plugins.json

{
  "schemaVersion": 1,
  "updatedAt": "2026-09-21",
  "validationLevels": [
    {
      "id": "L0",
      "name": "Discovered",
      "description": "The project was located, but its source and runtime behavior have not been reviewed."
    },
    {
      "id": "L1",
      "name": "Source reviewed",
      "description": "Package metadata, composition files, lifecycle scripts, permissions, and obvious risks were reviewed."
    },
    {
      "id": "L2",
      "name": "Import compatible",
      "description": "Static dependency analysis and a real host-entry import probe passed in the named environment."
    },
    {
      "id": "L3",
      "name": "Composition mounted",
      "description": "An isolated DSH profile started with all expected Cordis rows active and tools registered."
    },
    {
      "id": "L4",
      "name": "Functional smoke",
      "description": "At least one representative end-to-end capability completed successfully in a controlled target."
    },
    {
      "id": "L5",
      "name": "Deployment validated",
      "description": "Exact source or artifact identity, acceptance checks, security notes, and rollback steps are recorded."
    },
    {
      "id": "baseline",
      "name": "Locked baseline",
      "description": "The exact component is part of a maintained deployment lock and its complete acceptance contract."
    }
  ],
  "suites": [
    {
      "id": "windows-companion-suite",
      "displayName": "Windows companion suite",
      "profile": "web",
      "members": [
        {
          "plugin": "dsh-github-copilot",
          "requiredByBaseDeployment": true
        },
        {
          "plugin": "dsh-cron",
          "requiredByBaseDeployment": false
        },
        {
          "plugin": "dsh-playwright-host",
          "requiredByBaseDeployment": false
        }
      ]
    }
  ],
  "plugins": [
    {
      "id": "dsh-github-copilot",
      "displayName": "DSH GitHub Copilot",
      "package": "dsh-github-copilot",
      "categories": [
        "model-provider",
        "search"
      ],
      "integration": "cordis",
      "artifact": {
        "name": "dsh-github-copilot-0.4.0-alpha.33.tgz",
        "url": "https://github.com/cloga/dsh-github-copilot/releases/download/v0.4.0-alpha.33/dsh-github-copilot-0.4.0-alpha.33.tgz",
        "sha256": "b293d40351f2e732969bac88c3906280b50c47a011bbeac1dc68bc4a8b0de480",
        "sha512": "7cc38d8764e1b2edd84efdba0e719614394d836bf1ded604e82aa6e3f02ae4b98bc09a3bd707916474e42694677a70db5a4cdcbb8c8d9a4eeef86509c5bd1b43",
        "integrity": "sha512-fMONh2Thsu3YTv26DnGWFDlNg2vx3tYE6Cqm4/Aq5LmLwJo71weRZHTkJpRnenDbWkzcu4yNmk7u+GUJxb0bQw==",
        "releaseTag": "v0.4.0-alpha.33",
        "releaseCommit": "aa90fe434da8b2172faa1446afa0a0fd006afe00",
        "releaseImmutable": true,
        "checksumManifestUrl": "https://github.com/cloga/dsh-github-copilot/releases/download/v0.4.0-alpha.33/SHA256SUMS",
        "size": 724820,
        "checksumManifestSha256": "f81df10b7fd6e40b2319a42de1f04c3b7f7eccc57809b51623c9145f2a3df076",
        "checksumManifestSize": 104
      },
      "source": {
        "repository": "https://github.com/cloga/dsh-github-copilot",
        "pullRequest": 157,
        "commit": "aa90fe434da8b2172faa1446afa0a0fd006afe00",
        "reviewedHead": "3f765c61f5ceb6549a322e0407bab0c61e07b3d2",
        "mergeCommit": "aa90fe434da8b2172faa1446afa0a0fd006afe00",
        "release": "0.4.0-alpha.33"
      },
      "platforms": [
        "cross-platform"
      ],
      "recommendation": "recommended",
      "validation": {
        "level": "baseline",
        "verifiedAt": "2026-09-21",
        "dshVersion": "fork-owned Desktop-managed 0.1.6-alpha.1",
        "nodeVersion": "24.18.1",
        "evidence": [
          {
            "kind": "deployment-lock",
            "description": "The Windows deployment lock selects published immutable Desktop 0.1.6-alpha.1.cloga.17 sequence 28, bundled Core 0.1.6-alpha.1, and unchanged Copilot 0.4.0-alpha.33. Formal release run 35583602522 attempt 1 and original packaged evidence are verified. Fresh native-ASAR run 35595040585 attempt 1 passed at exact Ops code head bb7a0a366e789b19918be6d8a6e40266c46a94f9, including native job106318363183 and all four jobs. This later docs/evidence-only record is not relabeled as the qualified code head. Prior .16/alpha33 and .14/alpha32 evidence is not transferred; the first .17 startup failure remains unexplained. No local installation or activation is claimed.",
