Plugins

OpenDesign (AMR) quota readout: the Design Plan 5-hour and 7-day windows, wallet balance and days-to-exhaust in a composer pill, read over a local controlKey or a browser session. The local source reads the controlKey from ~/.amr/config.json; the browser source opens a temporary Chrome window, and after you log in collects the session cookie over CDP into DSH's credential store.

Adds a live system dashboard with per-core CPU, memory, GPU, processes, disk usage and a STOP action for ending processes, plus per-process energy on macOS, exposed as a browser page, a GUI panel and a `systemInfo` service other plugins can inject. macOS is the main platform and Linux is best-effort. The dashboard page and its read-only JSON (process list with users, disks, logged-in users) are served with no login check; publicDashboard: false only refuses non-loopback peers. STOP accepts loopback requests only and sends SIGTERM, then SIGKILL after a grace period, to any process your account may signal except pid 1, the DSH host and its parent.

Sorchron Study Board, a study workspace plugin with pomodoro timer, task management and activity heatmap for DSH harness. Records stay in the browser's localStorage (JSON export for backup) and the plugin makes no network requests.

Infinite-canvas mind map in the sidebar: grow nodes with Tab, tidy a branch into a tree, ask the assistant to expand a node into child ideas, and export to Markdown, OPML, FreeMind, JSON or PNG.

Native Google Antigravity agents loader and subagent orchestration engine with model selection and Web UI settings integration. Loads agent definitions from ~/.agents/agents and the workspace's .agents/agents; the selected main agent's instructions go into the system prompt, and a matching agent's instructions are prepended to DSH's own subagent and spawn_teammate calls. Settings are written to .agents/agents/settings.json in the workspace.

DSH plugin: persistent local memory powered by @rsrsai/memlite (respire-aligned prompt/recall/wrap-up logic; JSONL causal tree, git sync, data-compatible with Rust memlite; four-view memory browser with conditional writes, receipts and status).

深鲸诉讼可视化：把案情与证据 JSON 画成时间轴、法律关系图、证据矩阵、争点对照，输出可打印的单文件 HTML。

Daily auto check-in for MiniMax Code, WPS Lingxi, Baidu DuMate, AStudio, Qoder, Trae, Doubao, Huawei CodeArts and Tencent WorkBuddy: reads each app's own local credentials so nothing has to be pasted, supports multiple accounts per service, and lets you add any other site yourself by importing a JSON definition the agent wrote for it. Streak tracking, per-service schedules, collapsible sidebar cards. The Doubao service can also read its login cookies from the local Chrome, Edge, Brave or Doubao app cookie store (Doubao hosts only), and a custom service sends requests to whatever http(s) URL its JSON names.

A pet ledger whose achievements come only from real DeepSeek Harness session events: tool-failure streaks, long completed turns, red-to-green test runs, and commit+push success. Every achievement expands into the session id and the actual tool-call evidence (command, result, duration); demo cards are a separate in-memory list with a visible 演示 watermark and never count or persist. Daily quests are generated from the day’s real active time and command types, then frozen. Host + client halves, zero runtime dependencies, 70 tests, local JSON only.

Forces every active session into the full-access permission preset (this disables the approval gate) and appends approval, sandbox and tool-call events to a local JSONL for after-the-fact review. Audit path is configurable; it never uploads anything.

Grades every PowerShell command an agent is about to run before it runs: deletion, overwrite, network download and credential access are four required classes, plus dynamic execution, system and privilege changes. Verdicts are a pure deterministic rule function — no model call, no network, sub-millisecond — with two escalation rules (download+execute, credential+exfiltrate) that jump straight to high. High risk stops the tool call for a second confirmation (in-panel queue or the native approval), deny or timeout means it never runs; medium is logged but never blocked. Every command and its verdict, including the redacted command text, is appended to a local JSONL audit log. Quoted danger strings are treated as data, -WhatIf is respected, -EncodedCommand is decoded and analysed again. Host + client halves, zero runtime dependencies, 55 rules, 136 tests.

Storage and dependency inspector for the DSH Web UI: scans disk use per workspace, session and file class, lists the largest folders and files, and deletes the build, dependency, archived-session and cache folders you select behind a path allow-list (cleanup candidates also include top-level Desktop folders); a read-only second tab compares package.json, .nvmrc, .node-version and npm lockfiles across workspaces and flags version and Node-major drift.

Read-only Ascend NPU fleet monitor for DeepSeek Harness: environments are read from envs.json, npu-smi is collected locally or over SSH with one connection per environment, and the sidebar shows each environment's idle/partial/busy occupancy, running processes, per-card and per-chip details, five-minute background polling, manual refresh, and a field-by-field configuration modal. It never starts or stops services or containers and never writes to the remote host.

