Plugins

Pixel Whale: a hand-drawn pixel-art whale pet swimming in a small aquarium in your DSH sidebar. It cruises around, bobs, blinks and blows pixel bubbles; click the water to drop food and watch it swim over to eat (pixel hearts), click the whale to pet it. Pure client-side, zero network, zero config.

A small bead-art game in the DSH Web right sidebar for the wait while the model replies: 12 built-in templates with guide beads, free drawing in 16 colors on 12/16/24 boards, a pattern drawn by the model from one sentence, on-device picture-to-pattern conversion (pictures are never uploaded), ironing finished pieces onto a wall of up to 60 works, and PNG export.

Spanish practice panel for DeepSeek Harness: six locally graded drill types (verb conjugation across 11 tenses, noun gender, plurals, vocabulary recognition, sentence cloze, ser/estar and subjunctive grammar points) plus a model-graded scenario-writing tab, 8-level spaced repetition, and four agent tools. Answers are computed and graded inside the plugin, so the model is only used for teaching and explanations.

Local meme-sticker library: import from a file, a folder or the agent tool, tag images in a review queue you confirm yourself, group them, then let the agent search and send by mood. A design descendant of Loping151/dsh-nekowhale-stickers (no shared code; its sticker_* tool names differ, so the two can be installed side by side).

Controls an already-running NetEase Cloud Music desktop client over CDP (the client must be started with --remote-debugging-port=9222) and searches songs through NetEase's public web API; no API key or extra login, and member-only features use the client's own signed-in account.

Typing effects, companions and sounds for DSH: theme presets with pets or whale, combos, fullscreen glow and optional key sounds.

Choose three cards from a shuffled 78-card tarot deck, reveal source-linked meanings, and refine the reading through follow-up questions.

Self-hosted plugin marketplace for DeepSeek Harness with accounts, groups, permissions, artifact storage, and install statistics; run the server with Docker and install this client bundle in DSH.

A plugin center for DeepSeek Harness: install, update and enable DSH plugins, aggregate plugin index sources, and install from a git branch. Also publishes a subscribable format-1 plugin index.

Automatically groups installed plugins in dsh-market on startup.

Expose local listening ports as public HTTPS URLs via Cloudflare Tunnel, with automatic DNS management and one-click token template authorization.

Adds chunked uploads with progress and resume, and native downloads of workspace files and the session log ZIP, to the DSH Web GUI, including sessions reached through a paired remote link.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectures the program needs (one or several), checks conflicts between them, teaches the session AI after repeated failures, and teaches the session AI after repeated failures; once you grant it review authority in its panel, it gates task completion until the review passes (without that authorization it only observes).

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

Audits DeepSeek Harness plugins: a read-only pre-install check that grades a package S–D before it is installed, plus a runtime monitor that records plugin start/stop, sensitive tool calls and per-plugin token estimates in a settings panel.

Reviews destructive shell commands with a model before they run, asks you to confirm or blocks them, and aborts a running command once it has deleted too many files.

Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_roots denies every path-like call), a per-minute call limit and a JSONL audit, exposed through gate_check / gate_check_path / gate_policy and ctx.gate — other plugins or prompts must call the gate; it does not intercept tool calls by itself.

Shared diagnostic log used by the Claw agent governance plugins (dsh-claw suite).

Runs DeepSeek Harness bash commands inside the workspace's Nix dev shell whenever a flake.nix is present.

Starts DSH at Windows logon by writing HKCU\Software\Microsoft\Windows\CurrentVersion\Run, and removes exactly that value when the plugin is disabled or uninstalled. 84 lines, no daemon, no background process, no service — the entry is written through execFileSync so a spaced install path stays quoted and actually launches.

Repairs domains blocked by SNI filtering on Windows from inside DSH, without any self-hosted server.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

In-process crash guard: takes over the fatal-error handlers that would exit DSH, names the responsible plugin from the stack, and disables only that row in the home patch layer, leaving the profile and the provider config inside it untouched. The crash page offers retry, keep-disabled or uninstall, and opens a temporary safe-mode session when no culprit can be named (CLI and web launches only).

Reads IDEA run configurations and launches Java, Spring Boot and Vue projects inside DeepSeek Harness, with colored logs and a fast java -cp startup path.