Plugins

Drives the Claude desktop app from DSH over its claude:// deep links: open a Claude Code session with a prompt and folders, a Cowork task with files, or push a CLI session id back into the app. Also presses Ctrl+Enter for you (SendKeys) and reads the reply back from the local Claude Code transcripts under ~/.claude/projects/<cwd-slug>/<session>.jsonl — seven tools: desktop_send, desktop_continue, desktop_open, desktop_sessions, desktop_read, desktop_wait, desktop_probe.

Two switches at the right of the Session header. The left one stops writes to your local git repository (git add, git commit); the right one stops uploads to a remote (git push, git remote, gh). Both start on, and switching a guard on never releases the o

Phone push for DeepSeek Harness: hooks the question seam in-process so a pending question reaches your phone through an ntfy relay; an answer sent from the phone is fed back to the agent as a user message, which requires `tool-ask-user` to run in `mode: timed` — with the shipped default (`mode: legacy`) only the notification is delivered.

Sends desktop notifications and custom HTTP pushes when tasks finish or need your attention.

Floating commit panel for the DSH web UI: it appears when the current session workspace has unstaged or untracked changes, takes a hand-written or AI-drafted commit message (AI drafts follow Conventional Commit), and commits or commits and pushes. Works in the DSH web UI and CLI only; the desktop app cannot install it.

Counts the prompts you send in the Web GUI and turns them into a push-up debt, shown as a chip under the composer with one-click pay-off, partial payments and a day streak.

DeepSeek Harness host plugin for the DSH Mobile Android app: pair with a QR, use DSH on the phone through its own HTTPS gateway, answer approvals and questions from notifications, push turn completion.

Pre-claim gate: a commit, push or tag claim like "tests pass" is checked against the session evidence ledger before it is written.

Low-code project workspace for the DSH web UI. A multi-level file tree with a push-status ledger, in-panel source view and edit, pre-push static checks, and a scaffold for an empty workspace. Requires the MagicalCoder platform and a server profile (address + designer account) for push/pull.

Plays a voice alert and a browser notification when a turn finishes, asks for input, or fails, and can push the same summary to a Feishu bot webhook as a card.

Bidirectional GitHub repository sync for DSH: git sync with conflict rollback and pre-push checks, Actions/CI monitoring with per-step run detail, repository add/remove/rename, a web panel with local and remote file browsers, scheduled automation, and six agent tools.

Branch panel for the composer: creates rule-checked branches from production6, validates commit messages against a type(scope) convention, and commits, pushes, or merges into stage in one click.

One screen for every work you have shipped: local project facts, GitHub stars and last push, whether the plugin market has picked it up and how many downloads it has, plus pending pull-request wait times against the upstream median.

Automatic, versioned backup of your DeepSeek Harness home — sessions, memories, settings and the profile plugin tree — to a private git remote you own, with commits and pushes on a schedule and every failure surfaced in the DSH log.

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

Push a Gotify notification when each conversation turn ends, with configurable templates, priority and per-cause titles.

Git tab in the DeepSeek Harness conversation view: reviews every repository in the session working directory and commits each on its own, with change groups, whole-file / changes-only / side-by-side diffs, in-panel editing, and a push button that lists every commit it would publish.

Agent-facing GitHub repository tools: binds an account through a first-run prompt, then clones into the workspace and reads, exact-replaces, commits and pushes files, with writes off by default.

Codex-style Git panel for DeepSeek Harness: a header button opens a menu with commit, push, branch switching and creation, and repository initialization; shows the current branch and the total additions and deletions of uncommitted files.

Git plugin — adds Git management to the session tab bar, covering the basics: commit | pull | push | branch | diff.

Sidebar Git panel for the DSH web GUI: Local Changes and All Commits views, branch, tag and stash management with fetch, pull and push dialogs, merge with conflict handling, and a zsh-style branch marker in the input bar.

Push-to-talk dictation for the Web composer: hold a hotkey to record and the transcript is written into the draft through DSH's own speech Remote (local SenseVoice), with an optional auto-send.

A shareable delivery receipt for a project hand-off. The `ship_receipt` tool measures what it can and records what it was told, then sorts every line into three zones: verified (evidence this run produced and that reproduces elsewhere — a command that actually ran with its exit code, a file hash for a file that is under version control, a scan that found files, a git ref present in the recorded remote), local-only (true on this machine alone — uncommitted changes, unpushed commits, an artifact no one else can see), and unverified (no evidence, including every sentence a human typed). A claim with no evidence keeps its label and leaves the body blank rather than printing the claim; declares the commit and branch, artifact byte sizes and sha256 with PNG dimensions, and the three pre-push checks.