Plugins

Two-stage session deletion for DSH on Windows: move a conversation to the recycle bin and restore it to its original sidebar slot; deletion confirmed in two steps to prevent deleting files by mistake, clearing the whole subagent tree, sidebar ledger, projection cache, log lines and exclusive attachments along the way. It also scans the files a conversation actually wrote, adds a file query that pastes the path information into the conversation so an agent can judge which files are safe to delete, highlights them in Explorer, and copies the paths grouped by type. Both this and iamwuzhanglin/dsh-session-recycler install under the package name dsh-session-recycler, so install only one of them.

Adds an /if slash command to DSH: the first line is a condition and the remaining lines are an instruction. A fork subagent that inherits the session tools, system prompt and message history judges the condition and answers YES or NO, and only on YES is the instruction sent to the main agent as an ordinary user message, while a NO sends nothing. The condition, judge prompt and verdict never enter the main transcript. While the agent is busy the command queues with ordinary messages, editable, removable and steerable from the queue panel, and a setting switches to the 0.2.x background mode. The judge runs read-only, and falls back to a one-shot model call over a plain transcript when the host has no context-inheriting fork provider. Supports DSH 0.2.1-rc.5 and later (verified on 0.2.1-rc.5 and 0.2.2-rc.1) and Node.js 20.3 or later.

The judgment layer for DeepSeek Harness plugins: attribute why a plugin silently disappeared, judge a candidate against your exact environment, and keep a capability ledger. Offline, read-only, evidence-first.

Registers one tool, report_health, that answers whether a scheduled report job actually ran. It judges by side effects rather than exit codes: how old the newest report folder is, how many documents it holds, whether more than one report category is present, whether the audit ledger was synced recently, and how long ago the last log was written. Exits nothing, calls no model, and reads only local paths you can override by config or environment variable.

Drives Siemens NX 2406 and 2506 from DeepSeek Harness, plus NX 12: an executor that judges a journal run from its log rather than its exit code (NX returns 0 for a journal that swallowed its exception, and 0xC0000409 after a clean one), 16 typed tools over a resident batch NX, and a probe that keeps the three releases apart. Windows only; NX 2406 is the reference release, 2506 expected. Requires a local Siemens NX install and a free NX licence seat; run `dsh-nx install` once, and the 16 MCP tools stay off until `NX_ENABLE_MCP=1` is set (the skill route works without it).

Adds a mood system to DeepSeek Harness — 33 named moods judged every 3-6 hours with small per-message adjustments, plus cross-session memory, an aesthetic taste library and an encrypted diary. The mood, memory, taste and diary tools are all callable by the model, and each of the five modules has its own switch. The diary is written only by the model; no summary template is generated. A trimmed fork of JMX-4869/dsh-mood; install either this or upstream dsh-mood, not both, because both register the same mood/diary/taste/memory tool names.

Checks a bid requirement by requirement against a tender requirements pack and reports which requirements appear answered, weakly matched or not located. It reports differences; it does not judge substantive compliance.

Competitive-informatics senior plugin for DeepSeek Harness: companion practice, three-version C++14 reference solutions, problem explanations, real g++ compile-and-judge (g++ required), and optional solution-record archiving to the ima notebook "信奥学长-题解复盘", for GESP / CSP-J/S / NOIP / NOI.

A composer switch between running always and running only in off-peak hours, set per session: a task is judged by the session that owns it, so changing one session no longer changes the others, and a session without its own choice follows a default. In off-peak mode every task, including one already running, is held at its next agent step or tool dispatch when a Beijing peak window starts (Monday to Friday 09:00-12:00 and 14:00-18:00, statutory holidays excluded), and one timer releases it at the boundary; weekends and holidays are idle all day. The holiday calendar lists every statutory day off in 2025 and 2026 from the State Council notices, and a year with no data is reported as unknown rather than assumed to be a workday.

Checks an official document's type and reference number against the published party and government document format standard - including the bracket form the year is written in and the numbering pattern. Reports what does not match the format; it does not judge the document's content.

Reads the session event stream, with no extra model calls, and turns corrections, failures and fixes into pending lesson candidates. Every candidate is judged against written criteria and carries the reason it passed or was refused; only confirmation writes a skill, and only through the single validated writer `learn_skill_manage`. An idle curator marks unused skills stale and archives them by moving rather than deleting, and spares any skill that is still being loaded. Five tools: `learn`, `learn_review`, `learn_curator`, `learn_skill_manage`, `learn_skills`. Registers a prompt section stating the criteria, and a tool guard that refuses direct edits to skill files so the writer cannot be bypassed.

