Plugins

Connects Harness to the published BeatBrowser runtime with namespaced MCP tools and a TaskSpace Skill; requires the Chrome extension and preserves manual takeover.

Extract short-video scripts and captions from Douyin, Bilibili, Kuaishou and YouTube, including titles, authors, hashtags and engagement data, through a bundled Python extractor.

ClickHouse query tools for DSH, targeting ClickHouse alone: seven tools that list databases, tables and columns, sample rows, search columns by name, show EXPLAIN plans, and run single read-only SQL statements behind a client-side guard that rejects writes, multi-statement SQL, cross-table queries and external table functions. Single-table by default: the query parameter is used as given, with no built-in multi-step business flow. Zero runtime dependencies; it tells the model to backtick non-ASCII aliases instead of failing with a bare syntax error on older servers.

Project-level MCP servers loaded automatically: a project declares them in `.agents/mcp.json` (path and root markers configurable), and every session working inside that project mounts them in its own scope — stdio and Streamable HTTP, tools named `mcp__<server>__<tool>` — with the connections closed when the session ends. A Web UI panel lists the session's servers and their tools, and can enable or disable a project entry after confirmation, backing up and atomically rewriting the manifest.

Keeps discussion read-only and hands every repository code edit to the Codex CLI through a bundled MCP server; switches between the DSH model and the Claude Code CLI in the plugin form, with preflight checks and a write guard that blocks structured edits to repo files.

Runs the local Codex CLI from DSH as four tools (codex_run, codex_resume, codex_queue, codex_probe), and ships a standalone loopback bridge with an HTTP API and a file mailbox.

Runs the local Claude Code CLI from DSH as three tools (claude_run, claude_resume, claude_probe) that parse --output-format json and return the session id for follow-ups, plus a standalone loopback bridge.

Drives the Claude desktop app from DSH over its claude:// deep links: open a Claude Code session with a prompt and folders, a Cowork task with files, or push a CLI session id back into the app. Also presses Ctrl+Enter for you (SendKeys) and reads the reply back from the local Claude Code transcripts under ~/.claude/projects/<cwd-slug>/<session>.jsonl — seven tools: desktop_send, desktop_continue, desktop_open, desktop_sessions, desktop_read, desktop_wait, desktop_probe.

Image generation through TokenRhythm: mounts a no-npm-dependency Python stdio MCP server as mcp__tokenrhythm_image__generate_image, producing images with qwen-image-2.0 or wan2.7-image and saving them to a directory you choose. Needs Python 3.8+ on PATH and TOKENRHYTHM_API_KEY.

Text-to-image through a StepFun-compatible endpoint: mounts a no-npm-dependency Python MCP server behind an NDJSON bridge as mcp__simple_image__simple_image and returns the generated image URLs. Needs Python 3.8+ on PATH and STEP_API_KEY.

Configurable, provider-agnostic image generation: mounts the bundled MCP server behind an NDJSON bridge as mcp__image_generation__image_generate and mcp__image_generation__image_config_status, and registers the bundled image-generation skill. Needs baseUrl and apiKey; without them the MCP server mounts nothing.

Sends QQ mail through an OAuth-authorized agently-cli account. Registers the send_qq_email tool with a user-approval step and exposes a ctx.qqEmail service for other DSH plugins.

Create verified local cold-backup ZIPs of a Windows DSH Profile and selected home data after DSH exits; restore only to a fresh target with a matching runtime, without certified cross-machine recovery.

Persistent persona memory for DSH with a unified recent, long-term and archive timeline, bounded context loading, memory retrieval and isolated task delegation.

Adds a session_rename tool so an AI can retitle the DeepSeek Harness session it is running in.

Puts a working delete-session row back into the Codex UI sidebar by providing the remote.workspaceRegistry.deleteSession service that @michengai/dsh-codex-ui checks for, unhides the per-session ... button its stylesheet hides, and permanently removes the session log, workspace records and projection cache, with subagent and forked conversations selectable in a family-tree dialog. Delete engine adapted from Lzcdebear/better-dsh-session-deletetool (MIT); both can be installed together (distinct route prefix).

Adds a Delete Session row to every sidebar session '...' menu (the official harness has archive/pin/rename/fork only, no durable delete). One-click Force delete ejects the session from the host live catalog, stops its background work, then removes the durable log, projection cache and registry bookkeeping - no ghost rows on any connected desktop web UI. Workspace files the session created are kept; conversation logs are permanently deleted. Third-party cloud mirrors (e.g. phone apps via Agents Anywhere) hold their own copies. Bilingual zh/en UI, trust-fenced local route. Requires DSH >=0.2.1-rc.1.

Connects CANNBOT gateway models to DSH by reusing the sign-in CANNWork already establishes for opencode: the JWT and virtual key are read from disk on every request, so no separate OAuth flow or extra key is needed, and the account's visible models are registered in the model picker.

United Nations theme for the DSH Web GUI: UN blue over paper white, the official emblem, a slow rotation of credited UN peacekeeping photographs behind the conversation, Charter and UN-facts ribbons, and a 7,030-language picker (127 languages with a complete skin translation) that leaves every existing control untouched. Browser-side only; installers for Linux, macOS and Windows.

See your real ChatGPT / Codex subscription quota inside DSH. Reads /wham/usage: 5-hour and weekly windows, reset countdown, extra-usage balance, additional limit groups and the code-review limit; lists and redeems server-issued reset credits with a stable, retry-safe idempotency key; switches between multiple accounts; reads /codex/models to show the account's real model catalog, showing empty rather than a built-in list when unavailable. One-click sign-in from Settings (browser authorization or device code, with a paste-the-callback fallback); credentials stay in DSH's credential service. Model calls reuse DSH's built-in llm-pi-ai Codex route instead of claiming a provider route — it degrades to a pure quota console when another plugin owns it. A remaining-quota chip sits beside the composer.

Web search insights for the agent: it keeps a local log of what was looked up and which pages came back, and counts searches, returned pages, citations and pages opened per turn and across the session, with the numbers shown in a small entry under the answer and a right-sidebar panel.

Writes the session's estimated cost into the composer token-usage pill, and adds a per-bucket amount plus an estimated total to the usage dialogs, using DeepSeek's official peak and off-peak rates in yuan.

Sidebar footer badge that shows whether DeepSeek is inside a peak-pricing window right now: a state dot, the current multiplier (x2 during peak, 5 zhe / half price off-peak), a countdown to the next switch, and a 24-hour schedule bar whose white line marks the current time. Peak windows are 09:00-12:00 and 14:00-18:00 Beijing time; weekends and Chinese public holidays count as off-peak. The holiday table currently covers 2026 only. Client-only, no network requests.

Opens a temporary side conversation in the right Sidebar that reuses the host conversation UI, so answers render with the same markdown, tool steps, timing and token usage as the main thread. The side chat runs on its own memory-only session: the parent snapshot is supplied as reference context, and nothing is written to the session log.