Plugins

Registers a local OpenAI-compatible bridge as a native dsh model provider: reuses the models already signed in on the desktop app on this machine, manages the bridge and its local dashboard process, and adds five tools, a /workbuddy command and a nine-tab settings panel. Requires the desktop app to be installed and signed in on the same machine; the bridge binds 127.0.0.1 only.

Remote control for dsh web from a phone browser, from anywhere (no public IP needed): hosted cloud relay works over 4G, or self-host the router; one command installs the desktop bridge and this in-harness Settings panel (cloud / self-hosted / WeChat-bot tabs, account login, bridge start/stop, feedback); the tunnel data plane is end-to-end encrypted (E2EE phone↔desktop, with a QR / one-time-link desktop grant so you never re-type the password), with HTTP/WebSocket pass-through, access-key auth, a live device list and optional traffic quotas; the WeChat bot channel is bound by QR scan and pushes task-finished / error / stopped events to WeChat, where one number in reply approves or denies a pending decision and continues the current task — WeChat messages travel only between Tencent ilink and the local bridge, never through the relay.

Adds /pua to steer the agent to try another approach and verify results before claiming completion, with 15 company styles, persona modes, global and per-conversation settings, and an optional loop that continues until a verification command passes, the iteration limit is reached, or the user cancels.

Hacker News tools for feeds, discussion threads, search, and user profiles.

Bridges WeChat private chats into DSH, with two-way text, image, file, audio and video messaging and slash commands for sessions, workspaces, models, permissions and more; the goal is DSH's native experience inside WeChat.

DSH↔Godot engine runtime bridge: launch and drive a running Godot 4.x game through its in-game TCP interaction server — 16 tools (runtime control via ~130 game commands, scene/UI inspection, GDScript eval, input simulation, screenshots, headless static ops, project editing, export, script validation, engine-path setup), replaces godot-mcp.

High-reliability Feishu/Lark bridge for DeepSeek Harness: QR one-click auth, card-based commands and intent-confirmation cards, at-least-once zero-loss outbox, media in/out, /doctor session-log ZIP, and a reusable DSH Web GUI that lands sessions in the right workspace.

Standalone workspace file-tree panel for the DSH web UI: a session-header icon opens an animated popup of the current workspace tree; click or drag a file to insert its reference into the composer, with search, inline preview, live settings, and zh/en i18n; single-purpose, zero-config, one-command install.

A Multitask agent preset where the main conversation only plans, briefs subagents and summarizes results, while file reads, commands, search and builds run inside subagent contexts; four worker kinds, an approval gate for dangerous operations, and zero changes to DSH source.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.

IDE-style Git panel in the DSH Web GUI: a resident tab with a three-column overview (branch/tag list, searchable commit-history graph, commit detail with changed-file tree and message) and a changes page (stats bar, uncommitted list with per-file stage/unstage/discard, commit box with amend); side-by-side diffs carry lazy highlight.js syntax highlighting, on-demand between-hunk context expansion and word-level intra-line emphasis, with image files shown as before/after panes; plus a zsh-style branch marker in the input bar. Every git command runs as an argv array through the host subprocess service, cwd locked to the repo root.

Feishu (Lark) UI for DeepSeek Harness — a panel-driven control console: every slash command is a button on the ⚙️ control-panel card, in-card approvals and questions, live streaming cards, and one-QR app setup.

QQ official bot channel for DeepSeek Harness (feature-rich fork of tencent-connect/dsh-qqbot): group and private chat with the full agent, sticker library with auto-tagging and AI meme replies, group management (join approval and mute), botplay interactive card events with paginated catalogs, user extension registry (custom slash commands and QQ tools), scheduled wakeups, remote approvals over QQ, and a floating dock web UI.

Classifies pending tool calls with Jev (TypeSafe AI's non-generative decision model) on tools/pre-execute — confident high-risk calls are denied, ambiguous ones escalated to approval — and auto-approves clearly-granted reversible calls on approval/request behind argument-evidence gating. Also subclasses the session-reference resolver so snapshots keep Jev-scored messages instead of dropping oldest-first. Degrades to stock behavior on any provider failure; shadow mode with a /jev-stats command; TypeSafe or OpenRouter endpoints; 64 tests.

