Plugins

Windows desktop control exposed as native DSH tools - whole-screen and single-window capture (the window one goes through PrintWindow, so a covered window still captures), click, drag, typing, keyboard shortcuts, scrolling, window management, pixel and window polling, and UIA queries that can invoke a control or read its value instead of clicking coordinates. 13 tools over a PowerShell 7 child process; no MCP server, no resident process, no API key.

Windows 2000 desktop skin for the DSH Web GUI: metric-accurate grey chrome, two-tone gradient title bars, 1px bevels, square corners, 16px scrollbars, and the pixel font it renders with served by its own host route.

Real-time disaster alerts for DeepSeek Harness: Japan earthquakes (P2PQuake) and JMA EEW, tsunami and weather telegrams, global earthquakes (EMSC/USGS) and NOAA tsunamis, mainland China earthquakes (CENC via Wolfx) plus nmc.cn rainstorm and geological-hazard warnings, and US/Canadian NWS and ECCC flood, rainfall and storm-surge warnings — matched against your watch regions and thresholds.

Counts completed compactions per session in a floating window and warns only after repeated compactions plus extra token spend or high context occupancy, with all three thresholds adjustable in Settings.

Registers the dsh-mol stdio MCP server, built on RDKit with no network access, into a DSH profile. It exposes 12 tools: three-level SMILES validation with human-readable diagnostics and character positions, molecular properties, drug-likeness and structural alerts, structure rendering to PNG/SVG, multi-molecule grids, format conversion (SMILES, InChI, InChIKey, MOL, SDF, formula), standardisation with a per-step change log, deduplication, SMARTS substructure matching, fingerprint similarity, and batch clean-up that reports every rejected row. The patch only registers the server; the tools live in this repository's Python package and must be installed first — the README gives a `pip install` route and a from-source route, and until the package is on PyPI the from-source one is what works.

Replaces the reasoning-effort dropdown with a draggable snapping slider, and draws 13 canvas effects across five style families (thrust, fluid, fantasy, tech, texture) with three tiers that unlock as the effort level rises. Custom mode combines 10 particle forms with 8 flow trajectories; 9 accent presets and a hex picker recolor every effect, and optional key sounds cover two voice clips, a synthesized duck squeak, a mechanical click and a local audio file.

Stages exact DSH tool calls without dispatch, presents complete canonical arguments in a durable Batch Review Inbox, invalidates approvals after edits or restarts, and commits only a matching SHA-256 digest plus single-use nonce through the normal DSH tool pipeline.

Builds, tests, archives and runs an Xcode project or workspace on iOS or macOS through xcodebuild — a live filterable build log, scheme and destination pickers read from the project, and log streaming for simulators and USB devices, including iOS 16 and earlier over libimobiledevice, whose app logs stay readable while the device is locked. macOS only.

Vision bridge for text-only DeepSeek routes that analyzes attached and local images through configurable OpenAI Responses, Chat Completions, or Anthropic Messages endpoints while leaving image-capable routes native.

A CodeGraph tool scoped to the session's own indexed project, resolved from its workspace directory. One MCP server is launched through npx per project root and shared by every session working there; a project indexed mid-session is enabled without a restart, and the managed child process is reaped when the harness exits.

Windows minimal agent preset for DeepSeek Harness: fixed one-line persona, three tools, no runtime context.

Adds an Explain button to the approval card: one model call returns exactly three lines reading the pending operation, covering what it does, which files or system state it reads, writes, modifies or executes, and a risky/attention/safe verdict with a one-sentence justification. It also renders the detail area for `write` and `edit` calls, which the shipped renderer leaves blank because it only reads a `command` field.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

Fronts stdio MCP servers with three router tools (list_capabilities, describe_tool, call_tool) so schemas load on demand instead of riding every request; shapes every tool result through a deterministic output ladder that archives the original first (retrieve_spill reads it back); prices tool groups in tokens and can hide built-in groups per agent. Bridges to a standard-library Python router, so Python 3.9+ is required.

