Plugins

Mail for DSH: IMAP, POP3, SMTP and OAuth2 accounts with a reading tab, API senders, scheduled and CSV bulk sends with unsubscribe handling, and mail_* agent tools. The Mail tab appears inside dsh-better-sidebar; the agent tools work without it.

Bilibili companion for DSH (MIT fork of Alterssss/dsh-bili-whale; do not install alongside the upstream — both register the same `/dsh-bili/` settings routes and share `~/.dsh/bili-whale.config.json`): wakes on a schedule, reads videos through subtitles, danmaku, hot comments and covers, writes two diaries, and shares at most one pick per wake by commenting on the video and @-mentioning the owner (daily quota 3; DM when `share.via=dm`). Inbound DMs, commenter names, summary requests and live danmaku are normalized and scanned for injected instructions before they reach the model; only the owner DM channel can carry an authorization prefix.

Cross-session messaging: deliver a user message to another DSH session by session id. Every message carries the sender session id and a reply hint, so windows can authenticate each other and hand work over. One tool, no extra DSH dependencies; mode "steer" injects into a running turn instead of queuing a new one.

Connect ChatGPT subscription models to DSH via OAuth, preserving local tool-call identity across conversation replay.

Antigravity provider for DeepSeek Harness: resolves the OAuth client from the locally installed official desktop app and supports multiple accounts with quota-based automatic switching.

Huawei Cloud CodeArts provider for DeepSeek Harness with OAuth2 PKCE/DPoP sign-in, multi-account rotation, model discovery, and credits and usage views. A derivative of elegant01/dsh-codearts (MIT) with added account and image features; do not install it alongside the upstream - both register the same `codearts` provider.

Keeps DeepSeek Harness desktop dsh-auth-* session cookies bounded by deleting stale ones during the token exchange performed on every launch, so random-port accumulation cannot reach the 16 KiB request-header limit and cause an HTTP 431 startup failure.

Adds a Git chip beside the composer that opens a centered workbench (changes, history, files, tags, stash) plus a Git section in settings. Supports multi-account OAuth device flow and PAT with per-repository permissions (full, read, none), gates writes behind a global switch and reads behind an allowed-directory list, and refuses a push whose target remote belongs to no writable account. Diffs preview in place with line numbers, four layouts, word-level emphasis, syntax highlighting and Ctrl/⌘+F find; Markdown and images render inline, commit messages are searchable, and commit messages can be generated from the staged diff through the host LLM service. Ships 8 Agent tools, 51 local HTTP endpoints and 8 languages, with tokens encrypted at rest by AES-256-GCM.

Image Designer connects DSH to Shenhuo AI designers, with personal OAuth, material uploads, proposals, credit quote confirmation and local downloads.

SAP AI Core provider with shared OAuth, five Qwen model choices, thinking budgets, streaming, and tool calls; validated on cn40.

DeepSeek HarnessのWeb GUIにBasic認証を追加するプラグイン

DeepSeek Harness plugin: normalise author and creation date on generated docx/xlsx/pptx/pdf and friends.

Presentation-document mode for DeepSeek Harness: author Typst/Touying decks as structured data, compile to PDF with a visual self-review loop. · DSH 演示文档模式：以结构化数据驱动 Typst/Touying 生成 PDF 演示文稿。

StartLux Decision: a cheap judgement layer for DeepSeek Harness — all nine decision points (tool authorization, model routing, delegation, compaction, turn continuation, retrieval, skill pick, session title, COT translation) are implemented and individual

Expose local listening ports as public HTTPS URLs via Cloudflare Tunnel, with automatic DNS management and one-click token template authorization.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectures the program needs (one or several), checks conflicts between them, teaches the session AI after repeated failures, and teaches the session AI after repeated failures; once you grant it review authority in its panel, it gates task completion until the review passes (without that authorization it only observes).

Connects a GitHub account to DSH from the composer button (OAuth device flow or a personal access token) and exposes one github_api tool for REST calls — create repositories, write files, read pull requests and workflow runs — with a read-only switch and an in-panel call log. A rewritten fork of Moon-shiyue/dsh-github-connect (MIT): device-flow Client IDs are no longer rejected, paths may carry query strings and non-ASCII characters, undici is no longer a hard dependency, and the panel has four tabs. Registers the same github_api tool name and the same credential namespace, so it cannot be installed alongside that plugin.

Links the current DeepSeek account in DSH to a GitHub identity through the local GitHub CLI, a personal access token, or OAuth device flow, then exposes a scoped github tool for listing repositories and reading, creating, or commenting on issues.

In-process ChatGPT Codex authorization, model discovery, and quota display for DeepSeek Harness.

API contract studio for DeepSeek Harness: decide the seven things that must be locked before coding, author and review OpenAPI, classify breaking changes by how they actually break clients, and settle error shapes, versioning and deprecation — six playbooks plus a router.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

Windows x64 bundle with the official Antigravity CLI, using agy acp and cached CLI login. Delegates one-shot text tasks with selectable authentication, model and thinking level; uses host peers for Harness 0.2.1 from rc.3 and 0.2.2 from rc.1, including subsequent RCs and stable releases within both series.

Connects OpenCode Go subscriptions to DSH Desktop, with API-key management, usage snapshots, automatic model synchronization, and model selection.

Connects a local Codex ChatGPT login to DSH Desktop, with account controls, quota snapshots, automatic model synchronization, and model selection.