Plugins

Password + TOTP two-factor authentication gateway for the dsh web UI: every HTTP request and WebSocket upgrade is refused until login, with per-source lockout, global rate limits and one-time backup codes.

Chinese long-form screenwriting skill: two input blocks (background + character bible) feeding a causal-value engine, anti-AI-flavor review, and a continuity ledger; works on Codex / Claude Code / dsh / zcode.

Proxies the loopback-only dsh web onto a LAN port so phones and other machines can reach it, with an optional access password that browsers type in and the bundled Android client unlocks with biometrics. Adds a LAN-access settings page with QR codes, inlines dsh-web-mobile (MIT, attribution kept) for the mobile layout, and the Android client in the same repository adds finish/approval notifications, voice input and a home-screen widget.

Presents DSH Web as a playable, full-screen first-person Minecraft-style voxel interface—not a color-only skin: users walk through a persistent Three.js block world and access native workspaces, sessions, conversations, tools, model selection, permissions, context information, and the composer through in-world facilities and a workbench.

Lets one session read, write and run bash across several folders, not just the primary root — additional roots are registered from a sidebar Folders panel or the /workspace-folders command (inherit/read-only/read-write) and share the primary root's file-fence + OS-sandbox authorization; adds no new tools.

Conversation rendering: every fenced block is rendered by the plugin itself (markdown for text fences, language-banner code blocks with highlight.js for others), mermaid fences become zoomable diagram cards, plus context-body rendering, whole-content copy and a MarkdownView export (npm: `dsh-md-render`).

Context lens: visualizes token usage of every request (context composition, KV cache hit rate) and enforces per-turn / per-session budgets with warning and blocking (npm: `dsh-my-context`).

Cross-session persona and diary for DeepSeek Harness: a local gate decides whether a turn is worth remembering, then one extra model call turns it into a first-person diary entry plus an impression of the user, where every impression carries the specific moment that produced it. Later conversations inject about 2000 tokens of that as a self-memory block in three registers: a persona core, a section for judgements the model wrote itself, and the diary. There is a tool for the model to record a judgement in its own words, and a plain markdown hand-note file the human can write into which the plugin only ever reads. A sidebar panel lets you read, forget or export the archive, and forgetting demotes an entry rather than deleting it, so an old one still surfaces on a strong topical match. Local-only, secrets are stripped before anything is sent, and the archive is a plain folder you can read, edit or carry to another account. Zero runtime dependencies, no build step.

Mobile-first Web UI quality-of-life pack for the DeepSeek Harness: a Chrome-style active-session tab bar, full-screen sidebar swipe open/close, overlay sidebar, collapsed-sidebar recents, keyboard-suppressing session switching, viewport/IME keyboard adaptation, touch feedback, code/table inner scrolling, hidden permission dropdown, a full-screen settings rewrite with tab memory, and a compositor-driven status pulse, no-touch-drag long-press protection — 14 features, each independently toggleable from the Settings QoL section with instant effect, persisted per browser in localStorage; pure client-side CSS/JS, mobile rules locked to viewports of 768px and below so desktop stays untouched.

Noname (Sanguosha-like game) extension workshop. AI writes skill and card extensions behind confirmation gates, static validation and block-based safe writes.

Renders mermaid/mmd code blocks in the conversation as chart cards with preview/code toggle; the engine is inlined so it works fully offline with no CDN (npm: `dsh-mermaid-render`).

Thinking in Chinese: injects a system prompt so thoughts and replies stay in Chinese, expands the reasoning block by default with interactive collapse, and localizes UI labels (npm: `dsh-think-zh-expand`).

Pending-change review for DeepSeek Harness: every `edit`, `write` and `str_replace_editor` change is collected automatically into the file list, where a single change block, the blocks within a selection, or the whole file can be kept or reverted, and undo/redo is supported. It imports the workspace's version-control changes, shows the diff in a single-column or side-by-side view, and provides a Markdown preview in which changes can also be kept or reverted, in-file search, block jumping and copyable line references; the diff data is stored persistently, so the review continues after a restart.

Per-event sound notifications: turn completion, approval, question, plan-review, goal-blocked, and task-failure each get their own sound and volume, configurable in the Web UI (built-in synth, mute, or local audio file).

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

A whip for DeepSeek V4 Pro: it watches the reasoning fingerprint of every thinking block and pulls the model back when it slips from focused "We will / I will" mode into scattered "let me" mode.

Persona engine for DeepSeek Harness: one config.json drives the AI's self-name (per model, per tier), how it addresses you, relationship stance, character text, per-item work contracts with individual toggles, thinking-chain language, appearance and reply tone (both opt-in and per-model overridable), and long-term memory gated by human confirmation - the AI can only append proposed candidates, a human confirm line flips them into effect, and the log is physically append-only and replayable. Confirmed entries are injected as a quoted data-not-instructions block; entries tagged with a kind can instead be routed to arbitrary files on confirmation and never reach the prompt. Three prompt sections re-evaluate from disk on every assembly, so edits apply on the next step with no restart. Persona presets are shareable JSON snapshots (imports and exports SillyTavern character cards, v2/v3 read, v2 written) and deliberately never carry memory. Zero runtime dependencies, no network, no shell; any error degrades to an empty section rather than a broken session. Ships blank - installing changes nothing until you write something.

Usage and cost view for DeepSeek Harness: aggregates real token usage from existing session logs, locks each cost at the price of its event time, and shows month and today spend against a budget from a sidebar card or an input-bar pill.

Embeds Copree (formerly AIsChat) into the DSH web UI as a native sidebar board. Copree is an open-source framework for AI group chat and programmable worlds: the AIs are residents, not tools — each has its own memory, state and personality, they talk to each other on their own, and you can watch or join in. Group World goes further: every group chat can bind a living world (its own web page + world AI + code + clock) that the world AI builds and edits through DSH workspace tools. This plugin ships the native sidebar board (contacts, pinned DMs and groups), real-time chat over a same-origin HTTP/WS proxy, Markdown/LaTeX rendering, group invites and image messages, immersive full-frame pages, and one-click mirroring of your worlds into DSH workspaces (folder + DSH session + world_* tools). Front end only: it proxies to a Copree backend you run yourself (default 127.0.0.1:5228, same repository).

Windows workspace pre-authorization: adds an explicit full-control DACL ACE (including WRITE_OWNER, required by dsh >=0.1.7 sandbox startup) to user-declared workspace directories, removing the repeated full-access escalation prompt. Grants only on explicit intent — new workspace records or paths added in the plugin settings page; system directories are hard-blocked. Windows only.

Embeds a real VSCode editor (code-server, or your local desktop VS Code via the bundled bridge extension) as a GUI tab: agent file edits open turn-scoped red/green diffs that survive tab closes and page reloads, files lock while the agent writes, and a watchdog supervisor keeps zero orphan processes.

Per-plugin usage budgets and cost caps on the llm/stream waterfall: per-model usage accounting, session and monthly budgets with warn/block transitions, latency windows, and a carbon-footprint estimate.

Carry durable task state across DeepSeek Harness, WorkBuddy, Claude Code and Codex with machine-readable checkpoints and optimistic locking.

Rewrites the blocked at-sign and four channel fingerprints in system messages at the fetch layer, so WorkBuddy's China gateway stops answering DSH requests with HTTP 400 code 11128; dry-run mode only observes and never modifies the request.