Plugins

Grouped run panel for DeepSeek Harness: one click starts a project's services in a real PTY, streams live colored output, and keeps every run's log on disk where the agent can read it.

Tracks successful DSH plugin installs per device, merges the ledger across devices through a user-authorized Baidu Netdisk account, and supports preflighted batch reinstalls.

Shows what each installed skill costs in the model context and hides a skill from the catalog without deleting it. Lists every skill found on disk with the exact catalog line the model receives (description normalized and truncated at the catalog cap), its body size and token estimate; previews the catalog message byte-for-byte as the agent will receive it, compares that with the copy already published in the current session, and reports skills on disk that never reach the catalog (invalid frontmatter, or shadowed by a higher-priority root). Hiding writes disable-model-invocation into frontmatter and keeps the file, so the skill still works via /name. Also imports skills from ClawHub, Skills.sh and GitHub URLs and uninstalls user-owned ones.

Skill panel: browse skills by source, group them into colored folders, preview files, export a skill as zip, copy one into the project, rename it on disk, and insert /skill calls from a composer menu.

Adds a "Delete session" option to the sidebar session menu that permanently removes the session from disk.

Live DeepSeek API balance and this session's token usage in the conversation header, with a detail panel for the topped-up / granted balance split, request count, input, output and cache-hit tokens, and context pressure. The API key is read on every query and is never cached, written to disk or returned to the browser.

Disk review canvas: agent-written semantics, human decisions, previewed cleanup with undo.

Codex-style paste collapse for the DeepSeek Harness composer: a paste of more than 1000 characters becomes a `[Pasted Content N chars]` placeholder, a second paste of the same size is numbered `#2`, and the host expands it back to the full text before the model reads it, so the model still receives every character. A pill on the top edge of the composer shows the preview, the sent message shows the same pill, and clicking either opens the whole paste in a side panel with a copy button. Pure in memory: nothing is written to disk and no token is saved.

The writable half of the right-sidebar document preview: edit and save any text file in place. Every save carries the version that was opened, so when the file changed on disk during the edit it stops and asks instead of overwriting. The preview toolbar gains an edit button and a two-step delete button. A separate File editor sidebar tool brings its own file tree: create, rename or move, copy, cut and paste (including a file taken from the system clipboard), delete, and drag to reorganize. Two renderer bands cover 107 plain-text, config and source extensions; the second is offered only as an open-with choice, leaving the shipped Markdown and highlighted-code views as the default. Mutations run through the plugin own trusted host routes, behind the connection fence, the workspace containment check and the sandbox policy.

Local file manager served by the DSH web server itself: whole-disk browsing, previews for images, PDF, video and audio, text, Markdown, JSON, CSV, sandboxed HTML, docx and xlsx, Range downloads, folder ZIP, drag-and-drop upload, copy/paste, conflict-checked text editing, create/rename/delete-to-trash, and xlsx cell editing saved as a copy.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box copy while the real disk stays untouched (Windows only, requires Sandboxie-Plus).

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

Conflict diagnosis and repair for DeepSeek Harness plugins. Builds a capability graph of the running Loader profile and of the on-disk cordis.patch.yml layers, comparing imports, peer ranges and config against the host that is ACTUALLY running rather than the profile's possibly-stale copies, and reports the conflicts that fail silently: a fiber stuck PENDING on a service no plugin provides, a browser half injecting a client module nothing provides, a tool id two plugins both register, duplicate Loader entry ids, a row disabled by one layer and re-inserted by another, an import of a host subpath the running host does not export, and a cycle among inject declarations. Every finding carries its evidence, a confidence grade for who owns a name, and a repair with a risk grade — verify it with a dry-run difference table, or take the individual .patch.yml files that --fix-out writes (never auto-loaded, so picking wrong breaks nothing).

A resident assistant for DeepSeek Harness that is deliberately not another chat box: one floating window plus one standing conversation, both independent of every other session. The heartbeat is held back by four gates — an authority grant, a daily turn budget, quiet hours and a pacing cooldown — and it keeps working across restarts through a lease it has to hold. Each wake is decided by a model that must answer SKIP or a short message, so silence is a decision rather than a failure. The window shows the standing conversation's real message flow, read from the host session store, or from the on-disk session log when the host does not publish that session, and it can send into that conversation directly. den carries the same reach as the person it stands in for, with one limit: read-only. It may read every session, this machine and work channels such as GitHub, but it does not write, send or publish, it never asks anyone for permission, and it never gates another session's tool calls. `npm run digest:github` turns GitHub notifications and your own open pull requests into three Chinese sections — waiting on you, waiting on your review, and yours — with reply drafts that are explicitly marked as unsent.

Inspect and tidy a real Android phone over adb: storage surveys, per-app data sizes read from dumpsys diskstats without root, cache clearing that preserves app data, directory measurements and screenshots — five tools; reads never modify anything, writes require explicit confirmation.

Local-folder wallpaper for the DSH Web UI: it defaults to your Pictures library (C:\Users\<you>\Pictures) and the host serves those images over same-origin HTTP, rotating one every N minutes (0-1440, default 5) in a shuffled pass with no repeats; the settings page under Plugins picks a different folder through the native system dialog, and tunes image opacity (100%), darkening scrim (25%) and panel opacity (15%) with changes applied live. Dialogs, modals and menus keep the default opaque background so text stays readable. Reads .jpg .jpeg .png .webp .gif .avif .bmp straight from disk, and keeps per-user settings under $DSH_HOME so upgrades never ship your folder path.

Chinese summaries for the dsh-skill-mcp-panel skill cards: each expanded card gets a short Chinese overview, a category tag and a few bullet points, while the English description the panel already renders is folded behind a "原文" toggle. Skills missing from the bundled map are translated on demand by the host with your current default model and cached on disk, keyed by a hash of the original text, so a new skill needs no manual entry. Skills whose own description is already Chinese are skipped.

Skill manager page in the DSH Web Settings panel, at the same level as Plugins: lists every skill the installation serves with its own summary, source and disk footprint, and removes any of them into a recoverable trash.

SSH server dashboard for DSH: per-host status, CPU, memory, disk and network meters, trend charts, an xterm.js terminal, SFTP file transfer, and server_box_hosts / server_box_exec / server_box_upload / server_box_download chat tools; imports ~/.ssh/config and mounts as a sidebar tab or a standalone drawer.

Per-task disk-space ledger in the sidebar with opt-in reclamation of unowned junk; session logs are never trimmed.

Reports each machine's token usage to a team server you host, with one-time enrollment codes, an offline disk queue, and idempotent replay, so an administrator can see every member's usage and cost in one place.

Turn a raw recording into a published podcast with a local ffmpeg — detect chapter boundaries from silence, cut at those boundaries, normalise loudness to a broadcast target in two passes, and write an iTunes-compatible RSS feed whose enclosure byte lengths are measured from disk.

Archived-sessions page for DeepSeek Harness: per-row and batch deletion that clears the session log, the projection cache and the archive index together, with a 30-day recycle bin, subagent-aware refusals and a per-row disk footprint.