Plugins

Inspect and tidy a real Android phone over adb: storage surveys, per-app data sizes read from dumpsys diskstats without root, cache clearing that preserves app data, directory measurements and screenshots — five tools; reads never modify anything, writes require explicit confirmation.

NewAgentUniverseByDeepSeek nodes inside DSH: five read-only tools covering provenance (both upstream releases this build names), a data directory's restored state and ledger audit, the conformance vectors, exact decimal conversion, and node reachability. Driving the node -- starting or stopping a daemon, depositing funds, sending bus messages -- is deliberately not exposed, because those are audited privileged operations in this project.

ZCode-style enhancement of dsh plan mode: a model-initiated enter_plan_mode tool, hard interception of write-class tools at dispatch time (ctx.tools.guard) while planning, and a four-phase planning prompt section (explore, design, review, exit), reusing the official plan/mode state machine and exit review flow.

MCP server manager for DSH: nine mcp_manager_* tools, a CLI and a web panel that list, validate, probe, add, edit, enable/disable and remove servers in ~/.dsh/cordis.patch.yml, search and install servers from the official MCP Registry, and locate or rotate stored credentials.

Complementary web-search provider: every web_search merges the DeepSeek Search API (primary) with serper.dev Google results (secondary) at a fixed 2:1 ratio. Both sides are direct HTTP retrievals with no auxiliary model turn: URL-deduped sources, long DeepSeek summaries clipped into snippets, per-backend timeouts and graceful degradation to whichever backend answers.

Add MiniMax image understanding, image generation, speech synthesis, and transcription tools to DeepSeek Harness.

Bridge to the UnrealAgentLink editor plugin: the Unreal Engine editor dials this WebSocket bridge on 127.0.0.1:17860 and the agent drives it through 12 tools covering all 170 cataloged commands (actors, levels, blueprints, materials, PCG, screenshots, logs, undo).

Windows computer use for DeepSeek Harness: a persistent PowerShell UIA backend behind 16 merged MCP entries (read/click/type/observe/verify), a hardened policy layer (red lines, approvals, observation binding, point-ownership and focus guards) and a performance pass (prewarm, caching, pixel-hash stability probe). Fork of dsh-computer-use-win.

Model failover router that queues all connected DSH models, retries with continue text on failure, switches to next model, and quarantines failing models for the day.

White-box memory in two parts: four user-authored long-term tiers (must-follow rules, behavior settings, user profile, optional rules) injected as one system-prompt section, plus a separate temporary working set (cross-session handoffs, stage goals, waiting items) with its own 1200-character budget that stops being injected once an entry is done. The long-term tiers are plain Markdown files the user can read and edit; the agent can only propose them, and nothing is written until the user accepts in the Chinese panel. Temporary entries are written only when the user explicitly asks, and live in <DSH_HOME>/temp-memory.json (created on first write), not in the memory directory. No auto-capture, no background writes, no network.

A context usage ring with configurable character-based automatic compaction, manual compaction, protected user requirements and recoverable original history for DSH 0.2.0-rc.2.

Session trash: move conversations to a trash instead of deleting them, restore them, or delete them permanently after a second confirmation; a session opened in this run is hidden and moved at the next start.

Read-only attachment library: lists every image and file attachment stored on this machine, its size, and which conversations (including those in the session trash) still use it, with Show in Finder and Open in Preview.

Routes DSH web search through the current session's model and a self-hosted retrieval backend.

Cross-workspace DSH messaging and sender navigation, with bounded same-workspace context and opt-in local Claude Code messaging.

Adds a delete-session action that permanently removes session logs, workspace entries and archives.

Pins a selected passage of a finished user or assistant message as source text and keeps it in the model input across context compaction: each pin is recall-on-demand by default, or can be moved to a neutral resident system-prompt section or an emphasised highlighted one. Selections are aligned back to the source text with source-exact, source-normalized or rendered fidelity, and each of the three levels has its own character budget.

Removes subagent entries and orphaned projection caches from DeepSeek Harness session logs after the app quits, always dry-run first and with a full backup.

Two-step session deletion: the session menu moves a chat into a recycle bin without deleting anything, the bin panel restores an entry, deletes one for good right away, or empties the whole bin, and the next start wipes its log, projection cache, spill files and workspace membership.

Rewinds a session to before a chosen user turn, from a button beside Copy under your own message — the model-visible surface is replaced in place and the interface hides the rewound turns, without patching DSH source or deleting the original session log.

Two-tab archive panel (archived / active) where every row offers archive or unarchive next to permanent delete; each row shows its bound workspace folder as a clickable path, and queued archive-entry cleanup keeps a deleted session from resurfacing in the active list.

/compact and auto-compaction summarize with the model selected in the session, not the model that finished the last turn.

Double-click one of your own messages to rewrite it and continue in a new branch from that point.

Adds a Forget action to every session row menu, confirmed by a second click in the menu, that removes the session from the sidebar and from disk: running work is stopped, workspace, archive and pin records are detached through official channels, the log directory and projection-cache entries are deleted, and a revive guard re-deletes anything a late write or a lingering handle recreates; memories, attachments and other sessions are left alone.