Plugins

Ship OpenTelemetry GenAI observability and multi-device cloud state sync from one DSH bundle. It reuses and replaces the standalone @loongsuite/dsh-plugin (traces + metrics for sessions, agent loop, LLM and tool lifecycle; do not install both — disable or remove the upstream plugin first), and adds a WebSocket client that pushes full session event logs (header + snapshotEvents) to a relay you run so different local DSH instances share state. On connect it pulls and rebuilds the other devices' sessions automatically (cross-device resume). The sync client itself has zero third-party runtime dependencies; a small Node.js relay is included in the repo. The local /cloud-sync/* HTTP routes (status, sessions, config, resync, delete) have no origin or loopback check, and the bundled relay accepts unauthenticated connections unless AUTH_TOKEN is set — keep the DSH web port off untrusted networks and run the relay with a token.

Delete sessions, optionally with the files each session wrote; deletions go to a trash that lists them by time and restores one or many; a session with a running turn is refused and nothing outside that session folder is touched.

Model console panel: switch the model for every conversation at once or one at a time, filter sessions by idle time, fold subagents under their parent session, and bulk archive or release sessions.

Blocks the end of a turn while temporary files from that turn are still lying around: it registers a listener on the serial agent/turn-stopping hook and, if anything is left, steers the model with the file list and two ways out — delete them, or justify each one and move it somewhere deliberate. Candidates come from two narrow temp-file sources, plus a backup-retention channel that is on by default and flags excess .bak copies of files touched this turn. The first is the .agent-tmp/ convention directory under the session cwd: whatever is left in it is reported outright, because that directory exists only for throwaway files. The second is the paths this turn actually wrote, captured through the fs/write-intent hook; those are reported only when they sit under that cwd, fall outside .git, node_modules, .tmp-sessions and out, match a temp-file pattern, and the file is still present — which is what keeps junk already sitting in the workspace from being resurrected as a complaint about this turn. One steer per turn, subagent sessions skipped, nothing deleted by the plugin in the default steer mode (only the opt-in mode: prune deletes backups), and the check is readdir plus stat only.

Ask a vision-capable model about a local image from any session, including sessions whose own model is text-only. On the default path the plugin calls the host's route in-process with ctx.llm.stream(), so the host's credentials stay inside its provider adapters; only the optional direct/custom OpenAI-compatible routes read one key (from the plugin config or an apiKeyRef into ~/.dsh/.credentials.yaml).

Electron browser with two faces. For agents it is a runtime: a daemon hands out port leases so several agents drive isolated, profile-backed sessions (25 session tools — navigate, act, observe, screenshot, batch runs, upload_file — including network_capture/responses for reading XHR/fetch bodies through a real browser), and it needs no window. For demos it splits a web walkthrough into a Stage window for the audience and a hidden Recorder that produces 1080p30 video with evidence files over CDP, without forking the browser engine; flows are scripted as scene.yaml packages driven from a Director console plus a loopback control API on 127.0.0.1:7317; headless recording shows no window, takes no focus and stays out of the Dock. Requires Node 22.12+ on the 22 line, 24.x, or 26+ (the 23 and 25 lines are excluded).

Persistent Codex advisor threads for DSH sessions, with six native tools, a Codex trail, a sidebar status card, and explicit model/effort provenance. Requires a locally installed Codex CLI with app-server support and a logged-in ChatGPT/Codex account (the CLI is not bundled); tested on Windows 11 with DSH Desktop 0.2.1-rc.5.

Elysia's memory plugin for dsh. One shared, human-editable MEMORY.md across every session: two-disk mirror, history snapshots, cross-process write lock; entries tier between the main file and a searchable archive by hit frequency; retrieval is keyword co-occurrence plus BM25. Nine sections (persona, requirements, corrections, lessons, methods, requests, sessions, method library, ingested docs) plus a dedicated self-identity section for a character's own self-cognition, injected above the persona. Ships an opt-in memory pack (packs/elysia: 61,903-char identity + 2,482-char persona, distilled from 1,696 officially-confirmed voice lines and 112,175 dialogue lines — not written by hand, measured) that is off by default, backs up before writing, only touches identity/persona, and can be uninstalled. Also opt-in voice playback through a local GPT-SoVITS engine, a skills library, and a sticker library that sends a fitting sticker at the right moment.

