Plugins

System guard for DeepSeek Harness (Windows-first, protected actions via UAC/sudo): classifies core system files and runtime junk, keeps a hidden SHA-256 backup of core files on the largest free disk, patrols integrity and restores damaged files, and asks for administrator rights only to protect the system. On macOS/Linux it only classifies and hashes (no junk deletion; repair prints manual steps), and that path has not been tested on real hardware.

When enabled, exchanges the running process's launch token for a browser-session cookie at a configurable public URI (default /trustme), so a first visit needs no ?token= in the URL.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Ask the executing AI — and the auto-review AI when DSH's auto-review plugin is installed and enabled — about a pending tool approval before you allow or reject it; the executing AI's answers are saved into the session.

Intercepts startup crashes, isolates broken frontend plugins, and recovers GUI cleanly with revision-bound quarantine.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Grades free physical and commit memory and refuses heavy tools (shell, workflow, subagent) before the machine thrashes. A reserve you set on the panel is held back from heavy tools so light calls still have room. Also shows in the composer how much of the machine dsh itself is using, including whole-machine CPU.

Unity 2022.3 editor control for the agent: 20 tools that read the scene hierarchy, create and edit GameObjects, components and serialized properties, drive Play mode, capture screenshots, evaluate C# inside the editor and start player builds.

Adds a Restart button to the Windows titlebar of the desktop app: a click opens a confirmation dialog that says how many sessions a restart would interrupt, and confirming quits and reopens the app.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Per-turn tool-call step budget for Agent Teams teammates, shipped together with the team-dev and team-boot skills.

Runs project check commands itself and records the real exit codes, pins the result to a git or file workspace fingerprint, expires the evidence when the tree changes, and reminds the agent to verify before claiming completion.

Sidebar badge and desktop notification when a background session finishes while you are working in another project.

Sends one system notification when a DSH turn ends: per-outcome switches for completed, error and interrupted, a minimum-duration threshold, silent subagents and unfocused-window-only delivery. Works on Windows, macOS and Linux, delivered through a connected page or a native fallback (PowerShell toast, osascript, notify-send; the Linux native fallback needs libnotify). Clicking the notification brings DSH back to the front on the page/Electron channel; PowerShell and notify-send notifications are not clickable.

Adds an UpdateNotify tool and a live progress panel docked above the composer in the DSH Web UI, so the model can narrate what it just did, found, or is waiting on while a turn runs.

Task alerts for DSH: a system toast when a turn finishes, or when an approval, question or plan review is waiting; a chime rendered on the Windows communications endpoint so the system ducks other media by its own setting and restores it afterwards, without anyone's volume being written; and an optional copy mailed to your phone over SMTP (465 implicit TLS, or STARTTLS where credentials go out only after the upgrade). No runtime dependency: the sound helper is a PowerShell script, the mail client is plain Node.

Sends desktop notifications when a DSH turn finishes or fails, and sends 继续 automatically after the model-retry budget is exhausted.

macOS notch panel for DeepSeek Harness: running sessions and pending approvals sit above every window, approvals are decided in place, and clicking a row opens that conversation in the desktop app. Requires macOS 14+ and Xcode Command Line Tools.

Sends a QQ direct message through a local NapCat (OneBot) instance when DeepSeek Harness asks for permission, after verifying the bot QQ; requires owner/bot QQ ids plus the NapCat endpoint and token, and falls back to a Windows notification when NapCat is unreachable.

Sends Windows system notifications when DSH session turns end, with session titles, elapsed time when observed, optional foreground suppression and subagent filtering. Click a notification to focus the DSH window. DSH must remain running to deliver notifications.

Adds a one-click Worktree switch beside the composer that moves an empty session into a new git worktree, and removes worktrees idle for three days.

Turns a stated rule into a checkable intake card and writes it into the right AGENTS.md, and keeps project plans, a rule ledger, project records, handoffs, a change log and a timeline.