Plugins

Replaces the built-in bash executor so every command gets an environment resolved from its own working directory: configurable PATH prepends, Python venv activation and mise shims, with a dedicated section in the Web UI settings.

Mobile push when a DSH task goes idle, over 10 channels: ntfy, Bark, DingTalk, WeCom, Feishu, ServerChan, PushPlus, Telegram, Qmsg and generic webhooks. The message carries the session, workspace, elapsed time, turn number and a reply excerpt, and it runs host-side rather than in the browser page.

WeChat bridge and native Web settings panel with QR scan login, live token health probe, and credential management.

Runs git in the Host process so push, pull and fetch work inside the agent sandbox; exposes 8 agent tools (status, diff, log, stage, commit, push, fetch, pull) and 11 slash commands including /git-status, /git-commit, /git-tag and /git-name-set.

Recurring Excel template fill and reconciliation review: declare the file, sheet, header row, match key and amount columns once, preview every cell write before it lands, compare amounts as exact two-decimal values, list the unmatched rows as exceptions, and export a filled template copy with an HTML report and a JSON trace back to the source rows.

Declares a spec-driven development agent preset with a Chinese persona and four static Claude Code/Codex delegation tools for planning, implementation, review and knowledge distillation; roles are prompt-guided, not an automatic state machine.

Notes workspace in the right sidebar: a notes tree beside a live-preview Markdown editor with tabs, split panes, outline and trash, over plain .md files plus a thin per-workspace index that agents organize through one `knowledge` tool.

Shows oversized images to the model at readable resolution instead of one downscaled copy: before admission, a large upload is split into as many tiles as the attachment store allows (an 8000x8000 screenshot becomes 20 tiles of 2000x1600), so small text survives. Replaces the local attachment store; adds no settings of its own.

Generate QR codes from a from-scratch ISO/IEC 18004 encoder with no external tools, plan symbol version and error-correction headroom before producing anything, and decode an existing symbol back to text.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

Extract text from an image or PDF, reading a born-digital text layer directly and falling through to a configured OCR engine for scans.

Convert Notion blocks and Markdown in both directions, with no API client and no external dependency. A Notion paragraph is an array of rich-text runs while Markdown says one string, so the two directions are a split and a merge rather than a pair of inverses — rich-text runs are cut at every annotation boundary one way and re-merged the other, with fences widened when the content already contains backticks. Reports every lossy step instead of swallowing it.

Drive a local ffmpeg as six structured tools: probe a file's streams, transcode or trim it, pull evenly-spaced frames or the audio track, and compress video to a byte budget with two-pass encoding.

Pull invoice number, date, parties, tax IDs and the amount/tax/total triplet out of text, then verify that amount plus tax really equals the total and flag documents that do not reconcile.

WeChat Official Account pipeline: validate a draft against a publish gate, then push it into the draft box.

Read, build and take apart EPUB 3 books with no external dependency — the ZIP reader/writer and the XML scanner are both built in. Inspect metadata, reading order and TOC for structural problems, assemble a book from chapters, or split one back into per-chapter HTML.

Open a page, wait for it the way it actually needs, extract the readable article, and take a screenshot. Playwright is optional: when it is absent the tools fall back to a static fetch and say so in the result, because a page whose JavaScript never ran means something different from one that rendered. Content is chosen by scoring candidate subtrees on prose density rather than on tag names, so a container loses to the article inside it instead of winning by containing more of the document.

Pack a directory into a deterministic tar, read an archive's contents without extracting it, unpack while refusing every member that could reach outside the destination, and verify what came out against what went in by SHA-256. No external dependency — the tar format is written and read in this plugin. Extraction is deliberately more permissive on reading than on writing, because a reader's job is to report what an archive says, while a writer must never emit what it cannot read back. A tar has no central index, so the walk tracks whether it reached the end-of-archive marker: without that, a half-file checksums fine and reads as complete.

Per-turn development progress memory: completed turns are classified into date-indexed Markdown files under doc/progress/ with a maintained INDEX.md, system-level bugs are kept in a cross-project SYSTEM_MEMORY.md and re-injected on error keywords, and a progress_read tool loads full documents on demand.

Bounded self-managed long-term memory (Hermes-style MEMORY.md / USER.md with hard character limits and a safety scan), a review that runs after every turn and writes plain-language notes or refines an existing skill instead of adding a near-duplicate, a curator that finds and surgically repairs skills the loader would silently discard, cross-session search over past messages, and a learning card above the composer that appears only when there is news and asks before it deletes or rewords a memory.

Permanently delete a session from the session row menu — archives the id, removes the log directory and drops the row at once, with a Delete shortcut; built only on shipped extension points, and a session that was merely opened stays deletable.

Compaction backend that replaces the default compaction-basic: it summarizes the conversation with a configurable pool of low-cost models, sizes each chunk to the chosen model's context window, and merges all digests in one call, with per-route cooldown and session-model fallback.

Per-model input type and thinking level declarations on the 模型 settings page — 输入类型 checkboxes on every provider card, and a 思考等级 field in the provider 编辑 dialog. Writes the official pi-ai input and reasoningEfforts fields.

Harness-owned lifecycle for the dario proxy — starts it with your harness, readiness-gates it, and stops it when the harness stops, so subscription-backed (Claude/ChatGPT) model routes just work.