Plugins

Computer Use for every DSH session: screen capture, mouse and keyboard, app launch, plan and skill replay, an audit log, guards for dangerous actions, a background code agent, and an OCR workflow (text and coordinates) for apps whose accessibility tree is empty. Verified on macOS only: Windows has a basic GUI backend that is unverified, Linux has no desktop backend (calls fail with unsupported_platform), and the window/AX/browser/clipboard tools register on macOS only.

Domain-routed proxy for DSH fetch traffic: hosts on a force-proxy list always go through the proxy, every other host tries direct first and fails over to the proxy within a second, the first channel to answer is pinned for the session, connections are reused for 120 seconds, and each attempt is logged. Can also route pnpm/git subprocesses used by plugin installs.

IMAP mail triage and cleanup for DeepSeek Harness: incremental read-only scan, a hard-protection rule layer plus optional local-model classification, a Markdown report and a hashed manifest, an explicit approval card, and only then a move to the Trash mailbox — no expunge.

Picks PTC or native tool presentation per task and switches it at runtime for the model or the user.

Deterministic review of synthetic AI-agent claims in DeepSeek Harness, reporting bounded verdicts, reasons, and evidence references.

Manage Oracle, PostgreSQL, MySQL, MariaDB, SQL Server and SQLite connections with driver diagnostics, column defaults/comments, and opt-in metadata browsing for agents; requires a separate Python 3 environment with the per-driver packages (SQLite needs only the standard library).

Read-only Linux port, service and Caddy route map: listening sockets with their owning unit or container, a reverse service view, and reverse_proxy liveness checks. Requires iproute2 (ss); docker and a Caddyfile are optional.

Rclone backup tooling with four tools: target inventory, local/remote status, rclone check verification, and approved copy/sync transfers with dry-run previews and an audit line. Requires rclone installed and a remote configured with `rclone config`; the plugin never reads the rclone config or credentials.

Utilities for DSH sessions: ask another session a question with a context guard, pause the running turn from the UI, restart DSH on Windows and resume automatically (via the scheduled task that install-restart.ps1 creates), enforce peak-hour discipline and per-feature allowed time windows, and periodically scan session logs for interrupted turns.

Fork of kirkchinese/dsh-capability-catalog 0.1.4 (cannot be installed alongside the upstream capability catalog / @kirkchinese/dsh-rea): a REA-focused MCP gateway with three fixed search, describe and call tools, cached schemas, session controls and native DSH result handling. Requires DSH 0.2.1-rc.4 or 0.2.2-rc.1 and a Node/npm setup able to run REA.

Notify-only update checker for the plugins in a DSH profile: classifies each dependency by its specifier and offers only releases the running DSH core can load, in a plugin_updates tool and an Updates sidebar tab (the tab needs dsh-better-sidebar; the tool and settings work without it).

A Phone tab in dsh-better-sidebar: SMS and calls over Twilio and SIP lines bridged through Asterisk, call audio through your server, Live, Voicemail and Do not disturb modes with live voicemail transcripts, a Telegram account with chats, voice messages and calls, and phone_* and telegram_* agent tools. Requires dsh-better-sidebar, Node 22.5+, a Twilio account with a voice and SMS number, a public HTTPS host for provider webhooks, and the bundled Go daemons built from a checkout (Telegram also needs your own api_id/api_hash).

Mail for DSH: IMAP, POP3, SMTP and OAuth2 accounts with a reading tab, API senders, scheduled and CSV bulk sends with unsubscribe handling, and mail_* agent tools. The Mail tab appears inside dsh-better-sidebar; the agent tools work without it.

After an agent's own bash or shell command, re-observes the files that session had observed, so FS_STALE_VERSION no longer fires on self-inflicted writes but still fires on writes by others.

Region screenshot for DSH without a hotkey (Windows only; capture runs through PowerShell + GDI). Hold the left mouse button for 550 ms, the page dims into a crosshair, drag a box, release: the crop is saved to ~/.dsh/longpress-shots and copied to the clipboard, and a preview card can send the same bytes into the composer (button, Ctrl+V, or drag) instead of hunting for a file dialog.

Look up Chinese companies inside the conversation: name a company and get its business registration, shareholders, executives, outbound investments and registration changes, plus judicial and operating-risk records such as enforcement, dishonest judgment debtor, consumption restriction, abnormal operation, serious illegality and administrative penalties (11 dimension groups). Results render as conversation cards with fields and the raw payload on expand, and the API key is saved from the plugin page into the Harness credential store.

Windows multi-drive dashboard that labels cleanable, caution, and system space in green, yellow, and red, audits download folders, and suggests how to split data across drives.

Bilibili companion for DSH (MIT fork of Alterssss/dsh-bili-whale; do not install alongside the upstream — both register the same `/dsh-bili/` settings routes and share `~/.dsh/bili-whale.config.json`): wakes on a schedule, reads videos through subtitles, danmaku, hot comments and covers, writes two diaries, and shares at most one pick per wake by commenting on the video and @-mentioning the owner (daily quota 3; DM when `share.via=dm`). Inbound DMs, commenter names, summary requests and live danmaku are normalized and scanned for injected instructions before they reach the model; only the owner DM channel can carry an authorization prefix.

Sends photos from a phone into a DeepSeek Harness conversation through a simple LAN service.

MySQL and PostgreSQL connection manager with a schema tree, table search, SQL console with completion, and four agent tools for listing connections, searching tables, inspecting structure, and running queries.

Emotion, energy and per-user portrait engine for AI characters: a 303-word emotion library scored in two steps (pick one of 6 categories first, then choose within it), novelty reward and same-word cooldown for diversity, a spirit meter with easter-egg state transitions (excited / suppressed / angry), and per-user portraits. File mode works with any AI; the optional OneBot mode reads friend message history from a OneBot 11 endpoint such as NapCat. Requires your own OpenAI-compatible LLM endpoint and API key (EMOTION_LLM_KEY or emotion/config.json).

Local-first, file-native long-term memory for DSH with per-turn preflight, compact context injection, citations, human-approved writes, manual consolidation, nightly report-only maintenance, and a Web panel that is read-only for knowledge while allowing workspace-config edits.

Three ledgers for a model that loses context between restarts. Self-note: what I have become — capped at 40 entries, and every eviction first leaves a one-line crease recording which entry was dropped and why. Judgment ledger: record a claim together with how to verify it, come back when it is due, and mark it right or wrong; wrong ones stay in a mistakes book so you stop assuming you were always correct. Handoff: where this run stopped and what the next one should read first — a baton, not a memory. Three tools each taking an action parameter instead of a dozen separate ones (the prompt is paid every turn). Data lives in ~/.dsh/*.jsonl and is shared with the same-named CLI scripts. Zero dependencies.

Obsidian-compatible Markdown notes in the DSH sidebar with search, tags, backlinks, graph, audio notes with transcription, a paint canvas, OCR (needs tesseract), client-side encryption and notes_* agent tools; the release tarball and the npm package carry a prebuilt Linux x64 daemon, other platforms build it from source with Go.