Plugins

Operate the Edge or Chrome window that is already open, without restarting it and without closing it: choose a window once, reuse a tab that already shows the URL, read page text or DOM state, click by accessible name or visible text, type, scroll, wait for content and batch steps. 22 tools over UI Automation, SendInput and an optional Tampermonkey bridge. Windows only.

Relay that bridges DSH and the browser: tasks started from a browser extension run in DSH sessions, while page operations are driven back through browser_* tools, with an in-page assistant panel and a local wizard for one-click setup.

Browser bridge for DeepSeek Harness: captures page markup (DOM with boxes and computed styles, selector candidates checked for uniqueness) and the site's own xhr/fetch calls with headers and bodies, redacting credential-shaped values on ingest, into workspace files — then drives the page with trusted CDP input to verify what was captured. Ships 11 tools and an MV3 extension that works in the browser's own session. Requires Chrome or Edge 125+; the extension is loaded manually and paired with a local token.

Exa search provider for the dsh-web seam: the web_search tool sends queries to Exa's /search API and returns the results as sources, in dsh web, dsh-TUI and headless runs. Needs an Exa API key (EXA_API_KEY, the credential store or a key file read on every search). web_fetch is unchanged and there is no UI.

Rolling-window batch scheduler for DeepSeek Harness subagents: one subagent_batch call carries a queue of independent subtasks plus a user-owned concurrency window, a settled child's slot is refilled immediately, and the call returns every child's final answer, stop reason and child id as one acceptance report. async mode keeps the pool running in the background for subagent_batch_status, and the window comes from config, DSH_SUBAGENT_BATCH_CONCURRENCY or a hardware recommendation.

Computer Use for every DSH session: screen capture, mouse and keyboard, app launch, plan and skill replay, an audit log, guards for dangerous actions, a background code agent, and an OCR workflow (text and coordinates) for apps whose accessibility tree is empty. Verified on macOS only: Windows has a basic GUI backend that is unverified, Linux has no desktop backend (calls fail with unsupported_platform), and the window/AX/browser/clipboard tools register on macOS only.

Picks PTC or native tool presentation per task and switches it at runtime for the model or the user.

Rclone backup tooling with four tools: target inventory, local/remote status, rclone check verification, and approved copy/sync transfers with dry-run previews and an audit line. Requires rclone installed and a remote configured with `rclone config`; the plugin never reads the rclone config or credentials.

Utilities for DSH sessions: ask another session a question with a context guard, pause the running turn from the UI, restart DSH on Windows and resume automatically (via the scheduled task that install-restart.ps1 creates), enforce peak-hour discipline and per-feature allowed time windows, and periodically scan session logs for interrupted turns.

Fork of kirkchinese/dsh-capability-catalog 0.1.4 (cannot be installed alongside the upstream capability catalog / @kirkchinese/dsh-rea): a REA-focused MCP gateway with three fixed search, describe and call tools, cached schemas, session controls and native DSH result handling. Requires DSH 0.2.1-rc.4 or 0.2.2-rc.1 and a Node/npm setup able to run REA.

Notify-only update checker for the plugins in a DSH profile: classifies each dependency by its specifier and offers only releases the running DSH core can load, in a plugin_updates tool and an Updates sidebar tab (the tab needs dsh-better-sidebar; the tool and settings work without it).

A Phone tab in dsh-better-sidebar: SMS and calls over Twilio and SIP lines bridged through Asterisk, call audio through your server, Live, Voicemail and Do not disturb modes with live voicemail transcripts, a Telegram account with chats, voice messages and calls, and phone_* and telegram_* agent tools. Requires dsh-better-sidebar, Node 22.5+, a Twilio account with a voice and SMS number, a public HTTPS host for provider webhooks, and the bundled Go daemons built from a checkout (Telegram also needs your own api_id/api_hash).

Mail for DSH: IMAP, POP3, SMTP and OAuth2 accounts with a reading tab, API senders, scheduled and CSV bulk sends with unsubscribe handling, and mail_* agent tools. The Mail tab appears inside dsh-better-sidebar; the agent tools work without it.

After an agent's own bash or shell command, re-observes the files that session had observed, so FS_STALE_VERSION no longer fires on self-inflicted writes but still fires on writes by others.

Look up Chinese companies inside the conversation: name a company and get its business registration, shareholders, executives, outbound investments and registration changes, plus judicial and operating-risk records such as enforcement, dishonest judgment debtor, consumption restriction, abnormal operation, serious illegality and administrative penalties (11 dimension groups). Results render as conversation cards with fields and the raw payload on expand, and the API key is saved from the plugin page into the Harness credential store.

MySQL and PostgreSQL connection manager with a schema tree, table search, SQL console with completion, and four agent tools for listing connections, searching tables, inspecting structure, and running queries.

Three ledgers for a model that loses context between restarts. Self-note: what I have become — capped at 40 entries, and every eviction first leaves a one-line crease recording which entry was dropped and why. Judgment ledger: record a claim together with how to verify it, come back when it is due, and mark it right or wrong; wrong ones stay in a mistakes book so you stop assuming you were always correct. Handoff: where this run stopped and what the next one should read first — a baton, not a memory. Three tools each taking an action parameter instead of a dozen separate ones (the prompt is paid every turn). Data lives in ~/.dsh/*.jsonl and is shared with the same-named CLI scripts. Zero dependencies.

Obsidian-compatible Markdown notes in the DSH sidebar with search, tags, backlinks, graph, audio notes with transcription, a paint canvas, OCR (needs tesseract), client-side encryption and notes_* agent tools; the release tarball and the npm package carry a prebuilt Linux x64 daemon, other platforms build it from source with Go.

Failure memory for DeepSeek Harness. Captures tool failures as they happen, classifies them with 16 built-in rules into lessons pairing a symptom with a fix, adds session/daily/weekly summaries, and injects a short briefing into later sessions through systemPrompt context. Ships 5 pitfall_ tools and a web settings page.

Stores the agent's long-term memory as plain Markdown in an Obsidian vault — every memory is a .md file with YAML frontmatter that Obsidian indexes natively, so you can read, edit, link and back up it with tools you already use. Nothing is locked in a database. Ships a sidebar panel (tag filter, sort by recency or importance, edit in place), 7 agent tools, three-tier token-budgeted recall, BM25 ranking (no embeddings, no API key, works offline, CJK bigram tokenization), importance decay with archiving (moved to .archive/, never deleted), and optional GitHub Contents API sync. A note containing a secret is refused rather than redacted, because a redacted memory reads as complete while the important part is gone. Zero runtime dependencies; everything comes from the DSH host.

Elides stale, oversized plain-text tool results from the model-visible session surface once the prompt cache goes cold, replacing each with a stub that keeps the tail lines and any error lines, and reports per-request and cumulative savings in the composer footer.

Permanently delete sessions from the DeepSeek Harness UI: a header trash button and a sidebar menu item behind a risk-consent dialog, plus a workbench_session_delete agent tool. Started from lsz-asd/dsh-plugin-session-delete and maintained independently since v0.4.0; do not install it alongside that plugin, since both register the same workbench_session_delete tool.

Cross-session messaging: deliver a user message to another DSH session by session id. Every message carries the sender session id and a reply hint, so windows can authenticate each other and hand work over. One tool, no extra DSH dependencies; mode "steer" injects into a running turn instead of queuing a new one.

Local Ollama worker tools for DeepSeek Harness: model inventory, a single unverified ask, and a batch runner that chunks long text, checks every item deterministically, returns a small verbatim sample for review and can optionally write the labelled result inside the session workspace.