Ten listings joined the curated layer this week, out of twenty-five candidates read in full. The spread tells the story: the ecosystem is done decorating the window and is now wiring the harness into the rest of your life — your long-term memory, your phone, your terminal, and your bill.
Memory grows a control plane
dsh-mnemon is the most architecturally serious memory entry yet. Instead of one store, it splits memory into three tiers — runtime context, searchable documents and long-term Memory Spaces — backed by nine provider plugins with a local native default, and compiles exactly one bounded View per turn. The part we would bottle: third-party providers are opt-in, and credentials stay on the host.
HarmonyOS NEXT Skills is a different kind of knowledge entry: an offline skill library with API 12–26 declaration snapshots, ArkTS/ArkUI references and DevEco Studio automation. The listing carries an honest caveat — the package declares MIT, but the repository redistributes Huawei’s official documentation, and the listing says so.
The harness leaves the desk
DSH Mobile puts your desktop harness in your pocket: an Android app or a phone browser over LAN HTTPS, with optional tunnels (Tailscale Funnel, cpolar, cloudflared, self-hosted FRP) for when you leave the house. Paired-device trust with certificate pinning, a loopback-only admin API, and a per-path WebSocket allowlist are all in the README — and tunnel binaries are downloaded on demand, pinned and SHA-256-verified.
SeekTTY goes the other direction: a full Claude-Code-style terminal workspace that runs on the dsh Host rather than replacing it — streaming markdown, session and plugin centers, a provider manager with masked credentials. One listing detail matters more than the feature list: the repository README and the published npm artifact disagree about the supported harness release, and the listing records both and tells you which one wins (the published artifact).
Money gets an audit trail
TokenLedger answers the question relay users actually have: not “how many tokens did I burn” but “which relay did I burn them at”. Spend is attributed to the normalized provider origin, the project and the model, with balance readers for eight vendors and plans, CSV/JSON export — and a privacy posture worth quoting: loopback-only GET endpoints, prompts and responses never read, keys stay on the host.
Command Code Provider is this week’s honesty test, and it passes by disclosure. It is an unofficial provider plugin for a paid third-party relay — the listing says so in the first paragraph — with a live model catalog, plan-aware selection and multi-account rotation. It is also the rare plugin that declares its compatibility in the manifest: an eight-release range, recorded verbatim.
The fun layer grew up
Skins and pets still dominate the raw star rankings, and this week we added three — but notice what changed. DSH Dafeiyu is a desktop whale driven by real session events: project name, phase, actual todo progress and real reasoning effort, in an always-on-top window. Whale Girl is a QQ-pet-style companion whose fifteen-state sprite reacts to think/work/celebrate/error states and accrues seniority from completed tasks. DSH Wallpaper Engine renders your local Wallpaper Engine library behind the chat — including a pure-JS scene renderer — and its README’s update-order warning (harness first, then better-sidebar, then the plugin) is quoted in the listing because it is required reading.
Also added: DSH Visualize, which lets the model render interactive HTML fragments as sandboxed iframe cards in the conversation — CSP-locked, no network, no forms — and HarmonyOS NEXT Skills, covered above.
What the index shows
The nightly crawl now carries 12,000 indexed entries, up from 11,838 last week, with every rejection still counted in the discovery block so coverage stays auditable. The curated layer is 70 listings. Twenty-five candidates were read in full this round; ten were promoted, seven clean reads were held for a later batch purely on scheduling, and the remaining eight were declined with reasons recorded in the review commit — including one standalone app wearing the topic, one alternative runtime, and one whose README is dominated by unverifiable AGI benchmark claims.
The editorial exclusions were re-checked and all eight still stand: seven for jailbreak or third-party ToS abuse, one for an author-declared unmaintained notice. The list is public and every entry carries its reason and date.
One number worth repeating: no listing on this site claims L4 or L5. Nothing here has been installed and smoke-tested in a sandbox, and the verification page says so rather than implying otherwise. A verification level tells you how far a listing was checked, never that a plugin is safe.