Plugins

Vision toolkit for text-only DeepSeek: model-invokable `vision` tool, wrapper adapters for deepseek/opencode-go (v4 flash/pro), Antigravity IDE quota (default, flash/pro) / any OpenAI-compatible VLM / Gemini / local Ollama channels, evidence memory with compaction rehydration, content-hash cache, and a bilingual client panel.

Scans a repository with its bundled Python 3.12+ tools and scaffolds one Markdown outline per source directory, then publishes the index with a hash manifest that proves the documents match the code; the bundled reader verifies that manifest before serving an overview or one document. The project root needs a project_docs/ directory and a CLAUDE.md entry point.

Cross-session memory for DeepSeek Harness: a three-tier store (behavior notes, deep details, session archive) plus a 600-character core card injected every step, work/companion/learning state lines, multi-person and multi-group records with visibility partitions, session-scoped suppression or deletion of memory fragments, summaries and fact candidates that can route to a separate model, and backup plus self-check tools. Data is plain text under the home directory, and entries can carry images and audio stored by content hash.

Windows computer use for DeepSeek Harness: a persistent PowerShell UIA backend behind 16 merged MCP entries (read/click/type/observe/verify), a hardened policy layer (red lines, approvals, observation binding, point-ownership and focus guards) and a performance pass (prewarm, caching, pixel-hash stability probe). Fork of dsh-computer-use-win.

Windows desktop automation for dsh: 14 tools that enumerate apps and windows, capture window screenshots that still work when the window is covered by other windows, read the accessibility tree, and perform real input — click, type text (CJK included), press key combinations, scroll and drag. Loads the official computer-use runtime (@oai/sky) already installed on the machine, discovering it by enumerating vendor directories, so vendor upgrades that change hash directories do not break it.

Registers external databases and document corpora as callable model tools: a per-source access boundary, a credential reference ledger that never stores values, and a fetch ledger that keeps fingerprints and content hashes instead of payloads.

Hash-anchored file tools for DeepSeek Harness: the read, edit, write and grep tools are replaced by versions where every line is addressed by a variable-length content anchor instead of a line number, and the plugin also registers delete, rename, undo_last_edit, ast_grep, ast_edit, lsp and format. Edits answer with a unified diff; a stale or ambiguous anchor is rejected and a fresh one served back; undo survives restarts; structural search and rewrite run on tree-sitter and semantic work through a language server; a bundled web card plugin renders read, diff, grep and LSP cards from the tools' own structured metadata.

Infrastructure as code: gated plan/apply, state and output inspection, and configuration validation via the terraform CLI.

Read-only diagnostics for a DSH install — boot-crash logs and the cause named in them, config drift against a recorded fingerprint, backup freshness, workspace growth, plugin updates, host-version compatibility, duplicate client ids, and model availability — plus an action layer that always shows a plan first and needs a single-use fingerprint and explicit confirmation before anything is written. A checkup also runs 45 seconds after every host start; when the 3-hour probe cache is stale it sends a one-line test prompt to the default model and a few models of each configured provider (model.probeOnReport can switch this off). Registers the agent tools dsh_steward_report and dsh_steward_act (clean caches via dsh-disk-cleaner, backup via dsh-config-manager, disable or enable a bundle, set the default model; execute takes the plan's hash plus confirm: true) and a system-prompt section telling the agent to run the report first when something crashed.

Sidebar artifact shelf that collects the images, videos, files and links sessions deliver, deduplicated by SHA-256 content hash, with five filter tabs and counts, keyword search, video thumbnails, a lightbox, manual link saving, image paste, upload up to 25 MB, one-time backfill of past session logs, and a save_artifact tool the model can call. Copies each collected file into ~/.dsh/artifacts (up to 50 MB per file, 200 MB per video).

Access the DSH Web GUI from your LAN: a listener on the address you set forwards the browser to the loopback GUI with this process's launch token, and 0.0.0.0 answers on Wi-Fi, VPN and wired alike. Address, port, session lifetime and password are edited in an Access section of Settings. The password is on by default — a fresh entry starts with a generated random one — and can be switched off on a network you trust for direct access; the Host stores only its scrypt hash.

Replaces identity numbers, phone numbers, bank cards, emails, addresses, customer names and secrets with numbered placeholders before a model request leaves the machine, restores the response, and keeps an encrypted local mapping plus a hash-chained audit log exportable as CSV.

Read and edit a Notion workspace from the agent: 10 tools over pages and databases, content handled as Notion-flavored Markdown, and writes guarded by a content-hash version check, a preview diff and one-step undo, so an edit made by hand in Notion is never silently overwritten. Installs with dsh plugin add; no build step. Requires a Notion integration token (or a personal access token) and sharing each target page or database with the integration.

File dedupe and unify toolkit, shown as "小视频整理" in the DSH sidebar: exact matches by head/middle/tail sampling or full byte compare; near-duplicate MP4s found by a prefix frame-level multi-candidate matcher (only the first N seconds, default 40, max 60; a frame-level index plus multiple candidate tracks handle shifted intros and repeated segments). The "ignore intro" scan maintains a SQLite fingerprint cache keyed by absolute path and size, with MAD-first frame lookup and dHash/pHash fallback; incomplete cache rows are removed and rebuilt automatically, and a full scan rebuilds the band index. A "quick file lookup" takes one file, uses the cache when present, generates its fingerprint on demand when missing, and reports a task with live logs, progress and cancellation without rescanning the source folder. Duration-bucket matching always probes and captures fresh, and does not use the fingerprint cache. Batch rename or move by extension, UUID, file size or video length; empty-folder cleanup; MOV/AVI/WMV detected by header and transcoded to MP4 keeping resolution, frame rate and audio. Requires ffmpeg and ffprobe. Scans run in a sidecar worker with live progress, A-B single-direction dedupe and asynchronous fingerprint writes; one task at a time; local-only API. Every task that moves files has one-click restore: per-group/target _dupfc_restore.json records, deleted files skipped and counted, files outside the record renamed to UUID and moved into resetFail.

