Plugins

Notes workspace in the right sidebar: a notes tree beside a live-preview Markdown editor with tabs, split panes, outline and trash, over plain .md files and a thin per-workspace index. Agents organize it through one `knowledge` tool; `embed` fences render an interactive HTML page in a sandboxed iframe (scripts run, no network).

Read, write, convert and retime a subtitle track across SRT, WebVTT and ASS, audit it for over-long or unreadable cues, and transcribe audio through a configured speech recogniser.

Generate QR codes from a from-scratch ISO/IEC 18004 encoder with no external tools, plan symbol version and error-correction headroom before producing anything, and decode an existing symbol back to text.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

Turn a raw recording into a published podcast with a local ffmpeg — detect chapter boundaries from silence, cut at those boundaries, normalise loudness to a broadcast target in two passes, and write an iTunes-compatible RSS feed whose enclosure byte lengths are measured from disk.

Extract text from an image or PDF, reading a born-digital text layer directly and falling through to a configured OCR engine for scans.

Convert Notion blocks and Markdown in both directions, with no API client and no external dependency. A Notion paragraph is an array of rich-text runs while Markdown says one string, so the two directions are a split and a merge rather than a pair of inverses — rich-text runs are cut at every annotation boundary one way and re-merged the other, with fences widened when the content already contains backticks. Reports every lossy step instead of swallowing it.

Turn a GitHub repository's raw counts into a defensible judgement — contributor concentration and bus factor with single-author files, merge time reported as a median beside the mean so an outlier is visible rather than hidden, and an issue backlog with pull requests and drafts filtered out. Reads the public REST API with no SDK, and never claims a truncated page is the whole answer.

Drive a local ffmpeg as six structured tools: probe a file's streams, transcode or trim it, pull evenly-spaced frames or the audio track, and compress video to a byte budget with two-pass encoding.

Pull invoice number, date, parties, tax IDs and the amount/tax/total triplet out of text, then verify that amount plus tax really equals the total and flag documents that do not reconcile.

Read, build and take apart EPUB 3 books with no external dependency — the ZIP reader/writer and the XML scanner are both built in. Inspect metadata, reading order and TOC for structural problems, assemble a book from chapters, or split one back into per-chapter HTML.

Open a page, wait for it the way it actually needs, extract the readable article, and take a screenshot. Playwright is optional: when it is absent the tools fall back to a static fetch and say so in the result, because a page whose JavaScript never ran means something different from one that rendered. Content is chosen by scoring candidate subtrees on prose density rather than on tag names, so a container loses to the article inside it instead of winning by containing more of the document.

Pack a directory into a deterministic tar, read an archive's contents without extracting it, unpack while refusing every member that could reach outside the destination, and verify what came out against what went in by SHA-256. No external dependency — the tar format is written and read in this plugin. Extraction is deliberately more permissive on reading than on writing, because a reader's job is to report what an archive says, while a writer must never emit what it cannot read back. A tar has no central index, so the walk tracks whether it reached the end-of-archive marker: without that, a half-file checksums fine and reads as complete.

Per-turn development progress memory: completed turns are classified into date-indexed Markdown files under doc/progress/ with a maintained INDEX.md, system-level bugs are kept in a cross-project SYSTEM_MEMORY.md and re-injected on error keywords, and a progress_read tool loads full documents on demand.

A read-only Cordis Inspect provider that lets an agent see the interface it is driving: outline() reports which UI regions the running shell actually rendered, with occupancy, geometry and current or past failure state; snapshot() returns one region's rendered node tree (tag, role, aria-label, own text, geometry, computed styles) addressed by slot key or CSS selector; failures() keeps a history of regions that failed to render and whether they recovered. Regions are addressed by the anchor the shell already writes for every slot, so it needs no region list and covers regions added later or contributed by other plugins. No UI, no tools, no dependencies, no network access.

Visual frontend revision workbench: point at a real page element, describe the change, send it into the current DSH session, then review fixed-viewport before/after screenshots (1280x800 and 390x844) beside a captured source diff, accepting each revision item by item. Revision records are kept per session under .dsh-revise/ and export as a single portable HTML report.

OpenCode CLI inside DeepSeek Harness: an `opencode` delegation tool, a /opencode command, and an `opencode` LLM provider route — all over the ctx.subprocess seam, with `opencode models` discovery.

Packaging pipeline for uni-app x projects: reads the local HBuilderX version, recommends and one-click installs the matching iOS / Android / HarmonyOS offline SDK (panel card with official download links), then drives the HBuilderX CLI to build, sign and upload apps from per-project config files; the engine also ships as list / doctor / check / build tools for the agent.

Packaging pipeline for uni-app x projects: reads the local HBuilderX version, recommends and one-click installs the matching iOS / Android / HarmonyOS offline SDK (panel card with official download links), then drives the HBuilderX CLI to build, sign and upload apps from per-project config files; the engine also ships as list / doctor / check / build tools for the agent.

Review code with Open Code Review: deterministic scope and rule resolution, judged by your own DSH model, no API key.

Ships a skill for verifying a change with the cheapest check that still yields a definite answer: an L0-L3 cost ladder from static checks to a single suite, condition polling with a timeout instead of fixed sleeps, assertions that can actually fail, and durations that are measured rather than remembered. The package also carries the two zero-dependency Node tools the skill calls - wait-until.mjs (poll a command, a file, or a port until it is ready) and measure-runtime.mjs (wall-clock timing for any command, plus a segmented timer for library use).

Plugin marketplace inside DeepSeek Harness: a sidebar catalog tab plus agent tools (mp_search, mp_similar, mp_details, mp_install, mp_trending) backed by dsh-plugins-mp.com.

Reverse-engineering workbench: bridges a local IDA Pro into DeepSeek Harness through @deepseek-ai/dsh-mcp-client, exposing the ida-pro-mcp toolset (decompile, xref, rename, comment) as mcp__ida__* tools. Auto-selects idalib headless mode (analyses a binary in-process, no IDA GUI) or GUI mode (connects to the IDA plugin RPC on port 13337). Adds re_check, re_open and re_status; the bundled MCP server is a zero-dependency stdio proxy usable from any MCP client.

Restarts the running DSH process from a model tool or a bottom-right GUI control, with launchd KeepAlive detection, a detached-supervisor fallback that aborts the exit when its handshake fails, a macOS desktop restart path, and JSONL restart records correlated by arm id, pid and profile so a restart stays distinguishable from unrelated log activity.