An independent, community-friendly plugin index for DeepSeek Harness (dsh). Curated by automation + human review. Topic:
dsh-plugin.
| Plugin | Description | Install | Status | Security | Trial | Checked at | Commit |
|---|---|---|---|---|---|---|---|
| dsh-netdoctor | Network diagnostics toolbox: DNS lookup (10 record types incl. SOA/CAA), ICMP ping, TCP port check, TLS cert check, traceroute, public IP, WHOIS registry lookup (TCP 43, IANA referral chain + TLD fallback map, ARIN for IPs, structured summary) — seven read-only probes, zero runtime dependencies | dsh plugin --profile web add github:TYEclipse/dsh-netdoctor#v0.2.0 |
✅ active | ✅ | ✅ e2e (whois example.com → registrar RESERVED-IANA + expiry 2027-08-13 + SOA/CAA lookups, headless) | 2026-08-26 | 289f3df |
| dsh-webfetch | Web page reader: fetch any URL as clean Markdown / plain text, inventory links, read RSS/Atom feeds, inspect HTTP status/headers/redirect chain without the body (web_headers: HEAD with automatic GET fallback), extract HTML tables as structured rows (web_table: header detection, colspan/rowspan grid expansion, row/table caps), zero-dependency http proxy support — zero runtime dependencies, read-only | dsh plugin --profile web add github:TYEclipse/dsh-webfetch#v0.4.0 |
✅ active | ✅ | ✅ e2e (isolated install v0.4.0; installed-copy execution 4/4 anchors — web_table colspan/rowspan grid H/Top/Top, caption + entity decode, tool registration shape, default UA) | 2026-09-17 | 86a1836 |
| dsh-units | Unit conversion toolbox: 20 categories (length, mass, temperature, data sizes decimal-vs-binary, data transfer rates Mbps-vs-MB/s, acceleration incl. g-force, illumination lux/foot-candle, speed, time, volume, pressure, energy, angle, frequency, power with 3 horsepower definitions, force, torque, typography px/pt/em/rem, fuel economy mpg ↔ L/100km) — zero runtime dependencies, pure math | dsh plugin --profile web add github:TYEclipse/dsh-units |
✅ active | ✅ | ✅ e2e (isolated install v0.4.0; installed-copy execution 6/6 anchors — 100 Mbps→12.5 MB/s, 1 g0→32.174049 ft/s², 1 fc→10.76391 lx) | 2026-09-11 | 84a5094 |
| dsh-color | Color toolbox: parse/convert any CSS color (hex, rgb()/hsl()/hwb(), all 148 CSS Color 4 named colors), WCAG 2.x contrast ratio with AA/AAA verdicts, named-color lookup by name or value, harmonious palette generation (color_scheme: complementary / analogous / triadic / split-complementary / tetradic / square / monochromatic), color adjustments (adjust_color: lighten / darken / saturate / desaturate / hue-rotate), color blending (blend_colors: alpha compositing "over" and premultiplied sRGB interpolation "mix", i.e. the color-mix() math), and contrast repair (ensure_contrast: nearest color to a foreground that reaches an AA/AAA target, reporting the best achievable ratio when the target is unreachable) — zero runtime dependencies, pure math | dsh plugin --profile web add github:TYEclipse/dsh-color#v0.3.0 |
✅ active | ✅ | ✅ e2e (isolated install v0.3.0; installed-copy execution 11/11 anchors — rgba(255,0,0,0.5) over #ffffff → #ff8080, mix #ff0000 + #0000ff @0.5 → #800080, ensure_contrast #777777 on #ffffff → #767676 at 4.54:1, #555555 on #000000 AAA → #959595 at 7.01:1, unreachable #8080ff on #808080 → best #000000 at 5.32:1, rgb(51,102,153) → 51/102/153) | 2026-09-18 | 72c22e7 |
| Code2Skill | Three agent skills that generate portable Function / MCP Tool / workflow Skill packages (with offline tests) from user-authorized code, plus independent flow and source-semantics review — pure skill bundle, MIT | dsh plugin --profile web add github:leechen298/Code2Skill#v1.1.3 |
✅ active | ✅ | ✅ e2e (code2skill-review-source skill invoked headless) | 2026-08-16 | 7815d8f1 |
| dsh-semver | Semantic versioning toolbox: parse any semver string (semver_parse), compare versions with spec-compliant prerelease ordering (semver_compare, build metadata ignored), check npm-style ranges (semver_satisfies: ^ ~ >= <= > < =, x-ranges, hyphen, ||, AND, tuple-lock prerelease semantics, includePrerelease override), increment versions per npm semver.inc incl. prerelease counters and identifier restarts (semver_inc), report npm semver.diff release-type differences with special cases (semver_diff), and sort version lists with build-metadata tie-break (semver_sort), find the lowest version a range accepts (semver_min_version: npm minVersion parity — unsatisfiable combinations report satisfiable: false instead of a guessed bound), and check whether two ranges can be satisfied at once (semver_intersects: npm intersects parity, plus a witness version verified against both ranges) — zero runtime dependencies, pure logic; v0.3.0 also fixed ~1.2.3 silently accepting 1.2.0/1.2.1 and added npm's x-range rewrite for partial comparators (>1.2 → >=1.3.0) |
dsh plugin --profile web add github:TYEclipse/dsh-semver#v0.3.1 |
✅ active | ✅ | ✅ e2e (isolated install v0.3.1; installed-copy execution — semver_min_version ^1.2.3 → 1.2.3, >1.2 → 1.3.0, >2.0.0 <2.0.1 → unsatisfiable; ~1.2.3 no longer matches 1.2.0; semver_intersects ^1.2.3 ∩ ^1.3.0 → true with witness 1.3.0 present in the rendered text; 9/9 anchors on the installed copy + LLM-driven headless session calling both new tools) |
2026-09-21 | 6ebbe94 |
