Plugins

Records every session as one readable Markdown timeline inside the session workspace - the full request sent to the model (system prompt and plugin injections included), user input, replies, reasoning, tool calls and results, file reads and writes, web searches, skill loads, command runs and token usage - with a review page, a per-session tab and configurable capture scope.

Agent Studio for DSH Web: configure models, prompts, per-plugin tool bindings and Skills; trial-run with editable tool results and run history; preserve session capability snapshots; export standalone presets; draft Agents with a guided creator preset.

SSH and JumpServer terminal plugin: real-machine read tools, human-initiated read-write operations, and session management from inside DSH.

Installs a self-evolving development-constraints rule library, exposes it to the agent through a constraints tool and a once-per-session reminder, and audits AI token cost and context usage.

System notifications, a tab-title dot and a PWA taskbar badge when a reply finishes in the background or a session waits for your approval, plan review or answer, all cleared when you return to the window.

Opens the Obsidian vault a DSH session is working in, on the first human message — so your sync plugin (Nutstore sync, Obsidian Sync, Obsidian Git, …) starts running and the files the agent edits actually get synced. Skips a vault that is already open, and opens a new window behind the current one instead of stealing focus. Also serializes writers per vault — a second conversation's write is refused before it runs and queued until the holder is done, so a sync client cannot splice two conversations' edits together. Windows only.

Raises a Windows desktop notification card when DSH asks you a question, and returns to the asking Session when the card is clicked.

Send local files to WeChat from any DSH session by reusing an installed IM plugin, plus cron-scheduled tasks that run in fresh sessions, a workspace activity glow, a header activity indicator, a completion chime, a macOS sidebar vibrancy toggle and a one-click host restart.

Windows balloon notifications for session lifecycle events (new / running / finished / error) across all workspaces, with a session-store watch that catches headless and A2A dispatch sessions whose events never reach the host bus. Windows only.

Persistent WeChat bridge for DSH: one WeChat user maps to one persistent agent session via the official iLink channel, with context and the user-to-session registry surviving restarts. There is no sender allowlist — anyone who can message the paired WeChat account can start a conversation with a session that has tool access, and the working directory defaults to the home directory; use a dedicated account and set WECHAT_PERSISTENT_CWD.

Persistent Bots and group rooms inside DSH. Each Bot keeps its own model, permission preset, workspace and session across restarts; a Bot can also be backed by an installed local agent CLI (Codex CLI, Claude Code, ACP agents) using that CLI's own login and models. Unaddressed messages can be triaged by the room leader, the room accumulates a shared experience card, and every answer is a run in a durable ledger the sidebar panel replays. New Bots default to the full-access permission (any command, any file; the form asks you to confirm the risk), so choose read-only or workspace-write to confine one; Codex CLI and Claude Code Bots at full access run without their own sandbox or permission prompts.

A resident assistant for DeepSeek Harness that is deliberately not another chat box: one floating window plus one standing conversation, both independent of every other session. The heartbeat is held back by four gates — an authority grant, a daily turn budget, quiet hours and a pacing cooldown — and it keeps working across restarts through a lease it has to hold. Each wake is decided by a model that must answer SKIP or a short message, so silence is a decision rather than a failure. The window shows the standing conversation's real message flow, read from the host session store, or from the on-disk session log when the host does not publish that session, and it can send into that conversation directly. den carries the same reach as the person it stands in for, with one limit: read-only. It may read every session, this machine and work channels such as GitHub, but it does not write, send or publish, it never asks anyone for permission, and it never gates another session's tool calls. `npm run digest:github` turns GitHub notifications and your own open pull requests into three Chinese sections — waiting on you, waiting on your review, and yours — with reply drafts that are explicitly marked as unsent.

Daily brief for DeepSeek Harness. Every day at a fixed hour it ranks the plugin market by real install counts and stars, cross-checks it against your own agent memory and working conventions, and proposes two kinds of item: concrete deltas on the plugins people actually use (original does A, the proposal does B) and directions nobody has built yet. The popularity numbers come from the catalog the market itself publishes and are quoted into the prompt rather than guessed; an entry the market has not measured is shown as unmeasured, never as zero. Approving an item opens a new session named after it and hands that session a fixed delivery contract — implement independently, never fork, test green before publishing. Rejected sources are remembered so they stop coming back.

Live skill provider that reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session catalog: the engine-bundled skills under engine-config (unpacked from app.asar when that directory is absent), the MiMoCode global and project roots, extension-contributed skill directories declared in extensions.json, and the brand compatibility roots MiMo's own skillPathCompat setting enables.

Generates release material from what a local repository can actually support: a hero image, a feature grid and bilingual copy rendered as SVG and HTML from `README.md`, `package.json` and optional screenshots. Facts are quoted from those files — name, version, license, summary, features, install snippet — and a field that is missing is left unrendered rather than filled with placeholder text. Every feature carries a source citation such as `README.md#L42`, and a claim the repository cannot substantiate is linted out before anything is written, with the reasoning left in `lint-report.json`. `manifest.json` records a sha256 for each input and output, and `--now` or `SOURCE_DATE_EPOCH` makes a run byte-identical. Also ships a GUI panel that regenerates from inside a session.

Annotate pages inside the existing Harness Browser: click or drag to select, comment or ask, then send marked screenshots or DOM location details to the current session. While enabled it replaces the official Browser, Chat and Layout providers; targets Harness 0.2.1-alpha.2.

Chat with the DeepSeek web app (chat.deepseek.com) in a native DSH panel — a real browser drives the site on your existing web login, with streaming replies, deep-thinking and smart-search toggles, and image or document attachments. Conversations can be recovered from the web side, exported as Markdown, and distilled or replayed into a harness session, and the agent reaches the same web chat through six tools (dschat_status, dschat_send, dschat_stop, dschat_recover, dschat_import, dschat_transfer).

Gives the agent its own clock: per-session time readings whose precision the agent can change at runtime, elapsed-time counters, and one-shot countdowns that survive a host restart.

Bidirectional bridge between Hermes Agent and DeepSeek Harness: dispatch_task with UI-visible sessions in the DSH sidebar, session mirroring, and 10 DSH-to-Hermes tools.

Turn-level file undo for tool writes and edits: each file is snapshotted before the write lands, and the model (an undo tool), the human (a /undo command) or a button in the assistant message action row can roll back every file a turn changed. Snapshots are written in-process rather than by shelling out, so it needs no extra sandbox permission in sessions confined to workspace-write.

Chooses which skills and MCP servers each workspace may use, from a "Skills & MCP" item in the workspace row's "..." menu; unchecked skills leave the session catalog, the `skill` tool and `/name`, and unchecked servers have their `mcp__<server>__*` tools denied for that workspace's sessions, running ones included from the next turn.

C++ runtime info probe for Windows via CDB: cpp_trace prints variables at multiple breakpoints in one session (replaces hand-written print), cpp_probe dumps the call stack at a conditional breakpoint. Install: dsh plugin --profile web add dsh-cpp-probe.

Archive DeepSeek Harness sessions into a self-hosted WeKnora knowledge base with extraction, summarization and incremental dedup.