dsh-plugins

dsh-plugins

Monorepo of standalone @hy-sde-org/dsh-* plugins for DeepSeek Harness (working fork: deepseek-harness, upstream deepseek-ai/deepseek-harness).

• Read first: WORKFLOW.md — standalone-first (B) vs

fork-first (A), and the build → file: verify → publish → pkg:version pipeline.

• Phase 0 recon: scripts/recon/ — one command turns a

candidate-repo list into clones + codebase-memory indexes + analysis notes.

• Publication tracker: plugin-list.txt — published

versions per plugin + still-to-publish queue.

• Private plugins: excluded/never-publish plugins live OUTSIDE this repo, in

dsh-plugins-private (client UI slots, private API controllers). The publish flow blocks them via scripts/excluded-plugins.list — see WORKFLOW.md → "Private / never-publish plugins".

• Release infra: scripts/release-public.sh

(one package) and scripts/publish-all.sh (all packages in dependency order).

Plugin catalog

Each row is one *capability*, told as a user story. Rows with several packages are atomic groups — they come from one port (or one engine+tool pair) and only make sense mounted together; a group row's packages share the same origin and the same "why". Single-package rows are self-sufficient. Private/never-publish plugins (client UI, private API controllers) are not here — they live in dsh-plugins-private.

Capability · Packages · User story · Ported from Parallel orchestration layer · dsh-orchestration-policy · dsh-llm-slots · dsh-tool-subagent-report · You run a multi-agent session on a shared inference endpoint: model-call slots stay predictable (FIFO budget, ctx.modelSlots), every continuable child reports findings back before it ends (report tool, child-scoped), and work fans out in parallel by default with a fail-closed isolation guard + review-gate posture on pushes. Only useful together — three packages, one dispatch profile. · firstmate Agent Graph — durable scheduling · dsh-graph-control · dsh-graph-stream · dsh-graph-executor · dsh-tool-graph · dsh-graph-wakes · dsh-graph-projection · dsh-graph-host · The main agent becomes the supervisor of a durable work schedule: view/update/yield_agent_graph add, stop and finish work with deterministic ids and exactly-once claims (CAS control store); children are executable operators with worktree leases; the host wakes the supervisor at durable checkpoints — no polling. The schedule authority for the orchestration plane above. · Apache Maka (No. 1) Durable agent conversation · dsh-pi-durable (host engine: piDurableAgent service) · dsh-tool-pi-durable (model) · The model drives a second conversation that outlives the host: its own transcript, coding toolset and model route over durable SQLite storage — durable_agent_submit is exactly-once per requestId (a crash retry cannot double-run), runs continue in the background behind status/history, and fork retries a divergent branch without replaying the transcript; passive write entries never trigger a run. Engine still installs write-only without a relay endpoint. · pi — @earendil-works/pi-durable + pi-ai mounted unmodified (two cordis rows, no harness source changes) Agentic git flow · dsh-git (engine: ctx.git) · dsh-tool-git (model) · The model proposes a conventional commit split for your changes, applies it hunk-aware with log autoplacement and a P2 review gate on push, and works in per-task worktrees with durable leases — commit plan/apply split keeps every step read-only-then-validated. · fork packages/git/tool-git Long-horizon memory · dsh-memory · dsh-tool-memory · dsh-memory-extraction · The agent keeps durable project memory across sessions (retain/recall/reflect/learn/memory_edit, first-turn prompt injection), and memory-extraction automatically projects, proposes and commits durable facts at every compaction checkpoint. Full loop = all three. · oh-my-pi memory surface + Apache Maka (extraction) Rich file editing · dsh-hashline (engine) · dsh-tool-edit (model) · The four-mode edit tool (replace / patch / apply_patch / hashline) with embedded LSP format-on-write and diagnostics, replacing stock str_replace_editor on official releases. hashline is the dependency-free patch engine behind the hashline mode and has no standalone value. · oh-my-pi Internal URL routing · dsh-internal-urls · dsh-tool-fs-internal-urls · dsh-tool-fs-search-internal-urls · conflict://, pr://, issue:// resolve through one registry before the FS is touched, so the normal read/write semantics apply to conflicts, PRs and issues — and grep/glob can search them with ripgrep semantics. · oh-my-pi Debugging · dsh-dap (engine) · dsh-tool-debug (model) · One debug tool, 28 operations: launch/attach real debuggers (debugpy, lldb-dap, gdb, dlv, …), source/function/instruction/data breakpoints, continue/step/pause, threads, stack traces, scopes/variables/evaluate, memory read/write. · oh-my-pi coding-agent/src/dap/* + tools/debug.ts + DSH Agentic browser · dsh-browser (engine) · dsh-tool-browser (model) · The model opens/closes real browser sessions over CDP (launch with stealth, attach to the user's own Chrome via local relay + companion extension) and reads ARIA snapshots + screenshots. · oh-my-pi Secret / hardening audit · dsh-av (engine) · dsh-tool-av (model) · Read-only vault audit: scan for exposed credentials, check hardening, inspect the detector/hardener catalog, list secret *names* — the tool never returns a secret value. · fork @deepseek-ai/dsh-av (macOS av CLI) OpenWiki engine · dsh-openwiki (engine) · dsh-tool-openwiki (model) · Model-free repository wiki construction: begin → submit plan → next page → submit page → finish, in-process