| Archify for DSH | Opt-in skill-only bundle (@tt-a1i/archify-dsh) bringing the Archify architecture-diagram skill to dsh: typed JSON specs (architecture / workflow / sequence / dataflow / lifecycle) rendered to self-contained interactive HTML with inline SVG, showcase-quality validation (9 artifact checks) — pure skill bundle, MIT | dsh plugin --profile web add @tt-a1i/archify-dsh@0.1.0 |
✅ active | ✅ | ✅ e2e (archify skill headless: 9/9 showcase validation) | 2026-08-16 | 0.1.0 |
| dsh-finance | Money math toolbox: fixed-rate loan payment with amortization schedule and extra-payment impact (loan_payment), compound growth projection with monthly contributions and any compounding frequency (compound_growth), nominal ↔ effective annual rate conversion incl. continuous (rate_convert), NPV/IRR/payback cash-flow analysis with explicit no-root/multiple-root reporting (cashflow_analysis), and retirement withdrawal planning — time-to-exhaustion + sustainable withdrawal with lasts_horizon verdict (retirement_plan), goal-based saving — months to a target or the contribution a deadline requires, with the deadline payment rounded up to the cent and the projection simulated from it, plus an on_track verdict and an honest unreachable instead of an invented month count (savings_goal), and inflation-adjusted purchasing power — future cost, present value, and with a nominal return the exact Fisher real return plus nominal/real future values side by side, deflation and fractional horizons included (inflation_adjust) — zero runtime dependencies, pure arithmetic, headline values verified against published anchors (Excel IRR example, mortgage tables) and an independent Python oracle that ships with the repo (test/oracle/anchors.py; test files carry an ORACLE: provenance marker) |
dsh plugin --profile web add github:TYEclipse/dsh-finance#v0.3.0 |
✅ active | ✅ | ✅ e2e (isolated install v0.3.0; installed-copy execution 32/32 anchors — savings_goal 50k from 10k @5% + 500/mo → 65 months / 50341.48, deadline 100k from 20k @6% in 240 months → 73.15/mo with projected 100002.38, unreachable dead end flagged; inflation_adjust 1000 @2.5% 10y → cost 1280.08 / value 781.20, +6% nominal → real 3.414634%, deflation 5000 @−1% → 4900.50; plus the 0.2.x suite) | 2026-09-22 | f14cd8d |
| dsh-ipcalc | IP & subnet math toolbox: full IPv4 subnet layouts (ipv4_subnet: network/broadcast/mask/hosts + IANA classes, RFC 3021 /31), minimal covering CIDR aggregation (ipv4_summarize), equal subnet splitting for VLSM planning by part count or target prefix (ipv4_split: host-bit masking, 256-subnet cap, /31 & /32 conventions), arbitrary address ranges turned into minimal exact CIDR lists (ipv4_range: the inverse of summarizing, exact address count), IPv4/IPv6 parsing with RFC 5952 normalization and embedded-IPv4 recognition (ip_parse), IPv6 subnet layouts with 128-bit BigInt math and exact decimal-string address counts (ipv6_subnet, RFC 6164 /127), and CIDR membership tests for bare IPv4/IPv6 addresses with mixed-version rejection (ip_match) — zero runtime dependencies, pure local math, no network I/O | dsh plugin --profile web add github:TYEclipse/dsh-ipcalc#v0.3.0 |
✅ active | ✅ | ✅ e2e (installed copy v0.3.0: 27/27 anchors incl. ipv4_split 10.0.0.0/24 parts=4 → 4 × /26 @62 usable and 10.0.0.0/16 → 256 × /24 with over-cap rejection, ipv4_range 10.0.5.3–10.0.9.200 → 13 exact CIDRs covering 1222 addresses) | 2026-09-26 | 9586b05 |
| dsh-geodesy | Geodesic math toolbox: great-circle distance with bearings and compass direction (geo_distance), initial/final bearings plus great-circle midpoint (geo_bearing), direct-problem destination point with round-trip check (geo_destination), decimal/DMS coordinate parsing (coord_parse), rhumb-line constant-heading distance & bearing (geo_rhumb), great-circle path intersection with antipodal crossing (geo_intersection), spherical polygon area via spherical excess (geo_area), off-track distance to a great-circle path — signed cross-track + along-track, perpendicular foot, distance to the segment (geo_cross_track), and inside/outside test for a spherical polygon reporting both sides of the boundary with the containing region's area (geo_point_in_polygon) — zero runtime dependencies, pure trigonometry on the IUGG mean Earth radius, configurable radiusKm | dsh plugin --profile web add github:TYEclipse/dsh-geodesy#v0.3.0 |
✅ active | ✅ zero deps, no network | ✅ e2e (geo_cross_track 111.19508 km left of the equator path, foot (0,5), 555.975401 km along — on the installed copy; geo_point_in_polygon octant (45,45) inside with area 63,758,235.121609 km², boundary point (0,45) reported onBoundary, and the antipode of a 0.2° box correctly reported outside — the trap that trips the angle-sum shortcut; geo_area octant 63,758,235.1 km² + geo_rhumb 2416.086 km @ 62.598° + geo_intersection (40.569, -17.986) @ 1747.377 km re-checked on v0.3.0) | 2026-09-28 | 2f9bcfe |
| dsh-checkdigit | Check-digit mathematics toolbox: generate, validate, repair and auto-detect check digits for 15 schemes — Luhn (cards/IMEI), Verhoeff, Damm, ISBN-10 (mod-11, X) / ISBN-13, EAN-8/13, UPC-A, GTIN-14/SSCC-18, ISSN (ISO 3297, X), ISIN (ISO 6166), CUSIP (ANSI X9.6), IBAN (ISO 13616, 75+ country BBAN table), CAS Registry Number (position-weighted mod 10) and ABA routing number (3-7-1 weighted mod 10) — plus ISBN-10 ⇄ ISBN-13 conversion (978-prefix semantics, hyphen-group preservation) and a single-edit repair search (checkdigit_repair: corrected check character, swapped adjacent pair or one mistyped payload character, every candidate re-validated by the scheme itself) — zero runtime dependencies, integer arithmetic only, separators ignored on input, anchors reproducible from the in-repo oracle | dsh plugin --profile web add github:TYEclipse/dsh-checkdigit#v0.3.0 |
