Plugins

The organ kernel of Agent-Body: plugins organized as one body. Each command is turned into a nerve impulse that deterministically innervates the organ which should handle it and names the capability to use; a heartbeat with a variable interval (faster on alerts, slower when idle) pumps operator directives, proprioception and homeostasis warnings system-wide; reflex arcs fire with zero model calls; failures go through deterministic attribution (missing tool / arguments / permission / timeout / network), a prescription, and a re-check loop, with argument errors never auto-retried. A missing organ is compensated by the one with the highest capability overlap, and tool schemas are gated by the current intent (84.7% measured reduction, reproducible in-repo). This entry is the kernel plugin package inside the agent-body repository.

Mobile-first Web UI quality-of-life pack for the DeepSeek Harness: a Chrome-style active-session tab bar, full-screen sidebar swipe open/close, overlay sidebar, collapsed-sidebar recents, keyboard-suppressing session switching, viewport/IME keyboard adaptation, touch feedback, code/table inner scrolling, hidden permission dropdown, a full-screen settings rewrite with tab memory, and a compositor-driven status pulse, no-touch-drag long-press protection — 14 features, each independently toggleable from the Settings QoL section with instant effect, persisted per browser in localStorage; pure client-side CSS/JS, mobile rules locked to viewports of 768px and below so desktop stays untouched.

Role-based Codex / Claude Code / ACP subagent providers for the DeepSeek Harness — continuable children, durable session recovery, per-role product permissions, and delegation with a permission ceiling.

Fine grained per tool permission rules for DSH at the tools/pre-execute gate, deny and ask lists in Claude Code rule syntax (`Bash(rm -rf:*), Read(_secrets_), mcp__server__tool`), works standalone without migrating.

Imports Claude Code setup into DeepSeek Harness from a native settings screen or CLI, with dry-run previews for skills, commands, agents, hooks, permission rules, and MCP config. Codex and OpenCode remain supported as secondary origins, with collision-safe apply and post-move checks.

Runs local CLI agents (Claude Code, Codex, Antigravity and Pi by default, auto-detected) as panels inside DSH, reusing the official subprocess.spawnTerminal with an embedded xterm.js. Names, commands, colours and order are configurable. Requires DSH 0.2.2-rc.1 or newer. The CLI agents must already be installed and run with your own user permissions.

Agent-team orchestration sidecar for DSH: teams with a configurable member cap, real sub-agent members with per-member model routing, task DAGs that dispatch automatically when their dependencies finish, a broker that enforces fs/exec/net/env permissions, and a live web panel over SSE.

LLM-assisted auto approval with countdown fallback for the Auto permission preset: static rules, risk tiers, breaker and file audit.

Secondary working directories for a DSH project: the agent keeps the primary workspace as cwd and gains equal read/write/exec permissions on configured secondary directories, configurable from the session header and the new-session page.

Shipped with cc-safety-net-style mechanical safety-net rules appended; supports both no-model and model-assisted security review, in modes such as 自动审查 (auto-review) and 机械直通 (mechanical pass-through). P0–P4 deterministic-first permission gate with permissive tier, learning sedimentation and approval-history UI; hard-deny credentials and protected paths, auto-allow internal read-only tools.

Owner workbench for independently connected family WeChat assistants, per-member project and tool permissions, scheduled services and delivery status; API acceptance does not confirm receipt.

Vision-first Mac computer use, for when the accessibility tree is unavailable. Ships 11 desktop_* tools - window list, screenshots, OCR text targeting, numbered elements, coordinate clicks, typing, scrolling, drag - plus a Codex-style cursor overlay with spring animation. Clicks are delivered to the target process, so the real pointer never moves and nothing steals focus. In DSH it shows up as Mac Desktop Control with a settings page that checks the engine and the Screen Recording / Accessibility permissions, with a button that opens the matching System Settings pane. Works out of the box: the tarball bundles the dsh-cu engine and the overlay as prebuilt universal binaries (Apple silicon + Intel, macOS 11+, ad-hoc signed), compiled from the repo's Swift sources by the release workflow - no clone, no Xcode, no install.sh. The only setup is granting DeepSeek Harness Screen Recording and Accessibility once. macOS only; on Windows and Linux the plugin loads without registering the desktop tools.

