Plugins

Token usage for the DeepSeek Harness web UI: a header chip opens a panel with a 26-week daily heatmap (four blue levels scaled to the busiest day), a per-model bar chart, and totals for all / 30 / 7 days — tokens, sessions, calls, active days, peak hour and top model. Reads local session logs only, no network.

Lands the chat viewport on your most recent own message when you open a finished session, instead of the bottom of the conversation; running sessions still follow the bottom. Client-only: it reads the viewport and never touches files, credentials, subprocesses, or the network.

Project, session and todo workbench for the DeepSeekRuntime web UI: projects in grid or list view with rename, pin, favorite, archive and restore; sessions browsed per project with body preview, rename, archive and delete; todos with priority, Markdown notes, image or file attachments, search and filters. State is kept in a plugin-owned host storage domain (dsh_workbase). 11 agent tools read and update todos of the project the calling session belongs to using version-checked writes, and the same panel covers project diagnostics, plugin updates and encrypted backup and restore.

Sync DeepSeek Harness sessions across devices through a git repository, with optional timed auto-push, a Settings page, and /sync commands.

Fork of Yuuz12/dsh-webui-auth adding a deny-by-default allowlist route gate over resources, plugin bundles, /api and WebSocket upgrades; password and OIDC/SSO login with an SSO-only mode; server-side sessions with HttpOnly cookies plus a per-browser session list and selective revocation; an OAuth 2.1 device authorization flow (RFC 8628) for app and CLI access, with independent device sessions that expire only on explicit revocation; and a core session bridge that exchanges the launch cookie on the server without exposing the launch token. It is a fork of Yuuz12/dsh-webui-auth and cannot be installed alongside it — remove the original from the profile's bundle list first.

Appends one short user message before the next step when the model is circling: the same absolute path written three times, the same normalised tool error returned twice, or two steps since the last write with neither a verify nor a search. Verification is recognised from four tool names (`ops_bash`, `lsp_diagnostics`, `verify`, `run_tests`), searching from eight. Each signal fires once per turn and only after a new write or error, is silenced for the whole turn when you say not to search, and is skipped in subagent sessions. Ships the `stuck-gate` skill at bundled rank 600, so a user-level copy at rank 400 overrides its wording without touching code, plus a read-only gain panel at `/better-debug` that counts firings, sessions covered and whether the next tool call changed class; it does not estimate tokens saved.

A project lead for DeepSeek Harness. Opening a session with the dsh-master preset in a folder makes it that project's master: it splits your requests into tasks, dispatches them to member sessions over plugin-delivered messages, collects structured reports and stops at every gate for review. Members ask you only through the master, as clickable cards on a native side-panel board. A tagged devlog is pushed back into context before related files are touched. Guards keep agents off the plugin's state and git index, and a quiet patrol plus a safety-net schedule watch for stalls. One-click pause per project; all state stays local. Requires DSH 0.2.1 or 0.2.2, has only been tested on macOS, and the UI is Chinese-only.

Mail automation for DSH: IMAP IDLE sync, a follow-up queue, agent summaries through DSH sessions, approval-gated sending, and per-account HTML signatures with inline images. Windows only: mailbox passwords are encrypted with Windows DPAPI, and the credential store refuses to operate on other platforms.

Host-side HTTP bridge on 127.0.0.1:39217 with a Bearer token stored at 0600: external processes can create real DSH Desktop sessions that appear in the workspace sidebar, send prompts (queue or steer), read state and the last assistant reply, list workspaces and sessions, and long-poll until a turn finishes. Zero runtime dependencies; fixed loopback port; no outbound network; message bodies are never logged.

Elysia's memory plugin for dsh. One shared, human-editable MEMORY.md across every session: two-disk mirror, history snapshots, cross-process write lock; entries tier between the main file and a searchable archive by hit frequency; retrieval is keyword co-occurrence plus BM25. Nine sections (persona, requirements, corrections, lessons, methods, requests, sessions, method library, ingested docs) plus a dedicated self-identity section for a character's own self-cognition, injected above the persona. Ships an opt-in memory pack (packs/elysia: 61,903-char identity + 2,482-char persona, distilled from 1,696 officially-confirmed voice lines and checked against a 112,175-line game-dialogue corpus) that is off by default, backs up before writing, only touches identity/persona, and can be uninstalled. Also a skills library and a sticker library (you import your own images; none are bundled) that sends a fitting sticker at the right moment. On by default: a text bubble with her avatar after each reply, which costs one extra small model request unless the agent already announced (voice.bubble: false turns it off). Opt-in voice playback needs a local GPT-SoVITS engine (about 27 GB, installed separately, NVIDIA GPU required; the plugin downloads about 200 MB of weights) and is Windows-only; the automatic second-drive mirror is Windows-only too (elsewhere set mirrorPath, otherwise there is no mirror).