            "path": "deployments/windows-copilot.lock.json"
          },
          {
            "kind": "import-probe",
            "description": "The deployment acceptance contract requires real host-entry import probes. Web/headless evidence must remain separate from the reserved Desktop profile and does not establish Desktop Models readiness.",
            "path": "docs/local-core-desktop-copilot.md"
          },
          {
            "kind": "composition-mount",
            "description": "Desktop native provisioning owns reserved-profile composition and health verification. The Windows Ops adapter preserves delegation and never falls back to external profile materialization.",
            "path": "docs/local-core-desktop-copilot.md"
          },
          {
            "kind": "functional-smoke",
            "description": "Formal source run 35583602522 attempt 1 verified packaged Electron initial/restart provisioning, signed-out account and retained alpha33 Model roles views, read-only workspace, provider-only search routing, Fallback labeling, Desktop version menus, graph isolation, helper handoff and cleanup for 0.1.6-alpha.1.cloga.17/0.4.0-alpha.33. Positive usage uses released Client bytes and isolated synthetic Session/quota for both Copilot routes without Host transport. Separate external-link renderer tests use actual Electron clicks with a substituted OS opener; real browser loading/OAuth/model/search and installer upgrade remain unverified. Separate fresh Ops run 35595040585 passed at exact code head bb7a0a366e789b19918be6d8a6e40266c46a94f9; its driver enforced the locked formal inputs. That result is independent of formal publication and is not execution at this later evidence-recording commit.",
            "path": "tests/fixtures/desktop-native-verified-release/formal-cloga016-17/acceptance.json"
          },
          {
            "kind": "import-probe",
            "description": "Fresh .17 registered-caller run 35595040585 attempt 1 / native job106318363183 passed at exact Ops code head bb7a0a366e789b19918be6d8a6e40266c46a94f9. Authenticated artifact10636930492 original ZIP is731bytes, SHA256 bde376fbf0325e81b30748478b8de365f26097ecb936919e4d8e6fa8babaa9e5; its sole byte-exact1073-byte qualification.json is SHA2566ad0298788578353c6ef306ddeec225c785d335631f06b7d38c1f879cc526fee. Schema1 verifies9806 runtime files, full application package identity/SHA2569dbc8d4f5239e17db08be4745accc48661396bbe538ce5cf5be461d461cde7e4, metadata+CJS+ESM resolution, one observer call, private-profile cleanup and three rejected descriptor/version/absent-home request copies. Formal positive proof is driver-enforced, not invented summary fields. Whole-carrier/model/installer-upgrade remain false. Earlier startup failure35590167413 remains unknown; later qualification success is not a root-cause repair. Runtime/test/workflow/lock bytes remain equal to qualified bb7; later record/merge SHAs are not native-run heads. No local activation.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-17/qualification.json"
          },
          {
            "kind": "import-probe",
            "description": "HISTORICAL .cloga.16/alpha33 ONLY, not .cloga.17 qualification: combined-head registered-caller run 35577921833 attempt 1 / native job 106264308921 passed at exact Ops code head cd384495ac2fd0c850b3c8cd93223d35c4bc83a0 after merging parallel alpha2 preparation. Artifact 10627994685 original ZIP is 733 bytes, SHA256 919251b434d11b865e8f5f385db9902e3a3ebdb8c2c9540aa6d7347d45f6cce6. Its sole 1073-byte qualification.json has SHA256 26c85a04e6be4616168bba93d08e838e21c45077dd3043e27855c2b51ba096d1, exactly equal to the already committed raw summary. Freshness is established by the new authenticated run/head/job/original ZIP, not rewritten fields or a relabeled prior run. Source/runtime identities, 9806 files, one observer/profile cleanup and three rejected request copies remain verified; positive proof was enforced by that exact combined driver, not new summary flags. Whole-carrier/model/installer-upgrade remain false; no live-account validation, Host-network instrumentation or local activation is claimed. Final provenance-only recording is distinct from this qualified code head.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-16/qualification.json"
