Plugins

Per-project tool gating for the harness: before each step, the session looks for `.dsh/tool-gate.json` in its working directory and up to 32 parents, then filters the tool set handed to the model — allow or deny lists with `prefix*` wildcards, `off` when no rule file is found. A single `tool_gate_status` tool reports the active mode, rule file, and which tools were hidden.

Memory engine for a long-lived companion agent: a six-module loop (gate, solidify, store, retrieve, inject, decay) that decides what is worth keeping, distils raw turns into long-term entries, fuses short and long term at recall time, and fades entries that stop being used. Runs offline by default; if DEEPSEEK_API_KEY is set it also sends each message to the DeepSeek API to judge and distil it. Zero runtime dependencies and no build step; ships three switchable panels over the same store - neural brain, memory ring and memory galaxy - so you can watch what it remembers. Non-commercial license: commercial use needs the author's permission.

macOS (Apple silicon) fork of aureth-labs/dsh-aurabot-qq: the same QQ persona bot (chat, voice notes, stickers, memory, song covers, modules) with the Windows-only code removed. It connects to a OneBot v11 gateway such as SnowLuma running in OrbStack or Docker, falls back to the macOS `say` voice, sends files over 30 MB to a containerised gateway through a loopback-only temporary download link, and installs the song-cover environment (Applio, audio-separator, uv, Rubber Band, separation models) at pinned versions. It keeps the upstream package name and plugin id (dsh-aurabot-qq), so it replaces upstream and cannot be installed alongside it; use upstream on Windows.

Account-based access to the ToTonAI gateway inside DeepSeek Harness: sign in or register in the settings panel, use 65 mainstream models (GPT, Claude, Gemini, DeepSeek, Doubao, Grok, GLM), and pick a plan then pay by QR code in the same panel. Upstream API keys stay on the server.

Configuration panel for an existing `oneapi` route of the pi-ai provider adapter (declare that route in the llm-pi-ai settings first, with api: openai-completions): edit display name, Base URL, API key and default model, test connectivity per model and sync the model list from the gateway, with six agent tools and an optional left-sidebar panel. Written for a Baidu-internal gateway: the Base URL placeholder and token link point there, so set your own OneAPI-compatible gateway.

Stores provider API keys in one local pool and hands out the least-used enabled key over a loopback-only endpoint, tracking usage counters without proxying requests.

Per-turn cost meter and tool-loop guard for the DSH web GUI. It records model, tool and idle time for every turn, blocks runaway tool calls with a dynamic step gate, a retry breaker and a slow-command block, and renders the breakdown as a card under each reply plus a ledger view.

Hospital-triage board for the DSH sidebar: sessions whose latest turn ended in an error (red = fatal, amber = 429/rate-limit) or is waiting for approval are grouped under an Attention tab, next to Working and Finished tabs, with ticking durations, dismiss with undo, unseen markers and EN/中文 auto-locale. An eye icon hides the session list (the header then shows Workspaces · N) and a Duty-gated chevron folds the nav bar; clicking a row opens the session across workspaces. Needs the zstd tool (zstdcat) on PATH. On-request log scan through a guarded same-origin route — no background daemons, zero core edits.

Delegates coding tasks from DeepSeek Harness to Codex CLI in WSL, with required acceptance criteria, background progress and cancellation, thread resume, per-criterion reports, change tracking, and optional workspace guardrails. Requires Windows with WSL2, Python 3.11+ and a logged-in Codex CLI in WSL.

Host-side scheduled jobs on cron, RRULE or one-time schedules: shell commands that start no model, gated jobs that wake an agent only when the command reports work, or agent prompts. Agent tools to create jobs, a Cron tasks page, and result delivery through any plugin that exposes a send method.

She keeps the questions your chats left unanswered, then goes and looks them up later. A line she asked you that ended in "?" and never got an answer is stored as a hanging question; on a schedule inside a daily window (08:00–23:00, five a day by default; an optional mouse/keyboard-idle gate is off by default) she picks the oldest one, searches the web and Bilibili, reads what is actually readable, distils it into two or three sentences and leaves a note on her desk. Questions about its own plugins are skipped and left for you. Read-only on her events: nothing is written to her memory, her growth is untouched, and dsh-fish needs no patching. Requires the @ssamurias/dsh-fish persona plugin for her event stream and a local Ollama model; a search API key is optional.

Aggregated MCP market for DeepSeek Harness: 26 curated presets plus the official MCP Registry and user-added JSON sources, with search, source filters, connectivity tests and one-click install into the profile.

