Plugins

Minimal QQ-only IM bridge for DeepSeek Harness: bind one session to QQ, /new in a default workspace, relay only the final answer, and push from any session through the send_qq_message tool. Configured in Settings → QQ bot.

StartLux Decision: a cheap judgement layer for DeepSeek Harness — all nine decision points (tool authorization, model routing, delegation, compaction, turn continuation, retrieval, skill pick, session title, COT translation) are implemented and individual

Desktop notification and a short chime when a DeepSeek Harness session finishes or stops to wait for your answer.

反盲批 / Anti Blind Approval — DeepSeek Harness approval guard: review workspace-write escalation requests with the session model, then gate the Allow button on a strict JSON verdict.

SSH remote workspaces for the dsh web GUI, reusing the session sandbox mode and approval flow.

A cut-out whale-girl maid desktop pet in the corner; click her to see your DeepSeek account credit and this session's running state.

Adds chunked uploads with progress and resume, and native downloads of workspace files and the session log ZIP, to the DSH Web GUI, including sessions reached through a paired remote link.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectures the program needs (one or several), checks conflicts between them, teaches the session AI after repeated failures, and teaches the session AI after repeated failures; once you grant it review authority in its panel, it gates task completion until the review passes (without that authorization it only observes).

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

In-process crash guard: takes over the fatal-error handlers that would exit DSH, names the responsible plugin from the stack, and disables only that row in the home patch layer, leaving the profile and the provider config inside it untouched. The crash page offers retry, keep-disabled or uninstall, and opens a temporary safe-mode session when no culprit can be named (CLI and web launches only).

Paints a colored counter badge (green = unread completed sessions, orange = pending question or approval) on the DeepSeek Harness taskbar icon on Windows, and plays a chime when a session finishes. Fork of dthcle/dsh-badge-notify (MIT) with a completion chime and green/orange state colors; both draw the same taskbar badge, so the two cannot be enabled together.

Strikes a single short chime, raises the DSH window, floats a reminder card above the page and sends a system notification whenever the agent needs your approval or an answer. Sound and popup are two independent switches in the session header, remembered across reloads and restarts.

Windows-only: per-session auto-shutdown switch in the session header — once every armed session has no turn, job or subagent still running (by default every other live session must be idle too), a two-minute countdown starts and the machine powers off; clicking the countdown cancels it, and sessions without the switch never start one.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

To-do list panel for DeepSeek Harness: large task cards in collapsible sections, hour-precision due times, per-task reminder lead times, and DingTalk notifications through a group robot webhook or an enterprise-app work notice. Each task can bind to a workspace session and jump to it on click.

Manage subagents and Agent Teams teammates in DeepSeek Harness: stop running instances, then really remove them by retiring their catalog and roster records with seq-preserving log tombstones and moving their session directories to a recoverable trash; model tools, a conversation-header panel and an offline CLI.

Starts a BaseMind MCP server for each session's workspace and registers the code-intelligence tools it advertises, with no MCP row to configure. Requires BaseMind installed and on PATH (basemind serve); without it no tools are registered.

Windows x64 desktop tools for DeepSeek Harness to restore and foreground existing windows, observe screenshots and UI Automation elements, left-click, and type text or supported keys, with repeatable control sessions and physical Esc to stop.

Unity-MCP bridge for DSH: dormant from boot, /unity-mcp-tools connects the Unity editor MCP server (com.ivanmurzak.unity.mcp) and registers the tools currently enabled on the Unity side; ships a per-plugin-version command catalog plus /unity-mcp-install and /unity-mcp-check, and re-fetches tools/list itself after a tool-set change because DSH sessions never receive list_changed.

Per-session switches for which tools a DSH conversation may call, plus a guest mode that keeps file tools inside the workspace and turns off shell and subagents.

Five DSH utilities in one plugin: drive existing sessions over QQ (needs an OneBot 11 implementation such as NapCat running alongside), ask another session a question with a context guard, pause the running turn, restart DSH on Windows with optional auto-resume (via the install-restart.ps1 scheduled task), and inject peak-hour token discipline.

Turns archived sessions into durable memory instead of dead disk. Distils each archive into reusable skills, a fact ledger with ADD/UPDATE/NOOP decisions plus validUntil and supersededBy so stale facts retire instead of piling up, and topic clusters by single-linkage similarity. Also digests sessions that are still in progress through a read-only seq watermark, leaving the session log byte-for-byte untouched, and can self-check the growing memory to merge duplicate facts, retire stale ones and consolidate duplicate skills — measuring only unless you opt in, and never hard-deleting, only superseding.

Distills daily chats into an updatable character card and a cross-session emotion module that trains the persona.

Cross-session long-term memory for DeepSeek Harness: pinned rules injected every turn, the rest recalled by IDF-weighted keyword evidence, fact-key dedup, plain JSON storage, and a settings page to edit or delete entries.