          },
          {
            "kind": "import-probe",
            "description": "INITIAL pre-merge qualification retained as history: Genuine registered-caller run 35575187267 attempt 1 / native job 106255672689 passed at exact Ops code head a59f586df4e329c3bc8b3f885013fdb5493f4970 against Desktop .cloga.16 / bundled Core alpha1 / Copilot alpha33. Artifact 10627584525 original ZIP is 733 bytes, SHA256 8997486b787bbadbf7995ecf7d46f81870f813cb80488bc1008a1eea1de8b23f; its sole byte-exact 1073-byte qualification.json has SHA256 26c85a04e6be4616168bba93d08e838e21c45077dd3043e27855c2b51ba096d1. Schema1 proves 9806 runtime files, full archive-package identity with observed package SHA256 fc4fda43a8921ebfaccc2c07b41cd79c69c0f2b38edba8f3ba6152273501a446, metadata+CJS+ESM resolution, one observer/profile cleanup and three rejected descriptor/version/absent-home request copies. Fresh positive usage plus signed-out/settings/versionMenu proof was enforced by that exact driver, not added as summary flags. Whole-carrier/model/installer-upgrade remain false; no live-account validation, Host-network instrumentation or local activation is claimed. Later evidence-recording commits preserve qualified code/lock bytes and are not relabeled as this run's head.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-16/qualification.json"
          },
          {
            "kind": "import-probe",
            "description": "HISTORICAL .cloga.14/alpha.32 ONLY, not qualification of current .cloga.17/alpha.33: Genuine registered-caller run 35553019059 / job 106191374011 passed at exact Ops head 68a1218ef6a50f06870bae483d64f52d6de244aa against Desktop .cloga14 / bundled Core alpha1 / Copilot alpha32. Artifact 10619156852 original ZIP is 733 bytes, SHA256 dfc92806f244714b0022ce3e2d51e312f8215101b9ecd7a6b153691a82db15f3; its sole byte-exact 1073-byte summary has SHA256 bc90877cad62f68e7816d35035a1bbffa9a678b773d79884c2ae680941c3ec00. It proves 9806 runtime files, exact archive-package identity, public metadata+CJS+ESM resolution, one observer/profile cleanup and three rejected request copies. Fresh settings/version-menu/usage phases were enforced by the qualified driver, not invented as summary fields. Whole-carrier/model/installed-upgrade remain false; no live quota, Host packet observation, external-navigation success or local activation is claimed.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-14/qualification.json"
          },
          {
            "kind": "import-probe",
            "description": "HISTORICAL .cloga.1/alpha.22 ONLY: Genuine Ops CI run 35210215981 / called job 105165989138 passed at exact code head 83b0303c250b62f55424be3d88347bf147c593d8 against the unchanged formal .6 release. Artifact 10492165208 retains the raw locked-release-ops-observer summary: 9806 runtime files, actual app.asar package name/full version/raw SHA, shipped public PluginPackages/native-addon/production-policy metadata+CJS+ESM proof, one observer call and owned-profile cleanup. Exactly descriptor-digest, version and absent-home request copies were rejected; advanced private-peer/custom-home/missing-addon negatives are not claimed by those requests. Whole-carrier attestation, model response and installer upgrade remain false; user-extra contents and unsupported Web/preset entrypoints are not promoted. See https://github.com/cloga/dsh-windows-ops/actions/runs/35210215981/artifacts/10492165208; no local activation or PR-merge claim.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-1/qualification.json"
          },
          {
            "kind": "import-probe",
            "description": "Genuine registered-caller run 35278350619 / job 105394672036 passed at exact Ops code head 243c33d286f19d9e4c608e238a52de2b9a136b9e against Desktop .cloga.2 / Core .6 / Copilot alpha.24. Artifact10521682863 original ZIP733bytes SHA2568cda9c1657242cefd8a0634d1b9f8f600107e80b668497008ee81700f7c4f184 contains the byte-exact1071byte summary SHA2566fcbe781c367d33d62351c40a9fd3edfdb5d0ac372dd2986f9884cc470f80524. It proves9806 runtime files, exact archive application identity, public metadata+CJS+ESM resolver, one observer and owned-profile cleanup, and three rejected descriptor/version/absent-home request copies. Fresh settings phases were checked by the qualified driver, not new summary fields. Whole-carrier/model/installer-upgrade remain false; no local activation or expanded negative coverage. First run35276462350 remains an unexplained preobserver failure, not retroactively repaired by this success.",
