Plugins

Control surface for the dsh-lan-gate LAN gateway: a button beside Settings that shows whether the gateway is running and how many phones or tablets are waiting for approval, opens the loopback-only approval page in one click instead of typing its URL, and starts the gateway through its scheduled task first when it is not running. Not rendered on phone or tablet surfaces.

Move a session to another folder, permanently delete it, or AI-rename it from the Web UI — by dragging a session row onto a folder title or from the session menu. Moving rewrites the session header cwd, relocates the persisted log and updates workspace accounting so history travels with it; deleting stops running agents and removes the log, projection-cache row and workspace accounting. The same three operations ship as agent tools: workbench_session_move, workbench_session_delete and workbench_session_rename_ai.

Adds a red "Delete session" row beneath Archive in the sidebar session menu and permanently deletes that one session - its stored logs and its workspace account entry, written through the workspace registry itself. A second click confirms and the row leaves the list immediately; sessions opened this run are disposed from memory first so nothing resurrects them, and a session running work shows one extra warning whose click stops the task before deleting.

macOS only: holds a PreventUserIdleSystemSleep assertion (caffeinate -i -w <host pid>) while any DSH session runs, and releases it when the last one stops, so a long turn is not cut off by idle sleep. The display may still turn off. It keeps holding through the maintenance phase, where Agent.status reports idle and a long manual /compact runs, via the compaction/start and compaction/end events. It reconciles against ctx.agents.list() every 60s, so a session already running when the plugin is hot-reloaded is picked up at once instead of at the next turn boundary. A failed hold retries with exponential backoff capped at 60s and never gives up; release escalates from SIGTERM to SIGKILL after 2s, and -w lets caffeinate exit by itself if the host dies. No browser half — configured through the profile patch. 51 tests, including two that read pmset -g assertions on real hardware.

A read-only Cordis Inspect provider that lets an agent see the interface it is driving: outline() reports which UI regions the running shell actually rendered, with occupancy, geometry and current or past failure state; snapshot() returns one region's rendered node tree (tag, role, aria-label, own text, geometry, computed styles) addressed by slot key or CSS selector; failures() keeps a history of regions that failed to render and whether they recovered. Regions are addressed by the anchor the shell already writes for every slot, so it needs no region list and covers regions added later or contributed by other plugins. No UI, no tools, no dependencies, no network access.

Shows a spinner on a sidebar workspace row while any of its sessions are running, and a short-lived finished mark after they stop.

Prices tokens with the official model price table, keeps the per-session and global running cost beside the composer context meter, mirrors your DeepSeek account balance in the sidebar, blocks a turn once this period passes your own global ceiling (clamped to that balance) or a per-session ceiling (each session sets its own, independently), and resets the billing baseline per session or globally — the two are independent, so resetting one never resets the other — so the period goes back to zero while history only rolls into the lifetime total.

Restarts the running DSH process from a model tool or a bottom-right GUI control, with launchd KeepAlive detection, a detached-supervisor fallback that aborts the exit when its handshake fails, a macOS desktop restart path, and JSONL restart records correlated by arm id, pid and profile so a restart stays distinguishable from unrelated log activity.

DSH plugin: hands a long session over to a fresh session in the same workspace on /handoff or at a token threshold, carrying the preset, model, permissions and plan mode across; the brief is written by the session's own model and the switch waits for a step boundary instead of interrupting running work.

Plugin compatibility vet for dsh that compares installed plugins peerDependencies against the running dsh version to flag which ones the startup preflight will refuse to load, prints copy-pasteable fix commands, and offers a top-of-page banner in dsh web to isolate, uninstall or upgrade them, with an automatic backup before the change and rollback if the re-check fails.

Local decision-layer plugin for DSH: a fail-closed command approval gate and ask/gate tools backed by a 144.3M on-device model. Needs a separate local decision service: `pip install phocinae-server`, then download the ~330 MB weights and keep the service running; without it the tool returns `PHOCINAE_SERVICE_UNAVAILABLE`.