Fork of Yuuz12/dsh-webui-auth adding a deny-by-default allowlist route gate over resources, plugin bundles, /api and WebSocket upgrades; password and OIDC/SSO login with an SSO-only mode; server-side sessions with HttpOnly cookies plus a per-browser session list and selective revocation; an OAuth 2.1 device authorization flow (RFC 8628) for app and CLI access, with independent device sessions that expire only on explicit revocation; and a core session bridge that exchanges the launch cookie on the server without exposing the launch token. It is a fork of Yuuz12/dsh-webui-auth and cannot be installed alongside it — remove the original from the profile's bundle list first.

Appends one short user message before the next step when the model is circling: the same absolute path written three times, the same normalised tool error returned twice, or two steps since the last write with neither a verify nor a search. Verification is recognised from four tool names (`ops_bash`, `lsp_diagnostics`, `verify`, `run_tests`), searching from eight. Each signal fires once per turn and only after a new write or error, is silenced for the whole turn when you say not to search, and is skipped in subagent sessions. Ships the `stuck-gate` skill at bundled rank 600, so a user-level copy at rank 400 overrides its wording without touching code, plus a read-only gain panel at `/better-debug` that counts firings, sessions covered and whether the next tool call changed class; it does not estimate tokens saved.

Evidence-gated acceptance for research reports: claims, citations, data scope and method limits each need a tick plus written evidence before a deliverable can pass, with same-artifact revision history and a standalone SHA-256 receipt that says when the bytes moved.

A project lead for DeepSeek Harness. Opening a session with the dsh-master preset in a folder makes it that project's master: it splits your requests into tasks, dispatches them to member sessions over plugin-delivered messages, collects structured reports and stops at every gate for review. Members ask you only through the master, as clickable cards on a native side-panel board. A tagged devlog is pushed back into context before related files are touched. Guards keep agents off the plugin's state and git index, and a quiet patrol plus a safety-net schedule watch for stalls. One-click pause per project; all state stays local. Requires DSH 0.2.1 or 0.2.2, has only been tested on macOS, and the UI is Chinese-only.

Evidence-gated teaching-material workbench with a Web UI: page model, per-page handout and slide editing, PAEG Chinese language checks, layered gates, checks center, version history, handout/deck/storyboard/Manim-script export and rights audit.

Windows host rules for DSH agents: one skill with nine individually switchable rules (UTF-8/BOM, CRLF-LF per file type, build output, SmartScreen, _scratch isolation, screenshot privacy gate, teardown, shared-doc lock, local trust marks) and six bundled dependency-free scripts.

Mail automation for DSH: IMAP IDLE sync, a follow-up queue, agent summaries through DSH sessions, approval-gated sending, and per-account HTML signatures with inline images. Windows only: mailbox passwords are encrypted with Windows DPAPI, and the credential store refuses to operate on other platforms.

Companion persona preset with persistent memory, presence heartbeat, idle updates, and a delegated helper agent with built-in fetch and CDP web tools.

Switches that tune how DeepSeek Harness looks and behaves across the whole interface, not just a few screens; each works on its own and more arrive as the shell grows. Theme gallery of eight minimalist themes, each defining one palette for light and one for dark and applied through a single theme-token layer, plus sidebar panel folding that collapses the rail rows into one Panels launcher with search and keyboard control, and reload/restart actions at the sidebar foot. Each feature is gated by runtime detection: what the current build cannot do is disabled with a stated reason, and an unknown probe stays enabled. The sidebar Reload/Restart buttons are ported from the separately listed MoonSand/dsh-desktop-restart; uninstall that plugin before installing this one — with both, the sidebar foot shows two sets of buttons.

Digital Study: a private WeRead study in the DSH sidebar, in a calm light-green paper palette. The shelf folds into ten categories and carries a slightly deeper paper tint of its own; highlights and thoughts page through, copy per item, and export as front-matter Markdown (one file per book or a cross-book batch) into a folder you choose; the whole study backs up and restores as a single JSON bundle. Thoughts read like handwritten notes: looser line height, the source book shown in full, long entries folding behind a show-all control, and a same-chapter highlight block for context. A five-shade reading heatmap draws only the days up to today, keeps its numbers on one line underneath, and a year-scoped KPI dashboard sits above it. Sync is incremental: a local ledger plus per-book counts mean an unchanged library refreshes in 2-3 seconds instead of a full pull, and a banner reports progress and dismisses itself after eight seconds. Search covers shelf, books, highlights and thoughts with type filters. Reads WeRead through the official agent gateway using your own API key, keeps everything in local JSON and never writes back. Requires DSH >=0.2.2-rc.1.

A three-scope TODO board for DeepSeek Harness (user, workspace and session) with nested folders that can reference one item from several places, T0–T9 priorities, drag reordering, batch actions, a floating panel that also opens as a right-sidebar tab, Markdown preview windows that can stay open with autosaving title and body editing, and agent read/write tools, with every write gated by DSH approval.

Turns every .pluginlet file under a repo's .dsh/pluginlets/ (directories configurable) into its own sandboxed Conversation View tab, gated by a capability grant bound to the file content hash.