Plugins

Meta's Muse Code CLI inside DSH: a composer switch starts muse serve, a right-sidebar panel and five chat tools (muse_open, muse_prompt, muse_read, muse_status, muse_interrupt) share one Muse session, approvals are decided only in the panel, and a local spend guard hard-stops at $10 by default. Windows only; needs the Muse Code CLI installed and signed in. The $10 cap is a local estimate for the muse serve this plugin starts.

DSH plugin: pop a Windows toast the moment an approval is requested, so you notice even when DSH is in the background. | DSH（DeepSeek Harness）插件：任务需要审批或跑完时弹 Windows 原生通知，只在 DSH 不在前台时提醒。

Agent Memory plugin for DeepSeek Harness: local, file-per-memory long-term memory with human approval.

A separate narrow-screen web surface for DeepSeek Harness rather than the desktop GUI scaled down: it serves its own session list and chat stream behind a random access token over LAN, a tunnel (cloudflared, localtunnel or localhost.run) or an SSH reverse forward through a server you own. On the phone it streams assistant text, thinking, tool calls and results, sends prompts, stops the running turn, answers blocking questions and tool approvals (including ones waiting in other sessions), switches model, thinking level and permission preset, sends up to four photos compressed on the device, and keeps the computer awake.

Connects DeepSeek Harness to the hosted Local Commander MCP server at localcmd.app via mcp-remote with browser sign-in, to read files and Git, run the checks you approve and check local services on your Windows computers. Requires a Local Commander account and the paired agent running on the Windows PC.

A global permission watchdog: a hard budget on auto-approved permission requests. At most 10 per rolling 60 seconds, at least 3 seconds apart; anything past either limit is deferred to the human answerer and waits. It never refuses and never changes what is asked -- it only decides who answers and how fast. Installs disabled; enable it with the plugin manager toggle.

Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an HTML report with GB/T 22239-2019 control mapping. Needs Java 8+ and a DmJdbcDriver jar you provide yourself.

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Safe detached DSH restart: /restart and /dsh-restart slash commands with native candidate styling plus a dsh_restart agent tool; a detached worker restarts DSH after 3 seconds without freezing the session, and Windows/macOS use a native Node helper built on the official appExit service.

Rebind running sessions onto a rebuilt agent-preset revision, so preset changes apply without restarting dsh.

macOS 13+. Plays a macOS system sound when DeepSeek Harness needs a tool approval, an agent question, a macOS permission prompt, or an administrator password sheet, then repeats on a 0/25/20/15/10/5 second cadence until the request is resolved. Ships as a bundle with a switch and a config form in the Plugins page.

Sends an Edge/Windows desktop notification when a tool call waits for approval, the agent asks you to choose an option, or a session finishes a turn, and only while the DSH page is in the background or unfocused; an optional chime covers cases where the browser or Windows suppresses the notification.

Merge requests, review threads and pipeline job logs for GitLab over its REST API with a personal access token, in a side panel, with comment, reply, resolve and approve actions that wait for confirmation. Reads need the read_api scope, writes need api.

Settings page for agent modes (presets): switch up to 15 capabilities per mode (commands, files or read-only files, web, subagents, and more) or individual plugin rows; edit each mode's system prompt with variable checks, a full preview, version history, optional live updates for running sessions, and an approval-gated mode_prompt chat tool; create modes from four starter templates or copies; merge built-in updates after a dsh upgrade while keeping your changes, and turn off rows that fail to load.

Saves architecture and validated plans, runs native AgentTeams workers with approval, parallel coding and independent review, and summarizes progress and verification results.

Codex-style hook management ported to dsh: hooks.json discovered from config, plugins and projects, each hook pinned to a sha256 fingerprint that must be approved before it runs; a review dialog in the composer, a `/hooks` browser, per-hook run stats, and trust / enable / dry run in Settings -> Hooks. The config file is dsh's own, with dsh event names.

Keeps a DeepSeek Harness run going on its own: continues a turn that ended abnormally, and continues a turn logged as completed while the model tool call was emitted as plain text instead, which leaves the agent silently idle. Revives a model request that stops streaming. A wait on an approval or on a question is logged and notified, never answered.

Generative background music while the model streams, plus completion, approval and attention chimes: hear whether the agent is thinking, still working, or waiting for you without watching the screen.

Vision relay for text-only models: a configurable GLM-compatible vision endpoint analyzes the images you attach in the background and the original model keeps answering in the same session, leaving your message, image, model and history untouched. Requires applying patches/0001-session-image-admission.patch to a stock DSH install (images are rejected before storage otherwise); the repo ships an apply/restore script.

On-screen test-progress HUD for DSH — a click-through panel drawn over the app under test, showing each step's expectation vs actual and whether the waiting human may take back the mouse and keyboard. Ships a universal prebuilt binary (arm64 + x86_64), so no Xcode Command Line Tools are needed; the panel itself requires macOS 14+.

Let the agent restart its own DSH host: schedule a self-restart, finish the turn first, then a detached helper stops and relaunches the app and reports what happened. Dry-run, a status check, and an optional "when can I blink" confirmation are built in.

Connects the Drafta notes app to DeepSeek Harness over MCP, so the agent can search, read and write notes in your local Drafta library.

Local knowledge base for DSH: one Markdown file per note, with tags, hierarchical folders, full-text search, attachment opening via the system default app, zero-dependency Office text extraction, and citation into the conversation. Built for host DSH 0.2.0-rc.2; on Windows the default root is E:/dsh-kb.

Adds job-role prompts to the DSH composer: type - at the start of the input to pick a role, which becomes a reference chip in the draft and is then injected as a system prompt section on every turn of that conversation, so the instruction keeps applying without showing up in the transcript. Roles are added and edited on a Settings page and stored in ~/.dsh/dsh-role-prompts.md.