            "path": "tests/fixtures/desktop-native-verified-release/ops-cloga016-2/qualification.json"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": false,
        "notes": [
          "Model prompts, images, and hosted-search queries are sent directly to GitHub Copilot by DSH's built-in pi-ai adapter and this plugin.",
          "The shared DSH credential record owns OAuth refresh; the plugin normalizes provider-owned grant fields to strict JSON, and deployment checks report only record metadata, never payload values.",
          "Hosted search does not add a separate local approval prompt, gateway process, or ACP integration.",
          "This entry pins the required plugin in the full deployment target, not the separate newer managed-route maintenance contract. See docs/copilot-managed-route.md and deployments/copilot-managed-route.policy.json for separately approved configuration-only maintenance; no implicit component upgrade or full-baseline attestation is provided."
        ]
      },
      "summary": "The locked DSH companion for Copilot sign-in, account-aware models, provider-scoped Tool compatibility, provider-only primary/fallback search routing and official transport delegation. Alpha.33 fixes the required Session selector in the usage UI and remains a plugin, not official Core; the managed Desktop retains bundled Core alpha.1. Formal publication and fresh .17 Windows Ops native qualification are verified at recorded exact source heads; this does not install or activate the target locally."
    },
    {
      "id": "dsh-playwright-host",
      "displayName": "DSH Playwright Host",
      "package": "dsh-playwright-host",
      "categories": [
        "browser-automation",
        "testing"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/cloga/dsh-playwright-host",
        "commit": "c8f514b838516eed8cced19ef2dd514ef1f2f0a4",
        "release": "0.1.7",
        "mergeCommit": "fdec939b48d14d66d14bef3d8f12ec68411d58fb",
        "pullRequest": 19
      },
      "platforms": [
        "windows"
      ],
      "recommendation": "conditional",
      "validation": {
        "level": "L1",
        "verifiedAt": "2026-09-17",
        "dshVersion": "0.1.6-alpha.1 (published source contract; no local activation)",
        "nodeVersion": null,
        "evidence": [
          {
            "kind": "source-review",
            "description": "Published 0.1.7 composition and peers preserve Host lifetime, isolated Edge and pinned MCP; exact-source tests target official 0a15e36e7f82b6ed45af6fa9759f29b40dcd965d and MCP SDK v2. No target Host mount or live smoke was performed for this repin.",
            "path": "docs/plugins/computer-use.md"
          },
          {
            "kind": "source-review",
            "description": "The local mirror contract checks the reviewed composition, 0.1.6 peer ranges, provenance and optional lock/catalog coherence; static assertions are not import or runtime evidence.",
            "path": "tests/host-playwright-bundle.test.mjs"
          },
          {
            "kind": "deployment-lock",
            "description": "Independently downloaded immutable Release 389282244 assets through the authenticated gate; verified annotated tag commit, size, SHA-256, SHA-512/SRI and SHA256SUMS. Historical L4 does not carry forward to 0.1.7.",
            "path": "tools/dsh-playwright-host/README.md"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": true,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": false,
        "notes": [
          "Uses an isolated Edge profile but one Host-owned MCP process is shared across Sessions.",
          "Browser tools can navigate to external sites and submit user-directed data; isolation does not prevent network transmission.",
          "Optional Web overlay; not required by the Windows Copilot deployment lock."
