Plugins

Tarot readings with a dealt card table, a reading tool, and a reviewable history.

A model-driven desktop pet, derived from PC2005-cloud/dsh-pet (MIT): an always-on-top companion that follows your agent sessions, races the Web UI to answer approvals and questions, keeps a per-pet affection ledger, speaks through pet_say/pet_do tools or an autonomous inner voice, and can read those lines aloud through BreezeBlue TTS with your own BreezeBlue API key. It uses its own /whale598 route and ~/.dsh/whale598 data directory, so it is a separate pet from dsh-pet rather than a replacement for it.

Run shell commands on the host instead of inside DSH, triggered by exact-match QQ messages through NapCat, and DM the result; requires EviMing/dsh-napcat-tools. plus Python 3.10+ for napcat_api.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Read-only diagnostic that reports which leg of the DSH → bridge → OneBot → QQ chain is broken — process, port, login, preset or recent wake failures — and prints the fix for each failed check. Runs as `node check.mjs` (read-only by default; the optional `--fix` only aligns the bridge baseUrl and starts a stopped bridge), or installs as a `chain_check` tool.

Grades free physical and commit memory and refuses heavy tools (shell, workflow, subagent) before the machine thrashes. A reserve you set on the panel is held back from heavy tools so light calls still have room. Also shows in the composer how much of the machine dsh itself is using, including whole-machine CPU.

Unity 2022.3 editor control for the agent: 20 tools that read the scene hierarchy, create and edit GameObjects, components and serialized properties, drive Play mode, capture screenshots, evaluate C# inside the editor and start player builds.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Per-turn tool-call step budget for Agent Teams teammates, shipped together with the team-dev and team-boot skills.

Adds an UpdateNotify tool and a live progress panel docked above the composer in the DSH Web UI, so the model can narrate what it just did, found, or is waiting on while a turn runs.

macOS notch panel for DeepSeek Harness: running sessions and pending approvals sit above every window, approvals are decided in place, and clicking a row opens that conversation in the desktop app. Requires macOS 14+ and Xcode Command Line Tools.

Plan-native multi-agent workflow for DeepSeek Harness: plan directs, work coordinates, code writes, and review audits read-only. Ordinary tasks need no authorization card or budget form. Includes 14 chain_* tools for explicitly authorized controlled rounds, with a frozen T0 baseline, layered evidence, and blocking close gates. Provides per-role model settings. Requires the sibling l1-presets bundle. For new installs, Weihao654/dsh-workflow#role-chain provides this runtime and the four presets in a single bundle. Do not enable role-chain alongside either legacy l1-presets or l2-protocol.

Four agent presets for the default plan-native workflow in DeepSeek Harness: plan plans and delegates, work coordinates execution, code owns implementation changes, and review performs independent read-only audits. Each role has a defined tool-permission matrix. Works with the sibling l2-protocol bundle for opt-in controlled rounds. For new installs, Weihao654/dsh-workflow#role-chain provides these four presets and the controlled-round runtime in a single bundle. Do not enable role-chain alongside either legacy l1-presets or l2-protocol.

Travel expense reconciliation: ingest orders, invoices and card lines, deduplicate, run the three-way match and a read-only policy check, then export — 5 `travel.*` tools.

Legal request intake: read requests out of EML, deduplicate threads and export the intake ledger — 2 `legal.*` tools.

Chinese e-invoice (OFD/XML) inbox: ingest, parse, deduplicate, queue for review, record receipts and archive locally — 10 `invoice.*` tools, nothing uploaded.

Bank statement reconciliation: ingest CAMT.053 and MT940, match them against ledger entries and export the workpaper — 6 `bankrec.*` tools.

Accounts-payable three-way match: import invoices, purchase orders and goods receipts, apply the tolerance policy and export the exception workpaper — 4 `ap.*` tools.

Runs an approved OpenSpec change to completion while the model stays a mechanical forwarder: a bundled Python CLI computes the ticket DAG frontier, claims tasks atomically, prepares one git worktree per assignment, and returns exact actions. The session delegates each action with the DSH subagent tool and reconciles the completion notice against a hash-bound receipt produced by re-running verification commands on a clean, advanced HEAD, so free-text "done" never counts. Runtime scope changes are plain tasks.md edits. Liveness is observable, not guessed: status returns a relay block (elapsed and lease budget, receipt presence, heartbeat and activity age, a suggested action); abandoning a plausibly-still-working attempt is refused with the judgment data unless --force; a late sealed receipt is revived by adopt after full re-verification instead of rebuilding the ticket; dispatched subagents refresh a progress heartbeat outside the worktree. Requires Python 3.10+ on PATH and a git project that uses OpenSpec.

An Orchestrate tab in dsh-better-sidebar and 14 orch_* tools to spawn, prompt, fork and cancel agent chats, run command, scrape, http and agent tasks on local, ssh or remote runners, show provider status cards, and serve a secret-protected machine API. Requires DSH >= 0.1.1-rc.1, Node >= 22.5, the web profile and dsh-better-sidebar.

Adds an ARIS agent preset that loads the 84 ARIS research-workflow skills and runs their reviewer as an in-harness subagent from a different model family than the session model. Other presets are unchanged. A fork of wanshuiyin/Auto-claude-code-research-in-sleep's dsh-aris branch: install it instead of the upstream dsh-aris plugin, not alongside it - both register the mcp__codex__codex reviewer tools and the same ARIS skills.

Replaces the full skill catalog with keyword-based discovery, per-skill enable/disable switches, and system-prompt section controls. Disabled skills are refused by the skill tool, and their slash-command invocations are blocked at pre-step.

DeepSeek Harness tools and a Skill for md-report/1: validate and render Markdown plus declared SQLite/CSV datasets into one offline interactive HTML report or dashboard, with AntV G2 charts (ECharts fallback) and chart/table data and source-SQL views.