Plugins

Registers a keyless search provider for the built-in web_search tool so it works without an API key, failing over between the documented no-key tiers of Tavily and Firecrawl; a TAVILY_API_KEY or FIRECRAWL_API_KEY is picked up automatically when present. Two Bing scrape backends are included but off by default.

A CSS skin that restyles the reasoning-tier control drawn by hytime/dsh-thinking-effort into a blue-to-violet pill with a starfield and a sheen sweep, with matching light and dark palettes. Requires that plugin to be installed; it adds no UI of its own.

Redraws line-level diffs on edit, write, insert and str_replace_editor tool cards — unchanged lines render once and changed characters are underlined — covers run_code (PTC) sub-calls, adds a per-turn changed-files card, and opens or copies any of those paths from the card rows and the tool rows through a host route the plugin serves itself.

Pre-execution safety valve for DSH that judges with TypeSafe Jev: it hooks tools/pre-execute and decides every bash/pwsh call by first applying offline static rules, then by asking the Jev model — the System One model from TypeSafe, which returns a structured decision instead of prose — one yes-no question ("will this command irreversibly delete or overwrite real data?"), turning the answer into allow, revise, block or escalate; revise hands the model a safer rewrite, escalate offers a one-shot human token; exhausted credit or a missing API key degrades loudly instead of failing silent, and a missing key is requested in the conversation itself (`guard key set`, read from stdin); every verdict is appended to a shared audit log and the text people read is bilingual zh-CN/en.

Manual model probe for DeepSeek Harness: a session-view tab where you pick provider, API type, model and route, then send one real raw HTTP request over openai-completions, openai-responses or anthropic-messages — streaming or not — and read latency, TTFT, HTTP status, token usage and a three-layer diagnosis chain (API request / model response / strict check) on one screen, with errors in plain language.

Humanized fork of @xmanrui/dsh-im (base 4.21.2): humanized message delivery with send-delay and typing two-phase, message_break + streaming coexistence, status reactions, reply quotes, per-bot humanize overrides, and a no_reply reclaim tool — across WeChat, Feishu, DingTalk, WeCom, QQ, Telegram, Slack and WhatsApp channels.

Cross-version session migration for DSH: sweeps legacy session stores (v0 plaintext, .zstd and .zip exports), re-pins the header cwd to the target workspace and drops sessions in so the persistence layer upgrades them on open; settings sidebar with env/import/list/convert tabs plus a CLI (check / fix / import).

Replaces the chat input model picker with a provider-grouped, collapsible list: groups models by provider, folds vision-bridge mirror providers back into their upstream, and carries the reasoning-effort options each model declares in settings. Tested on DSH Desktop only; the DSH web build is untested.

Prompt scene picker for DSH: choose a scene from a dropdown and it opens a new session with the prompt already filled in (with {variable} placeholders), so you only tweak and send.

Keeps the question you are currently on pinned above the composer, with a dropdown of every earlier question that scrolls the conversation back to that turn; questions folded into process groups are expanded first, and Escape, scrolling or clicking outside collapses the panel.

Completes @path references in the Web composer: type @ (optionally ./src/ma) to list matching files and directories, pick one with the arrow keys, and the draft receives an @./relative/path reference (quoted when the path has spaces).

A full-page console panel opened from the sidebar, with eight tabs: an overview; a session list read from the sessions service (title, directory, running state, updated time, with filters); installed bundles and Loader entries from pluginInventory and pluginManager, with per-bundle enable switches; a plugin market listing public topic:dsh-plugin repositories from the GitHub search API; a model and provider editor that writes the llm-pi-ai settings namespace through remote.settings.mutate (switch a session model, add or edit providers and their model lists, and store API keys via remote.credentials, merging over the stored profile so fields the form does not expose survive an edit); MCP and skills tabs; and a usage tab that reads the host's loopback /api/dsh-usage/overview document. Services are declared through ctx.inject, so a deployment that omits one mounts without the console rather than crashing.

Expose every model already configured in your local DeepSeek Harness to the LAN over OpenAI- and Anthropic-compatible endpoints, with API keys, per-key rate limits, a circuit breaker, model filters and usage reports.

WeChat bridge for DeepSeek Harness over Tencent's iLink bot channel: one session per contact, inbound text/images/files, and WeChat's native typing indicator while a turn runs.

DeepSeek Harness skill plugin that reviews law theses (international economic law and other legal topics): reads a student Word .docx, checks it against a bundled common-issue checklist, applies definite fixes as tracked changes, and adds Word comments for overall/section problems and missing-basis issues, then emits a short objective overall review plus a fix list.

Registers any set of HTTP APIs as paired doc-query and request tools for the agent.

Adds a Restart page to the DSH Web settings panel. The page shows the PID, port, start time and uptime of the running host and restarts it through a detached helper that waits until the port stops answering before replaying the same launch invocation; the page reloads itself once the replacement host answers with a new boot id.

Quick-open palette for the Web GUI: Ctrl+P fuzzy-searches an in-memory index of the session workspace (about 51k entries, median query 5 ms) with per-segment path anchoring, dir: and file: prefixes, Tab directory drilling and :line jumps, opens the picked file in the native right sidebar, and drops a file reference into the conversation draft with Ctrl+Enter. Also adds in-file find (Ctrl+F) and a selection-to-reference action to the built-in file preview.

A draggable bubble that picks three dishes at a time from a local 4,423-dish library; the first two are always well-known mains, and picking costs no tokens.

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Manage Proxmox VE through conversation: 116 read + 116 write tools covering VMs, containers, storage, nodes, clusters, backups and firewalls, with API-token or username/password (ticket) auth.

Scaffold DSH local bundles in the dph format from any workspace and keep a pitfall experience library to steer later development.

Speaks or plays a sound at the end of every turn and plays a failure cue when a tool call or a turn errors. Ships 20 built-in effects (10 alert chimes + 10 nature sounds) and defaults to effect mode, so it needs no API key and no audio files; an optional Volcengine voice-clone route generates the three announcement clips in one click. Plays through winmm/waveOut as-is, never changing the system volume or mute state. Windows only.

Computer Use for macOS desktop applications: reads any app's accessibility tree as text with element indices, then clicks, types, pastes, scrolls, drags, selects text and sets values through it, plus screenshots read back as images. Driven by a persistent JavaScript REPL — the agent gets two tools (`js`, `js_reset`) and calls an `sky` API inside them, so state survives between calls and the tool schema stays fixed as capabilities grow. Accessibility trees come back as diffs after the first read; actions address elements by index and indices from a stale read are refused rather than misapplied; typing waits for keyboard focus and reads the field back; paste restores the clipboard. Requires macOS 14.4+, Accessibility permission (Screen Recording only for screenshots) and Node 20+; ships a prebuilt native module, so nothing compiles at install time.