✅ active | ✅ | ✅ e2e (installed copy v0.3.0, 13/13 anchors: checkdigit_repair 79927398714 → 79927398713 (12 repairs) + IBAN corrupted-BBAN case offering both answers (GB82…5431 → GB12…5431 and GB82…5432) + issn 0378-5955 and gtin14 09780306406157 + spaced/hyphenated inputs validated) | 2026-09-27 | eebfa22 |
| dsh-musictheory | Music theory math toolbox: parse any note name into MIDI/octave/pitch class/exact 12-TET frequency with enharmonic spellings (note_info), frequency → nearest note with cents deviation (freq_to_note), correctly spelled chords for 26 qualities (chord_build — G# major is G# B# D#, Cdim7 is C Eb Gb Bbb), correctly spelled scales for 17 types (scale_generate — F# major has E#), interval engine (interval_build — G# + M3 = B#; interval_info — C→F# is an A4, C→Gb a d5, compound intervals), and scale harmonization (scale_harmonize — C major → I ii iii IV V vi vii°, sevenths: true → Imaj7 ii7 iii7 IVmaj7 V7 vi7 viiø7), spelling-aware transposition of 1-16 notes through the letter ladder (transpose — Bb3 G3 D4 up a M2 = C4 A3 E4, G#4 up a M3 = B#4, F#4 down a P4 = C#4; aliases tritone/octave/whole_tone), and chord identification by pitch-class set with inversions, slash notation and omitted-tone voicings (chord_identify — E G C = Cmaj/E first inversion, C E G A = both C6 and Am7/C, C Eb Gb Bbb = all four dim7 rotations, C E Bb D = C9 missing the fifth, a chord written on B# stays on B#) — zero runtime dependencies, pure arithmetic, configurable A4 reference pitch | dsh plugin --profile web add github:TYEclipse/dsh-musictheory#v0.3.0 |
✅ active | ✅ | ✅ e2e (isolated install v0.3.0 — friction=none, mirror; installed-copy execution 14/14 anchors: transpose M2/m3/P8 spellings + C4+P8@415 = 493.5209527261292 Hz, chord_identify Cmaj/E inversion 1, C6 vs Am7/C, dim7 rotations, C9 minus fifth, B#maj; 123 tests, coverage 91.82%) | 2026-09-29 | c992452 |
| dsh-chem | Chemistry math toolbox: chemical formula parsing with nested parentheses, hydrates (CuSO4·5H2O), ionic charges (Fe3+/SO4^2-, documented disambiguation rule) and IUPAC molar mass with per-element breakdown (formula_mass), mass/mole/particle conversions with Avogadro constant (mass_moles, 6 modes), solution concentration math — molarity, preparation mass, C1V1=C2V2 dilution, percent w/v·v/v·mass (solution), and pH/pOH/[H+]/[OH-] + Henderson–Hasselbalch buffer math at 25 °C (ph) — zero runtime dependencies, pure arithmetic over the 118-element IUPAC table, anchors from an independent Python oracle cross-validated against published textbook molar masses | dsh plugin --profile web add github:TYEclipse/dsh-chem#v0.1.0 |
✅ active | ✅ | ✅ e2e (formula_mass Fe2(SO4)3 → 399.858 + ph 0.005 M → 2.3010, headless LLM-driven) | 2026-09-06 | f6ffe3b |
| dsh-probstat | Probability & statistical inference math toolbox: distribution calculator for six distributions — normal, binomial, poisson, exponential, uniform, geometric (pdf/cdf/survival/quantile/stats) (dist_calc), standard-normal z-table math — z ↔ probability/percentile, two-sided p-values, interval probabilities (z_score), confidence intervals — mean with z or Student-t critical values, proportion via Wilson score (confidence_interval), and event-probability identities — union/intersection/conditional/Bayes/complement/at-least-one (event_probability) — zero runtime dependencies, pure arithmetic, normal quantile via Acklam (rel. err < 1.15e-9), Student-t cross-checked against published t-table values, anchors from an independent Python oracle | dsh plugin --profile web add github:TYEclipse/dsh-probstat#v0.1.0 |
✅ active | ✅ | ✅ e2e (confidence_interval proportion 40/100 → [0.3094, 0.4980] + event_probability bayes 0.01/0.99/0.05 → 0.1667, headless LLM-driven) | 2026-09-07 | 9c35289 |
| dsh-linalg | Linear algebra math toolbox: matrix multiplication with dimension checking (matrix_multiply), single-operation matrix math — transpose / determinant / inverse / trace / reduced row echelon form (matrix_compute), linear system solver Ax=b with unique / infinite (particular solution + nullspace basis + free-variable count) / no-solution classification (solve_linear), and vector operations — dot / cross (3D) / norm / projection / angle in degrees (vector_ops) — zero runtime dependencies, pure local arithmetic, Gaussian elimination with partial pivoting, outputs rounded to 10 decimals, singular and inconsistent systems fail cleanly with explicit messages, anchors from an independent exact-arithmetic (fractions) oracle | dsh plugin --profile web add github:TYEclipse/dsh-linalg#v0.1.0 |
✅ active | ✅ | ✅ e2e (matrix_compute inverse [[4,7],[2,6]] → [[0.6,-0.7],[-0.2,0.4]] + vector_ops cross [1,2,3]×[4,5,6] → [-3,6,-3] + solve_linear under-determined → particular (-2,8,0) + nullspace basis (1,-2,1), headless LLM-driven) | 2026-09-08 | c6cdfad |
