Plugins

Host-side dsh plugin that pairs a phone to a dsh instance through a self-hosted relay: one outbound connection carries the session list, streaming chat, approvals, attachments and file previews to a dedicated mobile web shell, and devices pair with a one-time QR link and can be revoked from a console inside the dsh web GUI.

LAN access for the harness process: writes the authenticated links for the harness port, one per local IPv4 address, to a token file and registers DSH_LAN_LINK in the shell environment, and can run a gateway on a fixed LAN port that holds the browser session on this machine, so devices need no token; forwarded requests get Host and Origin rewritten for the same-origin guard, and a host-claim marker is injected so the page renders as the full desktop UI instead of remote-visitor mode. Devices are admitted by CIDR, with optional Basic auth.

Phone access to the DSH web UI: LAN pairing plus remote access through your own tunnel command (e.g. cloudflared) or a fixed public URL, with automatic LAN-to-tunnel failover and dshlanpair:// deep links; the phone client is the bundled Android app (APK, Android 8+, sideloaded).

DSH host bundle for the ShyPie privacy-first workflow: extracts attached images and PDF/Office files locally before they enter the session log (requires poppler pdftotext/pdftoppm on PATH and a local OCR engine — Windows OCR on Windows, optionally tesseract; without them attachments are rejected, not forwarded); default filter mode keeps text local (optional local masking); blocks unmaskable media/BLOB; provides local privacy_extract, privacy_ocr, privacy_scan and privacy_rehydrate tools; denies read_image and binary/document reads outside allowPaths; and enforces a fail-closed llm/stream egress guard before DSH dispatches a model request (the default provider allowlist is the local Magpie gateway).

Blocks tool calls that create temporary files or directories in the workspace root, moves new root-level temp entries into tmp/_quarantine at turn end, and provides a graphical settings page.

Streams a running Godot game into a DSH sidebar panel as MJPEG by driving a native Godot process, so Forward+ projects and GDExtensions keep working. The panel can start, stop, capture and fullscreen the view and inject clicks, and the agent gets tools to read status, drive input and take screenshots.

WeCom smart bot over the official long connection (Bot ID + Secret, no public callback): persona, sender identity tags, three-layer memory with a forgetting curve, reminders, opt-in proactive chat, owner-only work mode guarded by tools.guard, auto-steer, image input and a wecomSoulBot host service; group chats answer when @-mentioned.

Left-sidebar code review panel for DeepSeek Harness. Reviews local diffs, commits, or GitHub pull requests with the configured model using the Codex review rubric and P0-P3 findings. GitHub PR review requires a logged-in `gh` CLI.

A five-stage engineering loop for agent-built projects — spec, build, verify, ship, learn — with one artifact and one gate per phase, so an agent always knows the single next action. Role policy, project templates and deployment sit behind explicit ports: swap the implementation without rewriting the loop. Its scaffold generator lays out the internal layers of a project — `init --layout {none,webapp,service,plugin} --stack {python,node,none}` — from nine layers sampled out of three unrelated production projects: entry docs, an OpenSpec plan face, a spec truth layer (INDEX, one file per domain, TESTING, CONSTITUTION), a wiki split into knowledge / progress / runbook, the six `.agents/` slots, server+web, scripts/deploy/config, tests+e2e and a gitignored out/. Non-none layouts also gate the directory contract and compile every source root. Ships a Python CLI (init/next/check/ship/new) plus a local command adapter and an SSH/systemd adapter with release directories, an atomic current/previous switch, a deploy lock, a commit-versioned JSON probe and automatic rollback on a failed probe; bootstrap and teardown provision and remove the unit and the reverse-proxy block idempotently and refuse to delete a root they did not create. Includes a runnable example workspace and a skill that keeps the agent on one phase at a time. Requires Python 3.10+ and PyYAML; remote deploys need SSH access, rsync, systemd and Caddy on the target.

External one-shot subagent provider using the local CodeBuddy CLI over ACP, with background result delivery and steering of running children.

