English · 简体中文
Awesome DSH Plugins
An independent, evidence-led directory for
DeepSeek Harness plugins.
Every listed entry was inspected at an immutable commit for its bundle
manifest, referenced patch, license signals, package identity, lifecycle
scripts, and material capability signals.
This is a compact reviewed subset, not a mirror of every repository carrying
the dsh-plugin topic. It complements the broad
Awesome DeepSeek Harness Plugin
discovery list with fixed-source evidence and an explicit hold queue.
[!CAUTION]
A structural review is not a security audit or a runtime compatibility test.
DSH plugins execute third-party code with your permissions. Read the source,
inspect lifecycle scripts, and prefer immutable versions before installing.
Website
This repository is also the source for the bilingual static website. The site,
generated README catalogs, plugin detail pages, review log, sitemap, and counts
all read from data/plugins.json, so a reviewed catalog
change and its presentation ship in the same commit.
npm install
npm run dev
Production verification uses npm run check && npm run build. The static
export is written to out/ and is ready for Cloudflare Pages. See the
deployment guide. No AI, authentication, database,
payment, or third-party plugin execution is part of the website.
Automatic candidate discovery
GitHub Actions runs bounded GitHub API discovery every six hours and a full
query pass weekly. It resolves each matching repository to a 40-character
commit, inspects package.json and the referenced patch path without cloning,
installing, or executing third-party code, and opens a review PR only when the
candidate queue materially changes. A separate bot branch stores the incremental
checkpoint, so empty runs do not create or churn review PRs. Candidates are
never promoted into data/plugins.json automatically.
The query set and request budgets live in
config/discovery.json. A maintainer can also run
GITHUB_TOKEN=... npm run discover -- --dry-run locally.
What is different here
- Immutable evidence: every decision links to a full 40-character commit.
- Native bundle check:
package.jsonmust declaredsh.bundle.patchand
the referenced patch must exist. - Separate facts: structure, license, identity, compatibility, lifecycle,
and capability signals are not collapsed into a single “safe” score. - Visible uncertainty: incomplete or conflicting candidates stay in the
hold queue instead of receiving an install recommendation. - No popularity theater: stars and topic membership are discovery hints,
not proof of trust or compatibility.
Status model
| Status | Meaning |
|---|---|
| Reviewed | Native bundle structure was confirmed at the linked commit. Runtime behavior and security remain unverified. |
| Held | DSH-oriented candidate with a specific identity, structure, or compatibility blocker. |
| Excluded | Fixed-source evidence says it is not currently eligible as a native DSH bundle. |
Catalog
Snapshot: 2026-08-21 · 606 candidates · 451 reviewed · 154 held · 1 excluded
Reviewed native bundles
UI & Workspace
-
DSH Progress Viz · 2008924/dsh-progress-viz@0be31d8 — A headless-session progress plugin that writes live stage and timeline JSON for a local dashboard.
- Evidence: manifest → patch · Identity:
dsh-progress-viz-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-eventsfilesystem-writeprogress-dataheadlesslocal-install· Review: The nested plugin documents a local profile install and rc.6 session peer; no event stream or progress file was read or written.
- Evidence: manifest → patch · Identity:
-
DSH WSL Workspace · 6Mikao9/dsh-wsl-workspace@89905a8 — Workspace support for using DeepSeek Harness across Windows and WSL paths.
-
DSH Toolbox Web · AbcdefgXW/dsh-toolbox-web@322c260 — A Web toolbox for session, trash, workspace-directory, search, preset, configuration, archive, and scheduled-heartbeat management.
- Evidence: manifest → patch · Identity:
dsh-toolbox-web - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datafilesystem-writescheduled-tasksexternal-messagingclient-injection· Review: The public package maps to this repository; session and configuration writes plus optional IM heartbeat delivery are visible and were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Client UI Aqua Unofficial · afrel1024/dsh-client-ui-aqua-unofficial@a175ff4 — Adds a configurable glassmorphism theme, animated surfaces, and wallpaper controls to DSH Web.
- Evidence: manifest → patch · Identity:
dsh-client-ui-aqua-unofficial - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
client-injectionthemebrowser-storagedynamic-wallpapersettings-write· Review: The fixed source and npm identity both expose 1.4.1 from the same repository; no browser effects, settings writes, wallpaper loading, or build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Effort · AI-Galaxy-GPU/dsh-effort@edbb063 — Adds a Web control for selecting the current session model's supported reasoning-effort level.
- Evidence: manifest → patch · Identity:
dsh-effort - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datamodel-selectionclient-injectionlocal-storage· Review: The fixed source uses session model RPCs and browser storage; the repository has no detected license file and declares no DSH peer range.
- Evidence: manifest → patch · Identity:
-
DSH Sound · AI-Galaxy-GPU/dsh-sound@f5f25dc — Plays configurable browser sounds for task completion, approvals, questions, plan review, blocking, and failures.
- Evidence: manifest → patch · Identity:
dsh-sound - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-eventslocal-filebrowser-storageclient-injection· Review: The fixed source stores configuration in localStorage and audio in IndexedDB; the documented npm target currently exposes no published version and no runtime behavior was tested.
- Evidence: manifest → patch · Identity:
-
DSH Update Checker · Airmetro/dsh-update-checker@bea57c0 — Auto-check DeepSeek Harness and third-party plugin updates, notify in the Web GUI, one-click update with backup/rollback and restart watchdog.
- Evidence: manifest → patch · Identity:
dsh-update-checker - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Sidor UI · AKI2253/Sidor_UI@89fbabe — SIDOR — DeepSeek Harness 控制台皮肤:开屏动画 / 星野 / 余额徽章 / 设置页特效 / 低余额警告体系(Sidor 附属插件平台)
- Evidence: manifest → patch · Identity:
sidor-ui - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Kanban · alpacachen/dsh-kanban@9f6de7d — A kanban board plugin for DeepSeek Harness: a 'Board' tab in conversations plus 13 kanban_* AI tools, per-workspace isolation and disk persistence. Built with React, TypeScript, dnd-kit, shadcn/ui and Tailwind CSS.
- Evidence: manifest → patch · Identity:
@alpacachen/dsh-kanban - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Desktop · anywhere-labs/deepseek-harness-desktop@6074088 — An Electron desktop shell composed as a DSH Cordis plugin with terminal, profile, diagnostics, package, and update surfaces.
- Evidence: manifest → patch · Identity:
dsh-plugin-desktop - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
subprocessexternal-networkcredentialsclient-injectionprocess-controlsystem-promptprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Context · bowenliang123/dsh-context@aca38b2 — A context insight panel for request history, compactions, injections, model switches, and composition changes.
- Evidence: manifest → patch · Identity:
dsh-context - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepare· compatibility unknown - Signals:
session-dataclient-injectionbrowser· Review: The host/client bundle structure is confirmed; the prepare hook invokes Husky and the package declares no DSH peer range.
- Evidence: manifest → patch · Identity:
-
DSH Client UI Skins · caoyiwei850/dsh-client-ui-skins@21ad7f5 — Adds built-in and custom-image skins to the DSH Web client with a settings surface.
- Evidence: manifest → patch · Identity:
dsh-client-ui-skins - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
client-injectionthemebrowser-storagesettings-write· Review: The fixed source and npm package both expose 0.1.10, although npm metadata has no repository mapping; no skin rendering, storage, or settings write was executed.
- Evidence: manifest → patch · Identity:
-
DSH Stop Server · caozhikun/dsh-stop-server@baa9b9c — Adds a Web action that calls a host shutdown route to stop the DSH process and close the current interface.
- Evidence: manifest → patch · Identity:
dsh-stop-server - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
process-exitweb-routeclient-injection· Review: The fixed host source registers a shutdown route with appExit, process.exit, and SIGTERM fallbacks; the repository has no detected license file and shutdown was not executed.
- Evidence: manifest → patch · Identity:
-
Captain DSH Web UI All · CAPTAIN1275/dsh-ui-web@04422dd — An aggregate Web UI bundle for task boards, Git views, pets, remote access, live statistics, settings, and bundled skins.
- Evidence: manifest → patch · Identity:
@captain1275/dsh-web-ui-all - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
aggregate-scoperemote-accessfilesystem-writegitclient-injection· Review: The public aggregate identity maps to this repository and represents its component candidates; broad remote, file, Git, session, and UI surfaces were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Pomodoro · causebefore/dsh-pomodoro@5ce97fa — Adds configurable focus and break timers with sidebar access and a draggable DSH Web panel.
- Evidence: manifest → patch · Identity:
dsh-pomodoro - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
client-injectionsettings-writetimerbrowser-uiprepublish-check· Review: The fixed source and npm identity both expose 0.4.0 from the same repository; no timer, panel, settings, or prepublish behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH TUI · ccch1mneyyy/dsh-TUI@ee83376 — A full-screen terminal client with live status, streaming thoughts, tools, approvals, and filesystem access.
- Evidence: manifest → patch · Identity:
@deepseek-harness-tui/dsh-tui - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
terminalsubprocessfilesystemcredentialsbroad-agent-surface· Review: The bundle exposes a broad agent surface; structure confirmation is not a runtime endorsement.
- Evidence: manifest → patch · Identity:
-
DSH Cerrda Theme · Cerrda/dsh-cerrda-theme@7390edf — A dark rose and purple visual theme for DSH Web with a custom composer and animated background.
- Evidence: manifest → patch · Identity:
dsh-cerrda-theme - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
web-themeclient-injectionwebglnpm-package· Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no CSS, fonts, animation, or WebGL behavior was loaded.
- Evidence: manifest → patch · Identity:
-
DSH Sticky Notes · charrywhite/dsh-sticky-notes@e2653fc — A persistent sticky-note panel with host-side JSON storage, browser UI, and model-facing note tools.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-writeweb-routeclient-injectionmodel-toolsprivate-package· Review: Local-link and source installation are documented for the private package; note storage, HTTP routes, and model tools were not exercised.
-
Castorice Theme · chemicalcat250/dsh-theme-castorice@c55e467 — Applies a violet dark Castorice-inspired visual theme to the DSH Web interface.
- Evidence: manifest → patch · Identity:
dsh-theme-castorice - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionthemebrowser-storage· Review: GitHub-source installation is documented and the client code injects theme styles and browser preferences; it was not loaded in a browser.
- Evidence: manifest → patch · Identity:
-
DSH Security Doctor · ChenChen913/dsh-security-doctor@abaa3f5 — One-click local security checkup for the DeepSeek Harness Web UI: a sidebar button that runs read-only checks (!!js config, third-party plugins, credential file permissions, instruction files, endpoint config, protection services) and shows a severity-graded report. / DSH 安全医生:一键本机安全体检插件,只读检查、分级报告、不外发数据。
- Evidence: manifest → patch · Identity:
dsh-security-doctor - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH DeepSeek Balance · Choi-Peng/dsh-deepseek-balance@45d7444 — Displays DeepSeek account balance and editable warning thresholds in the DSH Web sidebar.
- Evidence: manifest → patch · Identity:
@choi-p/dsh-deepseek-balance - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
account-balancecredentialsexternal-networksettings-writeweb-ui· Review: The fixed source is 0.3.2 while npm exposes 0.3.1 from the same repository; balance requests and profile setting writes were not executed.
- Evidence: manifest → patch · Identity:
-
DSH DeepCompute · cipher2026/dsh-idle-deepcompute@619dbef — A terminal-styled idle laboratory game embedded as a full-width DSH Web page.
- Evidence: manifest → patch · Identity:
dsh-deepcompute - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
web-uiidle-gameclient-injectiongithub-only· Review: The repository documents a commit-pinnable GitHub install; no client module, game state, or browser storage behavior was loaded.
- Evidence: manifest → patch · Identity:
-
DSH Browser Notify · classfieldseason-cmd/dsh-notify-plugin@8f386ca — Shows browser desktop notifications when a DSH conversation turn completes.
- Evidence: manifest → patch · Identity:
dsh-browser-notify-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
browser-notificationsession-eventsclient-injection· Review: The public package identity matches this repository and the client listens for session completion before calling the browser Notification API; no notification was triggered.
- Evidence: manifest → patch · Identity:
-
DSH Wallpaper · codeMonkey-Pine/dsh-wallpaper@6ab97b2 — Scans a local Wallpaper Engine library and exposes wallpaper selection, configuration, and rendering in DSH Web.
- Evidence: manifest → patch · Identity:
dsh-wallpaper - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
filesystem-readsubprocesslocal-httpclient-injectionmodel-tools· Review: The fixed source and npm identity both expose 0.1.2 from the same repository; no library scan, preview process, route, browser rendering, or agent tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Web UI Skin · crack-time/dsh-web-ui-skin@1124dea — Adds a pastoral cottage wallpaper and frosted-glass presentation to the DSH Web client.
- Evidence: manifest → patch · Identity:
@crack/dsh-web-ui-skin - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionthemebrowser-uigithub-only· Review: A pinned root Git source identity exists while npm has no matching scoped package; no build, asset load, DOM injection, or browser rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Glassmorphism · czw63/dsh-glassmorphism@e1f0466 — Adds a mobile-aware liquid-glass theme with optional wallpaper, blur, and refraction effects.
- Evidence: manifest → patch · Identity:
@local/dsh-glass-theme - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionthemebrowser-storage· Review: A local-file installation path is documented and the client stores visual preferences in the browser; no style bundle was loaded.
- Evidence: manifest → patch · Identity:
-
DSH Delete Session · dream12347/dsh-delete-session@e0f052a — A Web session manager for trash, restore, permanent deletion, archived sessions, activity statistics, pause, and log-folder access.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-datafilesystem-deletearchive-registryclient-injectionbrowser-storage· Review: Pinned GitHub installation and rc.6 peers are documented; destructive session and workspace actions remain user-triggered and were not executed.
-
DSH Popout Sidebar · e2mcc/dsh-popout-sidebar@7485171 — Adds an artifact sidebar that can open its content in a larger browser tab.
- Evidence: manifest → patch · Identity:
dsh-popout-sidebar - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionbrowser-uiexternal-windowgithub-only· Review: A pinned root Git source exists while npm has no package; no build, browser panel, artifact rendering, or popout was executed.
- Evidence: manifest → patch · Identity:
-
DSH Unarchive · edfrey0044/dsh-unarchive@52a5194 — Restores archived DSH sessions through a command and tool that update the global archive registry.
- Evidence: manifest → patch · Identity:
dsh-unarchive - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
session-dataarchive-registryworkspace-state· Review: Git-source installation is documented and the bundle removes session identifiers from the global archive set; no registry or session state was changed.
- Evidence: manifest → patch · Identity:
-
DSH Balance · eka3os/dsh-balance@0ffde6c — DeepSeek Harness Web plugin that shows the API balance beside Settings in the sidebar.
- Evidence: manifest → patch · Identity:
@ek3os/dsh-balance - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Notes · ErrorLst/dsh-notes@1e0bda1 — Adds a full-height notes rail with session cards and global or workspace todo items.
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-notes - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionsession-dataworkspace-databrowser-uigithub-only· Review: The root manifest is private and npm has no matching package, but a pinned root Git bundle exists; no note persistence, session card, or browser UI was executed.
- Evidence: manifest → patch · Identity:
-
DSH OpenCode Palette · FeatherHunter/dsh-opencode-palette@4c3660a — Adds a persistent selector for dozens of OpenCode-inspired color themes in the DSH Web interface.
- Evidence: manifest → patch · Identity:
dsh-opencode-palette - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionthemebrowser-storage· Review: The fixed source version is older than the observed registry release but maps to the same public identity; theme injection and persistent browser settings were not executed.
- Evidence: manifest → patch · Identity:
-
DeepSeek Harness Wallet · feibi-mochi/deepseek-harness-control-center@1a3b34b — A local-first account, usage, recharge, completion, layout, and session control center for DSH Web.
- Evidence: manifest → patch · Identity:
deepseek-harness-wallet - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
account-balanceusage-accountingcredentialsexternal-networksession-controlweb-ui· Review: The fixed source and npm identity both expose 0.1.4 from the same repository; no credential request, accounting, recharge link, notification, or session action was executed.
- Evidence: manifest → patch · Identity:
-
DSH Balance Widget · FeilongRong/dsh-balance-widget@79cd46d — Sidebar balance widget for the DSH Web GUI: a "余额" button in the sidebar footer opens a panel showing each provider's account balance (DeepSeek live query, MiniMax / Qwen / SCNet console links, Ollama local). · DSH Web GUI 侧边栏余额插件:侧边栏底部的「余额」按钮弹出面板,展示各服务商账户余额(DeepSeek 实时查询,MiniMax / 百炼 / SCNet 控制台链接,Ollama 本地)。
- Evidence: manifest → patch · Identity:
@feilongrong/dsh-balance-widget - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH UI Crystal · gityanglijun/dsh-ui-crystal@37e321c — Adds a blue-violet Crystal theme and whale-girl background to the DSH Web shell.
- Evidence: manifest → patch · Identity:
dsh-ui-crystal - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionthemelarge-assetsbrowser-uigithub-only· Review: The package declares MIT but no repository license file or npm package was found; no build, asset load, DOM injection, or browser rendering was executed.
- Evidence: manifest → patch · Identity:
-
StyleVault · GptsApp/dsh-stylevault@26eee2d — A theme vault with configurable styles and shareable appearance packs for DSH Web.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
themeclient-injectionbrowser-storagegithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Remote QR Button · huaxiren6/dsh-remote-qr-button@8427d46 — Floating phone-pairing QR button for the DSH WebUI. Companion UI for dsh-remote-link: opens its /qr pairing page in an in-app overlay.
- Evidence: manifest → patch · Identity:
dsh-remote-qr-button - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Clean Desktop Shell · Icather/dsh-clean-desktop-shell@352820e — Clean desktop shell for DeepSeek Harness (DSH) as a DSH plugin — reuses your web profile, tray/single-instance/auto-launch, zero visual changes. DSH 插件形态的纯净桌面壳:复用现有 web profile,托盘管理后端,零视觉改造。
- Evidence: manifest → patch · Identity:
dsh-clean-desktop-shell - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH OMC TUI · ipromise2021/dsh-omc-tui@d2307dc — A keyboard-first terminal interface that composes DSH sessions, approvals, jobs, tools, skills, and model selection.
- Evidence: manifest → patch · Identity:
dsh-omc-tui - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
terminal-uisession-controlapprovalsmodel-toolsprofile-overridesgithub-only· Review: The patch replaces several base tool and prompt rows to compose the TUI; no terminal, profile override, session, approval, or tool was run.
- Evidence: manifest → patch · Identity:
-
DSH RPG Workstation · Jay-R-J/dsh-rpg-workstation@84fc0de — Adds conversation XP, levels, achievements, streaks, and a floating RPG dashboard to DSH Web.
- Evidence: manifest → patch · Identity:
dsh-rpg-workstation - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
gamificationsession-eventsfilesystem-writeweb-uinpm-packageprepublish-build· Review: The fixed source matches npm 0.3.0; no build, session event, XP state, filesystem write, or dashboard rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Admin · Jemius/dsh-session-manager@191a1f3 — Adds archive, restore, export, and permanent deletion controls for DSH sessions.
- Evidence: manifest → patch · Identity:
dsh-session-admin - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
session-archivesession-deletedata-exportweb-uiprepare-buildrepository-renamed· Review: GitHub confirms dsh-session-manager redirects to the same repository ID now named dsh-session-admin; the fixed source is 0.1.2 while npm exposes 0.1.3, and no session mutation was executed.
- Evidence: manifest → patch · Identity:
-
DSH Balance Bubble · Jescoi/dsh-balance-bubble@dbfaef5 — A persistent floating DeepSeek account-balance bubble backed by a host endpoint.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
account-balancecredentialslocal-web-serverclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
La Feng UI · JimingYang25/Lafeng-UI-A-snazzy-personalized-custom-UI-plugin-for-DeepSeek-Harness-Cordis-.@bfd81d8 — A customizable Web UI pack with skins, animated wallpapers, music, audio visualization, and personas.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
themeaudioclient-injectionbrowser-storagepersona· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Survey · jinhuang712/dsh-survey@9f36ef1 — A model tool and rich Web form for multi-question surveys, skips, Markdown answers, and recaps.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
model-toolsinteractive-formsession-dataclient-injectionprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Strata · jsdvjx/dsh-strata@e2f8585 — Session strata for the DeepSeek Harness Web GUI: the transcript's scrollbar becomes a to-scale, colour-coded map of the whole run — user messages emphasised, clickable anchors, auto-loading history, and a hover deck of every prompt in the session.
- Evidence: manifest → patch · Identity:
dsh-strata - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Memes · kagura-agent/dsh-memes@68a528d — Lets agents select reaction media by semantic tags and render it in DSH conversations.
- Evidence: manifest → patch · Identity:
dsh-memes - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
media-pickermodel-toolsexternal-mediaweb-uigithub-only· Review: Plugin code is MIT but reaction media is fetched from a separate library under its own source rights; no tag fetch, selection, or media render was executed.
- Evidence: manifest → patch · Identity:
-
DSH App · Karbo123/DSH-EvoResearch@ea6d4df — EvoResearch 自定义浏览器表面 bundle:复用 DSH host 引擎(dsh-base 的全部服务与工具),自建前端工作台(不加载官方 ui-* 外壳,替换官方 dsh-web-app 表面)
- Evidence: manifest → patch · Identity:
@evoresearch/dsh-app - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injectiondatabasesystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Bottom Bar · kc0ed/dsh-bottom-bar@01d8433 — A configurable input-footer statistics row with cost estimates and a persistent local usage ledger.
- Evidence: manifest → patch · Identity:
@kc0ed/dsh-bottom-bar - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
token-metercost-estimationbrowser-storageclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH WhaleGirl · KLnormal/dsh_whalegirl@6cf1b30 — A desktop-native animated companion driven by DSH session events.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageSEE LICENSE IN ASSET_LICENSE.md· lifecyclenone· compatibility unknown - Signals:
desktop-appsession-dataaudiosubprocessexternal-model-download· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Workspace Drag · lanscer/dsh-workspace-drag@d134d9c — DSH Web UI plugin — drag a conversation onto any workspace in the sidebar to organize it. / DSH Web UI 插件:在侧边栏把对话拖到任意工作区即可归类整理,可在设置页开关。
- Evidence: manifest → patch · Identity:
dsh-workspace-drag - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Bell Notify · Laplace-bit/dsh-bell-notify@943e178 — Synthesized Web Audio bells and status cues for agent lifecycle events.
- Evidence: manifest → patch · Identity:
dsh-bell-notify - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
audioagent-eventsclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Stats HUD · lauytgary/dsh_hud_plugin@e3285fc — Sci-fi HUD: turns the session stats line into game-style level bars, a speedometer and a rolling token counter.
- Evidence: manifest → patch · Identity:
dsh-stats-hud - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Client UI Android · LeMonXi-i/dsh-client-ui-android@2dccd80 — Adds Android detection and a touch-first responsive layout to the DSH Web interface.
- Evidence: manifest → patch · Identity:
dsh-client-ui-android - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
mobile-layoutandroidclient-injectionresponsive-uigithub-only· Review: The fixed source documents npm and GitHub installation but npm has no matching package; no user-agent detection, layout mutation, or browser rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Keyboard · lhf6623/dsh-keyboard@4ecb1b7 — An on-screen keyboard and mouse visualizer that highlights live input events.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
input-eventsclient-injectionkeyboard-visualizergithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Neu Theme · Lhy723/dsh-neu-theme@c6ecbe4 — A light and dark neumorphic theme for DSH Web.
- Evidence: manifest → patch · Identity:
dsh-neu-theme - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
themeclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Prompt Recall · liguanyu/dsh_PromptRecall@6040210 — Codex-style up and down history recall for the Web prompt input.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
input-historyclient-injectionbrowser-storage· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
My Better DSH · lilwhich/my_better-dsh@b903e95 — A beginner-oriented Web bundle combining file navigation, session tools, UI packs, checkpoints, and global settings.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
aggregate-bundlefilesystem-writesession-dataclient-injectionconfiguration-edit· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Pelican · Little-Star888/dsh-pelican@f5bb404 — Adds an animated pelican cyclist and global message-status indicator to DSH Web.
- Evidence: manifest → patch · Identity:
dsh-pelican - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionanimationsession-statebrowser-ui· Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no animation, message observation, session state, or browser rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Rewind · LiuJunheng/DeepSeekHarnessGreen@b352856 — 在 WebUI 设置页可视化分析会话(逐回合/错误统计),并支持按回合「回退」——从选定回合之后派生干净的续接会话(官方 session.fork),等效于移除失败消息后继续对话
- Evidence: manifest → patch · Identity:
dsh-session-rewind - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Balance · lynnss-ai/dsh-balance@685bb40 — Real-time DeepSeek API balance viewer: Host query via curl, browser UI in the settings trigger row
- Evidence: manifest → patch · Identity:
@lynnss-ai/dsh-balance - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controlprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Frosted Glass · makuralymi/dsh-webUI-Glass-Theme@9822e4a — A global frosted-glass theme with animated light/dark switching and scheduling.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
themeclient-injectiontimergithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Chat Rail · Max-Null/dsh-chat-rail@a75058b — Adds a scroll-aware right-side message navigation rail to DSH conversations.
- Evidence: manifest → patch · Identity:
@max-null/dsh-chat-rail - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
conversation-uisession-projectionclient-injectionfilesystem-read· Review: The fixed source, patch, licenses, exact npm gitHead and documented install identity were reviewed statically; conversation UI behavior was not run.
- Evidence: manifest → patch · Identity:
-
DSH CoT Summarization · MeowLynxSea/dsh-cot-summerization@dd69071 — Hides raw reasoning and displays a summary generated through a configurable Chat Completions endpoint.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
reasoning-dataexternal-networkcredentialsmodel-requestclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Sticky Note · Meredith2328/dsh-sticky-note@ebabb6c — A Web sticky-note panel that saves notes and TODO items into an archive directory.