Turns every .pluginlet file under a repo's .dsh/pluginlets/ (directories configurable) into its own sandboxed Conversation View tab, gated by a capability grant bound to the file content hash.

Sidebar developer toolbox with 65 pure browser-side tools in 13 groups — JSON, code formatting, URL, encoding, hashing, encryption, text, and number/date utilities — with zero network requests. Registers as a tab in dsh-better-sidebar, which must be installed for the panel to appear.

System guard for DeepSeek Harness (Windows-first, protected actions via UAC/sudo): classifies core system files and runtime junk, keeps a hidden SHA-256 backup of core files on the largest free disk, patrols integrity and restores damaged files, and asks for administrator rights only to protect the system. On macOS/Linux it only classifies and hashes (no junk deletion; repair prints manual steps), and that path has not been tested on real hardware.

Automatic approval and audit frame for DSH tool calls: a four-outcome rule table (deny, ask, AI review, allow) over commands, file access, network and tool scope, with security rules, rule-based auto-approve/auto-deny, AI fast/deep review, human approval, permission tiers, workspace boundaries, secret redaction and placeholder restore, a hash-chained audit trail and a simulator. Target files are inspected by metadata only.

Runs an approved OpenSpec change to completion while the model stays a mechanical forwarder: a bundled Python CLI computes the ticket DAG frontier, claims tasks atomically, prepares one git worktree per assignment, and returns exact actions. The session delegates each action with the DSH subagent tool and reconciles the completion notice against a hash-bound receipt produced by re-running verification commands on a clean, advanced HEAD, so free-text "done" never counts. Runtime scope changes are plain tasks.md edits. Liveness is observable, not guessed: status returns a relay block (elapsed and lease budget, receipt presence, heartbeat and activity age, a suggested action); abandoning a plausibly-still-working attempt is refused with the judgment data unless --force; a late sealed receipt is revived by adopt after full re-verification instead of rebuilding the ticket; dispatched subagents refresh a progress heartbeat outside the worktree. Requires Python 3.10+ on PATH and a git project that uses OpenSpec.

IMAP mail triage and cleanup for DeepSeek Harness: incremental read-only scan, a hard-protection rule layer plus optional local-model classification, a Markdown report and a hashed manifest, an explicit approval card, and only then a move to the Trash mailbox — no expunge.

A Phone tab in dsh-better-sidebar: SMS and calls over Twilio and SIP lines bridged through Asterisk, call audio through your server, Live, Voicemail and Do not disturb modes with live voicemail transcripts, a Telegram account with chats, voice messages and calls, and phone_* and telegram_* agent tools. Requires dsh-better-sidebar, Node 22.5+, a Twilio account with a voice and SMS number, a public HTTPS host for provider webhooks, and the bundled Go daemons built from a checkout (Telegram also needs your own api_id/api_hash).

Fairy III (Zenless Zone Zero) H.D.D skin for DeepSeek Harness: boot video, an eye-core dock that can be dragged vertically so it never covers text, and time-of-day greeting voices written by a model every day (5 lines, each <= 20 characters) and synthesized locally with GPT-SoVITS, with a fallback chain of today -> latest -> bundled audio so there is always something to hear. Replies can be spoken: a trailing marker line takes priority over length heuristics, and long replies can be compressed into one sentence first. The reader hashes the utterance it just played (MD5) so each reply is voiced exactly once, and switching sessions stays silent. Personal fork of dsh-fairy-zzz with its own package, route and storage namespace, plus a rate-limited summarize endpoint, POST-only engine control and bounded TTS and greeting caches. Two diagnostic logs (client revision, decision trace) are written next to the plugin and stay on the local machine. A personal fork of AssassinVIX/fairy-zzz-plugin (upstream package dsh-fairy-zzz): install this fork or the upstream, not both - both mount the full-screen skin on the same DSH surfaces. Dynamic greetings and spoken summaries need a DeepSeek-compatible API key in ~/.dsh/fairy-tts.json (or DEEPSEEK_API_KEY); without it only the bundled greeting audio plays.

Extract short-video scripts and captions from Douyin, Bilibili, Kuaishou and YouTube, including titles, authors, hashtags and engagement data, through a bundled Python extractor.

Prompt-box screenshot shortcut button. Drag a box, shot taken immediately. DSH hides automatically; multi-monitor supported. Ctrl+Alt+1--hides the window then shoots; shift+click--does not hide. Hold Ctrl+Alt and click 1 to shoot repeatedly. ! One copy is saved by default, named by content hash, in the DSH attachment library; each session writes an index recording which shots belong to it (can be changed to keep an extra copy in the session folder). Images are part of the context, so deleting them breaks the session — use the "Delete Conversation" plugin to remove images together with the conversation. Windows only.