Plugins

Security-audit facts AI coding agents cannot compute, plus a verdict gate: euthyna history attributes deleted lines to commits and flags those from security fixes (--origins finds the first introducer), euthyna coverage reports which changed symbols no test ever invoked, and euthyna gate checks each finding against six gates, downgrading any without evidence to an observation.

Quality-aware in-agent plugin discovery: a find_dsh_plugins tool that ranks the whole dsh-plugin topic through a daily quality-scored index (installable manifest, curated listing, license, activity) merged with a live gh search — zero LLM API cost, risk flags and exact install commands in every result.

Per-model token cost tracking with configurable cache-hit/miss, output and peak-window pricing, a live session cost bar, and unconfigured-model flags.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

Deck-generation skill for the National College Student Career Planning Competition. It takes a contestant's profile, materials and photographs, drafts a page-by-page outline for confirmation, then renders a 15-20 page reading-type PPTX (under 15 pages is flagged as a page-count error) using 17 page types, three built-in themes or a user-supplied template; the build audits the estimated layout (text overflow, per-page word count, missing evaluation dimensions, material gaps) and the rendered PDF is checked again for out-of-bounds and overlapping text. Requires Python 3.9+ with python-pptx, python-docx and Pillow; LibreOffice (soffice) and pdftotext are optional for the PDF layout re-check.

Copper-to-oil ratio dashboard for the Shanghai Composite: lag-weighted forecast band and drill-down charts.

Conversation lock for the DeepSeek Harness sidebar: every conversation row gets a lock button, and a locked conversation blurs only the conversation area behind a password box while the sidebar stays usable. Re-locks on window blur, tab hide, page hide, or whenever the open conversation changes, and never pauses a running turn - the veil reports that background work continues. The password digest, lock flags, and preferences live in <DSH_HOME>/session-lock/state.json behind two same-origin routes guarded by a custom header, so clearing the page localStorage unlocks nothing; PBKDF2-SHA256 with a random salt, and a 30-second input lockout after five wrong attempts. Recovery is opt-in per machine: a Windows login password (enabled only after a real .NET PrincipalContext ValidateCredentials check against the local machine, so Microsoft accounts and passwordless machines keep it off) and a cooling period chosen while creating or changing the password (1/6/24/72/168 hours; expiry clears the password and releases every lock, and the correct password cancels the countdown). A settings section covers status, changing the password, lock new conversations, hiding locked titles, a three-position archive-restore policy (all / locked only / off, switching needs the password), lock everything, and unlock everything. Dialogs use the native dialog top layer, so a dialog opened from Settings is never covered by it. Requires DSH 0.2.0-rc.1 or newer; no build step.

Ships BMAD-Method inside the plugin: the seven modules are laid down on first open, no installer run and no download, the method's 90 agent and workflow skills come in the package, and each module can be turned off by writing the disabled flag into the profile patch.

No longer updated: folded into dsh-lifeguard (last release 0.2.2). It checked a plugin against what was installed and flagged only real conflicts.

Audits the skills and plugins you already installed: routes a task description to the tool it needs, flags version drift against the npm registry and runtime faults from host logs, and reports which of a plugin's tools you never call. Registers 9 tools: can, find, status, recommend, check, scan, probe, run and suggest. Runs on Python 3.8+ with no third-party dependencies. Registered tool ids all carry the skill_audit_ prefix, for example skill_audit_can and skill_audit_find.

DSH onboarding plugin: recommends plugins across eight domains ranked by weighted GitHub stars and npm monthly downloads, installs the recommended set in one click behind a reviewable plan, and exports or imports an environment code recording a profile's plugin list, exact versions and enabled flags.

Doxygen comment workflow for C/C++ (including Qt) sources: file headers, functions, module groups, trailing and short comments, plus a scan that flags comments whose signature fingerprint went stale. Requires Python 3.10+ with `pip install tree-sitter tree-sitter-cpp`.

Audits Chinese copy for AI-sounding phrasing: a 0-100 score over six dimensions, sentence-level flags with rewrite hints, and per-genre weights adjustable in conversation.

Bridge to the UnrealAgentLink editor plugin: the Unreal Engine editor dials this WebSocket bridge on 127.0.0.1:17860 and the agent drives it through 12 tools covering all 170 cataloged commands (actors, levels, blueprints, materials, PCG, screenshots, logs, undo).