0.8.6 fixes a startup crash: the host runtime package is an optional peer, never an installed dependency. TypeSafe Jev (System One decision model) wired end to end into DeepSeek Harness (0.8.6). Seven tools: jev_decision (1-25 parallel atomic verdicts in one call; noul/choice/score; typed answers with calibrated confidence; measured median 266-484 ms; verdicts only, never prose), jev_choose (rank 2-10 candidate approaches - fit 0-3 and risk - into an explicit composite with a recommended pick), jev_batch (NEW in 0.8.6: one set of 1-5 judgments over 1-20 texts, one real call per text at bounded concurrency, returning a paste-ready markdown table sortable by a judged dimension; built-in sentiment/priority/intent/pii/spam presets; a failed row is reported as failed with the raw error, never guessed), jev_usage (locally measured usage: calls, tokens, estimated cost, latency median and p95, per-tool mix, rolling windows, projected burn rate, optional local hard budgets, and a declared-balance remainder), jev_overview (session ledger), jev_guard_status (guard counters plus a registrations block that surfaces per-surface registration failures) and jev_verify (frozen 27-question live benchmark at concurrency 6: 96.3%, 26/27). WHAT IS NEW IN 0.8.6 - the ledger survives a restart, the remainder is derived instead of invented, and the plugin can now do batch paperwork. (1) The local ledger persists to $DSH_HOME/jev-usage.json BY DEFAULT, so the cumulative total no longer resets when the host restarts. Two real bugs behind the old silent zero were found and fixed: the ledger path only honoured DSH_HOME (absent inside the host process, so persistence was silently disabled and the file name was null), and save() wrote the still-empty in-memory ring over the history file because it ran before the first load while the debounce window swallowed the follow-up write. (2) Remaining is derived, never invented: TypeSafe exposes no balance endpoint - /v1/usage, /v1/quota, /v1/account, /v1/account/balance, /v1/balance, /v1/credits, /v1/billing, /v1/me, /v1/limits and a dozen more all return 404, and only /v1/models answers, with no balance headers - so the panel shows the remainder as your declared balance (quota.declaredBalanceUsd) minus locally measured spend since quota.balanceSince, and says plainly that it cannot be fetched instead of printing a number. (3) The composer pill re-reads every 20 s instead of every 60 s, so a call you just made shows up while you are still looking at it. (4) The collapsed pill leads with the remainder once you declare a balance, and the cumulative row is renamed when the ledger is on disk. Every tool has an in-conversation structured view; the Settings > Plugins card covers credentials, tool switches, the auto-guard, the dashboard, the prompt section, usage/quota and auto-triage. Honest by design: no API key means an explicit error, never fabricated results; every registration is quarantined so a failure degrades one surface. Tests 38/38 (npm test, ~2.5 s). Client half applies on refresh; server half needs a host restart.

Allows deepseek harness to think dynamically like human,automatically judge the difficulty of tasks with suitable thinking chain.

Pre-execution safety valve for DSH that judges with TypeSafe Jev: it hooks tools/pre-execute and decides every bash/pwsh call by first applying offline static rules, then by asking the Jev model — the System One model from TypeSafe, which returns a structured decision instead of prose — one yes-no question ("will this command irreversibly delete or overwrite real data?"), turning the answer into allow, revise, block or escalate; revise hands the model a safer rewrite, escalate offers a one-shot human token; exhausted credit or a missing API key degrades loudly instead of failing silent, and a missing key is requested in the conversation itself (`guard key set`, read from stdin); every verdict is appended to a shared audit log and the text people read is bilingual zh-CN/en.

Peak / off-peak rate badges for the model selector (every row) and the composer tool row, judged per provider by its own time zone and schedule; the live catalog is served from the host over a fenced route.

Commitment write-gate: operator-authored rules enforced before a tool call runs — a deterministic guard tier plus an LLM-judge tier, fail-closed by default, every block written to a contradictions log.

Self-learning habit engine for the DeepSeek Harness — detects user-correction signals, judges habits with a low-cost model on threshold, settles candidates behind a two-level human gate

Codex-style approval autopilot for DeepSeek Harness: ordered glob rules (allow/ask/deny) plus an AI risk judge (low/medium/high) mapped through a risk tolerance, as an approval answerer.

Autonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git checkpointing for unattended sessions.

Destructive-command interception gate for dsh: parses shell semantics, judges risk against 41 built-in rules, and holds irreversible rm -rf, git reset --hard, and git push --force style commands at a confirmation gate.

Scouts the deepseek-harness repo and every dsh-plugin-tagged repository to discover harnesses related to your goal, then judges each as worth trying, watching, or skipping.

Two-tier model router for DeepSeek Harness — LLM-Judge routing, multi-model fallback chains, exponential-backoff failover, and task-level orchestration (DSH adaptation of pi-shift-router)

Keeps a DSH agent turn open when the model ends it by narrating work it has not done: on agent/turn-stopping the guard replays the turn log and classifies the trailing message with regexes — in the default mode wait / ask / done / gray end the turn with no model call, and only a promise of pending work reaches the judge — then has a judge chain of four dialect kinds (System One three-question noul, OpenAI-compatible, OpenAI Decisions, or the session LLM) rule on whether the turn is really over, and steers the same turn with agent.steer when it is not.