Plugins

Whale-themed desktop pet for DeepSeek Harness with a local todo list: click the pet to add or edit tasks inline, get reminders that get more frequent as a due date approaches, and optionally append one short AI-written next step to a reminder. Based on PC2005-cloud/dsh-pet (MIT); artwork keeps the upstream non-commercial terms. Install it instead of PC2005-cloud/dsh-pet, not alongside it.

A talking whale desktop pet for the DSH web UI — persona-driven chat with persistent memory, plus scheduled autonomous web browsing that brings back a summarized message telling you what she found. Based on PC2005-cloud/dsh-pet (its art and animations are reused under the upstream non-commercial terms); install it instead of dsh-pet, not alongside it.

Adds an 'Upgrades' tab to the DSH Plugins page: npm update checks for all installed plugins, engines.dsh compatibility preflight before upgrading, and one-click in-place upgrades that bypass pnpm's 24-hour release-cooling gate. Also refreshes the npm dependency families pulled in by GitHub-sourced bundles, and checks the Harness itself against the latest npm release.

Run shell commands on the host instead of inside DSH, triggered by exact-match QQ messages through NapCat, and DM the result; requires EviMing/dsh-napcat-tools. plus Python 3.10+ for napcat_api.

System guard for DeepSeek Harness (Windows-first, protected actions via UAC/sudo): classifies core system files and runtime junk, keeps a hidden SHA-256 backup of core files on the largest free disk, patrols integrity and restores damaged files, and asks for administrator rights only to protect the system. On macOS/Linux it only classifies and hashes (no junk deletion; repair prints manual steps), and that path has not been tested on real hardware.

When enabled, exchanges the running process's launch token for a browser-session cookie at a configurable public URI (default /trustme), so a first visit needs no ?token= in the URL.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Intercepts startup crashes, isolates broken frontend plugins, and recovers GUI cleanly with revision-bound quarantine.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Grades free physical and commit memory and refuses heavy tools (shell, workflow, subagent) before the machine thrashes. A reserve you set on the panel is held back from heavy tools so light calls still have room. Also shows in the composer how much of the machine dsh itself is using, including whole-machine CPU.

Unity 2022.3 editor control for the agent: 20 tools that read the scene hierarchy, create and edit GameObjects, components and serialized properties, drive Play mode, capture screenshots, evaluate C# inside the editor and start player builds.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Per-turn tool-call step budget for Agent Teams teammates, shipped together with the team-dev and team-boot skills.

Runs project check commands itself and records the real exit codes, pins the result to a git or file workspace fingerprint, expires the evidence when the tree changes, and reminds the agent to verify before claiming completion.

Sidebar badge and desktop notification when a background session finishes while you are working in another project.

Sends one system notification when a DSH turn ends: per-outcome switches for completed, error and interrupted, a minimum-duration threshold, silent subagents and unfocused-window-only delivery. Works on Windows, macOS and Linux, delivered through a connected page or a native fallback (PowerShell toast, osascript, notify-send; the Linux native fallback needs libnotify). Clicking the notification brings DSH back to the front on the page/Electron channel; PowerShell and notify-send notifications are not clickable.

Sends desktop notifications when a DSH turn finishes or fails, and sends 继续 automatically after the model-retry budget is exhausted.

macOS notch panel for DeepSeek Harness: running sessions and pending approvals sit above every window, approvals are decided in place, and clicking a row opens that conversation in the desktop app. Requires macOS 14+ and Xcode Command Line Tools.

Sends a QQ direct message through a local NapCat (OneBot) instance when DeepSeek Harness asks for permission, after verifying the bot QQ; requires owner/bot QQ ids plus the NapCat endpoint and token, and falls back to a Windows notification when NapCat is unreachable.

Sends Windows system notifications when DSH session turns end, with session titles, elapsed time when observed, optional foreground suppression and subagent filtering. Click a notification to focus the DSH window. DSH must remain running to deliver notifications.

Adds a one-click Worktree switch beside the composer that moves an empty session into a new git worktree, and removes worktrees idle for three days.

Turns a stated rule into a checkable intake card and writes it into the right AGENTS.md, and keeps project plans, a rule ledger, project records, handoffs, a change log and a timeline.