Plugins

Boot-time guard that repairs corrupt session logs, preflights plugin composition, vm-checks client artifacts, smoke-tests host apply() and quarantines crash-causing bundles, so a broken plugin can never brick startup.

Model-facing image_describe (识图) tool over the DashScope OpenAI-compatible API (qwen3.7-flash), plus a paste bridge: on text-only sessions, pasted images auto-convert to file paths at send time and render back in the transcript, so they never trip image admission. Bring your own DASHSCOPE_API_KEY; endpoint/model/budgets configurable, redirect-proof HTTP client, works in every agent preset.

Qichacha (企查查) enterprise data source as a dynamic Cordis plugin: 5 agent tools (auth with QR login, company search, knowledge search, tool search, tool execute) covering 100+ data dimensions (business registration, shareholders, judicial, IP), plus a settings-page account manager; network/file IO via DSH subprocess spawning node -e, credentials interop with the local BizOwl client.

Enhanced MCP client: paginated tool discovery, non-blocking startup, mcp_tool_search, hand-rolled stdio/streamable-http transports.

Create/modify/inject test assistant messages and import/repair session.jsonl(.zstd) session logs into new sessions.

Unofficial Cursor subscription chat: Host-owned CLI session login, a displayed model catalog, and subscription usage rails. Cursor staff treat this class of private-client usage as against ToS.

Adds a removable quote banner above the web chat composer for text selected from an AI reply, included in the next message.

Runtime plugin loading for the Web UI: a watched hot directory installs/updates client-plugin bundles live on every open page, no restart. Includes a right-column subagent dashboard example.

A DeepSeek Harness plugin: model-facing reload_plugin tool that restarts one Cordis Loader entry (by entry id, module name, or MCP serverName) without touching sibling entries — respawns mcp-client server processes

DeepSeek Harness ACP bundle for editor delegation: a one-command Agent Client Protocol stdio server profile that shares dsh credentials and session logs.

DeepSeek Harness plugin: Nocturne Memory client — automated long-term memory (boot/read/search/create/update) backed by your own Nocturne MCP server.

Phone access to the DSH web UI: LAN pairing plus remote access through your own tunnel command (e.g. cloudflared) or a fixed public URL, with automatic LAN-to-tunnel failover and dshlanpair:// deep links; the phone client is the bundled Android app (APK, Android 8+, sideloaded).

MCP server panel for the DeepSeek Harness Web GUI: the sidebar lists every @deepseek-ai/dsh-mcp-client row — including rows inserted by other plugins — with a connection state derived from the loader fiber plus the mcp__<server>__* tool count, shows that row's configuration, enables or disables it by editing only that row of the patch file, and reconnects once after a failed attempt.

Open delivered files, changed-file rows and inline file mentions in the system default app with a left click; right-click takeover is configurable: all menus, only where DSH has none, or never. Desktop app only: the Web client has no system-open capability, so clicks stay with DSH.

Loopback-only ACP door for DeepSeek Harness: connect VS Code and other local clients to a running kernel over the local loopback address, sharing its models, tools, memory and sessions. Browse history, change permission modes and call capabilities registered by DSH plugins.

Cross-session messaging across one or all workspaces: session_list finds top-level sessions by recency or title, session_send_message steers or queues attributed messages (cold-resuming stored sessions when needed), session_create opens titled top-level sessions with an initial task, and a client renderer displays relayed messages as user-side chat bubbles naming the sender session.

Registers two LLM account pools as model providers: TeleAgent (China Telecom TeleAI; paste a token once) with a daily 09:00 UTC+8 full-pool check-in — currently check-in, balances and model listing only, since its chat is blocked by the client signing key — and AutoClaw (Zhipu desktop, Windows), whose tokens are decrypted from the local DPAPI-protected credential store and whose chat streams through the desktop bridge. Both pools report credit balances and model catalogs; quota-triggered failover across local desktop instances is automatic, while switching the AutoClaw account is an opt-in setting (off by default). Panels ship in settings and the left sidebar.

Composer token pill for the current session: total tokens plus uncached input, cache read, cache write and output, with the cache-hit share. A pure client consumer of the session tokenUsage projection — no host service, no file access, no network requests.

MQTT client and embedded broker for DeepSeek Harness: one sidebar panel with saved connections, a live message log and a local broker, plus nine mqtt_* agent tools.

Read-only /btw side questions for DeepSeek Harness: fork the current session, ask in the margin, keep the main transcript untouched. DeepSeek Harness 的 /btw 只读旁问：fork 当前会话、答案留在页边，不污染主对话。Host + Web Client 插件。

Task alerts for DSH: a system toast when a turn finishes, or when an approval, question or plan review is waiting; a chime rendered on the Windows communications endpoint so the system ducks other media by its own setting and restores it afterwards, without anyone's volume being written; and an optional copy mailed to your phone over SMTP (465 implicit TLS, or STARTTLS where credentials go out only after the upgrade). No runtime dependency: the sound helper is a PowerShell script, the mail client is plain Node.

Obsidian-compatible Markdown notes in the DSH sidebar with search, tags, backlinks, graph, audio notes with transcription, a paint canvas, OCR (needs tesseract), client-side encryption and notes_* agent tools; the release tarball and the npm package carry a prebuilt Linux x64 daemon, other platforms build it from source with Go.

Adds a confirmed Delete session action to the sidebar menu of archived Sessions; the Host permanently removes their local JSONL logs (including hidden subagent descendants), workspace accounting and archive/pin entries, then refreshes open Web clients.