- Evidence: manifest → patch · Identity:
dsh-sticky-note - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
filesystem-writepersistent-dataclient-injection· Review: The host and Web client faces are structurally confirmed; wildcard DSH peers and persistent note writes were not runtime-tested.
- Evidence: manifest → patch · Identity:
-
DSH Visualize · Nagi-ovo/dsh-visualize@e3254f7 — In-conversation generative UI with streaming interactive HTML cards and sandboxed rendering.
-
DSH Simplified Chinese UI · ngk3pori/dsh-zh-cn-ui@ea388ec — Localizes DSH browser interface text into Simplified Chinese through client-side data and DOM translation.
- Evidence: manifest → patch · Identity:
dsh-zh-cn-ui - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
localizationdom-mutationclient-injectionmanual-git-install· Review: The fixed source, patch, licenses and documented Git clone installation identity were reviewed statically; browser translation code was not run.
- Evidence: manifest → patch · Identity:
-
DSH Pet Whale · nzl153/dsh-pet-whale@952551a — A Web desktop whale pet whose animation reacts to agent state.
- Evidence: manifest → patch · Identity:
pet-whale - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-petagent-eventsclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Annotation · omdsh-dev/dsh-annotation@0b0ceb6 — Adds numbered annotations to selected assistant text and carries them into the next message.
- Evidence: manifest → patch · Identity:
@omdsh-dev/dsh-annotation - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
client-injectionconversation-data· Review: The Web client injection and native bundle row are fixed-source confirmed; no DSH package peer range establishes runtime compatibility.
- Evidence: manifest → patch · Identity:
-
DSH Better Sidebar · omdsh-dev/DSH-better-sidebar@5d2d6e5 — A sidebar workbench with file editing, terminal, Git, media, and extensible tabs.
- Evidence: manifest → patch · Identity:
dsh-better-sidebar - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
terminalfilesystem-writegitnative-buildremote-installer· Review: Direct package installation exists, but remote installer scripts and native builds warrant review.
- Evidence: manifest → patch · Identity:
-
DSH GenUI · omdsh-dev/dsh-genui@0e756ef — Interactive inline UI for layouts, charts, forms, quizzes, Mermaid, 3D scenes, and action events.
-
Ostar DSH Left Sidebar · ostar999/ostar-dsh-left-sidebar@5399969 — DSH 左侧边栏工作区管理器:批量删除工作区 / 批量·单选删除会话 / 一键折叠·展开全部工作区和会话。官方工作区浏览器的全部功能与交互完整保留,管理功能以同尺寸按钮叠加在工作区按钮行。
- Evidence: manifest → patch · Identity:
ostar-dsh-left-sidebar - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Task Control · p2coder/dsh-task-control@a20e79b — Composer controls for pausing, resuming, or cancelling the active conversation task.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
task-controlsession-dataclient-injectiongithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Harness UI Enhancer · Physicolor/harness-ui-enhancer@3357651 — Polishes DSH Web styles and exposes live controls for layout scale, typography, and chat width.
- Evidence: manifest → patch · Identity:
harness-ui-enhancer - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
client-injectionthemesettings-writebrowser-storageprepare-build· Review: The fixed source and npm identity both expose 0.4.0 from the same repository; no prepare build, style injection, setting write, or browser rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Invest · Pikapiku09/dsh-invest-plugin@8260090 — A 股多角色投研流水线常规插件:invest_run 工具(选股/消息/深度/总判断 4 角色子代理 + Tushare 实时数据 + 三级缓存 + 报告归档),GUI 工具卡片(分阶段标签 + 推理过程 + SVG 图表内联渲染)。Hot-pluggable — mounted via profile package.json bundles + dsh.bundle.patch, no dsh source changes.
- Evidence: manifest → patch · Identity:
dsh-invest - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Personal Center · PolinniZhong/dsh-personal-center@047ed94 — DSH 个人中心:设置 →「个人」分区(个人资料统计 UI + 个性化自定义指令);统计数据待接入
- Evidence: manifest → patch · Identity:
dsh-personal-center - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionmcp· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH BigFish · QCYTSN/dsh-dafeiyu@fba38c1 — A desktop-native BigFish companion driven by DSH session events.
- Evidence: manifest → patch · Identity:
dsh-dafeiyu - Licenses: repo
MIT/ packageSEE LICENSE IN ASSET_LICENSE.md· lifecyclenone· compatibility unknown - Signals:
desktop-appsession-dataaudiosubprocess· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
MyPet · qiqikuaidianpao/mypet@f9de0bf — A browser Tamagotchi-style pet that reacts to coding sessions, levels up, and collects skins.
- Evidence: manifest → patch · Identity:
mypet - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
desktop-petsession-databrowser-storageclient-injectionprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Rhine Lab Theme · ReLuckyLucy/dsh_Rhine_Lab_themo@54c2f26 — A reversible Arknights Rhine Lab archive-terminal theme for DSH Web.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
themeclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Riesbri DSH TUI · riesbri/dsh-tui@e051d01 — Provides an in-process terminal interface over DSH agent, command, session, and approval services.
- Evidence: manifest → patch · Identity:
@riesbri/dsh-tui - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
terminalsession-dataapproval-flowprepare-buildworkspace-dependencies· Review: The fixed source now declares repository metadata and both the TUI and renderer packages have public identities; no build or terminal interface ran.
- Evidence: manifest → patch · Identity:
-
DSH Task Chime · ruazero/dsh-task-chime@6575057 — Ring a real system sound when a DeepSeek Harness agent finishes a task OR needs your input: custom sounds, 4 intensity levels, auto escalation, and a settings card in the GUI.
- Evidence: manifest → patch · Identity:
dsh-task-chime - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Mobile · saya-ch/dsh-mobile@3ac054e — Adds mobile-oriented DSH Web surfaces and a secure local-network gateway for Android and browsers.
- Evidence: manifest → patch · Identity:
dsh-mobile - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· compatibility unknown - Signals:
mobile-uilan-accesstls-certificatedevice-discoveryclient-injectionprepack-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Workbench UI · seedaylight/dsh-workbench-ui@43777c9 — A workbench-style UI for DeepSeek Harness: task panel with six-stage pipeline, telemetry field, command console, dual light/dark themes, privacy mask for screenshots. | 为 DeepSeek Harness 打造的工作台式 UI:任务面板与六阶段流水线、遥测场、命令控制台、浅色/深色主题、截图隐私模式。
- Evidence: manifest → patch · Identity:
dsh-workbench-ui - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Network Mode · SeekTureWorld/dsh-network-mode@9397592 — Switch DSH between localhost (127.0.0.1) and LAN (0.0.0.0) bind from the Settings page (LAN access off by default), with a crypto.randomUUID polyfill for non-secure LAN origins.
- Evidence: manifest → patch · Identity:
dsh-network-mode - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Codex Pet · skr311/dsh-codex-pet@6aa7b86 — Imports sprite-sheet pets and renders them as agent-state-linked Web overlays.
- Evidence: manifest → patch · Identity:
dsh-codex-pet - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-petimage-assetsagent-eventsclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Song Memory · songoao25/dsh-song-memory@5783750 — Three-tier memory control plane for DeepSeek Harness: persistent runtime context, searchable project documents, pluggable long-term memory, smart routing, supervised agent workflows, WebUI, and headless tools.
- Evidence: manifest → patch · Identity:
dsh-song-memory - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectiondatabaseprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Worktime Board · spacexun2/dsh-worktime-board@8fe6243 — Daily, weekly, monthly, and academic-calendar work-time statistics with a cultivation-style progression system.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· mixed peer ranges - Signals:
time-trackinggamificationclient-injectionbrowser-storage· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Message Index · stnt04/dsh-msg-index@8b9834b — A floating frosted control that indexes user messages and jumps to them in the current session.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
session-datamessage-navigationclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Frieren DSH Theme · SuperKSP/dsh_theme_Frieren@84276f9 — Applies a Frieren-inspired parchment, gold, magic-circle and petal theme to the DSH web interface.
- Evidence: manifest → patch · Identity:
dsh-client-ui-skin-frieren - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
themeclient-injectionvisual-assetsgit-source-install· Review: The fixed source, patch, licenses and repository-specific Git install identity were reviewed statically; assets, animation and client injection were not run.
- Evidence: manifest → patch · Identity:
-
DSH Minecraft Theme · SuperLS-X/dsh-minecraft-theme@06863f0 — Minecraft 主题插件(DeepSeek Harness):方块纹理背景铺满页面、像素字体、MC 风格按钮与点击音效、纹理导入与管理、音乐播放器(16 首 Minecraft 原声 + 本地音乐文件夹)。
- Evidence: manifest → patch · Identity:
@superls-x/dsh-minecraft-theme - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Codex · syncended/deepseek-harness-openai-codex@4486d15 — OpenAI Codex (ChatGPT Plus/Pro) provider for DeepSeek Harness, with Web UI and CLI device-code OAuth login.
- Evidence: manifest → patch · Identity:
@syncended/dsh-codex - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Picture in Picture · syncended/deepseek-harness-picture-in-picture@591e7d1 — A picture-in-picture mini chat surface for DSH Web.
- Evidence: manifest → patch · Identity:
@syncended/dsh-pip - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
picture-in-picturesession-dataclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH macOS Desktop · Taylor-Cat/dsh-macos-desktop@c56f308 — A retro System 7 and Mac OS 9 desktop shell containing chat, files, terminal, browser, docs, and knowledge views.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-shellterminalfilesystem-readclient-injectiongithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Live2D Companion · Tisitan/dsh-live2d-companion@9e03a01 — Adds an AI-state web widget and optional always-on-top Live2D desktop companion.
- Evidence: manifest → patch · Identity:
dsh-live2d-companion - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
live2ddesktop-petclient-injectiondesktop-windowgithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Pet Companion · ToBeWin/DSH-Pet-Companion@53fc630 — Adds animated local-only desktop pets to DSH Web using artwork bundled by the author.
- Evidence: manifest → patch · Identity:
@tobewin/dsh-pet-companion - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
desktop-petbundled-mediaclient-injectionbrowser-storageprepack-buildgithub-only· Review: The unpublished package documents a fixed GitHub source install and describes its bundled pet artwork as original; no build, media load, browser state, or animation was executed.
- Evidence: manifest → patch · Identity:
-
DSH Pet Nutri · uckkk/dsh-pet-nutri@83bef20 — 营养补充
- Evidence: manifest → patch · Identity:
dsh-pet-nutri - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Pet Pack · uckkk/dsh-pet-pack@3a9c606 — 宠物旅行清单
- Evidence: manifest → patch · Identity:
dsh-pet-pack - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Conversation Nav · UlaBe/dsh-conversation-nav@df424f6 — A right-edge drawer that lists user messages and jumps to their positions in the conversation.
- Evidence: manifest → patch · Identity:
@ulabe/dsh-conversation-nav - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datamessage-navigationclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Archived Chats · Ultronen/dsh-archived-chats@8a6912e — A settings page for browsing, searching, restoring, and deleting archived sessions by workspace.
- Evidence: manifest → patch · Identity:
dsh-archived-chats - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-dataarchive-registryfilesystem-deleteclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Unarchive · uwu9039/dsh-unarchive@5f10e58 — An archived-session recycle bin with previews, restoration, and optional archive confirmation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-dataarchive-registryfilesystem-writeclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Chatflow Rail · veritas501/dsh-chatflow-rail@485a978 — A left-side conversation-flow rail with position navigation and a docked previous-message card.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
session-datamessage-navigationclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Compact Activity · wallpap/dsh-compact-activity@6ef1278 — Codex-style one-line disclosures for reasoning and tool activity.
- Evidence: manifest → patch · Identity:
dsh-compact-activity - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
reasoning-datatool-activityclient-injectionprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Billing Community Bundle · Wanbinyu/dsh-billing@198e54d — Aggregates host-side billing projections and a DSH Web usage and cost interface.
- Evidence: manifest → patch · Identity:
dsh-billing-community-bundle - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
billing-datausage-accountingsession-datafilesystem-writeclient-injectiongithub-only· Review: The repository provides a fixed GitHub aggregate bundle over local component packages; no build, session projection, ledger write, or browser UI was executed.
- Evidence: manifest → patch · Identity:
-
DSH Achievements · WJNCT55555/dsh-achievements@ce6ceb3 — A Web achievement gallery with toasts, trophies, dock integration, crossovers, and opt-in anonymous statistics.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
gamificationclient-injectionbrowser-storageoptional-telemetry· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Dock · Wntediluvian/dsh-plugins@7f6fe53 — Adds a persistent usage dock with provider balances and guarded restart or stop controls.
- Evidence: manifest → patch · Identity:
dsh-dock - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
provider-usagecredentialsexternal-networkprocess-controlsubprocessfilesystem-writeclient-injection· Review: The fixed source, package license file, bundle structure and monorepo Git-path install identity were reviewed statically; provider requests and process controls were not run.
- Evidence: manifest → patch · Identity:
-
DSH Model Balance · wycto/dsh-model-balance@79e0903 — Displays balances for configured model providers in a DSH Web sidebar panel.
- Evidence: manifest → patch · Identity:
@wycto/dsh-balance-panel - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
account-balancecredentialsexternal-networkcustom-endpointsweb-routeclient-injection· Review: The fixed source and npm identity both expose 0.1.1 from the same repository; no credential resolution, provider request, custom endpoint, or browser panel was executed.
- Evidence: manifest → patch · Identity:
-
DSH Image Create · xiaoyuink/dsh-image-create@90ed40c — AI 生图 (image generation) plugin for the dsh web GUI: text-to-image and image-to-image through a configurable OpenAI-compatible endpoint, with multi-provider support, model discovery, and agent tool registration. 与 @xiaoyuink/dsh-image-vision 同系列的图像插件。
- Evidence: manifest → patch · Identity:
@xiaoyuink/dsh-image-create - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
filesystemexternal-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Timeline · XiLuovo/dsh-session-timeline@55f3268 — A collapsible conversation timeline with scroll tracking, message jumps, and preview tooltips.
- Evidence: manifest → patch · Identity:
dsh-session-timeline - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-datamessage-navigationscroll-spyclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Deepseek Web · y-wi/dsh-deepseek-web@7ada18c — Unofficial DeepSeek Web LLM provider plugin for DeepSeek Harness. Lives in packages/plugin of the public workspace; npm tarball ships built lib/ and prebuilt WASM.
- Evidence: manifest → patch · Identity:
dsh-deepseek-web - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· mixed peer ranges - Signals:
credentialsclient-injectionbrowserprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Fold · Yancey2023/dsh-fold@f1b5212 — Folds conversation turns and tool rows in the DSH web interface to reduce visual noise.
- Evidence: manifest → patch · Identity:
dsh-fold - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
conversation-uiclient-injectionsession-datacustom-install-script· Review: The fixed source, patch, licenses and GitHub-source install identity were reviewed statically; custom install scripts, tests and browser UI were not run.
- Evidence: manifest → patch · Identity:
-
DSH Enhance Workspace · yangshen830-eng/dsh-enhance-workspace@9f9fc69 — DSH web plugin: enhance the workspace panel with multi-directory (multi-root) workspaces — group several directories as one workspace, pick one when starting a conversation, and edit roots in place.
- Evidence: manifest → patch · Identity:
dsh-enhance-workspace - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Usage Stats · Ychris12138/dsh-usage-stats@8f33be3 — Token usage heatmap, provider balances, and subscription quotas for the dsh web GUI
- Evidence: manifest → patch · Identity:
dsh-usage-stats - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Omp Tui · yiran-ye/dsh-omp-tui@c10b6d7 — DeepSeek Harness native OMP-style terminal mode bundle
- Evidence: manifest → patch · Identity:
dsh-omp-tui - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionmcpprocess-controlsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Wallpaper Share · YRN-playmaker/dsh-wallpaper_share@a271e7f — Synchronizes and shares wallpaper state through a DSH host and browser client bundle.
- Evidence: manifest → patch · Identity:
dsh-wallpaper_share - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
wallpaperexternal-networkfilesystem-writeclient-injection· Review: The fixed source, patch, licenses and GitHub-source install identity were reviewed statically; polling, routes, storage and client behavior were not run.
- Evidence: manifest → patch · Identity:
-
DSH Icon Theme · yzke/dsh-icon-theme@2e341d8 — Adds auto-detected and user-customizable icons to DSH settings and sidebar surfaces.
- Evidence: manifest → patch · Identity:
dsh-icon-theme - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
icon-themesettings-writefilesystem-readclient-injectionprepare-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Context Panel · zhangxiang1993621/dsh-context-panel@aa2c80c — Displays skills, rules, and files used by the active conversation inside a layout pane.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datafilesystem-readclient-injectionlocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Web UI All · zhu1090093659/dsh-web-ui@5153e9a — An aggregate Web UI bundle combining task board, Git, terminal, remote UI, stats, pets, and skins.
Developer Tools
-
DSH Mcmp · Aampidy/dsh-mcmp@9013691 — DeepSeek Harness 插件:数学建模论文自动化流水线 v2(8 步骤 × 19 迭代 × N 轮:图表视觉自检与修复、评审问题修复闭环、跨步骤缺陷台账与向上修复、论文兜底定稿、质疑驱动、断点续跑、进度面板)
- Evidence: manifest → patch · Identity:
dsh-mcmp - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Request Flight Recorder · abinzhao/dsh-request-flight-recorder@319e3bf — Records bounded content-free diagnostics for request timing, streaming phases, failures, and session correlation.
- Evidence: manifest → patch · Identity:
dsh-request-flight-recorder - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
request-metadatasession-datastream-diagnosticsclient-injection· Review: Exact rc.6 DSH peers and the native bundle are fixed-source confirmed; privacy properties, timing hooks, and the prepack build were not runtime-tested.
- Evidence: manifest → patch · Identity:
-
DSH Python Tempfile Shim · AngelosZou/dsh-python-tempfile-shim@20b84cd — A temporary Windows sandbox shim that injects a local sitecustomize path into confined Python command process trees.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
windows-onlyenvironment-injectionshell-runtimepython-environmentgithub-only· Review: The author documents local-clone installation and removal after an upstream fix; no shell resolver, environment, or Python process was modified.
-
DSH Eval Harness · BiBoyang/dsh-eval-harness@035d1c6 — A headless evaluation harness for measuring agent behavior and task outcomes.
-
DSH Zh Kit · CatmaoU/dsh-zh-kit@2d00abe — DeepSeek Harness 中文工具包:模型中文优先(推理/回答)+ 轨迹视图中文化与「人话」解释(融合 deepseek-harness-zh-cn 与 dsh-trajectory-zh)
- Evidence: manifest → patch · Identity:
dsh-zh-kit - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· mixed peer ranges - Signals:
filesystemexternal-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Codegraph · CC19990113/dsh-plugin-codegraph@94b0fd3 — Builds a tree-sitter and SQLite code graph and exposes symbol, caller, reachability, and indexing tools to DSH agents.
- Evidence: manifest → patch · Identity:
dsh-plugin-codegraph - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-readfilesystem-watchsqlitetree-sittermodel-tools· Review: The fixed source is 0.1.0 while npm exposes 0.1.4 from the same package directory; no source scan, watcher, native parser, database, or tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Change Center · Chance-Wu/dsh-change-center@fbe60fc — Captures tool-driven file changes for diff review, verification, rollback, and optional Git staging or publication.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
filesystem-writegit-writesession-datatool-resultsllm-reviewhigh-trust-surface· Review: The fixed source can persist file-change evidence, apply or roll back edits, and invoke Git add, commit, and push; no filesystem, Git, or model action was executed.
-
DSH Reviewer Bot · chaojixinren/dsh-reviewer-bot@77228ae — Automates repository review workflows across GitHub and GitLab with configurable trust, diagnostics, and write controls.
- Evidence: manifest → patch · Identity:
@dshrb/bundle - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
credentialsexternal-networkrepository-writesubprocessci-datareview-automation· Review: The bundle declares exact DSH rc.6 compatibility and supports forge credentials plus optional repository writes; its automation, subprocesses, and remote calls were not executed.
- Evidence: manifest → patch · Identity:
-
DSH EasySSH Workspace · chenw2759-wq/dsh-IDE@607ff87 — An SSH workspace mode that routes file and subprocess operations to remote hosts while exposing remote browsing and agent tools.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecycleprepare· declares rc.6 peers - Signals:
sshcredentialsremote-executionfilesystem-writeprepare-build· Review: Source-link installation and exact rc.6 peers are documented; remote mode bypasses the local kernel sandbox, and no credential, SSH, SFTP, or process action was executed.
-
DSH Git Ops · codehz/dsh-git-ops@bab93cf — Adds Git recommendations, local branch switching, status and diff views, and agent intent shortcuts.
- Evidence: manifest → patch · Identity:
dsh-git-ops - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
git-readgit-writebranch-switchsubprocessclient-injectionagent-intent· Review: The fixed source invokes Git through the DSH subprocess surface and can stage changes or switch branches; no command or UI action was executed.
- Evidence: manifest → patch · Identity:
-
Arch Doc · duyanta123/arch-doc@76fcfaf — A filesystem skill that analyzes a codebase and produces architecture documentation for modules, dependencies, entry points, and run methods.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-readfilesystem-writecode-analysisdocumentation-generationgithub-only· Review: Pinned GitHub installation is documented; the wildcard skill-filesystem peer leaves compatibility unproven, and no codebase was read or documented.
-
DSH Workbench · ghbhiee/dsh-plugins@2017411 — A browser workbench combining a terminal, file explorer, and file preview.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
terminalsubprocessfilesystem-readfilesystem-writeclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Grayprint · HongzhongL/dsh-grayprint@5d43d2c — GrayPrint — live reasoning-style fingerprints for the DeepSeek Harness web chat. Compares grayscale-vs-current writing style and independently tracks Let me exploratory openers versus We need planning openers.
- Evidence: manifest → patch · Identity:
dsh-grayprint - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Tool Visual Primitives · InkshadeWoods/dsh-tool-visual-primitives@d7957c4 — DSH 视觉原语工具:参考 DeepSeek《Thinking with Visual Primitives》论文,将图片路由到外部视觉模型并返回带视觉基元的文本分析。纯文本循环,对话模型无需原生视觉能力即可'看见'图片。
- Evidence: manifest → patch · Identity:
dsh-tool-visual-primitives - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Console · Isanti2016/dsh-console@8d31014 — Console commands for Web service and SSH-tunnel management, one-shot prompts, and TUI launch.
- Evidence: manifest → patch · Identity:
dsh-console - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
command-linesshsubprocessservice-management· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Context Lens · KinomotoMio/dsh-context-lens@e00745a — Shows the model context contributed by DSH plugins through host and client inspection surfaces.
- Evidence: manifest → patch · Identity:
@kinomotomio/dsh-context-lens - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
model-contextsession-datasystem-promptclient-injectionhost-apigithub-only· Review: A matching fixed GitHub source exists while npm has no package; no model context, session data, host API, client UI, test, or build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Selection Highlight · kxSenlin/dsh-selection-highlight@6ece433 — Selection Highlight(选区高亮)for dsh Web:双击/拖选对话文本后,对话区域内的相同文本片段淡高亮。VS Code Selection Highlight 风格的纯浏览器侧 dsh 插件。
- Evidence: manifest → patch · Identity:
dsh-selection-highlight - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Ops Kit · LeslieWylie/dsh-ops-kit@c4ba835 — Operational tools and skills for development workflows inside DeepSeek Harness.
-
DSH Proxy Config · lhf6623/dsh-proxy-config@e3d5934 — A settings panel that persists HTTP or SOCKS proxy values into the host process environment.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
proxyprocess-environmentconfiguration-writecredentialssubprocess· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH SCNet · lql341/dsh-scnet@24070df — SSH and Slurm tooling for SCNet and similar domestic HPC clusters.
- Evidence: manifest → patch · Identity:
dsh-scnet - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
sshhpcremote-executionfilesystem-writesubprocess· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Exec Extension · LvDAO/dsh-exec-extension@1a7c4e1 — Official-pattern dsh bundle: replace headless-startup with per-invocation CLI flags without writing settings
- Evidence: manifest → patch · Identity:
dsh-exec-extension - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
filesystemexternal-networkcredentialsclient-injectionmcpnative-helperprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Bash Terminal · MAXeaglet/dsh-bash-terminal@6894913 — A Windows shell tool that routes commands through PowerShell, Git Bash, or WSL with a configurable default.
- Evidence: manifest → patch · Identity:
dsh-bash-terminal - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
subprocessshellwindowsconfiguration-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Control · mouliangyu/dsh-plugins@4c03d96 — Global session and workspace management for DeepSeek Harness
- Evidence: manifest → patch · Identity:
dsh-session-control - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
client-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Lifecycle · mrzhangkris/dsh-session-lifecycle@2020895 — 会话生命周期管理:one-shot 子代理完成后自动清理 + 总量保底 + 连带清理 projcache,从源头杜绝缓存膨胀与卡顿。
- Evidence: manifest → patch · Identity:
dsh-session-lifecycle - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
external-networkcredentials· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Large Project Performance · orangeofcarl0-sys/dsh-large-proj-perf@cb957b4 — Large-session optimizations for fork initialization, projection warming, cache refill, materialization, LRU pruning, and heap detection.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
performance-patchsession-datacachememory-managementgithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Superpower · pai535Huang/dsh-superpower@c35de08 — DeepSeek Harness preset adapter for obra/superpowers
- Evidence: manifest → patch · Identity:
dsh-superpower - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH UE Assets Operator · QSWWLTN/dsh-UEAssetsOperator@2dbb683 — Native tools for Unreal Engine uasset inspection and Blueprint edits through built-in UE Python.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
unreal-engineasset-inspectionfilesystem-writesubprocesspython· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH NeoForge · r05En1cU/dsh-neoforge@7bbee40 — A plugin API layer with runtime mixins, snapshot and restore, and a Cordis-native event bus.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
plugin-apiruntime-mixinsnapshotevent-busprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Structured Output · royenheart/dsh-plugin-structured-output@1116e33 — JSON Schema structured-output tools, a command, and native result validation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
structured-outputjson-schemamodel-toolsvalidationlocal-installer· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Restart Systemd · RoyougiShiki/dsh-restart-systemd@90ab7ea — A Web and command trigger for safely restarting a user systemd service and resuming the session.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
service-restartsystemdsubprocesssession-datalocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Code IDE · SakalioLabs/dsh-code-ide@51d49f4 — Adds an optional browser IDE with file editing, search, terminals, and language-aware CodeMirror surfaces.
