Plugins

Export a DSH session tree (lead plus subagent fleet) to two Markdown files from one frozen snapshot: a readable narrative summary and a complete raw archive. Target directories are checked against the session file policy, and a blocked location falls back to the workspace exports folder.

Adds a "Delete session" item to the sidebar session menu that moves the session transcript directory to the Windows Recycle Bin, or to a plugin trash folder under ~/.dsh/plugin-data when that is unavailable (restorable either way), and deletes its spill files and projection cache in one request, detaching a live session first and cascading to its subagent sessions. A setting switches the confirmation step off so deleting takes one click; duplicate delete items registered by other plugins are collapsed so only one remains.

Runs a four-task, 150-point model intelligence benchmark inside DeepSeek Harness (Qin 60, Pompeii 45, Pelican 22.5, Candy 22.5): each selected model × reasoning-effort pair executes every task in its own isolated subagent session, Qin and Pelican are graded by the selected judge model against rubrics, Pompeii and Candy programmatically, and batches keep scores, artifacts and cost. Adds a 0–1000 real-world performance score per model × effort computed from local session logs across seven dimensions (output speed, first-token latency, reasoning speed, tool cadence, tool latency, tool success rate, cache hit), with baseline deltas and controlled speed runs, plus a sidebar page with ranking, performance, history and settings views. Each batch spends real tokens of the candidate and judge models, and candidate subagents get file and bash tools inside an isolated run directory.

Creates DSH workspaces under a configurable base directory, links several external folders into one workspace, and relocates a workspace without losing its conversations. Its managed_workspace tool lets the agent create, adopt, link, move and unregister workspaces (moving relocates the whole folder and leaves a link at the old path when it has conversations), and its HTTP routes (/dsh-managed-workspaces/api/...) have no DSH access check beyond a marker header.

Whole-disk file-name search for DSH with a self-built cross-platform index, agent tools and a Web panel; no Everything required. It indexes your home directory by default; the first content search also builds a local full-text index (SQLite in the platform cache directory) of text and source files there (by extension, up to 1 MB each, 200,000 files) and of your recent DSH session messages; locator_export writes a SQLite copy of the index to any absolute path it is given, replacing an existing file when overwrite is true. The engine is a prebuilt Go binary shipped for six platforms (source in engine/), and the plugin makes no network requests.

A plugin-market panel in the sidebar and in settings: browse the dsh-plugin.org directory, filter and sort it, and install / enable / disable / remove bundles into the current profile through the official plugin manager. The curated catalog and the full sitemap index are merged, so plugins missing from the catalog are still discoverable.

Keep SSH, WSL and Docker projects in the native DSH sidebar. Group directories by environment while choosing full remote DSH or lightweight local Agent mode per project. Manage shared full-backend connections together, keep lightweight connections independent, and selectively sync local Skills with difference previews. Aimed at the Windows desktop client with Linux, WSL or Linux-container remotes that have Python 3 and Bash (macOS and Linux hosts untested); lightweight SSH needs an existing SSHFS mount, and Docker has not yet been run against a live daemon.

Keyword-rule scan of a project directory for tax-industry compliance gaps ahead of regulatory audits: accounting voucher and ledger retention set under 30 years, invoice-title lines with no taxpayer ID, tax data leaving China with no security assessment or standard contract mentioned, and e-invoice lines with no verification or de-duplication mentioned, with rule sources kept in rules/.

Standalone rescue for a broken DeepSeek Harness profile: a CLI that runs without DSH diagnoses the crash logs (six classified causes, from real incidents), pre-flights the profile for command-name collisions and files plugins read at construction time, arms a safe mode that loads only official bundles until a healthy boot restores them, and keeps manifest snapshots for rollback. A resident watcher watches the crash-log directories via OS file events — idle costs nothing, and when the loader dies the report is written within seconds, one file overwritten per crash. Windows only: crash logs are read from %APPDATA% and the watcher autostarts from the Windows Startup folder.

Inline audio player for generated clips and songs: the play_audio tool renders a player in the conversation (promoted into the transcript when the host supports it, otherwise inside the tool-call fold). Serves only allow-listed directories, supports Range seeking and HEAD, 512 MB cap per file.

Adds the agnes_image host tool for generating and editing images with Agnes Image 2.5 Flash. Text-to-image takes a detailed prompt; image editing and multi-image composition accept local workspace paths or public URLs through reference_images. Output size, aspect ratio, and model are configurable, and results are saved into the session working directory and shown inline as attachments. The plugin has no runtime dependencies and no build step. Requires your own Agnes API key (AGNES_API_KEY in the environment or ~/.dsh/.credentials.yaml). Uses the same agnes_image tool name and loader id as zhp282515-wq/dsh-plugin-agnes-image, so do not install both.

Per-project tool gating for the harness: before each step, the session looks for `.dsh/tool-gate.json` in its working directory and up to 32 parents, then filters the tool set handed to the model — allow or deny lists with `prefix*` wildcards, `off` when no rule file is found. A single `tool_gate_status` tool reports the active mode, rule file, and which tools were hidden.

