Plugins

Select text in the chat transcript, right-click, and quote it into the composer. The quote travels as an atomic chip and renders as a collapsible card, while the model receives the full block with message role, turn, block index and character range.

Fluid streaming rendering and silky scrolling for DeepSeek Harness replies, including Markdown, code blocks, tables, and tool results.

DeepSeek peak/off-peak price clock for the DeepSeek Harness composer HUD.

A hard hat for AI coding: graded writes (L0 read-only / L1 workspace-only / L2 full) put privileged edits in a cage. Below the level it refuses to write and hands back a paste-ready block instead. Every path passes a raw-string traversal check plus realpath, so junction escapes are caught.

Reviews destructive shell commands with a model before they run, asks you to confirm or blocks them, and aborts a running command once it has deleted too many files.

Repairs domains blocked by SNI filtering on Windows from inside DSH, without any self-hosted server.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

Deliver-and-align mode: the agent hands over one block at a time through an align_deliver tool, each block lands on disk immediately so you can edit it in place, and the agent re-reads your version before continuing.

Searches the installed skill catalog on a trigger word, requires a use-or-skip decision for every candidate, and blocks other tools until all selected skills are loaded.

Windows only (binds user32.dll via koffi; inert on macOS/Linux). Remembers the DeepSeek Harness main window's size AND position: restores both on every launch (re-asserted during a grace period to beat the default layout), saves stable manual moves/resizes as the new lock, never records minimized/maximized/fullscreen states, never adopts the default rect DSH itself places the window at (so the app's own layout resets can never poison the lock), and stays on-screen when monitors change. Compatible with DSH 0.2.1-rc.3+.

API contract studio for DeepSeek Harness: decide the seven things that must be locked before coding, author and review OpenAPI, classify breaking changes by how they actually break clients, and settle error shapes, versioning and deprecation — six playbooks plus a router.

Rejects foreground waiting in DSH agents: waiting commands (sleep, wait, tail -f, watch, ping without -c, infinite loops), blocking wait tools (wait_agent, job_output with wait: true), progress polling (the same check command repeated within a window) and commands that need human input/confirmation (sudo without -n, ssh without BatchMode, login flows, interactive editors, docker -it) are refused with an actionable retry to run in the background or end the turn. Configurable budget and polling window, message language follows the system (zh/en), zero runtime dependencies.

Reads the local NTQQ (QQ 9.9.x) message database on Windows and Linux and exports group and private chat history to txt, csv, json, md, html or sqlite. Ships sixteen model tools: qqnt_status and qqnt_doctor for environment and blocker checks, qqnt_extract_key, qqnt_index to build or inspect the sidecar index, qqnt_list_groups, qqnt_list_chats, qqnt_search, qqnt_stats for totals and monthly counts, qqnt_export_group, qqnt_export_chat and qqnt_export_batch (a chat can be named the way the user says it, and ambiguity refuses instead of guessing), qqnt_jobs for OCR, speech-to-text, chunking and model downloads, qqnt_media for a chat's downloaded images, qqnt_storage for disk usage and allow-listed cleanup, and qqnt_ask plus qqnt_recall for retrieval with citations. The local web UI on 127.0.0.1:46728 adds an incremental SQLite index, six views (chats, export, statistics, ask, settings, models), a task panel, a single-pane layout on narrow screens, sender redaction, media bundling, per-day splitting, export presets and AES-256 password ZIPs; OCR, speech and embedding components install into the plugin's own virtualenv on demand. Needs python3 with sqlcipher3 (the settings page can create a private virtualenv), and the database key is read from the running, logged-in QQ client.

Long-term memory kept as blocks: one event per block, written to a local append-only event log with a block view and derived indexes, so a full history stays recoverable while only the matching blocks reach the context. The model saves entries with memory_remember and pulls the relevant few with memory_recall, plus one automatic recall pass before each step. Data stays in ~/.beme; no external service and no API key.

Shared Markdown memory for every DSH session: persona, requirements, corrections, lessons, methods, requests, sessions, a method library and ingested documents, mirrored to a second disk with version snapshots and a cross-process write lock; entries move between the main file and a searchable archive by hit frequency and repeated emphasis, and retrieval is keyword co-occurrence plus BM25. Also ships a skills library (SKILL.md playbooks with optional guarded run.mjs execution) and a sticker library: users import their own images, the plugin classifies them by mood, and it automatically sends a fitting sticker at the right moment in the conversation to express emotion.

Six-tier memory plugin that captures each conversation turn, injects a stable memory block as a user snapshot, and compacts the host's own history into a single placeholder without calling a model.

Renders a ui-blocks file named by a ::dsh-ui <name> \[res=WxH]:: line in a sandboxed canvas, and turns an element token into a composer chip that serializes back to the token verbatim.

Embeds charts, comparison tables, and interactive blocks between answer paragraphs, with locally saved state and revision history.

A draggable floating clock for the DSH Web GUI with analog and digital faces, a focus timer, four themes, and persistent placement.

Find text inside the open conversation with Ctrl+F: matches are highlighted in the message text, previous/next step through them, clicking the count lists the matches and jumps to any of them, and the count grows while the scan runs. No collapsed block is opened and the reading position does not move.

Deterministic auto-dispatch for native DeepSeek Harness Agent Teams: wakes idle members when a task becomes ready, and turns advisory write scopes into an effective soft lock.

A per-command sandbox allow-list for the bash tool: a rule names a CLI and the writable roots it gets, so allow-listed programs such as lark-cli and gh run inside the kernel sandbox with the workspace plus those roots appended. Unlike plugins that answer the approval for you or that widen the writable set for every command, the grant here is scoped to the matched command, the workspace stays writable, and other commands keep their exact behaviour. Matching is by write footprint rather than by command string, so write-neutral pipes like `2>&1 | tail -N` still match; rules are edited from a Settings page or the Plugins row. Overlays cover Seatbelt, bubblewrap and Landlock; on Windows the writable root is swapped for $HOME instead.

A draggable floating window with three tabs — meals, water, standing. It picks breakfast, lunch and dinner at random (three tries a day, no repeats, editable food lists), counts water cups and standing breaks, and reminds you with a distinct 3-second chime per tab. Collapses to a 32px ball.