Plugins

Install, update and remove DSH plugins from a tab in the Plugins page. Installs call the profile's in-process pluginManager service, so a plugin can be added while the desktop app is running instead of only through the CLI. Updates are delegated to dsh-market's public update API v1 (required for that section) and show the reported phase, percent and downloaded bytes as a progress bar, with rollback when the market reports a restore point. When removal is refused because the bundle is in use, it disables the bundle, drops it from the profile manifest, and queues the leftover files under the profile for a sweep after the next start.

Remote Linux server manager in the Harness Web UI: browse and edit files, inspect host status, start/stop/restart Docker containers, inspect images, configure Docker registry mirrors, manage firewalld/ufw rules, switch apt sources, and detect developer tools or install/upgrade them with apt.

Keeps the Auto permission preset across DSH restarts: the auto-review unload migration no longer rewrites a live Auto Session to Full access during application shutdown, and a stored Auto Session no longer fails to open when its integration is absent.

Adds a Git chip beside the composer that opens a centered workbench (changes, history, files, tags, stash) plus a Git section in settings. Supports multi-account OAuth device flow and PAT with per-repository permissions (full, read, none), gates writes behind a global switch and reads behind an allowed-directory list, and refuses a push whose target remote belongs to no writable account. Diffs preview in place with line numbers, four layouts, word-level emphasis, syntax highlighting and Ctrl/⌘+F find; Markdown and images render inline, commit messages are searchable, and commit messages can be generated from the staged diff through the host LLM service. Ships 8 Agent tools, 51 local HTTP endpoints and 8 languages, with tokens encrypted at rest by AES-256-GCM.

Archived-session trash with batch move, restore and permanent deletion, plus DSH and workspace storage usage, file types and large-file views.

Turns the promises a chat quietly drops into an interest-bearing ledger: every “later” becomes a card, older ones rank higher, and each card jumps back to the conversation where it was said.

Changes and pins the shared default model — new conversations, restarts and switching models inside a chat no longer rewrite it.

Drag-reorders the dsh sidebar panel entries and the conversation view tabs, and moves an entry between the sidebar and the tab strip as a real tab; order and moves are saved locally and survive restarts.

Adds an optimize-prompt button to the left of the composer's send button; it rewrites the draft with the session's own model route and writes the result back through the normal editor path, so a single undo restores the original.

Keyboard-driven quick switching for DSH — model palette with colored provider tags, suffix tags and pins, a two-column session palette with per-question prompt preview and archived-session restore, recency-ordered session cycling, find-next-answered jump, composer focus, and configurable permission cycling, managed from a sidebar control panel.

Restores title-bar window dragging and double-click zoom in DeepSeek Harness Desktop on macOS.

Delete a DeepSeek Harness conversation from the sidebar: a recoverable trash with restore and purge, or permanent removal, with a path-safety guard and an audit trail. | 在 DeepSeek Harness 侧边栏删除对话：可恢复的回收站（支持还原与彻底删除），或永久删除，并带有路径安全校验与审计日志。

DeepSeek Harness 插件：标题栏加两个按钮——重载第三方插件（不用重启宿主）、重启 DSH。

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

Strikes a single short chime, raises the DSH window, floats a reminder card above the page and sends a system notification whenever the agent needs your approval or an answer. Sound and popup are two independent switches in the session header, remembered across reloads and restarts.

Two halves with one account store: a left-panel GitHub repositories viewer that is read-only by construction (three GET endpoints, every non-GET refused with 405 before routing, request body never read, tokens never leave the host), and a github-manager skill exposing exactly two tools — github_accounts and github_api — so the agent does the writing. Sign-in is GitHub Device Flow, and the store self-invalidates on mtime so a token added later is picked up without a restart.

Connects a GitHub account to DSH from the composer button (OAuth device flow or a personal access token) and exposes one github_api tool for REST calls — create repositories, write files, read pull requests and workflow runs — with a read-only switch and an in-panel call log. A rewritten fork of Moon-shiyue/dsh-github-connect (MIT): device-flow Client IDs are no longer rejected, paths may carry query strings and non-ASCII characters, undici is no longer a hard dependency, and the panel has four tabs. Registers the same github_api tool name and the same credential namespace, so it cannot be installed alongside that plugin.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

In-app browser for DSH: a dedicated Chromium rooted at a persistent profile so a Feishu or SSO login survives restarts, driven over CDP, exposing seven agent tools (status, open, eval, read, feishu, screenshot, tabs) and mirroring the page live in a right-sidebar panel that tool calls open by themselves. Also converts Feishu documents to Markdown by sweeping their virtual scroll. Requires a locally installed Chrome, Edge, Chromium, or a Playwright Chromium build (it never downloads one); set DSH_IAB_CHROME to point at a specific binary.

Windows only (binds user32.dll via koffi; inert on macOS/Linux). Remembers the DeepSeek Harness main window's size AND position: restores both on every launch (re-asserted during a grace period to beat the default layout), saves stable manual moves/resizes as the new lock, never records minimized/maximized/fullscreen states, never adopts the default rect DSH itself places the window at (so the app's own layout resets can never poison the lock), and stays on-screen when monitors change. Compatible with DSH 0.2.1-rc.3+.

Windows x64 desktop tools for DeepSeek Harness to restore and foreground existing windows, observe screenshots and UI Automation elements, left-click, and type text or supported keys, with repeatable control sessions and physical Esc to stop.

Five DSH utilities in one plugin: drive existing sessions over QQ (needs an OneBot 11 implementation such as NapCat running alongside), ask another session a question with a context guard, pause the running turn, restart DSH on Windows with optional auto-resume (via the install-restart.ps1 scheduled task), and inject peak-hour token discipline.

API contract studio for DeepSeek Harness: decide the seven things that must be locked before coding, author and review OpenAPI, classify breaking changes by how they actually break clients, and settle error shapes, versioning and deprecation — six playbooks plus a router.

Connect DSH to a local BiliMemory backend for Bilibili search, collection, status and login tasks, A-Memorix shared memory health checks, plus QQ link status, QQ user allowlists and QQ watcher restart. The repository includes a Windows one-click installer that installs or repairs MaiBot A-Memorix when missing, then configures local-bge-small-zh, embedding and shared memory. It also provides install-memory.cmd for memory-only repair. Requires Windows, DSH Desktop 0.2.1-rc.2+, Node.js 22.19+, Python 3.12, Playwright/Edge, FFmpeg, a running BiliMemory API at 127.0.0.1:8765, a local embedding service at 127.0.0.1:11435, a Bilibili login, and MaiBot/NapCat for QQ. Voice, RVC and cover features are excluded.