| dsh-complex | Complex-number math toolbox: parse rectangular/polar strings into the full identity (complex_parse — "3+4i"/"5∠53.13°", modulus, argument rad & deg, conjugate), one-operation arithmetic — add/subtract/multiply/divide/conjugate/reciprocal/integer power via De Moivre (complex_calc), polar ↔ rectangular conversion (complex_convert), principal values of exp/log/sin/cos/tan/sinh/cosh/sqrt with branch conventions reported (complex_functions), and complete n-th root sets listed from the principal root (complex_roots, n ≤ 64) — zero runtime dependencies, closed-form formulas on the principal branch, output rounded at the boundary only, anchors from an independent Python cmath oracle | dsh plugin --profile web add github:TYEclipse/dsh-complex#v0.1.0 |
✅ active | ✅ | ✅ e2e (complex_calc divide (3+4i)/(1-2i) → -1+2i + complex_convert to_polar 3+4i → 5∠53.13°, headless LLM-driven) | 2026-09-09 | fa89489 |
| dsh-boolean | Boolean algebra toolbox: parse logic expressions over single-letter variables with symbol, word or unicode operators (truth_table — full table up to 8 variables with per-row results, minterm/maxterm indices, tautology/contradiction/satisfiability flags and canonical DNF+CNF strings; logic_eval — evaluate under one complete trueVars/falseVars assignment, missing variables reported never silently defaulted; logic_equiv — equivalence check over the combined table plus a concrete counterexample when expressions differ; logic_convert — canonical nnf/dnf/cnf plus NAND-only and NOR-only gate networks in NAND()/NOR() call syntax) — zero runtime dependencies, XOR/IMPLIES/IFF desugared at parse time, truth-table and DNF/CNF anchors from an independent Python brute-force oracle, 99 unit tests | dsh plugin --profile web add github:TYEclipse/dsh-boolean#v0.1.0 |
✅ active | ✅ | ✅ e2e (truth_table a^b → minterms [1,2] + DNF (!a & b) | (a & !b) + logic_equiv !(a|b) vs !a&!b equivalent + logic_convert a->b cnf → (!a | b), installed-copy LLM-driven) | 2026-09-10 | 9cfe809 |
| MemOS Cloud for DSH | Cloud lifecycle-memory plugin: pre-step recall injection and post-turn memory sync backed by the MemOS Cloud API (memos.memtensor.cn); no tools registered — agent/pre-step + session/event hooks with graceful degradation when no API key is configured; MIT | dsh plugin --profile web add @memtensor/memos-cloud-dsh-plugin@0.1.0 |
✅ active | ✅ | ✅ e2e (headless turn completes 17×23=391 with plugin mounted, no-credential degradation verified) | 2026-08-20 | 0.1.0 |
| PicGo Upload for DSH | Image & file uploading to the user's configured image host (PicGo Cloud, GitHub, S3, …) via the PicGo engine: picgo_upload tool + /picgo command + bundled picgo-upload skill; prefers the running PicGo desktop app (local server, 127.0.0.1:36677) and falls back to the in-process PicGo library reading ~/.picgo/config.json; MIT |
dsh plugin --profile web add @picgo/dsh-plugin@0.2.0 |
✅ active | ✅ | ✅ e2e (isolated install; picgo-upload skill + trigger surfaced in a headless session — 17×23=391 mount check; picgo_upload executed through the installed copy: signed-out degradation relays /picgo login with no hang, empty input rejected) |
2026-09-11 | 0.2.0 |
| WeKnora for DSH | Tencent WeKnora knowledge-base plugin: four tools — list the credential's knowledge bases (weknora_list_knowledge_bases), hybrid vector+keyword retrieval returning passages verbatim with rank/score/chunk metadata plus by-name document matches (weknora_search), reassembled document reading with paging and generated summaries (weknora_read_document), and WeKnora-composed answers with citations (weknora_ask) — env-var configuration (WEKNORA_BASE_URL / WEKNORA_API_KEY / WEKNORA_KNOWLEDGE_BASE_IDS), load-time config validation, tool prefixing for two deployments side by side; zero runtime dependencies, MIT |
dsh plugin --profile web add @wxg-prc-cpg/dsh-weknora@0.1.0 |
✅ active | ✅ | ✅ e2e (isolated install; 4-tool registration verified; list / search / read_document executed against a mock deployment — ranked passages with scores, named-document enrichment, ordered chunk assembly; unreachable deployment errors cleanly and fast; headless mount session 17×23=391) | 2026-09-15 | 0.1.0 |
| dsh-web | DSH Web GUI plugin family (npm aggregate @linxin666/dsh-web-all of 19 family packages + external dsh-better-sidebar): task board with host-side cron execution, mobile/PC remote access via device pairing, SSH panel (terminal / transfer / tunnels), usage stats, model capability profiles, session archive with auto policies, git graph, preset / skin / market / community browsers, pet, i18n — mounted as 21 namespaced web-ui-* rows; five opt-in rows (ssh / describe-image / liangshen / skill-explorer / doctor) ship disabled by default; Apache-2.0 |
dsh plugin --profile web add @linxin666/dsh-web-all@0.3.22 |
✅ active | ✅ (anon. daily install heartbeat — documented; no conversation data) | ✅ e2e (isolated install v0.3.22 — native-build approval step per README 安装排障; 21 web-ui-* rows mounted; web host boot smoke: token fence 401 → 303 → 200, GUI served carrying the family's blue-fantasy skin) |
2026-09-16 | 0.3.22 |
| dsh-market | Visual plugin market inside DSH: browse/search the community catalog (2300+ plugins) with category filters and host-aware compatibility hints; one-click install (prefers repo-verified npm packages, then prebuilt GitHub Release tarballs, then source), per-plugin update checks, community themes/skins with live switching, favorites, backup & restore (readable JSON export / WebDAV / private GitHub Gist), hot enable/disable and load-order editing via the profile patch layer, a plugin diagnostics page, and a capability-gated public update API v1 — MIT | dsh plugin --profile web add dshmarket@1.47.0 |
