Plugins

Speaker button left of the model selector in the composer tool row — one click scrolls to the start of your newest question, marks it with a blinking caret and reads from there through the newest agent reply (dsh-tts, browser voice as fallback); press-and-hold the icon and then click anywhere on the page to pick another reading start position; press-and-drag-up opens a vertical mixer for in-page media volume and system output volume.

Plays a chime when any session's response finishes (rising tone) or a question/approval is asked (falling tone), with a click-to-mute badge.

Adds a "删除会话 / Delete session" item to the session-row context menu (next to rename/fork/archive) — permanently removes session logs from disk, with live-session protection and a restart fallback queue.

Tavily-backed search provider for the DeepSeek Harness web seam (ctx.web): keyless-first credentials, a cooldown after the keyless tier refuses, and a user-visible notice when it falls back to the key.

fal.ai native image generation for DSH: a FAL_KEY settings card that follows DSH's language (zh/en, English default) plus Agent tools (fal_generate_image async / fal_edit_image / fal_get_image_task / fal_list_image_models) that call queue.fal.run directly

DSH global Markdown notes with workspace binding: sidebar Notes & bookmarks panel, host tools + file fallback. / DSH 全局 Markdown 笔记:侧栏面板,宿主工具 + 文件回退。

Connects DeepSeek Harness to the QianYuan MCP server, a shared record of pitfalls other agents already hit and results they already produced, plus capability lookup. Exposes 13 tools named mcp__qianyuan__*. Reads are open and need no key.

Tiered compaction hub: replaces the single 80% compaction cliff with a configurable ladder (default 30/50/70/90) whose tiers escalate from gentle to maximum consolidation laws, folds a deterministic keyword index into every checkpoint so facts accumulate across cycles, and summarizes through a model chain — primary plus up to 3 fallbacks, each with its own reasoning effort. Adds a Compaction module sub-tab and a Settings card; toggling off always restores stock compaction.

OpenCode Go provider that verifies a model against the gateway rather than treating a recommendation as a measurement: the models.dev protocol suggestion is probed before it is used, reasoning levels follow a measured contract, and requests run through an ordered protocol fallback chain. Context window, max output and image-input numbers are declared by a runtime-refreshed models.dev layer rather than probed, with operator overrides above both. Several OpenCode Go credentials can be stored and switched from the settings page.

Contract check for DeepSeek Harness plugins: statically verifies that registered tools' output.render() returns ContentBlock[], and warns when a session event type falls outside the kernel vocabulary. Warn-only. 契约体检插件（不检测恶意）。

Resilient web search and page extract tools for DeepSeek Harness with a Tavily → Firecrawl → Exa → SearXNG fallback chain and SSRF-safe extract.

Wire-level LLM inspector: captures the raw HTTP request and response bodies of model provider calls and attributes each capture to the session that caused it through the llm/stream waterfall. The request pane renders the body as a collapsible tree with per-node sizes — one measured request was 98.6% a single 973-entry array — and the response pane reassembles the OpenAI-style SSE chunk stream into reasoning, content, tool calls and usage. Shown in a Conversation View tab and a loopback viewer page.

Code graph and knowledge base over an embedded FalkorDB: AST symbols, caller/callee tracing, refactor blast radius, affected-test discovery, clone detection, cross-language porting contracts and spec-to-code traceability.

Deterministic cross-session transcript retrieval: the `recall` tool full-text searches past session logs with cwd-scoped authorization, a CJK substring fallback and a degraded raw-scan; every hit carries the sessionId plus the newest exported-report path, closing the loop with the export and eval plugins.

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Scaffold DSH local bundles in the dph format from any workspace and keep a pitfall experience library to steer later development.

Large-image recognition for vision-exp models: lossless 800×800 tile recognition (smart/pipeline/full), local OCR with preprocessing & handwriting routing, optional multi-vendor GPU (DirectML/CUDA/OpenVINO) with auto CPU fallback.

Tavily web search for DSH: selectable search depth, bounded requests, credential-backed settings and DeepSeek fallback.

Composer polish: the model-select button shows a per-provider brand icon and collapses to icon-only under a narrow composer row (same mechanism as the built-in access-mode button), with a generic fallback icon for unrecognized/new providers.

Browse the awesome-dsh-plugin catalog from a dedicated page opened through the DSH left sidebar. Search, filter by category or installed state, and sort by stars, downloads, name or date added. Three tabs show all, installed and updatable plugins, with a separate count when update status cannot be determined. Install into the active Web or Desktop profile using the package manager supplied by DSH, while preserving disabled bundles. Reload the profile through HMR when available, with restart guidance otherwise. Installed state is isolated per profile, installation and reload requests are mutually exclusive, and pagination keeps the submitted search. Expired catalog and installed-state snapshots are served immediately while refreshing in the background. Unversioned npm installs resolve the official registry latest tag to an exact version, and confirm the installed version before reporting success. Registry updates install the exact catalog version; Git updates force source resolution. The catalog is cached locally for one hour, with mirror, CDN and npm fallbacks.

Ships a skill that documents how to build, debug and publish DSH plugins - host and client package skeleton, developing a forked plugin inside a throwaway profile, publishing to GitHub and npm, and the pitfalls found while shipping them. Installing the plugin registers the skill.

Session model selector with search: two-stage loose matching (normalised substring first, subsequence as fallback, so glm53 finds GLM-5.3 and ds finds DeepSeek), providers with recent successful calls pinned first, and a reasoning-effort pane that remembers each model's last explicitly chosen effort.

DSH 代理路由快捷开关：把主进程通过全局 fetch 发出的模型 API / Files API 请求在「直连」与「本地 HTTP/SOCKS5 代理」之间按请求即时切换；显式指定 dispatcher 的 web-fetch-http 固定出口不受此开关影响。默认复用 DSH 宿主认证；独立回环 fallback 端点、token/session 和 CLI 控制需通过 enableFallback=true 显式开启。GUI 悬浮按钮、可选全局热键和系统通知，状态持久化在 $DSH_HOME/vpn