Plugins

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Installs the codex-cua skill so DeepSeek Harness can use Codex computer use: drives Chrome and native macOS apps through the runtime bundled with the ChatGPT/Codex desktop app, ships a persistent session client and a doctor self-check. Requires the ChatGPT/Codex desktop app with its Chrome extension, Python 3.9+, and macOS.

Composes tools, skills and MCP servers into switchable per-session sets, shrinking the resident tool surface and the system prompt on demand.

Toggles the rea-mcp server on and off from the DSH Web UI session header or through the rea_mcp_toggle agent tool, so the 170 mcp__rea__* tool schemas stop being sent with every request while REA is off (the tools payload drops from about 722 KB to about 95 KB) and the REA child process exits; the choice is kept in a profile-scoped state file and restored at startup by a row-level disabled expression.

Diverts operation-script writes out of the workspace into a per-session scratch root and collects each one into an inspectable vault outside the workspace, so the workspace holds only real deliverables.

Encrypted, chunked full backups of a DSH installation: config, sessions, plugins, workspaces and Hindsight memory packed into AES-256-GCM volumes that unlock by passphrase, recovery code or this machine's DPAPI slot, each package carrying a self-contained restorer, GFS rotation (last, daily, weekly, monthly, plus a total size cap and a recycle bin) and network or WebDAV targets. Zero external dependencies — node: builtins only, no 7z, openssl or rclone.

Adds the fs_remove and fs_move tools, executed in the DSH host process so they can delete paths the sandboxed shell cannot, gated by a session allow list and a path allow/deny list that denies by default.

Motion graphics from a dsh session through the Miran Fann engine over MCP, with a Miran settings page and motion-design skills. Requires the Miran Fann engine installed separately (npx miran-fann setup) and a signed-in install.

Read Bilibili and Douyin from a session: WBI-signed Bilibili API calls behind one shared pacer (4 req/s, per-host cooldown after a 412) for video, feed, search, author, comments, danmaku and subtitles, plus Douyin hot list, video, feed and search rendered in a locally launched Edge over CDP.

Cross-session artifact center: agent tools that register deliverable files (PDF, Excel, PPT, code, JSON) into one shared directory, plus a sidebar panel that filters them by category, extension or keyword.

Model-driven tool-result archiving for DeepSeek Harness. Results above a configurable size carry a short inline id (\[#a1b2c3d4]); the model archives the ones it no longer needs into the session's own archives/ folder and the context keeps a small recoverable stub with the file path. Originals stay in the append-only session log, so nothing is lost. Ships a settings panel with per-size-bucket recovery stats, thresholds that apply without restart, and a conditional reminder when results are waiting to be archived. Requires dsh-better-sidebar for the statistics panel.

Hides other memory plugins' context sections and tools inside a chosen DSH preset, so that session gets a clean context. Off by default; ships a read-only diagnostic tool.

Local long-term memory for DSH: browse, search (BM25 + synonyms) and edit entries in a panel; folders, archive and a recycle bin; choose per session what to inject; model-written memories need your approval; import/export backups; optionally sync across devices via your own Git or WebDAV.

Turns guard denials, gate failures and human thumb-downs into project lessons, and injects only the rules a human has armed into each new session of that project; it registers no model tools and is reviewed through its settings card.

Registers the Akasha Book memory server over stdio and exposes its 22 akasha_* tools to DeepSeek Harness, covering lookup, briefs, revision chains, audits and session recall. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Schedules Akasha sleep distillation on idle or timer, and injects a wake note for new sessions plus a per-turn memory pulse; the optional idle-resume behaviour is off by default. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Records host events — turn ends, tool results, agent errors, idle transitions and assistant output — as append-only JSONL for Akasha metrics, recall checks and output audit. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Write guard for the Akasha Book store: blocks tool calls that write into the memory data directory, and injects the store usage contract and self-layer sections into the system prompt. Companions: Hindsight (repo memory), OpenViking (user memory), and the built-in session search (see repo README). Setup: clone the repo, copy core/ aside, then replace <AKASHA_DIR> in cordis.patch.yml with its absolute path (or set the AKASHA_DIR env var); plugins fail loudly while the placeholder remains.

Session deletion for DeepSeek Harness: a sidebar menu item, a workspace-grouped batch cleanup panel and a session_delete tool (dry-run by default). Deletes session logs, projection cache, workspace-registry references and derived search indexes, and cascades to all subagent sessions.

Chunked compaction for oversized sessions: takes over only when the live context exceeds 85% of the model window (or the request exceeds 4 MB), summarizes the history in 1.5 MB chunks and merges them; smaller sessions keep the built-in compaction.

Delete sessions for real from the dsh sidebar (local logs and projection cache included, subagent and fork children cascade) and manage workspaces and ungrouped sessions, with an optional daily cleanup of ungrouped sessions.

Automatic, versioned backup of your DeepSeek Harness home — sessions, memories, settings and the profile plugin tree — to a private git remote you own, with commits and pushes on a schedule and every failure surfaced in the DSH log.

Adds a permanent Delete session action to the sidebar session menu, behind a confirmation dialog that reports the log size, running turns, subagents, background jobs and reminders bound to the session; the id is then released from the live, archive and workspace registries, so the row stays gone on refresh instead of folding back in.

Delete DSH sessions into a restorable recycle bin — subagent sessions follow their parent as one tree, batch archive, restore and purge are supported, and only purge destroys bytes.