Plugins

Composer and sidebar helpers in one plugin, each switchable in Settings: a git Changes panel (uncommitted / unstaged / staged / branch diffs), ↑/↓ input history, Shift+Tab /plan toggle, one-click ▶ Continue after a stopped or failed turn, drag-and-drop queue reordering, Copy deeplink, Auto Review "Allow for this chat", project status markers with active projects first, background notifications, 11 extra UI languages and automatic updates from GitHub releases through the plugin manager.

Native right-sidebar Markdown preview with Mermaid diagrams, KaTeX math, GFM tables and syntax highlighting — rendering engine bundled, fully offline.

Translates DSH's private remote protocol into a versioned REST API (chat, sessions, files, devices) for trusted clients such as the Android app dsh-companion, plus a Phone-settings panel with seven inline cards inside the DSH WebUI settings.

Per-provider (account) proxy routing for DSH. SOCKS5/HTTP proxy pool with account-level routing based on API keys. Supports forced direct connections and hot-swapping built-in web tools proxies. Managed via a graphical settings page in DSH.

DeepSeek Harness approval guardian: a reviewer model decides permission requests before they reach you, with a System One decision-API backend (TypeSafe Jev, SiliconFlow, self-hosted Laya), a configurable low-confidence policy and an allow-rule whitelist.

Use a directory on an SSH host as a DSH workspace — hosts management, directory browser, five agent tools.

Three-tier deny/ask/auto gate for the computer-use (cua-driver) tool family: each tool category gets one segmented control in Settings, and an allow list or deny list overrides the tiers per tool name.

Reads and writes a self-hosted Bitwarden/Vaultwarden vault from any session: nine bitwarden_* tools, real-time WebSocket sync with a polling fallback, and a settings panel with readonly, ask and auto write modes.

Multi-cluster Kubernetes management panel powered by local kubectl, with resource filtering, YAML editing, live Pod logs, interactive container terminals, workload restart/scaling, and DSH theme synchronization; accessible from the sidebar or session view. Requires DSH 0.2.0-rc.2.

Local visual React and Tailwind designer with project-scoped file tools; documented for DSH 0.1.5-rc.2.

Connects one existing DSH session to QQ through OneBot/NapCat without starting a new session, and uses a fail-closed whitelist plus @-mention, nickname and configurable-probability wake rules to decide which messages reach the model.

Notifies you about 11 configurable DSH agent events (task completion, questions, denied approvals, background subagents/goals/jobs, team tasks, context compaction, triggered schedules, plugin startup and permission changes) as browser Web Notifications through a bundled service worker, falling back to Windows toast or Linux D-Bus, with three silence levels and click-to-open.

Connects a DSH Host to Slack and Feishu using your own bot applications.

Synchronizes DeepSeek Harness third-party plugin lists through S3-compatible storage with diff preview, local snapshots, rollback, and optional LLM provider configuration sync.

Dependency-ordered multi-agent team runner for DeepSeek Harness: define roles with their own model, persona and tools, run a node graph with an independent review gate and bounded rework, and watch progress in the web UI.

Reads the session event stream, with no extra model calls, and turns corrections, failures and fixes into pending lesson candidates. Every candidate is judged against written criteria and carries the reason it passed or was refused; only confirmation writes a skill, and only through the single validated writer `learn_skill_manage`. An idle curator marks unused skills stale and archives them by moving rather than deleting, and spares any skill that is still being loaded. Five tools: `learn`, `learn_review`, `learn_curator`, `learn_skill_manage`, `learn_skills`. Registers a prompt section stating the criteria, and a tool guard that refuses direct edits to skill files so the writer cannot be bypassed.

Realtime WebRTC voice using Codex OAuth, with task delegation to a DSH session.

Correct-encoding command runner and mojibake recovery: encoding_run spawns a child process and decodes its raw output bytes (UTF-8/UTF-16LE/GBK auto-detected or forced), and encoding_decode recovers garbled text back to correct Unicode.

9router-backed web search + fetch providers for DeepSeek Harness (ctx.web). Wires the native web_search/web_fetch tools to 9router's /v1/search and /v1/web/fetch endpoints.

Bridges DSH to a local MemVault store: core memory blocks injected into the system prompt, finished turns extracted through MemVault's own pipeline, and a panel to browse, trace, review and replay what was stored.

Adds subscription OAuth and provider Plan API-key logins through Pi adapters, using a DSH-owned credential store.

Nai milk-frog mascot appearance layer for the DeepSeek Harness web GUI: wears the bundled milk-frog artwork as the GUI background (surface-token fade with opacity, blur, scrim and position controls), seats the matching square avatar as the sidebar and conversation brand mark, and edits it all from a Settings section; the host serves the artwork and config locally under /api/nai, and the config lives at $DSH_HOME/nai.json.

DeepSeek account wallet balance and the current peak or off-peak billing period, in a fixed status region at the sidebar foot, with a manual refresh and an official top-up link.

Desktop-only token statistics, provider quotas, custom quota queries, optional WorkBuddy credits and an advanced model selector.