent presets before you upgrade, automatic rollback on failure, auto-quarantine of plugins that broke a boot, plus environment fingerprinting and a public contract-rule pack. The built-in multi-source marketplace is a discovery layer only.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.

In-app plugin marketplace for DSH: plugin discovery, install, upgrade, toggle and uninstall in one panel for Web and Desktop host profiles, pairing a community catalog of 4,000+ entries with customizable curated lists, plus eight agent tools and a standalone dshm CLI, without a marketplace server or account.

Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.

Fine-grained permission gateway: per-category tool-call review (outside-workspace directories, commands, file read/write, subagents, repeated actions) with global & per-project allow/deny exceptions, quick-tool defaults, custom rules, a bilingual approval modal with inline diff details, custom rejection reasons and a sandbox-upgrade flow.

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

One-command VPS deployment for DeepSeek Harness: a zero-dependency login gateway with automatic HTTPS that proxies the native web UI, a token-protected setup wizard, and one-click DSH upgrades with automatic rollback; as a plugin it adds Settings → VPS Deploy to install DSH on (or remove it from) a VPS over SSH from a form, plus version, upgrade, gateway status and a QR code to add DSH to a phone's home screen.

Type /私 and complete 私家大厨 — Chinese skill names, zero renaming. Patches DSH skill discovery, the / gesture and the skill tool so any Unicode SKILL.md name (私家大厨, 卡路里, 作息管家…) works: slash completion, direct /私家大厨 invocation, model skill({name}) loading. Zero config; runtime changes revert on uninstall, but the regex patch written into three DSH packages on disk stays until the next DSH upgrade replaces those files.

Self-hosted DSH Web operations panel for safe restart and upgrade, health diagnostics, model-usage statistics and provider quota lookup, backup and session management, task notifications, skill controls, subagent model routing, and Linux permission maintenance.

Pinned-version REA for DeepSeek Harness: installs rea-agents locally, starts its MCP server from that pinned copy, and upgrades only when you press Update.

Agent preset for DeepSeek Harness that layers the self-referential Cordis toolset (dynamic plugins, runtime inspection) and preset-authoring skills onto the PTC Code-Mode preset; materialized files carry per-file sha256 markers, so user-edited presets are never overwritten on upgrade or uninstall.

Credential provider for DSH with password-protected AES-256-GCM storage, Argon2id key derivation (legacy scrypt v2 auto-upgrade), SHA3-256 integrity checks, and temporary runtime decryption.

Use DSH from iPhone/iPad: an explicit-opt-in LAN reverse proxy (Host/Origin rewrite through the loopback trust fence, WebSocket upgrades included), iOS PWA chrome (home-screen icon, standalone meta, viewport-fit), and touch/mobile CSS (safe areas, keyboard lifting, composer row fit).

A writable, git-versioned self for DeepSeek Harness: persona files injected every turn, a persona-only memory layer, topic-keyed journal→dream promotion gated by your 👍/😑/👎 ratings, whitelisted self-upgrades, and a Settings persona tab.

One-command VPS deployment for DeepSeek Harness: a zero-dependency login gateway with automatic HTTPS that proxies the native web UI, a token-protected setup wizard, and one-click DSH upgrades with automatic rollback; as a plugin it adds Settings → VPS Deploy with version, upgrade and gateway status, or the one-command setup when DSH is not yet on a VPS.

Fixes plugins a DSH upgrade left behind: rehearse each rejected plugin in a throwaway home, grant a reversible exact-version exemption when it boots, and refuse when it does not. Also a multi-host compatibility matrix, a public table of every catalogued plugin, and a read-only plugin_health tool.

Upgrades DSH image viewing with pointer-centered zoom, pan, galleries, downloads, keyboard support, and inline region notes.

A Versions tab on the Plugins page: one-click upgrades that replace the plugin in place where they can (no uninstall, enabled state preserved, falling back to remove + reinstall with the reason logged when the profile writer lock is busy), live pnpm output with per-step timing and cancel, the full published version history with one-click rollback, every version checked against the running DSH so incompatible ones are marked and blocked, a rollback that installs the old version but cannot activate it reported separately from a lost package, profile manifest writes taken under the harness writer lock with one recoverable journal record per package after a failed upgrade, mirror-gap warnings, and a selectable npm registry saved in the profile.

Read-only audit of the local CLI toolchain as a sidebar panel in the DSH web GUI: lists installed versions across Homebrew, npm global, pip, Rust/Bun/uv and self-updating CLIs, flags which ones have a newer release available, and shows the dependency impact for installed packages. It reports only and never runs an upgrade, so no tool on the machine is modified. The DSH plugin ships on npm as `dsh-cli-doctor`.

Version and maintenance suite for DSH itself: detects new host releases from npm dist-tags, upgrades with one click, restarts safely, and the web page auto-recovers once the host is back.

Complete LAN/remote access for the Web UI: 0.0.0.0 binding, crypto.randomUUID polyfill, token gate (401 login page + WebSocket interception, loopback exempt), privileged-fence and settings-persistence exemptions, and an idempotent installer with upgrade recovery.

Manages a Magpie model list and writes the checked models into a Magpie provider group: full sync from /v1/models, manual entries, per-model context, output limit, image input and reasoning efforts, sorting and drag reordering. On Windows x64/ARM64 it also downloads and upgrades Magpie from yetone/magpie-releases with SHA-256 verification and rollback, auto-upgrades once a release is 30 minutes old and all conversations are idle, starts Magpie in the tray with DSH, and toggles its lite mode and sleep prevention.

Drop-in successor to the now-deleted corrinehu/dsh-workbuddy-connect, keeping its package name, config row id and provider ids so an existing install upgrades in place. Also fixes the 400/11128 channel check by neutralising the DSH identity sentences and scrubbing the product name from system messages, and reads the real Windows client and bundled CLI versions instead of a compiled constant, unlike the functy and community forks. Verified 2026-10-21 on Windows, WorkBuddy 5.8.3, DSH 0.2.1-rc.2.

Skill manager for DSH with a pack system. Installs skills as versioned packs and never overwrites files you have edited - upgrades skip your changes and report them. Also ships 6 built-in skills, a problem-grouped settings panel, and tools that let the agent read and write the skill library in conversation.