- Evidence: manifest → patch · Identity:
dsh-code-ide - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-readfilesystem-writeterminalsubprocessnative-dependencieswebsocketclient-injectionalpha-releasegithub-only· Review: The alpha bundle has a fixed GitHub identity and native terminal, ripgrep, FFI, and browser surfaces; none was built, installed, or executed.
- Evidence: manifest → patch · Identity:
-
DSH Lean · sjh9714/dsh-lean@df646af — Audits prompt-prefix token usage and proposes reductions to lower model cost.
- Evidence: manifest → patch · Identity:
dsh-lean - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
token-auditcost-optimizationprompt-analysisfilesystem-read· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Minimal PowerShell · skydog221/dsh-minimal-powershell@aa53185 — Keeps minimal-mode shell calls working through PowerShell on Windows.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
powershellshellsandbox-policywindowsprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Vimina · Sunse666/dsh-vimina@85b04c9 — Exposes Windows GUI scanning, input, screenshots, windows, mouse, and VMA scripting through native tools.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· mixed peer ranges - Signals:
gui-automationwindowssubprocessscreenshotmodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Git · taontech/dsh-git@bbe81b5 — A Git tab for repository status, history, branches, initialization, and operations.
- Evidence: manifest → patch · Identity:
@taontech/dsh-git - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
gitfilesystem-writesubprocessclient-injectionprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Archify · tt-a1i/archify@cffdd42 — Architecture knowledge and diagrams exposed to DSH through a nested integration bundle.
-
DSH Air Plant · uckkk/dsh-air-plant@d018d28 — 室内绿植
- Evidence: manifest → patch · Identity:
dsh-air-plant - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Bone Aid · uckkk/dsh-bone-aid@9ee1200 — 骨折扭伤
- Evidence: manifest → patch · Identity:
dsh-bone-aid - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Curtain Pick · uckkk/dsh-curtain-pick@97a3e78 — 窗帘选择
- Evidence: manifest → patch · Identity:
dsh-curtain-pick - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Kitchen Exhaust · uckkk/dsh-kitchen-exhaust@54e88e4 — 烟灶选购
- Evidence: manifest → patch · Identity:
dsh-kitchen-exhaust - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Mover Pick · uckkk/dsh-mover-pick@21172d9 — 搬家公司
- Evidence: manifest → patch · Identity:
dsh-mover-pick - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Multi Furniture · uckkk/dsh-multi-furniture@e6e040d — 多功能家具
- Evidence: manifest → patch · Identity:
dsh-multi-furniture - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH No Main Light · uckkk/dsh-no-main-light@159615e — 无主灯方案
- Evidence: manifest → patch · Identity:
dsh-no-main-light - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Red Packet · uckkk/dsh-red-packet@7b039db — 红包礼仪
- Evidence: manifest → patch · Identity:
dsh-red-packet - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Robot Setup · uckkk/dsh-robot-setup@7f4ffc1 — 扫地机器人
- Evidence: manifest → patch · Identity:
dsh-robot-setup - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-bundle· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Git Inspect · Wanbinyu/dsh-plugin-git-inspect@51e98c3 — Exposes read-only Git status, diff, log, branch, and repository inspection tools to DSH.
- Evidence: manifest → patch · Identity:
dsh-plugin-git-inspect - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
git-readsubprocessfilesystem-readmodel-toolsprepare-buildgithub-only· Review: The fixed GitHub bundle invokes Git through the DSH subprocess service and accepts rc.5 through rc.6 peers; no prepare build, command, or tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Git Graph · WhitePlusMS/dsh-git-graph@4e4621a — A read-only Git graph view with refs, worktree state, search, filtering, and history pagination.
-
DSH Git Worktree · wloops/dsh-git-worktree@17945c5 — Experimental worktree-backed session targets with isolated sessions, review views, confirmed delivery, and cleanup.
- Evidence: manifest → patch · Identity:
dsh-git-worktree - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
git-worktreesession-dataapproval-gatefilesystem-deleteprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Hooks Ordering · xinyuehtx/dsh-plugin-hooks-ordering@3f9f79f — Coordinates deterministic before-and-after ordering across independently contributed Cordis hooks.
- Evidence: manifest → patch · Identity:
@tengxiaohtx/dsh-plugin-hooks-ordering - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
hook-orderingagent-eventstool-eventsmodel-streamfilesystem-writeprepublish-build· Review: The fixed source and npm identity both expose 0.2.0 from the same repository; no hook takeover, ordering graph, log write, build, or test was executed.
- Evidence: manifest → patch · Identity:
-
DSH Launcher · XQ-rxslcq/dsh-launcher@046acfb — A configurable launcher for hidden command-line startup and an animated desktop companion window.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
application-launchersubprocessconfiguration-writedesktop-app· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Remote SSH · Yan-Zero/dsh-remote-ssh@21d727c — Transparent local and remote SSH workspaces spanning files, subprocesses, settings, and Web UI.
- Evidence: manifest → patch · Identity:
dsh-remote-ssh - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepublishOnly· compatibility unknown - Signals:
sshremote-executionfilesystem-writecredentialsprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Web UI Launcher · YV3507/dsh-webui-launcher@1028c4f — Provides model tools, commands and a settings card for starting, stopping and opening the DSH web interface.
- Evidence: manifest → patch · Identity:
dsh-webui-launcher - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
process-controlsubprocessexternal-networkfilesystem-writeclient-injectionnative-launcher· Review: The fixed source, patch, licenses, compatibility ranges and GitHub-source install identity were reviewed statically; launchers, processes, tools, servers and browser code were not run.
- Evidence: manifest → patch · Identity:
-
DSH Git Bash Tool · zeroa234/dsh-preset-minimal-windows@5e33b0f — A Windows Git Bash execution tool using the host subprocess seam with output spill and timeouts.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
git-bashsubprocesswindowsfilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
Agent & Workflow
-
DSH Plan Lattice · 1052326311/dsh-plan-lattice@e764f70 — Adaptive execution contracts and evidence-gated work graphs for long-running DSH agents.
- Evidence: manifest → patch · Identity:
dsh-plan-lattice - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
agent-planningfilesystem-writemodel-toolsgithub-releaseprepack-build· Review: GitHub release tarballs provide a fixed install identity; peers mix rc.5 and rc.6, and the prepack build and workflow behavior were not executed.
- Evidence: manifest → patch · Identity:
-
Nocode · 3dot141/nocode-evolve@1187dbf — Harrison 的个人工程工作流与规则工具箱,支持 Claude Code、Codex、Qoder、Pi 和 DeepSeek Harness
- Evidence: manifest → patch · Identity:
nocode - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
mcpprocess-controlsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Forge · alex04130/dsh-forge@fae36ff — A broad extension bundle for cross-session mail, agent teams, model routing, runtime injection, skills, and plugin management.
- Evidence: manifest → patch · Identity:
@dsh-forge/bundle - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
multi-agentdynamic-loadingpackage-managementfilesystem-writehigh-trust-surface· Review: The distributable npm bundle, rather than the private root source manifest, declares rc.6 peers; its broad runtime injection and management surfaces were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Computer Use · Anionex/dsh-computer-use@76bfe86 — Computer-use tooling for screen perception and controlled desktop actions.
-
DSH Expert Mode · Asher-2000/dsh-expert-mode@55d5835 — Provides a coordinator persona and eleven domain-expert subagent presets for delegated DSH workflows.
- Evidence: manifest → patch · Identity:
dsh-expert-mode - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
agent-presetsubagent-delegationpersona-injectiongithub-only· Review: A pinned root Git source identity is available while npm has no matching package; no persona, agent realm, or delegation was loaded.
- Evidence: manifest → patch · Identity:
-
DH Multiagents · atesahmet0/dh-workspace@fb1f22c — A role-bound multi-agent bundle with enforced tool matrices, persisted delegation, reusable presets, philosophy skills, and worktree operations.
- Evidence: manifest → patch · Identity:
@dh-multiagents/bundle - Licenses: repo
MIT/ packageunknown· lifecyclepostinstall· declares rc.6 peers - Signals:
multi-agentfilesystem-writegit-worktreemodel-routingpostinstall· Review: The public bundle identity resolves and documentation targets rc.6; its approved postinstall mirrors presets, and no lifecycle or agent action was run.
- Evidence: manifest → patch · Identity:
-
DSH CC Agents · Bcy2020/dsh-cc-ecosystem@486441b — An adapter that turns Claude Code agent definitions into DSH subagents with persona, tool filters, skills, and model aliases.
- Evidence: manifest → patch · Identity:
dsh-cc-agents - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
multi-agentfilesystem-readprompt-injectiontool-filteringmodel-routing· Review: The public package maps to this monorepo; wildcard DSH peers leave compatibility unproven, and no Claude asset or subagent was loaded.
- Evidence: manifest → patch · Identity:
-
DSH Captain Call · Daisy2048/dsh-captain-call@d2b7406 — A desktop call-style notifier for AgentTeams completions with local speech synthesis, optional microphone replies, and archived conversations.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-datafilesystem-readaudiomicrophoneexternal-model-download· Review: Local source installation is documented for the private package; audio, model download, microphone, and AgentTeams state access were not executed.
-
DSH AE Team · ddddjaak/dsh-ae-team@35a7494 — An application-engineering team pack with seven role definitions, professional skills, and Mermaid graph templates for DSH Web.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
multi-agentfilesystem-skillprompt-injectiondynamic-mermaidgithub-only· Review: Source-link installation is documented; the manifest declares no DSH peer range, and no role, skill, prompt, or graph template was loaded.
-
DSH AUX · DoloresCaritasAngelus/DSH-AUX@8c1ef2c — Routes auxiliary LLM tasks for vision, Web extraction, and text compression with fallback, concurrency, and session status controls.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
official-looking-namespacecore-patchinstaller-scriptexternal-networkcredentialsllm-routingsession-data· Review: The independent Git source uses an official-looking unpublished package name and an installer that symlinks files and patches DSH core for image, session, and settings bridges; no installer, patch, or model request was executed.
-
DSH TaskSwarm · february2015/dsh-taskswarm@bec7d32 — Persistent multi-agent task orchestration with dependency waves, isolated worktrees, cross-model review, merge handling, and a live dashboard.
- Evidence: manifest → patch · Identity:
dsh-taskswarm - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
multi-agentgit-worktreefilesystem-writelocal-web-serverprepare-build· Review: The public package maps to this repository, but wildcard DSH peers leave compatibility unproven; no build, agent, Git, merge, or dashboard action was run.
- Evidence: manifest → patch · Identity:
-
DSH Prompt Enhancer · Fishsb/dsh-prompt-enhancer@d42b2b4 — Uses an independent LLM call to rewrite draft prompts in the DSH composer with undo support.
- Evidence: manifest → patch · Identity:
dsh-prompt-enhancer - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
llm-callclient-injectionexternal-networkcredentials· Review: The client peers declare rc.6 and the native patch is present; prompt disclosure to a configured model and updater network behavior were not executed.
- Evidence: manifest → patch · Identity:
-
LinkHealth Intake Triage · fmlin0429712024/linkhealth-triage@fa89c59 — A healthcare business-intake workflow with role prompts, scoring, routing, and a deterministic PHI review guardrail.
- Evidence: manifest → patch · Identity:
linkhealth-intake-triage-dsh - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
healthcare-workflowskillsfilesystem-writehuman-reviewsensitive-datagithub-only· Review: The canonical nested source includes a PHI-to-human-review invariant and writes a local triage log; no health data, role prompt, guardrail, or log write was processed.
- Evidence: manifest → patch · Identity:
-
DSH Timer Scheduler · GMH13552/dsh-timer-scheduler@5b9c563 — Lets an agent schedule a future wake-up and shows reminders in a DSH Web panel.
- Evidence: manifest → patch · Identity:
dsh-timer-scheduler-ui - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
scheduled-wakeupagent-eventslocal-http-serverweb-uigithub-only· Review: The source documents local installation and a future npm release; no timer, wake-up, reminder API, or browser panel was started.
- Evidence: manifest → patch · Identity:
-
DSH Auto Continue 429 · haochi72/dsh-auto-continue-429@924fb42 — Retries DSH sessions after rate-limit errors and exposes a browser toggle for automatic continuation.
- Evidence: manifest → patch · Identity:
dsh-auto-continue-429 - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
rate-limit-recoverysession-continuationclient-injectionbrowser-ui· Review: The fixed source and npm identity both expose 0.1.0 from the same repository; no retry, continuation, session mutation, or browser toggle was executed.
- Evidence: manifest → patch · Identity:
-
DSH Nudge · huangmouren2023/deepseek-harness-toolkit@ea3ed50 — Automatically follows up after terminal failures or interruptions so the agent explains or resumes.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
agent-steeringterminal-eventsprompt-injectiongithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Team · huxint/dsh-team@66835a7 — Persistent named agent teams with shared tasks, mailboxes, virtual workspaces, and a live team room.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
multi-agentsession-datafilesystem-writemailboxclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Ikanban · isomoes/ikanban@5925d26 — Keyboard-oriented iKanban web application bundle for DeepSeek Harness
- Evidence: manifest → patch · Identity:
@isomoes/dsh-ikanban - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionmcpprocess-controldatabasesystem-promptprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Discussion Intent · JinPLu/dsh-plugin-discussion-intent@f81b5d1 — An intent-calibrated discussion mode that keeps complex conversations evidence-led and action-oriented.
- Evidence: manifest → patch · Identity:
@jinplu/dsh-plugin-discussion-intent - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
agent-steeringsystem-promptsession-dataclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Clawock DSH · KCNyu/clawock@428320b — An investment-decision workflow with evidence, an opposing case, deterministic settlement, and a scorecard tab.
- Evidence: manifest → patch · Identity:
clawock-dsh - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
investment-workflowskillsexternal-networkfilesystem-readfilesystem-writeweb-uisource-behind-registry· Review: The nested integration is a real published package, not a fixture; the fixed source is 0.1.6 while npm exposes 0.1.8, and no market fetch, decision, or settlement ran.
- Evidence: manifest → patch · Identity:
-
Orcana Runtime Pack · Leo-Ayh-Oday/dsh-orcana@abf4b60 — A general Orcana runtime profile bundle for DSH.
- Evidence: manifest → patch · Identity:
@leooday/dsh-bundle - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
profile-bundleworkflow-runtimepackage-bundle· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plan Execute · leotangjc/plan-execute@f236fde — A three-stage workflow that grills decisions, compiles plans, and executes with acceptance checks.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
workflow-orchestrationmodel-toolsagent-steeringgithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Voice · meomeo-dev/dsh-voice@b4b989c — Session, workspace, and user-level conversation-tone switching with bundled voice skills.
- Evidence: manifest → patch · Identity:
@meomeo-dev/dsh-voice - Licenses: repo
unknown/ packageunknown· lifecycleprepare· mixed peer ranges - Signals:
system-promptfilesystem-skillclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Agency Agents · MichengAI/dsh-agency-agents@9770f19 — A summonable roster of bundled domain experts with remote and DSH Web integration surfaces.
- Evidence: manifest → patch · Identity:
@michengai/dsh-agency-agents - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepublishOnly· mixed peer ranges - Signals:
expert-agentssubagentsremote-apiclient-injectionweb-uiprepublish-buildsource-behind-registry· Review: The fixed source is 0.1.17 while npm exposes 0.1.19 from the same repository; no build, expert invocation, remote request, subagent, or UI was executed.
- Evidence: manifest → patch · Identity:
-
DSH Waker Trigger · msilita/dsh-waker-trigger@b10322d — Durable any/all triggers over schedules, files, commands, HTTP, processes, and ports that wake an agent at a safe boundary.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
schedulerfilesystem-watchsubprocessexternal-networkagent-events· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Cron · omdsh-dev/dsh-cron@9c4b5fa — Durable cross-session jobs driven by five-field cron rules and injected into agent sessions.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
schedulersession-dataagent-steeringfilesystem-writeprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH LLM Fallbacks · omdsh-dev/dsh-llm-fallbacks@69ec1fe — Adds configurable provider and model fallback chains after retry, authentication, quota, or rate-limit failures.
- Evidence: manifest → patch · Identity:
dsh-llm-fallbacks - Licenses: repo
MIT/ packageunknown· lifecycleprepare· declares rc.6 peers - Signals:
llm-routingclient-injectionprepare-build· Review: The DSH peers declare rc.6 and the fallback row is fixed-source confirmed; prepare builds code and provider switching was not runtime-tested.
- Evidence: manifest → patch · Identity:
-
DSH More Agent Presets · R-LEI2536/dsh-more-agent-presets@fef064f — 多个可选择的 DeepSeek Harness Agent Presets 集合
- Evidence: manifest → patch · Identity:
dsh-more-agent-presets - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Rules · rj-jiangyichen/dsh-rules@dd5d211 — Activates rule prompts and Markdown documents when agent file activity matches configured globs.
- Evidence: manifest → patch · Identity:
dsh-rules - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
filesystem-readfile-globsprompt-injectionagent-eventsprepublish-check· Review: The fixed source and npm identity both expose 0.1.0, though registry metadata does not map the repository; no file matching, rule load, prompt injection, or test was executed.
- Evidence: manifest → patch · Identity:
-
DSH Trellis · SajoLuo/dsh-trellis@401b117 — Trellis workflow integration for DeepSeek Harness: per-turn workflow-state breadcrumbs, utility commands, and native session identity.
- Evidence: manifest → patch · Identity:
dsh-trellis - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
HA Orchestrator · Saktawdi/ha-orchestrator@83b80a6 — Model failover and subagent fanout, pipeline, and supervisor orchestration.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
model-failovermulti-agentworkflow-orchestrationexternal-networkprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Bash Scripting · satan9394/dsh-bash-scripting@e9b421d — Bash 脚本防御模式:set -euo pipefail、参数校验、错误处理、可调试。受 wshobson/agents(38k★ MIT)启发。
- Evidence: manifest → patch · Identity:
dsh-bash-scripting - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH LLM Eval · satan9394/dsh-llm-eval@7690b6a — LLM 评估:输出质量评估、幻觉检测、基准测试、回归守护。受 wshobson/agents(38k★ MIT)启发。
- Evidence: manifest → patch · Identity:
dsh-llm-eval - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Taskboard · shengsheng90/DSH-taskboard@f15e324 — Provides a local project taskboard with cards, attachments, automations, agent tools, and a DSH Web UI.
- Evidence: manifest → patch · Identity:
@shengsheng/dsh-taskboard - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
task-managementfilesystem-writesqliteattachmentsautomationmodel-toolsclient-injection· Review: The fixed source and current public package both expose version 0.1.1; no database, attachment, automation, tool, or browser action ran.
- Evidence: manifest → patch · Identity:
-
DSH Swift Cycle · Solismuchengxue/dsh_plugin_swift_cycle@d44bee7 — A DSH adapter for the Swift Cycle governance skill.
- Evidence: manifest → patch · Identity:
dsh-plugin-swift-cycle - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
governancefilesystem-skillworkflow· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Octie DSH · StarChen-Cycler/octie-dsh-plugin@457bc4e — A persistent task-graph state machine with model tools, a client panel, presets, skills, and immutable snapshots.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
task-graphmodel-toolsfilesystem-writesnapshotidentity-collision· Review: The npm identity maps to the upstream Octie repository, so this record is pinned to the author's documented Git plugin source and does not claim the npm package.
-
DSH Project Kanban · StruggleYang/dsh-project-kanban@1337489 — A workspace-isolated persistent Kanban board with browser UI and model tools.
- Evidence: manifest → patch · Identity:
dsh-project-kanban - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
kanbanmodel-toolsfilesystem-writeclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Yogacara · tancheng33/dsh-yogacara@daa16f8 — A Yogacara self-model with consciousness states, mental factors, durable seeds, and a self-grasping meter.
- Evidence: manifest → patch · Identity:
dsh-yogacara - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
self-modellong-term-memorysystem-promptmodel-toolsprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Expert Team · tipus0731/dsh-expert-team@0d08ec9 — Role-bounded expert agents with acceptance-driven dispatch and unanimous cross-validation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
multi-agenttask-dispatchcross-validationmodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Subagent Roles · trynewthin/dsh-subagent-roles@83f118c — Role-based model routing and Web configuration for subagent delegation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
multi-agentmodel-routingconfiguration-writeclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Qingagent · void2anything/dsh-qingagent@c8e3a7d — DeepSeek Harness × 青简写作桥:QingML 起草工具与右侧宣纸预览。
- Evidence: manifest → patch · Identity:
dsh-qingagent - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionsystem-promptprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Adaptive Performance · winliyou/dsh-plugins@cc3bce5 — Adds adaptive tool and runtime-context behavior for standard DSH agent presets.
- Evidence: manifest → patch · Identity:
@chaoset/adaptive-perf - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
adaptive-performanceagent-toolsruntime-contextsandbox-interactionprepublish-test· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
Computer Use Win · Yu-tao-Li/computer-use-win@27d0e28 — Connects DSH to Windows desktop automation through an MCP server and PowerShell UI Automation backend.
- Evidence: manifest → patch · Identity:
computer-use-win - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
windows-onlycomputer-usemcppowershellsubprocessscreenshotsocrkeyboard-inputmouse-inputhigh-trust-surfacegithub-only· Review: Pinned GitHub installation is documented for the Windows-only MCP bundle; no server, PowerShell process, screenshot, OCR, mouse, keyboard, or desktop action was executed.
- Evidence: manifest → patch · Identity:
Files & Data
-
DSH Usage Billing · 940842546/dsh-usage-billing@96ff9fc — Aggregates model token usage and estimated DeepSeek charges into persistent session and time-range dashboards.
- Evidence: manifest → patch · Identity:
dsh-usage-billing - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-datausage-metricsfilesystem-writeclient-injection· Review: The DSH tools peer declares rc.6 and the fixed source writes aggregated usage data; pricing accuracy and runtime behavior were not verified.
- Evidence: manifest → patch · Identity:
-
DSH Input File Ref · AFAP/dsh-input-file-ref@fe62f66 — An at-mention file picker that browses and searches relative workspace paths before inserting the selected path into chat.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-metadataworkspace-readclient-injectionweb-routegithub-only· Review: GitHub installation is documented; the host lists relative path metadata behind a same-origin trust fence, and no filesystem access was exercised.
-
DSH Usage · Aisland-SJL/dsh-usage@4b9a952 — Shows persistent balances and token-usage dashboards across DSH sessions and optional Claude Code usage logs.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datacredentialsexternal-networkfilesystem-writeidentity-collision· Review: The author documents GitHub-source installation; the private manifest name collides with another npm repository, so no npm identity is listed and usage, balance, and file access were not executed.
-
DSH Session Export · bwndlct/dsh-session-export@eb18389 — Exports DeepSeek Harness sessions into portable files for reuse or archival.
-
DSH File · chengzhi43/dsh-file@ae933f7 — A VS Code-style browser, editor, and markdown viewer for files in the current DSH workspace.
- Evidence: manifest → patch · Identity:
dsh-file - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
filesystem-readfilesystem-writeweb-uimarkdownsource-ahead-registry· Review: The fixed source is 0.1.0 while npm exposes 0.0.1 without repository metadata; file reads, edits, markdown rendering, and browser loading were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Cloud Sync · dickpy/dsh-cloud-sync@fa3dfa5 — Synchronizes portable DSH profiles and local plugin sources through WebDAV or object storage.
- Evidence: manifest → patch · Identity:
@dickpy/dsh-cloud-sync - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
cloud-syncfilesystem-readfilesystem-writecredentialsexternal-networkrelease-check· Review: The fixed source is 0.20.0 while npm exposes 0.20.5 without repository metadata; no profile upload, download, credential use, or release check was executed.
- Evidence: manifest → patch · Identity:
-
DSH Drag to Attachment · djt889/dsh-drag-to-attachment@620ad6e — Turns dropped or pasted host files and folders into DSH attachments or absolute filesystem paths.
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-drag-to-attachment - Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· compatibility unknown - Signals:
native-executablesubprocessfilesystemfolder-attachmentabsolute-pathclient-injection· Review: GitHub installation is documented and the package bundles an Everything helper executable for local path discovery; no binary, subprocess, or file operation was executed.
- Evidence: manifest → patch · Identity:
-
GEML DSH Plugin · geml-spec/geml@6048f6e — Adds addressable document blocks to DSH through the GEML MCP server and bundled authoring skills.
- Evidence: manifest → patch · Identity:
@geml/dsh-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
mcp-stdiosubprocessdocument-editingskillsfilesystem-readfilesystem-writesource-ahead-registry· Review: The fixed integration is 1.0.1 while npm exposes 1.0.0 from the same repository; no npx subprocess, MCP request, skill, or document edit was executed.
- Evidence: manifest → patch · Identity:
-
DSH Drag-and-Drop Upload · GLFzr/dsh-file-upload@54891a4 — Adds drag-and-drop uploads to the DSH Web composer and stores files in a local dropbox directory.
