Plugins

Turn-level file undo for tool writes and edits: each file is snapshotted before the write lands, and the model (an undo tool), the human (a /undo command) or a button in the assistant message action row can roll back every file a turn changed. Snapshots are written in-process rather than by shelling out, so it needs no extra sandbox permission in sessions confined to workspace-write.

Folder time machine for DeepSeek Harness: snapshot any folder, browse its timeline, roll back with one click — Git-like history without needing Git, for folders that never had a repo (game saves, app config dirs, loose documents). Snapshots are content-addressed and deduplicated, and unchanged files are not re-hashed. Automatic snapshots come in two modes: realtime (fs.watch — one version ~8s after the last change, so a save-all or a build counts once) and timed (checks every N minutes, stores only when something actually changed; identical content never adds an empty version). Empty folders are recorded and recreated on restore. Every restore takes a safety snapshot first, so a rollback is itself undoable, and exact-mode cleanup only removes files and empty folders — a non-empty folder is never deleted. Ships a folder_timemachine model tool (status/history/diff need no approval; writes ask first) plus a floating panel with the timeline, one-click restore and mode switching. Pure JS, zero runtime dependencies, 110 tests included.

Injects your existing markdown documents (notes, rules, knowledge-base files) into every dsh session's system prompt as read-only memory — list file or directory paths in `files`; no database, no service, no write path; UTF-8 byte-budgeted truncation with line-boundary fallback, total budget, YAML front-matter stripping, and freshness timestamps.

Records session snapshots and supports rollback to previous states.

Node-based GLSL workbench: wire a shader graph on a canvas and preview it live, compile it to Shadertoy-compatible GLSL with multi-pass buffers (BufferA–D), hot-reload as you edit, cross-compile to HLSL / MSL / SPIR-V, and keep projects, materials, snapshots and resources (images, audio, lyrics) in a local workspace. Ships 57 built-in nodes, 8 bundled examples and 11 agent tools. No runtime dependencies.

A small pet in the corner of the interface that reads the real event stream instead of guessing: it drifts when idle, speeds up while the agent is thinking, draws a flowing line per running tool call, turns red and shakes with the error summary on a failure, and celebrates a turn that ran longer than ten seconds. The same widget is the at-a-glance busy and error indicator, so there is no spinner to stare at. The host half folds real harness events into a snapshot and the client half only draws it; it performs no content recognition, and it positions itself away from the composer so it never sits over what you are typing.

Plugin updater for DeepSeek Harness that delegates every version decision to the dsh CLI, so the pnpm release-age policy still decides what is eligible; it snapshots before applying, can roll back, keeps a lock list, and can check or auto-apply on a schedule the user turns on.

A read-only Cordis Inspect provider that lets an agent see the interface it is driving: outline() reports which UI regions the running shell actually rendered, with occupancy, geometry and current or past failure state; snapshot() returns one region's rendered node tree (tag, role, aria-label, own text, geometry, computed styles) addressed by slot key or CSS selector; failures() keeps a history of regions that failed to render and whether they recovered. Regions are addressed by the anchor the shell already writes for every slot, so it needs no region list and covers regions added later or contributed by other plugins. No UI, no tools, no dependencies, no network access.

API regression and acceptance workbench: snapshot the responses of the endpoints you register before the agent edits the backend, rerun them all after the edit, and review a structured field-level diff (status codes, added and removed fields, numeric old → new values with the delta) beside the captured source diff, accepting each endpoint one by one before exporting a Markdown or single-file HTML report.

Task-list staleness guard for DeepSeek Harness: watches the session event stream and counts tool calls since the last todo_write; past a configurable threshold it appends one short notice before the next step, quoting the current list, so the model writes it back to the real progress instead of leaving a stale snapshot on screen. Pure prompt injection, no blocking and no data mutation.

