Plugins

Shows today's, this month's and cumulative spend in the sidebar footer, under the message box and in the session header. Spend is metered by the plugin itself from session usage events using official DeepSeek unit prices (peak/off-peak, weekends and holidays treated as off-peak), with local-day aggregation and currency conversion. Also adds a cost_today tool and a /cost command.

/cmd <command> in the composer runs that shell command in the session working directory, sends the command and its output to the model as a user message, and renders the input as a terminal card with exit status, expandable output and copy buttons; a bare /cmd opens an interactive terminal whose transcript is sent to the model with Ctrl+Enter. Runs with its own terminal permissions (danger-full-access) by default; set useSessionPolicy: true to use the session sandbox.

DSH /btw side questions: streaming selectable panel, debounced persistence, schemastery Config for route and limits.

Change impact analysis plugin that lifts a code change into an evidence-backed impact and verification plan (CHANGE-IMPACT.md + change-impact.json): affected modules, entry points and public exports, risk levels with factors and confidence, and recommended verification commands (read-only, never runs repository commands). Only read-only git queries (rev-parse, diff, status) are run; suggested verification commands are never executed.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Rewrites pwsh and bash tool commands through `rtk rewrite` and executes the compact equivalent; falls back to the original command when rtk is missing or has no equivalent, and ships a checksum-verified `/rtk install` downloader.

Park whole tool packs out of the session's tool surface and mount them back with one command. Cuts the tool table from 99,789 to 48,144 characters (51.8%) without uninstalling plugins or restarting. Reversible per group, per agent.

Adds Meta's Muse Code subscription as a DSH model provider: the bundle declares the shipped Meta route under Settings > Models, syncs the account chat catalog (Muse Wonder included) into the model picker, and adds a Sign in card plus the /muse-login command that run DSH's built-in Meta device-code flow, keep the minted key renewed, and show a red or green credential dot. Needs an active Muse Code subscription and no Meta CLI.

Adds a full-screen dialog for writing long messages: Markdown on the left rendered live by marked on the right, with a draggable splitter that remembers its ratio. Confirming writes the text back to the composer draft, keeping command tokens and @-reference chips as a fixed prefix; Esc asks whether to discard or write back before closing.

A vertical preview market for DeepSeek Harness: discover preview plugins, inspect the installed inventory, and install, enable/disable or configure them through dsh-market or the dsh CLI. One-click install and enable/disable need dsh-market; without it each card only shows a copyable install command.

A /agentinit command that builds, repairs or audits a repository's AGENTS.md inside a subagent: the child reads the method file itself and checks every command and path it writes with the bundled read-only checker, so no instruction body enters the main conversation. The bundled checker is a Python script, so Python 3 must be on PATH.

Manages the MCP servers of a DeepSeek Harness profile: lists each server with its connection state and the tools it registers, preflights a configuration before saving it (a missing executable, an npm package name used as a command, an unexpanded variable that would reach the child literally, a URL with no path), and adds servers by pasting a dsh patch fragment or a Claude Code mcpServers block, converted to the dsh shape.

Registers /daily, which sends the model to read the newest bili-scroll report and say what it understood instead of repeating the text; a sidebar panel runs the same command. Needs the dsh-bili-scroll plugin to have written reports into ~/.dsh/bili-duty/out, otherwise /daily finds none.

Brain-shaped relationship graph viewer for DeepSeek Harness with a Markdown knowledge-base pipeline that imports documents and builds the graph. The viewer ships demo data and needs no Python; rebuilding the graph from your own notes needs Node.js 20+ and Python 3.8+ and runs from the command line.

DeepSeek Harness页面 UI 更改为指挥台的界面美化插件，多种界面UI效果非常炫酷！

DeepSeek Harness remote workspace plugin: pick a host from ~/.ssh/config, pick a directory, and its files, terminals and commands all run on that machine through a daemon-backed SSH pipe with exactly-once side effects.

把 agent-skills 的 git-kit Git 工作流、handoff 跨会话交接与 disk-cleanup 磁盘清理以 dsh 原生斜杠命令接入（薄意图表，委托对应 skill 执行）

Connects DeepSeek Harness to the hosted Local Commander MCP server at localcmd.app via mcp-remote with browser sign-in, to read files and Git, run the checks you approve and check local services on your Windows computers. Requires a Local Commander account and the paired agent running on the Windows PC.

Union IM bridge for DSH — an independent implementation uniting the capability sets of community peer plugins (xmanrui/dsh-im, MichengAI/dsh-im-connect). Drive your agent session from 15 channel adapters across 12 platforms (including email; WeCom/DingTalk/QQ each contribute two: bot + self-built app or notify tier) — WeChat (official iLink QR bind), Feishu/Lark (long-connection + streaming cards; the voice tier requires system ffmpeg), Telegram, Discord, WeCom intelligent bot & self-built app (signed callback), DingTalk (stream + AI Card and custom-robot notify), QQ official bot (plus notify tier), Slack (Socket Mode), WhatsApp (Baileys QR pairing; the dependency ships as an optionalDependency of the plugin package), Matrix, iMessage (macOS only), Email (IMAP/SMTP thread routing). The cross-version narrow waist auto-adapts settings gen1/gen2/gen3 across hosts 0.1.2-rc.1→0.2.1-rc.2 (12-tag enum; rc.2 verified by a real desktop-profile install with double read-back) using capability probing only, never version branches. In chat: a 25-command panel, tool-approval and question loops answered in the originating chat (deny-by-default, initiator-only, 5-min expiry), image/file input gated on host model metadata, deliverable file return, a delivery log with bounded retry (uncertain is never re-sent), proactive delivery and fragment composition. It also splits the native sidebar into self-owned Tasks / Channels tabs (standing down entirely when another plugin already owns the slot), registers an `im-concise` agent preset plus reply sanitisation that keeps GenUI fences and raw HTML out of text-only chats, renders `svg` fences to PNG images, guards model choice with an allowlist, and mirrors each turn's final answer to notify channels via `/relay` (addressed by account ID or alias, never guessed on ambiguity). Secrets are one-way into the vault and never echoed back. npm: `dsh-im-union`.

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Registers system-prompt sections that make the model reason in Simplified or Traditional Chinese, with strict/prefer modes and an optional reply-language policy. Adds a /thinking-zh command for per-session switching. Zero runtime dependencies.

Adds a restart_self tool and /restart command that replace the DSH host process with the same command line and port, then deliver a message into the calling session so the agent picks the work back up by itself.