Ship OpenTelemetry GenAI observability and multi-device cloud state sync from one DSH bundle. It reuses and replaces the standalone @loongsuite/dsh-plugin (traces + metrics for sessions, agent loop, LLM and tool lifecycle; do not install both — disable or remove the upstream plugin first), and adds a WebSocket client that pushes full session event logs (header + snapshotEvents) to a relay you run so different local DSH instances share state. On connect it pulls and rebuilds the other devices' sessions automatically (cross-device resume). The sync client itself has zero third-party runtime dependencies; a small Node.js relay is included in the repo. The local /cloud-sync/* HTTP routes (status, sessions, config, resync, delete) have no origin or loopback check, and the bundled relay accepts unauthenticated connections unless AUTH_TOKEN is set — keep the DSH web port off untrusted networks and run the relay with a token.

Spotlight & IntelliJ-style centered search dialog for sessions and chat messages, replacing sidebar search.

Delete sessions, optionally with the files each session wrote; deletions go to a trash that lists them by time and restores one or many; a session with a running turn is refused and nothing outside that session folder is touched.

Model console panel: switch the model for every conversation at once or one at a time, filter sessions by idle time, fold subagents under their parent session, and bulk archive or release sessions.

Blocks the end of a turn while temporary files from that turn are still lying around: it registers a listener on the serial agent/turn-stopping hook and, if anything is left, steers the model with the file list and two ways out — delete them, or justify each one and move it somewhere deliberate. Candidates come from two narrow temp-file sources, plus a backup-retention channel that is on by default and flags excess .bak copies of files touched this turn. The first is the .agent-tmp/ convention directory under the session cwd: whatever is left in it is reported outright, because that directory exists only for throwaway files. The second is the paths this turn actually wrote, captured through the fs/write-intent hook; those are reported only when they sit under that cwd, fall outside .git, node_modules, .tmp-sessions and out, match a temp-file pattern, and the file is still present — which is what keeps junk already sitting in the workspace from being resurrected as a complaint about this turn. One steer per turn, subagent sessions skipped, nothing deleted by the plugin in the default steer mode (only the opt-in mode: prune deletes backups), and the check is readdir plus stat only.

Ask a vision-capable model about a local image from any session, including sessions whose own model is text-only. On the default path the plugin calls the host's route in-process with ctx.llm.stream(), so the host's credentials stay inside its provider adapters; only the optional direct/custom OpenAI-compatible routes read one key (from the plugin config or an apiKeyRef into ~/.dsh/.credentials.yaml).

Electron browser with two faces. For agents it is a runtime: a daemon hands out port leases so several agents drive isolated, profile-backed sessions (25 session tools — navigate, act, observe, screenshot, batch runs, upload_file — including network_capture/responses for reading XHR/fetch bodies through a real browser), and it needs no window. For demos it splits a web walkthrough into a Stage window for the audience and a hidden Recorder that produces 1080p30 video with evidence files over CDP, without forking the browser engine; flows are scripted as scene.yaml packages driven from a Director console plus a loopback control API on 127.0.0.1:7317; headless recording shows no window, takes no focus and stays out of the Dock. Requires Node 22.12+ on the 22 line, 24.x, or 26+ (the 23 and 25 lines are excluded).

Persistent Codex advisor threads for DSH sessions, with six native tools, a Codex trail, a sidebar status card, and explicit model/effort provenance. Requires a locally installed Codex CLI with app-server support and a logged-in ChatGPT/Codex account (the CLI is not bundled); tested on Windows 11 with DSH Desktop 0.2.1-rc.5.

Elysia's memory plugin for dsh. One shared, human-editable MEMORY.md across every session: two-disk mirror, history snapshots, cross-process write lock; entries tier between the main file and a searchable archive by hit frequency; retrieval is keyword co-occurrence plus BM25. Nine sections (persona, requirements, corrections, lessons, methods, requests, sessions, method library, ingested docs) plus a dedicated self-identity section for a character's own self-cognition, injected above the persona. Ships an opt-in memory pack (packs/elysia: 61,903-char identity + 2,482-char persona, distilled from 1,696 officially-confirmed voice lines and 112,175 dialogue lines — not written by hand, measured) that is off by default, backs up before writing, only touches identity/persona, and can be uninstalled. Also opt-in voice playback through a local GPT-SoVITS engine, a skills library, and a sticker library that sends a fitting sticker at the right moment.

Names sessions as a category plus a short topic. A sidebar action reads the conversation, asks its model for the pair, and pre-fills an editable title; a smart_rename_session tool gives the same naming to the agent, which renames the session it runs in when the topic moves on.

Agent-facing keyword search over local DSH session logs: session_search returns matching sessions with timestamps and excerpts, session_read dumps one conversation, and both skip injected context such as memory snapshots; no index is built.

Mirrors other coding agents' sessions into DeepSeek Harness as continuable tasks, one workspace per application, with content-fingerprint deduplication.

Slumber Pavilion physically moves archived DSH sessions out of the load path into ~/DSH-Archive, and ships archive, read, restore and delete tools for them.

Select-all cleanup for archived DeepSeek Harness sessions: deletes the session log, projection cache, workspace accounting and archive marker, cascades subagent logs, and can also remove unreferenced attachments, the request-image cache, the workspace files a Session wrote and leftovers of already-deleted Sessions.