Plugins

Grades every PowerShell command an agent is about to run before it runs: deletion, overwrite, network download and credential access are four required classes, plus dynamic execution, system and privilege changes. Verdicts are a pure deterministic rule function — no model call, no network, sub-millisecond — with two escalation rules (download+execute, credential+exfiltrate) that jump straight to high. High risk stops the tool call for a second confirmation (in-panel queue or the native approval), deny or timeout means it never runs; medium is logged but never blocked. Every command and its verdict, including the redacted command text, is appended to a local JSONL audit log. Quoted danger strings are treated as data, -WhatIf is respected, -EncodedCommand is decoded and analysed again. Host + client halves, zero runtime dependencies, 55 rules, 136 tests.

Extra folders registered for a workspace become real workspace roots: the session runtime context lists them, a workspace_roots tool reports each root top-level entries, git branch and AGENTS.md/README/manifests, and file tools read, write, patch, move and delete inside them without approval prompts. Folders are edited per workspace from a sidebar hover action or from Settings. On Windows a confined shell stays inside the workspace, because ACL confinement cannot take extra roots.

Send DSH event notifications to Gotify, a generic webhook, or ntfy when a task finishes, is interrupted, needs approval, or needs an answer. The message carries only the session title, workspace name and event reason, never the conversation body, and a failed send is logged without interrupting the session.

Plays a short chime and shows a desktop notification when a tool asks for permission approval.

Per-workspace DSH conversation status in the Windows system tray, plus native DeepSeek Harness notifications when a conversation needs approval, a choice or free-text input, completes, or fails. Windows 10/11 and DSH Desktop 0.2.3-rc.1+ only. The tray menu and notifications work only after a one-time desktop bridge install (user-level, reversible): it repoints the DSH shortcut at a hidden launcher that injects a hook into DSH's Electron main process through a short-lived loopback Node inspector; without the bridge the plugin only writes state.json. Idle conversations stay out of the tray by default; nine live options are editable in a Tray follower settings page.

Two-way bridge to a Server酱³ Bot (not SendKey push): messages sent in the app drive a DSH session, question and approval cards can be answered from the phone or the web, and agent plus scheduled output is pushed back to the chat. Pairing is trust-on-first-use: while the allow list (allowChatIds) is empty, the first chat that messages the bot is trusted, so set allowChatIds to pin it to your own chat.

Agent skills for the Lark/Feishu CLI: exports the 27 skills embedded in the lark-cli binary (docs, sheets, base, calendar, drive, task, wiki, approval, mail, slides, vc, minutes and more) and registers them with the DeepSeek Harness skill registry so the agent can read them on demand. Excludes lark-im so it complements an IM bridge plugin rather than duplicating one. Requires lark-cli to be installed.

Approval-free memory archiving for DeepSeek Harness: writes Markdown memory files without approval prompts, backs the old file up before any overwrite, marks a revised conclusion as status: superseded in one call, and prunes old backups after 30 days by default (optional size cap). The writable scope is hard-limited to configured memory roots (default ~/.dsh/memory). Companion to dsh-kb-lite, which indexes these files and down-weights superseded ones. Host-only, no npm dependencies; requires Node.js 18+.

Turns a live session into a layered instrument: seven toggleable rings (session, steps, skills, tools, jobs, approvals, file changes), a per-turn timeline, hover and click on every ring node, and per-step ladders drawn beneath the rings. It reads the session log directly and updates as the conversation runs, in Chinese and English.

macOS companion window for DSH Desktop: todos, reminders, live session messages, approval handling and quick input. The first open downloads Electron 43.3.0 to ~/.dsh/electron; after installing or updating, press ⌘Q (Command + Q) to quit DSH completely and reopen. macOS only. Tested on DSH 0.2.2-rc.1 and macOS 27 arm64.

Hospital-triage board for the DSH sidebar: sessions whose latest turn ended in an error (red = fatal, amber = 429/rate-limit) or is waiting for approval are grouped under an Attention tab, next to Working and Finished tabs, with ticking durations, dismiss with undo, unseen markers and EN/中文 auto-locale. An eye icon hides the session list (the header then shows Workspaces · N) and a Duty-gated chevron folds the nav bar; clicking a row opens the session across workspaces. Needs the zstd tool (zstdcat) on PATH. On-request log scan through a guarded same-origin route — no background daemons, zero core edits.

DSH → MAX messenger plugin: compact UX, briefings, status, reliable replies, remote control, GUI settings, reply threads, tables, schedules, webhook, cost & budget. Zero runtime deps.

Raise native desktop notifications from DSH itself for approvals, questions, finished turns, errors and sign-in prompts, attributed to the DeepSeek Harness app with click-to-open; the chime is synthesised in-page and can be picked from presets or authored as a note sequence in Settings.

Desktop notifications for DeepSeek Harness when a task finishes, with the final assistant reply as the notification body, plus optional approval and question alerts and synthesized or imported sounds. Derived from ltao0829/dsh-task-notify; install this fork or the upstream plugin, not both — they claim the same task-notify bundle row.

Native desktop notifications for DSH on Windows, macOS and Linux. While the DSH window is in the background, permission requests arrive as system notifications; where the platform supports notification actions, Reject and Allow-once buttons return the decision to the host approval waterfall, and returning focus or a timeout hands the request back to the in-app panel. Approvals and questions also play a separate input cue that is independent of window focus. Turn-end, question and error reminders, notification sounds and the cue are configured on a Notifications settings page.

Mail automation for DSH: IMAP IDLE sync, a follow-up queue, agent summaries through DSH sessions, approval-gated sending, and per-account HTML signatures with inline images. Windows only: mailbox passwords are encrypted with Windows DPAPI, and the credential store refuses to operate on other platforms.

MCP and skill manager as a full sidebar page: add, edit, enable, disable and delete MCP servers, expand a server to its tools and open one for its parameter list, translate skill and tool summaries with a model you pick, and count tool and skill invocations. Also registers an mcp_service tool so the agent can install MCP servers in conversation after an approval prompt.

Side chat for the DSH Web GUI with a /side slash command, forked from @flyer103/dsh-side-chat 0.7.0 and adding a host /side command, an open-request bridge, and approval pinned to never. It cannot be installed alongside the upstream @flyer103/dsh-side-chat — both register the same routes and side-chat tab type.

Windows companion window for DSH Desktop: todos, reminders, live session messages, approval handling and quick input. The standalone window reuses the Electron binary at %USERPROFILE%\.dsh\electron\electron.exe (usually installed by dsh-pet) and fails to open when it is missing.

A three-scope TODO board for DeepSeek Harness (user, workspace and session) with nested folders that can reference one item from several places, T0–T9 priorities, drag reordering, batch actions, a floating panel that also opens as a right-sidebar tab, Markdown preview windows that can stay open with autosaving title and body editing, and agent read/write tools, with every write gated by DSH approval.

[CODING WITH AI] "Always allow commands that start with …" for DeepSeek Harness approvals.

Feishu (Lark) bot for DSH remote control — messages become session turns, results return to the chat, and ask-mode approval requests can be approved or denied in Feishu.

Clears four kinds of idle-only system notices (approval policy, working directory, plan mode, plugin changes) that DeepSeek Harness counts as active work, so quitting with no running tasks no longer warns about interrupted work.

Adds a bell to the sidebar header: yellow when a conversation waits for approval, red when a turn was interrupted, blue when a conversation completed; clicking it opens a status summary panel and a session board, and a status with exactly one session opens that session directly.