        ]
      },
      "summary": "Optional Host-wide Playwright MCP bundle for isolated Edge testing of the existing DSH GUI.",
      "artifact": {
        "name": "dsh-playwright-host-0.1.7.tgz",
        "url": "https://github.com/cloga/dsh-playwright-host/releases/download/v0.1.7/dsh-playwright-host-0.1.7.tgz",
        "sha256": "647c2112f09c9aa9aabfb6fbe3659dad32658a63eeb034a9040736695ca061f3",
        "sha512": "6c902d923270082697877402321944ab81935a49b20e548d16403e12b5582f82541d2b851adeb9e74ca9b9d23aef07349e142e0f75d2a1fec4c02f1f56841dce",
        "integrity": "sha512-bJAtkjJwCCaXh3QCMhlEq4GTWkmyDlSNFkA+ErVYL4JUHSuFGt6550ypudI67wc0nhQuD3XSof7EwC8fVoQdzg==",
        "size": 8280,
        "releaseTag": "v0.1.7",
        "releaseCommit": "fdec939b48d14d66d14bef3d8f12ec68411d58fb",
        "releaseImmutable": true,
        "checksumManifestUrl": "https://github.com/cloga/dsh-playwright-host/releases/download/v0.1.7/SHA256SUMS",
        "checksumManifestSha256": "45a32a05036595e23d22c101126c41e9f6c77ac0fe1402a2ebc9456f55952a6b",
        "checksumManifestSize": 96
      }
    },
    {
      "id": "dsh-cron",
      "displayName": "DSH Cron",
      "package": "dsh-cron",
      "categories": [
        "scheduling",
        "automation"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/cloga/dsh-cron",
        "commit": "7628e5bb9d8b24981962548974cafd3dfa9e509c",
        "release": "0.7.1",
        "mergeCommit": "6dae9da71e6c36c58e04f3ca8c10cc5c4790b3bd",
        "pullRequest": 45
      },
      "platforms": [
        "cross-platform"
      ],
      "recommendation": "conditional",
      "validation": {
        "level": "L1",
        "verifiedAt": "2026-09-17",
        "dshVersion": "0.1.6-alpha.1 (published source contract; no local activation)",
        "nodeVersion": "^22.19.0 || >=24.0.0",
        "evidence": [
          {
            "kind": "source-review",
            "description": "Published 0.7.1 peers and source tests admit exact official 0.1.6-alpha.1, modern persistence handles, public Session seq freshness and optional activation. Root-Session ownership, native Sidebar fallback and Host restart reconciliation remain bounded contracts, not local live evidence.",
            "path": "docs/plugins/scheduling.md"
          },
          {
            "kind": "deployment-lock",
            "description": "Independently downloaded immutable Release 389294372 assets through the authenticated gate; verified annotated tag commit, size, SHA-256, SHA-512/SRI and SHA256SUMS. No new import, Web mount or scheduled-turn smoke was performed.",
            "path": "docs/plugins/scheduling.md"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": false,
        "notes": [
          "Scheduled prompts are sent to the configured external LLM when tasks fire.",
          "Version 0.7.1 restricts model tools and task HTTP operations to the owning root Session; the optional global hub exposes only owner-level counts/next-run metadata, and task transfer is a direct-human-only command.",
          "HTTP sessionId is client-supplied; loopback/trusted-host and same-origin checks provide operational separation, not authentication against a malicious local process.",
          "Nonterminal delivered/running history is closed as interrupted after Host restart; tasks and history persist under DSH_HOME.",
          "Windows native system notifications are not implemented and configured systemNotify flags are quiet no-ops.",
          "Optional Web overlay; not required by the Windows Copilot deployment lock."
