Plugins

A small bead-art game in the DSH Web right sidebar for the wait while the model replies: 12 built-in templates with guide beads, free drawing in 16 colors on 12/16/24 boards, a pattern drawn by the model from one sentence, on-device picture-to-pattern conversion (pictures are never uploaded), ironing finished pieces onto a wall of up to 60 works, and PNG export.

Runs DeepSeek Harness bash commands inside the workspace's Nix dev shell whenever a flake.nix is present.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

Cross-device notifications for DeepSeek Harness. While a long task runs unattended, a finished turn, a pending approval or a question reaches you through the enabled channels: desktop toast, browser tab, ntfy push or Feishu bot.

Two halves with one account store: a left-panel GitHub repositories viewer that is read-only by construction (three GET endpoints, every non-GET refused with 405 before routing, request body never read, tokens never leave the host), and a github-manager skill exposing exactly two tools — github_accounts and github_api — so the agent does the writing. Sign-in is GitHub Device Flow, and the store self-invalidates on mtime so a token added later is picked up without a restart.

Connects a GitHub account to DSH from the composer button (OAuth device flow or a personal access token) and exposes one github_api tool for REST calls — create repositories, write files, read pull requests and workflow runs — with a read-only switch and an in-panel call log. A rewritten fork of Moon-shiyue/dsh-github-connect (MIT): device-flow Client IDs are no longer rejected, paths may carry query strings and non-ASCII characters, undici is no longer a hard dependency, and the panel has four tabs. Registers the same github_api tool name and the same credential namespace, so it cannot be installed alongside that plugin.

Links the current DeepSeek account in DSH to a GitHub identity through the local GitHub CLI, a personal access token, or OAuth device flow, then exposes a scoped github tool for listing repositories and reading, creating, or commenting on issues.

HarmonyOS device workbench for DSH NEXT Desktop on Windows x64 (tested with DSH NEXT 2.0.21-next and Better Sidebar 0.28.2); the floating mirror reuses DSH's Electron or downloads one (~140 MB) on first use.

Reads only the Microsoft OneNote notebooks you allow, with device-code sign-in, a per-notebook allow-list in Settings, and four read-only tools for status, page listing, search and page content.

Read-only Windows AppData analyzer: click the sidebar icon to drill down explorer-style through directories, each row showing recursive size, file count and last-modified time, plus the software that created it and a delete-worthiness verdict built from a knowledge base, mixed-directory splitting, then heuristics, with unmatched guesses marked as such. Scans directories only and never reads file contents; it ships no delete action, and unknown directories can be looked up online with a model summary and cited sources. The online lookup needs a DeepSeek API key (or an equivalent credential); without one the query is only copied to the clipboard.

Connect the DSHM iPhone/iPad companion to DeepSeek Harness over your local network or Tailscale, with device pairing, session control and file transfers; public TestFlight access to the companion app is pending Apple review.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

Agent tools that download a Bilibili video, transcribe it with a local whisper.cpp build, then write a structured Markdown note with DSH's own LLM (optionally printing it to PDF). Windows only: missing dependencies are auto-downloaded into the data directory — yt-dlp.exe and the ffmpeg.exe build from GitHub and gyan.dev, the whisper.cpp x64 binary from GitHub, and a ~547 MB model from the hf-mirror mirror; PDF export shells out to a locally installed Edge/Chrome. Two tools: video_to_notes and note_to_pdf. Pure JS, no extra API key.

Single/multi-line composer toggle for the DSH Web GUI: an editable shortcut (registered through the harness shortcut service) — Cmd/Ctrl+E on desktop builds and Cmd/Ctrl+Shift+E in the browser, with Linux browsers unbound until you pick one — switches the composer between its native single-line shape and a four-line-plus draft area; a small tab on the composer shoulder always shows the current shortcut and target mode; while multi-line, Enter inserts a newline and Shift+Enter sends, and the mode is remembered per device.

In-place HTML document preview annotation: pick elements, leave notes saved per file, send batches to the conversation, and let the agent apply changes directly.

Remote workspaces for DeepSeek Harness: pick an SSH host in the sidebar, mount a server directory over SFTP as a workspace, then read, write and edit those files with the normal file tools. Remote watch is polled so the file tree refreshes, image/binary previews work through byte-range reads, and remote_exec, remote_search and remote_git give agents the remote shell, search and git queries. An opt-in patch routes the agent's own bash/pwsh commands to the server. Every remote write and command follows the session sandbox mode and approval policy, and hosts are managed by the plugin itself (password, key or SSH agent).

Bark push notifications for DeepSeek Harness: turn completion, waiting prompts and approvals, plus opt-in background-job cards. Devices and card settings are edited live, and each push checks the per-device result returned by the Bark server and retries transient failures.

Local English-to-Chinese simultaneous interpretation: on-device Qwen3-ASR bilingual captions with automatic language detection, crash-safe meeting records with minutes, and Obsidian export.

See your real ChatGPT / Codex subscription quota inside DSH. Reads /wham/usage: 5-hour and weekly windows, reset countdown, extra-usage balance, additional limit groups and the code-review limit; lists and redeems server-issued reset credits with a stable, retry-safe idempotency key; switches between multiple accounts; reads /codex/models to show the account's real model catalog, showing empty rather than a built-in list when unavailable. One-click sign-in from Settings (browser authorization or device code, with a paste-the-callback fallback); credentials stay in DSH's credential service. Model calls reuse DSH's built-in llm-pi-ai Codex route instead of claiming a provider route — it degrades to a pure quota console when another plugin owns it. A remaining-quota chip sits beside the composer.

DeepSeek Harness plugin: a port of the ZCode official android-emulator plugin — 23 Android build / emulator / ADB / UI-Automator MCP tools plus the android-dev skill.

Checks installed DSH plugins and previews upgrade risks, with source locations, dependency views, review records and evidence limits. Includes a panel and agent tool.

Cross-device conversation and task sync for DSH: one machine generates a relay station and the others join with its invite link; every frame is end-to-end encrypted, so the relay routes a hashed channel it cannot read. Peers read each other's full transcripts and task boards, interject into a turn that is running on the owning machine, send a work command that runs in a workspace of the target machine with the model strength chosen by the sender, and can copy a conversation into a new local session and keep working on it here. Ships a token-gated phone page for listing devices, reading tasks and sending a command.

Session-scoped research evidence ledger with sources, linked claims, open questions, and explicit user review; provides a tool, slash command, and conversation panel, with selected-claim Markdown export that omits excerpts, review notes, and local paths by default; does not fetch sources or verify their truth.

Session-scoped delivery receipts for local artifacts: compare current file hashes with a recorded baseline, keep agent claims separate from explicit user acceptance, flag changed or unavailable files, and export a Markdown receipt through a tool, slash command, and conversation panel.