Plugins

Warmes helles und dunkles Theme für DSH Web mit responsivem Layout, zweisprachigen Einstellungen, sicherer Markdown-Vorschau, Kopiersteuerung pro Block und ohne Telemetrie.

Git-bewusstes Schreibschutz-Plugin für DeepSeek Harness: blockiert Ganzdatei-Schreibvorgänge, die nicht committete Änderungen des Nutzers überschreiben würden, und berichtet am Rundenende, was mit geschützten Dateien passiert ist

DSH-Web-Plugin: arbeitsbereichsbezogener Hintergrund, Chat-Schriftgröße, Zeilenhöhe, Blockabstand und Retina-Schriftdarstellung.

Erzwungenes Pain-Point-Gate: nach zwei nicht konvergierten Experimenten werden die drei Fragen eingespielt, nicht-untersuchende Tool-Aufrufe bis zur Beantwortung verweigert und Wiederholungsversuche in dieselbe Richtung blockiert.

Retired version-locked upgrade skill for the 0.1.3-alpha.1 → 0.1.5-rc.1 corridor; superseded by dsh-codemod.

Blocks tool calls that create temporary files or directories in the workspace root, and moves new root-level temp entries into tmp/_quarantine at turn end.

A five-stage engineering loop for agent-built projects — spec, build, verify, ship, learn — with one artifact and one gate per phase, so an agent always knows the single next action. Role policy, project templates and deployment sit behind explicit ports: swap the implementation without rewriting the loop. Its scaffold generator lays out the internal layers of a project — `init --layout {none,webapp,service,plugin} --stack {python,node,none}` — from nine layers sampled out of three unrelated production projects: entry docs, an OpenSpec plan face, a spec truth layer (INDEX, one file per domain, TESTING, CONSTITUTION), a wiki split into knowledge / progress / runbook, the six `.agents/` slots, server+web, scripts/deploy/config, tests+e2e and a gitignored out/. Non-none layouts also gate the directory contract and compile every source root. Ships a Python CLI (init/next/check/ship/new) plus a local command adapter and an SSH/systemd adapter with release directories, an atomic current/previous switch, a deploy lock, a commit-versioned JSON probe and automatic rollback on a failed probe; bootstrap and teardown provision and remove the unit and the reverse-proxy block idempotently and refuse to delete a root they did not create. Includes a runnable example workspace and a skill that keeps the agent on one phase at a time. Requires Python 3.10+ and PyYAML; remote deploys need SSH access, rsync, systemd and Caddy on the target.

Read-only Home Assistant panel for DeepSeek Harness: a full status overview, a compact right-sidebar card, a system-prompt environment block, one read-only ha_status tool, and optional browser notifications on Home Assistant down/recover. Configure the instance URL and token once; it does not control devices or change Home Assistant configuration.

Read-only persona injection for DSH: when a session opens inside your workspace, your persona files and the latest diary entries are prepended to the system prompt, and those source files are never modified. It keeps a short cross-session feed of recent messages under <root>/live/feed.json and can write a QQ hand-off file at <root>/live/web-for-qq.md; nothing is uploaded. Variable blocks (clock, recent actions, other sessions) are delivered as a per-step context message, so the prompt prefix stays byte-stable and keeps its cache.

Wall-clock session and turn timing for the DSH Web GUI: a timer chip in the session header shows the session total, every finished turn shows its own duration above the action row, and a sidebar panel totals today, the last 7 days, the last 30 days or all sessions. The numbers are folded from turn/start and turn/end in the session log, so paging, compaction and restarts do not change them.

A countdown pill under the message composer showing how long is left before you clock off, with a workday progress bar; click it to set your own start and end times (saved in this browser), and after the end time it turns into an overtime timer.

Renders the chat turn navigator as a clock-like half dial: one graduation per turn, a purple graduation every fifth turn, and a blue needle on the current turn.

Quote selected text from a DSH message into the composer as a blue chip, hover to read the full quote, and remove it with X or Backspace; sent quotes reach the model as a blockquote.

Quote and reply the way Claude Code does it: select text, answer it in a popover, stack the pairs as blocks above the composer, send them as one message.

Privacy guard for git workflows: before git commit, git push or gh repo sync it scans the content that would enter git (local paths, user info, API keys, private keys, connection strings) and blocks anything not approved in the DSH approval UI; approved items go into a manageable, masked whitelist. Native DSH Config schema with live settings, first-push full-repository scan, fail-closed checks, zero npm runtime dependencies.

Two small macOS features in one plugin. keepAwake stops the display and system from sleeping while dsh runs (caffeinate tied to the host process). taskNotify posts a system notification when a top-level conversation finishes its turn, with the outcome (completed, error, blocked, output cap) and the duration; clicking the notification brings DeepSeek Harness forward. Click-to-focus needs Xcode Command Line Tools to build the notifier; without the toolchain the notification still appears but clicking it opens Script Editor. Subagents and Agent Teams members never notify, and a stop you pressed is silent by default. Both features can be switched off separately.

BreezeBlue text-to-speech for DSH: three agent tools, a header toggle that reads assistant replies aloud (markdown and code blocks stripped), and local HTTP endpoints for audio playback, synthesis and long-poll delivery. Requires a BreezeBlue API key (BREEZE_API_KEY); synthesis is billed per character.

Registers two LLM account pools as model providers: TeleAgent (China Telecom TeleAI; paste a token once) with a daily 09:00 UTC+8 full-pool check-in — currently check-in, balances and model listing only, since its chat is blocked by the client signing key — and AutoClaw (Zhipu desktop, Windows), whose tokens are decrypted from the local DPAPI-protected credential store and whose chat streams through the desktop bridge. Both pools report credit balances and model catalogs; quota-triggered failover across local desktop instances is automatic, while switching the AutoClaw account is an opt-in setting (off by default). Panels ship in settings and the left sidebar.

Draws every question and answer in the DSH Web conversation blurred until the pointer rests on that row, and locks the mask to always-blurred while the window is unfocused; one control below the composer switches between off, hover to reveal, and always blurred, remembered per browser.

Measures what your assembled system prompt is actually made of - rules, identity, workspace policy, tool descriptions - in bytes and percentages, then moves the operating protocol ahead of the rule block so the model reads who it works for before it reads the prohibitions. Config-driven via ~/.dsh/prompt-balance.json; two hooks, no build step, no dependencies.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Adds twelve chain_* tools that turn a multi-agent role chain into a round state machine with one frozen baseline, per-signature failure counts, role-tagged evidence, blocking approval gates and one audit file per round; also adds a settings card that routes each role to its own model and thinking effort. Requires the sibling l1-presets bundle (plan/work/code/review) - without those presets every chain_* tool returns ROLE_DENIED.

Replaces the full skill catalog with keyword-based discovery, per-skill enable/disable switches, and system-prompt section controls. Disabled skills are refused by the skill tool, and their slash-command invocations are blocked at pre-step.

Renders mermaid fenced code blocks in the conversation as real diagrams, with the source one click away.