Plugins

Web search provider with switchable engines, several usable without an API key (Bing, DuckDuckGo, SearXNG and others) and a fallback order between them; adds multi_search, platform_search, image_search with an in-chat image wall, page_images and save_images, plus a settings page for engines, keys and per-engine proxy.

Local TXT reader in a right-sidebar tab plus a spoiler-safe AI reading companion: the model only sees what you have already read — the current chapter, the tail of the previous chapter, and a per-book background file it grows as you go. Excerpts, thoughts and the companion replies become structured Markdown notes exportable to Obsidian; raw text unlocks only for a book you mark as finished.

DSH plugin that registers the ai-eight-honors-eight-shames skill: eight checkable working rules for coding agents (verify before calling, confirm ambiguity, cite evidence, reuse before creating, test before claiming done, follow local conventions, separate fact from inference, keep changes reversible) plus a ninth rule that logs each user request and the change made in report files at the workspace root.

The built-in web_search bills a full model turn against DeepSeek's own endpoint; this runs it on an OpenRouter-compatible gateway instead, so search is billed where your chat already is, at the model and price you pick.

A chemistry workbench panel in the DSH web UI. Draw structures on a Ketcher canvas (a script downloads the build; it renders locally in the browser with no backend), then compute on the current molecule with RDKit without calling a model — formula, molecular weight, exact mass, logP, TPSA, hydrogen-bond donors and acceptors, ring counts, Fsp3, stereocentres, Lipinski and Veber rule-by-rule checks, QED, PAINS/BRENK structural alerts and the Murcko scaffold, plus SMARTS substructure matching, fingerprint similarity, format conversion, standardisation and batch clean-up. A retrosynthesis tab talks to a pluggable backend (Retro* by default) over a single JSON-in/JSON-out process, and states what is missing when the backend is not installed instead of inventing a route. The calculations run in this repository's Python package (rdkit), which is installed with pip separately.

Registers the dsh-mol stdio MCP server, built on RDKit with no network access, into a DSH profile. It exposes 12 tools: three-level SMILES validation with human-readable diagnostics and character positions, molecular properties, drug-likeness and structural alerts, structure rendering to PNG/SVG, multi-molecule grids, format conversion (SMILES, InChI, InChIKey, MOL, SDF, formula), standardisation with a per-step change log, deduplication, SMARTS substructure matching, fingerprint similarity, and batch clean-up that reports every rejected row. The patch only registers the server; the tools live in this repository's Python package and must be installed first — the README gives a `pip install` route and a from-source route, and until the package is on PyPI the from-source one is what works.

Bitmap-frame context compression plugin for DeepSeek Harness: renders discarded conversation history into pixel-font PNG frames for vision-capable models.

Adds a Session without workspace entry to the DSH Workspace picker, creates isolated date-organized directories, and keeps started sessions resumable under Ungrouped.

Replaces the reasoning-effort dropdown with a draggable snapping slider, and draws 13 canvas effects across five style families (thrust, fluid, fantasy, tech, texture) with three tiers that unlock as the effort level rises. Custom mode combines 10 particle forms with 8 flow trajectories; 9 accent presets and a hex picker recolor every effect, and optional key sounds cover two voice clips, a synthesized duck squeak, a mechanical click and a local audio file.

Stages exact DSH tool calls without dispatch, presents complete canonical arguments in a durable Batch Review Inbox, invalidates approvals after edits or restarts, and commits only a matching SHA-256 digest plus single-use nonce through the normal DSH tool pipeline.

Builds, tests, archives and runs an Xcode project or workspace on iOS or macOS through xcodebuild — a live filterable build log, scheme and destination pickers read from the project, and log streaming for simulators and USB devices, including iOS 16 and earlier over libimobiledevice, whose app logs stay readable while the device is locked. macOS only.

Vision bridge for text-only DeepSeek routes that analyzes attached and local images through configurable OpenAI Responses, Chat Completions, or Anthropic Messages endpoints while leaving image-capable routes native.

A CodeGraph tool scoped to the session's own indexed project, resolved from its workspace directory. One MCP server is launched through npx per project root and shared by every session working there; a project indexed mid-session is enabled without a restart, and the managed child process is reaped when the harness exits.

Context compression for small-context models: visually configure the compressed context budget, default to an 8k handoff + 16k recent context, and keep full history searchable.

English edition of Weiwen's Law (KISS's Law): the first and only domain-agnostic white-box causal adjudication middleware for AI agents. Unlike domain-specific causal-inference tooling (statistics/economics/ML) or evidence-gated agent firewalls, it adjudicates *every* tool call along a deterministic structural causal chain (R->S->D->H->M) before execution - across any domain, with no training or per-domain tuning. It blocks destructive and credential-file operations, escalates repeated boundary violations, cuts faulting links until verified-fixed, and gives risk verdicts on un-auditable execution; runs fully local with zero API cost.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

DSH prompt library and reusable snippets plugin: save, edit, delete, and append prompt templates, workflow instructions, and reusable text from a button beside the composer without sending.

Conversation outline panel for the DSH web surface: user questions as root nodes (index, time, tool count and text volume per turn) with the Markdown headings of assistant replies hanging beneath them, plus level slider, search scope, bookmarks, copy and export as Markdown, section jump, keyboard navigation, a right-edge density rail and per-session reading-position memory. Read-only UI: it never touches prompts, tool results or provider traffic, and writes nothing outside its own localStorage keys.

Top-right status plate for six session states (complete, error, approval, question, unopenable, subagent), plus an OS notification when you are away.

One plugin for DeepSeek Harness with durable autonomous loops, sidebar GitHub discovery, AI-assisted installation, and workspace shortcuts.

Shows a Chinese translation under each English thinking block in the DSH web chat, without modifying the session transcript; per-chunk caching, a configurable translation model, and a settings panel.

Desktop companion pet in its own always-on-top window: imports Codex pet folders from ~/.codex/pets as-is, with affinity ranks, session-linked activity bubbles, snap-to-edge dragging, a right-click-reachable smart click-through mode and a daily token meter that mirrors the dsh-usage ledger when installed.

Per-reply read-aloud with a multi-provider settings page — MiniMax or any OpenAI-compatible /audio/speech endpoint, with voice, emotion, speed and model selection plus an auto-read toggle.

Plays a voice line or a sound when a turn finishes and a failure cue when a tool call or a turn errors — user aborts stay silent by default and subagent sessions are skipped, both configurable. Three alert modes: voice, effects, or off. Effects is the default and ships 20 built-in sounds (10 alert chimes + 10 nature), each assignable to the done, fail or approval event with per-row preview, so it needs no API key and no audio files; the voice route uses Volcengine TTS with cloned or preset voices, batch-imported voice IDs and fingerprint reuse that skips re-synthesis when text, voice and parameters are unchanged. A third approval slot exists but has no automatic trigger — it only plays when called manually. Playback goes through winmm/waveOut as-is, never changing the system volume or mute state, and the player is spawned detached so session teardown cannot silence it. Windows only.