Plugins

Action cards: the agent proposes a concrete action (create a file, edit a value, run a command), you edit it and apply it in one click, and the Host executes it and reports back.

Use a GitHub Codespace directly as a DSH workspace: the agent reads, writes and runs commands inside the cloud Codespace.

DeepSeek Harness sandbox provider backed by MXC (Microsoft eXecution Containers): wraps ctx.sandbox.confine() argv as `wxc-exec --config-base64 <policy> -- <command>` on the BaseContainer backend. One runtime dependency (@microsoft/mxc-sdk, for the wxc-ex

Devin CLI inside DeepSeek Harness: a `devin` delegation tool, a /devin command, and a `devin` LLM provider route — all over the ctx.subprocess seam.

Market-gap radar for DSH plugin developers. Splits the catalog into categories and topics, tags every topic empty, thin, contested or crowded, and ranks the emptiest directions first, so you know what to build before writing it; it also browses the whole market with copy-ready install commands.

Command DeepSeek Harness from Telegram and Feishu (Lark): one live progress message per turn, approvals and questions as buttons, files and voice, delivery that survives outages and restarts, QR setup for Feishu, and per-person roles.

Jujutsu (jj) version-control panel in the DSH web GUI: a Jujutsu tab renders the jj log change graph with change details, changed files and file diffs, a revset input, and jj-native history edits (drag-to-rebase, split by file, describe, squash, abandon, undo, push); it reads jj directly rather than through git, and every command runs as an argv array through a whitelisted host service with confirmations, timeouts and output caps.

Runs the model's bash commands in a local shell chosen in Settings (Niubash, Git Bash, MSYS2, Cygwin, or any bash.exe on PATH) instead of rewriting them for PowerShell, and hides the pwsh tool on Windows.

Read-only terminal view tab in the conversation header: aggregates bash output, background jobs and persistent terminal sessions from the current session, subagents and Agent Team teammates into one filterable panel, with type and session-scope filters, command/output search, auto-collapse, follow-scroll and a maximize dialog; foreground bash shows final output only. Requires DeepSeek Harness 0.2.1-rc.2 or later (0.2.x).

Store SSH hosts in an AES-256-GCM vault and let the agent run commands on them by alias, with passwords handed to ssh through SSH_ASKPASS instead of the command line. Windows only.

Permission guard for DSH: four scopes with read/write/execute bits in the native permission menu, plus an optional Jev semantic classifier for bash commands.

Mobile-viewport preview tab for the right sidebar, with nine preset sizes covering phones, tablets and a laptop plus a custom width/height, one-click URL copy, and the page URL inserted into the composer through an @ button or the /url command.

Adds Meta's Muse Code subscription as a DSH model provider: the bundle declares the shipped Meta route under Settings > Models, syncs the account chat catalog (Muse Wonder included) into the model picker, and adds a Sign in card plus the /muse-login command that run DSH's built-in Meta device-code flow, keep the minted key renewed, and show a red or green credential dot. Needs an active Muse Code subscription and no Meta CLI.

Project rules for DSH: check commit messages, PR descriptions and versions before they ship, and ask before destructive or outward-facing commands.

Registers fifteen slash commands (/idea, /review, /poster, ...) that inject the matching research skill's SKILL.md as a user message, so installed skills run without a marketplace. The skills are not bundled and must already be under ~/.dsh/skills or ~/.agents/skills, otherwise commands report skill not found.

Drive the Tuanjie editor from DeepSeek Harness by connecting to the running editor's Codely bridge, creating and modifying GameObjects, editing component properties, running editor commands, and executing C# inside the editor process. Adapted from opdsh/unity-plugin for the Tuanjie Codely bridge.

Connects DeepSeek Harness to the hosted Local Commander MCP server at localcmd.app via mcp-remote with browser sign-in, to read files and Git, run the checks you approve and check local services on your Windows computers. Requires a Local Commander account and the paired agent running on the Windows PC.

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Safe detached DSH restart: /restart and /dsh-restart slash commands with native candidate styling plus a dsh_restart agent tool; a detached worker restarts DSH after 3 seconds without freezing the session, and Windows/macOS use a native Node helper built on the official appExit service.

Settings page for agent modes (presets): switch up to 15 capabilities per mode (commands, files or read-only files, web, subagents, and more) or individual plugin rows; edit each mode's system prompt with variable checks, a full preview, version history, optional live updates for running sessions, and an approval-gated mode_prompt chat tool; create modes from four starter templates or copies; merge built-in updates after a dsh upgrade while keeping your changes, and turn off rows that fail to load.

FIST commander task orchestration as an MCP server: seven-state task lifecycle, hierarchical decomposition, DAG scheduling, self-driving loops and Omega verification, all in one SQLite ledger. Ships a prebuilt CLI, so installing it needs no build step. Requires Node 24+.

On-screen test-progress HUD for DSH — a click-through panel drawn over the app under test, showing each step's expectation vs actual and whether the waiting human may take back the mouse and keyboard. Ships a universal prebuilt binary (arm64 + x86_64), so no Xcode Command Line Tools are needed; the panel itself requires macOS 14+.

Per-turn checkpoints of the whole workspace: every turn ends with a snapshot, the files it changed are listed under that turn in the chat, and any turn can be restored — files, the conversation, or both. Capture is a whole-tree scan rather than a hook on write/edit tools, so edits made by shell commands, external editors or git leave a record too. Restoring the conversation forks it from that turn instead of cutting the original, and a restore can itself be undone. History sits in a shadow git repository under DSH_HOME and never touches your project .git. Requires Git >= 2.20 and Node.js >= 20.

Replaces the harness identity block with its own prompt pack: three system-prompt sections (identity, rules, footer) in full, concise and dev presets, a per-turn rule card appended as a real user message, a remote announcement feed that falls back to a bundled copy offline, a GitHub Releases update check with an apply command, five `sunder_*` tools, and a read-only status section in Settings.