Plugins

DSH 会议助手：本机麦克风采集与 DashScope 流式转写、会前准备、会中发言建议与会后记录。独立插件，不依赖 Agent Mesh 或任何平台连接。

Whole-disk file-name search for DSH with a self-built cross-platform index, agent tools and a Web panel; no Everything required. It indexes your home directory by default; the first content search also builds a local full-text index (SQLite in the platform cache directory) of text and source files there (by extension, up to 1 MB each, 200,000 files) and of your recent DSH session messages; locator_export writes a SQLite copy of the index to any absolute path it is given, replacing an existing file when overwrite is true. The engine is a prebuilt Go binary shipped for six platforms (source in engine/), and the plugin makes no network requests.

Evolver for DeepSeek Harness, by EvoMap: recalls a proven strategy behind each prompt, reports its reuse at turn end, and distills verified work outside the conversation.

A desktop pet for DeepSeek Harness: an always-on-top character and a roster panel that show what the watched conversations are doing, with seven animations, Workspace grouping, subagents drawn under their parent, and one click to open a session. Ships Windows, macOS (Intel and Apple silicon) and Linux window binaries in the package, so installing runs no install scripts and needs no build step.

A hot-seat Chinese Liar's Dice table for DeepSeek Harness: 2–6 seats, 3/5/7 dice, wild ones, an LLM opponent that only sees its own hand and is re-validated by the rules, a post-reveal referee, a replay that keeps the current round's dice hidden until the challenge, and a switchable exact-binomial probability panel. 54 node --test tests, zero runtime dependencies, four real rendered screenshots.

Plugin updater with an automatic parallel scan on opening its left-sidebar panel. Reuses the completed scan to skip current plugins without rechecking them and installs only confirmed newer targets. Checks DSH compatibility and installed versions, attempts recovery after failed GitHub updates, and shows one history card per operation. Includes a dsh_oneshot_update agent tool.

Control a paired Android phone from DeepSeek Harness: read the accessibility node tree, tap by text, type into fields, take screenshots, launch apps, and read or write files over an encrypted WebSocket. Needs the companion Android app (Android 11+; the APK is attached to every release since v0.0.45, so no local build is needed — the source is in the repo if you would rather compile it with JDK 21 and Android SDK 36) and a network route from the phone to the computer (same Wi-Fi or a tunnel; the bridge listens on all interfaces by default). Pairing is a DSH settings section (8-digit code or QR code, listening port); the permission switches live in the phone app, and by default the agent cannot drive the bridge app itself.

Live view of the agent machine's desktop in the DSH Web UI, with sound, relayed through DSH's own login. Take control for a CAPTCHA or QR login, with clipboard and file transfer, also from a phone. Needs cua-spacesd from a Cua desktop image on the same machine.

Watches the Agents Anywhere bridge and notifies you when it wedges and leaves your phone offline; a crashed Connector is relaunched by default (guarded), restarting a wedged one is opt-in. Needs the Agents Anywhere bridge plugin; macOS tested, Windows untested.

Adds a Phone page to dsh web that shows a QR code; scan it, sign in to OpenTandem on the phone and tap Allow, then send tasks to this computer's dsh from OpenTandem. Installs the OpenTandem command line and a background Runner on first use.

Derivative of cheesehaqi/dsh-qq-onebot-bridge with the same package name, so the two cannot be installed together. Bridges a personal QQ account into DeepSeek Harness over OneBot 11: private and group messages become per-conversation agent sessions and replies are sent back to QQ. Ships a reverse WebSocket server, allowlists (empty = deny all), @ parsing, image and SILK voice handling, and a separate local console on 127.0.0.1:8880 with the decision trace, offline replay, event injection, a read-only preflight and host/Waylay start-stop controls. Needs a separate OneBot v11 implementation (a third-party unofficial QQ client): the default, Waylay, injects into the official Windows QQ.exe (Windows 10/11 x64 only) and is distributed as a separate release archive, not bundled in this repo. botQqAllowed and replayGuardEnabled are edited in DSH Settings > QQ助手, and the replay guard is armed automatically when the logged-in account changes.

