Plugins

Opens a browser console to prepare Minecraft Java on Windows x64 and run DeepSeek-controlled survival through native-player MCP tools, with spatial observations and an optional livestream overlay from a separate extension. Requires an installed Minecraft Java Edition 1.21.x client and an official DeepSeek API key with at least ¥1 balance.

Fork of @linxin666/dsh-ssh (the two cannot be enabled at the same time): resolves an SSH host by its NIC MAC address before dialing, so DHCP address changes stop breaking saved hosts.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Host-plane sovereignty clause and content guard: appends user-held adjudication to the system prompt tail, redacts credentials and hidden carriers in tool results, and vetoes irreversible actions before they run. Applies to every agent preset.

FOFA cyberspace mapping inside the conversation: check the account quota, run FOFA queries and export the full result set into CSV/JSON/TXT files in the session workspace by paging through a time cursor. A CSV or TXT export stopped by its time budget or by an upstream error continues into the same file from the saved cursor, so rows already fetched are kept. Results render as conversation cards (query, match count, file path), and the API key is saved from the plugin page into the Harness credential store.

Lock screen with password/OTP/Passkey, persistent sessions and custom wallpapers; Harness power controls (the bundled systemd/launchd service must be installed) and npm updates on Linux and macOS, with experimental Windows support not yet tested on Windows. Adapts the auth kernel of xbzbing/dsh-auth-gateway (MIT) — do not install both, they both own the web gateway port.

Intercepts startup crashes, isolates broken frontend plugins, and recovers GUI cleanly with revision-bound quarantine.

One plugin brings the rtk token-saving setup from Claude Code to DeepSeek Harness: commands rtk can rewrite are rewritten, and builds, tests and logs that rewriting cannot reach are compressed too; common commands such as git, cargo, npm, pytest and docker are covered (rtk itself supports 100+ commands). After compression the model is told what was elided and how to recover it — when the sandbox cannot reach the rtk store, the original is saved separately and its path is given — and `/rtk stats` shows how much was saved. When a rewrite is unreliable the original command runs as usual: if rtk cannot run, or the command rtk returns would drop arguments, nothing breaks. The rtk binary ships with the package, so mainstream platforms need no separate rtk install, unlike most other rtk plugins.

Reload a plugin's source the moment a file changes, without restarting the harness. Covers the third-party plugin case the built-in watcher misses because it skips node_modules.

Compares installed plugins against a downloaded DSH update and reports which interfaces they use that the update no longer exposes. Runs before you install, with a dry-run diagnose command for when it declines to act. Windows only, on the DSH desktop app, with Node.js 18+.

Acceptance gate for DSH: freeze the acceptance criteria into an oracle ledger before work starts, then honor only real execution receipts — files changed after freezing are refused outright, and a failing hard gate overrides any human pass.

Multi-channel push notification plugin supporting Bark (iOS) and ntfy (Android/iOS/Web/Desktop) for turn completion, approvals, questions, and quota halts.

macOS Share menu receiver for DeepSeek Harness: appends shared files, images, text and links to the current thread’s draft attachments (requires the DSH Share app).

Qoder-style workspace mode and branch chips on the session row; picking a branch arms it, and the first message creates a dedicated git worktree and moves the session into it. Windows only: the write grant runs PowerShell Set-Acl; elsewhere Worktree mode reports an error and stays in the main checkout.

Config-driven lifecycle hooks for DSH: block or observe tool calls, and react to completed turns, messages, and title changes with shell commands.

Registers one tool, report_health, that answers whether a scheduled report job actually ran. It judges by side effects rather than exit codes: how old the newest report folder is, how many documents it holds, whether more than one report category is present, whether the audit ledger was synced recently, and how long ago the last log was written. Exits nothing, calls no model, and reads only local paths you can override by config or environment variable.

Fork of dsh-superagent for local use: each sidebar workspace gets a main session that turns a request into a ticket and has a worker session do the work inside that workspace's directory. Cannot be installed alongside upstream dsh-superagent: both use the package name dsh-superagent and mount the same plugin ids.

Defines multi-agent team rosters as YAML or JSON files, validates them, bridges each member into dsh-agent-teams member arguments, and verifies the result against the running team.

Plot decision gate for novel writing: five beat_* tools register each node that changes the story into a decision point with 2-4 divergent options, beat_gate returns pass:false until the author picks, and beat_compile turns the picks into a chapter outline.

HarmonyOS delivery orchestration for DSH: freezes a four-dimension acceptance pack whose measurable criteria carry machine-checkable assertions, runs an adversarial pre-review before dispatch, hands the work to DevEco Code in Goal mode, then audits the delivery with independently gathered evidence (screenshots, UI tree, logs, hashed evidence bundle), recomputing assertion verdicts against measured values and filing rework orders; includes a cited rule catalog, a user-confirmation state and a gate calibration ledger.

DSH bundle of the 27 promoted skills from mattpocock/skills v1.3.2 (TDD, code review, grilling, spec and ticket flows, domain modelling), bodies byte-identical to upstream and upstream invocation policies preserved; ships a sync script and an offline contract check.

Deck-generation skill for the National College Student Career Planning Competition. It takes a contestant's profile, materials and photographs, drafts a page-by-page outline for confirmation, then renders a 15-20 page reading-type PPTX (under 15 pages is flagged as a page-count error) using 17 page types, three built-in themes or a user-supplied template; the build audits the estimated layout (text overflow, per-page word count, missing evaluation dimensions, material gaps) and the rendered PDF is checked again for out-of-bounds and overlapping text. Requires Python 3.9+ with python-pptx, python-docx and Pillow; LibreOffice (soffice) and pdftotext are optional for the PDF layout re-check.

Group skills into named sets, toggle any combination, drag to reorder, and preview each group catalog token cost.

Diagrams a reader understands on first look: nine types from one JSON spec, with a checked title, reading path, legend, contrast and connectors. Requires Python 3.9+ for the render and check scripts.