Plugins

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Windows desktop observation and control: accessibility tree, screenshots, OCR fallback, mouse and keyboard, with session-scoped approvals and an ESC halt gate. Computer use and desktop automation for DSH, including GUI automation fallbacks.

Finds wasted GitHub Actions runner time and proposes small, reviewable workflow patches, with explicit approval before any edit and a DSH settings page for analysis rules, history limits, storage, and cost estimation.

Edge-style tab groups for the DSH sidebar on Web and Desktop, with nested groups up to three levels, workspace tree, single-list view, recursive sorting, RGB colors, collapsed status summaries, subagent expansion with status, and an approval-gated agent tool for organizing groups.

Long-term memory scoped to the DSH workspace. A session opens with a one-line-per-memory index - bodies are fetched on demand by the `memory` tool, so the same character budget holds about three times as many entries - and when a turn ends a purely local search over the last user message pulls the matching memories into the next briefing at no model cost. Optional auto-capture distils a stretch of conversation into structured memories; in draft mode they wait in an approval queue instead of landing directly. A portrait layer keeps a workspace and a global picture, rewritten from the journal and the records, with the same draft-or-direct choice. Settings → Memory holds the archive, list and timeline views, a health check (duplicate clusters, stale entries, broken links), the supersede version chain with rollback, and a read-only scan that imports existing WorkBuddy / Qoder memory files.

Registers external ACP (Agent Client Protocol) agents such as Codex, Claude Code and Gemini CLI as DSH model providers: maps each agent's thought_level options to the reasoning-effort selector, forwards images when the agent advertises promptCapabilities.image, and routes permission requests to DSH's approval dialog; ships an ACP Agents settings page that imports Zed agent_servers JSON and discovers models.

Five task-state reminders for DeepSeek Harness (completion, approval, question, block, error) with four synthesized browser sound presets, optional question text in the notification, an optional native Windows and WSL toast channel that bypasses Focus Assist, and a terminal-BEL fallback when no browser is ready.

Sounds and notifications when a task completes or waits for your approval or answer; notification sounds are configurable in the settings page (synth styles or your own audio file), with built-in cat hachimi sounds, just for fun. An optional Windows patch adds a taskbar digit, flashing and native toasts.

Control pnpm build-script approval across DSH profiles from Add Plugin, and repair same-Git-URL updates on DSH 0.2.0-rc.2.

Windows toast and a chime whenever a conversation task stops: completed, waiting on your approval or answer, or failed. Clicking the toast reopens that session at your last question, and in DSH Desktop it also raises the window.

Stages exact DSH tool calls without dispatch, presents complete canonical arguments in a durable Batch Review Inbox, invalidates approvals after edits or restarts, and commits only a matching SHA-256 digest plus single-use nonce through the normal DSH tool pipeline.

Adds an Explain button to the approval card: one model call returns exactly three lines reading the pending operation, covering what it does, which files or system state it reads, writes, modifies or executes, and a risky/attention/safe verdict with a one-sentence justification. It also renders the detail area for `write` and `edit` calls, which the shipped renderer leaves blank because it only reads a `command` field.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

Task monitor plus remote chat for DeepSeek Harness. Read sessions, background jobs, subagents, goal rounds, workflows and pending approvals from a phone-friendly page, and talk to any session from it: streamed replies, tool-call progress, stop at any time, switch sessions and models. Also ships a GUI sidebar panel.

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

Top-right status plate for six session states (complete, error, approval, question, unopenable, subagent), plus an OS notification when you are away.

Turns the MacBook keyboard Caps Lock light into an agent status light: on while the agent works, flashing when it waits for your approval or answer, off when idle.

Forwards an unattended DeepSeek Harness run's tool-call approvals and ask_user_question prompts to Feishu cards on your phone. The desktop GUI answers first — a card is only sent after `delaySeconds` (120 by default) with no answer there — and a phone approval grants `allowed-once`, so no authority accumulates on the phone. One outbound WebSocket long connection to Feishu: no public IP, domain, tunnel or relay.

Mind-map project planning with blocking drift protection: plans, modules and tasks as a dependency DAG with topological execution order, an agent position marker, a human approval gate on every board edit, git cross-checks, and evidence-gated task completion.

Voice or sound cue when a turn finishes and a failure cue when a tool call or turn errors; user aborts stay silent and subagent sessions are skipped by default. Three modes: voice (Volcengine TTS with cloned or preset voices, fingerprint reuse so unchanged text is not re-synthesised), effects (20 built-in sounds assignable to done, fail and approval, with per-row preview and no API key; the approval slot has no automatic trigger, so it plays only manually) and off. Plays through winmm without touching system volume. Windows only. Adapts DSH kernel 0.2.2-rc.1.

Zero-credential Outlook automation: 13 tools that drive the local desktop Outlook client via COM — search/read mail, drafts, reply/forward, calendar, address book, rooms, free/busy — plus a sidebar new-mail badge. No Graph API registration, no SMTP passwords; anything that leaves the machine passes a three-layer human approval gate.

A desktop pet in the DSH web GUI: floating, draggable sprite pet that animates with agent activity (thinking, idle, error, done, awaiting approval), with a settings page for size, switching, gallery search and one-click pet install. Ships 4 bundled Hunter x Hunter starter pets.

Split-screen workspace for the DeepSeek Harness web GUI - chat with several agents side by side in panes that look and behave exactly like the stock conversation: drag-to-split, live sessions with queued messages and in-pane ask_user/approval cards, per-pane view tabs (Chat/Trajectory/plugin views), a compact TUI composer mode (Alt+T) and pane-focus shortcuts. Requires DSH 0.1.5+.