Plugins

Tools over the local jetformat CLI: convert DOCX, XLSX, and PPTX to PDF, extract text, validate files, and inspect, merge, extract pages from, or render PDFs. Requires the jetformat CLI.

Browser automation for DSH: the agent fills in forms, scrapes lists and works across tabs in real pages, using the logins you already have. It drives its own visible window on your desktop — minimise it and it keeps working without stealing focus — and a sign-in, CAPTCHA or native dialog stops the run and hands the page back to you: it never confirms on your behalf. Login state persists (own profile plus session-cookie re-injection). 23 Playwright tools (20 always on, 3 gated and off by default), with a URL allowlist, dialog suspension and a CDP method allowlist that are mechanism-level and pinned by tests.

Connect Notion from the GUI with OAuth 2.0 + PKCE — official Notion MCP, no integration token.

让 DeepSeek Harness 以 WSL 子系统作为会话的执行环境：shell、文件读写与命令执行均在子系统内完成，目录选择器与 GUI 终端同样定位到子系统路径，并通过子系统内的 bubblewrap 对命令进行沙箱隔离

Prompt library stored in the plugin config, with a Settings page and a composer picker: the ticked prompts are injected into every model step of that session, and a subagent inherits the selection of its nearest ancestor session.

Image and video wallpapers for the DSH web workspace: auto-detected GIF/APNG/animated WebP/PNG/JPEG/MP4/WebM backgrounds with blur, brightness and dimming, tint-following UI, per-component transparency, and one-click preset wallpapers.

Read-only Skill inspector for DeepSeek Harness. It shows which Skills a conversation actually loaded — from observed loading evidence only — and which Skills the current environment can discover, and gives each Skill a detail page whose left column switches between the framework, the evidence, validation, evaluation, step evidence, run logic, the before/after of a modification when there is one, the definition facts and the raw SKILL.md. Declaration and run stay apart: the body is split into structure, declared workflow and progressive disclosure, the run logic is read from local receipts, and every declared step carries its own evidence — no observed evidence is reported as exactly that, not as executed or not executed, and the run's instruction hash sits beside the current definition as match, mismatch or unavailable. The evidence view gives each subject one of three states (declared, observed, unavailable), walks definition → load → use → outcome, names what each stage cannot reach, declines to attribute an outcome to the Skill, and can copy the snapshot out as byte-stable JSON. Validation checks the Agent Skills open standard and the platform profiles separately, each finding on a rule id and labelled standard compliance or platform compatibility. Evaluation keeps repeatable cases with the conditions each run was recorded under and the four stages of runtime evidence, comparing two runs of one case item by item without scoring them. The trigger boundary keeps should-trigger and should-not-trigger prompts, has you run them in a real new session, then records what was observed — whether a load record appeared and whether it was model-invoked or user-explicit; a typed /name is not a natural trigger, and an absent load record is reported as not observed, not as not triggered. The same projections are exposed to the agent as a read-only skill_review tool, which returns a structured review packet and says what it omitted when the packet will not fit whole. The inspector, the evidence chain and these reviews are computed on this machine from the definition and the session receipts; the Chinese reading version sends the body through the host's model when you ask for it, keeping code fences, paths and frontmatter verbatim and storing the result on this machine. A Skill can also be cloned into a local copy. It does not write back to the source Skill and does not run its scripts.

Windows desktop control exposed as native DSH tools - whole-screen and single-window capture (the window one goes through PrintWindow, so a covered window still captures), click, drag, typing, keyboard shortcuts, scrolling, window management, pixel and window polling, and UIA queries that can invoke a control or read its value instead of clicking coordinates. 13 tools over a PowerShell 7 child process; no MCP server, no resident process, no API key.

Windows 2000 desktop skin for the DSH Web GUI: metric-accurate grey chrome, two-tone gradient title bars, 1px bevels, square corners, 16px scrollbars, and the pixel font it renders with served by its own host route.

Niubash-only shell executor and Bash-dialect teaching for DeepSeek Harness (dsh 0.2.0-rc.2, and the 0.1.7-rc.x line it shares its shell seam with): every ctx.shell execution runs as `niu -c`, PowerShell/cmd/WSL/nu handoffs are refused, PowerShell habits a

DeepSeek Harness 输入框的下一句建议：助手回复完，空输入框里出现一句灰色建议，按 Tab 填入。Prompt suggestions for the DSH composer.

