Plugins

Claude-styled terminal panel for the DSH web GUI: agent shell commands run in a persistent real PTY with a genuine prompt, echo and exit codes, auto-open in the right sidebar and are scoped per conversation; optional live_terminal_* tools for reading, searching and screenshotting. Fork of Lancang-hzau/dsh-live-terminal (MIT); it shares its live_terminal_* tools and right-sidebar panel, so do not install it together with the upstream plugin in the same profile.

macOS always-on-top desktop pet for DSH Desktop: a bundled DeepSeek whale sprite with Codex-compatible skins; install many pets from codex-pets.net or import from local Codex in Settings; a recent-session ball; right-click New Session and a configurable global shortcut (default Command+Option+N) for a new-session ask box.

SSH host manager for DeepSeek Harness: browse ~/.ssh/config, store AES-256-GCM encrypted passwords, run batch commands and SFTP, and open interactive PTY terminals in persistent sidebar tabs.

A per-command sandbox allow-list for the bash tool: a rule names a CLI and the writable roots it gets, so allow-listed programs such as lark-cli and gh run inside the kernel sandbox with the workspace plus those roots appended. Unlike plugins that answer the approval for you or that widen the writable set for every command, the grant here is scoped to the matched command, the workspace stays writable, and other commands keep their exact behaviour. Matching is by write footprint rather than by command string, so write-neutral pipes like `2>&1 | tail -N` still match; rules are edited from a Settings page or the Plugins row. Overlays cover Seatbelt, bubblewrap and Landlock; on Windows the writable root is swapped for $HOME instead.

Cuts what a long session pays for context: reads only the requested lines, keeps a prose head plus a heading digest for oversized pages, and keeps both ends of large shell output. Measured 91-99% fewer tokens on files, pages and command output.

Two composer actions for the DSH Web UI: /new in the slash-command menu starts a new conversation without sending anything to the model, and Shift+Tab toggles plan mode while the conversation has focus.

Remote workspaces for DeepSeek Harness: pick an SSH host in the sidebar, mount a server directory over SFTP as a workspace, then read, write and edit those files with the normal file tools. Remote watch is polled so the file tree refreshes, image/binary previews work through byte-range reads, and remote_exec, remote_search and remote_git give agents the remote shell, search and git queries. An opt-in patch routes the agent's own bash/pwsh commands to the server. Every remote write and command follows the session sandbox mode and approval policy, and hosts are managed by the plugin itself (password, key or SSH agent).

OpenSpec spec-driven workflows for DeepSeek Harness, generated from OpenSpec 1.14.3: twelve /opsx-* slash commands that carry the workflow prompt plus the arguments you type, and twelve openspec-* skills the model loads on its own.

A polish button in the composer trailing controls that rewrites the draft in place with the model. Context is matched by topic, not by recency: anchors from the draft (paths, identifiers, quoted text, CJK bigrams) pick the earlier messages about the same task, so a session that interleaves several tasks does not leak another task goal or files into the rewrite — and the prompt explicitly lets the model ignore the extract when it does not fit. The result goes back through the same undo-able editor path a human edit uses. Drafts holding reference chips (@file, folder, session) or a claimed /command, and drafts mid-submission, disable the button instead of silently dropping references.

Composer history that restores the whole input state: composer contents, image and file attachments, @ references and slash commands, plus the model, thinking effort, permission and agent preset used.

DeepSeek Harness plugin adding two code-quality commands as user-invocable skills: /simplify (behavior-preserving cleanups over the current diff) and /code-review (multi-angle bug hunt with an independent verifier pass), plus /review as an alias.

Author your own skills in the Harness Settings page: every entry is published into the skill registry, so the model sees one line and loads the body on demand.

Windows sandbox ACL-repair plugin for DeepSeek Harness (dsh) — fix the grantWrite failure (SetNamedSecurityInfoW Win32 5) and retry the command invisibly

Purpose-aware monitoring for DeepSeek Harness long-running commands

Plannotator browser review surfaces for the DeepSeek Harness terminal profile: plan review, code review, file annotation, and last-answer annotation, driven on demand from slash commands.

Ctrl+Space command palette over the Harness Web UI: one box to find sessions, invoke skills, open panels and switch appearance.

Memex for DeepSeek Harness (dsh) — every day it records what dsh did (sessions, prompts, tools, files, commands) as a Markdown diary. · dsh 的起居注：每天自动整理 dsh 当天做了什么，存成日记。

Composer-dock quota strip: Command Code 5h/weekly/monthly windows with fill bars and percentages, plus DeepSeek's peak/off-peak period.

Cross-device conversation and task sync for DSH: one machine generates a relay station and the others join with its invite link; every frame is end-to-end encrypted, so the relay routes a hashed channel it cannot read. Peers read each other's full transcripts and task boards, interject into a turn that is running on the owning machine, send a work command that runs in a workspace of the target machine with the model strength chosen by the sender, and can copy a conversation into a new local session and keep working on it here. Ships a token-gated phone page for listing devices, reading tasks and sending a command.

Session-scoped research evidence ledger with sources, linked claims, open questions, and explicit user review; provides a tool, slash command, and conversation panel, with selected-claim Markdown export that omits excerpts, review notes, and local paths by default; does not fetch sources or verify their truth.

Session-scoped delivery receipts for local artifacts: compare current file hashes with a recorded baseline, keep agent claims separate from explicit user acceptance, flag changed or unavailable files, and export a Markdown receipt through a tool, slash command, and conversation panel.

Dictation that ends up in the repository instead of the chat log: hold the button (or import a WAV), and the plugin archives voice-memos/<id>/ with audio.wav, a rendered waveform.png, memo.md (frontmatter, per-segment timestamps, ready-to-paste quote blocks) and meta.json. Audio is resampled to 16 kHz mono in the browser before it is sent. Transcription stays local — the harness speechToText service with silence-split windows, or a command worker such as faster-whisper — and when no engine is available the memo is still filed with an explicit status and reason rather than a fabricated transcript. Ships a conversation-view 口述 tab with click-to-seek playback and per-segment quote copy, three agent tools (voice_memo_save / voice_memo_list / voice_memo_read) and HTTP routes. Zero runtime dependencies, 52 node:test cases, real screenshots in docs/.

Browser tools for DSH that POST to the local OpenCLI daemon instead of spawning the opencli CLI per command, avoiding its cold start: oc_status, oc_exec, oc_navigate, oc_snapshot and oc_tabs, with one persistent automation tab per session.

The composer predicts what you are about to type. Inline ghost text sits on the caret, measured against the editor's own font and line box, and Tab turns it into real text (Esc ignores it). The prediction is one short call through the session's own model router, seeded with your draft and the last few turns of the conversation, so an empty composer also gets a next-prompt guess written in the user's voice; suggestions that merely restate the assistant are dropped. Host side is one HTTP route with sub-path endpoints (loopback-only, 64 KB body cap, 2-minute result cache, 20-second miss cache, one in-flight call per session); client side is one 0-height overlay registered on conversation.input.overlay, with insertion guarded by the composer's draftRev CAS and a setDraft fallback. IME composition and slash commands are skipped. 16 node:test cases, zero runtime dependencies, real screenshots in docs/.