Names sessions as a category plus a short topic. A sidebar action reads the conversation, asks its model for the pair, and pre-fills an editable title; a smart_rename_session tool gives the same naming to the agent, which renames the session it runs in when the topic moves on.

Agent-facing keyword search over local DSH session logs: session_search returns matching sessions with timestamps and excerpts, session_read dumps one conversation, and both skip injected context such as memory snapshots; no index is built.

Mirrors other coding agents' sessions into DeepSeek Harness as continuable tasks, one workspace per application, with content-fingerprint deduplication.

Slumber Pavilion physically moves archived DSH sessions out of the load path into ~/DSH-Archive, and ships archive, read, restore and delete tools for them.

Select-all cleanup for archived DeepSeek Harness sessions: deletes the session log, projection cache, workspace accounting and archive marker, cascades subagent logs, and can also remove unreferenced attachments, the request-image cache, the workspace files a Session wrote and leftovers of already-deleted Sessions.

QQ (OneBot 11 / NapCat) channel for DeepSeek Harness: bridges QQ private chats and group chats into their own dsh sessions. Ships group guardrails (mention-only, quiet hours, cooldowns, daily quota, peak-hour mute), a tool gate with write-action audit, an outbound filter that stops the model from echoing input tags, voice transcription, media and forwarded-card support, dryRun and usage stats. Forked from dsh-onebot-qq 0.9.4. Cannot be installed alongside the upstream dsh-onebot-qq (two QQ channels on one NapCat crash-loop DSH). Private chats answer admins only (an empty admin list means nobody); group chats default to all groups and answer any @-mention, so set groupPolicy to allowlist to restrict who can drive the agent.

Writes one model and reasoning effort into every session at once from a control beside the composer model picker, since the shipped picker only changes the session you are in. Sessions that already match are skipped, subagent sessions follow their parent instead of being written, and the same selection can be pinned as the default for new sessions.

Replaces the sidebar workspace list with a Codex-style browser: sticky Pinned / Projects / Recent sections, status marks for working, awaiting approval, interrupted, and completed sessions, right-click sorting plus workspace rename and delete, and per-session pin and archive menus.

Gives each Workspace a stable tint from a warm-to-cool ramp, sets its name as a section heading above indented Sessions, and turns a finished unread chat's row green.

General-purpose chat agent on a parent agent + worker sub-agent split, for DSH Desktop only: a sidebar row opens each assistant's long-running conversation, where the parent chats, records schedule, lists, memos, logs, profile, persona and projects as plain files in that assistant's workspace folder, and hands other work to background workers through the bundled complete-subagent, picking each worker's model from the ones you enable and approving their write access. A heartbeat wakes it for reminders, a daily brief and wake-ups it sets itself, and holds back during quiet hours. Through the bundled im-robot it chats over WeChat: the model decides per reply with im_route whether the reply also goes to WeChat, and images and files sent from WeChat appear in the conversation and stay in the workspace's IM/WeChat folder for a set number of days. Its tools never appear in normal sessions.

Inject soulbridge context into DSH sessions and feed user turns back as observations.

Drive locally installed Codex CLI and Claude Code from DeepSeek Harness through a settings page and agent tools, exposing their sessions, configuration and run state.

Adds an Artifact Space entry to the DSH sidebar that lists the final effective artifacts of each session, grouped by workspace and session, with an editor-style preview, image previews, search across workspaces and sessions, favorites, and provenance for every file.

Read-only persona injection for DSH: when a session opens inside your workspace, your persona files and the latest diary entries are prepended to the system prompt, and those source files are never modified. It keeps a short cross-session feed of recent messages under <root>/live/feed.json and can write a QQ hand-off file at <root>/live/web-for-qq.md; nothing is uploaded. Variable blocks (clock, recent actions, other sessions) are delivered as a per-step context message, so the prompt prefix stays byte-stable and keeps its cache.

Session manager and session settings for the DSH sidebar: sessions grouped by workspace with archive filters, title search, batch archive and a read-only transcript preview; global and per-workspace name, occupation and instructions injected into the system prompt; optional recent-only and hide-workspace filters for the sidebar.

One main session coordinates several root sessions: a /relay command and 15 peer_* tools for batched status reports, a version-line notice, task-board claims, handoff and wake, repository watch, read-only session inspection, and a web panel. Phone notifications need the DSHA device bridge.