Plugins

瞭望哨：盯着你的每个会话——谁跑完了、谁出错了、谁卡住了、谁在等你审批，用浏览器图标角标、红点/黄点和邮件通知你；顺带显示当前会话 ID。· Lookout: watches every session — who finished, who errored, who is stuck, and who is waiting for your approval — and notifies you through the browser favicon badge, red/yellow dots, an

审批台账 + 企业审计面板：记录每次审批（风险/决策/结果），gate 模式拦高危，Web 面板可看可导出

反盲批 / Anti Blind Approval — DeepSeek Harness approval guard: review workspace-write escalation requests with the session model, then gate the Allow button on a strict JSON verdict.

DSH company collaboration mode: companies, employee accounts, groups with an auto-joined AI member, persistent server-side DSH ACP host with SSE streaming activity and group approvals, and local Git AI tasks.

SSH remote workspaces for the dsh web GUI, reusing the session sandbox mode and approval flow.

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

Paints a colored counter badge (green = unread completed sessions, orange = pending question or approval) on the DeepSeek Harness taskbar icon on Windows, and plays a chime when a session finishes. Fork of dthcle/dsh-badge-notify (MIT) with a completion chime and green/orange state colors; both draw the same taskbar badge, so the two cannot be enabled together.

Cross-device notifications for DeepSeek Harness. While a long task runs unattended, a finished turn, a pending approval or a question reaches you through the enabled channels: desktop toast, browser tab, ntfy push or Feishu bot.

Windows-only DeepSeek Harness host plugin that shows Windows 11 style desktop cards in the bottom-right corner: a card when a turn completes — clicking anywhere on it brings Harness forward and switches back to that conversation — or fails, a native choice card for ask_user_question where clicking an option answers the tool and a free-text field accepts a typed answer, and an approval card for tool-permission requests. Cards follow the current Harness theme, open on the screen that hosts the main window, and the notification sound (including a custom .wav) plus notify timing, approval takeover and timeouts are configurable in the Harness settings page.

Plays a random chime when a reply finishes, a one-shot reminder chime if the conversation stays quiet for a configurable number of seconds afterwards, and a chime the moment DSH needs you to step in: an approval request, a question, or a plan confirmation. Three independent switches and sound pools, persisted on disk.

Strikes a single short chime, raises the DSH window, floats a reminder card above the page and sends a system notification whenever the agent needs your approval or an answer. Sound and popup are two independent switches in the session header, remembered across reloads and restarts.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

A frosted-glass status card that floats on the Windows desktop and shows what DSH is doing — running tasks with elapsed time and current activity, pending approvals, today's token usage and the countdown to the off-peak window — and collapses into a 14×120 bar that stays out of the way.

Message box for DeepSeek Harness: finished-conversation and pending-approval notifications with jump-to-conversation and inline approval.

A per-command sandbox allow-list for the bash tool: a rule names a CLI and the writable roots it gets, so allow-listed programs such as lark-cli and gh run inside the kernel sandbox with the workspace plus those roots appended. Unlike plugins that answer the approval for you or that widen the writable set for every command, the grant here is scoped to the matched command, the workspace stays writable, and other commands keep their exact behaviour. Matching is by write footprint rather than by command string, so write-neutral pipes like `2>&1 | tail -N` still match; rules are edited from a Settings page or the Plugins row. Overlays cover Seatbelt, bubblewrap and Landlock; on Windows the writable root is swapped for $HOME instead.

Host plugin for the macOS menu bar companion: live DeepSeek Harness session state, Approve/Deny for tool approvals, stop the current turn, open the exact session. The native app is a free universal build in GitHub Releases.

An animated macOS desktop companion for DeepSeek Harness that follows work across chats, reacts to approvals and errors, takes snack breaks during long runs and naps when idle. Requires a separate shell app.

Remote workspaces for DeepSeek Harness: pick an SSH host in the sidebar, mount a server directory over SFTP as a workspace, then read, write and edit those files with the normal file tools. Remote watch is polled so the file tree refreshes, image/binary previews work through byte-range reads, and remote_exec, remote_search and remote_git give agents the remote shell, search and git queries. An opt-in patch routes the agent's own bash/pwsh commands to the server. Every remote write and command follows the session sandbox mode and approval policy, and hosts are managed by the plugin itself (password, key or SSH agent).

Plays a short bell the moment DeepSeek Harness asks for tool approval or a question, so a stalled turn gets noticed.

Bark push notifications for DeepSeek Harness: turn completion, waiting prompts and approvals, plus opt-in background-job cards. Devices and card settings are edited live, and each push checks the per-device result returned by the Bark server and retries transient failures.

Desktop notifications and an app-icon unread badge for DeepSeek Harness. A banner fires when a turn finishes, when an approval, question or plan confirmation is waiting, and when a turn fails; the badge shows how many sessions need you and clears once viewed, and clicking a banner switches to that session. Follows the DSH interface language, subagent sessions stay quiet by default, titles and body length are configurable, and a loopback HTTP interface lets scripts and other tools post notifications.

Dual-host coordination for DeepSeek Harness: hand a task off in local chat, run bounded jobs in a cloud worker, then review results and approve follow-up steps in one workbench. Includes protected six-page onboarding, per-task model selection, a task approval ledger and stepwise controlled delivery.

Adds your own Recued server as an MCP server, so the agent can read your notes, tasks and the things you own and propose changes that wait for your approval in Recued.

Sends QQ mail through an OAuth-authorized agently-cli account. Registers the send_qq_email tool with a user-approval step and exposes a ctx.qqEmail service for other DSH plugins.