Plugins

Reviews destructive shell commands with a model before they run, asks you to confirm or blocks them, and aborts a running command once it has deleted too many files.

In-process crash guard: takes over the fatal-error handlers that would exit DSH, names the responsible plugin from the stack, and disables only that row in the home patch layer, leaving the profile and the provider config inside it untouched. The crash page offers retry, keep-disabled or uninstall, and opens a temporary safe-mode session when no culprit can be named (CLI and web launches only).

Two DSH delegation presets — a fixed 8-seat crew, or up to 3 day-rate temps by convention — with call-time guards that refuse the other shape's delegation tools. The 8-seat preset additionally needs @deepseek-ai/dsh-experimental-agent-team-profile in the profile's dsh.profile.bundles; without it that preset has no team tools and degrades to solo work.

Adds a global document-routing prompt so PDFs, images, and Office files are read with the right tool.

Five DSH utilities in one plugin: drive existing sessions over QQ (needs an OneBot 11 implementation such as NapCat running alongside), ask another session a question with a context guard, pause the running turn, restart DSH on Windows with optional auto-resume (via the install-restart.ps1 scheduled task), and inject peak-hour token discipline.

DSH-elysia — shared Markdown memory for every DSH session: persona, requirements, corrections, lessons, methods, requests, sessions, a method library and ingested documents, mirrored to a second disk with version snapshots and a cross-process write lock; entries move between the main file and a searchable archive by hit frequency and repeated emphasis, and retrieval is keyword co-occurrence plus BM25. Ships a skills library (SKILL.md playbooks with optional guarded run.mjs execution), a sticker library that sends a fitting sticker at the right moment, and — new in 1.10 — Memory Packs: a bundled, opt-in character memory (packs/elysia: 61,903-char identity + 2,482-char persona distilled from 1,696 official voice lines and 112,175 dialogue lines). Packs are off by default, back up before writing, only touch identity/persona, and can be uninstalled to restore what was there.

Neutralizes lone UTF-16 surrogates in tool output before they reach the session log, preventing permanent 400 INVALID_REQUEST errors.

Recovers a DeepSeek Harness turn that ended with reasoning only, with no text and no tool call, by steering the same turn one more step. Structure-only detection, so it costs no extra model call.

DSH plugin: detect assistant turns that end with no visible text (zero-width placeholder) and re-prompt the model to write the answer; also injects a visible-closing-answer system prompt rule.

Sidebar overhaul for the dsh web UI: long-press drag to reorder the panel icon rail, one arrow to fold it away, whole-row height caps on both the panel list and the pinned section (30% of the rail, rounded down to whole rows), a pinned-session section that mirrors the shipped row's live status (spinner, waiting-for-reply, relative time), drag-to-reorder conversation view tabs, archived Sessions sunk to the bottom of each group newest-first, forked child Sessions following their parent into the pinned section, and a generic lift that moves any plugin's sidebar-footer entry up into the rail. Each subsystem starts behind its own guard, so one that fails returns null and the rest of the plugin still mounts.

Hides the dsh-pet desktop pet while a game or fullscreen app is in the foreground, then brings it back. Decides from three signals — a captionless window covering the whole monitor, the foreground process living in a game directory, and the system's full-screen notification state — and requires two consistent polls before acting, so alt-tabbing does not make the pet flicker. It only toggles window visibility; dsh-pet's configuration and install directory are never touched. A tray menu offers pause, restore now, and reload config. Windows only.

ClickHouse query tools for DSH, targeting ClickHouse alone: seven tools that list databases, tables and columns, sample rows, search columns by name, show EXPLAIN plans, and run single read-only SQL statements behind a client-side guard that rejects writes, multi-statement SQL, cross-table queries and external table functions. Single-table by default: the query parameter is used as given, with no built-in multi-step business flow. Zero runtime dependencies; it tells the model to backtick non-ASCII aliases instead of failing with a bare syntax error on older servers. With no configuration it connects to http://10.0.0.34:8123 as user default (database default); set url or host/port to point it at your own server.

Keeps discussion read-only and hands every repository code edit to the Codex CLI through a bundled MCP server; switches between the DSH model and the Claude Code CLI in the plugin form, with preflight checks and a write guard that blocks structured edits to repo files.

Private Windows DSH cold archives and guarded fresh-environment recovery. v0.7.3 classifies the known plugin Home directories `.dsh-paper-reader`, `dsham-move-backup` and `music` as captured plugin data, restores them as data-only, and resolves matching legacy pending-review entries during read-only planning; unknown or incomplete trees remain critical and blocking. Strict dependency, transaction and verify/commit gates remain. Verified ZIP integrity does not certify private business recovery.

Task-list staleness guard for DeepSeek Harness: when the model stops updating its todo list but keeps working, the guard appends a short reminder before the next step so the list gets written back to the real progress. / 任务清单陈旧度守卫：模型建了清单却忘记回写时，在下一步之前自动追加一

Two switches at the right of the Session header. The left one stops writes to your local git repository (git add, git commit); the right one stops uploads to a remote (git push, git remote, gh). Both start on, and switching a guard on never releases the o

DeepSeek Harness (DSH) master plugin — one package hosting MCviseron's DSH components as separate bundle entries: a time-based light/dark Appearance schedule, an Auto-review fix (shutdown preset guard + Chinese approval-reason translation), and a todo pla

Local-only memory guard for the DeepSeek Harness: host heap and session-log monitoring, oversized tool-argument interception, and dry-run by default session vacuum.

Content-catalog guard for WeChat mini-programs: validates catalog.json so every activity price is an integer amountFen, every template renders prices through money(), required fields / duplicate copy / image paths are checked, and the result is an issue list plus a unified diff that can be applied with patch -p1. 29 rules over five groups (catalog shape, required fields and uniqueness, amounts, rendering, images). Three fixes are automatic (legacy yuan amount, string Fen, absolute image path) and preserve the file's own indent, EOL and trailing newline; everything else is reported with a hint instead of being guessed. Dry-run by default; apply re-checks the written file so the report describes what remains. One implementation serves a tool, a conversation panel and a CLI with exit codes 0/1/2. Zero runtime dependencies, no model call, no network.

Deterministic tool-definition slimming for DeepSeek Harness: fewer repeated tokens per request, stabler prefix cache, plus a panel with provider-measured hit rate. · 压缩每次请求重复发送的工具定义，稳定前缀缓存，面板可调并可看实测命中率。

System-1 decision guard for DeepSeek Harness, 4 questions asked before tool calling (risk reversible, relevance, injection suspension) and allow/ask/reject action. Needs an API key for a system-one compatible provider; decision requests are sent there.

Turns corrections into permanent rules: explicit remember: triggers and auto-detected corrections pass a confirm bar (save globally / per project / edit / skip) and are written into a marked AGENTS.md section. New rules take effect in the current session and load natively in future ones; writes are deduplicated and version-guarded, and secret-looking content is refused.

DSH 自动审查返回格式兼容插件：严格校验 JSON、有限重试，保留合法拒绝。 / DSH auto-review response format compatibility plugin: strict JSON validation, bounded retries, and preservation of valid denials.

Watches download commands (git clone, package-manager installs, curl) and, when one overruns its budget, aborts it and writes a switch-source advisory into the tool result, so the agent retries from another mirror instead of waiting on a dead one. Timeouts are set per kind of work, and acting versus only reporting is switched per scene. A supervisor indicator reacts while something is stalled.