- Evidence: manifest → patch · Identity:
dsh-file-upload - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
file-uploadfilesystem-writeweb-routesclient-injection· Review: The dual host/client bundle is structurally confirmed; upload routes and filesystem writes were not runtime-tested.
- Evidence: manifest → patch · Identity:
-
DSH File Upload · HongMing-Huang/dsh-file-upload@7aac111 — Composer file upload with removable chips, content sniffing, Markdown conversion, and document tools.
-
DSH File Picker · JackeyWilder/dsh-file-picker@a8741fb — A native Windows file picker and attachment rail that injects selected paths into the session.
- Evidence: manifest → patch · Identity:
@jackeywilder/dsh-file-picker - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
native-dialogfilesystem-readsession-dataclient-injectionwindows· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH FileScope · KunIsMe/dsh-filescope@e84692e — A workspace file-explorer drawer with live file previews.
- Evidence: manifest → patch · Identity:
dsh-filescope - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-readfile-previewclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Tree · lyhue1991/dsh-tree@31130cd — DSH 项目资源管理器:右侧 details 列文件树(并列网格、宽度与左侧工作区一致 264-420px),Session log 右侧 📁 切换按钮;支持多选、双击展开/打开、右键菜单(系统打开/重命名/废纸篓/新建/复制路径)、拖拽移动、上传。
- Evidence: manifest → patch · Identity:
@lyhue1991/dsh-tree - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystemexternal-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH DBHub Live · mr-mihu/dsh-dbhub-live@77b8bbd — Bridges DBHub into DSH with persistent multi-source servers, workspace tools, and temporary database connections.
- Evidence: manifest → patch · Identity:
dsh-dbhub-live - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
databasemcpexternal-networkcredentialsmodel-toolsworkspace-data· Review: The fixed source and npm identity both expose 2.0.0 from the same repository; no database, MCP server, credential, network connection, or agent tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Download Progress · nanshanzhaoji/dsh-download-progress@052917d — Adds a download tool with percentage tracking and a floating progress panel in DSH Web.
- Evidence: manifest → patch · Identity:
dsh-download-progress - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
file-downloadexternal-networkfilesystem-writemodel-toolsclient-injectiongithub-only· Review: A fixed GitHub source identity is available while npm has no matching package; no download, file write, HTTP route, or browser panel was executed.
- Evidence: manifest → patch · Identity:
-
DSH Explorer · No-PRM/dsh-explorer@2b21a68 — An aggregate host and browser file explorer with tree browsing, search, Git status, media preview, and drag-to-reference.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
filesystem-readfile-searchgit-statusmedia-previewclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Chat Import · Nwflower/dsh-chat-import@3c751ce — Imports conversation histories from major coding agents and chat products as resumable DSH sessions.
- Evidence: manifest → patch · Identity:
dsh-chat-import - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
session-importfilesystem-readsession-dataprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH At File · omdsh-dev/dsh-at-file@9c71e52 — Codex-style @file mentions that search workspace paths and attach file contents to prompts.
-
DSH Files · taxueseek/dsh-files@43887e2 — File upload cards, session-scoped storage, deduplication, cleanup, and document reading tools.
-
DSH Archived Sessions · TOBYCAI/dsh-archived-sessions@a4e3cfe — DSH 设置面板「归档会话」管理器:查看、恢复、彻底删除已归档的 session,带所属工作区标签与会话日期。
- Evidence: manifest → patch · Identity:
dsh-archived-sessions - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Browser FS · whitefirer/dsh-browser-fs@d144aaf — Lets agents list, read, and write within a browser-authorized local directory over a WebSocket relay.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
browser-filesystemfilesystem-readfilesystem-writewebsocketmodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH DeepSeek Attach · wqx-txdsyl/dsh-ds-attach@9cc7bab — DeepSeek-style file cards, drag-and-drop, document text extraction, and message injection for DSH attachments.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
file-uploaddocument-extractionfilesystem-writesession-dataclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH File Explorer · Zalpha263/dsh-file-explorer@6cca848 — Provides a persistent web file tree with preview, editing, context actions, upload, download, and archive tools.
- Evidence: manifest → patch · Identity:
dsh-file-explorer - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
file-managerfilesystem-readfilesystem-writearchive-operationsclient-injectionsource-registry-version-drift· Review: The fixed source version is ahead of the current matching registry release; identity was reviewed statically and no file or UI action ran.
- Evidence: manifest → patch · Identity:
-
Cordis Transfer Plugin · zby1211/cordis-transfer-plugin@c99f767 — Imports and exports dynamic Cordis plugins as ZIP packages through the browser.
- Evidence: manifest → patch · Identity:
cordis-transfer-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
plugin-exportplugin-importfile-uploadfilesystem-writemodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Drop Any File · Zenjibad/dsh-drop-any-file@959a233 — Extends DSH Web drag-and-drop to accept arbitrary file types and save them as session attachments.
- Evidence: manifest → patch · Identity:
dsh-drop-any-file - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
drag-and-dropattachmentsfilesystem-writeclient-injectiongithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Search Multi · zmh2000829/dsh-web-search-multi@558e750 — Configurable SearXNG, Brave, Tavily, Gemini, and Wikipedia search provider for DeepSeek Harness
- Evidence: manifest → patch · Identity:
dsh-web-search-multi - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controldockerprepareprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
Vision & Media
-
DSH LLM Vision · 1710782766/dsh-llm-vision@8ff56db — Image description and OCR tools backed by an OpenAI-compatible vision endpoint.
- Evidence: manifest → patch · Identity:
dsh-llm-vision - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
visionocrexternal-networkcredentialsfilesystem-cacheclient-injection· Review: The fixed source matches npm 0.1.0; endpoint calls, image processing, credentials, cache writes, and client injection were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Vision Toolkit · Anionex/dsh-vision-toolkit@29850a8 — Vision tools for image Q&A, long-screenshot OCR, UI reproduction, grounding, and pixel diff.
- Evidence: manifest → patch · Identity:
@anionex/dsh-vision-toolkit - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
browsersubprocesscredentialspython-environment· Review: High-privilege runtime preparation is visible; compatibility requires a separate check.
- Evidence: manifest → patch · Identity:
-
DSH Codex Media · binsarjr/dsh-codex-media@4dba264 — Adds local image and document analysis plus image generation through Codex CLI or configurable API transports.
- Evidence: manifest → patch · Identity:
dsh-codex-media - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
local-filesubprocessexternal-networkcredentialsimage-generation· Review: The native row loads source that can read files, spawn the local Codex CLI, call APIs, and write generated images; none of those paths were executed.
- Evidence: manifest → patch · Identity:
-
DSH Vision · cdxDNRF/dsh-vision@e10ec00 — Bridges images to an OpenAI-compatible vision endpoint and exposes automatic descriptions, a vision tool, and settings UI.
- Evidence: manifest → patch · Identity:
@cdxdnrf/dsh-vision - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsfilesystem-readsubprocessmodel-toolsclient-injectiongithub-only· Review: A fixed GitHub source identity exists while npm has no matching scoped package; no image read, proxy lookup, credential resolution, network request, or model tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Blender · CheshireJCat/blender@3d641da — A Blender integration that exposes 3D scene authoring through DSH tools.
-
DSH Chat Imagine · corrinehu/dsh-chat-imagine@419e39b — Image-generation tools that use configured OpenAI-compatible providers or a detected local MiniMax CLI and render results in chat.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
image-generationexternal-networkcredentialssubprocessin-memory-media· Review: GitHub installation and rc.6 tools are documented; provider requests, CLI discovery, subprocesses, and image generation were not executed.
-
DSH ChatVoice · FuzzySoul/dsh-chatvoice@34b4a18 — Browser-native speech input and reply read-aloud without a separate API key.
- Evidence: manifest → patch · Identity:
dsh-chatvoice - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
microphonebrowser-speechclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Image Bridge · haitang1/dsh-image-bridge@4c7e7a9 — Writes pasted images into the workspace and exposes hidden paths so text models can call vision tools.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
image-inputfilesystem-writeprompt-injectionmodel-toolssession-data· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Diagram · hanzhangzzz/dsh-diagram@480d3b3 — Editable Excalidraw diagrams embedded in DeepSeek Harness conversations.
-
DSH DashScope Media · hisonWarren/deepseekharness-alter@efb651d — DashScope-backed image, video, and speech tools with in-chat media cards.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
image-generationvideo-generationtext-to-speechcredentialsexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Image Gen · hoyyang/dsh-image-gen@304fb01 — DSH 通用图像生成插件:接入任意 OpenAI 兼容生图网关(自定义 baseUrl + 模型 + API Key),设置页可视化配置。工具 dsh_image_gen / dsh_image_gen_config + 命令 /dsh-image-gen + skill。
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-image-gen - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DirectorX · LaplaceYoung/dsh-directorx@5553398 — AI video generation, editing, quality review, storyboard canvas, and a director knowledge library.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
video-generationvideo-editingquality-controlfilesystem-writeexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Qwen Voice · leaveimagination/dsh-qwen-voice@c63fed7 — DSH Qwen Voice plugin package.
- Evidence: manifest → patch · Identity:
dsh-qwen-voice - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
ModLens · liustack/modlens@2818192 — A vision bridge that turns images into structured OCR, layout, and semantic evidence for text-only models.
-
DSH Vision Opencode · poiuyjie/dsh-vision-opencode@d01f809 — DeepSeek Harness plugin: configurable vision model with vision_read_image tool, composer-bar vision-model selector, and automatic image-to-text conversion for text-only main models.
- Evidence: manifest → patch · Identity:
dsh-vision-opencode - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Multimodal Client · SCT192221/dsh-multimodal@c0e0122 — Multimodal client plugin for DeepSeek Harness: inline image rows for generate_image/show_image tool cards, a turn-tail image gallery, and the multimodal settings page. Companion to the dsh-multimodal host plugin.
- Evidence: manifest → patch · Identity:
dsh-multimodal-client - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
credentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH SiliconFlow Vision · ShiXiangYu2/dsh-siliconflow-vision@911c63b — Analyzes local, remote, and data-URL images through SiliconFlow vision models and exposes a persistent web panel.
- Evidence: manifest → patch · Identity:
dsh-siliconflow-vision - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
vision-modelexternal-networklocal-file-readcredentialsclient-injection· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
Narrative Voice · TellToday/dsh-narrative-voice@7b4d13e — A DSH (DeepSeek Harness) bundle plugin that rewrites the ask_user_question tool description at prompt-assembly time with a fixed narrative-voice rule (default: the answerer narrates), toggled live via the /voice command.
- Evidence: manifest → patch · Identity:
@dsh-user/narrative-voice - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkprocess-controlsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH MMX Bridge · welsione/dsh-mmx-bridge@03a8789 — Bridges MiniMax multimodal image, video, speech, music, search, quota, and preview capabilities into DSH.
- Evidence: manifest → patch · Identity:
dsh-mmx-bridge - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
multimodalcredentialsexternal-networkweb-searchimage-generationaudiovideomodel-toolsclient-injection· Review: The fixed source and npm identity both expose 1.0.3 from the same repository; no credential, request, generation, search, media load, or client enhancement was executed.
- Evidence: manifest → patch · Identity:
-
DeepSee · WUBING2023/deepsee@7431a43 — Vision reading, model-capability discovery, and multi-model routing with optional OCR installation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
visionmodel-routingexternal-downloadsubprocessinstall-script· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DeepSeek Visionary DSH · xlight/deepseek-visionary@e3cf51c — Native vision, status, login, and logout tools backed by a Visionary server CLI and an image bridge.
- Evidence: manifest → patch · Identity:
@xlight-oss/visionary-dsh - Licenses: repo
MIT/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
visionsubprocesscredentialsexternal-networkmodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Capture Window · Yidien/dsh-capture-window@3f5d383 — 旁路捕获窗 + /recall 引擎:把想法投进一个安静的独立新会话,压缩当前会话最近 10 句作为背景(不进主线上下文、不切主线视图)
- Evidence: manifest → patch · Identity:
dsh-capture-window - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
client-injectionprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Vision Router · ysr666/dsh-vision-router@d805a71 — A vision routing bundle with image Q&A, grounding, OCR, pixel inspection, screenshots, and provider chains.
- Evidence: manifest → patch · Identity:
dsh-vision-router - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkbrowserfile-uploadfilesystem-writenative-code· Review: The fixed manifest and patch declare rc.6 DSH peers; network providers, browser automation, file writes, and native image dependencies were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Read Image · Yu-tao-Li/dsh-read-image@f6ab53b — Renders read_image tool results as images in DSH Web through the durable attachment store.
- Evidence: manifest → patch · Identity:
dsh-read-image - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
image-renderingattachmentstool-resultsclient-injectiongithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Vision Bridge · YUCONG-28/dsh-skills-plugins@92f1316 — Routes image requests through local OCR, cached evidence and configurable remote vision providers.
- Evidence: manifest → patch · Identity:
dsh-vision-bridge - Licenses: repo
MIT/ packageMIT· lifecyclepostinstall· compatibility unknown - Signals:
vision-routingocrnative-helper-buildpostinstallexternal-networkcredentialsfilesystem-write· Review: The fixed monorepo source, nested license, patch and documented file-source identity were reviewed statically; postinstall, native OCR helper, providers, tests and plugins were not run.
- Evidence: manifest → patch · Identity:
-
DSH Realtime Voice · zfu691531-hash/dsh-realtime-voice@91aae22 — Realtime speech-to-speech using Qwen or OpenAI-compatible providers.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
microphoneaudiocredentialsexternal-networkprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Vision Bridge · zzdream67/dsh-vision-bridge@f91c8db — Let text-only models see images in DeepSeek Harness: intercepts the llm/stream waterfall and transparently substitutes each image with a vision model's description.
- Evidence: manifest → patch · Identity:
@zzdream67/dsh-vision-bridge - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controlprepareprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
Search & Research
-
DSH Search · 2982136527/dsh-plugins@b8b03b1 — Provides model-callable Web search through Bing RSS with a DuckDuckGo fallback and no required API key.
- Evidence: manifest → patch · Identity:
dsh-search - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
web-searchexternal-networkgit-source· Review: The fixed monorepo subdirectory and patch are confirmed; the author documents clone-plus-local-path installation, and the repository has no detected license file.
- Evidence: manifest → patch · Identity:
-
DSH Web Tools · A3Boy/dsh-web-tools@ff35019 — Unifies multiple Web search and fetch providers with credential pools, quotas, health tracking, and deterministic fallback.
- Evidence: manifest → patch · Identity:
dsh-web-tools - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
external-networkcredentialsweb-searchremote-contentclient-injection· Review: The fixed peers declare rc.6; provider calls, credential handling, quota logic, fallback behavior, and the prepare build were not executed.
- Evidence: manifest → patch · Identity:
-
DSH KB RAG · Breeze136/dsh-kb-rag@2ba96b7 — Local literature RAG with hybrid retrieval, reranking, citations, and a SQLite-backed Python engine.
- Evidence: manifest → patch · Identity:
dsh-kb-rag - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
literature-searchfilesystem-readfilesystem-writepython-subprocessmodel-downloadsource-behind-registry· Review: The fixed source is 1.0.7 while npm now exposes 1.1.0 from the same repository; no Python daemon, file ingestion, model download, index mutation, or search was executed.
- Evidence: manifest → patch · Identity:
-
Openanalyst · Chenmo0414/openanalyst@eb2df0d — Turn DeepSeek Harness into a data analyst: attach CSV/Parquet/JSON, auto-profile, query, and render real charts inside the conversation.
- Evidence: manifest → patch · Identity:
openanalyst - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Search Multi · cinob/dsh-web-search-multi@ea1c2d0 — Provides multi-provider Web search with automatic fallback, credentials, and a settings interface.
- Evidence: manifest → patch · Identity:
dsh-web-search-multi - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsworkspace-writeprovider-fallbacksettings-ui· Review: Wildcard DSH peers and multiple external search providers are declared, with documented workspace-write capability; no provider request or write was executed.
- Evidence: manifest → patch · Identity:
-
DSH Tool Web Enhanced · edusrez/dsh-tool-web-enhanced@591d9b9 — Extends DSH web search with topic filtering and an optional SearXNG result section.
- Evidence: manifest → patch · Identity:
dsh-tool-web-enhanced - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
web-searchexternal-networksearxngmodel-toolsprepack-build· Review: The fixed source is 0.1.0-rc.1 while npm exposes 0.3.0-rc.1 from the same repository; no search, SearXNG request, tool call, or prepack build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Access · haibinwang9/dsh-web-access@1eaffaf — Multi-provider Web search and URL extraction with fallback across SearXNG, Tavily, Brave, and DuckDuckGo.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
web-searchcontent-extractioncredentialsexternal-networkprovider-fallback· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH PCB Parts Search · Huaqiu-Electronics/dsh-pcb-parts-search@7b02c04 — A model tool for searching electronic components and ICs from the LCSC/EDA parts service.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
parts-searchmodel-toolsexternal-networkprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Semantic Search · JohnXu22786/semantic-search@601c3f5 — A DeepSeek Harness (dsh) plugin for local semantic code search. Builds a fragment-level index of a workspace (symbol-aware chunking for many languages), computes local embeddings (lightweight lexical TF-IDF feature vectors by default, or a configurable OpenAI-compatible embedding endpoint), and answers natural-language queries with hybrid retrieval (vector cosine + BM25, fused with reciprocal-rank fusion). Ships dsh tools sema_search / sema_reindex / sema_stats plus a stand-alone CLI.
- Evidence: manifest → patch · Identity:
dsh-semantic-search - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Search Boost · Mr-remon219/dsh-search-boost@af80be8 — Fuses multiple Web and X search engines with page fetching and parallel research workflows.
- Evidence: manifest → patch · Identity:
dsh-search-boost - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialssubprocessbrowsermulti-agent· Review: The bundle row and search-provider override are fixed-source confirmed; external engines, credentials, subprocesses, and research fan-out were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Paper Daily · mrywwww/dsh-paper-daily@780aa46 — Collects daily condensed-matter papers from arXiv and selected APS journals with optional summaries.
- Evidence: manifest → patch · Identity:
dsh-paper-daily - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
research-feedexternal-networkmodel-requestcredentialsfilesystem-writeclient-injection· Review: The fixed source, licenses, native bundle structure and GitHub-source install identity were reviewed statically; feeds, summaries, credentials and UI were not run.
- Evidence: manifest → patch · Identity:
-
DSH Journal Monitor · SIMON-WORLD/dsh-journal-monitor@a97982e — Monitors economics journals and working papers, filters new items, persists deduplication state, and sends scheduled digests.
- Evidence: manifest → patch · Identity:
dsh-journal-monitor - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
research-monitoringexternal-networkrsswebhookfilesystem-writeschedulermodel-toolsgithub-only· Review: A fixed GitHub source identity is documented; no journal request, feed parse, state write, webhook, scheduler, probe, or test was executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Search Exa · TonyDua/dsh-web-search-exa@083706b — Exa-powered web search exposed to DSH as agent tools and Web settings.
-
DSH Free Search · zhouzhencheng07/dsh-free-search@2336dad — A keyless multi-source Web search provider wired into the native DSH Web seam.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
web-searchexternal-networkprovider-fallbackidentity-collision· Review: The npm identity maps to another repository, so this record is pinned to the author's documented Git source and does not claim that package.
Memory
-
DSH Memory · chenhw7/dsh-memory@e5e35ce — A persistent cross-session memory bundle with storage, tools, extraction, review, and context injection.
- Evidence: manifest → patch · Identity:
@chenhw7/dsh-memory - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
persistent-memoryfilesystem-writemodel-toolscontext-injectionprepare-buildgithub-only· Review: GitHub installation requires an explicitly allowed prepare build and mixed rc.5 peer declarations; no build, storage, extraction, or context injection was executed.
- Evidence: manifest → patch · Identity:
-
DSH Vibe Math · ChongCyrus/Vibe-Mathematics@e77c7eb — Multi-agent mathematical problem-solving & verification frameworks for DeepSeek Harness — TWO agent presets in one install: vibe-math-v1 (classic pipeline: brainstorm → solver iteration → multi-verifier debate → Verified) and vibe-math-v2 (new probability-driven architecture: qs.json + Propos knowledge base + explorer→solver→review/debate verdict). Installing this bundle auto-installs both presets into the DSH preset root.
- Evidence: manifest → patch · Identity:
dsh-vibe-math - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Self Memory · cyanxi69-jpg/dsh-self-memory@5c58b33 — A file-backed memory plugin with weighted keyword recall, generalized problems, and contradiction-aware solutions.
- Evidence: manifest → patch · Identity:
dsh-self-memory - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
persistent-memoryfilesystem-writekeyword-searchcontext-injectionlocal-install· Review: The fixed source documents local-directory installation and stores generalized problem history on disk; no memory import, retrieval, or write was performed.
- Evidence: manifest → patch · Identity:
-
DSH AgentMemory · elementor-i/dsh-agentmemory@4a4c124 — Bridges DSH memory tools, activity capture, and context injection to a local AgentMemory REST server.
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-agentmemory - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
persistent-memorylocal-http-clientmodel-toolsactivity-capturecontext-injectiongithub-only· Review: The plugin requires a separately running local AgentMemory service and exposes a broad HTTP escape tool; no service call, capture hook, or prompt injection was executed.
- Evidence: manifest → patch · Identity:
-
DSH SGME · freehul/sgme@d5d98a6 — Bridges DSH agents to the SGME shared long-term memory service over HTTP.
- Evidence: manifest → patch · Identity:
dsh-sgme - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
long-term-memoryexternal-networkmodel-toolscommandsprepublish-build· Review: The nested fixed source and npm identity both expose 0.2.0; repository documentation maps the root Git wrapper to it, and no memory request, command, tool, or prepublish build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Native Memory · highland0971/dsh-native-memory@270e235 — Workspace-scoped long-term memory with native storage, cross-session recall, approvals, and provenance.
- Evidence: manifest → patch · Identity:
dsh-native-memory - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
long-term-memorysession-dataapproval-gatestorage-domainprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
iHow Memory · iHow1/dsh-ihow-memory@c530943 — A local-first shared memory plugin exposed to DSH through an MCP client.
- Evidence: manifest → patch · Identity:
dsh-ihow-memory - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
long-term-memorymcplocal-servicefilesystem-writeprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Layered Memory · JunNanLYS/dsh-layered-memory@6e06980 — L0~L3 分层蒸馏记忆插件 for DeepSeek Harness:自动捕获对话(L0)、抽取原子记忆(L1)、整合场景块(L2)、蒸馏核心画像/团队方法论(L3),并在模型步骤前自动召回注入。移植自 MemoryCore (TencentDB Agent Memory) 的管线设计。
- Evidence: manifest → patch · Identity:
dsh-layered-memory - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectiondatabasesystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Session Summarizer · KhalilYamber/dsh-session-summarizer@7a115c3 — Reads recent or selected sessions and generates a compact context summary.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datasummarizationmodel-requestlocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Context Structurer · kkkkkklze/dsh-context-structurer@0420f4c — Splits conversations into typed subcontexts and indexes them with a structured table of contents.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datacontext-indexfilesystem-writelocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Unified Agent Memory · Noelune/unified-agent-memory@b6a879c — A unified memory layer for retaining and retrieving agent knowledge across work.
-
Folio DSH Tools · nyantused-cpun/folio@91f3d36 — Model tools and guards that expose the Folio memory and quality CLI through a Python subprocess.
- Evidence: manifest → patch · Identity:
@nyantused/folio-dsh-tools - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
long-term-memorymodel-toolssubprocessfilesystem-writeguard· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Simple Wiki Memory · rainow/dsh-simple-wiki-memory@563989a — Maintains a Git-backed wiki memory workspace with reference, pending, archive, and memory-log areas.
- Evidence: manifest → patch · Identity:
dsh-simple-wiki-memory - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
persistent-memoryfilesystem-writegit-repositorysystem-promptgithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Recall · Relistencode/dsh-recall@23f9103 — Local offline literal, fuzzy, and semantic search over original conversation history.
- Evidence: manifest → patch · Identity:
dsh-recall - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datalocal-searchsemantic-searchfilesystem-read· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Rag · satan9394/dsh-rag@2dcd65e — RAG 检索增强生成:向量数据库、嵌入、语义搜索、减少幻觉、来源引用。受 wshobson/agents(38k★ MIT)启发。
- Evidence: manifest → patch · Identity:
dsh-rag - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Knowledge · Soren-ABT/dsh-knowledge@a0ad107 — Manages document knowledge bases with chunking, embeddings, retrieval, model tools, and a browser panel.
- Evidence: manifest → patch · Identity:
dsh-knowledge - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
knowledge-basedocument-processingfilesystem-writeembeddingsexternal-networkmodel-toolsclient-injectionprepare-build· Review: The fixed source is 0.2.11 while npm exposes 0.2.12 from the same repository; no build, parsing, embedding, retrieval, storage, or tool ran.
- Evidence: manifest → patch · Identity:
-
DSH Engramory · tinqiao-oss/engramory@4a9b392 — Curated file-based long-term memory with Markdown notes, a shared plain-file store, and a deterministic index cap.
- Evidence: manifest → patch · Identity:
dsh-engramory - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
long-term-memoryfilesystem-readfilesystem-writeguard· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
W117C DSH Memory · W117C/dsh-memory@78fce61 — Implements a cognitive memory system with SQLite vector storage, local embeddings, tools, and a web panel.
- Evidence: manifest → patch · Identity:
@dsh-plugins/memory - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
persistent-memorysqlitenative-dependencieslocal-embeddingsfilesystem-writemodel-toolsclient-injectiongithub-only· Review: A fixed GitHub source identity is documented; no native dependency, database, embedding model, memory tool, or browser panel was loaded.