Isolated-environment browser verification skill for DSH plugin development: a throwaway DSH_HOME, its own `verify_<random>` profile, its own port and its own browser instance in one command, cleaned up on exit, so the profile you are actually using is never touched; ships a zero-dependency raw-CDP driver (snapshot / click / screenshot / eval) and an optional isolation audit.

Honcho memory plugin by Plastic Labs: injects the user profile, session summary and relevant conclusions at session start, uploads each turn to Honcho in the background with secrets redacted, and adds honcho_search / honcho_chat / honcho_remember tools plus a /honcho status command; configured through the ~/.honcho/config.json shared with the other Honcho integrations, against hosted honcho.dev or a self-hosted instance.

Four-source migration wizard: move Claude Code, Codex, OpenCode and Hermes sessions, memories, skills, instructions and slash commands into DSH (/move wizard with approval gate and idempotent move.json, resumable sessions).

Claude Code /rewind for DeepSeek Harness: git-first workspace snapshots before every mutating tool execution, turn-boundary session forks, and a one-shot /rewind command that restores files and forks the session back to a checkpoint.

Ported from the ARS Claude Code plugin (44k+ stars on GitHub): academic research skills for DeepSeek Harness — a deep-research agent team, a paper-writing pipeline, a multi-perspective peer-review panel, and an end-to-end orchestrator, plus sixteen /ars-* commands.

Long-term cross-session markdown memory with an LLM-Wiki structure and a SOUL.md persona, injected at session start (by default only after the first user message and only in the active session), plus remember/recall/consolidate/forget workflows, an embedded memory skill, pack/unpack migration tooling, and an idle-time first-person recall nudge that surfaces real memories in a companion voice. Also gives the store observability and upkeep it lacked: a per-file boot-block budget that keeps the index routing table from being truncated, automatic last_access stamping so salience decay actually works, a read-only memory health dashboard (size, freshness, lint-parity checks), a declarative index compiler (pages declare summary:, one command re-lines the index), an interactive memory graph (page links plus shared tags, draggable, wheel zoom), structured queries (tag/type/salience/hot/stale filters), cross-link suggestions for pages that have no relationship yet, and a `checkup` report that ends in a prioritised action list. The boot payload was also cut by ~23% by moving operational detail into the on-demand skill. Its settings section now carries its own navigation mark (a brain half wired to a node cluster, since the shell offers no icon slot to plugins) and a feedback entry that opens this repository. Requires DSH session format v4 (official DeepSeek Harness 0.1.7+): injected messages declare the producer-owned source kind plugin:memory. v0.11 added a bilingual settings panel whose copy and sidebar label follow DSH language setting (中文「记忆」/ English "Memory"); v0.12 added the shared cross-plugin speech floor, a context-sensitive tone section and a weekly growth recap; v0.13 declares its DSH compatibility via engines.dsh (official 0.2.1-rc.5 series; older hosts are refused by the gate), adds a "Review now" button (POST /api/memory/control, action growth-now) that sends one growth recap immediately while still respecting the speech floor, panel accessibility (aria labels, status and alert roles, focus-visible rings), and the public PROACTIVE-PROTOCOL.md. v0.14 adds per-session memory: a composer chip with a dropdown (this session / workspace default), the /memory on|off|status command, and a settings-panel switch all flip the same gate — off means no boot injection, no digest/recall nudges and no last_access stamping for that session (nothing is deleted); disabledWorkspaces lets whole projects default to off, and session choices persist for 7 days. v0.15 adds a Basic soul (quick forging) card: my name / what I call you / baseline persona, saved into a managed block inside SOUL.md (the rest of the file is left untouched) and marks BOOTSTRAP complete; existing chat-forged souls are echoed from the SOUL text, and the boot block now asks the agent to remind the user to forge first when no soul exists yet.

Injects a fixed system-reminder at the first step of every turn asking the model to reason and answer in Simplified Chinese, while code, commands, file paths, and identifiers stay in English.

Detects prompt-injection, jailbreak, and secret-leak patterns on the agent/pre-step, tools/pre-execute, and tools/post-execute seams with allow/ask/block tiers, sanitized defend/detection audit events, a defend_report tool, and a destructive-delete command guard.

Keyboard-first command palette for the DSH Web UI.

Command deck for DeepSeek Harness: a live session rail and team roster, a task board with approvals and write actions, an activity stream, and a desktop HUD capsule that follows the working conversation. The HUD capsule is Windows-only.