Self-hosted DSH Web operations panel for safe restart and upgrade, health diagnostics, model-usage statistics and provider quota lookup, backup and session management, task notifications, skill controls, subagent model routing, and Linux permission maintenance.

Per-directory access gate for DSH: deny / read / full levels for names and paths, roster groups, per-session overrides and an audit log, plus seven model-facing `gate_*` tools whose widening requests must be approved by the owner in the panel. Installs with `dsh plugin --profile desktop add dsh-isolation-gate`; MIT, no network calls, state stays on disk.

Adds an approval-mode toggle next to the permission selector: default approval keeps per-call confirmation, bypass approval auto-approves every tool call while staying in Workspace Write.

Discord adapter that installs into a dsh web or desktop profile: @mentions and threads bind to sessions with streaming replies and live tool-activity rows, nine slash commands cover workspace binding, permission presets and model selection, and tool approvals and user questions are claimed by whichever of Discord or the web UI answers first, behind a deny-first guild allowlist.

Adds a workspace-write++ permission that keeps file tools inside the workspace while skipping the Windows process sandbox for wildcard-allowlisted executables such as Git Bash.

Provides privacy, interaction, system and data protection for DSH Desktop on Windows: protects camera, microphone and screen access, guards against desktop and input interference, protects system settings, services and other processes, and safeguards selected files and directories. Uses process-level sandbox isolation and permission controls within the existing DSH workflow, with evidence from 38 public comparison scenarios published by Finogeeks. Install through the DSH Desktop plugin manager. Windows x64 only; first activation downloads and installs the matching native runtime with SHA256 verification and Windows consent, and runs an updater process.

A desktop dynamic island window for DSH (tested on Windows) that shows whether the agent is thinking, replying, running tools or waiting for approval; expanded, it shows plan progress, context and token usage, and lets you stop the task, approve permission requests and answer the agent's questions, with a separate usage window that estimates cost from DeepSeek's official prices. The island window needs an existing Electron runtime — reused from the dsh-orb plugin's downloaded runtime or pointed to by DSH_ISLAND_ELECTRON — and DSH Desktop 0.2.2-rc.1 or newer on the 0.2.2 line on Windows; the package neither bundles nor downloads Electron.

Drive a local DeepSeek Harness agent from QQ and other IM channels through AstrBot: send tasks with /dsh, continue by quoting or @-mentioning the bot, answer approvals and ask_user_question prompts from chat (in parallel with the DSH web UI), and get results, inline images and file cards back. Ships session / workspace / model / permission commands, /compact and /last recovery, three progress-display modes, and group-shared or per-user session scoping.

MySQL connector for DeepSeek Harness: configure multiple connections in the settings page with per-connection table allowlist and write permission, switch the active connection from the composer, and expose mysql_query / mysql_tables / mysql_execute tools to every agent preset.

Model-based permission approval: an approval-request answerer backed by a separate reviewer model.

Browse, search and install skills from the public SkillHub catalogue, then enable, disable, update or remove them without leaving Harness. Category chips carry the upstream total for each category; the details drawer has tabs for the file tree, version history, permissions, third-party security-scan results and upstream metrics. An installed skill is written into the harness skill root as an ordinary local skill, and disabling one moves its directory out of that root rather than flagging it.

Drive your local DSH from WeChat: a self-hosted iLink bridge over a persistent ACP session (context lives in DSH and is resumable), phone conversations grouped into the desktop workspace, with image recognition, file messages (Excel/Word/PDF, parsed by the agent itself) and voice transcripts. Tool approvals are answered inside WeChat itself (numbered card; ask/allow/reject policy; 120s timeout means reject), and any process can push a message to your phone through the outbox helper. Access defaults to strict (only registered devices are served); the phone channel's permission preset is configurable - see the README security section before sharing the bot.