- Evidence: manifest → patch · Identity:
Safety & Approvals
-
DSH Popper · 1473382/dsh-popper@d6130c0 — A falsification-driven session loop with claim gates, competing hypotheses, and an append-only evidence ledger.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
system-prompttool-gatingsession-datafilesystem-writegithub-only· Review: Git-source installation is documented, but the unpublished scoped package name and manifest repository field do not establish an official npm identity; no gate or session write was executed.
-
DSH Multi Folder · AngelosZou/dsh-multi-folder@420416b — DeepSeek Harness plugin: secondary working directories for a project. The agent keeps the primary workspace as cwd, gains equal write/exec permissions on configured secondary directories under workspace-write mode, and is notified of configuration changes at the next message boundary. Configurable from the session header AND from the session-creation page (before the first message) through a sessionless multiFolder remote API.
- Evidence: manifest → patch · Identity:
dsh-multi-folder - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injectionprocess-controlsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Turn Approval · arrow949/dsh-turn-approval@5b4cbfd — Turn-scoped approval rules that expire after the current task.
-
YOLO Mode · CanGeng/yolo-mode@78bf20c — Adds a human-controlled unattended mode that can arm danger-full-access and never-approval with guards and notifications.
- Evidence: manifest → patch · Identity:
yolo-mode - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
permission-changedanger-full-accessapproval-policysubprocessexternal-networkcredentialsgithub-only· Review: The fixed bundle explicitly changes permission and approval posture; no arming, command guard, subprocess, webhook, desktop, or email behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Island · cdxiaodong/dsh-island@c7cd407 — A macOS menu-bar island and whale companion that displays DSH sessions, tools, progress, and approval requests.
- Evidence: manifest → patch · Identity:
dsh-island - Licenses: repo
unknown/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
native-executablesubprocesstool-argumentsapprovalsession-data· Review: The source spawns a bundled macOS panel and forwards tool arguments, session paths, and approval decisions over a local socket; no native code or prepublish hook was executed.
- Evidence: manifest → patch · Identity:
-
DSH Write Gate · couldbeme/dsh-write-gate@de8c581 — Applies deterministic and optional model-judged commitment policies before agent write operations.
- Evidence: manifest → patch · Identity:
dsh-write-gate - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
pre-execution-policymodel-toolsexternal-networkfilesystem-readprepublish-build· Review: The fixed source and npm identity both expose 0.1.1 from the same repository; no policy file read, model judge, tool interception, build, or test was executed.
- Evidence: manifest → patch · Identity:
-
DSH Workspace Only · CsBpRd/dsh-workspace-only-plugin@a2682d3 — Adds a policy switch intended to confine file access for every sandbox mode to the session workspace.
- Evidence: manifest → patch · Identity:
dsh-workspace-only-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
approval-hookcore-patchremote-installerfilesystem-writepolicy-control· Review: The documented setup downloads an installer and patches DSH core plus another plugin to alter approval policy; the installer and patch scripts were not executed.
- Evidence: manifest → patch · Identity:
-
Handcraft Mode · DianranQian/handcraft-mode@470b907 — Adds a host-side tool gate and a client settings toggle that keeps the agent advisory-only.
- Evidence: manifest → patch · Identity:
handcraft-mode - Licenses: repo
unknown/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
tool-gatingsettings-writeclient-injectionprepare-buildgithub-only· Review: The package declares MIT but no repository license file or npm package was found; the pinned root Git bundle is structurally complete, and no prepare build, tool gate, or UI was executed.
- Evidence: manifest → patch · Identity:
-
Deepseekeyes · dttxorg/deepseekeyes@e3a347b — Auditable vision and cross-platform Computer Use runtime for DeepSeek Harness with source-preserving evidence.
- Evidence: manifest → patch · Identity:
@dttxorg/deepseekeyes - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionmcpbrowserprocess-controlfinancialprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Pentester · fb0sh/dsh-pentester@d4e0348 — Pentesting agent plugin for DeepSeek Harness
- Evidence: manifest → patch · Identity:
dsh-pentester - Licenses: repo
MIT/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
external-networkprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Fact Gate · HiNEM66/dsh-fact-gate@04d6568 — Applies fact-forcing gates to edits, writes, PowerShell operations, and dangerous code-mode APIs.
- Evidence: manifest → patch · Identity:
dsh-fact-gate - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
tool-gatingfilesystem-write-policyshell-policycode-mode-policygithub-only· Review: A pinned root Git source exists while npm has no package; no edit, write, shell, code-mode, or test behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Auth · hxy91819/dsh-auth@ea8e827 — A single-account authentication bundle designed to run behind Nginx for DSH Web.
- Evidence: manifest → patch · Identity:
dsh-auth - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
authenticationcredentialsreverse-proxysession-dataprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Iterate Plugin · jingzhao-l/iterate-plugin@eb5ccf5 — A DSH plugin that turns the iterate skill into an autonomous closed-loop harness for planning, parallel review, atomic fixes, validation, convergence, auto-stop, and meta-review.
- Evidence: manifest → patch · Identity:
iterate-plugin - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-controlsystem-promptprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Approval LLM · Letter2025/dsh-approval-llm@af70355 — An LLM-assisted approval layer for evaluating sensitive tool actions.
-
DSH Bundle Dedup Guard · Lstalu/dsh-bundle-dedup-guard@f6bccc7 — Checks profile bundle lists for duplicate loader entries before they cause DSH boot failures.
- Evidence: manifest → patch · Identity:
dsh-bundle-dedup-guard - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
profile-bundlesconfiguration-readloader-guardprepack-check· Review: The fixed source and npm identity both expose 0.1.0 from the same repository; no profile read, loader interception, check, test, or prepack behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Guard · MangShe3-0/dsh-plugin-guard@d8a5bae — Provides a read-only, offline-first static scanner for DSH plugin source and package metadata.
- Evidence: manifest → patch · Identity:
dsh-plugin-guard - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
security-scanningfilesystem-readpackage-metadatamodel-toolsgithub-only· Review: A matching fixed GitHub source exists while npm has no package; no target plugin, scanner, CLI, filesystem read, tool, or test was executed.
- Evidence: manifest → patch · Identity:
-
Upstream Radar · MicroMilo/upstream-radar@0519c00 — Dependency security monitoring for vulnerable transitive paths and breaking plugin updates.
- Evidence: manifest → patch · Identity:
upstream-radar - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepublishOnly· compatibility unknown - Signals:
dependency-auditvulnerability-dataexternal-networkfilesystem-readprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Sandbox Micro · omdsh-dev/dsh-sandbox-micro@31cbb2f — DSH microsandbox bundle: Linux microVM shell executor and ctx.sandbox provider (msb run) with workdir/env preservation, fail-closed probing, and shell-free argv construction
- Evidence: manifest → patch · Identity:
@deepseek-ai/dsh-sandbox-micro - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
external-networkprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Risk Rule Design · pypcfx-glitch/risk-rule-design@3169f80 — DeepSeek Harness 第三方插件:金融风控规则挖掘。数据质检、连续变量阈值遍历、单规则挖掘、逐层遍历树并行(OR)组合搜索(F1 平衡最优)并输出自包含 HTML 分析报告。纯 JS 零依赖。
- Evidence: manifest → patch · Identity:
dsh-plugin-risk-rule-design - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-network· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Check · stimQQ/dshplugins@b48002d — Audits installed plugins for broken packages, stale DSH pins, and install-time code, then drafts repair issues.
- Evidence: manifest → patch · Identity:
dsh-plugin-check - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-auditdependency-auditlifecycle-scanissue-drafting· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Prior Probe · SuTang-vain/dsh-self-harness-tools@373b454 — Frozen probe batteries with deterministic offline scoring and optional single-shot provider calls.
- Evidence: manifest → patch · Identity:
dsh-prior-probe - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
evaluationregex-scoringmodel-toolsexternal-networkcredentials· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DeepSeek Harness Auth · taichuy/deepseek-harness-auth@5399726 — A fail-closed password authentication proxy bundle for the DSH Web profile.
- Evidence: manifest → patch · Identity:
deepseek-harness-auth - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
authenticationreverse-proxycredentialsprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Trust Center · TonyWang-hub/dsh-plugin-trust-center@ba0b0aa — Evidence-first static inspection, compatibility checks, quarantine, receipts, snapshots, and controlled promotion for DSH plugins.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
plugin-auditquarantinesbomsnapshotprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Defensive Prompt Injection · Tough-Respawn/defensive-prompt-injection@7384be5 — A fail-closed action gate that applies defensive prompt-injection rules inside DSH.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
prompt-injection-defenseapproval-gatefilesystem-readlocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Auth Plugin · v1xingyue/dsh-auth-plugin@dec45bf — Adds password, OAuth, Solana, and EVM-wallet authentication to DSH Web.
- Evidence: manifest → patch · Identity:
dsh-auth-plugin - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
authenticationoauthwallet-authcredentialsclient-injectionprepack-check· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH AutoGate · wangxing-git/dsh-autogate@dad7c04 — A workspace-sandboxed automatic approval tier using deterministic rules, LLM adjudication, and human escalation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
approval-gatesandbox-policymodel-requesthuman-escalationprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Whale Status · WhaleHarness/WhaleHarness@1bf6c4c — Checks site health, TLS, DNS, tarball integrity, local plugin verification, and update state.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
site-healthtlsdependency-auditintegrity-checkexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Plugin Vet · wulun811/dsh-plugin-vet@2ef0b8d — A plugin trust pipeline combining deterministic scans, runtime sentinels, audit skills, and a GUI shield.
- Evidence: manifest → patch · Identity:
@jieai/dsh-plugin-vet - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
plugin-auditruntime-monitorfilesystem-skillclient-injectionprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Remote · xgone/dsh-remote@92e59d1 — Adds a login gate, MFA, signed sessions, role controls, and remote-friendly directory selection to DSH Web.
- Evidence: manifest → patch · Identity:
@xgone/dsh-remote - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
authenticationpassword-storagetotpsession-cookiesrole-based-accessfilesystem-writeweb-routeclient-injectionhigh-trust-surface· Review: The fixed source is 0.1.4 while npm exposes 0.1.5 from the same repository; no bootstrap account, password hash, MFA, cookie, access gate, or filesystem action was executed.
- Evidence: manifest → patch · Identity:
-
DeepSeek Peak Blocker · zisekongling/deepseek-peak-blocker@db54633 — Intercepts DeepSeek Official requests during configured peak windows and asks the user to continue or cancel.
- Evidence: manifest → patch · Identity:
deepseek-peak-blocker - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
model-interruptrequest-gatinguser-confirmationagent-eventsweb-routeclient-injectiongithub-only· Review: The repository documents fixed GitHub-source installation; no request interception, bypass command, user decision, HTTP endpoint, or browser UI was executed.
- Evidence: manifest → patch · Identity:
-
DSH Poison Guard · zoahdev/dsh-poison-guard@7be8ffd — A pre-install supply-chain scanner using AST analysis, deobfuscation, and heuristics for exfiltration and dynamic code.
- Evidence: manifest → patch · Identity:
dsh-poison-guard - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
supply-chain-scanast-analysisdeobfuscationfilesystem-readprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
Integrations
-
Chicheng Gate · 534119219/chicheng-gate@155dbf6 — Adds LAN and tunneled DSH panel access with a password gate, trusted-host configuration, and managed frpc connectivity.
- Evidence: manifest → patch · Identity:
chicheng-gate - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
remote-accesscredentialsremote-binary-downloadsubprocessfilesystem-write· Review: Static source shows frpc download with checksum verification, archive extraction, credential storage, subprocess launch, and DSH restart paths; none were executed.
- Evidence: manifest → patch · Identity:
-
DSH Custom Provider Reasoning · 534119219/dsh-custom-provider-reasoning@86ae352 — Adds selectable reasoning-effort metadata to hand-declared custom provider models.
- Evidence: manifest → patch · Identity:
dsh-custom-provider-reasoning - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
model-routingprovider-metadatasettings-writeclient-injectiongithub-only· Review: GitHub dependency installation is documented; provider metadata and settings changes were reviewed statically and were not applied.
- Evidence: manifest → patch · Identity:
-
DSH Notify Win · Andyqwe44/dsh-notify-win@a26c182 — Shows native Windows task and question notifications, flashes the taskbar, and can return toast answers to DSH.
- Evidence: manifest → patch · Identity:
dsh-notify-win - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
native-executablepowershellsubprocessquestion-datafilesystem· Review: The package ships an executable plus PowerShell and VBScript helpers and spawns notification processes; no native helper, subprocess, question flow, or prepublish hook was executed.
- Evidence: manifest → patch · Identity:
-
DSH QQ Remote · ASAKAFENG/dsh-qq-remote@b724335 — Controls DSH over a OneBot QQ bridge with remote commands, task dispatch, screenshots, chat, sessions, and progress events.
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-qq-remote - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
remote-command-executionexternal-networkcredentialsscreenshotsession-datasubprocess· Review: The fixed source exposes remote command, screenshot, session, file, credential, and subprocess surfaces through QQ; its separate installer and all runtime paths were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Weave · baixianger/dsh-weave@2e71605 — Connects DeepSeek Harness nodes through a private peer-to-peer weave protocol.
- Evidence: manifest → patch · Identity:
dsh-weave - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
peer-to-peerexternal-networkfilesystem-writeclient-injection· Review: The fixed source, patch, licenses, matching npm gitHead and install identity were reviewed statically; networking and storage were not executed.
- Evidence: manifest → patch · Identity:
-
DSH WeChat Pro · bwhite55/dsh-wechat-pro@c726696 — Connects WeChat contacts to real DSH workspaces, sessions, prompts, approvals, event streams, and media transfers.
- Evidence: manifest → patch · Identity:
dsh-wechat-pro - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialssession-dataapprovalfile-transferfilesystem-write· Review: The package uses wildcard DSH peers and handles WeChat credentials, prompts, approvals, session events, and media files; none were runtime-tested.
- Evidence: manifest → patch · Identity:
-
DSH CodeBuddy Auth · cainiao1992/dsh-codebuddy-auth@c684e73 — Adds CodeBuddy browser OAuth, token refresh, credential storage, and model synchronization to a DSH provider route.
- Evidence: manifest → patch · Identity:
dsh-codebuddy-auth - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
oauthbrowser-logincredentialsexternal-networkmodel-providergithub-only· Review: A matching fixed GitHub source exists while npm has no package; no login flow, token refresh, credential write, or model synchronization was executed.
- Evidence: manifest → patch · Identity:
-
DSH OpenCode · chiro2001/dsh-oc@1ed1c51 — Bridges DSH sessions to an OpenCode terminal interface with model credentials, filesystem access, and native runtime support.
- Evidence: manifest → patch · Identity:
@chiro2001/dsh-oc - Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
external-applicationremote-binary-downloadsubprocesscredentialsfilesystemsession-data· Review: The Git-source bundle declares rc.6 peers and can download or launch an OpenCode runtime while exposing credentials, files, and sessions; none of those paths was executed.
- Evidence: manifest → patch · Identity:
-
DSH Gateway · clarknu/dsh-gateway@56c4462 — Provides an HTTPS, cookie-authenticated, WebSocket-capable reverse gateway for the local DSH Web surface.
- Evidence: manifest → patch · Identity:
dsh-gateway - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
tlshttps-serverwebsocketreverse-proxycredentialsfilesystem-write· Review: The fixed source is 1.0.0 while npm exposes 1.3.4 from the same repository; no listener, certificate generation, credential check, proxy, or WebSocket was executed.
- Evidence: manifest → patch · Identity:
-
DSH Collab Sync · cxxy161/dsh-collab-sync@22945f8 — Coordinates multiple clients on one DSH backend with writer locks, session-log repair, remote access settings, and collaboration partitions.
- Evidence: manifest → patch · Identity:
dsh-collab-sync - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-datafilesystem-writedata-repairremote-accessconfiguration-write· Review: Broad DSH version ranges are declared and the source can repair compressed session logs, change host exposure, and write configuration; none was executed.
- Evidence: manifest → patch · Identity:
-
DSH Channel · ddrwin/dsh-channel@13629df — Adds heartbeat discovery and cross-session messaging between agents hosted by one DSH Desktop instance.
- Evidence: manifest → patch · Identity:
dsh-channel - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
cross-session-messagingsession-datamodel-toolssettings-readprepublish-buildgithub-only· Review: A matching fixed GitHub source exists while npm has no package; no heartbeat, session message, tool registration, build, or prepublish behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH QQBot Community · DLive/dsh-qqbot-community@c65813f — Connects QQ Official Bot conversations to DSH sessions, prompts, event streams, and media handling.
- Evidence: manifest → patch · Identity:
dsh-qqbot-community - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
external-networkcredentialswebsocketsession-datafile-transferprepublish-build· Review: The public package maps to this repository and the source connects to QQ with credentials while forwarding messages and media; no network, file, session, or prepublish action was executed.
- Evidence: manifest → patch · Identity:
-
DSH MCP Bridge · Edge-Echo/dsh-mcp-bridge@7768dc3 — A bridge for exposing MCP servers and tools through a DSH Web bundle.
-
DSH Origin Plugin · Fantasality/dsh-origin-plugin@778f85d — Drive Origin scientific plotting from DeepSeek Harness AI chat via MCP - write data, plot line/scatter/column, export PNG/SVG.
- Evidence: manifest → patch · Identity:
dsh-origin-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injectionmcpprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Voice Info · flyingtimes/dsh-voice-info@819bd53 — Context-aware turn summaries and alerts spoken through a Bluetooth speaker using a local CLI.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
audiobluetoothsubprocesssession-datafilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH API Quota · ganfne123/dsh-plugin-api-quota@a571a35 — A sidebar panel that checks and displays DeepSeek API-key balance and quota.
- Evidence: manifest → patch · Identity:
dsh-plugin-api-quota - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
credentialsexternal-networkaccount-balanceclient-injectionprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Remote · godchen520/dsh-web-remote@c852cee — Remote Web access through Cloudflare Quick Tunnels or local HTTP, with token proxying and a mobile control panel.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
remote-accessexternal-networkauthenticationlocal-web-servercloudflare· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Notion Manager · Graffiti-yH/dsh-notion-manager@4cc011a — Exposes Notion search, pages, databases, blocks, comments, and users as DSH agent tools.
- Evidence: manifest → patch · Identity:
dsh-notion-manager - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
notion-apicredentialsexternal-networkmodel-toolscontent-writegithub-only· Review: The fixed source supports credential references and broad Notion read and write tools; no token, workspace request, or content mutation was performed.
- Evidence: manifest → patch · Identity:
-
DSH YZJ Bridge · GuoxinShan/dsh-yzj@1415eae — A profile bundle connecting Yunzhijia CLI capabilities, model tools, rich cards, and a workspace panel.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
enterprise-messagingmodel-toolsclient-injectioncredentialssubprocess· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Minecraft Launcher · hellosky983/dsh-mc-launcher@f68a7cd — A full-screen Minecraft launcher with Microsoft login, version installation, and game launch.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsfilesystem-writesubprocessgame-launcher· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Orbis Remote DSH · icodesign/orbis@b9a8aad — Remote DSH workspace access through Orbis, including session, directory, credential, and provider integration.
- Evidence: manifest → patch · Identity:
@orbisapp/remote-dsh - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
remote-accesscredentialssession-datafilesystem-writeexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Connect · IvanWu2015/dsh-connect@838492d — Channel-agnostic messaging bridge core for DeepSeek Harness (DSH): binds chat channels to DSH agents, streams replies, and pushes work summaries
- Evidence: manifest → patch · Identity:
dsh-connect - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprocess-controlemail· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH ChatNode WeChat · Jesse-njx/dsh-chatnode-wechat@a724da3 — A WeChat chat-node integration for connecting conversations to DeepSeek Harness.
-
DSH DeepSeek Billing · Jolly-J/dsh-deepseek-billing@1c4642a — A sidebar balance display and per-session DeepSeek cost estimator.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
account-balancecredentialssession-dataexternal-networkclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Agent Sync · kuaiyukuaikuai/dsh-agent-sync@9d97956 — DSH plugin that scans other AI agents on this machine (Codex, Claude Code, cc-switch, custom sources) and one-click syncs their MCP servers and skills into DeepSeek Harness.
- Evidence: manifest → patch · Identity:
dsh-agent-sync - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionmcpprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Local Agent Bridge · Leshm0321/dsh-plugin-local-agent-bridge@8fdd8a1 — Adds a DSH browser control surface for host-native Codex and Claude Code sessions.
- Evidence: manifest → patch · Identity:
dsh-plugin-local-agent-bridge - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
external-agentsubprocessbrowser-controlsession-datafilesystem-writeclient-injectionprepare-buildgithub-only· Review: The root package is private and npm has no identity, but a pinned Git bundle exists; no Codex or Claude process, browser control, session storage, build, or test was executed.
- Evidence: manifest → patch · Identity:
-
DSH Provider Quick Config · lo2589/deepseek-harness-provider@bff762a — A send-button panel for configuring provider routes, models, API keys, and local-model synchronization.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageunknown· lifecyclenone· compatibility unknown - Signals:
provider-configcredentialsexternal-networkconfiguration-writeclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Plugin Manager · miaooon/dsh-plugin-manager@24eb36f — 第三方插件管理(设置 → 插件页内):list installed third-party plugins, one-click enable/disable (profile patch), export selected plugins to an offline zip, and import exported zips without any network.
- Evidence: manifest → patch · Identity:
dsh-plugin-manager - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
client-injectionsystem-prompt· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
MMX Quota Tool · mtty-ai/mmx-quota-tool@4b3a534 — A MiniMax token-plan quota indicator and detail panel for DSH Web.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
account-quotacredentialsexternal-networkclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Open Design DSH Runtime · nexu-io/open-design@62483a1 — An integrity-pinned profile runtime that connects Open Design to a user-installed DSH over JSONL stdio.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
stdiosubprocessprofile-bundlesession-dataintegrity-check· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Gauge · noone89A/dsh-gauge@ca176d7 — Cache-hit, token-usage, price-window, and session cost statistics for DSH Web.
- Evidence: manifest → patch · Identity:
dsh-gauge - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
token-metercost-estimationsession-dataclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Lark Bot · PlutoKeating/dsh-lark-bot@6a5be5b — A Feishu and Lark bridge with streaming cards, project workspaces, approvals, and schedules.
- Evidence: manifest → patch · Identity:
dsh-lark-bot - Licenses: repo
AGPL-3.0/ packageAGPL-3.0· lifecycleprepublishOnly· compatibility unknown - Signals:
enterprise-messagingcredentialssession-dataapproval-forwardingexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH WebGate · pppolf/dsh-webgate@9ac449a — Remote access over LAN QR links, Cloudflare tunnels, or FRP reverse proxy with a login portal.
- Evidence: manifest → patch · Identity:
dsh-webgate - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
remote-accesscloudflarereverse-proxyauthenticationexternal-network· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH XiaoTangYuan Game · qimidandapigu/dsh-xiaotangyuan-game@52baef4 — A game AI runtime that detects and installs supported game adapters from verified releases.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
game-integrationexternal-downloadfilesystem-writesubprocesscredentials· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Awesome Ios Sim · qubyyang/awesome-ios-sim@dc3e641 — Simulator State as Code for iOS developers, CI pipelines, MCP clients, and DeepSeek Harness
- Evidence: manifest → patch · Identity:
@qubyyang/awesome-ios-sim - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionmcpprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Call Me · radres/dsh-plugin-call-me@af1a21b — Places a real phone call so spoken questions and replies can steer the active agent run.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
telephonyaudiocredentialsexternal-networkagent-steering· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Rapid MLX DSH Provider · raullenchai/rapid-mlx-dsh-provider@b14ada2 — Registers a local Rapid MLX server as a DSH language-model provider route.
- Evidence: manifest → patch · Identity:
@rapid-mlx/dsh-provider - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
llm-providerlocal-networkmodel-discoverygithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH RingCentral · ringclaw/dsh-ringcentral@42b76e9 — Connects DSH sessions to RingCentral Team Messaging as an IM channel.
- Evidence: manifest → patch · Identity:
dsh-ringcentral - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
ringcentralim-channelexternal-networkcredentialsprepublish-build· Review: The fixed source is older than the current matching registry release; identity and evidence were reviewed statically and no messaging or build action ran.
- Evidence: manifest → patch · Identity:
-
DSH Codex Harness · shuind/dsh-codex-harness@398852d — Provides a Codex-compatible harness and preset installer for GPT models inside DSH.
- Evidence: manifest → patch · Identity:
@shuind/dsh-codex-harness - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
codex-providermodel-toolspreset-installfilesystem-writeprepare-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Notify Center · SingleOne/dsh-notify-center@50778f7 — Native desktop and webhook notifications for agent, session, title, and approval events.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
desktop-notificationwebhooksession-dataapproval-eventsprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Godot Bridge · Smalldy/godot-bridge@ac81927 — Launches and drives a running Godot game through its TCP interaction server using native agent tools.
- Evidence: manifest → patch · Identity:
godot-bridge - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
godottcpgame-integrationsubprocessmodel-tools· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Bottom Info Bar · songoao25/bottom-info-bar@06a554e — A composer status bar for provider, model, live balance, peak pricing, countdowns, and spend totals.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
account-balancecost-estimationcredentialssession-dataprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH MoodBall · sundusk/dsh-moodball@f6d1640 — Serves agent activity state to a companion macOS desktop mood indicator.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· declares rc.6 peers - Signals:
desktop-appsession-datalocal-web-servermacos· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Kabutack · SunQingyuan0/Kabutack@3e257a2 — 统一管理 DSH 插件/Skill/MCP,支持角色化动态装载与切换
- Evidence: manifest → patch · Identity:
@dsh-external/kabutack - Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclepostinstall· mixed peer ranges - Signals:
external-networkclient-injectionmcpprocess-controlpostinstall· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Gateway Core · temotee2103/dsh-overdrive@0f865f2 — dsh-overdrive: DeepSeek Harness plugin — multi-platform chat bridge core (trajectory / approval / multi-agent)
- Evidence: manifest → patch · Identity:
@dsh-overdrive/gateway-core - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsdocker· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Bridge · Totoro-qaq/dsh-plugin-bridge@1afbdae — DeepSeek Harness Cordis bundle for cross-preset session migration via fixed-schema handoff summaries
- Evidence: manifest → patch · Identity:
dsh-plugin-bridge - Licenses: repo
MIT/ packageMIT· lifecycleprepack· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controlsystem-promptprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH MQTT · UllrAI/dsh-mqtt@38b0caf — Provides an MQTT protocol driver and agent-worker gateway for DSH.