✅ active | ✅ (no telemetry — "never phones home"; documented outbound: catalog + GitHub content routes, gh-proxy/ghfast acceleration fallbacks; comments contact giscus.app/GitHub only when opened; installs restricted to the curated registry; build scripts stay blocked by default; same-origin install endpoint) | ✅ e2e (isolated install dshmarket@1.47.0 — prebuilt npm, 1.3s, no build step; dsh-market layer in composed config; web boot smoke 401→303→200; live /dsh-market/api/v1/capabilities → 200 JSON, marketVersion 1.47.0) |
2026-09-17 | 1.47.0 |
| dsh-honcho | Honcho memory for DSH — persistent cross-session memory that survives context resets: injects your profile, this project's session summary and Honcho's relevant conclusions at session start, captures every user/assistant turn in the background (debounced, flushed at turn boundaries, before compaction and on shutdown) with best-effort secret redaction, and registers three tools — honcho_search (raw messages plus derived conclusions), honcho_chat (judgement questions over everything Honcho knows) and honcho_remember (durable facts / preferences / decisions); configured through the shared ~/.honcho/config.json contract (workspace, peer name, baseUrl, global kill switch), shared with the sibling claude-honcho / codex-honcho integrations — MIT |
dsh plugin --profile web add @honcho-ai/dsh-honcho |
✅ active | api.honcho.dev by default (self-hostable via baseUrl / HONCHO_BASE_URL); secrets are regex-redacted before upload and the redactor is documented as best-effort, so novel secret formats can pass through; also reads/writes ~/.honcho/config.json and shells out to git for repo metadata; no telemetry or analytics SDKs found |
✅ e2e (isolated install of npm @honcho-ai/dsh-honcho@0.1.0 — prebuilt tarball, 2.1s, no build scripts; honcho layer present in the composed config; plugin loads in a headless dsh-base + dsh-headless profile on host 0.1.5-rc.2 with no apply error despite newer peer pins; no-credential degradation verified — "[honcho] no API key … Memory is off." and the turn still completes; memory round-trip not exercised, it needs a Honcho API key or a self-hosted instance. Use the npm package: a github: install would run its prepare build) |
2026-09-18 | 0.1.0 |
| dsh-ouroboros | Ouroboros (spec-first AI dev workflow engine: Socratic interview → Seed spec → execute → evaluate → evolve) mounted into DSH as native tools by a config-only bundle row that spawns ouroboros mcp serve over stdio — 36 tools registered (ouroboros_interview / ouroboros_pm_interview / ouroboros_generate_seed / ouroboros_execute_seed / ouroboros_auto / ouroboros_evaluate / ouroboros_evolve_step / ouroboros_qa / ouroboros_ralph …) so "ooo interview " or "ooo auto " in chat resolves to the matching tool on its own; ouroboros_auto gets a 30-minute MCP timeout, the execution step defaults to the host model (OUROBOROS_AGENT_RUNTIME=host) with claude-cli / codex / opencode selectable, and failOnStartupError: false keeps DSH booting on machines without uv/Ouroboros — MIT |
dsh plugin --profile web add "github:Q00/ouroboros#main&path:integrations/dsh-plugin" |
✅ active | us.i.posthog.com via the bundled ouroboros-ai Python package): closed command/status dimensions, runtime backend, version, OS and failure-reason codes only — never code, prompts, seed content, file paths or arguments; identity is a random UUID; opt out with DO_NOT_TRACK=1, OUROBOROS_TELEMETRY=0 or telemetry.enabled: false in ~/.ouroboros/config.yaml (contract in the repo's TELEMETRY.md). The row also forwards DEEPSEEK_API_KEY + ANTHROPIC_API_KEY into the spawned child (explicit short allowlist after dsh's credential scrub), executes a third-party PyPI distribution at runtime, and keeps its project state in the working directory it is launched from |
✅ e2e (isolated install of github:Q00/ouroboros#main&path:integrations/dsh-plugin — whole-repo clone ~3m50s, +1 package, no build step; dsh-ouroboros layer with the mcp-ouroboros row present in the composed config; LLM-driven headless turn on host 0.1.5-rc.2 — 36 tools registered from ouroboros-ai 0.54.4 and a real ouroboros_project_status call returned its payload, clean shutdown, rc=0. Needs Python ≥3.12 for uvx, which does not auto-download it: on a 3.11 host the row soft-fails silently and no ouroboros tools appear — remedy uv python install 3.12 (verified here) or UV_PYTHON=3.12. Install follows #main (no tag/npm package available). Full interview → seed → execute → evaluate workflow not exercised) |
2026-09-19 | 0.1.0 (repo main @2026-09-15) |
| ModLens | Vision bridge for text-only models: registers one modlens_read_image tool (name configurable) and auto-discovers every provider route that carries an eligible text-only DeepSeek / GLM / MiMo model, adding a "(modlens vision)" wrapped entry per route so a pasted image is turned into structured JSON evidence at request time — summary, full transcription, reading-order layout regions, entities and relations, and an explicit uncertainty list instead of invented values; the engine is the CLI shipped inside the same package (dist/main.js, spawned from the plugin and version-locked to it), providers / keys / failover / cooldown / reuse grants live in a shared ~/.modlens/config.json, modlens doctor reports local routing and providers offline without spending quota; can reuse existing logins of locally installed agents (Claude Code, Codex, OpenCode, Pi, Kimi CLI) and ships a zero-config start — MIT |