Holds a drafted message until the main agent is idle, no subagent is running and no background job is live, then sends it. Each hold takes an optional send time and a choice to queue, wait or steer, and lives on the host with its attachments so a restart does not lose it.

2005-era instant-messenger skin for the DeepSeek Harness client: right-angle 1px window chrome, a blue-gradient title bar, SimSun for the Chinese UI, a buddy-group sidebar with an avatar card and editable signature, per-message name/time headers, and three switchable intensities. All artwork is original SVG; the reskinned toolbar also carries a cross-session notepad, a running-session panel, and an 8-ball game, minesweeper, a token garden and heads-up poker that a built-in focus mode silences.

A newspaper-style front page for a session you left running, as a Conversation View tab beside Chat and Trajectory: a per-turn timeline (duration, steps, tools, tokens, outcome), file churn counted per file, where the wall clock went and how much of it was the model rather than tools, which single turn ate the spend, failures nobody retried quoted with their failing command, and a context-pressure gauge measured against the routed model's own declared capacity. The briefing is folded from the durable session log and never generated by a model, so it costs no tokens, cannot hallucinate, and is byte-identical for the same log and clock; it appends nothing to the session and reaches no model, and it reports a pending approval without ever answering it. Pages are offered only when they have content, and the tab refreshes itself on turn settle and on a two-speed poll backed by a metadata-only tail probe.

Loopback-only ACP door for DeepSeek Harness: connect VS Code and other local clients to a running kernel over the local loopback address, sharing its models, tools, memory and sessions. Browse history, change permission modes and call capabilities registered by DSH plugins.

Live progress for long-running DSH tasks: a script appends JSON lines to a per-session progress file, the Web UI draws them in a floating overlay and a right-sidebar tab that also lists background jobs which reported nothing, and `dsh-progress run -- <cmd>` wraps a command that cannot report for itself.

Live progress for long-running background jobs in the DSH web GUI: a draggable floating ball in the session that owns the job, expanding into a panel with done/total, speed and ETA.

Zen Mode view tab and foreground time tracker for DeepSeek Harness: while the agent works, a calm conversation view shows running/done status, your latest user message, live activity hints and the final AI reply in markdown with one-line turn stats, plus screen-watching (focus) time tracking with daily/weekly Zen scores, a chat-hide toggle that hides tool calls and reasoning rows, auto enter/exit Zen on task start/complete, an Alt+Z shortcut and a Zen settings panel — pure client-side, stored in localStorage, no network.

A full-page console panel opened from the sidebar, with eight tabs: an overview; a session list read from the sessions service (title, directory, running state, updated time, with filters); installed bundles and Loader entries from pluginInventory and pluginManager, with per-bundle enable switches; a plugin market listing public topic:dsh-plugin repositories from the GitHub search API; a model and provider editor that writes the llm-pi-ai settings namespace through remote.settings.mutate (switch a session model, add or edit providers and their model lists, and store API keys via remote.credentials, merging over the stored profile so fields the form does not expose survive an edit); MCP and skills tabs; and a usage tab that reads the host's loopback /api/dsh-usage/overview document. Services are declared through ctx.inject, so a deployment that omits one mounts without the console rather than crashing.

Always-on-top lamp board for macOS: one lamp per agent, one row per session, collapsing to one lamp per running task; a lamp turns blue and blinks while an approval or a question is waiting on you, and the root agent finishing raises a system notification.

Adds a Restart page to the DSH Web settings panel. The page shows the PID, port, start time and uptime of the running host and restarts it through a detached helper that waits until the port stops answering before replaying the same launch invocation; the page reloads itself once the replacement host answers with a new boot id.

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Inject steering or correction into a running session while the model is thinking, or cancel the current turn, from a floating browser panel.

Manages CSS and JS snippets for the DSH web GUI, injecting enabled CSS as style elements and running enabled JS in the page, with a sidebar-footer quick toggle, its own page in the Settings navigation, and optional folder or Gist sync.