Plugins

A dockable IDE workbench for the DSH web UI: a GPU-accelerated terminal (restty renderer over a Rust PTY), a CodeMirror editor, a file explorer, notes, a sandboxed browser, and ripgrep content search.

Unreal Engine .uasset inspection (resolve/registry/load) and restricted Blueprint node editing through built-in UE Python.

File-browser web app for DSH: React frontend and REST API served by the host webserver, a /dsh-agfs command that opens at the current session workspace, and a browse_files model tool.

Floating restart button for the DSH web GUI: restarts the dsh process in place with a full-screen overlay and auto-reloads the page; no launcher script required, works on Windows/macOS/Linux.

Local, per-session LIFO prompt stash for temporarily setting aside unfinished composer text and safely restoring it later.

Drives the installed AutoCAD over COM and exposes it to the agent as 18 mcp__autocad__ tools: connect and status, cancel the current command, list registered ProgIDs, list or create documents, save, create and list layers, draw lines, circles, rectangles, polylines, arcs and text, list entities, zoom to extents, and pass any native command through. A sidebar panel owns the Python bridge process — start, stop, restart, dependency bootstrap, live logs and crash recovery — and resolves every path at runtime, so the same bundle serves both the web app and the desktop app. Windows only, Python 3.10-3.12, AutoCAD 2022-2024 documented (2024 is the default; other versions require setting CAD_PROG_ID to the matching ProgID).

Keep this session working until a wall-clock deadline: one button in the composer picks 22:30, +90m, or tomorrow 07:00, and after every finished turn the plugin posts one continuation message so the session keeps working; nothing is posted once the deadline passes. Stops early on a round cap (400), three consecutive failed turns, or four consecutive rounds that called no tool; a manual stop button is always there. The last part of the watch switches to wrap-up wording, sized to at most half the remaining time so a short watch is not entirely wrap-up. Armings persist to $DSH_HOME/nightwatch.json via an atomic write and are re-adopted after a restart. No slash command is registered by default (enableCommand turns one on); the continuation message carries source.kind cordis-host-runner, not user.

Loop guard for DeepSeek Harness: detects and stops repeated output mid-stream, prunes and compacts context, then automatically resumes the task without a restart.

Restart and quit controls for the DSH desktop GUI, in two independently switchable places: a draggable floating button that snaps to a screen edge and collapses into a thin strip, and a power button in the sidebar footer.

One plugin, two agent presets ported from Bemly/opencode: nsfw (adult-fiction executor) and unrestricted (security-research executor).

Restart the Harness itself and come back: a dedicated restart_dsh tool hands the session over to the next process, which resumes it, replays the pending instruction and wakes the subagents again.

A fork of PC2005-cloud/dsh-pet adding Claude-themed whale-girl pets in standing and chin-rest poses, randomized activity chains, and laptop work transitions. Replaces the original plugin; do not install both together.

Conversation lock for the DeepSeek Harness sidebar: every conversation row gets a lock button, and a locked conversation blurs only the conversation area behind a password box while the sidebar stays usable. Re-locks on window blur, tab hide, page hide, or whenever the open conversation changes, and never pauses a running turn - the veil reports that background work continues. The password digest, lock flags, and preferences live in <DSH_HOME>/session-lock/state.json behind two same-origin routes guarded by a custom header, so clearing the page localStorage unlocks nothing; PBKDF2-SHA256 with a random salt, and a 30-second input lockout after five wrong attempts. Recovery is opt-in per machine: a Windows login password (enabled only after a real .NET PrincipalContext ValidateCredentials check against the local machine, so Microsoft accounts and passwordless machines keep it off) and a cooling period chosen while creating or changing the password (1/6/24/72/168 hours; expiry clears the password and releases every lock, and the correct password cancels the countdown). A settings section covers status, changing the password, lock new conversations, hiding locked titles, a three-position archive-restore policy (all / locked only / off, switching needs the password), lock everything, and unlock everything. Dialogs use the native dialog top layer, so a dialog opened from Settings is never covered by it. Requires DSH 0.2.0-rc.1 or newer; no build step.

Local development facts for Harness: environment and runtime-health probes, git status/diff/log/commit, write-time snapshots with version-by-version restore, and project checks for Node, Python and Go.

Bilibili curation floating panel for DSH: learns your interests on a probability schedule and decays them by half-life, picks videos inside a token budget derived from a daily money cap, and mentions you only when a fit score passes a threshold. Comments are off by default; once enabled they run in draft-and-confirm or self-checked auto mode under a daily quota, with a hard no-comment rule for political, government and frontier-science topics, and comment text is scrubbed for account identifiers before it can be posted. It signs in through your own Bilibili account cookies; a separate posting account is recommended.

Long-conversation memory for DeepSeek Harness (DSH): keeps settled decisions, user corrections and exact numbers, with their conditions and sources, available across compaction and restarts in 100-1000+ turn sessions; one small budgeted evidence block per model step, with enabled skill rules re-applied in the same block.

Rewrites the composer draft into a tighter prompt in one click and restores the exact original in another, running on Harness's own models by default or any OpenAI-compatible endpoint, with an editable polishing prompt.

Adds a button to the composer that restates your draft, then asks a few questions with clickable options — every question offers an "I don't know, you decide" escape — and only then rewrites the draft into a request an agent can start on. The whole flow can be finished without typing, and it never sends for you.

Sends file deletions to the Windows Recycle Bin, lists and restores them by id, and blocks permanent shell deletes.

Windows only: a night-and-moon themed floating button (a sleepy DeepSeek-chan whale mascot, awake/sleeping artwork) in the bottom-right corner arms the plugin — click it to power the machine off once every root Agent session has gone idle, and click it again to disarm. The button is draggable (position remembered in localStorage), automatically dodges other plugins' corner popups, and survives the frontend re-rendering it away. When the batch finishes a 60 s cancellable countdown starts (configurable 10–600 s) with the remaining seconds on the button and a matching banner: clicking Cancel runs shutdown /a and disarms the mode, and any new session starting during the countdown aborts it. A right-click menu on the button switches the shutdown condition between only-on-success and shutdown-regardless, persisted across restarts in $DSH_HOME/deepseek-chan-sleep-shutdown.json. Zero runtime dependencies.

Three things for DSH plugin development: reload the plugins whose files changed, restart the client when a reload cannot apply a change, and let the model trigger a reload itself. Reload uses DSH's own path, so untouched plugins keep running. Restart starts outside the client, so it completes even when the client is what gets replaced, and refuses while a session or job runs. Lightweight: no parameters, no added context, buttons off by default.

Per-conversation backup for DSH: incremental session mirroring, fuzzy restore (preview then confirm), and rule-based cleanup with a 7-day recycle bin.

Adds backup-then-delete and delete-only actions to the DSH session menu: the session directory, its projection cache and a metadata snapshot are copied to a local archive folder and checked file by file, then the originals are deleted to free disk space; subagent sessions it spawned are handled in the same run, and each backup folder keeps a RESTORE.txt with recovery steps.

One prompt row carrying two independently switchable halves. Identity: a fixed self-reference restated at the head, at the tail after every other section, and in the runtime snapshot, with an instruction to treat contradicting claims as stale cache. Discipline: ten rules, each paired with the condition a reviewer checks — external evidence before claiming done, change face equal to review face, correctness from named call points rather than timing, one source of truth, extension through the registered seam, runtime validation only at real boundaries, loud failure instead of silent skips, orthogonal outcomes reported separately, tests through the delivered entry point, and answer shape (conclusion first, length set by the change).