Plugins

Permanently delete DSH session records from the sidebar context menu, removing the session log directory, the projection cache entry and the workspace registration in one action. A confirmation dialog guards every delete. Its /dsh-session-purger routes, including permanent delete, are mounted with webServer.register and carry no DSH Host/Origin admission check, so a web page open in your browser can delete session records through them.

Sidebar file tree that covers the session workspace root together with every additional root registered through multi-root-workspace, so sibling checkouts are browsable from one tab. Directory levels load lazily, changed and untracked files carry Git markers, and clicking a file opens its content inline beside the tree. Read-only: it never writes, renames or deletes anything. Needs the dsh-better-sidebar plugin, which serves the directory listings; its own routes (roots, git status/diff, image preview) take absolute paths from the page and have no DSH access check.

Adds a top-left Harness/Chat switcher and a web-chat workspace that drives your own logged-in chat.deepseek.com session in a persistent headless browser, with one-click task extraction to a Harness session and results sent back to the web chat. Starts a persistent Chrome or Edge profile with remote debugging on 127.0.0.1:9410 that keeps your chat.deepseek.com login; its /dual-mode routes have no DSH access check and can create Harness tasks from the web chat.

Named AGENTS.md presets for DSH: save instruction sets under $DSH_HOME/agents-md-presets, apply one to the current conversation workspace, edit bodies in your own editor, and keep one rolling backup of the file being overwritten.

A standalone mobile page for DeepSeek Harness with conversations, attachments, approvals and workspace file browsing. Desktop UI untouched. It is served from the Host's web server under its own route prefix, with login-gated static routes.

A DSH sidebar panel that talks to locally running Hermes TUI gateways over JSON-RPC: switch between bot profiles, resume their Bot Chat sessions, stream message and tool deltas, and embed the Hermes terminal view.

Left sidebar disk panel for the DSH Web UI: volume free space, per-Workspace folder sizes, moving build artifacts to the macOS Trash with an audit log and restore, sending scan results to an agent, and a host-side low-space watchdog with OS notifications. macOS and Linux only; Trash cleanup works on macOS only, while Linux gets the scan, trend and watchdog without cleanup. Cleanup is limited to a fixed list of build-artifact folder names directly under a registered Workspace.

New Concept English Book 1 study panel: 144 lessons with text, IPA vocabulary, grammar and a Bilibili video on one page, Anki-style spaced repetition, a mistake notebook, and fillable exercise papers graded by your own model.

For the macOS desktop app - keeps the DeepSeek Harness brand mark in the title-bar strip, puts New session, Plugins, Scheduled tasks and More on one row of four equal buttons, and tightens the workspace list so more conversations fit; browser and Windows layouts are untouched.

Sidebar and conversation top-bar menu editor for DSH web: reorder, group, hide and re-icon entries (drag and drop, group flyouts, custom SVG or uploaded icons), reserves a configurable minimum height for the workspace tree, and exposes window.__dshSidebarManager for agents.

Multi-machine job board for DSH: 14 board tools, 4 shell tools, a GUI panel, and a dispatcher that hands queued tasks to remote hosts through dsh-remote-agent. Pick the target machine and model from the panel or the board_options tool; rename machines with display aliases while task ownership stays keyed to the host identity (machine). Failed tasks can be retried with their original goal/workspace/model, and the panel checks npm for a newer plugin version. Single-machine use starts its own loopback board; multi-machine use needs the bundled Python board server (tools/board_server.py, started with GP_BOARD_TOKEN set, binding 0.0.0.0 by default) and dsh-remote-agent hosts. The sh_* tools only reach directories on the allowedRoots list.

Adds a “why does this need escalation?” button to every DSH approval card: it opens a panel with the permission requested, the risk, what refusing means, the exact tool arguments and whether the named paths fall outside the session workspace; the card also keeps a one-line risk and refusal consequence visible under it, and the model’s original reason is split into labelled paragraphs instead of a run-on block.