dsh plugin --profile web add @liustack/modlens@3.26.2 |
✅ active | prepublishOnly release hook), but it is a vision bridge by design: the image leaves the machine to whichever third-party provider is selected (Antigravity CLI built-in default, or Gemini API / OpenAI / Anthropic / agent CLIs with user-supplied keys in ~/.modlens/config.json), and it can reuse logins of other locally installed agents — on the verification host modlens doctor printed decisions: claude granted, codex not asked, opencode not asked, pi not asked, grok not asked, i.e. the Claude Code reuse grant is on by default; it spawns the bundled CLI as a child process, recovers pastes as 0600 files in fresh 0700 temp dirs and deletes the throwaway working copy after the read, and redacts keys from errors. Its own docs/security.md is unusually explicit (image content treated as untrusted input, --dangerously-skip-permissions for agy, --allowedTools Read for claude-cli, kimi-cli run only when named) and states plainly that this is exposure reduction, not a sandbox |
✅ e2e (isolated install of npm @liustack/modlens@3.26.2 — prebuilt tarball, 1.9s, no build step and no allowBuilds approval; modlens layer present in the composed config; modlens doctor ran clean and offline on the host — Node v26.8.1 ≥ 22.19, node:sqlite available, guard verdict allow; LLM-driven headless turn on host 0.1.5-rc.2 with a synthetic image fixture — modlens_read_image was registered, invoked with a real image path and the bundled CLI was spawned, exiting 1 with its documented, actionable "no vision provider is set up on this machine" message (install Antigravity CLI or modlens config set gemini-api.apiKey); clean exit, rc=0. The actual vision read was not exercised — this host has no provider configured, so image → evidence was never produced) |
2026-09-20 | 3.26.2 |
| dsh-better-sidebar | Sidebar workbench for the DSH web GUI: registers its tab types through DSH's native right-sidebar API (ctx.sidebarRightTabs / ctx.sidebarRight, dsh-resource://file/… opens) and keeps a bottom workbench — lazy file explorer, CodeMirror editor, inline previews (Markdown with Mermaid and DOMPurify-sanitised README-level HTML, HTML, PDF), multi-tab embedded browser (sandboxed iframe; HTTPS goes to the system browser by default), a real terminal (xterm.js + node-pty, reconnect replay, opt-in terminal_* tools for the model), a git view (real diffs, history, stage/commit/restore — no push/pull/fetch) alongside a per-turn changed-file view, background-task and subagent pages, side chat threads (beta), pinned terminals, session-isolated layout, declarative per-feature settings, and an opt-in sidebar_open tool — the same ctx.betterSidebar service is open to third-party plugins (registerTab / registerFileViewer / registerFileIcon), MIT |
dsh plugin --profile web add dsh-better-sidebar@0.19.1 |
✅ active | sandbox; the address bar rejects javascript:/data:/file: and loopback URLs by default; the sandbox can be switched off per feature in settings, with a warning) — upstream README documents the trust-fence and sandbox model; no telemetry or analytics SDK found and no install-time callbacks, so outbound traffic is limited to URLs the user opens in the embedded browser tab and to the user's own git remotes |
✅ e2e (isolated install v0.19.1 — npm prebuilt, needs the documented pnpm 11 approve-builds step for node-pty; better-sidebar row present in the composed config; web host boot smoke: token fence 401 → 303 → 200, the served client bundle list carries dsh-better-sidebar/client.js, live host route POST /sidebar/api/terminal.deps → 200 {"ok":true}; interactive sidebar pages not browser-driven) |
2026-09-21 | 0.19.1 |
| dsh-TUI | Interactive terminal interface for DeepSeek Harness — pixel-whale header, live work-status line (model, reasoning effort, tokens, TPS, cache-hit rate, git/session info), streaming thinking display, double-Esc time rewind, context progress bar, session management shared with /resume//home//bg (workspace registry persisted to ~/.dsh-tui, pinning, cross-terminal takeover rules), model hot-switching, session fork/compact/export, native subagents, vim input mode and full-screen draft editor, /settings toggles (terminal images, mermaid diagrams rendered to Unicode, whale idle animation), inline image preview via Kitty graphics / Sixel with text fallback, VS Code extension launch mode with editor-selection piping, and a self-updating launcher (dsh-tui / dst) — mounted as a pure plugin bundle patch over dsh-base (18 restated rows, no core patching; uninstall leaves nothing behind); MIT |
dsh plugin --profile web add @deepseek-harness-tui/dsh-tui@0.10.2 |
✅ active | DSH_TELEMETRY_MODE, restated explicitly in its own patch layer), and outbound traffic only happens on explicit user action: the launcher update subcommand / /update queries the npm registry and api.github.com for the latest release and verifies SHA256SUMS before installing a standalone package, and the balance feature calls api.deepseek.com/user/balance with the user's own DEEPSEEK_API_KEY; boot itself makes no call. Local capabilities are documented: /restart spawns a replacement process, it reads/writes ~/.dsh-tui (workspace registry, pins) and $DSH_HOME profile state, and update rewrites only its own launcher file + package.json |
