Plugin

Run shell commands on the host instead of inside DSH, triggered by exact-match QQ messages through NapCat, and DM the result; requires EviMing/dsh-napcat-tools. plus Python 3.10+ for napcat_api.

System guard for DeepSeek Harness (Windows-first, protected actions via UAC/sudo): classifies core system files and runtime junk, keeps a hidden SHA-256 backup of core files on the largest free disk, patrols integrity and restores damaged files, and asks for administrator rights only to protect the system. On macOS/Linux it only classifies and hashes (no junk deletion; repair prints manual steps), and that path has not been tested on real hardware.

When enabled, exchanges the running process's launch token for a browser-session cookie at a configurable public URI (default /trustme), so a first visit needs no ?token= in the URL.

Ask the executing AI — and the auto-review AI when DSH's auto-review plugin is installed and enabled — about a pending tool approval before you allow or reject it; the executing AI's answers are saved into the session.

Intercepts startup crashes, isolates broken frontend plugins, and recovers GUI cleanly with revision-bound quarantine.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Grades free physical and commit memory and refuses heavy tools (shell, workflow, subagent) before the machine thrashes. Also shows in the composer how much of the machine dsh itself is using, including whole-machine CPU.

Unity 2022.3 editor control for the agent: 20 tools that read the scene hierarchy, create and edit GameObjects, components and serialized properties, drive Play mode, capture screenshots, evaluate C# inside the editor and start player builds.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Per-turn tool-call step budget for Agent Teams teammates, shipped together with the team-dev and team-boot skills.

Runs project check commands itself and records the real exit codes, pins the result to a git or file workspace fingerprint, expires the evidence when the tree changes, and reminds the agent to verify before claiming completion.

Sidebar badge and desktop notification when a background session finishes while you are working in another project.

Sends one system notification when a DSH turn ends: per-outcome switches for completed, error and interrupted, a minimum-duration threshold, silent subagents and unfocused-window-only delivery. Works on Windows, macOS and Linux, delivered through a connected page or a native fallback (PowerShell toast, osascript, notify-send; the Linux native fallback needs libnotify). Clicking the notification brings DSH back to the front on the page/Electron channel; PowerShell and notify-send notifications are not clickable.

Sends desktop notifications when a DSH turn finishes or fails, and sends 继续 automatically after the model-retry budget is exhausted.

macOS notch panel for DeepSeek Harness: running sessions and pending approvals sit above every window, approvals are decided in place, and clicking a row opens that conversation in the desktop app. Requires macOS 14+ and Xcode Command Line Tools.

Sends a QQ direct message through a local NapCat (OneBot) instance when DeepSeek Harness asks for permission, after verifying the bot QQ; requires owner/bot QQ ids plus the NapCat endpoint and token, and falls back to a Windows notification when NapCat is unreachable.

Sends Windows system notifications when DSH session turns end, with session titles, elapsed time when observed, optional foreground suppression and subagent filtering. Click a notification to focus the DSH window.

Adds a one-click Worktree switch beside the composer that moves an empty session into a new git worktree, and removes worktrees idle for three days.

Turns a stated rule into a checkable intake card and writes it into the right AGENTS.md, and keeps project plans, a rule ledger, project records, handoffs, a change log and a timeline.

Plan-native multi-agent workflow for DeepSeek Harness: plan directs, work coordinates, code writes, and review audits read-only. Ordinary tasks need no authorization card or budget form. Includes 14 chain_* tools for explicitly authorized controlled rounds, with a frozen T0 baseline, layered evidence, and blocking close gates. Provides per-role model settings. Requires the sibling l1-presets bundle.

Four agent presets for the default plan-native workflow in DeepSeek Harness: plan plans and delegates, work coordinates execution, code owns implementation changes, and review performs independent read-only audits. Each role has a defined tool-permission matrix. Works with the sibling l2-protocol bundle for opt-in controlled rounds.

Event-source plugin for DeepSeek Harness: cron, webhook, file watch, and deterministic procedures, with a ledger, console, and concurrency limits.