Compaction fallback for compaction-basic: when its LLM summary throws, comes back empty or cannot fit the window, the span is compiled deterministically with a seq pointer on every line (vendored dsh-compaction-instant compiler). Adds recall and search tools, /recall and /context commands, an idle trigger at 45% of the window and an on-disk span archive. The engine mounts as one row in the agent preset (docs/dsh-integration.md).

Desktop companion pet in its own always-on-top window: imports Codex pet folders from ~/.codex/pets as-is, with affinity ranks, session-linked activity bubbles, snap-to-edge dragging, a right-click-reachable smart click-through mode and a daily token meter that mirrors the dsh-usage ledger when installed.

WeChat Official Account channel for DSH — WeChat messages run agent turns and the answers are pushed back through the customer-service message API, with signature-checked callbacks and an openid allowlist.

Plays a voice line or a sound when a turn finishes and a failure cue when a tool call or a turn errors — user aborts stay silent by default and subagent sessions are skipped, both configurable. Three alert modes: voice, effects, or off. Effects is the default and ships 20 built-in sounds (10 alert chimes + 10 nature), each assignable to the done, fail or approval event with per-row preview, so it needs no API key and no audio files; the voice route uses Volcengine TTS with cloned or preset voices, batch-imported voice IDs and fingerprint reuse that skips re-synthesis when text, voice and parameters are unchanged. A third approval slot exists but has no automatic trigger — it only plays when called manually. Playback goes through winmm/waveOut as-is, never changing the system volume or mute state, and the player is spawned detached so session teardown cannot silence it. Windows only.

Generate images through a logged-in web ChatGPT session and download them to a local directory.

Per-project memory for DeepSeek Harness. Three Markdown files per workspace — PROJECT.md, DECISIONS.md and SESSIONS.md — are auto-created on the first step of any session in that workspace, re-read from disk and re-injected only when they change (and re-injected if compaction dropped them), and written back by classification through a memory_checkpoint tool, with a bounded end-of-turn nudge when a turn did work but recorded nothing. memory_read and memory_search read the live log and the archive, the latter over a zero-dependency BM25 index. The session log is capped at 200 entries with the overflow moved to SESSIONS-archive.md — never injected, but visible, readable and searchable, and restorable one entry at a time. Settings page: a workspace list with a path filter, read-only tabs for the three memory files plus the archive, reload, export/import of one workspace's memory as a JSON bundle, a two-step clear, a panel that rewrites or removes the AGENTS.md instruction block, and a PROJECT.md staleness reminder. A composer status chip shows that workspace's sync state and creates the files on click. Zero dependencies — no vector store, no embeddings, and no model calls.

Layered cross-session memory for DSH that pushes only what changed - the first round injects every active entry, later rounds push only added / updated / removed ones, and nothing at all is injected when nothing changed, with keys that merely repeat an entry id left out of the text so the baseline is about 26% smaller. Facts and decisions carry semantic keys (one active truth per key), the model may only write to an inbox that a human promotes, an entry can carry a review date that raises a one-time reminder when due, and search is relevance-ranked with journal lines down-weighted and Chinese matched by bigram. A sidebar tab tells the lifecycle story instead of listing files - entries are grouped by stage (awaiting confirmation / in use / archived) along four axes (topic - one level, human-assigned, type, tag, date), each group can be ticked for batch promote / withdraw / archive / restore / delete / assign topic, and topics can be renamed store-wide or searched on their own. The archived stage reads in three levels - the category says why an entry left (distilled into the docs / useless for good / not needed right now, the first two being defaults you can add to), below it the entry topic stays collapsed until you click it, and entries with no topic sit right under the category. The tab also shows the global and workspace instruction files plus the current injection size. A zero-dependency CLI ships with it, so the store is usable without DSH.

DSH plugin: read and write DingTalk AI Tables through the official dws CLI, adding ten DingTalk AI Table tools (nine `dingtalk_aitable_*` plus `dingtalk_sync_job`), a settings panel, and scheduled CSV export.

Windows computer-use plugin for AI agents with reusable window targets, UI Automation, window-bound screenshots, background-first verified input, isolated Chromium automation, MCP, CLI, and installable skills.

Kinich and Ajaw theme for DeepSeek Harness Web with three visual styles, session-state feedback, companion interactions, and configurable ambient effects.