Plugins

Installs a self-evolving development-constraints rule library, exposes it to the agent through a constraints tool and a once-per-session reminder, and audits AI token cost and context usage.

Periodic water, stand-up, eye-break and stretch reminders on your own work schedule, with daily and 7/30-day statistics and multiple switchable reminder plans.

Raises a Windows desktop notification card when DSH asks you a question, and returns to the asking Session when the card is clicked.

Persistent WeChat bridge for DSH: one WeChat user maps to one persistent agent session via the official iLink channel, with context and the user-to-session registry surviving restarts. There is no sender allowlist — anyone who can message the paired WeChat account can start a conversation with a session that has tool access, and the working directory defaults to the home directory; use a dedicated account and set WECHAT_PERSISTENT_CWD.

A global personal to-do list that is independent of any session: sidebar panel plus an edge dock that peeks on hover and pops open when a task is due, with desktop notification and custom sounds.

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

A resident assistant for DeepSeek Harness that is deliberately not another chat box: one floating window plus one standing conversation, both independent of every other session. The heartbeat is held back by four gates — an authority grant, a daily turn budget, quiet hours and a pacing cooldown — and it keeps working across restarts through a lease it has to hold. Each wake is decided by a model that must answer SKIP or a short message, so silence is a decision rather than a failure. The window shows the standing conversation's real message flow, read from the host session store, or from the on-disk session log when the host does not publish that session, and it can send into that conversation directly. den carries the same reach as the person it stands in for, with one limit: read-only. It may read every session, this machine and work channels such as GitHub, but it does not write, send or publish, it never asks anyone for permission, and it never gates another session's tool calls. `npm run digest:github` turns GitHub notifications and your own open pull requests into three Chinese sections — waiting on you, waiting on your review, and yours — with reply drafts that are explicitly marked as unsent.

Daily brief for DeepSeek Harness. Every day at a fixed hour it ranks the plugin market by real install counts and stars, cross-checks it against your own agent memory and working conventions, and proposes two kinds of item: concrete deltas on the plugins people actually use (original does A, the proposal does B) and directions nobody has built yet. The popularity numbers come from the catalog the market itself publishes and are quoted into the prompt rather than guessed; an entry the market has not measured is shown as unmeasured, never as zero. Approving an item opens a new session named after it and hands that session a fixed delivery contract — implement independently, never fork, test green before publishing. Rejected sources are remembered so they stop coming back.

Daily and weekly task manager: startup popup reminder, a marquee strip above the composer, one-click circle completion, editable task cards, and a Sunday AI weekly summary, plus a sidebar DeepSeek API usage widget with balance card, today/cumulative tokens and cost, per-model breakdown and a 7-day chart. Persists as JSON under $DSH_HOME.

Multi-agent delivery workflow for dsh: a commander dispatches to fixed and temporary agents through a persisted task state machine, with a canvas and roster in the right sidebar.

Answers a hard question with a one-page visual HTML explainer: the model writes a short Markdown draft and the bundled dependency-free `am` CLI builds the layout, CSS and diagram coordinates. Vendors the upstream answer-me-with-html skill verbatim as a skill-only DSH bundle with no Host code.

Live skill provider that reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session catalog: the engine-bundled skills under engine-config (unpacked from app.asar when that directory is absent), the MiMoCode global and project roots, extension-contributed skill directories declared in extensions.json, and the brand compatibility roots MiMo's own skillPathCompat setting enables.

Strict verification for every task: plan 2-7 steps, execute them with worker subagents, verify each deliverable with an independent memoryless verifier subagent, and fix in at most three cycles before reporting honestly.

A mandatory 7-step plan on every request, each step with a binary acceptance criterion, executed through worker subagents and validated by independent memoryless verifier subagents that report PASS or FAIL with evidence.

Overlay reader for agent output files: Markdown rendering, in-panel PDF, DOCX/XLSX/PPTX text preview and reply-end file chips, with search, outline and position memory.