Read-only diagnostics for a DSH install — boot-crash logs and the cause named in them, config drift against a recorded fingerprint, backup freshness, workspace growth, plugin updates, host-version compatibility, duplicate client ids, and model availability — plus an action layer that always shows a plan first and needs a single-use fingerprint and explicit confirmation before anything is written. A checkup also runs 45 seconds after every host start; when the 3-hour probe cache is stale it sends a one-line test prompt to the default model and a few models of each configured provider (model.probeOnReport can switch this off). Registers the agent tools dsh_steward_report and dsh_steward_act (clean caches via dsh-disk-cleaner, backup via dsh-config-manager, disable or enable a bundle, set the default model; execute takes the plan's hash plus confirm: true) and a system-prompt section telling the agent to run the report first when something crashed.

Loads Google Antigravity rules from ~/.agents/rules and the workspace's .agents/rules into the system prompt: always-on rules in full, the rest as a catalog the model can load with the antigravity_rule tool, or that activates when a touched file matches a rule's globs. The rules are prompt guidance rather than hard enforcement, and the model can toggle them off with the same tool. Settings are written to .agents/rules/settings.json in the workspace.

Evidence-based research workspaces with archived sources, knowledge graphs, exact citations and exportable reports. Experimental alpha. Needs Node 24.9 or later, uv and Python 3.13, plus a one-time setup step (setup-engine.mjs) that copies the engine and runs a locked uv sync; pnpm must also be allowed to run the build scripts of onnxruntime-node and protobufjs.

Multi-workspace agent federation with persistent ticket trees, parallel worker sessions, structured evidence reports, independent acceptance checks, retry/stop and restart recovery. Workers get shell and file tools in the ticket's directory, company_verify re-runs the ticket's acceptance commands in a shell on the host, and scope lists are task authorization rather than a sandbox. State is stored in ~/.dsh/ai-company; the optional company_repo_* tools run separately installed aoci/codegraph commands on any path they are given.

Read-only disk usage scan and interactive HTML cleanup report for Windows and macOS. Needs Python 3 on the machine; the bundled scan scripts run offline as child processes.

Local-first memory nebula for DeepSeek Harness with graph views, evidence chains, hygiene checks, and offline snapshots. Reads the memory stores of every workspace and of other memory plugins (read-only, for example meow-memory's SQLite) and writes only under $DSH_HOME/memory-nebula. Registers 9 agent tools and a system-prompt section (usage rules every turn, plus not-yet-read neighbouring memories after a few reads); its /export and /share endpoints return the full memory text without authentication on the local server, and an optional standalone engine listens on 127.0.0.1:7890.

Dispatch a task to a real DSH session by workspace path or session id; results land in a persistent task ledger that can be queried without triggering the model. It serves HTTP on 127.0.0.1:7391 and requires a bearer token it generates on first run (kept in ~/.dsh/relay/token), rejects non-loopback Host and foreign Origin, and stores task results as JSON files under ~/.dsh/relay/tasks; an optional notifyUrl receives each finished result.

Session-archive layer for DSH. It injects one per-workspace Markdown file into the system prompt on every turn, searches past session transcripts with AND keywords, an optional time window and a workspace filter, and recovers the images and documents those past sessions carried by returning their original local paths or copying them to a chosen directory. It also reports index health: version, entry count, cache usage, frequent sessions and sessions stored in an archive format it does not recognise. Keyword search only, no embedding service.

Cites one specific message from another conversation: the @ menu inserts a chip, and at send time the quoted text is injected as untrusted background; a conversation_history tool also lets the model search and read other sessions of the same workspace. The @ menu searches the indexed sessions of every workspace (only the model tool is limited to the current one), and its HTTP routes (/dsh-message-cite/api/…) are guarded only by a marker header, not by a DSH access check.

Export a DSH session tree (lead plus subagent fleet) to two Markdown files from one frozen snapshot: a readable narrative summary and a complete raw archive. Target directories are checked against the session file policy, and a blocked location falls back to the workspace exports folder.

Adds "Delete conversation" (zh/en) to the sidebar conversation menu. Confirming removes the durable session log under <DSH_HOME>/sessions, drops the id from the workspace registry (sessionIds, pin, archive), detaches a live session before its files go away, and emits api-session/removed so every connected client drops the row.

Runs sessions on your own Claude Code and Codex CLIs from the model picker, and lets a DSH agent hand background tasks to them and follow up. Permission prompts cannot be answered from DSH: Claude Code runs in acceptEdits mode by default, Codex in its workspace-write sandbox, and ACP permission requests are approved automatically by default.