Plugins

Runs a chosen power action (shutdown / restart / hibernate / sleep / lock / logoff) once every Agent session and background job has gone idle: the plugin samples in-process sessions once per second, counts running sessions as always busy, checks running background jobs through a configurable option (considerJobs, on by default, shown with its live count in Settings), waits a confirm window and then a cancellable countdown, and shows a draggable bottom-right card with the current phase and remaining seconds; the enable toggle never survives a host restart, any newly started session or Cancel aborts the countdown, and if the agents service is unavailable the machine is treated as busy so nothing ever fires. Windows only (the built-in shutdown / rundll32 actions); every action except none degrades to none elsewhere.

Visible terminal panel that streams the agent's shell commands into an in-app terminal and lets the agent capture the terminal screen as text.

Adds a Teams sidebar dashboard that lists every Agent Teams chat with its roster and task roadmap, token spend in USD and RUB, work and online time, and an archive of older teams. Requires the Agent Teams plugin.

Pinned prompt shortcuts in a single row above the composer — one click replaces the draft with the saved text — plus a searchable panel for pinning, editing and deleting prompts, overflow collapsed into a "More" menu, storage in a Host-side JSON file, and a prompt_shortcuts agent tool that reads and writes the same file.

Composer enhancements: caches unsent drafts per workspace for new sessions and per Session id for existing ones, restoring them after switching away and dropping them once sent or cleared; adds an @plugin completion group that mentions an installed plugin so the agent receives that plugin's metadata as runtime context for the turn.

Full-page NetEase Cloud Music player for DSH: daily recommendations, playlist browsing by category, charts, new releases, search, playlist/album/artist pages, QR-code login, synced lyrics, queue and downloads, plus four agent tools for search, song URLs, lyrics and playlist tracks.

Give DeepSeek Harness its own persistent computer: a bundled microVM with shell, browser, live view and approval gates

DSH guard against self-repetition in streamed model output: detects a degeneration loop in reasoning or visible text, aborts the runaway turn and wakes the agent with a corrective notice.

DuckFleet: one flock of machines, one command. Add a machine once and its ACP delegation tool appears — drive one, several, or all of them from natural language. ／ 鸭群：一群机器，一声令下。添加一台机器即自动获得它的派活工具，用自然语言让某个／某几个／全部机器干活。

Operate the Chrome or Edge tab you are already in, through the unpacked extension: hover, coordinate clicks, drag, batched actions, whole-page screenshots, file upload, image addresses and switching between connected browsers — with approval-gated actions

A social deduction game played against your own model configurations. A table has N seats (six by default, one of them yours) and some of the rest are played by agents bound to different provider, model, temperature, system prompt and disguise settings; you interrogate them and cross-check the answers to work out which seats are not human. Seat identity and each agent model configuration stay hidden in the host state until a seat is judged, then the disguise parameters are revealed. Every round exports a per-seat conversation JSONL plus the judgment record, and the same seed with the same move script replays byte-identical, so runs with different models or disguise strengths can be diffed.

Adds a dshmarket entry to the DSH sidebar footer, sharing a row with the Agents-Anywhere remote-control entry and sitting to its right, and opens the market panel in an overlay.

Control Proxmox VE virtual machines from the conversation: 16 tools for the VM console over VNC (screenshots, mouse, keyboard, batched actions, Unicode text and clipboard) and for running commands and reading or writing files through the QEMU guest agent, all over one ssh connection to the node, so the host needs no X11 or Wayland.

Connects the DeepSeek Harness agent running on your own computer to the HarnessMate platform, so you can chat with it, exchange files and approve its tool calls from a phone or a browser.

Launch Android apps on a virtual display and drive them with screen reading, taps and swipes, leaving the main screen untouched.

Deterministic prompt-injection interception: tool results from file reads, repo searches and web fetches are scanned before they enter model context; high-severity findings quarantine-wrap or block, and credential-material files quarantine on the path alone.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Signed chain-of-custody for sessions: every watched tool result appends a hash-chained, ed25519-signed record, with commits bound into the chain — tampering with any line or truncating the tail fails deterministic replay verification.

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Writes a model-generated annotation into every DSH escalation approval prompt — what the command does, what the model intends, how risky it is and why, and what each choice means — and keeps a searchable history of past approvals at /dsh-approval/history, with a diagnostics page at /dsh-approval/diag.

Rewrites agent-issued delete commands (PowerShell `Remove-Item` and its aliases, Bash `rm`/`unlink`/`rmdir`, CMD `del`/`erase`/`rd`/`rmdir`) into system recycle-bin operations on Windows, Linux and macOS, best-effort checks scripts for the same operations before they run, and keeps no permanent-delete fallback.

Agent Studio for DSH Web: configure models, prompts, per-plugin tool bindings and Skills; trial-run with editable tool results and run history; preserve session capability snapshots; export standalone presets; draft Agents with a guided creator preset.

Installs a self-evolving development-constraints rule library, exposes it to the agent through a constraints tool and a once-per-session reminder, and audits AI token cost and context usage.

Opens the Obsidian vault a DSH session is working in, on the first human message — so your sync plugin (Nutstore sync, Obsidian Sync, Obsidian Git, …) starts running and the files the agent edits actually get synced. Skips a vault that is already open, and opens a new window behind the current one instead of stealing focus. Also serializes writers per vault — a second conversation's write is refused before it runs and queued until the holder is done, so a sync client cannot splice two conversations' edits together. Windows only.