Plugins

Drive a DSH instance from another device: a host plugin opens a token-authenticated TCP port that a single-file Python CLI drives - listing and creating sessions, sending prompts with images, streaming replies, and switching models, permissions and workspaces.

Password SSH into a remote host: an ssh_remote tool with connect/exec/close/status over a persistent ControlMaster session, plus a floating browser terminal panel on a real PTY.

Apply configurable allow, deny, and approval rules to dsh tool calls, including shell command patterns.

Shows per-turn changes in cyclomatic complexity, cognitive complexity, and maximum nesting depth for TypeScript, Python, and Go in the Web UI, with expandable file and function summaries for code review.

Send dsh turn traces, LLM generations, tool spans, and subagent activity to Langfuse.

Read-only work report rebuilt from local session logs: tools used and how often, commands run, files read and written, whether tests passed, failures and their causes, token usage, and whether the task finished.

Exposes the Paper-gogo evidence-first paper workflow as native tools: all 18 phases and the seven G0-G6 gates become callable, gate results are normalised and advancement is refused while any gate fails, and claims are audited against the four evidence states SUPPORTED, INFERRED, VERIFY and MISSING. Ships the workflow text and 57 skills in its own directory, so it installs without a separate Paper-gogo package.

Music composition inside the conversation: the model writes a score against a bundled composing skill, and a play_score tool renders it as an inline card with a piano roll, Web Audio playback and WAV/JSON export.

Browser automation for DSH: the agent fills in forms, scrapes lists and works across tabs in real pages, using the logins you already have. It drives its own visible window on your desktop — minimise it and it keeps working without stealing focus — and a sign-in, CAPTCHA or native dialog stops the run and hands the page back to you: it never confirms on your behalf. Login state persists (own profile plus session-cookie re-injection). 23 Playwright tools (20 always on, 3 gated and off by default), with a URL allowlist, dialog suspension and a CDP method allowlist that are mechanism-level and pinned by tests.

Fixes the Windows workspace-open action: the shipped opener spawns explorer.exe with windowsHide, so the File Explorer window is created invisible and the click reports success without appearing.

Capture a Windows window to a WSL file, whole or cropped to a region or to a named UI element.

Targeted Windows input from WSL: invoke a UI Automation element by name, or send keys, clicks and mouse wheel to a chosen window.

Enumerate and control Windows top-level windows from WSL: activate, minimize, maximize, restore, move, resize, set always-on-top, close.

Windows UI Automation from WSL: enumerate top-level windows, read a bounded element tree, and wait for or trace the path to a named element.

Read Windows service state from WSL: list services, or inspect one by name with its dependencies, logon account and binary path.

Read-only Windows registry access from WSL, restricted to an allowlist of key prefixes; list a key's values or its child keys.

Windows power state from WSL: active power plan, all schemes, battery, sleep timeout and hibernation availability.

Windows host performance from WSL: CPU, memory, disk and top processes.

Read recent Windows event log entries from WSL, filtered by log name, level, provider and time window.

Windows security posture from WSL: Defender real-time state and signature age, recent detections, exclusions, and firewall profiles.

Windows desktop automation for dsh: 14 tools that enumerate apps and windows, capture window screenshots that still work when the window is covered by other windows, read the accessibility tree, and perform real input — click, type text (CJK included), press key combinations, scroll and drag. Loads the official computer-use runtime (@oai/sky) already installed on the machine, discovering it by enumerating vendor directories, so vendor upgrades that change hash directories do not break it.

Registers external databases and document corpora as callable model tools: a per-source access boundary, a credential reference ledger that never stores values, and a fetch ledger that keeps fingerprints and content hashes instead of payloads.

Mirror dsh session events to MySQL, PostgreSQL, SQLite, or SQL Server while retaining local session files.

Permanently delete a DSH session — not just archive it — cascading over its log directory, projection cache, workspace bookkeeping and child (subagent) sessions. Adds a settings-page panel that groups sessions by workspace with size, age and live/archived/child markers, supports filtering and batch deletion, and confirms each deletion inline below the row.