Plugins

Grok-compatible web search with retained source pagination, Context7 and Exa documentation lookup, bounded page extraction, site mapping, offline research planning, and read-only diagnostics.

SiYuan (思源笔记) notes integration: 17 siyuan_* host tools covering notebook and document listing, full-text search, SQL query, reading documents and blocks, creating and appending content, moving and renaming documents, daily notes and block attributes, plus a Web settings page for the SiYuan URL, API token and per-tool switches.

Adds a changed-file summary row to finished turns and reverts or reapplies the file changes of the latest turn in the session.

Shipped with cc-safety-net-style mechanical safety-net rules appended; supports both no-model and model-assisted security review, in modes such as 自动审查 (auto-review) and 机械直通 (mechanical pass-through). P0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.

Per-model system prompt injector for DeepSeek Harness: append custom prompt text to the END of the system prompt for locally configured models, matched by exact provider/model route or a provider-wide provider/* rule (both stack in order). A Settings page lists every configured provider and its models for per-route editing with instant effect, and rules persist to DSH_HOME so they survive restarts. Applies to main sessions, subagents, and workflow children alike.

Adobe Lightroom Classic as native dsh tools through the lightroom-py MCP server: read the catalog, apply develop settings and presets, export JPEG/TIFF/PSD/DNG, and write ratings, labels, keywords and IPTC — 15 tools driving the Lightroom Classic installed on the local machine, no cloud round-trip; the Python package is on PyPI and the Lightroom plugin installs with one command.

Host-side guard that lets the write tool only create new files: when the target already exists it denies the call before execution and tells the model to use edit instead, applied to all sessions.

Governed long-term memory for DeepSeek Harness: append-only evidence ledger with write guards, 7-tier authority claims, supersede chains, and budgeted pre-step injection with per-domain quotas.

Agent discipline guard for DeepSeek Harness: four gates enforced at the harness boundary — loop circuit-breaker, token-cost fuse, route-switch warning, plan approval — where prompt-level reminders can't reach, so an agent can no longer burn a weekly quota in minutes; one-click 🛡 chip, hot-reloadable thresholds, and presets from invisible-but-armored to warn-only.

Matches prompts to installed skills for automatic activation, applies skill-declared lifecycle hooks and tool policies, and manages GitHub-hosted skills from Settings or the skill_manager tool.

Compaction fix for NInfer-hosted qwen3.8-27b gateways: disables thinking on dsh context-compaction and session-title calls so xhigh reasoning stops burning the whole output budget; the same idea applies to other launch methods, this package targets NInfer only.

Desktop-grade companion: browser native notifications for user questions and approval interactions, screen capture model tool, multi-agent tiling grid view, and lightweight Tauri desktop shell.

Instance manager for DSH Web: a Mini Utility Dock panel that lists every local dsh web instance the machine can see (port, PID, uptime, live session count, resident memory, version), starts a new instance on an automatically picked free port in 3080-3129 or on a port you name, opens a row in a new tab, and stops one or all of them through that instance’s own graceful shutdown (appExit). Rows also show what each instance is serving, and read-only instance logs and session summaries are one click away. Where a peer is configured, the same panel lists and queries instances on other machines over a bearer-authenticated link. Every route is loopback-guarded, and a browser-facing action must additionally pass the host’s own browser authentication.

File-change monitor and code editor for the DSH Web UI. Agent edits appear beside your conversation as real-time line-by-line diffs, with a syntax-highlighted editor, one-click revert, change history, workspace switcher, and per-session isolation.

Electronic wooden fish in the bottom-right corner of the DSH web UI, a whale-girl sprite by default: tap the head to earn merit; it knocks by itself while the model is busy; per-session merit is stored locally, and the sprite can be swapped for custom art.

Bridges DeepSeek Harness lifecycle status, errors, and approval requests to a locally running OpenPets desktop companion.

Character consistency toolkit: personality profile cards, appearance-weight stats, and behavioral-drift detection for long-form fiction.

Whale-girl wallpaper background with a frosted semi-transparent app surface; customize image, opacity, and contain/cover from the Web settings, with remote image preflight and no-referrer loading.

Imports .vsix theme files made for Visual Studio Code and applies them to the DSH Web UI.

Theme studio for the DSH Web GUI: five built-in presets plus fully customizable light/dark palettes (accent, background, foreground, UI and code fonts, translucent sidebar, contrast), hot-swapped instantly and persisted in localStorage.

Use local Codex App Server as a model provider in DeepSeek Harness

Fail-closed Feishu (Lark) channel bridge: chat with a bot, get dsh agent turns back — with opt-in human-in-the-loop tool approval (Allow/Deny cards before every bash call, fail-closed timeout). Official-Python-SDK-only integration (exact-pinned); deny-by-default allowlist, webhook signature/timestamp/replay verification, per-chat sticky sessions; daily latest-SDK compatibility canary; bilingual docs.

Per-workspace completion ringtones plus attention sounds for approval, question, plan-review, goal-blocked, and task-failure events, with built-in synth, voice (TTS), and custom audio.

Bark push notifications to iPhone: turn completion, waiting-for-input, and approval events sent from the DSH Host.