Find your next challenge.

The problem

Define official qualification criteria and maintain a trusted, curated marketplace of valid DSH plugins. The marketplace should support accurate discovery, installation, updates, version tracking, and clear review and removal policies.

Possibly addressed by:Plugin Marketplace · Plugin Market · Plugin Market

The problem

Record durable, accurately attributed usage and cost events for foreground, auxiliary, tool, compaction, retry, and subagent calls. Provide session totals, warnings, and configurable spending circuit breakers.

Possibly addressed by:Usage Cost · Token Usage Cost · Token Use

The problem

Keep listeners bound to localhost by default, while allowing explicit binding to a selected LAN interface or other address with authentication, host-trust protections, configurable access controls, clear exposure warnings, and gated wildcard binds such as `0.0.0.0`.

Possibly addressed by:Web Lan Access · Lan Proxy · Lan Gateway

The problem

Allow persistent per-model modality declarations and editable capability settings for text, image, audio, and video inputs across built-in, custom, and compatible providers. Document the configuration, report capability limits, and ensure attachments and multimodal plugin results use valid model routes.

Possibly addressed by:Model Modality · Image Vision · Models Input Modalities

The problem

Provide an officially supported, installable desktop application for macOS, Windows, and Linux that packages DSH, simplifies setup, and supports reliable updates and native integration.

Possibly addressed by:Desktop Shell · Desktop · Wx Desktop

The problem

Attach stable per-conversation session identifiers, such as UUID-based OpenCode headers, to outbound inference requests. Allow provider- and model-level control over header names, formats, and omission, together with related prompt-cache settings to improve routing and cache affinity.

Possibly addressed by:Opencode Session Header · X Opencode Session · Session Header

The problem

Check plugin compatibility and registration during startup, report clear per-plugin diagnostics, and disable or quarantine failed third-party plugins while allowing healthy plugins to load. Preserve fail-fast behavior for core plugins.

Possibly addressed by:Plugin Security Review · Plugin Precheck · Plugin Check

The problem

Discover provider and model catalogs through live APIs, including third-party providers such as OpenRouter, and populate the settings UI with available models and metadata. Retain bundled, cached, or temporary override data as fallbacks when discovery is unavailable.

Possibly addressed by:Model Catalog Refresh · Live Model Catalog · Catalog Refresh

The problem

Allow web-fetch plugins to configure trusted resolvers, domains, or CIDR ranges for transparent-proxy fake-IP DNS while retaining SSRF protection. Support relevant IPv4 and IPv6 pools, keep private and link-local networks blocked by default, and provide actionable errors.

Possibly addressed by:Web Fetch Enhanced · Fakeip Compat · Fetch Third Party

The problem

Support configurable longer timeouts for large-payload RPCs and model requests, including slow local model loading, generation, retries, and large outputs, while retaining shorter defaults for ordinary calls.

The problem

Add configurable authentication for the Web UI across local and remote deployments, including user tokens and external providers such as OAuth. Preserve secure defaults while allowing users to explicitly disable the built-in one-time token when appropriate.

Possibly addressed by:Web Auth · Auth Proxy · Web Auth

The problem

Allow a workspace to contain multiple ordered directories with an optional primary directory while preserving single-folder compatibility. Sessions, configuration discovery, Git operations, and sandbox permissions should coordinate across all associated directories.

Possibly addressed by:Multi Workspace · Workspace Merge · Multi Folder

The problem

Add safeguards that detect excessive, repetitive, ambiguous, or stalled agent behavior, cap or halt it before wasting resources, and ask the user for clarification when intent or the next action is unclear. Support recovery or strategy changes where possible.

Possibly addressed by:Circuit Breaker · Continue On Limit · Loop Continue

The problem

Run agents in rootless, strongly isolated sandboxes with fine-grained filesystem, command, privilege, resource, network, X11, and D-Bus controls. Restrict access to approved workspaces and data, protect credentials such as Xauthority, and prevent shell or socket-based bypasses and sensitive-data exfiltration.

Possibly addressed by:Sandbox Micro · Agentenv Sandbox · Sandbox Allowlist

The problem

Add versioned, tolerant migration and backward-compatible reads for legacy logs, sessions, and durable data, including safe handling, repair, or degradation of unknown ignorable events and obsolete plugin fields without data loss. Document the supported channel for UI-only notifications that should not be persisted.

Possibly addressed by:Session Migration Repair · Session Migrate · Session Migrator

The problem

Let plugins declare custom persisted or durable session event types so the harness recognizes them when loading and re-observing sessions, while safely skipping declared ignorable events for older readers.

The problem

Provide an authorized OAuth flow that lets DSH and other harnesses use existing Claude or other provider subscriptions without API keys, with clear authorization, status, and error handling to reduce account-risk concerns.

Possibly addressed by:Codex Oauth · Openai Codex Auth · Subscriptions

The problem

Allow team leads or agent-teams users to independently select a provider, model, and reasoning effort for each teammate, including cheaper or local models.

Possibly addressed by:Agent Team Model · Agent Teams · Agent Teams

The problem

Allow reasoning or thinking intensity to be configured per model and route, including locally hosted llama-server models and Codex subagents. Support defined levels, defaults, mappings, disabled reasoning, and clear handling of invalid values.

Possibly addressed by:Better Reasoning Effort · Thinking Effort · More Models Thinking Level

The problem

Add a confirmed action to delete active or archived sessions and remove their associated persisted and in-memory data. Emit a typed deletion lifecycle event so plugins can respond to the removal.

Possibly addressed by:Session Admin · Session Delete · Delete Session