Plugin

Floating friends list and one-to-one chat for DSH, with custom avatars and status words. The required friends service is in this repository and runs via npx dsh-friends-service or Docker.

Tarot readings with a dealt card table, a reading tool, and a reviewable history.

Run shell commands on the host instead of inside DSH, triggered by exact-match QQ messages through NapCat, and DM the result; requires EviMing/dsh-napcat-tools. plus Python 3.10+ for napcat_api.

Loopback HTTP/SSE service that lets an Obsidian plugin drive DSH sessions and inject vault notes into the system prompt (path-based, re-read every turn, so edits show up next turn); needs the companion plugin running inside Obsidian.

System guard for DeepSeek Harness (Windows-first, protected actions via UAC/sudo): classifies core system files and runtime junk, keeps a hidden SHA-256 backup of core files on the largest free disk, patrols integrity and restores damaged files, and asks for administrator rights only to protect the system. On macOS/Linux it only classifies and hashes (no junk deletion; repair prints manual steps), and that path has not been tested on real hardware.

When enabled, exchanges the running process's launch token for a browser-session cookie at a configurable public URI (default /trustme), so a first visit needs no ?token= in the URL.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Ask the executing AI — and the auto-review AI when DSH's auto-review plugin is installed and enabled — about a pending tool approval before you allow or reject it; the executing AI's answers are saved into the session.

Intercepts startup crashes, isolates broken frontend plugins, and recovers GUI cleanly with revision-bound quarantine.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Runs project check commands itself and records the real exit codes, pins the result to a git or file workspace fingerprint, expires the evidence when the tree changes, and reminds the agent to verify before claiming completion.

Sidebar badge and desktop notification when a background session finishes while you are working in another project.

Task alerts for DSH: a system toast when a turn finishes, or when an approval, question or plan review is waiting; a chime rendered on the Windows communications endpoint so the system ducks other media by its own setting and restores it afterwards, without anyone's volume being written; and an optional copy mailed to your phone over SMTP (465 implicit TLS, or STARTTLS where credentials go out only after the upgrade). No runtime dependency: the sound helper is a PowerShell script, the mail client is plain Node.

Plan-native multi-agent workflow for DeepSeek Harness: plan directs, work coordinates, code writes, and review audits read-only. Ordinary tasks need no authorization card or budget form. Includes 14 chain_* tools for explicitly authorized controlled rounds, with a frozen T0 baseline, layered evidence, and blocking close gates. Provides per-role model settings. Requires the sibling l1-presets bundle.

Four agent presets for the default plan-native workflow in DeepSeek Harness: plan plans and delegates, work coordinates execution, code owns implementation changes, and review performs independent read-only audits. Each role has a defined tool-permission matrix. Works with the sibling l2-protocol bundle for opt-in controlled rounds.

Read-only workflow panel for DSH: overview, six gates, milestones, org template, task flow and roster - project data from a project.json file, roster from the live DSH state, ledger presence from the ledger directory. Ships as a Cordis bundle with two GET-only routes and writes nothing to the project or the DSH state file.

Agent-team task workbench for DeepSeek Harness: a sidebar board and requirement view track tasks across backlog, execution, review and done, dispatch work to coding agents, and run multi-role team orchestration on a local SQLite store.

Chinese e-invoice (OFD/XML) inbox: ingest, parse, deduplicate, queue for review, record receipts and archive locally — 10 `invoice.*` tools, nothing uploaded.

Runs an approved OpenSpec change to completion while the model stays a mechanical forwarder: a bundled Python CLI computes the ticket DAG frontier, claims tasks atomically, prepares one git worktree per assignment, and returns exact actions. The session delegates each action with the DSH subagent tool and reconciles the completion notice against a hash-bound receipt produced by re-running verification commands on a clean, advanced HEAD, so free-text "done" never counts. Runtime scope changes are plain tasks.md edits. Liveness is observable, not guessed: status returns a relay block (elapsed and lease budget, receipt presence, heartbeat and activity age, a suggested action); abandoning a plausibly-still-working attempt is refused with the judgment data unless --force; a late sealed receipt is revived by adopt after full re-verification instead of rebuilding the ticket; dispatched subagents refresh a progress heartbeat outside the worktree. Requires Python 3.10+ on PATH and a git project that uses OpenSpec.

An Orchestrate tab in dsh-better-sidebar and 14 orch_* tools to spawn, prompt, fork and cancel agent chats, run command, scrape, http and agent tasks on local, ssh or remote runners, show provider status cards, and serve a secret-protected machine API. Requires DSH >= 0.1.1-rc.1, Node >= 22.5, the web profile and dsh-better-sidebar.

Adds an ARIS agent preset that loads the 84 ARIS research-workflow skills and runs their reviewer as an in-harness subagent from a different model family than the session model. Other presets are unchanged. A fork of wanshuiyin/Auto-claude-code-research-in-sleep's dsh-aris branch: install it instead of the upstream dsh-aris plugin, not alongside it - both register the mcp__codex__codex reviewer tools and the same ARIS skills.

Runs local Codex CLI tasks from DSH on Windows with background execution, progress queries, follow-up instructions, completed chat records, and optional supervision; requires Node 22.23.4+, DSH >=0.2.1-rc.3 <0.3.0, and an installed, authenticated Codex CLI.

Logic-risk review before rewriting: audit the source, decide each fix, generate several drafts in parallel, and export with a per-draft audit report. Bring your own OpenAI-compatible API endpoint and key - the plugin ships no model and returns 403 until one is configured.