Plugin

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

Automatically highlights key points, definitions, warnings, and questions in completed assistant answers using one separate model call.

Manage VPS servers over SSH key login: 21 zero-token /vps- commands (status queries, recipe installs with a plan and /vps-yes confirmation, reboot that waits for the machine to come back), an in-conversation terminal (xterm.js over ssh -tt) for interactive programs, 5 agent tools with risk-tiered confirmation, file backup with automatic restore and a firewall/SSH safety net, 29 built-in recipes, and a settings page for adding machines.

Live Android device pane next to your DSH conversation: scrcpy-server H.264 streaming (WebCodecs, 30-60 fps), agent tap/swipe/text with auto-screenshot verification, uiautomator element tree with tap coordinates, host-managed recording + logcat debug sessions. FLAG_SECURE pages are detected automatically with a mitigation chain and a tappable text-view fallback. Emulators and USB real phones, human+agent co-operation, session-isolated, loopback-only.

Git worktree-aware workspace browser for DeepSeek Harness: project sections, repository-grouped worktrees, and automatic workspace synchronization.

Provider-backed automatic approval review for DeepSeek Harness.

Native Auto Review for DeepSeek Harness with automatic host compatibility selection

Stores bookmarks as local Markdown files in a folder you choose, with a sidebar page for collections and links, library-wide search, automatic favicon downloads, and three agent tools.

Automatic model-tier routing for DeepSeek Harness: one user instruction enters, one tier decision comes out — complex intent is planned on the strong tier and implemented on the cheap tier, simple intent stays cheap throughout, with a deterministic guard and a TTL escalation fallback.

Full-screen dynamic wallpaper from local videos and images, with live effect controls, wallpaper switching and Wallpaper Engine workshop import; settings persist automatically.

A visual plugin marketplace for DSH: browse multiple Git sources, install plugins with one click, and wire skills, subagents, MCP connectors, LSP servers and hooks into the harness automatically.

Connects the Qixin Insight MCP server over OAuth 2.1 with PKCE as a single plugin entry, mounting its tools as mcp__qixin_insight__* with automatic token refresh and revocation on disconnect.

Persistent memory for DeepSeek Harness with curated facts, automatic turn retention, and graph- and vector-ranked recall.

Automatically sends a "continue" prompt when a reply is cut off at the output token limit, resuming long answers without manual input; aimed at self-hosted Ollama deployments with small output caps.

Routes DeepSeek Harness outbound traffic through a local Clash proxy, with automatic fallback to direct when the proxy is off.

Consent-bound one-turn voice preview for DSH Web with a credential-free local synthetic demo, optional Qwen Audio, exact Session isolation, and explicit transcript-to-draft handoff without automatic submission.

User-defined agents with automatic routing, model failover, and squad orchestration: six model tools (agent_dispatch / agent_followup / agent_list / agent_squad / agent_import_skill / agent_upsert), no built-in agents, a native right-tab panel (Overview / Agents / Squads / History), and a floating action ball.

Session management for DSH: archive or delete one session, archive/delete all sessions in a workspace, and restore archived sessions from the settings page — archiving backs up workspace metadata and restoring recreates deleted workspace registrations automatically.

Matches prompts to installed skills for automatic activation, applies skill-declared lifecycle hooks and tool policies, and manages GitHub-hosted skills from Settings or the skill_manager tool.

Auto-continue for the dsh web GUI: when a local model hits its output-token cap and the max-tokens notice appears, the plugin automatically queues a short continue message so the reply keeps flowing — dual-source truncation detection, loop protection, and no UI.

View local Skills and edit automatic and /name invocation policies from DSH Web settings, with bundled and symbolic-link entries kept read-only.

Transparent multimodal routing for text-only models: every image in every model call is fully transcribed (verbatim OCR, data, uncertainty zones, injection-hardened) by your own multimodal understander, with focused re-look via vision_relook and automatic retry on image-related failures. No bundled endpoints, no borrowed logins.

An AI collaboration mailbox in DeepSeek Harness for messaging, task handoffs and delivery receipts. One package includes MCP integration and a mailbox UI. Requires a separately installed Agent Mail 1.0.0-alpha.7 provider; no automatic model wake or continuous online status.

Automatically continues a native continuable DSH subagent once when it ends with explicit max-tokens termination, then stops.