and resumable (durable run/page manifests, Grounded Claims store). The tools are just the lifecycle verbs over the engine. · langchain-ai/openwiki 0.4.3 Logseq graph · dsh-logseq-graph (engine) · dsh-tool-logseq (model) · Drive a Logseq database headlessly: list/show/search/Datalog-query/upsert/remove plus graph & server lifecycle — a terminal-first alternative to the desktop MCP bridge. · Logseq CLI Code kernels · dsh-code-runtime-kernels · Persistent Python/JS kernels with session state that survives across calls — run_kernel_code with state snapshots, magics/await support. Already mounted in the cordis-plus preset. · DSH Structural code tools · dsh-tool-ast · ast_grep structural search + ast_edit structural rewrite over the packaged native ast-grep engine (AST-aware, not text). · oh-my-pi + ast-grep Codebase memory · dsh-tool-codebase-memory · One-shot codebase-memory queries (index_repository, search_graph, query_graph, trace_path, …) against the local codebase-memory daemon — the same daemon the stdio MCP client fronts. · codebase-memory CLI Go-native TS compiler devices · dsh-tool-tsfork · Agents typecheck with the parked Go-native TypeScript compiler (can1357/TypeScript perf/checker-speedups-v3, TS 7.1.0-dev): tsfork_status reports binary + build stamp, tsfork_check runs one-shot -b gates with parsed diagnostics, wall time, --dry graph probes and a GOMAXPROCS cap — measured 7.7× stock cold on a 337-project graph with byte-identical output. Device-catalog tools; the .tsbuildinfo version-tagging gotcha is documented in-prompt; does not replace the pinned typescript@6.0.3 (oxlint typeAware, typert). Publishing after the Shape-A trial. · can1357/TypeScript (external parked binary + one-shot spawn — no compiler code vendored) Library search · dsh-tool-library-search · Free "has this already been built?" across npm/crates.io/Maven/Go/PyPI/RubyGems + GitHub — exact-name ranked, stars/downloads as fitness signals, no API key. · DSH Session health · dsh-session-intelligence · session_health: how did past sessions actually go — outcome classification (with confidence), A–F grading with per-signal penalties, tool-health and context-pressure signals. · agentsview (MIT, Kenn Software) + DSH ~~Stream rules~~ (retired) · dsh-stream-rules · Superseded upstream: 0.1.5 replaced the assistant/chunk event + replace diff ops with the AssistantStreamAttempt frame surface, and the fork dropped the package during the 0.1.5 merge. Source stays in this repo's git history. · oh-my-pi VCS surfaces · dsh-vcs · ctx.vcs: narrow read-only VCS over the user-installed pi-vcs CLI — rev/staged/worktree diffs with --name-only/--numstat, status counts, branch detection, HEAD info. · pi-vcs (native CLI) Session URL scheme · dsh-session-url · session:// handler: your own session history becomes files — list sessions, rendered transcripts, exact event JSON, FTS cross-session search via internal-URL-aware read/grep. Optional companion to internal-URL routing. · oh-my-pi internal-urls + DSH Credential-free web search · dsh-web-search-public · One web_search call fans out to Startpage/DuckDuckGo/Ecosia/Google/Mojeek in parallel, merges by consensus, respects soft/hard deadlines — zero API keys. · oh-my-pi web/search/* + Effect Zstd frames · dsh-zstd-frame · Zstandard frame primitives (scan / compress / decompress / multi-frame decoder) shared by the session persistence backend (session.jsonl.zstd) and project memory bank (bank.jsonl.zstd). · DSH Archive engine · dsh-fs-archive · Pure-TS multi-format archive library — zip/tar/tar.gz/rar/7z/iso/deb/rpm/cpio/cab/arj/asar plus codecs (gzip, bzip2, LZW, xz, deflate, zstd). · oh-my-pi pi-utils Native PDF & SQLite sidecar · dsh-omp-native — Rust crate, no npm package (the harness finds the binary via DSH_OMP_NATIVE_PATH or the target/release/ probe) · One statically linked binary over a pinned JSON CLI contract, consumed by the fork's read tool: pdf rasterizes pages to PNG (pure-Rust hayro renderer, omp² bounds — 20 MiB in / 2000 pages / 1.5M px / 8 MiB out) and sqlite does read-only queries with the oh-my-pi target syntax (db.sqlite:users?where=…, raw ?q=SELECT), WAL + progress interrupts. Build with cargo; see its README. · oh-my-pi omp² crates/tools/src/read/

Layout

dsh-<plugin>/                container dir (private root package, docs, tests)
  packages/<pkg>/            publishable package → npm @hy-sde-org/dsh-<name>
dsh-web-search-public/       flat package (publishes from its root)
dsh-omp-native/              native Rust sidecar (cargo crate — build with cargo, not pnpm)
scripts/                     shared infra: recon, release guards, publish runner

One git repo, one pnpm workspace (pnpm-workspace.yaml — all publishable @hy-sde-org/dsh-* packages, including nested members like dsh-git/packages/git/tool-git), one lockfile. The previous per-plugin git repos are archived under ~/.dsh/archives/dsh-plugins-git/.

Typical commands (from the root)

pnpm install                 # one install for everything (native builds whitelisted)
pnpm -r check                # typecheck all packages
pnpm -r test                 # run every package's tests
pnpm -r build                # build every package
bash scripts/publish-all.sh --check     # validate all packages, no publishing
bash scripts/publish-all.sh --publish   # publish in dependency order (prompts each)
bash scripts/release-public.sh dsh-vcs/packages/vcs --check   # one package

Intra-monorepo dependencies use workspace:^ — pnpm rewrites them to the real version ranges on pnpm publish (never use bare npm publish, it leaks workspace:^ into the tarball).