Control tower tools: dispatch a task to a role agent, read its report, verify and accept or send it back. Requires the separate agent-control-tower Python CLI (tower; it is not on PyPI — install it with pip install -e from the same repo) on the DSH process's PATH plus a tower init-ed workspace; without it every tool call fails with ENOENT.

Injects the non-obvious operating rules of Agent Teams into the Lead session through one ordered system-prompt section: plan the roster before spawning, roster slots are never released, write scopes are advisory, and wait_agent short-circuits when no peer is running.

Editable PowerPoint authoring workflow (a DSH-skill adaptation of icip-cas/PPTAgent) with concise Chinese business styling, HTML slide rendering and PPTX export review. Linux/WSL or macOS (Apple Silicon only); install LibreOffice, Chinese fonts, Node.js 22+ and uv first, then run the one-time setup, which creates a uv-managed Python 3.12 environment and installs Playwright Chromium.

Agent application development evaluation skill (skill bundle) for DeepSeek Harness: offline/online suites judged from audit side effects, baseline diff with zero tolerance for safety regressions, and mutation tests proving the evaluators themselves catch regressions. Framework-agnostic - needs a callable chat endpoint and queryable tool-call records. DSH host compatibility is deliberately undeclared.

Plays MP4, M4V and MOV videos in the DSH right sidebar using the native video player, replacing the "this file type cannot be previewed" placeholder.

Provider-agnostic text-to-speech for DeepSeek Harness: synthesize speech to local audio files, manage preset, cloned and designed voices, configure providers in a bilingual settings card, and read assistant replies aloud with optional auto-read.

Video study toolkit for DeepSeek Harness: fetch a public Bilibili single part or YouTube video, sample every 3 seconds plus change-triggered frames, transcribe locally with faster-whisper, page through section grids, and render a 16:9 study deck. Windows only, and needs the DSH pwsh tool plus Python 3.12 x64 with Pillow and FFmpeg/FFprobe; fetching adds yt-dlp, transcription needs faster-whisper with your own local model files, and deck output needs python-pptx.

MiniCut tools for making multi-shot AI short films through the MiniCut CLI: status, next step, and run, with a price shown and the user's yes required before any paid job.

Windows-only sidebar panel that watches the CPU and IO of your AI desktop apps' process trees and shuts the machine down once all of them have been idle for a configurable time, with a cancellable countdown, a dry-run mode and an activity log; requires Python 3.10+.

Resident multi-connection download engine for DeepSeek Harness: five rdm_* agent tools plus a sidebar download panel, with resumable, SHA-256-verified and bandwidth-limited transfers that survive a kernel or DSH restart.

Adds an Artifact Space entry to the DSH sidebar that lists the final effective artifacts of each session, grouped by workspace and session, with an editor-style preview, image previews, search across workspaces and sessions, favorites, and provenance for every file.

DSH plugin: three MCP tool servers for DingTalk (via the dws CLI), Feishu (via lark-cli) and Feishu Project (via the official @lark-project/mcp), reusing the accounts dws and lark-cli are already logged in with, plus a Feishu Project MCP user token you paste in the panel; once the three connectors are connected, the default set is 140 tools (47 DingTalk, 45 Feishu, 48 Feishu Project) under the mcp__dingtalk__ / mcp__feishu__ / mcp__meego__ prefixes. A sidebar panel adds a connector wall with one-click connect (installs the CLI and walks through device-code login, or takes the Feishu Project token), custom MCP connections pasted as mcpServers JSON, enable/disable per connection, the write-tool switch, and a searchable catalog of the 1098 dws and 246 lark-cli commands.

Read-only Home Assistant panel for DeepSeek Harness: a full status overview, a compact right-sidebar card, a system-prompt environment block, one read-only ha_status tool, and optional browser notifications on Home Assistant down/recover. Configure the instance URL and token once; it does not control devices or change Home Assistant configuration.

Local media toolbox for DeepSeek Harness: converts files between 27 video, audio and image formats, trims clips, extracts audio or video tracks without re-encoding, exports embedded subtitles to .srt, compresses images with a before/after preview, reads and rewrites metadata, and encodes or decodes Base64 — all through the ffmpeg already installed on the machine, so files never leave it. The same engine is registered as a media_toolbox tool agents can call.