Plugins

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

Plays a voice line or a sound when a turn finishes and a failure cue when a tool call or a turn errors — user aborts stay silent by default and subagent sessions are skipped, both configurable. Three alert modes: voice, effects, or off. Effects is the default and ships 20 built-in sounds (10 alert chimes + 10 nature), each assignable to the done, fail or approval event with per-row preview, so it needs no API key and no audio files; the voice route uses Volcengine TTS with cloned or preset voices, batch-imported voice IDs and fingerprint reuse that skips re-synthesis when text, voice and parameters are unchanged. A third approval slot exists but has no automatic trigger — it only plays when called manually. Playback goes through winmm/waveOut as-is, never changing the system volume or mute state, and the player is spawned detached so session teardown cannot silence it. Windows only.

Windows system-drive (C:) cleanup for DSH: rule-based scan, five-tier safety grading, a staging area with a rollback ledger, UAC elevation, and migration to another drive — a model tool plus a Web GUI panel.

Edit system-prompt sections with live preview.

Browser system notification, sounded by the OS notification itself, when a session needs a reply or a run goes idle; no page-focus check, at most one notification per session with a newer one replacing the old, and an idle notice reports how many background tasks are still running.

Model-visible SSH file tools read_remote, write_remote and edit_remote: read a remote UTF-8 file with line-numbered paging, create a new remote file (an existing target is refused, there is no overwrite branch), and apply literal replacements with unique-match checking — all addressed through a single "alias:path" field whose alias comes from ~/.ssh/config.

Network and proxy doctor for DSH: checks system proxy settings, probes local proxy ports, detects TUN adapters, tests GitHub, TCP and HTTP reachability, scans hosts conflicts and prints concrete suggestions for what to change.

Per-project runtime environments for DeepSeek Harness: auto-adopt or create a project-local Python venv (.venv_local/python) and wire in the toolchains and env vars for the runtimes each project uses (python venv / node / go) — python & pip always resolve to the project, never silently to system Python.

Per-turn file-change card for DSH Desktop: +N −M badges, aligned diffs, and Mac/Windows file open (system app, Finder/Explorer, VS Code).

Scheduled tasks panel for managing DSH agent and system crontabs with natural language input and execution logs.

Point-and-shoot screenshot capture: a system floating window turns a new screenshot (or copied image) into an Obsidian note with comments and key-point marking, instant OCR through the host DSH multimodal model (no extra API key needed, Tongyi Qianwen as fallback), a duplicate-screen guard, per-day merging, and an optional evening AI organization pass.

Cipher memory platform as a DSH bundle: four memory types (attention, experience, preference, cognitive) sedimented per turn by four memory agents, cross-session deterministic recall injected via systemPrompt.context, insight review kept out of user-facing output, per-session UNNI/LOOP modes with memory-driven auto-continuation, memory search/ingest tools, plus a settings page (SOUL editor) and an AgentPool panel.

OpenAI-completions-compatible adapter for custom gateways (vLLM / LM Studio / self-hosted proxies): always role:"system", thinking driven by the model config, Qwen-style response split, and vision-model image input (single / multiple).

A dsh web plugin that wraps the running Harness in a native Windows desktop window: it bundles a Wails v3 desktop client (so installing the plugin is enough), probes the web port and writes the ~/.dsh/dsh-web-port.json protocol file for the client, registers a system tray, desktop/Start Menu shortcuts and a startup autostart toggle, and the client can start dsh itself if it is not running.

Private, per-project system-prompt rules for DeepSeek Harness — matched by git remote URL, repo path, or cwd prefix; worktree-aware; never committed to the repository.

Tauri 2 desktop application for Windows that detects (or installs) the global @deepseek-ai/dsh package, launches the DSH Web server and embeds it in its own window, with system tray management, login autostart, a global hotkey and desktop shortcuts.

Use AItelier as a subagent from DeepSeek Harness: generate, edit, run, export and import SkillFlow pipelines. Client only — requires a running AItelier backend (Docker; see README).

DeepSeek API pricing reminder with a game HUD: Beijing-time countdowns to peak/off-peak windows, a draggable HP capsule with day/moonlight themes, and a nine-realm cultivation system with breakthrough animations.

Full-screen lightbox for chat images: click any image to open the full-resolution original with zoom (wheel, buttons, shortcuts), drag panning, prev/next paging, filename caption and download, plus keyboard-arrow and touch-swipe navigation. One "image display control" popover next to the composer collapses every image in the conversation into a thumbnail grid whose column count (1-12) is configurable and remembered, or hides them entirely so the space closes up and restores them later; images are styled in place and no node is ever moved or reparented. The host-side display_image tool takes a local path or directory (TIFF/HEIC transcoded, originals still saved on download), a remote URL, or a keyword search over Bing, Huaban and Sogou that samples loadability before picking a source, re-saves images blocked by hotlink protection and drops dead links after a magic-byte check, returning paste-ready Markdown. It also keeps a system-prompt rule that every delivered image must appear in the reply body as  markdown, because collapsed tool rows are invisible to the reader.

Windows system-tray launcher for DeepSeek Harness Web: start, stop, restart, open the Web UI, tail logs, live status icon, and a launch-at-login toggle.

Cross-session memory for DeepSeek Harness via the official storage domain: memories persist through ctx.storage (storageDomain table) and are injected into the system prompt through a registered section (memory:recall), with memory_save / memory_forget tools so the agent reads and writes its own memory (maxMemories configurable).

Unified plugin marketplace built for the DSH Desktop (EAC) shell, aggregating the curated catalog, the GitHub dsh-plugin ecosystem and the npm registry into one storefront, with source whitelisting, conflict pre-checks, trial-boot install verification, manual/batch/auto updates and .dshpack feature-pack management.

Manage the dsh service via `dsh --profile ctl`: systemd lifecycle (install, start, stop, restart, enable, disable, uninstall), persisted config, health probe and logs, plus shell completions and self-update.

Dockable Markdown preview for the DSH Web UI: side-by-side with the conversation, a per-session recently-read .md list, local relative-path images render in place, and clicking an in-chat .md reference previews it instead of launching the system editor; follows the shell light/dark theme.