Git repository connector for DeepSeek Harness: saved repo profiles addressed by name, work-copy operations (clone/fetch/pull/push/commit), Gitea/Forgejo/GitHub API tools, keys in the DSH credential center, and per-repo safety flags (TLS bypass, overwrite, force push).

English word bank for one or more children, built for DSH 0.2 and newer (0.2.0-rc.1 and 0.2.0-rc.2 verified, including the desktop shell; 0.1.7 through 0.2.x all work). 1.10 added pronunciation: in the memory cards and in the online quiz every word and every example sentence has a speaker button that reads it aloud with the built-in Windows voice - offline, with no network call and no model call - and the whole batch of audio is pre-rendered in the background whenever cards or an exam are generated, so a click starts instantly. 1.11 adds: pick words in bulk straight from the library (10 at a time, top-down, up to 50 selected, with a live counter); turn the words a child got wrong in a quiz into a one-click review set - an online card page that speaks plus a printable PDF; and every card example sentence now carries its Chinese translation underneath. Words marked on textbook or workbook photos (highlighter, red pen) are found by their marks, then translated and stored in a local SQLite bank with an occurrence count; the clipboard picker, the photo route and dictation all land in the same bank. High-frequency words surface by count, three correct answers in a row flag a word as learned, and any selection prints as a memory card set (a word split into chunks, real IPA per chunk, a grade-7 example sentence, a mnemonic hook, an A4 sheet of eight) in HTML, PDF or Word, with a print-and-answer exam page whose four options are set against each other for meaning. On 0.1.5 the settings panel does not appear - install dsh-word-vault@1.0.2 instead.

Plays a vanilla Minecraft villager "hmm" whenever the model hums inside its reasoning chain.

Local token usage and cost dashboard for DeepSeek Harness: four-segment token breakdown (miss/cache-hit/cache-write/output), cache savings estimate against the miss/hit price gap, per-session drill-down with context-growth curves and anomaly flags, global filters with shareable URLs, monthly budget progress with month-end projection, and day/month aggregate fast-path queries (O(days)) with incremental rescan.

Compaction quality / hallucination detector: when a conversation span is compacted, check on two axes that key information survived 鈥?FIDELITY (assertions in the summary must be found verbatim in the original leaf events, else flagged as fabricated) and C

Injects your own text into the DeepSeek Harness system prompt as real system sections from a sidebar editor: each section lands after the persona, after the tool docs, or at the very end of the prompt, can be switched on or off, and can resolve {{variables}}; a preview runs the host's own assemble and render pass so you see the exact prompt the next request will send, with empty, duplicate, unknown-variable and oversize sections flagged.

Clamps the session history page request to 120 messages and replaces request/header tool schemas larger than 200k characters with an empty array before React renders them, so long sessions open without freezing the transcript.

Cross-project session grouping for the DSH sidebar: define named sections, assign sessions from any project into them, then collapse, rename, archive or move a whole project in one action; a toggle in the Sections panel swaps the host session browser for the section tree and restores it on demand, and each row flags live work or a completion you have not looked at yet.

Measures one university department's research output: matches author affiliation strings against a college's known name variants (detecting same-named departments at other universities), backfills papers that only name the university by faculty author IDs, classifies each paper by journal tier (CAS partition with Top flag, JCR quartile, CCF, Chinese core via a CNKI export merger), splits staff from student first authors, and writes a workbook with a dashboard sheet, a filterable paper list, a teacher-by-direction matrix and per-teacher statistics. Student authorship is inferred from affiliation and staff lists, not verified against enrolment records. Requires Python 3.9+ with pandas and openpyxl (pip install -r requirements.txt); papers come from the OpenAlex API, whose free per-IP quota is limited, and Chinese-journal coverage needs a manual CNKI export.

Views, creates and edits AGENTS.md and other AI rule files from the DSH settings page: the project directory chain from project root to cwd, both DSH global roots (~/.dsh and ~/.agents), and user-level rule files of 25 third-party AI tools. Markdown preview is rendered with .mdc frontmatter stripped, edits save in place with conflict detection, files whose content is identical across tools are flagged, and tools outside the built-in list are discovered heuristically. Zero runtime dependencies.