✅ e2e (isolated install v0.10.2 — npm prebuilt, 3.5s, +76 packages, no build-script approval and no local compilation; dsh-tui bundle layer present in the composed config as 18 restated rows; TUI host boot smoke on host 0.1.5-rc.2 — a real PTY launch rendered the first screen, captured markers: whale banner + status line deepseek-flash · Max effort, workspace /tmp, Context loaded · System prompt 18 sections, input box and status footer. Upstream validates against 0.1.5-rc.1, so the UI shows its own warning banner that the engine is one version newer — disclosed, not silent. Interactive paths (session management, image preview, mermaid, /update) not exercised) |
2026-09-22 | 0.10.2 |
| ReMe | Long-term memory for DSH from the ReMe memory kit (Apache-2.0, AgentScope): instead of dumping history into the prompt, the plugin injects long-term-memory guidance at session start (when to consult memory, treat retrieved memory as evidence rather than instructions) and registers one read-only tool — reme_search (query, optional limit 1–50, min_score) returns ReMe's answer, or No relevant memory found., or an explicit ReMe search failed: … instead of an invented answer; completed user/assistant turns are captured per session and submitted to ReMe auto_memory (default every 5 turns plus a shutdown flush; plugin context and tool results are excluded from capture so they cannot be laundered back into memory), and autoDreamEnabled runs a daily auto_dream pass (default 0 23 * * *, workspace timezone) that consolidates journal files into a deduplicated personal knowledge base; mounting is one isolated remeMemory runtime row, and the package also ships a web Status page (connectivity/version, Auto Memory pipeline, consolidation, component health, Journal and personal-KB browsers); every knob is exposed in DSH settings — endpoint, language (en/zh), searchLimit, autoMemory*/autoDream* switches, dreamCron, timezone — and the plugin is a client: it needs a ReMe service (default endpoint http://127.0.0.1:2333, local-first) |
dsh plugin --profile web add @agentscope-ai/reme-dsh-plugin --registry=https://registry.npmjs.org |
✅ active | dist/ is a "website" link button on the status page, not a data endpoint), but capture is on by default: autoMemoryEnabled submits finished conversation turns to the configured ReMe endpoint, which defaults to local http://127.0.0.1:2333 (ReMe's HTTP API has no authentication — upstream warns against exposing it, and pointing endpoint / REME_URL at a remote host means conversation text leaves the machine); only user and assistant text is captured (measured: the auto_memory payload carried exactly those two messages, with no plugin context and no tool results), no local disk writes by the plugin itself (the ReMe service owns the daily/ + digest/ workspace files), and no credentials are read |
✅ e2e (isolated install of npm @agentscope-ai/reme-dsh-plugin@0.1.0 — prebuilt tarball, 3.1s, +1 package, no build step; note the package is not on the China mirror yet: registry.npmmirror.com → 404, so the --registry=https://registry.npmjs.org flag is required, which upstream does not mention; reme-memory group row with isolate: remeMemory present in the composed config; installed-copy LLM-driven execution on host 0.1.5-rc.2 against a local mock ReMe endpoint — session-start guidance present in the session log, reme_search really called (mock received {"query":"verification marker","limit":5,"min_score":0}) and answered from the returned evidence, service-down path returns ReMe search failed: fetch failed without fabricating memory; web boot smoke 401 → 303 → 200 with the plugin's client module served (200, 11.2 MB bundle). Real ReMe service not exercised (mock contract only) and the six status-page tabs were not asserted at UI level) |
2026-09-23 | 0.1.0 |
| dsh-whale-widget | DeepSeek balance pet for the DSH web GUI: a floating whale in the bottom-right corner that keeps an eye on the account balance, today's usage and peak/off-peak pricing, mounted as one bundle row; bubbles are fully configurable (click sequence of text / balance / today / peak-valley / images / weighted random statements), with per-line typography, drag-and-snap plus left-edge flip, custom roles / animations / sounds, per-turn cost readout and a hover quick-edit popover — and 32 built-in provider templates (DeepSeek, Moonshot CN + Intl, OpenRouter, SiliconFlow CN + Intl, StepFun, Novita, Ark, DashScope, Qianfan, GLM, Hunyuan, xAI, OpenAI, Gemini, Groq, Mistral, Together, Fireworks, Cerebras, DeepInfra, ModelScope, OpenCode Zen, custom models) so one widget can show whichever vendor you actually pay; today's usage is estimated from local session events rather than fetched from the cloud; code is MIT | dsh plugin --profile web add dsh-whale-widget@0.3.11 |