Drives a Chromium browser you are already running — Chrome, Edge, Brave, Vivaldi, Opera, Chromium, Arc or Thorium — over one long-lived CDP connection, so the remote-debugging approval is asked once instead of per command. Commands for tabs, navigation, JS evaluation, DOM snapshots, clicks, typing, screenshots and CSS/DOM/pixel assertions go over a loopback HTTP route that the agent calls with the shell tool it already has, so no new tools are registered, and the plugin registers its own usage skill with no runtime dependencies.

Scene-awareness probe for DSH on macOS: a privacy-first, pull-model `look` tool that reads the frontmost non-self window (app info, AX title/selection, gated local OCR), plus a summon-hotkey snapshot captured the instant you press.

Zero-intervention permission gate for DeepSeek Harness (DSH) agents on macOS — active on install. Writes that can be undone via a local git baseline or macOS Time Machine are auto-approved and automatically snapshotted; network access, package installs, process/system management, and reads of sensitive credential paths are blocked; every decision is audited — the audit log keeps everything by default, with optional automatic cleanup of the oldest records.

Browse the awesome-dsh-plugin catalog from a dedicated page opened through the DSH left sidebar. Search, filter by category or installed state, and sort by stars, downloads, name or date added. Three tabs show all, installed and updatable plugins, with a separate count when update status cannot be determined. Install into the active Web or Desktop profile using the package manager supplied by DSH, while preserving disabled bundles. Reload the profile through HMR when available, with restart guidance otherwise. Installed state is isolated per profile, installation and reload requests are mutually exclusive, and pagination keeps the submitted search. Expired catalog and installed-state snapshots are served immediately while refreshing in the background. Unversioned npm installs resolve the official registry latest tag to an exact version, and confirm the installed version before reporting success. Registry updates install the exact catalog version; Git updates force source resolution. The catalog is cached locally for one hour, with mirror, CDN and npm fallbacks.

ChatGPT-style side chat for the DSH Web GUI: ask small questions about the current topic in a floating side panel, answered by an independent lightweight session over the official /api RPC — the main conversation is never touched. Streaming text, collapsible reasoning, tool chips, stop button, agent-preset selector, and an automatic context snapshot from the visible main chat.

Read-only MCP server over the DSH plugin-certification registry, exposing a plugin certification grade, its snapshot and the five-dimension evidence behind it.

Turn-level workspace undo for Git worktrees: every agent turn gets a private snapshot, /undo previews a red/green diff card that is confirmed in place, files changed after the turn are refused with a conflict diff unless --force or --skip-conflicts is passed, and HEAD, index, stash and commit history of the user repository are never written.

Browser automation for DeepSeek Harness: agent-driven real-browser control (managed Chrome with an isolated persistent profile, or attach to your daily Chrome over CDP) with snapshot, click, fill and page-reading tools; records manual operation flows and replays them with variable slots to create test data on demand; ships 27 browser_* tools plus a Settings panel.

Rolling, integrity-verified backups of each session at turn boundaries: verifies the log still loads before promoting a snapshot, never overwrites the last good one when a turn ends corrupt, and restores in one command even when dsh will not boot.

Dependency graph inspector for DeepSeek Harness: snapshots the live Cordis plugin/service topology into a zoomable browser panel with graph-theory metrics, plus a graph.render tool for the model.

Fork DeepSeek Harness sessions together with their historical workspace state.

Hands DSH reset requests to an external ops agent via a versioned JSON protocol: preflight snapshot, pre-restart maturity gate (no pending approvals, free disk, cooldown), restart, health check, and interrupted-work recovery, with the result delivered back to the requesting session.

dsh port of the shared handoff kit: handoff and task-id-bootstrap skills plus host-side automation — baseline state injection, per-turn snapshots with an Auto Log trail, task=<id> routing, continuation re-injection, a compaction guard with clear-required alerts, and read-only subagent handling — all writing the same .agents/state/ as the Codex, Claude, and pi editions for one-repo multi-agent handoff.