Plugins

Small DeepSeek Harness affordances for everyday actions — locate the current session from the sidebar header (Cmd/Ctrl+Shift+D), copy a session ID from the session row menu (Cmd/Ctrl+Shift+C), open links in the system default program including localhost, open or copy inline code from a context menu, open changed-file cards with a local IDE or reveal them in the file manager, swap Enter with Cmd/Ctrl+Enter, recall sent messages with Up/Down, and show the current workspace name inside the header open button; every one of them has its own switch in a Flow settings page.

Sidebar layout fix for the DSH Web UI: caps and scrolls the plugin-action area, shrinks the inline pairing QR code and tightens the brand row, so the workspace and session list stays clickable when footer plugins grow tall.

Hierarchical session tree for the sidebar - native subagent trees plus an optional organization-derived hierarchy, with collapsed branch counters and orphan/cycle defense.

Next-step suggestions for the DSH composer: after each completed turn, one auxiliary call on the session's current model returns 3 clickable follow-up suggestions above the input box, and clicking one fills the draft.

Adds a session status pill to the composer dock that expands into a panel of turn, token, performance and context readings.

Export DeepSeek Harness (dsh) sessions as readable Markdown. Pick individual messages from one session, or merge several into a single .md / split them into a ZIP.

Cross-session memory for your dsh agent: remembered, recalled, and re-verified instead of assumed.

A Windows floating desktop pet with task notifications, native session controls and continuous local voice calls using the configured local recognizer and Windows system speech.

Solo murder-mystery (jubensha) in a session tab: the AI hosts the game and plays every other seat, each knowing only its own role book, while the player's seat stays yours — with a stage bar, a per-seat timeline, a clue page and a reveal that unseals the truth only at the end.

Reimplements the shut-down BSide: Olivia Lin letter API on loopback so the game client keeps sending and receiving letters: every incoming letter is delivered to one persistent DSH agent session, and the reply is written back to the local letter store.

Removes sandbox_permissions / justification arguments that cannot widen the call's current sandbox mode, so calls no longer fail with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "danger-full-access" mode'. GPT models tend to fill these optional fields on every call and pick workspace-write, which is narrower than danger-full-access. Runs in tools/pre-execute: compares the requested mode with the mode the session's sandbox policy resolves, and drops the fields when the request is the same or narrower (also drops a lone justification). Also understands the values GPT carries over from Codex's own shell tool: null, empty and use_default are treated as no request, and in a danger-full-access session any value (including require_escalated) is dropped because nothing is wider. Real widening requests, unknown modes and tools that do not advertise DSH's escalation schema are left to DSH core. Never widens permissions. Configurable tool list (default bash, pwsh, write, edit, run_code). Zero dependencies.

\!WARNING\! this removes the authentication step !WARNING! Exchanges the process launch token for the browser-session cookie, so a first visit needs no ?token=... in the URL.

Talk to DeepSeek Harness from Feishu / Lark. A chat maps to a DSH session, messages become turns and answers are pushed back as cards; questions, permission requests, model switches and conversation switches are interactive cards, and inbound files and images are downloaded into the workspace.

Pushes DSH session events to phone IM and lets you reply straight under that message, injecting the text back into the right session. Covers nine event kinds: task completion, execution error, execution blocked, manual abort, token limit reached, abnormal interruption, waiting for your answer, permission request, and waiting for plan confirmation. Channels are QQ single-chat bots and Feishu custom apps, both over WebSocket long connections — no public IP, domain or tunneling needed. Several bots can be configured at once, each subscribing to the sessions it cares about. Approvals and questions arrive with tappable buttons, and replies route home through three layers (button, quoted reply, explicit short-id prefix), falling back to the most recent intervention-needed notification and echoing which session it went to.

Bridges DeepSeek Harness sessions to Feishu/Lark, Telegram and DingTalk: each chat is bound to a resumable DSH session, replies stream back as cards, and a task-end card reports the model, token usage, step count and duration. Question and permission-approval cards are answerable from the chat, and a web settings pane configures the per-channel credentials.

A /review command that hands the current change set to a reviewer subagent pinned to the model you choose, with one continuing reviewer session per chat.

Source Control panel in the DSH Web left rail: search, switch and create branches with ahead/behind counts, a topo-order commit graph, and a click-to-expand preview of any commit showing its files (A/M/D), insertions and deletions, message, author and timestamp. An always-on footer dock above Settings carries the branch dropdown and recent commits and follows the open session; fetch and fast-forward pull are one button, and a git_worktree agent tool creates, lists and removes worktrees.

Task workspace convention: one folder per session, one PROGRESS.md per task overwritten on each update, and per-task git once the task runs long.

Session-scoped research evidence ledger with sources, linked claims, open questions, and explicit user review; provides a tool, slash command, and conversation panel, with selected-claim Markdown export that omits excerpts, review notes, and local paths by default; does not fetch sources or verify their truth.

Session-scoped delivery receipts for local artifacts: compare current file hashes with a recorded baseline, keep agent claims separate from explicit user acceptance, flag changed or unavailable files, and export a Markdown receipt through a tool, slash command, and conversation panel.

Ports jcode's auto-poke so an idle agent keeps working while its session still has incomplete todos.

Cross-session and cross-project long-term memory: a non-blocking silent sedimentation dispatch on turn/end writes into a local SQLite store (FTS5 trigram full-text index with insert/update/delete sync triggers) that later turns recall from; entries are scoped per project alongside a global tree, and the plugin ships its own embedded web dashboard (it starts the HTTP server itself, no separate process) for browsing, graphing and controlled deletion.

Adds Copy session ID and permanent deletion of a Conversation's log, projection cache and workspace references to the session row's ⋯ menu, behind a two-step confirm.

Per-task disk-space ledger in the sidebar with opt-in reclamation of unowned junk; session logs are never trimmed.