Plugins

Provision a separate DSH_HOME (minimal profile + launcher) for the AgentRouter relay, and give the sandboxed agent controlled network egress.

Derived from WolfGenerals/ncm-player (ncm-player4 1.3.1 lineage, baseline published on the repo's baseline/ncm-player4-1.3.1 branch); cannot be enabled together with ncm-player2/3/4, because they all register the /ncm/api prefix. Floating NetEase Cloud Music player in the DSH web UI: search, playlists, synced lyrics with translation, a persisted queue, a collapsible mini bar, and a bottom-right note button that can be dragged and pulses with the bass; tracks that come back without a playable URL are skipped automatically.

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

In-process crash guard: takes over the fatal-error handlers that would exit DSH, names the responsible plugin from the stack, and disables only that row in the home patch layer, leaving the profile and the provider config inside it untouched. The crash page offers retry, keep-disabled or uninstall, and opens a temporary safe-mode session when no culprit can be named (CLI and web launches only).

Plays a random chime when a reply finishes, a one-shot reminder chime if the conversation stays quiet for a configurable number of seconds afterwards, and a chime the moment DSH needs you to step in: an approval request, a question, or a plan confirmation. Three independent switches and sound pools, persisted on disk.

In-app browser for DSH: a dedicated Chromium rooted at a persistent profile so a Feishu or SSO login survives restarts, driven over CDP, exposing seven agent tools (status, open, eval, read, feishu, screenshot, tabs) and mirroring the page live in a right-sidebar panel that tool calls open by themselves. Also converts Feishu documents to Markdown by sweeping their virtual scroll. Requires a locally installed Chrome, Edge, Chromium, or a Playwright Chromium build (it never downloads one); set DSH_IAB_CHROME to point at a specific binary.

Compile a video link into timestamped Markdown knowledge cards with back-links to the exact moment. Requires your own Python 3.10+ and yt-dlp (ffmpeg + faster-whisper only for videos without subtitles; Bilibili login cookies for members-only subtitles).

LAN phone drop: a QR code on the computer screen opens a page on the phone, and photos or scanned documents land in a computer folder over the local network, with no tunnel and no cloud in between. Document mode binarizes locally in the browser (adaptive threshold plus speckle removal and edge crop) so an ordinary phone photo comes out as a black-and-white scan. Adds a "phone drop" entry at the foot of the DSH sidebar that opens the QR page, plus a phone_drop tool for the assistant; the same CLI also runs standalone without DSH.

Douyin operator for DSH: drives your own Chrome to read the feed, comments and DMs, reply in-thread, and upload a local video through the creator center - every write passes a policy gate and publishing always needs your click.

Exposes Windows display geometry and the foreground window rect in physical pixels.

Trim tools for long chats: trim_context / estimate_context_tokens keep the system persona and the last message, drop the oldest user/assistant pairs to fit a turn or token budget, and report before/after estimates; the conversation is not trimmed unless something calls the tools.

DSH-elysia — shared Markdown memory for every DSH session: persona, requirements, corrections, lessons, methods, requests, sessions, a method library and ingested documents, mirrored to a second disk with version snapshots and a cross-process write lock; entries move between the main file and a searchable archive by hit frequency and repeated emphasis, and retrieval is keyword co-occurrence plus BM25. Ships a skills library (SKILL.md playbooks with optional guarded run.mjs execution), a sticker library that sends a fitting sticker at the right moment, and — new in 1.10 — Memory Packs: a bundled, opt-in character memory (packs/elysia: 61,903-char identity + 2,482-char persona distilled from 1,696 official voice lines and 112,175 dialogue lines). Packs are off by default, back up before writing, only touch identity/persona, and can be uninstalled to restore what was there.

Timed send for the chat composer: pick a moment and the host delivers the message then. Inside an existing conversation tasks join that conversation; from the new-session screen each task gets its own pre-created session.

Per-session status chips in the GNOME top bar for DeepSeek Harness — gray for running, green for done, yellow for waiting — configurable from the sidebar, with a self-installed GNOME extension.

Deterministic auto-dispatch for native DeepSeek Harness Agent Teams: wakes idle members when a task becomes ready, and turns advisory write scopes into an effective soft lock.

Let a pet whale girl browse Bilibili on her own: she picks videos, reads subtitles, posts comments and moments once you allow it, and writes daily digests with optional local video production. Maintained fork of c1overzz/dsh-bili-scroll (MIT) with per-action permissions, memories, stickers and local video production added; it registers the same bili_* tool names as the upstream, so the two cannot be installed together. Video production needs Python 3.11-3.13 (or uv); the media dependencies are installed on first use.

A per-command sandbox allow-list for the bash tool: a rule names a CLI and the writable roots it gets, so allow-listed programs such as lark-cli and gh run inside the kernel sandbox with the workspace plus those roots appended. Unlike plugins that answer the approval for you or that widen the writable set for every command, the grant here is scoped to the matched command, the workspace stays writable, and other commands keep their exact behaviour. Matching is by write footprint rather than by command string, so write-neutral pipes like `2>&1 | tail -N` still match; rules are edited from a Settings page or the Plugins row. Overlays cover Seatbelt, bubblewrap and Landlock; on Windows the writable root is swapped for $HOME instead.

Notifies the DSH session that started a task-board card when that card settles, queueing the title, outcome, duration and next step into it; successes merge inside a configurable window (30 seconds by default) and failures are sent at once. A card that stops to ask is relayed to the same session, which answers through a tool.

Runs OpenCode as a DSH subagent over ACP and shows each task live in the right sidebar — its agent and model, tool calls, and the subagents OpenCode spawns itself; permission requests become DSH question cards with allow once, allow always or reject.

Agent tools that download a Bilibili video, transcribe it with a local whisper.cpp build, then write a structured Markdown note with DSH's own LLM (optionally printing it to PDF). Windows only: missing dependencies are auto-downloaded into the data directory — yt-dlp.exe and the ffmpeg.exe build from GitHub and gyan.dev, the whisper.cpp x64 binary from GitHub, and a ~547 MB model from the hf-mirror mirror; PDF export shells out to a locally installed Edge/Chrome. Two tools: video_to_notes and note_to_pdf. Pure JS, no extra API key.

Long-term memory backed by a local SQLite store: project-scoped memory auto-injection with junk filtering, rule-based or model-assisted memory extraction from recent turns, write-side dedup and feedback-weighted ranking. The Python bridge runs on $NEXUS_PYTHON or the DSH-bundled interpreter at <DSH home>/dsh-runtimes/dsh-primary-runtime/dependencies/python/ (Python 3.8+).

A reflection layer for DSH sessions that slowly rewrites a 3-7 entry worldview across value, preference and habit layers, tracks spirit, health and account balance, ingests Bilibili/Douyin videos, and keeps an auditable growth archive. Video intake is optional and needs site cookies; Douyin parsing also needs Edge/Chrome and yt-dlp.

Floating desktop companion for DSH: a draggable character on the overlay — tap to charge energy, blinking and emotes, naps, synthesized WebAudio sounds and particle effects. Bring your own: any photo (pet, portrait, anime art) becomes a 2.5D cutout with hand-marked eyes, and 3D models (GLB, VRM, STL, OBJ, PLY) render as a real three.js turntable. Resize 30%-300%; data stays local.