Plugins

Grabs a live frame from the local webcam and hands it to the agent as an image, so the model can actually look through the camera without opening any app or keeping a window in front. A dim room no longer comes back black — brightness, gamma, contrast, sharpen and an auto-level pass run inside the capture itself. ffmpeg is fetched automatically on first use, and the same plugin lists the available capture devices.

Per-project tool gating for the harness: before each step, the session looks for `.dsh/tool-gate.json` in its working directory and up to 32 parents, then filters the tool set handed to the model — allow or deny lists with `prefix*` wildcards, `off` when no rule file is found. A single `tool_gate_status` tool reports the active mode, rule file, and which tools were hidden.

Model-classified tool compass for DeepSeek Harness: the agent sees functional categories and pulls specific tools on demand.

DSH Lean Context indexes available tools locally and preselects a clear match or finds tools on demand.

Hides or disables specific tools for a customized list of agent presets, such as tools another plugin adds to every preset. Hidden tools are removed from the tool list and use no tokens, denied tools have calls refused. Can also blank system prompts added by other plugins. Configured in YAML. Does nothing until you add a config row.

Sends deferred MCP tool definitions as an index of names, parameter signatures and one-line summaries grouped by server, with tool_details returning a full schema on request and call_tool running the real tool. Reading a schema or running a tool does not change the model-visible tool list, so the prompt cache is not invalidated.

Rolling-window batch scheduler for DeepSeek Harness subagents: one subagent_batch call carries a queue of independent subtasks plus a user-owned concurrency window, a settled child's slot is refilled immediately, and the call returns every child's final answer, stop reason and child id as one acceptance report. async mode keeps the pool running in the background for subagent_batch_status, and the window comes from config, DSH_SUBAGENT_BATCH_CONCURRENCY or a hardware recommendation.

Cross-session messaging: deliver a user message to another DSH session by session id. Every message carries the sender session id and a reply hint, so windows can authenticate each other and hand work over. One tool, no extra DSH dependencies; mode "steer" injects into a running turn instead of queuing a new one.

Deny-only tool blacklist per agent preset. Tick a tool off in Settings and it leaves that mode's tool schema and its calls are rejected; nothing is ever enabled or whitelisted, and tools nobody denied are left alone. Each row expands to that tool's own description, and rules live in one JSON file outside the profile.

Per-session switches for which tools a DSH conversation may call, plus a guest mode that keeps file tools inside the workspace and turns off shell and subagents.

Five DSH utilities in one plugin: drive existing sessions over QQ (needs an OneBot 11 implementation such as NapCat running alongside), ask another session a question with a context guard, pause the running turn, restart DSH on Windows with optional auto-resume (via the install-restart.ps1 scheduled task), and inject peak-hour token discipline.

Park whole tool packs out of the session's tool surface and mount them back with one command. Cuts the tool table from 99,789 to 48,144 characters (51.8%) without uninstalling plugins or restarting. Reversible per group, per agent.

Read, write, convert and retime a subtitle track across SRT, WebVTT and ASS, audit it for over-long or unreadable cues, and transcribe audio through a configured speech recogniser.

Generate QR codes from a from-scratch ISO/IEC 18004 encoder with no external tools, plan symbol version and error-correction headroom before producing anything, and decode an existing symbol back to text.

Read, audit and diff Protocol Buffer definitions without installing protoc: a zero-dependency .proto parser exposing six tools (status, outline, describe, diff, audit, next_number). diff classifies every change as breaking, risky or additive and names the wire-format consequence; audit catches what protoc accepts but a reviewer should not — duplicated or illegal field numbers, reserved-range collisions, unresolved types, and unreserved gaps below the high-water mark.

Turn a raw recording into a published podcast with a local ffmpeg — detect chapter boundaries from silence, cut at those boundaries, normalise loudness to a broadcast target in two passes, and write an iTunes-compatible RSS feed whose enclosure byte lengths are measured from disk.

Extract text from an image or PDF, reading a born-digital text layer directly and falling through to a configured OCR engine for scans.

Convert Notion blocks and Markdown in both directions, with no API client and no external dependency. A Notion paragraph is an array of rich-text runs while Markdown says one string, so the two directions are a split and a merge rather than a pair of inverses — rich-text runs are cut at every annotation boundary one way and re-merged the other, with fences widened when the content already contains backticks. Reports every lossy step instead of swallowing it.

Turn a GitHub repository's raw counts into a defensible judgement — contributor concentration and bus factor with single-author files, merge time reported as a median beside the mean so an outlier is visible rather than hidden, and an issue backlog with pull requests and drafts filtered out. Reads the public REST API with no SDK, and never claims a truncated page is the whole answer.

Drive a local ffmpeg as six structured tools: probe a file's streams, transcode or trim it, pull evenly-spaced frames or the audio track, and compress video to a byte budget with two-pass encoding.

Pull invoice number, date, parties, tax IDs and the amount/tax/total triplet out of text, then verify that amount plus tax really equals the total and flag documents that do not reconcile.

Read, build and take apart EPUB 3 books with no external dependency — the ZIP reader/writer and the XML scanner are both built in. Inspect metadata, reading order and TOC for structural problems, assemble a book from chapters, or split one back into per-chapter HTML.

Open a page, wait for it the way it actually needs, extract the readable article, and take a screenshot. Playwright is optional: when it is absent the tools fall back to a static fetch and say so in the result, because a page whose JavaScript never ran means something different from one that rendered. Content is chosen by scoring candidate subtrees on prose density rather than on tag names, so a container loses to the article inside it instead of winning by containing more of the document.

Pack a directory into a deterministic tar, read an archive's contents without extracting it, unpack while refusing every member that could reach outside the destination, and verify what came out against what went in by SHA-256. No external dependency — the tar format is written and read in this plugin. Extraction is deliberately more permissive on reading than on writing, because a reader's job is to report what an archive says, while a writer must never emit what it cannot read back. A tar has no central index, so the walk tracks whether it reached the end-of-archive marker: without that, a half-file checksums fine and reads as complete.