Plugins

Adversarial review for DeepSeek Harness: put one settled plan on the stand, send read-only red-team experts at it by dimension, then split their findings into single defects you endorse or reject one by one. It never rewrites the plan and never fixes code.

Search the documents and pictures in your Quberi knowledge base, browse its spaces and documents, save notes to it, and upload files into it with your approval for each one, from DeepSeek Harness over OAuth.

Reports which PowerShell the DSH pwsh executor actually runs (enabled rows only; version-numbered Store paths are never recommended as pins), and installs a Store-managed PowerShell 7 through a scripted Store-page click or the manual Store path. Allows the pwsh tool only when the live executor resolves PowerShell 7+, and when dsh-ops is installed keeps the native pwsh beside ops_bash by enabling Compatibility and hiding duplicate official tools. Native status card and configuration switch in the Web UI; Windows only, no runtime dependencies.

A pinned-sessions group in the sidebar, above the workspace list: every pinned session across all workspaces in one collapsible, searchable list, with click-to-open and a hover-revealed unpin button.

Correct-encoding command runner and mojibake recovery: encoding_run spawns a child process and decodes its raw output bytes (UTF-8/UTF-16LE/GBK auto-detected or forced), and encoding_decode recovers garbled text back to correct Unicode.

Nai milk-frog mascot appearance layer for the DeepSeek Harness web GUI: wears the bundled milk-frog artwork as the GUI background (surface-token fade with opacity, blur, scrim and position controls), seats the matching square avatar as the sidebar and conversation brand mark, and edits it all from a Settings section; the host serves the artwork and config locally under /api/nai, and the config lives at $DSH_HOME/nai.json.

Let a DSH model inspect and operate Windows applications through an installed Codex Computer Use runtime, with per-session app approval.

Permission-wall-immune file search for DeepSeek Harness (DSH): the find_file agent tool skips unreadable directories, reports them with errno, and never lets a failed walk pose as an empty result.

PostgreSQL expertise for DeepSeek Harness: 11 curated pg-aiguide skills from Tiger Data registered natively, plus the pg-aiguide MCP server for version-exact manual search.

Wraps the Scrapling Python library in up to nineteen model tools, registered by probed capability: real-browser rendering for JavaScript-only pages, CSS/XPath extraction that returns data instead of Markdown, self-healing selectors, reusable login-state sessions, XHR capture, page screenshots, gated browser actions and a domain-scoped crawler with content/sitemap/feed/Shopify modes on the official job backend. It can also replace the built-in web_fetch / web_search, and serve the same tool table over MCP. Requires Python 3.14+ with Scrapling installed; the browser tools also need a Chromium engine for patchright, which an optional CLI installs on macOS arm64 only.

Music composition inside the conversation: the model writes a score against a bundled composing skill, and a play_score tool renders it as an inline card with a piano roll, Web Audio playback and WAV/JSON export.

Windows desktop automation for dsh: 14 tools that enumerate apps and windows, capture window screenshots that still work when the window is covered by other windows, read the accessibility tree, and perform real input — click, type text (CJK included), press key combinations, scroll and drag. Loads the official computer-use runtime (@oai/sky) already installed on the machine, discovering it by enumerating vendor directories, so vendor upgrades that change hash directories do not break it.

Registers external databases and document corpora as callable model tools: a per-source access boundary, a credential reference ledger that never stores values, and a fetch ledger that keeps fingerprints and content hashes instead of payloads.

Per-project MCP servers: a project declares servers in its own documents (`.dsh/mcp.json` by default; the local and global file lists are settings), and they are mounted only for the sessions working in that project — on the first turn of a session, released when it goes idle. A right-sidebar tab and a Settings page list each project with a live session, the status of every server and the session holding each mount, with `Sync` / `Retry` / `Release`, an `enabled` switch and an editor over one existing entry; a per-project tool policy (`disclosure` / `direct` / `off`) with pins and `mcp_search_tools` decides what the model sees; `${VAR}` references resolve through the project `.env` files and the credentials file; per-server call counters outlive the sessions that produced them.

Replaces the sidebar workspace region with a two-tab browser: several workspace roots stay registered side by side while conversations are filed under the real working directory of each session, with a read-only resource tree that previews files in the right sidebar. Hiding is per tab, display-only and fully reversible; a resource folder or file can be copied as a path or dragged into the composer as a native reference, and @ completion covers every registered root rather than the working directory alone.

TRAE-style conversation rollback rebuilt for DSH 0.1.7-rc.2: per-turn file checkpoints restore touched files and truncate the model context in place under the same session id. Adds a /rollback doctor framework-contract self-check, an affected-file diff preview computed against the current on-disk state so it stays correct after a restart, a one-click undo-last action with a Ctrl+Shift+Z shortcut, a setting for whether rolled-back messages stay hidden, and English UI text.

Graph runtime capabilities for the DeepSeek Harness: register LangGraph compiled graphs as DSH tools, plus a graph-driven routing agent.

Read-only side branch in the right sidebar: quote text to ask follow-ups without polluting the model context of the main session; every follow-up rebuilds the branch from the latest settled turns of the main session, and writes are refused at the tool-execution layer so the prompt prefix stays cacheable.

Keeps a panel of what you must do, what you can apply for and what is worth knowing, distilled from your WeChat and QQ chat logs by one resident agent session that re-reads them on a schedule or when you click Fetch; each item can link straight to its source file or image.

Resumes turns interrupted by a DSH host restart: hooks agent activation (once a session is live), reads the crash-repair turn/end, and sends a continuation that requires verifying real-world state first rather than assuming a side effect succeeded or failed. Permanent failures (AUTH, QUOTA, context overflow) are skipped, with a cross-restart budget, adaptive backoff and a minimal-context payload.

OAuth2-capable IMAP email reader for accounts where password authentication is disabled. Microsoft disabled Basic Auth for personal Outlook IMAP in 2024, so this plugin authenticates via refresh-token OAuth2 (XOAUTH2) with automatic token refresh, plus app-password login for Gmail through an optional local HTTP/SOCKS proxy. Registers list/read/search as ol_email_* so it can coexist with the market dsh-email plugin without tool-name clashes.

Skills, MCP & CLI manager for the dsh web GUI: browse/enable/import/delete skills across project and user roots; manage MCP servers with a REAL connection through @deepseek-ai/dsh-mcp-client (enabled servers connect and register their tools on ctx.tools;