Plugins

macOS only: holds a PreventUserIdleSystemSleep assertion (caffeinate -i -w <host pid>) while any DSH session runs, and releases it when the last one stops, so a long turn is not cut off by idle sleep. The display may still turn off. It keeps holding through the maintenance phase, where Agent.status reports idle and a long manual /compact runs, via the compaction/start and compaction/end events. It reconciles against ctx.agents.list() every 60s, so a session already running when the plugin is hot-reloaded is picked up at once instead of at the next turn boundary. A failed hold retries with exponential backoff capped at 60s and never gives up; release escalates from SIGTERM to SIGKILL after 2s, and -w lets caffeinate exit by itself if the host dies. No browser half — configured through the profile patch. 51 tests, including two that read pmset -g assertions on real hardware.

Replaces the built-in bash executor so every command gets an environment resolved from its own working directory: configurable PATH prepends, Python venv activation and mise shims, with a dedicated section in the Web UI settings.

Native macOS completion notifications and user approval alerts with Settings UI for DeepSeek Harness.

Windows-only plugin that shows permission requests, waiting questions, task errors and finished turns as native card windows, and can allow a permission request straight from the card.

WeChat bridge and native Web settings panel with QR scan login, live token health probe, and credential management.

Runs git in the Host process so push, pull and fetch work inside the agent sandbox; exposes 8 agent tools (status, diff, log, stage, commit, push, fetch, pull) and 11 slash commands including /git-status, /git-commit, /git-tag and /git-name-set.

Recurring Excel template fill and reconciliation review: declare the file, sheet, header row, match key and amount columns once, preview every cell write before it lands, compare amounts as exact two-decimal values, list the unmatched rows as exceptions, and export a filled template copy with an HTML report and a JSON trace back to the source rows.

Declares a spec-driven development agent preset with a Chinese persona and four static Claude Code/Codex delegation tools for planning, implementation, review and knowledge distillation; roles are prompt-guided, not an automatic state machine.

Notes workspace in the right sidebar: a notes tree beside a live-preview Markdown editor with tabs, split panes, outline and trash, over plain .md files plus a thin per-workspace index that agents organize through one `knowledge` tool.

Typocket reads, edits and organizes local documents in DSH and previews workspace Markdown.

Shows oversized images to the model at readable resolution instead of one downscaled copy: before admission, a large upload is split into as many tiles as the attachment store allows (an 8000x8000 screenshot becomes 20 tiles of 2000x1600), so small text survives. Replaces the local attachment store; adds no settings of its own.

Read, write, convert and retime a subtitle track across SRT, WebVTT and ASS, audit it for over-long or unreadable cues, and transcribe audio through a configured speech recogniser.

Generate QR codes from a from-scratch ISO/IEC 18004 encoder with no external tools, plan symbol version and error-correction headroom before producing anything, and decode an existing symbol back to text.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

Turn a raw recording into a published podcast with a local ffmpeg — detect chapter boundaries from silence, cut at those boundaries, normalise loudness to a broadcast target in two passes, and write an iTunes-compatible RSS feed whose enclosure byte lengths are measured from disk.

Extract text from an image or PDF, reading a born-digital text layer directly and falling through to a configured OCR engine for scans.

Convert Notion blocks and Markdown in both directions, with no API client and no external dependency. A Notion paragraph is an array of rich-text runs while Markdown says one string, so the two directions are a split and a merge rather than a pair of inverses — rich-text runs are cut at every annotation boundary one way and re-merged the other, with fences widened when the content already contains backticks. Reports every lossy step instead of swallowing it.

Turn a GitHub repository's raw counts into a defensible judgement — contributor concentration and bus factor with single-author files, merge time reported as a median beside the mean so an outlier is visible rather than hidden, and an issue backlog with pull requests and drafts filtered out. Reads the public REST API with no SDK, and never claims a truncated page is the whole answer.

Drive a local ffmpeg as six structured tools: probe a file's streams, transcode or trim it, pull evenly-spaced frames or the audio track, and compress video to a byte budget with two-pass encoding.

Pull invoice number, date, parties, tax IDs and the amount/tax/total triplet out of text, then verify that amount plus tax really equals the total and flag documents that do not reconcile.

WeChat Official Account pipeline: validate a draft against a publish gate, then push it into the draft box.

Read, build and take apart EPUB 3 books with no external dependency — the ZIP reader/writer and the XML scanner are both built in. Inspect metadata, reading order and TOC for structural problems, assemble a book from chapters, or split one back into per-chapter HTML.

Open a page, wait for it the way it actually needs, extract the readable article, and take a screenshot. Playwright is optional: when it is absent the tools fall back to a static fetch and say so in the result, because a page whose JavaScript never ran means something different from one that rendered. Content is chosen by scoring candidate subtrees on prose density rather than on tag names, so a container loses to the article inside it instead of winning by containing more of the document.

Pack a directory into a deterministic tar, read an archive's contents without extracting it, unpack while refusing every member that could reach outside the destination, and verify what came out against what went in by SHA-256. No external dependency — the tar format is written and read in this plugin. Extraction is deliberately more permissive on reading than on writing, because a reader's job is to report what an archive says, while a writer must never emit what it cannot read back. A tar has no central index, so the walk tracks whether it reached the end-of-archive marker: without that, a half-file checksums fine and reads as complete.