Plugins

Move a session to another folder, permanently delete it, or AI-rename it from the Web UI — by dragging a session row onto a folder title or from the session menu. Moving rewrites the session header cwd, relocates the persisted log and updates workspace accounting so history travels with it; deleting stops running agents and removes the log, projection-cache row and workspace accounting. The same three operations ship as agent tools: workbench_session_move, workbench_session_delete and workbench_session_rename_ai.

Project-less chats for dsh: a session created without a workspace gets its own directory under ~/Documents/DSH/<date>/chat-NN, reused whenever the chat is reopened and left in Ungrouped rather than made a sidebar project; the new-session hero gains a hover clear badge and a "work without a project" row, and a client-only sentinel workspace keeps that hero and its composer usable.

Runs /single-turn and /multi-turn answers in isolated sub-agents so results stay in the current chat and never enter the main model context.

Copies a session log path (or a paste-ready handoff block) and turns the multi-frame zstd log into a readable file another session can continue from.

Registers a configurable prompt variable so an agent preset whose persona uses complete: true can still receive an injected text block; the plugin ships no content of its own and reads the text from its config.

macOS only: holds a PreventUserIdleSystemSleep assertion (caffeinate -i -w <host pid>) while any DSH session runs, and releases it when the last one stops, so a long turn is not cut off by idle sleep. The display may still turn off. It keeps holding through the maintenance phase, where Agent.status reports idle and a long manual /compact runs, via the compaction/start and compaction/end events. It reconciles against ctx.agents.list() every 60s, so a session already running when the plugin is hot-reloaded is picked up at once instead of at the next turn boundary. A failed hold retries with exponential backoff capped at 60s and never gives up; release escalates from SIGTERM to SIGKILL after 2s, and -w lets caffeinate exit by itself if the host dies. No browser half — configured through the profile patch. 51 tests, including two that read pmset -g assertions on real hardware.

Runs git in the Host process so push, pull and fetch work inside the agent sandbox; exposes 8 agent tools (status, diff, log, stage, commit, push, fetch, pull) and 11 slash commands including /git-status, /git-commit, /git-tag and /git-name-set.

Declares a spec-driven development agent preset with a Chinese persona and four static Claude Code/Codex delegation tools for planning, implementation, review and knowledge distillation; roles are prompt-guided, not an automatic state machine.

Notes workspace in the right sidebar: a notes tree beside a live-preview Markdown editor with tabs, split panes, outline and trash, over plain .md files and a thin per-workspace index. Agents organize it through one `knowledge` tool; `embed` fences render an interactive HTML page in a sandboxed iframe (scripts run, no network).

Bounded self-managed long-term memory (Hermes-style MEMORY.md / USER.md with hard character limits and a safety scan), a review that runs after every turn and writes plain-language notes or refines an existing skill instead of adding a near-duplicate, a curator that finds and surgically repairs skills the loader would silently discard, cross-session search over past messages, and a learning card above the composer that appears only when there is news and asks before it deletes or rewords a memory.

Connects dsh to the GreatArrow.ai MCP server over Streamable HTTP, so the agent can search and save workspace memories, tasks and decisions shared with your other AI clients; a config-only bundle that reads the token from great-arrow.token in the dsh home, never from the environment.

Windows XP (Luna) skin for the DSH web GUI: beige Luna panels, gradient buttons, #7F9DB9 input fields, rounded blue scrollbars and a CSS-drawn Bliss-style desktop, plus a chime when a turn finishes and a different cue when the agent stops for approval.

Adeptus Mechanicus amber CRT skin for DeepSeek Harness, themed on Warhammer 40,000: a gear-and-skull emblem replaces the brand mark, the new-session slogan is written as a machine-cult verse, 14 theme tokens and 23 static palette entries are overridden, a monospace font stack covers the UI outside KaTeX math, scanlines and a screen vignette are added, and the agent-preset selector is 10% wider.

A read-only Cordis Inspect provider that lets an agent see the interface it is driving: outline() reports which UI regions the running shell actually rendered, with occupancy, geometry and current or past failure state; snapshot() returns one region's rendered node tree (tag, role, aria-label, own text, geometry, computed styles) addressed by slot key or CSS selector; failures() keeps a history of regions that failed to render and whether they recovered. Regions are addressed by the anchor the shell already writes for every slot, so it needs no region list and covers regions added later or contributed by other plugins. No UI, no tools, no dependencies, no network access.

Packaging pipeline for uni-app x projects: reads the local HBuilderX version, recommends and one-click installs the matching iOS / Android / HarmonyOS offline SDK (panel card with official download links), then drives the HBuilderX CLI to build, sign and upload apps from per-project config files; the engine also ships as list / doctor / check / build tools for the agent.

Packaging pipeline for uni-app x projects: reads the local HBuilderX version, recommends and one-click installs the matching iOS / Android / HarmonyOS offline SDK (panel card with official download links), then drives the HBuilderX CLI to build, sign and upload apps from per-project config files; the engine also ships as list / doctor / check / build tools for the agent.

基于 DeepSeek Harness 的 GitHub 插件静态安全审查预设，该项目代码由ai生成，主要框架由我搭建，通过“侦察员+审计员”双 Agent 协作、通过实验性ai自测攻防。主要功能有防死机上下文裁剪，有效防御投毒与提示词注入。包含21条安全红线、依赖树连坐排查与自动 YAML 校验，这是一名20岁非科班大学生的AI安全探索，欢迎大佬指导。本项目不能代替人工审计。请勿在生产环境或敏感凭证环境中使用。

Archived-sessions page for DeepSeek Harness: per-row and batch deletion that clears the session log, the projection cache and the archive index together, with a 30-day recycle bin, subagent-aware refusals and a per-row disk footprint.

Plugin marketplace inside DeepSeek Harness: a sidebar catalog tab plus agent tools (mp_search, mp_similar, mp_details, mp_install, mp_trending) backed by dsh-plugins-mp.com.

API regression and acceptance workbench: snapshot the responses of the endpoints you register before the agent edits the backend, rerun them all after the edit, and review a structured field-level diff (status codes, added and removed fields, numeric old → new values with the delta) beside the captured source diff, accepting each endpoint one by one before exporting a Markdown or single-file HTML report.

Plays a Windows system sound when the agent opens a question dialog, when a tool asks for permission, and when a conversation turn ends, plus a fish_beep tool to trigger a sound on demand. Custom audio folders are supported.

Registers the project-cross-migration skill for DSH: five-layer agent project migration (conversations, memory, persona, tools, environment) with entry validation, JSONL integrity checks and readable restore. 1,418-message real migration verified across three platforms; pure Python stdlib, MIT.

Delegates self-contained coding subtasks to the local Claude Code subscription through the official Agent SDK and returns the result to the host session. Nineteen per-call parameters control model, thinking effort, permission mode, allowed tools, turn count and budget cap; background jobs return a jobId immediately and stream incremental output; the result carries a session handle that can be passed back as resume to continue the same conversation; commands expected to run past ~20 seconds go through the built-in mcp__dsh__shell channel, which streams output line by line without consuming model context; a Claude Code monitor panel in the session lists jobs, renders the structured process, shows live output blocks and cancels a run; the delegation procedure ships as a runtime-registered skill, so installing the plugin installs the skill.