Zero-config per-Session freshness for codebase-memory: on Session start and on every working-directory change it refreshes the index of the Session's own repository, so each project in each Session answers from its current graph while indexing stays in the shared daemon.

Controls an existing aria2 JSON-RPC service from DSH with four tools: submit a single HTTP/HTTPS link (optional directory, filename, checksum, per-task proxy), read one task, list tasks, and pause/resume/cancel. A task it submitted that finishes or fails reports back to the session that started it. A settings page holds host, port, secret and timeout, with a connection test that does not save or create anything; it never bundles, starts or manages aria2 itself. Creating and controlling downloads only works in full-access mode (not plan mode).

Permanently deletes one session from its sidebar context menu after a confirmation dialog: the log directory under the DSH home, the projection-cache thumbnail, its id in every workspace.json, and its archived and pinned entries. Sessions resumed since launch are detached from both the sessions and the agents stores first, so the deleted row does not return to the sidebar as an orphan. Refuses while the session is running a turn, and never touches the workspace folder itself.

Local Markdown notebook: a three-column vault (rail, folder tree, editor), split live preview, tags, stars and pins, a todo centre that gathers every checkbox in the vault and writes ticks back to the file, full-text search, session-to-note deposit, insert a note into a conversation, save an answer as a note, links back to the originating answer, vault-directory and text-size settings, and four note_* tools.

3D office view for DeepSeek Harness: the sidebar panel turns the real main session, its sub-agents, tool activity and reports into animated desks, with per-desk screen details and a notification centre for collaboration events; sessions are picked per working directory. Read-only: it starts no tasks, calls no model, needs no API key, and ships its own scene and models (no CDN). Requires DSH 0.2.2-rc.1 (or a later 0.2.x) and Node ^22.19.0 || >=24.0.0.

Codex-style composer model picker: a card showing the current model and a draggable slider that sets reasoning effort, with one stop per level the model advertises and an Off stop when the provider supports it. The slider snaps only to whole stops and updates the effort label while dragging; selecting a model or effort still goes through the session model directory, so it stays in sync with the rest of the composer.

Appends one short user message before the next step when the model is circling: the same absolute path written three times with no measurement landing in between, the same error episode (tool, target and normalised fingerprint) returning twice, or a write followed by two steps with no measurement — the last one only arms, and the message lands before the next write rather than interrupting reading. A measurement has two states: intent is judged from the tool arguments at call time, and the write streak is cleared only when the result comes back, only for that command directory. A failed test still counts, because it yields the line that is wrong. Hard measurements are `lsp_diagnostics`, `verify`, `run_tests` and `run_test`; `ops_bash`, `bash`, `shell` and `pwsh` count only when the command matches a measurement pattern, so `ls` no longer launders a blind edit streak. Signals fire once per episode, re-arm after a real measurement, and are capped per turn; a successful `present` sleeps the gate until the next write, and subagent sessions are skipped. Generated paths (build output, lock files, logs) are excluded. Error targets are read out of real `file:///` ESM stacks, so two different files never collapse into one episode, and `cd <dir> && cmd` counts as a measurement of that directory rather than its parent. Ships the `stuck-gate` skill at bundled rank 600 (a user-level copy at 400 overrides its wording) plus a read-only observation panel at `/better-debug` reporting firings, sessions covered, the first action after each message across six classes, and how many measurement loops actually closed. The log defaults to `$DSH_HOME/logs/better-debug.log` and is created on first write, so the panel has data right after install. Optional host services are subscribed dynamically, so a host without them still loads the gate. It does not estimate tokens saved, and it does not claim the message caused the change. The panel banner counts only the failures after the most recent load (`log.current`), so one old mount failure no longer reads as "currently disabled". Test suites wait for log conditions instead of fixed delays (test-only change in 0.2.5).

Publish any local directory to GitHub from inside a DSH session with a /publish slash command — git init, gh repo create, commit and push. Never force-pushes, never deletes.

Moves skills into a configurable directory and lets each workspace choose which skills it enables, avoiding context spent on unused skills.

Decides which MCP server tools each workspace can see, keyed by the session working directory; workspaces without a policy see none.

Rui Xi's Memory (dsh-memory-v2) — a local long-term memory plugin for DeepSeek Harness: four memory collections (semantic / conclusion / profile / temporary), per-day scene archives, two-phase consolidation and literal trace. When structured recall finds nothing, it falls back to searching the daily scene archive: time-window first (yesterday / last week / N days ago / dates), then a 2/7/30/180-day tiered sweep, with line-numbered citations. All data stays in the local DSH directory; semantic recall, diagnostic logs and the sensitive debug route are off by default.

Pixel art editor in a DSH conversation tab: pencil, eraser, bucket fill and eyedropper on a grid canvas that zooms in whole steps around the cursor; up to eight layers with merge, reorder, rename and full undo; a 36-slot palette whose edits move the old colour to a free slot so existing pixels never change; PNG export written straight into the session directory.