        ]
      },
      "summary": "Optional Web-profile scheduler with Session-bound cold wake, cron tools, and persisted run history.",
      "artifact": {
        "name": "dsh-cron-0.7.1.tgz",
        "url": "https://github.com/cloga/dsh-cron/releases/download/v0.7.1/dsh-cron-0.7.1.tgz",
        "sha256": "136ba9d66ba2f2ada87f1ce97dfb21be97474dc76504fc65ae8e01cde60768d0",
        "sha512": "f5baf2b185dcd1abab2743c8f06abaeaaeda715ea8b3ae8a38cf3f58647425612bf1ef769984d9fbe92a63719963e785c1788aa5c8cde1bcbffc0935d5ec0ac4",
        "integrity": "sha512-9brysYXc0aurJ0PI8Gq66q7acV6os66KOM8/WGR0JWEr8e92mYTZ++kqY3GZY+eFwXiKpcjN4by//Ak11ewKxA==",
        "size": 64919,
        "releaseTag": "v0.7.1",
        "releaseCommit": "6dae9da71e6c36c58e04f3ca8c10cc5c4790b3bd",
        "releaseImmutable": true,
        "checksumManifestUrl": "https://github.com/cloga/dsh-cron/releases/download/v0.7.1/SHA256SUMS",
        "checksumManifestSha256": "f05eef489a31f38ee203b91808d54e2100ae18b222907fbe4125c680bac802f2",
        "checksumManifestSize": 85
      }
    },
    {
      "id": "dsh-memory-evolve",
      "displayName": "DSH Memory Evolve",
      "package": "dsh-memory-evolve",
      "categories": [
        "operations",
        "automation"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/csyangwen/dsh-memory-evolve",
        "commit": "c337dc1af7b5c8a5578e03150bf5c4d6133f66f9",
        "reviewedHead": "c337dc1af7b5c8a5578e03150bf5c4d6133f66f9",
        "release": "v26091501"
      },
      "platforms": [
        "cross-platform"
      ],
      "recommendation": "experimental",
      "validation": {
        "level": "L1",
        "verifiedAt": "2026-09-15",
        "dshVersion": null,
        "nodeVersion": null,
        "evidence": [
          {
            "kind": "source-review",
            "description": "The exact package manifest is private dsh-memory-evolve 0.1.0, exposes lib/index.js and lib/client.js, declares no dependencies or DSH peer range, and has no install lifecycle script.",
            "url": "https://github.com/csyangwen/dsh-memory-evolve/blob/c337dc1af7b5c8a5578e03150bf5c4d6133f66f9/package.json"
          },
          {
            "kind": "source-review",
            "description": "The exact Host source was reviewed for injected DSH services, default and optional tool surfaces, filesystem locations, background features, and runtime disposal paths.",
            "url": "https://github.com/csyangwen/dsh-memory-evolve/blob/c337dc1af7b5c8a5578e03150bf5c4d6133f66f9/lib/index.js"
          },
          {
            "kind": "source-review",
            "description": "The updater performs a background origin tag check and offers an explicit Git fetch plus detached-checkout self-update path; the reviewed Release has no packaged assets or checksum manifest.",
            "url": "https://github.com/csyangwen/dsh-memory-evolve/blob/c337dc1af7b5c8a5578e03150bf5c4d6133f66f9/lib/update.js"
          },
          {
            "kind": "source-review",
            "description": "The reviewed commit contains an MIT license.",
            "url": "https://github.com/csyangwen/dsh-memory-evolve/blob/c337dc1af7b5c8a5578e03150bf5c4d6133f66f9/LICENSE"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": false,
        "notes": [
          "The default data root is DSH_HOME/memories, while managed skills default to ~/.agents/skills; disabling or uninstalling the plugin unregisters runtime surfaces but intentionally retains data and skill files.",
          "The memory and skill-management tools are always registered; todos and direct channel sending are enabled by default. Optional switches can add prompt injection and editing, background review, local file and Codex-session search, external CLI dispatch, DSH Session creation or wake, Git-backed memory synchronization, and channel notifications.",
          "Startup performs a cached background git ls-remote check against the plugin origin. A user-triggered Web update can fetch a tag and replace the plugin worktree with a detached checkout after repository and ancestry checks.",
          "No immutable Release asset, checksum manifest, declared DSH compatibility range, isolated composition mount, or functional smoke is recorded. First use should remain in an isolated Profile while data retention, automatic writes, self-update, external execution, and messaging boundaries are reviewed."