Generates release material from what a local repository can actually support: a hero image, a feature grid and bilingual copy rendered as SVG and HTML from `README.md`, `package.json` and optional screenshots. Facts are quoted from those files — name, version, license, summary, features, install snippet — and a field that is missing is left unrendered rather than filled with placeholder text. Every feature carries a source citation such as `README.md#L42`, and a claim the repository cannot substantiate is linted out before anything is written, with the reasoning left in `lint-report.json`. `manifest.json` records a sha256 for each input and output, and `--now` or `SOURCE_DATE_EPOCH` makes a run byte-identical. Also ships a GUI panel that regenerates from inside a session.

Pixel-level screenshot diff for visual regression. Two local PNGs in; a machine-readable first line (`PIXEL_CHANGED=true|false`, greppable as an assertion), then the difference ratio, per-region bounding boxes, maximum channel delta and mean absolute error, plus a self-contained HTML comparison page. An ignore-region list with absolute or fractional coordinates excludes clocks, cursors and other per-render noise. It deliberately does no content recognition: it answers only "did this change", which is the part that can be made deterministic. Entirely local — no model call, no network, no upload.

Keyless web powers for any MCP client: web_search, JS-rendered web_extract over dual CDP Chrome with proxy failover, and 7 real-browser page_* tools in an isolated context.

Gives the agent its own clock: per-session time readings whose precision the agent can change at runtime, elapsed-time counters, and one-shot countdowns that survive a host restart.

Code retrieval engine exposed as an MCP server: four tools (code_search, code_outline, code_index, index_status) over a SQLite FTS5 index with BM25 ranking, CJK bigram indexing, declaration-aware tree-sitter chunking, incremental reindexing, and a three-layer secret filter. The bigram index matches Chinese-language queries against English code, and the default path needs no vector store or embedding model. Requires a local Python 3.10-3.12 engine installed by scripts/install.sh, and CODERAG_ROOT set in the profile patch.

AList v3 file management: browse, search, upload (streamed and multipart), offline downloads, archive listing, task polling and control, plus admin tools for storages, users, roles, meta rules, settings, search index, shares and labels - 75 tools in total; every write goes through the approval flow and passwords are never read back.

Folder time machine for DeepSeek Harness: snapshot any folder, browse its timeline, roll back with one click — Git-like history without needing Git, for folders that never had a repo (game saves, app config dirs, loose documents). Snapshots are content-addressed and deduplicated, and unchanged files are not re-hashed. Automatic snapshots come in two modes: realtime (fs.watch — one version ~8s after the last change, so a save-all or a build counts once) and timed (checks every N minutes, stores only when something actually changed; identical content never adds an empty version). Empty folders are recorded and recreated on restore. Every restore takes a safety snapshot first, so a rollback is itself undoable, and exact-mode cleanup only removes files and empty folders — a non-empty folder is never deleted. Ships a folder_timemachine model tool (status/history/diff need no approval; writes ask first) plus a floating panel with the timeline, one-click restore and mode switching. Pure JS, zero runtime dependencies, 110 tests included.

Bridges the AtomCode terminal AI coding assistant already signed in on this machine into DeepSeek Harness as two side tools: atomcode_ask (a side-conversation relay with per-working-directory session continuity) and atomcode_review (a one-shot, bounded code review with structured findings). atomcode_ask needs no API key and takes over no model — it reuses the AtomCode session already signed in on this machine. atomcode_review additionally requires a direct provider (standard API with an explicit api_key) configured in DSH; without one it refuses before calling. The settings card adds a read-only CodingPlan quota read-out, and each tool names its own model default.

A shareable delivery receipt for a project hand-off. The `ship_receipt` tool measures what it can and records what it was told, then sorts every line into three zones: verified (evidence this run produced and that reproduces elsewhere — a command that actually ran with its exit code, a file hash for a file that is under version control, a scan that found files, a git ref present in the recorded remote), local-only (true on this machine alone — uncommitted changes, unpushed commits, an artifact no one else can see), and unverified (no evidence, including every sentence a human typed). A claim with no evidence keeps its label and leaves the body blank rather than printing the claim; declares the commit and branch, artifact byte sizes and sha256 with PNG dimensions, and the three pre-push checks.