Plugins

Fail-closed Feishu (Lark) channel bridge: chat with a bot, get dsh agent turns back — with opt-in human-in-the-loop tool approval (Allow/Deny cards before every bash call, fail-closed timeout). Official-Python-SDK-only integration (exact-pinned); deny-by-default allowlist, webhook signature/timestamp/replay verification, per-chat sticky sessions; daily latest-SDK compatibility canary; bilingual docs.

Windows desktop-control plugin for DeepSeek Harness: screenshot, local OCR and UI Automation with a content policy (dangerous labels / sensitive windows / secrets) and action verification (hit-test, expect, verifyText). Fork of qingying012/dsh-desktop-con

Drive local Origin/OriginPro from chat via 27 MCP tools: import .dat/.csv/.txt and CHI workstation .bin files, plot, style, fit, and deliver PNG/TIF/SVG/PDF plus an editable .opju project, with read-back verification on plots, styles and exports. Requires Windows, Origin/OriginPro 2021+ and Python 3.10+, plus `pip install originpro numpy` into the interpreter dsh launches: without the package every tool answers `missing_originpro`, and without an interpreter on PATH no tools register at all.

Freshness gate for the agent's test, typecheck, lint and build claims: each verification run becomes a receipt on tools/post-execute, file edits are tracked, and on agent/turn-stopping a claim whose latest receipt is stale, failed or has no readable result steers one more step naming the receipt and the files edited since.

Evidence-driven company and job due-diligence for DSH: logs sources with evidence levels, adds evidence-bounded claims, verifies the legal entity against official registries, and renders a PROCEED/VERIFY/STOP report with a verification checklist and interview questions.

Install tab in Settings → Plugins: install, update and remove any plugin by npm spec, `github:user/repo` or local path through the same `dsh plugin add` CLI path; update checks against npm latest or GitHub HEAD with a downgrade guard and resolved-version verification, a pnpm 11 release-cooldown bypass on every add/remove, and service restart via the DSH Desktop shell or a relay process under standalone `dsh web`.

Open plugin marketplace: live GitHub dsh-plugin topic search with per-repo package.json verification (dsh.bundle/dsh.client manifest badges and a verified-only filter), npm-first installs with same-source anti-squatting checks, update detection, and five agent tools for headless use.

Plugin store: npm authoritative catalog + awesome curated list (550+ plugins, 11 categories), dsh-field quality verification, official `dsh plugin add/remove` one-click install, sidebar + settings entry.

Writes local JSONL summaries of per-turn tool counts and coarse verification signals without storing prompts, tool arguments, or result text.

Evidence-based experience learning for DeepSeek Harness

Local long-term memory for DSH sessions: archives older turns under context pressure, with a turn-summary index for faster turn lists, statistics, window probing and archive planning (rebuilt automatically when unavailable, with a manual full verification), four tiered hot-memory boards, project documents with enabled/disabled/archived filters and optional owner-controlled family sharing, project hot memory, dual user/assistant turn previews, memory families with editable names and root transfer, root-abdication recovery, orphan-family takeover, summary keyword locator with segment-level candidates and paging, manual injection, 20K segmented reads, and tag-related retrieval. Includes staged recall cues, automatic compatibility with older memory layouts, and post-install version verification. Off in each new session until you turn it on with `/palace on` or the Memory Palace tab. All data stays in the workspace.

Xander Amazon seller-operations toolkit for DeepSeek Harness: 33 native xander_* tools and 7 skills for competitor research, keywords, listings, ads, replenishment and profit, with exact proposals, explicit approval and read-back verification for Amazon changes.

Eight academic skills bundled for one-command install — publication-ready academic figures designed from real data with visual review, AI-text humanization, paper polishing and rewriting, PubMed citation verification (DOI/PMID reconciliation), Chinese citation and medical-book reference checks, and WeChat medical article structuring. Three skills run fully local, five call external services only when used (NCBI E-utilities, DOI resolvers, publishing platforms), declared per skill. Zero telemetry, no install-time scripts. Skills run local Python 3.8+; the academic-figures skill also needs its pip dependencies installed.

AOCI cognition panel for DSH: multi-workspace AOCI overview, per-repo index and governance view, MCP binding diagnosis, and guided or batch initialization. Governance, verification and guided/batch initialization require the external aoci CLI on the host; index browsing works without it.

Optional read-only bridge plugin that publishes live dsh session and token statistics as one JSON snapshot for the standalone dsh-minato toolkit to read.

DeepSeek Harness plugin that keeps the agent's green claims honest: verification runs become receipts, edits are tracked, and a stale, failed or masked "all tests pass" is turned into a rerun instead of an ending.

Runs 3 or 5 coding-agent candidates in detached Git worktrees, validates their patches with project commands, ranks only passing candidates, and requires separate approval before applying the winner.

Export and import DeepSeek Harness configuration across machines as same-OS .dshmig archives, with credential redaction, verification and rollback.

Remote-SSH-style workspaces: turn an SSH host and a remote directory into a native DSH workspace; the agent operates the remote filesystem directly via 12 rw_* tools (SFTP/exec), with workspace-confined paths and known_hosts verification.

Session execution analytics: steps, tool calls, failures, repeated actions, token usage and verification signals, rendered as text/Markdown/JSON reports.

Code review center for DSH, built on open-code-review: reviews current changes, commits, branch ranges, project architecture, code modules and business data flows, with live progress, a GitHub-style commit heatmap, fixed markers, automatic fix verification, light/dark themes and one-click fix sessions. Requires git and the open-code-review CLI 1.13 or later (npm i -g @alibaba-group/open-code-review); reviewed code is sent to the LLM configured for that CLI, or to the session model when the review is delegated to it, and reopening a report after a fix session re-runs the review to verify the fixes.

DSH Agentrix supports coordinator-led direct work or delegated tasks using configured execution models, dispatch-time coordinator models for review, progress and request usage tracking, and a read-only acceptance view with deliverables and verification evidence. Verified only on Windows with PowerShell 7 (pwsh) and Git; other systems are untested.

Research workflow suite that registers 10 domain skills and 15 tools, curates 450 bundled research skills into 103 capability cards with an auditable per-skill ledger, and takes over research requests automatically through a system-prompt section. Tools cover real R/Python execution (off by default, two-phase preview then confirm), data gates, figure and docx auditing, .docx generation in Chinese-journal style, live PubMed search, field-level DOI verification, and cross-session project memory.

Windows computer use for DSH built on a native C# engine: text-only DeepSeek models can read UI Automation controls and fill forms in verified batches without screenshots, stale control refs can be re-found by unique identity, CAPTCHAs and verification codes are refused and handed back to you through the DSH approval prompt, and Esc stops the turn at any time. A derived project based on Yu-tao-Li/dsh-computer-use-win; do not install it together with that upstream plugin, since both drive the same desktop.