        ]
      },
      "summary": "A high-privilege cross-session memory, skill, prompt, task, synchronization, and orchestration plugin whose exact source was reviewed but not mounted or functionally validated by this repository.",
      "notes": [
        "User-reported useful for cross-session memory/evolution workflows.",
        "Release v26091501 points to the reviewed commit but publishes no assets; do not infer an artifact hash or repository-endorsed installation command.",
        "A bare ESM source import succeeded on the review host, but this is not a DSH compatibility probe and does not raise the entry above L1.",
        "The upstream Windows test run did not pass completely, so no functional or security certification is implied.",
        "Not part of the Windows locked baseline, Desktop required plugins, default automatic installation, or windows-companion-suite."
      ]
    },
    {
      "id": "dsh-better-sidebar",
      "displayName": "DSH Better Sidebar",
      "package": "dsh-better-sidebar",
      "categories": [
        "operations"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/omdsh-dev/DSH-better-sidebar",
        "commit": "9e1a03452794532cda1f6ac677b72579dff48dfc",
        "release": "0.18.0"
      },
      "platforms": [
        "cross-platform"
      ],
      "recommendation": "conditional",
      "validation": {
        "level": "L2",
        "verifiedAt": "2026-09-04",
        "dshVersion": "0.1.2-rc.1",
        "nodeVersion": "24.19.0",
        "evidence": [
          {
            "kind": "source-review",
            "description": "The exact v0.18.0 source, packed manifest, bundle patch, installer behavior, filesystem, process, browser, and native PTY boundaries were reviewed for the Windows profile.",
            "path": "docs/plugins/better-sidebar.md"
          },
          {
            "kind": "compat-check",
            "description": "The Windows Web profile resolved dsh-better-sidebar 0.18.0 with DSH 0.1.2-rc.1 and Node 24.19.0 without missing client injections or engine conflicts.",
            "path": "docs/plugins/better-sidebar.md"
          },
          {
            "kind": "import-probe",
            "description": "A real host-entry probe completed with LOAD_OK and the composed profile dump included the package-owned better-sidebar row.",
            "path": "docs/plugins/better-sidebar.md"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": false,
        "notes": [
          "The workbench can read and modify workspace files, spawn native PTY shells and system Git, and launch registered external file handlers.",
          "Its embedded browser and remote Markdown assets can contact external origins; it does not reuse the user's existing browser profile.",
          "Optional model-facing terminal and sidebar tools should remain disabled unless a trusted maintenance session explicitly needs them.",
          "Optional Web overlay; not required by the Windows Copilot deployment lock."
        ]
      },
      "summary": "Optional right-side and bottom-panel DSH workbench with file browsing, editing and preview, Git views, native terminal, embedded browser, side chat, and extensible tab/viewer registration.",
      "notes": [
        "Pinned source release v0.18.0 is the compatibility line for DSH 0.1.2-rc.1; do not silently substitute the older 0.17.1 mirror result.",
        "Composition activation and representative file-preview cleanup remain to be verified after a live-session-safe Host restart."
      ]
    },
    {
      "id": "desktop-touch-mcp",
      "displayName": "Desktop Touch MCP",
      "categories": [
        "computer-use",
        "desktop-automation"
      ],
      "integration": "mcp",
      "source": {
        "repository": "https://github.com/Harusame64/desktop-touch-mcp"
      },
      "platforms": [
        "windows"
      ],
      "recommendation": "historical",
      "validation": {
        "level": "L1",
        "verifiedAt": "2026-08-23",
        "dshVersion": null,
        "nodeVersion": null,
        "evidence": [
          {
            "kind": "upstream-change",
            "description": "Offline-first release resolution and bounded fetch behavior were merged upstream in PR #586.",
            "url": "https://github.com/Harusame64/desktop-touch-mcp/pull/586"
          },
          {
            "kind": "source-review",
            "description": "The earlier launcher network stall and DSH startup impact are documented.",
            "path": "docs/startup-60s-timeout.md"
          }
        ]
      },
      "security": {
        "controlsDesktop": true,
        "capturesScreen": true,
        "usesExistingBrowserProfile": null,
        "sendsDataExternally": null,
        "approvalGate": null,
        "notes": [
          "Run MCP servers read-only until write operations are explicitly needed.",
          "Not installed by the locked Windows Copilot deployment."