- Evidence: manifest → patch · Identity:
dsh-mqtt - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
mqttexternal-networkagent-workermessage-routingprepare-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH LLM USTC · USTC-XeF2/dsh-llm-ustc@6290fbb — A USTC language-model provider with a provider-scoped iWAN tunnel.
- Evidence: manifest → patch · Identity:
dsh-llm-ustc - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
model-providercredentialsnetwork-tunnelexternal-networkprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH LLM NewAPI · wenzetan/dsh-llm-newapi@99599d3 — Registers a NewAPI OpenAI-compatible chat-completions provider route in DSH.
- Evidence: manifest → patch · Identity:
dsh-llm-newapi - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
llm-provideropenai-compatibleexternal-networkcredentialsprepack-build· Review: The fixed source is the registry next release while the stable tag has the same base version; no provider request, credential access, or build ran.
- Evidence: manifest → patch · Identity:
-
DSH OpenCode Go Usage · Xenia0922/dsh-opencode-go-usage@f7a7192 — A draggable dashboard for OpenCode Go quota, per-request usage, and spending.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
account-quotacost-estimationexternal-networkclient-injectionidentity-collision· Review: The npm identity maps to another repository, so this record is pinned only to the documented local source and does not claim the npm package.
-
DSH NebulaGraph · xiajingchun/dsh-nebulagraph-v5@0f95d35 — Connects DSH to NebulaGraph 5 and exposes GQL query results plus graph visualization data.
- Evidence: manifest → patch · Identity:
dsh-nebula - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
nebulagraphdatabase-queryexternal-networkcredentialsmodel-toolsprepare-build· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Codex · Yan-Zero/dsh-codex@621b218 — Connects ChatGPT OAuth, Codex models, search, remote image reading, and image generation to DSH.
- Evidence: manifest → patch · Identity:
dsh-codex - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepublishOnly· mixed peer ranges - Signals:
external-networkcredentialsllm-callweb-searchimage-generation· Review: The fixed bundle is structurally valid; broad wildcard DSH peers and OAuth/model network access require independent compatibility and trust review.
- Evidence: manifest → patch · Identity:
-
DSH Bridges · yhlooo/dsh-bridges@3110789 — Imports project conventions from Claude Code, Codex, OpenCode, CodeBuddy, Pi, Gemini CLI, and Cursor.
- Evidence: manifest → patch · Identity:
dsh-bridges - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
project-importfilesystem-readfilesystem-skillprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Cost Usage Status · Zenjibad/deepseek-cost-usage-status-plugin@3d6f68e — A live composer dashboard for model, peak pricing, session cost, burn rate, and account balance.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
account-balancecost-estimationcredentialssession-dataclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH IM Gateway · zhuiyueya/dsh-im-gateway@f4b166d — A unified session, approval, allowlist, and configuration gateway for more than twenty messaging channels.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
instant-messagingcredentialssession-dataapproval-forwardingprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Model Profile · ztlovelsw/dsh-model-profile@1e3ddd5 — Edits per-model image support and reasoning efforts in the DSH Web model catalog.
- Evidence: manifest → patch · Identity:
@ztlovelsw/dsh-model-profile - Licenses: repo
unknown/ packageBSD-3-Clause· lifecycleprepare· declares rc.6 peers - Signals:
model-configconfiguration-writeclient-injectionprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Notify Bell · ZYar-er/dsh-notify-bell@21c0747 — Semantic BEL or WAV notifications for completion, blocking, permission, questions, and errors.
- Evidence: manifest → patch · Identity:
dsh-notify-bell - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
audiodesktop-notificationagent-eventsclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH LAN Fix · zynieie/dsh-lan-plugin@1b16999 — A LAN compatibility patch that provides a cryptographic RPC-ID fallback for insecure browser contexts.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
lan-accessclient-patchcryptographylocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
Skills & Methods
-
Creght Skills · creght-dev/skills@5e20ab3 — A repository of agent skills packaged with a native DSH bundle.
-
DSH Plugin Guide · Fectivnfy112357/dsh-plugin-guide@48da363 — A dual-format guide and filesystem skill for building DSH and Agent Plugins packages.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-skillplugin-developmentgithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
Aegis · GanyuanRan/Aegis@21b27d2 — A software-engineering method pack for planning, debugging, prompt hygiene, verification, and repair tracking.
-
Project AI Docs · igugyj/project-ai-docs@811e729 — A project-local AI documentation protocol that maintains a docs/.ai knowledge base.
- Evidence: manifest → patch · Identity:
project-ai-docs - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
filesystem-skillfilesystem-readfilesystem-writedocumentation-generation· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Ten Methods Tutor · jmwasky-creative/ten-methods-tutor@5e76ea2 — A deterministic local arithmetic tutor with guided exercises and parent-facing recaps.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
educationlocal-web-serversession-datamodel-toolsfilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH LookatStudy · Kaiji-Z/dsh-plugin-lookatstudy@298dde9 — Turns markdown, folders, or GitHub learning repositories into guided courses with mastery and spaced repetition.
- Evidence: manifest → patch · Identity:
dsh-plugin-lookatstudy - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
guided-learningfilesystem-readgithub-importpersistent-statemodel-toolsweb-ui· Review: The fixed source matches npm 0.9.0 and declares broad peer ranges; no repository import, course generation, learner state, tool, or dashboard was executed.
- Evidence: manifest → patch · Identity:
-
Gongwen Skill · linhut/gongwen-skill@e5a277e — A Chinese official-document workflow for GB/T 9704 checks, repair, optimization, templates, and layout injection.
- Evidence: manifest → patch · Identity:
gongwen-skill - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-skilldocument-processingsubprocessfilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Agent Skills · minivv/dsh-agent-skills@f753b09 — Discovers and manages Agent Skills for Claude Code, Codex, Gemini CLI, and other tools from DSH.
- Evidence: manifest → patch · Identity:
dsh-agent-skills - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
skill-managementfilesystem-readfilesystem-writeclient-injectionprepare-build· Review: The fixed source is 0.1.2 while npm exposes 0.1.7 from the same repository; no build, skill scan, or preset write was executed.
- Evidence: manifest → patch · Identity:
-
DSH HTB Skills · qingsiweisan/dsh-htb-skills@d04c3d0 — A versioned Hack The Box penetration-testing skill library with tiered routing and hidden references.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-skillsecurity-testingprompt-injectionlocal-install· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Wiki · skillre/dsh-wiki@b6dfa3a — A DSH bundle that exposes a repository-backed wiki skill and documentation workflow.
- Evidence: manifest → patch · Identity:
dsh-wiki - Licenses: repo
unknown/ packageunknown· lifecyclenone· compatibility unknown - Signals:
filesystem-skilldocumentationpackage-bundle· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Lazeword · xczhanjun/lazeword@c65f598 — Offline vocabulary learning with FSRS scheduling, Anki sync, subject decks, and learning games.
- Evidence: manifest → patch · Identity:
dsh-lazeword - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· mixed peer ranges - Signals:
educationspaced-repetitionankibrowser-storageprepublish-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Math Research DSH · xsoc1/math-research-dsh@a5e6373 — A rigorous mathematics research suite with four agent skills, Lean verification, tests, and environment diagnostics.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
filesystem-skillmathematicsformal-verificationenvironment-diagnostics· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Furrhaven Toolbox · YJLZSL/dsh-furrhaven-toolbox@473cdd6 — Character-card authoring, validation, worldbook simulation, regex testing, vision, and roleplay tools.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· mixed peer ranges - Signals:
character-authoringmodel-toolsvisionsubprocessfilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH J-Space Warm · zbsph/dsh-j-space-warm@6060c0f — Installs J-Space anchored warm-up agent presets with two-phase bootstrap and drift checks.
- Evidence: manifest → patch · Identity:
dsh-j-space-warm - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· compatibility unknown - Signals:
agent-presetssystem-promptfilesystem-writedrift-detectiongithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
Discovery & Management
-
DSH Plugin Market · 2160039878-cyber/dsh-plugin-market@e897f67 — A verified-first Web catalog that searches GitHub plugin leads and gates install-command copying behind structural checks.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
github-searchexternal-networkinstall-command-copyclient-injectionidentity-collision· Review: The fixed Git-source bundle is confirmed; the unscoped npm name resolves to a different repository, so no npm identity is listed and no remote check or install action was executed.
-
DSH Plugin Hot Toggle · 5102a/dsh-plugin-hot-toggle@15b5f24 — Starts and stops installed Cordis plugin entries from DSH Web and persists the selected state across restarts.
- Evidence: manifest → patch · Identity:
dsh-plugin-hot-toggle - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
dynamic-loadingpackage-managementconfiguration-writeclient-injectionhigh-trust-surface· Review: The package and patch identities align; dynamic loader control, persisted configuration writes, and the prepare build were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Capability Index · 777-Zen/dsh-capability-index@08a4f48 — Injects per-step capability hints so agents can select installed plugins from an indexed trigger table before acting.
- Evidence: manifest → patch · Identity:
dsh-capability-index - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
runtime-contextprompt-injectionplugin-inventory· Review: The root bundle is distinct from the repository's demo fixture; no DSH peer range establishes runtime compatibility.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Audit · 863683348/dsh-plugin-audit@2cbd6ab — Audits DSH plugin health through GitHub discovery, npm probes, static scanning, scoring, and a leaderboard.
- Evidence: manifest → patch · Identity:
dsh-audit - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkfilesystem-readstatic-analysisweb-uimodel-toolssource-behind-registry· Review: The fixed source is version 0.2.0 while npm now exposes 0.4.0 from the same identity; no repository sync, registry probe, scan, or model tool was executed.
- Evidence: manifest → patch · Identity:
-
DSH Safe Plugin Manager · AI-Scarlett/dsh-safe-plugin-manager@993cfd3 — A GitHub-only plugin catalog and guarded profile lifecycle manager with plans, confirmations, backups, checks, and rollback.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageUNLICENSED· lifecyclenone· mixed peer ranges - Signals:
package-managementfilesystem-writesubprocessexternal-networkhigh-trust-surface· Review: The private, UNLICENSED package is documented as GitHub-only; profile mutation, backups, subprocess execution, remote catalogs, and rollback were not executed.
-
DSH Plugin Console · AlexYin-Tongji/dsh-plugin-console@7c72201 — DSH Plugin Console: a verified community catalog and profile manager for DeepSeek Harness
- Evidence: manifest → patch · Identity:
dsh-plugin-console - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
external-networkclient-injectionprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Failure Lens · ArmyWas/dsh-failure-lens@bc0a834 — Deterministic DeepSeek Harness Web client plugin that explains the Windows-sandbox
spawn EPERMfailure as a distinct Conversation Node.- Evidence: manifest → patch · Identity:
dsh-failure-lens - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· compatibility unknown - Signals:
subprocessfilesystemexternal-networkcredentialsclient-injectionnative-helperprocess-controlsystem-promptprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Codsh Cli · Blackman99/codsh@1ed17e0 — A Claude Code-style coding agent for the terminal, composed on the DeepSeek Harness (dsh): interactive TTY surface, plan mode, approvals, custom commands, and session management over the dsh plugin runtime
- Evidence: manifest → patch · Identity:
codsh-cli - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controlsystem-promptprepublish-only· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Billing · bpc-oss/dsh-web-billing@27f3750 — Tracks token cost, pricing windows, message ledgers, and provider account balance in DSH Web.
- Evidence: manifest → patch · Identity:
dsh-web-billing - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
billing-datatoken-meterexternal-networkcredentialsfilesystem-writeclient-injection· Review: The fixed source documents GitHub installation while npm has no package; pricing sync, credential resolution, balance requests, ledger writes, and prepublish checks were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plug Manager · Casually/deepseek-harness-plugs-manage@be8112f — DeepSeek Harness 插件管理器:发现 GitHub dsh-plugin topic 下的插件仓库,通过
dsh plugin安装/移除/更新 profile 插件,并在 设置 → 插件 → 插件市场 标签页中浏览管理。- Evidence: manifest → patch · Identity:
dsh-plug-manager - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Monitor · Coco-king/dsh-monitor@9d318dc — Shows session costs and configurable provider usage or quota data in the DSH web interface.
- Evidence: manifest → patch · Identity:
dsh-monitor - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
billing-dataprovider-usageexternal-networkcredentialsfilesystem-writeclient-injection· Review: The documented Git install tag resolves to the fixed commit and licenses and bundle structure are present; provider requests, credentials and UI code were not run.
- Evidence: manifest → patch · Identity:
-
DSH Hub Search · coderPerseus/dsh-hub@4dc755a — Adds tools for searching and inspecting plugin records in the remote DSH Hub catalog.
- Evidence: manifest → patch · Identity:
@dshhubs/plugin-search - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkremote-catalogplugin-metadatainstall-command-data· Review: The public package identity matches the source bundle and its tools read remote catalog metadata and installation text; no request or install was executed.
- Evidence: manifest → patch · Identity:
-
DSH Desktop Plugin Installer · deronghe/dsh-plugin-desktop-installer@210522b — Adds desktop settings controls for installing, enabling, disabling, removing, and restarting DSH plugins.
- Evidence: manifest → patch · Identity:
dsh-plugin-desktop-installer - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementsubprocessprofile-writedesktop-restartlocal-http-servergithub-only· Review: GitHub installation is documented; its command execution, profile mutation, uninstall, and desktop restart surfaces were reviewed statically and not invoked.
- Evidence: manifest → patch · Identity:
-
DSH Market · dsh-market/dsh-market@3188f46 — An in-harness plugin market that can browse, install, update, and remove third-party packages.
-
DSH Skill MCP Panel · Fishquito7/dsh-skill-mcp-panel@92a471d — Manages Skills and MCP servers from DSH Web settings and a companion panel CLI.
- Evidence: manifest → patch · Identity:
dsh-skill-mcp-panel - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
skill-managementmcp-managementfilesystem-writesubprocessconfiguration-writeclient-injectionprepack-build· Review: A pinned root Git source exists while npm has no package; no skill or MCP mutation, subprocess, configuration write, client panel, or prepack build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Skill Viewer · Fishquito7/dsh-skill-viewer@55c16e4 — A Web settings panel and CLI for listing, scoping, enabling, disabling, adding, and deleting skills.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
skill-managementfilesystem-writeclient-injectionprepack-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Plugin Index · GGigHub/dsh-plugin-index@41fcb76 — A GitHub-star-backed plugin browser with install, remove, update, and repair controls.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementexternal-networkfilesystem-writepackage-installgithub-only· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Plugin Usage · GHJIVHIDD/dsh-plugin-usage@c352ba0 — Adds a real-time token and cost dashboard with pricing, estimates, and CSV or JSON export.
- Evidence: manifest → patch · Identity:
@deepseek-ai/dsh-plugin-usage - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
token-meterbilling-datasession-dataclient-injectiondata-exportgithub-only· Review: The package uses the official namespace but npm has no matching identity, while the pinned root Git bundle is complete; no usage stream, pricing, export, or client UI was executed.
- Evidence: manifest → patch · Identity:
-
Harness Flow Hub · Harzva/harness-flow-hub@25b23c2 — An in-DSH flow hub prototype with transactional plugin installation, rollback, and browser UI.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
plugin-managementpackage-installfilesystem-writerollbackclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Plugin Toggle · huntersxy/dsh-plugin-toggle@e11d57c — A settings-page switchboard that edits profile patches to hot-enable or disable third-party plugins.
- Evidence: manifest → patch · Identity:
dsh-plugin-toggle - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementfilesystem-writeconfiguration-edithot-reload· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Go Balance · iamfromchangsha/dsh-go-balance@8d11fea — OpenCode Go subscription balance widget for DeepSeek Harness Web: rolling/weekly/monthly quota remaining, shown at the right end of the composer tool row.
- Evidence: manifest → patch · Identity:
dsh-go-balance - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Workspace Token Record · jasonyoungguang/DSH_plugins_calculate_token_fee@bb37cb3 — Projects per-workspace and per-session token usage and cost into a sidebar hover card.
- Evidence: manifest → patch · Identity:
workspace_token_record - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
token-meterbilling-datasession-projectionworkspace-dataclient-injectiongithub-only· Review: The package declares MIT but no repository license file or npm package was found; no log fold, cost projection, workspace aggregation, or browser card was executed.
- Evidence: manifest → patch · Identity:
-
DSH Web Hot · jifeng15/dsh-web-restart@8ae1421 — A host lifecycle layer for installing, updating, enabling, disabling, and self-healing Web plugins without restart.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
plugin-managementpackage-installfilesystem-writehot-reloadself-heal· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Tokstat · kongjianguan/dsh-tokstat@ebc851b — Adds token, latency, throughput, and cost statistics in a settings panel and terminal UI.
- Evidence: manifest → patch · Identity:
@kongjianguan/dsh-tokstat - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
token-metersession-logfilesystem-readlocal-httpclient-injectionterminal· Review: The fixed source is 0.1.0 while npm exposes 0.1.1 from the same repository; no session log read, HTTP route, client panel, terminal, or build script was executed.
- Evidence: manifest → patch · Identity:
-
DSH Clipboard History · kuangre123/dsh-clipboard-history@20db300 — Clipboard history plugin for DeepSeek Harness: monitors the system clipboard and exposes recall/copy tools.
- Evidence: manifest → patch · Identity:
dsh-clipboard-history - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Codex Workflow · kui123456789/dsh-codex-workflow@3893b8d — DeepSeek Harness plugin that uses Codex to plan and review while DSH executes.
- Evidence: manifest → patch · Identity:
dsh-codex-workflow - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
credentialsclient-injectionmcpprocess-controldatabase· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Market · losebird/dsh-plugin-market@e441cdb — A community plugin-market dialog with bundle and ZIP-based one-click installation.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-marketplacepackage-installfilesystem-writeidentity-collisionclient-injection· Review: The npm name maps to another repository, so this record is pinned to the author's documented Git source and does not claim that npm identity; installation was not executed.
-
DSH Dag Orchestrator · Luck9Star/dsh-dag-orchestrator@880a310 — Resumable multi-task parallel DAG orchestration plugin for the DeepSeek Harness: strict-validated static DAG specs, tick-driven reconcile, node:sqlite persistence with an event hash-chain, crash reconciliation on apply(), and one DAG task node = one programmatic subagent delegation via ctx.subagents.
- Evidence: manifest → patch · Identity:
dsh-dag-orchestrator - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprocess-controldatabase· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Ace Harness · lustresixx/dk-flow@5230052 — ACEHarness core as a DeepSeek Harness plugin: state-machine workflows, adversarial multi-agent review, templates, governance
- Evidence: manifest → patch · Identity:
dsh-ace-harness - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepack· declares rc.6 peers - Signals:
external-networkclient-injectionprocess-controlsystem-promptprepareprepack· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Catalog Capabilities ZH · MeowTnT3r/catalog-capabilities-zh@1843ac3 — A Chinese capability catalog and orchestration adapter for inspecting and installing DSH plugins and skills.
- Evidence: manifest → patch · Identity:
catalog-capabilities-zh - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
capability-catalogplugin-managementskill-managementsubprocessfilesystem-writegithub-only· Review: The fixed source delegates installation to environment-provided plugin or skill managers and includes a Python catalog script; no inspection, subprocess, or install was run.
- Evidence: manifest → patch · Identity:
-
DSH Spend · nonewind/dsh-spend@43fb7b0 — Shows token usage, billing-plan statistics, and estimated spend in the DSH web interface.
- Evidence: manifest → patch · Identity:
dsh-spend - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
token-usagecost-estimationbilling-dataclient-injection· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Usage Cost · PengPeng6845/dsh-usage-cost@d111291 — Token consumption and API cost reporting for the DeepSeek Harness: cost math over the tokenUsage projection, durable day/month aggregates, and the model-facing token_usage tool
- Evidence: manifest → patch · Identity:
dsh-usage-cost - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Hub · qomob/dsh@9b80e51 — Embedded and live GitHub plugin search, detail inspection, approval-gated installation, and a catalog tab.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-marketplaceexternal-networkpackage-installapproval-gateidentity-collision· Review: The npm name maps to another repository, so this record is pinned only to the documented Git subdirectory source and does not claim that package identity.
-
DSH Cost Glance · qqq85-ux/dsh-cost-glance@3587c20 — Estimates per-session DeepSeek API cost from model, cache, and time-of-day pricing signals.
- Evidence: manifest → patch · Identity:
dsh-cost-glance - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Extension Hub · Relistencode/dsh-extension-hub@3f9726e — A Web and CLI hub for skills, MCP servers, plugins, imports, marketplace discovery, and updates.
- Evidence: manifest → patch · Identity:
dsh-extension-hub - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementskill-managementmcppackage-installfilesystem-write· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH WebUI Market Plugin · Sanqi-normal/dsh-webui-market-plugin@8b32828 — Adds a web plugin market for browsing, installing, and removing community DSH plugins.
- Evidence: manifest → patch · Identity:
@sanqi-normal/dsh-webui-market-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-marketpackage-managementexternal-networkfilesystem-writeclient-injection· Review: The fixed source is slightly behind the current matching registry release; no catalog fetch, package operation, filesystem write, or UI behavior ran.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Marketplace · Scorp1o117/dsh-plugin-marketplace@d4f8b24 — A settings-page marketplace that browses, searches, and ranks the GitHub dsh-plugin topic.
- Evidence: manifest → patch · Identity:
dsh-plugin-marketplace - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
plugin-marketplacegithub-searchexternal-networkclient-injection· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
Oss Prompt Optimizer · seven282/oss-prompt-optimizer@2f5167d — DeepSeek Harness plugin bundle: optimize raw instructions into professional Role / Task / Context / Format prompts through the harness llm service
- Evidence: manifest → patch · Identity:
oss-prompt-optimizer - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
credentialsclient-injectionsystem-promptprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Course Logic Extractor · ShadowBruceMeaningLau/dsh-course-logic-extractor@73cefe8 — 闂傚倸鍊搁崐鎼佸磹閹间礁纾归柟闂寸绾剧懓顪冪€n亜顒㈡い鎰Г閹便劌顫滈崱妤€鈷掗梺缁樺笧閺咁偊骞夌粙娆惧悑闁割偒婢€缂冩洖鈹戦悩鑼闁哄绨遍崑鎾诲即閵忕姷鐤囬棅顐㈡处缁嬫垹澹曢幐搴濈箚闁靛牆鍊告禍楣冩⒑闂堟稒顥為悽顖涘浮閿濈偛鈹戠€n偅娅滈梺鍛婁緱閸撴瑩藟濮橆兘鏀介柨娑樺娴滃ジ鏌涙繝鍐ㄧ伌鐎规洜鎳撶叅妞ゅ繐鎳庡▓鐐翠繆閵堝繒鍒伴柛鐕佸灦瀹曟垿鍩¢崨顔惧幗闂佺鎻徊楣兯夋径鎰厽闁归偊鍓ㄩ煬顒勬煛鐏炵晫效鐎规洦鍋婂畷鐔碱敃閿濆棭鍟€闂傚倷绀侀幉锟犳晝閳哄懎鍨傞悹杞拌濞兼牠鏌ц箛姘兼綈閻庢碍宀搁弻鐔虹磼濡櫣鐟ㄥ┑顕嗙稻閸旀妲愰幘璇茬<婵ɑ鐦烽姀鈥茬箚妞ゆ劧绲跨粻鎾绘煟閿濆鏁遍悗闈涖偢瀵爼骞嬮悪鈧崬鐑樼節瀵伴攱婢橀埀顒佸姍瀹曟垿骞橀崜浣癸紡闂佽鍨庡畝鈧崥瀣⒑閸濆嫮鐏遍柛鐘崇墵閻涱噣骞嬮敃鈧粻娑㈡⒒閸喓鈯曟い鏂垮濮婄粯鎷呴崨濠傛殘闂佽崵鍠嗛崕鐢稿极閸愵噮鏁傞柛顐ゅ枎娴滄顪冮妶鍡楀Ё缂佺姵鍨块幃娆愮節閸ャ劎鍘繝鐢靛Т缁绘劙銆呴浣典簻闁挎柨鎼崝銈囩磼鏉堛劍灏伴柟宄版噽閹叉挳宕熼鐐叉辈闂傚倷绶氬褔鎮ц箛娑掆偓锕傚醇閵夘垳绋忛棅顐㈡处閹峰煤椤忓秵鏅滈梺鍛婃处閸撴瑧绮婇懜鍏哥箚闁绘劦浜滈埀顒佺墵楠炴劙鎮欓浣稿伎闁诲酣娼ч幗婊呯不閺冨牊鐓ラ柣鏂挎惈鏍¢梺鎶芥敱閸ㄥ潡寮诲☉妯锋婵鐗婇弫楣冩⒑閹惰姤鏁遍柛鏃€鐗滈幑銏犫槈閵忕姷鐓戞繝銏f硾閻ジ鎮块崟顒傜瘈缁炬澘顦辩壕鍧楁煛娴e壊鐓奸柣娑卞櫍瀹曞爼顢楅埀顒傜棯瑜旈幃褰掑箒閹烘垵顬堥梺閫炲苯澧伴柛瀣洴閳ユ棃宕橀鍢壯囨煕閳╁喚娈旀繛鍏煎灴濮婅櫣绮欏▎鎯у壉闂佸湱鎳撳ú銈夛綖韫囨梻绡€婵﹩鍓涢敍婊堟⒑闂堟稓澧曢柟铏姈缁傛帡骞栨担鍏夋嫼闂佸憡绻傜€氼厼锕㈤悧鍫㈢闁告瑥顦介悞浠嬫煙楠炲灝鐏╅柍瑙勫灦缁绘繈宕熼鐔哥帆闂傚倷绀侀幖顐⒚洪妸鈺佺;闁绘柨鍚嬮崑鍌涗繆閵堝懏鍣洪柍閿嬪笒闇夐柨婵嗗椤掔喖鏌i幒鏂夸壕闁靛洤瀚伴獮瀣攽閸ヨ埖锛嗘俊銈囧Х閸嬬偤宕濆▎鎾跺祦闁哄秲鍔嶆刊鎾煟閻旂⒈鏆掗柟顕嗙秮濮婄粯鎷呴崫鍕紦闂佺瀛╅悡鈥崇暦濠婂喚娼╂い鎺戭槺閸旂兘姊虹紒姗嗘當闁绘瀚粋宥咁煥閸喓鍙嗗┑鐐村灦閿氭い蹇婃櫇缁辨帡鎮╅崘娈?preset as a dsh plugin: given a course's materials, reverse-engineer its instructional design into a self-consistent logical chain. Installs the course-logic-extractor preset into the DSH preset roster automatically.
