Plugins

Reimplements the shut-down BSide: Olivia Lin letter API on loopback so the game client keeps sending and receiving letters: every incoming letter is delivered to one persistent DSH agent session, and the reply is written back to the local letter store.

Removes sandbox_permissions / justification arguments that cannot widen the call's current sandbox mode, so calls no longer fail with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "danger-full-access" mode'. GPT models tend to fill these optional fields on every call and pick workspace-write, which is narrower than danger-full-access. Runs in tools/pre-execute: compares the requested mode with the mode the session's sandbox policy resolves, and drops the fields when the request is the same or narrower (also drops a lone justification). Also understands the values GPT carries over from Codex's own shell tool: null, empty and use_default are treated as no request, and in a danger-full-access session any value (including require_escalated) is dropped because nothing is wider. Real widening requests, unknown modes and tools that do not advertise DSH's escalation schema are left to DSH core. Never widens permissions. Configurable tool list (default bash, pwsh, write, edit, run_code). Zero dependencies.

Blocks AI coding agents from editing files without evidence and from running unapproved high-risk commands, and tells quoted dangerous strings apart from commands actually being executed.

Reload a plugin or skill you just installed without restarting DSH. reload_plugin clears that plugin's own module cache, unloads the old instance and re-imports it, restoring the previous module if the new code throws; reload_skill forces skill directories to be re-discovered. Ships both as tools and as the /reload-plugin and /reload-skill commands.

Talk to DeepSeek Harness from Feishu / Lark. A chat maps to a DSH session, messages become turns and answers are pushed back as cards; questions, permission requests, model switches and conversation switches are interactive cards, and inbound files and images are downloaded into the workspace.

Pushes DSH session events to phone IM and lets you reply straight under that message, injecting the text back into the right session. Covers nine event kinds: task completion, execution error, execution blocked, manual abort, token limit reached, abnormal interruption, waiting for your answer, permission request, and waiting for plan confirmation. Channels are QQ single-chat bots and Feishu custom apps, both over WebSocket long connections — no public IP, domain or tunneling needed. Several bots can be configured at once, each subscribing to the sessions it cares about. Approvals and questions arrive with tappable buttons, and replies route home through three layers (button, quoted reply, explicit short-id prefix), falling back to the most recent intervention-needed notification and echoing which session it went to.

A /review command that hands the current change set to a reviewer subagent pinned to the model you choose, with one continuing reviewer session per chat.

Source Control panel in the DSH Web left rail: search, switch and create branches with ahead/behind counts, a topo-order commit graph, and a click-to-expand preview of any commit showing its files (A/M/D), insertions and deletions, message, author and timestamp. An always-on footer dock above Settings carries the branch dropdown and recent commits and follows the open session; fetch and fast-forward pull are one button, and a git_worktree agent tool creates, lists and removes worktrees.

A code review workflow that reviews uncommitted changes, changes against a base branch, a single commit, a GitHub pull request, or a file.

Gated four-stage video pipeline: brief, script, assets and compose, turning one sentence into a narrated explainer with ComfyUI workflows or image/video APIs and FFmpeg assembly.

Session-scoped research evidence ledger with sources, linked claims, open questions, and explicit user review; provides a tool, slash command, and conversation panel, with selected-claim Markdown export that omits excerpts, review notes, and local paths by default; does not fetch sources or verify their truth.

Session-scoped delivery receipts for local artifacts: compare current file hashes with a recorded baseline, keep agent claims separate from explicit user acceptance, flag changed or unavailable files, and export a Markdown receipt through a tool, slash command, and conversation panel.

Ports jcode's auto-poke so an idle agent keeps working while its session still has incomplete todos.

Speaker button left of the model selector in the composer tool row — one click scrolls to the start of your newest question, marks it with a blinking caret and reads from there through the newest agent reply (dsh-tts, browser voice as fallback); press-and-hold the icon and then click anywhere on the page to pick another reading start position; press-and-drag-up opens a vertical mixer for in-page media volume and system output volume.

Registers a Tavily search provider for the ctx.web seam and switches web_search to it, with a comma-separated apiKey list that rotates on 401/403/429/5xx and transport errors.

Adds a "Check updates" tab to the Built-in plugins settings: one row per installed bundle, with its latest npm version and an update button. Each row also reports DSH-runtime compatibility. The registry is read through the .npmrc chain (environment, then profile, then user, first hit wins); with nothing configured it races a mirror against the public registry, and a private registry is never raced against a public one. A version is installed from the registry it was read from.

Mounts the hosted Reaudit MCP server (https://mcp.reaudit.io/mcp) through the in-box @deepseek-ai/dsh-mcp-client bridge with a REAUDIT_API_KEY bearer token: 238 mcp__reaudit__* tools for brand visibility in AI answers (ChatGPT, Perplexity, Gemini, Google AI Overviews), competitor and citation analysis, site audits, content generation and social scheduling.

Connects DeepSeek Harness to the AdWhispr remote MCP server through mcp-remote with browser OAuth sign-in, adding tools for competitor ad research, ad creative cloning, and launching and managing Meta, Google and TikTok campaigns. Requires an AdWhispr account.

Minecraft redstone music: rm_render renders instrument samples from a SoundFont and aligns every onset to within 3 ms, and rm_build compiles a song plus lane table into a datapack of scheduled mcfunction shards (optionally deployed over RCON).

SQLite-backed long-term memory for DeepSeek Harness: add, search, update and archive entries with categories and tags, automatic conversation logging, tiered compression, and a project dimension that scopes retrieval to the current workspace plus global facts.

Persists scoped user corrections and method candidates for DSH with bounded recall and restart-safe completion settlement.

Inspect conversation context and apply configurable compaction with usage history.

Adds /btw and /side slash commands that answer ephemeral side questions in an isolated forked sub-session without polluting the main conversation context.

Project-less chats for dsh: a session created without a workspace gets its own directory under ~/Documents/DSH/<date>/chat-NN, reused whenever the chat is reopened and left in Ungrouped rather than made a sidebar project; the new-session hero gains a hover clear badge and a "work without a project" row, and a client-only sentinel workspace keeps that hero and its composer usable.