Plugins

Requires the Codex CLI installed and `codex login` completed. Consult the OpenAI Codex CLI from DeepSeek Harness with three tools: codex_consult runs Codex in a read-only sandbox, inlines evidence files, verifies the served model and reasoning effort from the Codex rollout file, retries disconnected streams, and records quota before and after the call; codex_quota reports the current 5-hour and weekly quota; codex_calls lists recent calls.

Renders agent-authored HTML/CSS/JS inside the conversation as sandboxed iframes, with POST and SSE back to the model and reusable templates.

Terminal-style music video player for DeepSeek Harness Desktop: canvas MVs synced to your own audio file, MV packs (mv.json) for any song, sandboxed scene scripts and a GitHub-hosted workshop (创意工坊) — the world.execute(me) ASCII scenes and the dsh PV are

Replaces the web profile's pwsh shell executor with a subclass that rewrites every command through `rtk rewrite` before execution for token savings, running the original command unchanged on any rewrite failure (no equivalent, missing rtk, timeout) and keeping sandbox semantics intact.

Sandboxed jq / yq / read-only sqlite3.

Sandboxed ripgrep / fd / ast-grep under allowRoots (defaults include ~/.dsh/im-workspace).

Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

Native Auto Review for DeepSeek Harness with automatic host compatibility selection

Turns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.

Open folders on remote hosts over SSH as Harness workspaces: file tools (read/write/edit/grep/glob) and shell commands run directly on the remote host over SFTP, ripgrep, and ssh2 exec, with no local mirroring, an encrypted multi-host registry, and the local sandbox policy still enforced.

Workspace-scoped Semgrep SAST tool for DeepSeek Harness with a managed Windows x64 runtime, structured bounded findings, cancellation and timeout controls, and user-approved sandbox escalation. Installs from npm as @aaub-software/dsh-semgrep-sast.

A calmer reading view for DeepSeek Harness with auto-collapsing process, a minimap-style message navigation rail, in-page search, unified failure cards, and generative MCP Apps (SEP-1865) in sandboxed iframes.

Uses an isolated LLM review to approve or reject DSH sandbox permission requests.

Antigravity-style run_command for DSH: short commands return inline within a configurable wait window (default 10s) while longer ones auto-promote into ctx.jobs for later collection and completion notices — executed via ctx.shell under the session sandbox and approval pipeline.

LLM approval answerer for sandbox escalations beyond workspace-write: a deterministic regex filter first, then a clean-context reviewer model; humans are asked only when it is unsure. Requires the bundled core patches.

Multi-folder workspace for DeepSeek Harness: pick several folders and create one workspace spanning them (directory-flow occupant + extended workspace/sandbox contract)

Self-protection guardrails for the DeepSeek Harness: protected-path interception, backup-before-destroy, CLI self-recovery commands, and strict sandbox defaulting

Codex-style auto-review permission mode: adds an auto-review preset that auto-approves safe sandbox escalations, asks on risky or ambiguous ones, and rejects critical unconfirmed operations.

Multi-workspace sandbox: grants file-write access to every registered workspace automatically — add a workspace, write to it immediately, no config or escalation needed.

Configurable model-based approval review with workspace sandbox modes and review history.

Attach extra folders to one sidebar workspace: attached folders become writable for the file tools and the shell, are listed to the agent in its runtime context, and are added or removed from the workspace row context menu or the workspace_folders tool; each workspace keeps its own list.

给一个 DSH 工作区挂多个仓库：自动注入仓库根表，配 workspace_roots、workspace_find 两个模型工具与侧栏弹窗；只做加法，不替换 fs/sandbox。

Godot game development workbench for DeepSeek Harness. Windows only, preview release: plans a game (GDD, tasks, acceptance checks), changes project files through controlled read/write tools, diagnoses the project and runs it for evidence. Runtime and import checks launch your configured Godot as a normal process with your permissions (the AppContainer sandbox applies only in the restrictedProduction option); the official Godot 4 standard build can be downloaded on request after confirmation (SHA-256 checked), creating a project registers it in Godot's project list, and the selected project context is sent to your configured model.

Multi-workspace agent federation with persistent ticket trees, parallel worker sessions, structured evidence reports, independent acceptance checks, retry/stop and restart recovery. Workers get shell and file tools in the ticket's directory, company_verify re-runs the ticket's acceptance commands in a shell on the host, and scope lists are task authorization rather than a sandbox. State is stored in ~/.dsh/ai-company; the optional company_repo_* tools run separately installed aoci/codegraph commands on any path they are given.