Select text in the DSH Web GUI and ask about it in place (floating button, or the Alt+Q shortcut): an independent subagent that inherits no parent context answers, streaming into a side card hosted by the native right sidebar, dsh-better-sidebar, or a built-in overlay — and the question can be routed to the main conversation instead.

Real-time disaster alerts for DeepSeek Harness: Japan earthquakes (P2PQuake) and JMA EEW, tsunami and weather telegrams, global earthquakes (EMSC/USGS) and NOAA tsunamis, mainland China earthquakes (CENC via Wolfx) plus nmc.cn rainstorm and geological-hazard warnings, and US/Canadian NWS and ECCC flood, rainfall and storm-surge warnings — matched against your watch regions and thresholds.

Host-level proactive wake-ups for DeepSeek Harness: let the model schedule its own alarms (once / interval / cron with random jitter), wake cold sessions on time, gate model-initiated follow-ups with quiet hours and a daily budget, and reclaim silent wake

DSV4.1 reasoning support with multimodal context and bounded artifact acceptance for DeepSeek Harness

Windows toast and a chime whenever a conversation task stops: completed, waiting on your approval or answer, or failed. Clicking the toast reopens that session at your last question, and in DSH Desktop it also raises the window.

Local TXT reader in a right-sidebar tab plus a spoiler-safe AI reading companion: the model only sees what you have already read — the current chapter, the tail of the previous chapter, and a per-book background file it grows as you go. Excerpts, thoughts and the companion replies become structured Markdown notes exportable to Obsidian; raw text unlocks only for a book you mark as finished.

Fireworks celebration engine: floats fireworks above the chat window while the agent codes — welcome show, per-turn salutes, tool sparks, milestone celebrations, a finish finale and a dud on failure; each event type has its own fireworks card group with random variants, and token usage decides firework size, height and splendour.

Real-time inspector of the files the agent reads and edits, with a file tree, in the DeepSeek Harness right sidebar: M/A/R badges, side-by-side diffs and live agent activity tracking.

Ultra-lean daily coding agent preset for DeepSeek Harness (dsh) that strips heavy orchestration for fast, direct tool execution.

The built-in web_search bills a full model turn against DeepSeek's own endpoint; this runs it on an OpenRouter-compatible gateway instead, so search is billed where your chat already is, at the model and price you pick.

Allowlisted SSH into Unix/AIX/macOS from DeepSeek Harness (no shell; read-only by default), with remote_ssh_probe OS-aware suite.

A chemistry workbench panel in the DSH web UI. Draw structures on a Ketcher canvas (a script downloads the build; it renders locally in the browser with no backend), then compute on the current molecule with RDKit without calling a model — formula, molecular weight, exact mass, logP, TPSA, hydrogen-bond donors and acceptors, ring counts, Fsp3, stereocentres, Lipinski and Veber rule-by-rule checks, QED, PAINS/BRENK structural alerts and the Murcko scaffold, plus SMARTS substructure matching, fingerprint similarity, format conversion, standardisation and batch clean-up. A retrosynthesis tab talks to a pluggable backend (Retro* by default) over a single JSON-in/JSON-out process, and states what is missing when the backend is not installed instead of inventing a route. The calculations run in this repository's Python package (rdkit), which is installed with pip separately.

Registers the dsh-mol stdio MCP server, built on RDKit with no network access, into a DSH profile. It exposes 12 tools: three-level SMILES validation with human-readable diagnostics and character positions, molecular properties, drug-likeness and structural alerts, structure rendering to PNG/SVG, multi-molecule grids, format conversion (SMILES, InChI, InChIKey, MOL, SDF, formula), standardisation with a per-step change log, deduplication, SMARTS substructure matching, fingerprint similarity, and batch clean-up that reports every rejected row. The patch only registers the server; the tools live in this repository's Python package and must be installed first — the README gives a `pip install` route and a from-source route, and until the package is on PyPI the from-source one is what works.