Plugins

TypeSafe Jev approval review for Pi and DeepSeek Harness

Floating approval window for DeepSeek Harness that appears when you leave the app and hands the request back to the native card when you return. Windows-only (WPF via PowerShell). Independent fork of zeta987/dsh-notify-zeta (MIT); do not run alongside the upstream.

macOS menu bar indicator and system notifications for DeepSeek Harness: alerts when a tool needs approval (including sandbox escalations), when a question waits, and when a turn finishes — community fork of dsh-notify, compatible with DSH 0.1.7-rc.2 and 0

Local decision-layer plugin for DSH: a fail-closed command approval gate and ask/gate tools backed by a 144.3M on-device model. Needs a separate local decision service: `pip install phocinae-server`, then download the ~330 MB weights and keep the service running; without it the tool returns `PHOCINAE_SERVICE_UNAVAILABLE`.

Bridges DeepSeek Harness agent state (status, tool calls, errors, approval waits) over loopback to WhalePal, a standalone desktop pet app, so the desktop pet follows the real agent state instead of guessing from screenshots.

Telegram notifications for DeepSeek Harness questions, approval requests, and completed turns. Notification-only: one runtime file, zero runtime dependencies, no custom question cards.

Cross-session lesson book (the agent wrong-answer notebook) for DeepSeek Harness: injects a memory index capped at 2 KB verbatim into every turn, adds mem_recall and mem_save model tools whose write gate demands four sections, a locatable reference and explicit human approval before anything reaches disk, registers the /memory command, and keeps every lesson as a zero-dependency Markdown entry in the .memory/ directory.

Session-context surfaces ported from T3 Code: a session-row hover card showing machine, git branch, model, agent preset, approval policy and token usage, a status pill covering pending approval, awaiting input, working, error and subagent work, a provider and model chip, a per-session header strip, a lineage breadcrumb, row-menu actions that copy the context or run DSH compaction, and a preference row in DSH Settings for choosing which facts appear. Nothing is added to the composer.

Fish 自建 DSH 插件全家桶聚合包：一键插入全部本人自建插件的插件行（approval-guide / session-title-refresh / git-sync / settings-nav-order / visual-companion / agent-teams）。

Plays a chime when any session's response finishes (rising tone) or a question/approval is asked (falling tone), with a click-to-mute badge.

DeepSeek Harness permission guard: work inside the workspace is never interrupted; only the extra permission a call asks for is judged — machine-safe actions pass, system changes ask with a consequence analysis, destructive ones are refused.

Drives a Chromium browser you are already running — Chrome, Edge, Brave, Vivaldi, Opera, Chromium, Arc or Thorium — over one long-lived CDP connection, so the remote-debugging approval is asked once instead of per command. Commands for tabs, navigation, JS evaluation, DOM snapshots, clicks, typing, screenshots and CSS/DOM/pixel assertions go over a loopback HTTP route that the agent calls with the shell tool it already has, so no new tools are registered, and the plugin registers its own usage skill with no runtime dependencies.

dsh plugin: unattended approval gate — subagent/scheduled/cron approval requests get a bounded answer window, then settle with a fail-closed default instead of hanging forever (per origin or per session)

A newspaper-style front page for a session you left running, as a Conversation View tab beside Chat and Trajectory: a per-turn timeline (duration, steps, tools, tokens, outcome), file churn counted per file, where the wall clock went and how much of it was the model rather than tools, which single turn ate the spend, failures nobody retried quoted with their failing command, and a context-pressure gauge measured against the routed model's own declared capacity. The briefing is folded from the durable session log and never generated by a model, so it costs no tokens, cannot hallucinate, and is byte-identical for the same log and clock; it appends nothing to the session and reaches no model, and it reports a pending approval without ever answering it. Pages are offered only when they have content, and the tab refreshes itself on turn settle and on a two-speed poll backed by a metadata-only tail probe.

Host-only command safety gate for DeepSeek Harness: blocks recognized dangerous operations and requests DSH approval when a command cannot be inspected.

Ops request channel for a team over Feishu DMs — a colleague's message waits in a serial queue behind an approval card that the paired admin must accept, then runs in one shared DSH session with a persona attached, and the answer is posted back to the requester.

A headless-first macOS Computer Use driver for DeepSeek Harness with AX-first observations, window-bound multimodal evidence, host-owned approval, and evidence-backed action receipts

Windows desktop control through UI Automation: nine tools that read a window control tree and drive elements by id through their own UI Automation patterns, with every write gated by an approval policy, an append-only action log and a settings panel.

DSH plugin: audio chimes, cross-session toasts, desktop push, and IM webhooks for turn completion, errors, and approvals.

Speaks a short status line when DSH changes state — turn done, turn error, job done, job failed, goal complete, goal blocked, an approval waiting, or the agent needs your answer — using eight pre-recorded clips in Chinese (default) and English. The audio is played by the host process through ffplay, or through the Windows PowerShell player that ships with the OS, so it does not depend on a Web Audio tab. Windows only.

Webhook notifications for dsh sessions: a POST when an approval is requested or a turn ends, to ntfy, Bark, a Slack/DingTalk/WeCom bot URL, or any HTTPS endpoint.

Structured git tools for DeepSeek Harness agents: status, diff, log, branch, commit and stash. Output is pinned with ten `git -c` overrides so a user pager, colour or quotepath setting cannot reshape what the agent reads; every invocation is an argv array, so no shell ever parses an argument; and the mutating actions go through the harness approval service, refusing rather than proceeding when no approval service is mounted.

Telegram channel for DeepSeek Harness — real Telegram markdown, and answer the agent's questions and approvals straight from chat

Plays a chime when DeepSeek Harness asks for approval; tone, volume and on/off are set in Settings → Notifications.