- Evidence: manifest → patch · Identity:
dsh-course-logic-extractor - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentials· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Edit Approval · SiriLee/dsh-edit-approval@5cbb98f — DeepSeek Harness plugin: per-edit approval with a red/green line diff before write/edit/str_replace_editor — approve once or reject (Claude Code behavior).
- Evidence: manifest → patch · Identity:
dsh-edit-approval - Licenses: repo
MIT/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
external-networkcredentialsclient-injectionprocess-controlprepare· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Usage Dashboard · skkjkk/dsh-usage-dashboard@104cfb8 — Aggregates token, cost, duration, and session usage into trend, heatmap, and calendar views.
- Evidence: manifest → patch · Identity:
@skkjkk/dsh-usage-dashboard - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecycleprepublishOnly· compatibility unknown - Signals:
usage-dashboardtoken-usagecost-datasession-dataclient-injectionprepublish-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Guardian · songoao25/dsh-plugin-guardian@bb49179 — Offers graphical plugin uninstall, residue cleanup, snapshot rollback, and recovery controls.
- Evidence: manifest → patch · Identity:
dsh-plugin-guardian - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementfilesystem-writefile-deleterollbackconfiguration-editclient-injectiongithub-only· Review: The repository provides a fixed GitHub source identity; no plugin removal, residue cleanup, configuration write, rollback, or browser action was executed.
- Evidence: manifest → patch · Identity:
-
DSH Fish Hub · stvlynn/dsh.fish@d81793b — Authenticated dsh.fish search and install tools for Harness artifacts.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
unknown/ packageMIT· lifecycleprepare· mixed peer ranges - Signals:
artifact-registrycredentialsexternal-networkpackage-installprepare-build· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
-
DSH Zhipu Coding Plan · tsja2001/dsh-zhipu-coding-plan@3afba87 — Shows GLM Coding Plan quota windows, model usage, and reset times in a conversation tab.
- Evidence: manifest → patch · Identity:
dsh-zhipu-coding-plan - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
quota-monitorbilling-dataexternal-networkcredentialsclient-injection· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Suite All · whyihaveyou/dsh-suite@0165407 — An all-in-one bundle aggregating the suite's plugin manager, notifications, session export, and team board.
- Evidence: manifest → patch · Identity:
@dsh-suite/all - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
aggregate-bundleplugin-managementnotificationsession-exportkanban· Review: Fixed source, manifest, patch, available license evidence, and documented install identity were reviewed statically; plugin code and declared capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Hub Suite · wingsky-1/dsh-plugin-hub@f15865f — Aggregates eight DSH plugins for compression, session archiving, LAN proxying, MCP, notifications, usage, skills, and file preview.
- Evidence: manifest → patch · Identity:
@wingsky-1/dsh-plugins-all - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
aggregate-bundleplugin-suiteexternal-networkfilesystem-writeclient-injectionprepare-build· Review: The fixed source and matching public package identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Damage Pulse · wssfk12138/dsh-damage-pulse@6e724df — Visualizes cache-aware token charges as balance-monitor damage-number animations.
- Evidence: manifest → patch · Identity:
dsh-damage-pulse - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
balance-monitortoken-usagecost-dataclient-injectiongithub-only· Review: The fixed source and author-documented GitHub install identity were reviewed statically; no candidate code, install hook, network call, filesystem change, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Store · ZASENJC/dsh-plugins-store@fa5829a — A native catalog browser with fixed-source validation, risk confirmation, install plans, updates, and removal.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
plugin-marketplacepackage-installapproval-gateexternal-networkidentity-collision· Review: The npm identity maps to another repository, so this record is pinned to the documented Git subdirectory source and does not claim that package.
-
DSH Plugin Toggle · Zenjibad/dsh-plugin-toggle@60cfa68 — Adds persistent enable and disable controls for installed DSH plugins in Settings.
- Evidence: manifest → patch · Identity:
dsh-plugin-toggle - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementdynamic-loadingfilesystem-writeclient-injection· Review: The fixed source, patch, licenses and repository-specific Git install identities were reviewed statically; plugin stop-start operations, persistence and UI were not run.
- Evidence: manifest → patch · Identity:
-
DSH Usage Balance · zhou-yihang/dsh-usage-blance@09a2415 — Shows DeepSeek monthly, daily, and account-balance billing data below the DSH composer.
- Evidence: manifest → patch · Identity:
dsh-usage-blance - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprocess-control· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Recommend · zp-home/dsh-recommend@9319afc — DSH 插件透明排行与推荐:每日自动抓取 dsh-plugin 话题生态 + 公开评分模型 + rank/recommend/search 工具 + 设置页排行标签
- Evidence: manifest → patch · Identity:
dsh-recommend - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injection· Review: The fixed source, same-commit patch, licenses and installation identity were reviewed statically; lifecycle hooks, plugin code and capabilities were not executed.
- Evidence: manifest → patch · Identity:
Hold queue
These entries are relevant to DSH but do not receive install recommendations until the recorded blocker is repaired.
-
SandBase Harness · sandbaseai/sandbase-harness@2bb788d — A managed-agent integration with a DSH patch example and external service credentials.
-
DSH Agent Teams · NanmiCoder/dsh-agent-teams@99b1e8a — Team-style agent orchestration with persisted state and child-process coordination.
- Evidence: manifest → patch · Identity:
@nanmicoder/dsh-agent-teams - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· behind rc.6 baseline - Signals:
subprocessfilesystem-writestale-peer-range· Review: Held because most declared DSH peer ranges target rc.1 rather than the rc.6 review baseline.
- Evidence: manifest → patch · Identity:
-
DSH Memory Evolve · csyangwen/dsh-memory-evolve@ce7f0fa — A DSH-oriented memory and orchestration client whose fixed manifest lacks a native bundle declaration.
- Evidence: manifest → no patch · Identity: Git source / unknown
- Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
missing-bundleprivate-packageexternal-ai· Review: Held because dsh.client is present but dsh.bundle and a referenced patch are absent.
-
DSH GitHub Login · Noob-stupid/dsh-github-login@0057f05 — A GitHub login integration whose package name and patch row identity disagree.
-
DSH Find Plugin · awesome-dsh-plugin/dsh-find-plugin@e75dc2e — An agent tool for searching the DSH plugin ecosystem from inside a conversation.
-
Tydora · zuorn/Tydora@23c4546 — A Tauri Markdown workspace containing an embedded DSH bundle entry.
- Evidence: manifest → patch · Identity:
tydora - Licenses: repo
Apache-2.0/ packageunknown· lifecyclepostinstall· compatibility unknown - Signals:
embedded-sourceexternal-applicationfilesystemsubprocess· Review: Held because the root package is a desktop application, the patch loads local TypeScript source, postinstall runs patch-package, and a separate install identity was not confirmed.
- Evidence: manifest → patch · Identity:
-
DSH Autonomy · abab996/dsh-autonomy@94f64d3 — Adds per-session autonomy levels that alter system-prompt directives from strict through more exploratory behavior.
- Evidence: manifest → patch · Identity:
dsh-autonomy - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
system-promptsession-dataclient-injectionidentity-collision· Review: Held because the documented unscoped npm identity currently resolves to JinkaiLiu/dsh-autonomy, not this repository; local source installation remains separately documented.
- Evidence: manifest → patch · Identity:
-
DSH Habits · DimitriLIAN/dsh-habits@f5e9c6f — Edits the user-global AGENTS.md instructions from DSH Web settings so habits are injected into every session.
- Evidence: manifest → patch · Identity:
dsh-habits - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
global-instructionsfilesystem-writeclient-injectionprepare-buildunresolved-install-identity· Review: Held because the README installation target still contains a placeholder owner and the npm identity does not resolve; its prepare build and global instruction writes were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Path Browser · dkjsiogu/dsh-path-browser@471496f — Browses host files and folders from the Web composer and inserts selected absolute paths.
- Evidence: manifest → patch · Identity:
dsh-path-browser - Licenses: repo
MIT/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
filesystemabsolute-pathclient-injectionprepare-buildunresolved-install-identity· Review: Held because the fixed source has no README or author-documented public installation identity and its npm name does not resolve; the prepare hook and filesystem access were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Shutup · DosterBool/dsh-shutup@cc19b87 — Adds a configurable shortcut that interrupts model generation and steers the active turn with a correction prompt.
- Evidence: manifest → patch · Identity:
dsh-shutup - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
model-interruptprompt-steeringsession-databrowser-storageunresolved-install-identity· Review: Held because no public installation documentation or resolvable package target was found at the fixed commit; prompt steering, session access, and browser storage were not exercised.
- Evidence: manifest → patch · Identity:
-
DSH Precedent · dshplugin-me/dsh-precedent@1a84adf — Builds a cited working-memory ledger from the existing DSH session log to surface prior successful approaches.
- Evidence: manifest → patch · Identity: Git source / unknown
- Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· compatibility unknown - Signals:
session-logworking-memoryprivate-packageunreleased-tagunresolved-install-identity· Review: Held because the author states that the documented v0.1.0 Git target is not tagged and will not currently resolve; session-log access was not executed.
-
DSH Diff Approval · 9087/dsh-diff-approval@5966410 — A pending-change panel that records edit and write results, shows whole-file diffs, and supports independent keep or revert decisions.
- Evidence: manifest → patch · Identity:
dsh-diff-approval - Licenses: repo
unknown/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
filesystem-writefile-deletesession-dataclient-injectionunresolved-install-identity· Review: Held because the documented npm target did not resolve and no separate public Git-source installation command was found; revert can overwrite or remove files and was not executed.
- Evidence: manifest → patch · Identity:
-
Helm-D Security Router · ADWMC/helm-d@beef627 — The routing component of a nine-bundle security-analysis suite covering Android, Web, native, protocol, malware, AI security, and evidence workflows.
- Evidence: manifest → patch · Identity:
@dsh-security/router - Licenses: repo
MIT/ packageunknown· lifecycleprepare· declares rc.6 peers - Signals:
security-analysisfilesystem-readtool-routingprepare-buildunresolved-install-identity· Review: Held because the nine documented scoped npm packages did not resolve during review; package manifests also omit license fields, and installers or tools were not run.
- Evidence: manifest → patch · Identity:
-
FlowDeck DSH · heidi-dang/flowdeck-dsh@225f080 — A DSH integration and execution host for FlowDeck workflows.
- Evidence: manifest → patch · Identity:
@heidi-dang/flowdeck-dsh - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
workflow-runtimesubprocessfilesystem-writeprepublish-build· Review: Held because the claimed npm identity did not resolve and the fixed documentation did not provide a reproducible public Git-source DSH install.
- Evidence: manifest → patch · Identity:
-
DSH 1024 Store · imsai-sh/awesome-deepseek-harness-plugins@dcdbcde — Combines an in-app plugin catalog with a tracked wrapper around the official DSH plugin command.
- Evidence: manifest → patch · Identity:
dsh1024 - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
plugin-marketplacepackage-installtelemetryexternal-networkfilesystem-writesubprocessidentity-unresolved· Review: Held because documentation installs dsh1024 from npm but version 0.4.0 is unavailable in the registry; no installer, telemetry, prepack or plugin operation ran.
- Evidence: manifest → patch · Identity:
-
DSH Desktop · IriskaDev/dsh-desktop@9ad9be1 — A desktop application wrapper that embeds a DSH bundle and patch.
- Evidence: manifest → patch · Identity:
dsh-desktop - Licenses: repo
MIT/ packageunknown· lifecycleprepare· compatibility unknown - Signals:
desktop-appprivate-packageprepare-buildidentity-collision· Review: Held because the npm name maps to another repository, the root is a private desktop application, and its prepare hook was not executed.
- Evidence: manifest → patch · Identity:
-
DSH Windows Manager Bridge · kanneiren/dsh-windows-manager@e9bb4c0 — An authenticated named-pipe runtime bridge embedded in the DSH Windows Manager application.
- Evidence: manifest → patch · Identity:
dsh-windows-manager-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-appnamed-pipeauthenticationembedded-bundle· Review: Held because the bridge is distributed inside a manager application and no independent public package-to-source installation identity was confirmed.
- Evidence: manifest → patch · Identity:
-
DSH Zhihu Dashboard · kexuejin/dsh-zhihu-dashboard@791cfd3 — A Zhihu dashboard and tool set for hot topics, feeds, posts, search, and idea distillation.
- Evidence: manifest → patch · Identity:
dsh-zhihu-dashboard - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
web-searchexternal-networkmodel-toolsclient-injection· Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.
- Evidence: manifest → patch · Identity:
-
DSH Processes · liuqh16/dsh-processes@a4dd651 — Background-process tools, commands, output inspection, and completion notifications.
-
DSH Marketplace · lmy414/dshregistry@c558602 — An embedded marketplace UI for browsing, risk-reviewing, installing, and removing indexed plugins.
- Evidence: manifest → patch · Identity:
dsh-marketplace - Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
plugin-marketplacepackage-installfilesystem-writeprivate-package· Review: Held because the published package has no repository mapping and the private nested source lacks an independently documented public installation path.
- Evidence: manifest → patch · Identity:
-
DSH Desktop Hub · MarecGents/deepseek-harness-hub@43f64fb — A WebView2 desktop shell with tray controls, theme sync, window memory, and a side panel.
- Evidence: manifest → patch · Identity:
@marecgents/dsh-hub - Licenses: repo
MIT/ packageMIT· lifecyclepostinstall· behind rc.6 baseline - Signals:
desktop-appnative-shellpostinstallfilesystem-writeclient-injection· Review: Held because several DSH peers target rc.1 and installation runs native desktop setup through postinstall.
- Evidence: manifest → patch · Identity:
-
DSH API Usage · marvina/dsh-api-usage@bc47b5d — A sidebar panel for API balance and token-usage visibility.
- Evidence: manifest → patch · Identity:
dsh-api-usage - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· declares rc.6 peers - Signals:
credentialsaccount-balancetoken-meterexternal-networkprepublish-build· Review: Held because the documented npm identity did not resolve and no separate reproducible Git-source install command was found.
- Evidence: manifest → patch · Identity:
-
DSH Feishu Bridge · minyang2020/dsh-feishu-bridge@034f5f6 — A bidirectional Feishu bot bridge with per-user sessions, approvals, questions, and long-connection delivery.
- Evidence: manifest → patch · Identity:
feishu-dsh-bridge - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
enterprise-messagingcredentialssession-dataapproval-forwardingexternal-network· Review: Held because the documented DSH package identity did not resolve; the source checkout instructions cover a standalone sidecar but not a reproducible Git-source DSH bundle install.
- Evidence: manifest → patch · Identity:
-
DSH MCP Adapter · NexusAgentX/dsh-mcp-adapter@39c5aab — A single proxy tool that exposes MCP servers without injecting every server schema into context.
-
DSH Codex Shim · OpenTritium/dsh-codex-shim@2522f9a — A route-aware Codex environment simulation intended to improve tool-call reliability for adapted models.
- Evidence: manifest → patch · Identity:
@opentritium/dsh-codex-shim - Licenses: repo
MIT/ packageMIT· lifecycleprepare· behind rc.6 baseline - Signals:
environment-simulationagent-steeringsandbox-policyprepare-build· Review: Held because every DSH peer targets rc.5 and installation requires a prepared tarball plus an exact host patch.
- Evidence: manifest → patch · Identity:
-
DSH MCP Support · royenheart/dsh-plugin-mcp-support@e0e95e4 — A thin settings-driven wrapper over the native DSH MCP client.
- Evidence: manifest → patch · Identity:
@royenheart/dsh-plugin-mcp-support - Licenses: repo
unknown/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
mcpconfiguration-writelocal-installer· Review: Held because its native dsh-mcp-client peer targets rc.5 while the surrounding settings peer targets rc.6, and the public package identity is unresolved.
- Evidence: manifest → patch · Identity:
-
DSH Yi · Sanchaji/dsh-yi@e634e91 — An I Ching divination tool with a Web entry and session-aware results.
- Evidence: manifest → patch · Identity:
dsh-yi - Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· mixed peer ranges - Signals:
divinationmodel-toolssession-dataclient-injection· Review: Held because the npm identity did not resolve and the Git installation target remains an author placeholder rather than this fixed repository.
- Evidence: manifest → patch · Identity:
-
DSH Wallpaper Engine · TianYa-DAO/dsh-wallpaper-engine@f8f5fa4 — A local Wallpaper Engine library, background layer, and native scene panel for the desktop shell.
- Evidence: manifest → patch · Identity:
dsh-wallpaper-engine - Licenses: repo
MIT/ packageMIT· lifecycleprepare· behind rc.6 baseline - Signals:
desktop-appfilesystem-readnative-bridgethemeprepare-build· Review: Held because all DSH Web peers target rc.5 rather than the rc.6 review baseline and the package identity is unpublished.
- Evidence: manifest → patch · Identity:
-
DSH HTML Parse · uckkk/dsh-html-parse@69fc2c5 — A model tool that extracts titles, metadata, headings, links, tables, and text from HTML.
- Evidence: manifest → patch · Identity:
dsh-html-parse - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
html-parsingmodel-toolscontent-extraction· Review: Held because the only documented install command uses an unpublished npm identity and no reproducible Git-source alternative is provided.
- Evidence: manifest → patch · Identity:
-
DSH Handoff · WeiYe6/dsh-handoff@08dc59d — Summarizes a long session into a fresh same-workspace session while preserving the original.
- Evidence: manifest → patch · Identity:
dsh-handoff - Licenses: repo
MIT/ packageMIT· lifecycleprepack· behind rc.6 baseline - Signals:
session-datasummarizationmodel-requestsession-createprepack-build· Review: Held because its DSH LLM and session peers are fixed to rc.5 rather than the rc.6 review baseline.
- Evidence: manifest → patch · Identity:
-
DSH Tool Diagnose · xu-kai-quan/dsh-tool-diagnose@a0e4aad — An extensible diagnostics registry exposed through a model-facing diagnose tool.
-
DSH Plugin Marketplace · YELEBAI/dsh-plugin-marketplace@f4d5bbe — A validation-oriented marketplace with guided install agents, self-update, discovery, and installed-plugin management.
- Evidence: manifest → patch · Identity:
dsh-plugin-marketplace - Licenses: repo
MIT/ packageMIT· lifecyclenone· behind rc.6 baseline - Signals:
plugin-marketplacepackage-installself-updateidentity-collisionagent-delegation· Review: Held because its npm identity maps to the separately cataloged Scorp1o117 source and its DSH peers target rc.5.
- Evidence: manifest → patch · Identity:
-
DSH Vision Plugin · zcma11/dsh-vision-plugin@b418a5f — Uploads images, transcribes them through DashScope or offline Windows OCR, and injects descriptions into messages.
- Evidence: manifest → patch · Identity:
dsh-vision-plugin - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
visionocrcredentialsexternal-networkidentity-collision· Review: Held because the npm identity maps to Xin-Zhang-IceMan/dsh-vision-plugin while the Git command in this source still contains a placeholder owner.
- Evidence: manifest → patch · Identity:
-
DSH Model Redactor · zerodegress/dsh-model-redactor@90af946 — Redacts secrets from model-visible input, output, reasoning, tool arguments, and stored session surfaces.
- Evidence: manifest → patch · Identity:
dsh-model-redactor - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
secret-redactionsession-datareasoning-datatool-arguments· Review: Held because the fixed source documents manual Cordis composition but no reproducible public DSH package or Git-source installation identity.
- Evidence: manifest → patch · Identity:
-
DSH Thinking Notifier · 6-debug-6/dsh-thinking-notifier@d97ab09 — A desktop popup for thinking, permission, and completion status events.
- Evidence: manifest → patch · Identity:
dsh-thinking-notifier - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-notificationapproval-eventssubprocesslocal-http-serverplaceholder-identity· Review: Held because npm has no matching package and the manifest points to a placeholder repository identity; its PowerShell or Python subprocess and local status server were not started.
- Evidence: manifest → patch · Identity:
-
DSH Manager · as1350/dsh-manager@2733d86 — A skills and deployment-patch manager with transactional enablement, rollback, and script-backed patch types.
- Evidence: manifest → patch · Identity:
@deepseek-ai/dsh-manager - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
official-looking-namespaceidentity-unresolvedfilesystem-writescript-executionpatch-managementwildcard-peers· Review: Held because the official-looking npm scope is unpublished, no repository license file was found, wildcard peers do not establish compatibility, and the documented tarball version differs from the manifest.
- Evidence: manifest → patch · Identity:
-
DSH WxAuto · br1nosense/dsh-wxauto-plugin@37f4b9e — Windows WeChat automation for DSH progress reports, message polling, and a two-way task bridge.
- Evidence: manifest → patch · Identity:
@dsh-user/dsh-wxauto - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
windows-onlywechat-automationsubprocesscore-patchexternal-dependenciesusage-restriction· Review: Held because installation patches a DSH core namespace, pulls Python UI-automation dependencies, and the documented upstream usage restriction excludes production use; no installer, WeChat action, or bridge was run.
- Evidence: manifest → patch · Identity:
-
DSH WHU Plugin · daoxiang0520/dsh-plugin-whu@e4124f5 — Connects Wuhan University library, timetable, grades, exams, and weather services through tools and a local UI.
- Evidence: manifest → patch · Identity:
dsh-plugin-whu - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
campus-servicespython-subprocesslocal-http-servercredentialsweb-uilicense-unresolved· Review: Held because no repository license file was found and the Python campus-service bridge handles login and academic data; no subprocess, login, or service request was started.
- Evidence: manifest → patch · Identity:
-
Edtechools DSH Plugins · edtechools/dsh-plugins@5e68ba5 — A two-plugin workspace providing conversation turn navigation and credential-backed Bocha web search.
- Evidence: manifest → patch · Identity:
dsh-plugin-turn-nav - Licenses: repo
unknown/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
web-uiweb-searchcredentialsexternal-networkprepare-buildworkspace-dependencieslicense-unresolved· Review: Held because the repository has no license file, both packages are unpublished, wildcard peers do not establish compatibility, and Git installation requires an allowed prepare build.
- Evidence: manifest → patch · Identity:
-
DSH Cross Collaboration · gameswu/dsh-cross-collaboration@a816775 — Discovers DSH peers over LAN or relay and delegates agent tasks to remote devices.
- Evidence: manifest → patch · Identity:
dsh-cross-collaboration - Licenses: repo
unknown/ packageunknown· lifecyclenone· compatibility unknown - Signals:
lan-discoveryremote-task-executionudpwebsocketrelay-networkprivate-packagelicense-unresolved· Review: Held because the private package and repository declare no license, while the plugin exposes LAN discovery and remote delegated execution; no socket, relay, or task was started.
- Evidence: manifest → patch · Identity:
-
DSH Whale Button · hhj2714/dsh-whale-btn@c3386c4 — A draggable always-on-top whale button that focuses or opens the DSH desktop window.
- Evidence: manifest → patch · Identity:
dsh-whale-btn - Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
desktop-window-controlsubprocessalways-on-topprivate-packagegithub-only· Review: Held because the package is private and omits its package license while spawning a native window helper; the repository MIT license and GitHub install are present, but no helper was started.
- Evidence: manifest → patch · Identity:
-
DSH Plugins 4U · honghudavy-star/DSH_plugins_4U@1868796 — An aggregate plugin suite for vision input, wallpaper customization, WeChat bridging, and a settings catalog.
- Evidence: manifest → patch · Identity:
@dsh-plugins/4u - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
visioncredentialsexternal-networkfilesystem-writewechat-bridgelocal-http-serverlicense-unresolved· Review: Held because no repository license file was found and the unpublished suite combines credentialed vision, filesystem wallpaper changes, and a WeChat bridge; none was executed.
- Evidence: manifest → patch · Identity:
-
DSH Preset Switcher · jeffcwj/dsh-preset-switcher@ec337bf — Adds a session-header control and local API for changing an active session's agent preset.
- Evidence: manifest → patch · Identity:
dsh-preset-switcher - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
session-controlpreset-switchinglocal-http-serverweb-uilocal-installlicense-unresolved· Review: Held because no repository license file or remote package identity was found and installation is documented only from an absolute local path; no session preset was changed.
- Evidence: manifest → patch · Identity:
-
DSH Claude Code Plugins · jianxx/dsh-cc-plugins@f5407cb — A large Claude Code parity workspace with permission rules, settings cascade, tools, hooks, MCP, memory, and profile bundles.