Runs project checks described in a dsh-checkup.json file (files, syntax, JSON, HTTP health, asset counts, and any node/npm scripts or commands you list) and falls back to auto-detected defaults when no profile exists.

Checks a DSH profile manifest for JSON errors and dependency/bundle/patch mismatches, reads recent startup crash logs (Windows DSH Desktop only), and can back up or roll back the manifest files.

Daily briefing plugin for DeepSeek Harness that collects watched X accounts, RSS/Atom/JSON/ICS feeds and arbitrary pages, YouTube and Bilibili updates, Steam news, Minecraft server and status pages, mailboxes (IMAP) and calendars into persona-styled rows. YouTube and Bilibili videos are read past the title: the plugin fetches each video's real comment count, picks the most-discussed one and puts it on top as a hot-takes card with its highest-liked comments. Built for Windows 10/11: it registers a daily Windows scheduled task (enabled by default, 07:30) that opens the briefing in an Edge/Chrome app window, stores mailbox and cookie credentials with Windows DPAPI, and by default sends item titles (including mail subjects) to the DSH model to polish the wording (set ai.polish to off in config.json to disable).

Per-workspace DSH conversation status in the Windows system tray, plus native DeepSeek Harness notifications when a conversation needs approval, a choice or free-text input, completes, or fails. Windows 10/11 and DSH Desktop 0.2.3-rc.1+ only. The tray menu and notifications work only after a one-time desktop bridge install (user-level, reversible): it repoints the DSH shortcut at a hidden launcher that injects a hook into DSH's Electron main process through a short-lived loopback Node inspector; without the bridge the plugin only writes state.json. Idle conversations stay out of the tray by default; nine live options are editable in a Tray follower settings page.

Corner card that watches Tibo (@thsottiaux) on X, shows new posts and replies with a Chinese translation, and marks reset-related posts; extra JSON sources can be added. Reads the third-party tiboreset.com text mirror rather than X itself (a few minutes behind, text only); translation goes through the host translation service, which may send post text to a public provider unless translate is set to false.

Learning-plan tracker with local progress, notes and JSON progress backup. Ships one original six-node example roadmap; adding your own roadmaps means editing roadmaps.ts and rebuilding the plugin. Needs the dsh-studio-projects runtime and the dsh-worktable container from 1997liuyh-boop/dsh-studio-library installed first.

A document generation plugin for DeepSeek Harness: JSON is the core output, structurally managing document content; unifies parameter definition and inheritance, material extraction, validation checking, and scoring across document generation, keeping output on-target, fast, and token-efficient; ships a built-in COSMIC scenario pack as a worked example plus a built-in guide for authoring new scenario packs.

Turns a repository's README.md and docs/*.png into a publishable market card: bilingual title and tagline, install command, a screenshot wall, capabilities, and an explicit limitations section — as self-contained HTML, a 2400px 2x PNG, a paste-ready card.md, and provenance-rich card.json. It refuses to invent copy: missing English goes into a missing-fields list, --strict exits 2, and a normal run stamps DRAFT. PNG rendering uses the local Chrome or Edge headlessly; without one the HTML is still written and the CLI exits 3. 48 node --test tests, zero runtime dependencies.

Per-project tool gating for the harness: before each step, the session looks for `.dsh/tool-gate.json` in its working directory and up to 32 parents, then filters the tool set handed to the model — allow or deny lists with `prefix*` wildcards, `off` when no rule file is found. A single `tool_gate_status` tool reports the active mode, rule file, and which tools were hidden.

Connects Penpot to DSH across two independent channels with 9 tools: 5 MCP tools (execute_code, high_level_overview, api_info, export_shape, import_image), 2 browser-free REST tools (penpot_read and penpot_write to create files, pages and shapes or edit attributes without an open tab), plus penpot_status and penpot_control; supports official SaaS, local and self-hosted endpoints with auto-detection and config migration from DSH, Codex, Claude, Cursor, Gemini and .mcp.json, an isolated Chromium launcher, and a five-tab control panel.

Controls an existing aria2 JSON-RPC service from DSH with four tools: submit a single HTTP/HTTPS link (optional directory, filename, checksum, per-task proxy), read one task, list tasks, and pause/resume/cancel. A task it submitted that finishes or fails reports back to the session that started it. A settings page holds host, port, secret and timeout, with a connection test that does not save or create anything; it never bundles, starts or manages aria2 itself. Creating and controlling downloads only works in full-access mode (not plan mode).