✅ active | Bearer only to that vendor's own balance/usage endpoint (32 built-in templates, each called only when configured as the current model; no third-party relay, no usage upload — "today's usage" comes from local session events); local state lives in $DSH_HOME/.dshw-*.json plus $DSH_HOME/whale-{roles,bubble-imgs,audio}/ for custom art and sound, and the source comments state that keys are not written into those files (they go to the host credential store); the code is MIT while the assets/ artwork and audio are not MIT-covered (upstream PROVENANCE.md ships them as-is, no relicense, takedown on claim) |
✅ e2e (isolated install of npm dsh-whale-widget@0.3.11 — China mirror on the first try, prebuilt, no build step and no build-script approval; mirror and upstream tarballs are byte-identical, sha256 92d7d93a…; dsh-whale-widget row present in the composed profile tree; web boot smoke 401 → 303 → 200 with the widget's client asset served (200, 738 KB) and the host routes /dsh-whale/{balance,roles,last-turn,size}.json all returning 200 JSON (401 without the token cookie); degradation is honest — no key → NO_KEY, invalid key → HTTP 401, never an invented balance; note that installing without a version resolves to the previous release for the first ~24h (pnpm 11 publish-age gate), which is why the install command is pinned; real balance values and the browser-level UI interaction were not exercised — the host has no valid provider key and there is no browser assertion harness) |
2026-09-24 | 0.3.11 |
| treg | Tool registry and credential-injecting proxy for agents ("OpenRouter, but for agent tools"): this bundle ships the packaged treg skill plus a token-gated MCP connector row. The skill — a 28 KB SKILL.md published through a ctx.skills provider implemented directly inside the package (plain hand-written ESM, no build step, no @deepseek-ai/* dependency, so a github: install needs no allowBuilds approval) — tells the agent when to reach for the catalog and how to call it by the task at hand, not by vendor: 3,600+ endpoints across 97 providers covering SEO/SERP data, keyword volume, backlinks and site authority, AI visibility, social profiles and trends, people/company enrichment, ad libraries, web data, and image/video/voice generation. The second row mounts @deepseek-ai/dsh-mcp-client against https://treg.to/mcp/ (streamable-http) and registers mcp__treg__catalog_search / catalog_get / call / balance / my_tools — but only when TREG_TOKEN is present at boot: the row carries disabled: !!js (process.env.TREG_TOKEN ?? '') === '', so a tokenless install gets a clean profile with zero always-on 401-ing tools and a skill that walks the human through sign-in instead. Own credentials never leave the server: the registry injects auth upstream-side, treg's own accounts cover subscription-walled providers, and calls are metered per use (new teams get $1 of trial balance). Apache-2.0 |
dsh plugin --profile web add github:superdesigndev/treg#d4f2949 |
✅ active | TREG_TOKEN is set: it then talks to the hosted commercial service treg.to and sends the tool-call arguments and results with Authorization: Bearer $TREG_TOKEN. Worth knowing before installing: with no token the skill steers the agent to the CLI path — curl -fsSL https://treg.to/install.sh | sh then treg login — i.e. an agent-executable remote install script; the plugin itself writes nothing to disk and reads no credential files, TREG_TOKEN comes from the environment only. Upstream documents the row's boot-time gate, the token contract and the deliberate exclusion of treg mcp install in docs/DSH-PLUGIN.md |
✅ e2e (isolated install of github:superdesigndev/treg — China mirror on the first try, friction=none, no build step and no build-script approval; the 90 MB monorepo is not cloned — the package's files whitelist fetches 4 entries (package.json, README.md, LICENSE, dsh/), install in seconds; installed copy 0.21.3, same as the repo root; treg-skill + treg-mcp rows present in the composed profile tree (539 → 551 lines); installed-copy execution — ctx.skills.registerProvider called, list() returns one model-invocable skill treg, get() returns the 28,447-byte SKILL.md with its frontmatter description parsed; web boot smoke on a web-template profile 401 → 303 (+Set-Cookie) → 200, and a fake-token boot stays clean. Pinned to commit d4f2949 because upstream publishes no tags or releases. The real MCP session was not exercised — no valid TREG_TOKEN on the verification host; the row is mounted at boot but the connector connects on demand (no MCP traffic in the boot log), and no paid catalog call was made. Note the dsh install command lives in docs/DSH-PLUGIN.md, not the README) |
2026-09-25 | d4f2949 |
Columns: Security = passed preliminary source review (TRACE-lite: trust / reliability / auditability / confidentiality / effectiveness); Trial = verified in an isolated profile with a real end-to-end tool call; Commit = the exact revision that was verified.
- Add the
dsh-plugintopic to your plugin repository - Open an issue in this repository using the Plugin Submission template (plugin name, repo link, release tag, license, install command)
- The pipeline verifies the submission in an isolated profile — security review, install, and one real end-to-end tool call
- Verified plugins are added to the index and the issue is closed; failed submissions stay open with a
needs-fixlabel and a summary reply
- Independent community index (not affiliated with DeepSeek AI)
- Updated automatically on a daily basis
- MIT License
Maintained by the dsh-autopilot pipeline.