- Evidence: manifest → patch · Identity:
@jianxx/dsh-cc-bundle-permissions - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· mixed peer ranges - Signals:
permission-enginesettings-writehookssubprocessexternal-networkworkspace-dependenciesidentity-unresolved· Review: Held because the documented repository install targets a private root with no bundle, nested packages are unpublished, and workspace dependencies do not provide an external install identity; no hook or tool ran.
- Evidence: manifest → patch · Identity:
-
DSH Lan Memory · kiefeng/dsh-lan-memory@ae0efa5 — A memory and persona system with pinned facts, JSONL retrieval, experience, soul, mood, settings, and sidebar cards.
- Evidence: manifest → patch · Identity:
dsh-lan-memory - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
persistent-memoryfilesystem-writepersona-injectionweb-uilocal-installlicense-unresolved· Review: Held because no repository license file or remote package identity was found and only local-directory installation is documented; no memory, persona, or mood state was written.
- Evidence: manifest → patch · Identity:
-
DSH QQ Bot · leliln52/dsh-qqbot@ff2d9f7 — Connects DSH agents to QQ through OneBot WebSocket or the official QQ bot platform.
- Evidence: manifest → patch · Identity:
dsh-qqbot - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
qq-botwebsocketcredentialsexternal-networkpersistent-sessionidentity-unresolved· Review: Held because npm exposes 1.0.1 without repository metadata while the fixed source is 0.2.0 and documents only local installation; no bot login, message, or agent session was started.
- Evidence: manifest → patch · Identity:
-
DSH Freebuff · liceses/dsh-freebuff@308f365 — Adapts the unofficial Freebuff desktop protocol into a DSH model provider.
- Evidence: manifest → patch · Identity:
dsh-freebuff - Licenses: repo
Apache-2.0/ packageApache-2.0· lifecyclenone· declares rc.6 peers - Signals:
model-providerunofficial-protocolexternal-networkanonymous-identityreverse-proxycompliance-unresolved· Review: Held because it reimplements an undocumented third-party desktop protocol and free service without confirmed API authorization; no request, identity, or model response was sent.
- Evidence: manifest → patch · Identity:
-
DSH Firefly Theme · Liu-ZA-81/dsh-theme-firefly@edbee71 — A Firefly character theme with wallpapers, GIFs, music, neon styling, and a startup transformation animation.
- Evidence: manifest → patch · Identity:
dsh-theme-firefly - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
web-themeclient-injectionbundled-mediacopyrighted-assetsaudiovideo· Review: Held because the MIT license covers code while the repository redistributes HoYoverse character art, GIFs, and music whose copyright remains with third parties; no media was loaded.
- Evidence: manifest → patch · Identity:
-
DSH UI Sidebar · nicklin99/dsh-ui-sidebar@c31e512 — Replaces the DSH Web sidebar with custom branding, session search, grouping, and workspace navigation.
- Evidence: manifest → patch · Identity:
dsh-ui-sidebar - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
client-injectionsession-datasidebar-replacementunresolved-install-identitylicense-unresolved· Review: Held because no repository license file, repository mapping, published package, or author-documented public install identity was found; the replacement sidebar was not loaded.
- Evidence: manifest → patch · Identity:
-
PicGo DSH Plugin · PicGo/dsh-plugin@8616305 — Uploads images and files from DSH through PicGo image-host configurations.
- Evidence: manifest → patch · Identity:
@picgo/dsh-plugin - Licenses: repo
unknown/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
file-uploadfilesystem-readcredentialsexternal-networkmodel-toolsprepare-buildlicense-unresolved· Review: Held because no repository license file was found for the published package; no prepare build, file read, credential use, or upload was executed.
- Evidence: manifest → patch · Identity:
-
DSH Skin Studio · realMisakaMikoto/dsh-skin-studio@8a66d01 — Creates, imports, manages, and shares portable visual skins for DSH Web.
- Evidence: manifest → patch · Identity:
dsh-skin-studio - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
themeclient-injectionfile-importbrowser-storageprepack-buildidentity-unresolved· Review: Held because npm exposes 0.4.4 without repository metadata while the fixed source is 0.3.5; no build, skin import, storage, or rendering was executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugin Surgery · ruimin251204/dsh-plugin-surgery@11249e0 — Previews plugin impact, performs uninstall cleanup, creates rollback snapshots, and diagnoses plugin state.
- Evidence: manifest → patch · Identity:
dsh-plugin-surgery - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-managementfilesystem-writefile-deleterollbackconfiguration-editidentity-unresolved· Review: Held because npm exposes 0.2.0 without repository metadata while the fixed source is 0.1.4; no uninstall, cleanup, snapshot, rollback, or diagnosis was executed.
- Evidence: manifest → patch · Identity:
-
DSH QoL · shifan3/dsh-QoL@5830544 — Changes composer shortcuts, supports editing and branching earlier messages, and adds code-aware file editing.
- Evidence: manifest → patch · Identity:
dsh-qol - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionmessage-editsession-datafilesystem-writeprivate-packagelicense-unresolvedidentity-unresolved· Review: Held because the package is private, no repository license file or public distribution identity was found, and its immediate client injection can edit files and session history; none was loaded.
- Evidence: manifest → patch · Identity:
-
DSH Memory Hermes · SipengXie2024/dsh-memory-hermes@a79f49f — Implements bounded curated Hermes-style memory with tools, storage, context injection, and a web surface.
- Evidence: manifest → patch · Identity:
dsh-memory-hermes - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
persistent-memoryfilesystem-writecontext-injectionmodel-toolsclient-injectionlocal-packageidentity-unresolved· Review: Held because the package is unpublished, lacks repository metadata, uses wildcard DSH peers, and documents a local tarball install rather than a public source identity; no memory operation ran.
- Evidence: manifest → patch · Identity:
-
DSH CLI Interactive · studyinglx/dsh-cli@83d1538 — Provides a Claude Code-style interactive terminal profile over DSH agent, command, LLM, and session services.
- Evidence: manifest → patch · Identity:
dsh-cli-interactive - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
terminalsession-datamodel-requestprofile-bundlelocal-installidentity-unresolved· Review: Held because the package is unpublished, lacks repository metadata, and the documentation says npm publication is future work while using a locally built distribution; no build or terminal session ran.
- Evidence: manifest → patch · Identity:
-
DSH Marketplaces Nexus · TeaClearInkII/DSH-Marketplaces-Nexus@835a12c — Aggregates DSH marketplaces and curated directories into a searchable browser panel with install-command metadata.
- Evidence: manifest → patch · Identity:
dsh-marketplaces-nexus - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
plugin-marketplaceexternal-networkremote-cataloginstall-command-dataclient-injectionlicense-unresolvedidentity-unresolved· Review: Held because the published package has no repository metadata and no repository license file was found; no remote catalog fetch or install command was executed.
- Evidence: manifest → patch · Identity:
-
DSH Live2D MyGO · U1s1-king/dsh-live2d-mygo@0605eeb — Adds a MyGO-themed Live2D desktop character with dress-up, dragging, snapshots, and speech bubbles.
- Evidence: manifest → patch · Identity:
dsh-live2d-mygo - Licenses: repo
unknown/ packageCC-BY-NC-SA-4.0· lifecyclenone· compatibility unknown - Signals:
live2ddesktop-petbundled-mediathird-party-assetsclient-injectionlicense-unresolvedidentity-unresolved· Review: Held because no repository license file or public distribution identity was found and the repository bundles 82 MyGO character images whose reuse rights were not independently established; no asset was loaded.
- Evidence: manifest → patch · Identity:
-
DSH UX Writing · uckkk/dsh-ux-writing@ecf5e64 — Provides model tools and guidelines for writing interface microcopy, buttons, and error messages.
- Evidence: manifest → patch · Identity:
dsh-ux-writing - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
ux-writingmodel-toolsprompt-guidanceunresolved-install-identity· Review: Held because the documented dsh plugin add target is not published and no separate Git-source install command or package repository mapping was found; no tool or prompt guidance ran.
- Evidence: manifest → patch · Identity:
-
DSH Config Manager · xiajiajun516/dsh-config-manager@a019bc3 — Backs up, exports, imports, and migrates DSH configuration through host tools and a web interface.
- Evidence: manifest → patch · Identity:
dsh-config-manager - Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
configuration-backupfilesystem-readfilesystem-writecredentialsmodel-toolsclient-injectionlicense-unresolved· Review: Held because neither the repository nor package declares a license; the source is also behind the current registry version, and no configuration or UI action ran.
- Evidence: manifest → patch · Identity:
-
DSH EvoForge · deepseek-harness-evoforge/dsh-evoforge@e8dada4 — A pre-alpha suite for evidence-driven skill evolution, delivery, diagnostics, channels, review follow-up, and goal continuity.
- Evidence: manifest → patch · Identity:
dsh-evolve - Licenses: repo
MIT/ packageMIT· lifecycleprepack· declares rc.6 peers - Signals:
aggregate-scopeskillsfilesystem-readfilesystem-writeexternal-networksubprocessprepack-buildunresolved-install-identity· Review: Held because the author documents no registry release and the current eleven-package install requires a local build and tarball pack; no build, package, skill mutation, channel, subprocess, or external request was executed.
- Evidence: manifest → patch · Identity:
-
DSH Subagent Default Model · dingminhua/dsh-subagent-default-model@cd69656 — Adds a settings-backed default provider and model for subagent delegations without an explicit route.
- Evidence: manifest → patch · Identity:
dsh-subagent-default-model - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
subagent-routingsettings-writenested-bundleunresolved-install-identity· Review: Held because the distributable bundle is in a plugin subdirectory with no npm release or author-documented public subdirectory install identity; no settings or subagent route was changed.
- Evidence: manifest → patch · Identity:
-
DjangoAILab DSH Plugins · DjangoAILab/dsh-plugins@459d852 — A manual plugin collection whose canonical record exposes external CLI agents as DSH subagent providers.
- Evidence: manifest → patch · Identity:
dsh-external-agents - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
external-agentsubprocesscredentialsnested-bundleaggregate-scopeunresolved-install-identity· Review: Held because the manual monorepo subdirectory has no package release or author-documented public subdirectory install identity; no external CLI, credential forwarding, subprocess, upload route, or browser code was executed.
- Evidence: manifest → patch · Identity:
-
DSH Third Party Suite · huangrx6/dsh-plugin@7a57cec — A suite hub for layout, MCP, remote-access, and Skill-management plugins in DSH settings.
- Evidence: manifest → patch · Identity:
dsh-third-party - Licenses: repo
unknown/ packageMIT· lifecycleprepare· declares rc.6 peers - Signals:
aggregate-scopeclient-injectionmcp-managementskill-importexternal-networkprepare-buildunresolved-install-identity· Review: Held because five nested packages have no registry release or author-documented public subdirectory install identity and the repository lacks a license file; no build, MCP, Skill, Tailscale, or UI behavior was executed.
- Evidence: manifest → patch · Identity:
-
DSH Plugs · JustGenius-s/DSH-Plugs@574f791 — A six-plugin suite for Codex-style navigation, updates, model configuration, marketplace, and WeChat presentation.
- Evidence: manifest → patch · Identity:
@just-genius/dsh-codex - Licenses: repo
unknown/ packageunknown· lifecyclenone· declares rc.6 peers - Signals:
client-injectionlicense-incompleteidentity-unresolved· Review: Held because repository license, package license, installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Balance Plugin · kongshan-zhuyu/dsh-balance-plugin@e866642 — A private nested bundle composing host and client balance components for DSH.
- Evidence: manifest → patch · Identity:
@deepseek-ai/dsh-bundle-balance - Licenses: repo
unknown/ packageunknown· lifecyclenone· compatibility unknown - Signals:
billing-datacredentialsexternal-networkclient-injectionnested-bundlelicense-unresolvedunresolved-install-identity· Review: Held because the private nested bundle has no repository or package license, registry release, or public subdirectory install identity; no balance request, credential resolution, or client UI was executed.
- Evidence: manifest → patch · Identity:
-
DSH Kingdom · lusblead/dsh-Kingdom@d55cc25 — Adds local Kingdom territory, binding, task-governance, and execution-lifecycle capabilities to DSH sessions.
- Evidence: manifest → patch · Identity:
dsh-kingdom - Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecyclenone· behind rc.6 baseline - Signals:
external-networkcredentialsclient-injectiondatabasestale-peer-range· Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
Neplich DSH Plugin Suite · Neplich/dsh_plugin@8a54a60 — A multi-package suite spanning browser automation, image archiving, chat enhancements, configuration, Skills, and a terminal work panel.
- Evidence: manifest → patch · Identity:
@neplich/dsh-web-workpanel - Licenses: repo
MIT/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
aggregate-scopebrowser-automationfilesystem-readfilesystem-writesubprocessclient-injectionunresolved-install-identity· Review: Held because eleven nested packages have no registry release or author-documented public subdirectory install identity; no browser automation, image archive, file edit, MCP or Skill change, terminal, or build was executed.
- Evidence: manifest → patch · Identity:
-
DSH Environment Probe · nodata404/dsh-env-probe@a0dd6f1 — Probes local operating-system, shell, runtime, tool, disk, and network environment details for the system prompt.
- Evidence: manifest → patch · Identity:
dsh-env-probe - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
environment-probesystem-promptlocal-machine-dataidentity-unresolved· Review: Held because the package is unpublished, the README has no public install identity, and the repository has no license file; no probe ran.
- Evidence: manifest → patch · Identity:
-
DSH HarmonyOS Scrcpy · ns-zzj/dsh-hos-scrcpy@2126bb2 — Provides HarmonyOS device discovery, screen streaming, touch control, system keys, and hilog access.
- Evidence: manifest → patch · Identity:
dsh-hos-scrcpy - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
device-controlscreen-streamingsystem-keyslog-accessidentity-unresolved· Review: Held because the package is unpublished and the documentation only describes installing a locally built tarball; no device or command action ran.
- Evidence: manifest → patch · Identity:
-
DSH Harness Plugin · Proton1917/dsh-harness-plugin@4c597c8 — Adds live usage statistics and personal interface customization to DSH Web.
- Evidence: manifest → patch · Identity:
@proton1917/dsh-harness-plugin - Licenses: repo
BSD-3-Clause/ packageBSD-3-Clause· lifecycleprepare· compatibility unknown - Signals:
usage-statisticsclient-injectiontokenizerprepare-buildidentity-unresolved· Review: Held because the scoped package is unpublished and the README only documents a machine-specific local link; no build, tokenizer, or UI behavior ran.
- Evidence: manifest → patch · Identity:
-
Restrict Discipline · refyon/restrict-discipline@52c5c81 — Blocks risky project-root writes and selected environment, proxy, and remote Git changes.
- Evidence: manifest → patch · Identity:
restrict-discipline - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
policy-enforcementfilesystem-guardenvironment-guardgit-guardidentity-unresolved· Review: Held because the documented registry name is unpublished and the GitHub example uses a placeholder owner rather than this repository; no policy hook ran.
- Evidence: manifest → patch · Identity:
-
DSH Wallpaper Engine · sakuraaa667/dsh-wallpaper-engine@63ffd5c — Uses locally downloaded Wallpaper Engine assets as the DSH web background.
- Evidence: manifest → patch · Identity:
dsh-wallpaper-engine - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
wallpaper-enginefilesystem-readclient-injectionidentity-unresolved· Review: Held because the registry package was unpublished and the README only documents local file installation; no asset scan or UI behavior ran.
- Evidence: manifest → patch · Identity:
-
DSH Image Describer · shuxu-zhao/dsh-image-dscriber@071d388 — Adds an image-description tool backed by a configurable DSH vision provider.
- Evidence: manifest → patch · Identity:
dsh-image-describer - Licenses: repo
MIT/ packageunknown· lifecyclenone· compatibility unknown - Signals:
vision-modelmodel-toolattachmentsexternal-networklicense-unresolvedidentity-unresolved· Review: Held because the package is unpublished, package license is undeclared, and documentation only uses a local source directory; no image or model action ran.
- Evidence: manifest → patch · Identity:
-
DSH RAGFlow · staff-os/dsh-ragflow@e018a34 — Adds RAGFlow knowledge-base retrieval, tools, HTTP service, and browser configuration to DSH.
- Evidence: manifest → patch · Identity:
@deepseek-ai/dsh-ragflow - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
rag-retrievalexternal-networkcredentialsmodel-toolsclient-injectionlicense-unresolved· Review: Held because the repository has no license file even though a GitHub install identity is documented; no retrieval, HTTP, tool, or UI behavior ran.
- Evidence: manifest → patch · Identity:
-
DSH UI Tools · xing-shuyin/dsh-ui-tools@5ec7817 — Adds a project file viewer, multi-terminal panel, and Git operations to DSH Web.
- Evidence: manifest → patch · Identity:
dsh-ui-tools - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
file-managerterminalgit-operationsfilesystem-writeclient-injectionlicense-unresolved· Review: Held because the repository has no license file even though the registry package declares MIT; no terminal, Git, file, or UI action ran.
- Evidence: manifest → patch · Identity:
-
DSH Encrypt · yauntyour/DSH-Encrypt@7e1bab4 — Stores DSH credentials in an AES-256-GCM encrypted file managed through Web UI.
- Evidence: manifest → patch · Identity:
dsh-encrypt - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
credential-storageencryptionfilesystem-writenative-dependencyclient-injectionidentity-unresolved· Review: Held because the package is unpublished and documentation only describes local tarball or path installation; no native dependency, encryption, credential, or prepack action ran.
- Evidence: manifest → patch · Identity:
-
Zzy DSH Prompt Optimizer · zhengzeyong9527-droid/zzy-dsh-prompt-optimizer@3cf32c5 — Adds privacy-aware prompt optimization with direct application to the DSH composer.
- Evidence: manifest → patch · Identity:
zzy-dsh-prompt-optimizer - Licenses: repo
MIT/ packageMIT· lifecycleprepack· compatibility unknown - Signals:
prompt-optimizationmodel-requestclient-injectionprepack-buildidentity-unresolved· Review: Held because the documented registry package is unpublished and no public Git identity is documented; no prompt, model, UI, or build action ran.
- Evidence: manifest → patch · Identity:
-
DSH Bridge · baixianger/dsh-bridge@3644483 — Provides local session messaging and event bridging between DeepSeek Harness nodes.
- Evidence: manifest → patch · Identity:
dsh-bridge - Licenses: repo
unknown/ packageMIT· lifecyclenone· declares rc.6 peers - Signals:
session-messagingevent-bridgelocal-networklicense-incomplete· Review: Held because the matching npm release and package manifest declare MIT but the fixed repository has no license file; no bridge behavior ran.
- Evidence: manifest → patch · Identity:
-
DSH System Restart · kdeightx/dsh-dock@a0da26e — Adds a sidebar control that requests a DeepSeek Harness web-process restart.
- Evidence: manifest → patch · Identity:
dsh-system-restart - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
process-controlsubprocessfilesystem-writeclient-injectionlicense-incomplete· Review: Held because the fixed repository has no license file; the unpublished local-source install and process-control implementation were not executed.
- Evidence: manifest → patch · Identity:
-
DSH Studio · lai-133/dsh-integration@f5598fb — Adds wallpaper controls and an agent collaboration board to an integrated DSH desktop workspace.
- Evidence: manifest → patch · Identity:
dsh-studio - Licenses: repo
MIT/ packageMIT· lifecyclenone· compatibility unknown - Signals:
desktop-integrationwallpaperagent-collaborationfilesystem-writesubprocessidentity-unresolved· Review: Held because the nested bundle is installed only by the enclosing desktop setup and has no independent npm or Git-source install identity; setup and desktop code were not run.
- Evidence: manifest → patch · Identity:
-
DSH LAN Access · nonmean/dsh-lan-access@fe6a4de — Toggles the DSH web server between loopback-only and local-network binding.
- Evidence: manifest → patch · Identity:
dsh-lan-access - Licenses: repo
MIT/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
network-exposurebind-all-interfacescredentialsdynamic-patchclient-injectionidentity-unresolved· Review: Held because the package is unpublished and documented Git install examples retain owner and repository placeholders; network exposure, credentials and dynamic patch behavior were not run.
- Evidence: manifest → patch · Identity:
-
DSH HUD · a903067276-rgb/dsh-hud@569daa8 — A HUD status panel for DSH web: git status, MCP servers, skills, model and token usage in a floating side panel
- Evidence: manifest → patch · Identity:
dsh-hud - Licenses: repo
MIT/ packageMIT· lifecyclenone· behind rc.6 baseline - Signals:
external-networkcredentialsclient-injectionmcpprocess-controlstale-peer-range· Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Voice AI Girlfriend · beiyege-01/dsh-voice-ai-girlfriend-plugin@8f346d1 — Voice AI girlfriend for DeepSeek Harness: FunASR mic input, Qwen3-TTS voice replies, companion animation window, QQ two-way chat. Needs the repo's voice bridge + NapCat.
- Evidence: manifest → patch · Identity:
@beiyege-01/dsh-voice-ai-girlfriend - Licenses: repo
unknown/ packageMIT· lifecycleprepare· compatibility unknown - Signals:
external-networkclient-injectionpreparelicense-incomplete· Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
Mop Learn · Chillizu/mop-plugins@328630f — Mop Learn plugin package.
- Evidence: manifest → patch · Identity:
@chillizu/mop-learn - Licenses: repo
MIT/ packageunknown· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectionprocess-controllicense-incomplete· Review: Held because package license is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
Uiskin Theme · chouxiaohuai/dsh-uiskin-theme@50f6ee0 — Blue Glass Theme (ocean fantasy) for DeepSeek Harness Web — a static profile bundle. 海洋幻想主题:海洋背景、玻璃气泡、海洋侧边栏、鲸鱼设置按钮、炫彩模型文字。
- Evidence: manifest → patch · Identity:
uiskin-theme - Licenses: repo
UNLICENSED/ packageUNLICENSED· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injectionidentity-unresolved· Review: Held because installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Texas Holdem · cxczy/dsh-texas-holdem@24dee05 — A local PVE Texas Hold’em table for the DeepSeek Harness Web GUI: sidebar entry + center-column 6-max table vs five AI bots
- Evidence: manifest → patch · Identity:
dsh-texas-holdem - Licenses: repo
unknown/ packageMIT· lifecycleprepublishOnly· compatibility unknown - Signals:
external-networkcredentialsclient-injectionprepublish-onlylicense-incompleteidentity-unresolved· Review: Held because repository license, installation identity is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Livefeed · ErrorLst/dsh-livefeed@4b98964 — DSH 实时讯息面板(Linux Do 版):定时从 linux.do 最新+最热门拉取话题,AI 按价值筛选输出,右缘悬浮面板未读/已读展示,按已读 URL 去重
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-livefeed - Licenses: repo
unknown/ packageMIT· lifecyclenone· compatibility unknown - Signals:
client-injectionbrowserlicense-incomplete· Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Live · fore-vip/dsh-live@d07268a — DeepSeek Harness(DSH)多平台直播推流插件:摄像头/麦克风采集、屏幕选区直播、画中画(PiP)、多平台多选同步推流(视频号/抖音/快手/斗鱼/B站/YY/虎牙/CC/自定义 RTMP)、ffmpeg 引擎真实推流。Cordis bundle 插件。
- Evidence: manifest → patch · Identity:
dsh-live - Licenses: repo
unknown/ packageUNLICENSED· lifecyclenone· mixed peer ranges - Signals:
external-networkclient-injectionlicense-incomplete· Review: Held because repository license, package license is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH CTF Console · fyfhcgch/dsh-ctf-collaborate@ceadb54 — CTF 解题控制台:在 DSH Web GUI 侧边栏/会话头部提供入口,右侧独立面板查看题目列表、详情、靶机端点、启动/回收环境、提交 flag。Host 经 webServer 前缀路由 /api/ctf-console/* 提供后端,用全局 fetch 调用 CTF 平台 API(X-Agent-AccessKey 认证)。
- Evidence: manifest → patch · Identity:
@dsh-external/dsh-ctf-console - Licenses: repo
unknown/ packageMIT· lifecyclenone· mixed peer ranges - Signals:
external-networkcredentialsclient-injectiondockerdatabaselicense-incomplete· Review: Held because repository license is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH Permission Engine · greatColin/dsh-permission-engine@10908c4 — DSH permission engine: a configurable responsibility chain for tools/pre-execute decisions
- Evidence: manifest → patch · Identity:
@yourname/dsh-permission-engine - Licenses: repo
MIT/ packageunknown· lifecyclenone· behind rc.6 baseline - Signals:
external-networkclient-injectionstale-peer-rangelicense-incompleteidentity-unresolved· Review: Held because package license, installation identity, current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
Deepseek Harness Background · HaoyueQin/deepseek-harness-background@e7174e4 — Custom background image plugin for the DeepSeek Harness web GUI: upload a local picture or paste an image URL, and render it behind the whole app surface with adjustable opacity, scrim, panel transparency and frosted-glass blur.
- Evidence: manifest → patch · Identity:
deepseek-harness-background - Licenses: repo
MIT/ packageMIT· lifecycleprepare· behind rc.6 baseline - Signals:
external-networkcredentialsclient-injectionprocess-controlpreparestale-peer-range· Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
DSH LLM Qoder · JiamingZang/dsh-llm-qodersdk@89658ae — Qoder CLI (qoder-agent-sdk) adapter for the DeepSeek Harness LLM seam
- Evidence: manifest → patch · Identity:
@jiamingzang/dsh-llm-qoder - Licenses: repo
MIT/ packageMIT· lifecycleprepublishOnly· behind rc.6 baseline - Signals:
external-networkcredentialsmcpprepublish-onlystale-peer-range· Review: Held because current DSH compatibility is incomplete; no lifecycle hook, plugin or capability was executed.
- Evidence: manifest → patch · Identity:
-
Bundle · kael-odin/dsh-control-center@882f04d — Installable DSH Web profile layer for DSH Control Center Web Edition