        ]
      },
      "summary": "A historically investigated Windows desktop-control MCP; the repository records a launcher reliability fix, not current functional certification.",
      "notes": [
        "Must pass current source review, import checks, isolated composition mount, and functional smoke before recommendation."
      ]
    },
    {
      "id": "dsh-vision-any",
      "displayName": "DSH Vision Any",
      "categories": [
        "vision"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/tianmingwan/dsh-vision-any"
      },
      "platforms": [
        "cross-platform"
      ],
      "recommendation": "historical",
      "validation": {
        "level": "L1",
        "verifiedAt": "2026-09-04",
        "dshVersion": null,
        "nodeVersion": null,
        "evidence": [
          {
            "kind": "source-review",
            "description": "The former text-only vision fallback design is preserved in its upstream integration PR for migration history.",
            "url": "https://github.com/tianmingwan/dsh-vision-any/pull/2"
          },
          {
            "kind": "source-review",
            "description": "The current native attachment and read_image architecture, capability gate, and retirement rationale are documented locally.",
            "path": "docs/vision-dual-channel.md"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": null,
        "notes": [
          "The historical fallback may send images to a separately configured vision provider.",
          "Superseded by DSH's built-in attachment path and read_image tool for image-capable routes.",
          "Do not install it as part of the locked Windows Copilot deployment."
        ]
      },
      "summary": "A historical text-only vision-tool fallback, retained for migration context but superseded by DSH's native image attachment and read_image path.",
      "notes": [
        "Not a current installation recommendation; select an image-capable model instead of adding a second vision routing layer."
      ]
    },
    {
      "id": "dsh-dev-tools",
      "displayName": "DSH Developer Tools",
      "package": "dsh-dev-tools",
      "categories": [
        "operations"
      ],
      "integration": "cordis",
      "source": {
        "repository": "https://github.com/cloga/dsh-windows-ops",
        "release": "0.3.0"
      },
      "platforms": [
        "windows"
      ],
      "recommendation": "conditional",
      "validation": {
        "level": "L2",
        "verifiedAt": "2026-09-15",
        "dshVersion": "0.1.6-alpha.1",
        "nodeVersion": "^22.19.0 || >=24.0.0",
        "evidence": [
          {
            "kind": "source-review",
            "description": "The exact 0.1.6 subprocess range, async Sandbox/Shell, Host-side ToolRuntime/PTC binding authority, Node PTC empty-environment boundary, workflow cleanup, lossless JSON, canonical-path, and Fiber-owned lifecycle findings are documented with the source.",
            "path": "tools/dsh-dev-tools/README.md"
          },
          {
            "kind": "import-probe",
            "description": "The plugin registers five tools in a real 0.1.6 Cordis/ToolRuntime harness, uses the subprocess service with managed-range quiescence and explicit truncation failure, returns only lossless JSON values, and unregisters every contribution on Fiber disposal.",
            "path": "tests/dsh-dev-tools.test.mjs"
          },
          {
            "kind": "compat-check",
            "description": "Official commit 0a15e36e7f82b6ed45af6fa9759f29b40dcd965d and its ToolRunContext, subprocess, Sandbox, Shell, Host PTC binding dispatch, isolated worker environment, workflow, and JSON source seams are checked before compatibility is claimed.",
            "path": "tests/dsh-dev-tools.test.mjs"
          }
        ]
      },
      "security": {
        "controlsDesktop": false,
        "capturesScreen": false,
        "usesExistingBrowserProfile": false,
        "sendsDataExternally": true,
        "approvalGate": null,
        "notes": [
          "Provides development, patching, build, upgrade, and doctor operations; use only in trusted maintenance sessions.",
          "Strict sandbox escalation and Host grants are ToolRuntime/PTC deployment policy rather than a guarantee of this plugin; configure standing permissions before consequential calls.",
          "The dsh_upgrade check operation queries the configured Git remote; other managed subprocesses act on local operator-selected paths."
        ]
      },
      "summary": "Repository-local agent tools for DSH development and maintenance, suitable for trusted operator sessions."
    }
  ]
}