DSH sidebar page for a dsh-mesh network: peer topology, latency, TLS/version health and a delegation list. Resolves the installed dsh-mesh-node package for data.

DSH host-side bridge for a multi-device mesh: exposes local sessions and tools over a token-protected loopback HTTP endpoint so the dsh-mesh server on this machine (separate npm package dsh-mesh-node) can create sessions, prompt them and call tools for paired peers.

Keeps a dsh-mesh server alive across DSH engine restarts by supervising it from inside the host process; resolves the installed dsh-mesh-node package and fails loud when it is missing.

Keep SSH, WSL and Docker projects in the native DSH sidebar. Group directories by environment while choosing full remote DSH or lightweight local Agent mode per project. Manage shared full-backend connections together, keep lightweight connections independent, and selectively sync local Skills with difference previews. Aimed at the Windows desktop client with Linux, WSL or Linux-container remotes that have Python 3 and Bash (macOS and Linux hosts untested); lightweight SSH needs an existing SSHFS mount, and Docker has not yet been run against a live daemon.

Read-only behavior audit for DSH sessions: flags unsafe actions in 8 categories (A–H) with rules for 14 subclasses (the 41-subclass taxonomy file is not shipped, so a built-in 14-subclass fallback is used), anchors every finding to a real event seq, and gives deep links plus the full tool-call / data-access chain of any assistant reply (parameters, results, files read and written, domains, sandbox and approval context). Every finding is drill-downable.

Adds a DSH Settings panel for write-only local credentials and exposes only secret metadata and references to agents.

Non-blocking approvals and timed questions: permission requests park as pending items while the model keeps working and the approved call can be retried, and ask_user_question runs in timed mode (20 s) through an override of the whole standard agent preset that applies to new sessions after a restart.

Grades every PowerShell command an agent is about to run before it runs: deletion, overwrite, network download and credential access are four required classes, plus dynamic execution, system and privilege changes. Verdicts are a pure deterministic rule function — no model call, no network, sub-millisecond — with two escalation rules (download+execute, credential+exfiltrate) that jump straight to high. High risk stops the tool call for a second confirmation (in-panel queue or the native approval), deny or timeout means it never runs; medium is logged but never blocked. Every command and its verdict, including the redacted command text, is appended to a local JSONL audit log. Quoted danger strings are treated as data, -WhatIf is respected, -EncodedCommand is decoded and analysed again. Host + client halves, zero runtime dependencies, 55 rules, 136 tests.

Scans a workspace for plaintext API keys, flags files inside git repositories, and reports findings masked so no full secret is ever printed.

Saves per-workspace dev commands behind a header button, starts and stops them as process trees, and exposes four tools so the agent can list, start and stop those saved commands and read their logs (it cannot add or change commands).

Backs up a DSH profile's text configuration to an unlisted secret GitHub Gist, and syncs it back on another machine: a settings page with three buttons (status / upload / sync), a config_backup agent tool, a reversible merge-style restore, and credential stores, binaries, lockfiles and local usage counters left out of every backup and named in the UI. Needs a GitHub token with the gist scope (DSH_GITHUB_TOKEN, GITHUB_TOKEN or a signed-in gh CLI). Files are uploaded as plain text without redaction, so keys written into cordis.patch.yml or .npmrc end up in a Gist that anyone with its link can read.

Extra folders registered for a workspace become real workspace roots: the session runtime context lists them, a workspace_roots tool reports each root top-level entries, git branch and AGENTS.md/README/manifests, and file tools read, write, patch, move and delete inside them without approval prompts. Folders are edited per workspace from a sidebar hover action or from Settings. On Windows a confined shell stays inside the workspace, because ACL confinement cannot take extra roots.

Runs project checks described in a dsh-checkup.json file (files, syntax, JSON, HTTP health, asset counts, and any node/npm scripts or commands you list) and falls back to auto-detected defaults when no profile exists.