Plugins

VSCode-style uncommitted-changes sidebar docked to the right of the DSH web conversation page: staged / unstaged / untracked file groups, status badges, per-file +/− line counts, click-to-expand diff, rename as old → new, untracked content preview, and open with the system default application.

Remote-SSH-style workspaces: turn an SSH host and a remote directory into a native DSH workspace; the agent operates the remote filesystem directly via 12 rw_* tools (SFTP/exec), with workspace-confined paths and known_hosts verification.

A pixel companion living in the chat area: hatches from an egg into one of three sprites or an LLM-drawn custom one from a text description, platform-jumps over message bubbles on its own, WASD controllable, chats in character through the models you already configured, and carries a nurture system (mood/power/health, levels, shop) driven by real token usage.

Runs the agent's filesystem, bash and PTY terminals inside a Docker container by providing the `ctx.fs` and `ctx.subprocess` seams, so cwd, environment and background processes survive a harness restart.

Registers the commercial-ui-ux skill for DSH: task-aware commercial UI/UX/GUI design, review, repair, and implementation (SaaS, dashboards, admin panels, forms, tables, design systems) with a reference-doc system and quality gates.

Achievement system for the DSH Web UI: gallery with category/rarity sorting, unlock toasts, sidebar trophy, composer dock, crossover achievements, and local persistence.

Model-driven /init command: the agent analyzes the current repo and generates/updates a high-signal AGENTS.md, with a persistent system-prompt reminder to keep it maintained.

Sound + popup when a task completes: a Web Audio chime, an in-page toast, and a system notification while the page is in the background (browser-only, cross-platform).

Adds persistent execution contracts, recursive work graphs, critical clarification, and evidence gates for long or underspecified Harness tasks.

In-chat preview for produced files: click a produced-file chip to render Markdown (server-side markdown-it + highlight.js), images, or plain text right in the conversation; system-app open and reveal-in-folder stay one click away.

Cross-device workspace backup, restore, and ecosystem update via the uagent-sync CLI.

全局系统提示词插件：中文思维链、内容保真、反八股，15 组规则全场景生效；规则文本可编辑，改完即生效

Per-model jailbreak armor: a Settings table arms model patterns with spells (25 spells: 20 across 11 model families, plus a model-agnostic armor, an upstream preferences file and three stackable persona layers), previews the exact injected block, and writes it into the armed model's system prompt only, leaving every other model untouched.

Local hardware monitor for DSH: a sidebar dashboard, a composer-dock CPU/memory/GPU/temperature widget, and a hardware_monitor_status tool backed by a local Python service installed separately from the repository root with install-dsh.ps1 (Windows, Python 3.10); installing only the DSH plugin leaves the panel and tool offline.

A simulated human-brain core for chat: global workspace, emotional appraisal, dual-system memory with nightly consolidation, and an experimental sensory interface; the QQ bridge needs a local snowluma client and is off by default.

SSH for DSH agents: run commands and move files over SSH while private keys stay inside the Host process. ssh2 transport with an optional system-OpenSSH backend.

Persona manager for DeepSeek Harness: create, edit, and freely switch multiple system personas, with a global default and per-session overrides. · DSH 人设管理插件：添加并保存人设词，自由切换多人设，支持全局默认与会话级覆盖。

SSH terminal, SFTP file manager and port forwarding (-L/-R/-D) in the DSH right sidebar, with jump-host chains and remembered passwords kept in the operating system credential store.

Three-position toggle (off / this turn / always-on) for an "unlimited mode" that injects a "do not conserve tokens" instruction into the system prompt; the "this turn" mode reverts automatically on the kernel agent/status idle event.

QQ-style alert sounds for DSH: the QQ message tone when a turn finishes and the QQ system tone when approval or an answer is needed, reading your local QQ install on Windows and falling back to built-in tones.

Four Chinese agent presets in one plugin, Standard, PTC, Minimal and Creation (standard-zh, ptc-zh, minimal-zh, cordis-zh), each keeping the matching built-in tool set; Standard, PTC and Creation translate known host instructions into Chinese while tool IDs, schemas and SDK declarations stay unchanged; a settings page enables each mode and edits its name, description and system prompt.

Layered system-prompt profiles — global, per-workspace and per-session entries injected in order — where individual builtin sections and runtime contexts can be disabled or overridden, with a line-level diff of what an override changed; each entry carries a subagent scope that targets the main agent only, subagents only, or both; assembly snapshots record what each turn actually received, subagents included. Managed from a Web panel and a `prompt_manager` tool.

Cross-session memory and a per-workspace knowledge base in one plugin. Memories are plain JSONL under ~/.dsh/memory by default; each session starts with the relevant ones already in the system prompt and writes one back when it ends. A read-only kb/ folder per workspace plus one global folder is searched with results cited down to file lines. Eleven tools under a scribe_ prefix (seven scribe_memory_*, four scribe_kb_*), a /scribe slash command, and a settings page with overview, memory, knowledge base and migration tabs. Cloud backends (Bailian memory library, ChromaDB, cloud-primary with local mirror) are opt-in; moving data between them requires an explicit approval and is logged so it can be rolled back.

Turns every file artifact the agent names in chat into a clickable entry — and refuses to paint one that does not resolve. Hover resolves asynchronously, and only a file that really exists becomes a hand pointer with a dashed blue outline (30 s TTL cache, so repeated hovers cost nothing); confirmed non-artifacts stay plain text and the right-click falls through to the host menu untouched. Left click reveals the file in Explorer already selected (Shell.Application Explore plus SelectItem with SVSI_ENSUREVISIBLE, so the pane scrolls to it; explorer.exe /select is deliberately not used because it silently drops the selection when an instance is already running). Right click offers seven actions: preview in DSH's built-in sidebar, open with the default app, reveal in Explorer, save as, copy the file itself to the clipboard, copy the absolute path, or insert the path into the composer. Ctrl or Shift with left click opens with the default app, Alt with left click copies the path. Names resolve through the absolute path, the session workspace and every profile workspace, then a cached basename index built with a depth budget, shrinking from the left when a mention swallows leading words. The host half also keeps six system-prompt rules resident, so absolute paths stay in tool arguments while the body shows only file names, and every route is loopback-only.