Plugins

Read-only Helm list / status / history.

Read-only glab MR / issue / ci status.

Read-only psql + redis-cli probes.

Read-only khal calendar list.

Folds long composer drafts into a compact summary card once a character threshold is reached, without changing message submission.

Replaces the DSH sidebar with a fixed 2×4 board of eight standing agent seats; each seat shows its own status, latest tool call, reasoning and result, and a settings switch restores the stock sidebar at any time.

DeepSeek Harness plugin: DejaVu memory client — automated long-term memory (boot/read/search/create/update/delete) backed by your own DejaVu MCP server.

Builds, tests, archives and runs an Xcode project or workspace on iOS or macOS through xcodebuild — a live filterable build log, scheme and destination pickers read from the project, and log streaming for simulators and USB devices, including iOS 16 and earlier over libimobiledevice, whose app logs stay readable while the device is locked. macOS only.

21 read-only lifecycle governance tools in one self-contained DSH plugin: task tiering, state/plan/evidence validation, gate precheck and aggregation, release/install audits, context and progress analysis, critical path, resume reconciliation, and a mutation preview that always denies execution. Installs from npm as @240xu/dsh-tech-lead.

DSH plugin that registers the ai-eight-honors-eight-shames skill: eight checkable working rules for coding agents (verify before calling, confirm ambiguity, cite evidence, reuse before creating, test before claiming done, follow local conventions, separate fact from inference, keep changes reversible) plus a ninth rule that logs each user request and the change made in two fixed report files at the workspace root.

Drag documents into the dsh web chat; the agent reads them directly from the local filesystem and the right sidebar lists the outputs and file paths.

Bridges a WSL dsh agent to a Windows Obsidian vault on NTFS: status/list/search/read/write/append, wikilink resolve, write/append require confirm=true, plus obsidian:// open. Keep the vault under /mnt/<drive>/; Linux-disk vaults via \\wsl$ are unreliable.

Create a one-click Windows desktop shortcut from the Settings page: a .cmd launcher + desktop icon for DeepSeek Harness or any local server, auto-opens the browser, with taskbar pin hints.

A CodeGraph tool scoped to the session's own indexed project, resolved from its workspace directory. One MCP server is launched through npx per project root and shared by every session working there; a project indexed mid-session is enabled without a restart, and the managed child process is reaped when the harness exits.

SMS forwarding webhook for DeepSeek Harness. Phone apps (SMS Forwarder, Tasker, or any HTTP POST) push messages to a local HTTP endpoint; the plugin stores them as JSONL and exposes sms_recent / sms_search tools so the agent can read SMS verification codes during tasks. Auto-extracts the first 4-8 digit OTP from each message, supports keyword filtering, and works over LAN or Tailscale.

OAuth2-capable IMAP email reader for accounts where password authentication is disabled. Microsoft disabled Basic Auth for personal Outlook IMAP in 2024, so this plugin authenticates via refresh-token OAuth2 (XOAUTH2) with automatic token refresh, plus app-password login for Gmail through an optional local HTTP/SOCKS proxy. Registers list/read/search as ol_email_* so it can coexist with the market dsh-email plugin without tool-name clashes.

Replaces the built-in llm-pi-ai and llm-deepseek adapters, the model selector and the Models settings page with self-maintained versions, tracks upstream @earendil-works/pi-ai through a safe-zone download with a one-click enable toggle, and adds provider quota and balance lookups plus a provider management page.

A terminal workbench for dsh with streaming chat, tool execution, session management, provider management, and image input.

A read-only git browser for the DeepSeek Harness Web GUI: a right-sidebar page with the session's working-tree changes and commit history, and the diff a click opens beside them. The host half reads the repository through ctx.fs and ctx.subprocess, so a r

Skills, MCP & CLI manager for the dsh web GUI: browse/enable/import/delete skills across project and user roots; manage MCP servers with a REAL connection through @deepseek-ai/dsh-mcp-client (enabled servers connect and register their tools on ctx.tools;

Preflight checks for a DeepSeek Harness plugin before submitting it to the community list: verifies the dsh.bundle manifest, cordis.patch.yml wiring, client bundle shape, and peer ranges that silently exclude prerelease harness builds. CLI plus one read-only agent tool.

Ponytail lazy-senior-dev ruleset for DeepSeek Harness: a 7-rung minimal-code ladder (YAGNI, reuse, stdlib, native, installed deps, one line, minimum), six skills (main rules, over-engineering review, repo audit, debt ledger, gain scoreboard, help), a /ponytail session command for lite/full/ultra/off levels, and optional always-on ruleset injection via config. Vendored verbatim from upstream ponytail (MIT), zero tools registered, clean uninstall.

0.8.6 fixes a startup crash: the host runtime package is an optional peer, never an installed dependency. TypeSafe Jev (System One decision model) wired end to end into DeepSeek Harness (0.8.6). Seven tools: jev_decision (1-25 parallel atomic verdicts in one call; noul/choice/score; typed answers with calibrated confidence; measured median 266-484 ms; verdicts only, never prose), jev_choose (rank 2-10 candidate approaches - fit 0-3 and risk - into an explicit composite with a recommended pick), jev_batch (NEW in 0.8.6: one set of 1-5 judgments over 1-20 texts, one real call per text at bounded concurrency, returning a paste-ready markdown table sortable by a judged dimension; built-in sentiment/priority/intent/pii/spam presets; a failed row is reported as failed with the raw error, never guessed), jev_usage (locally measured usage: calls, tokens, estimated cost, latency median and p95, per-tool mix, rolling windows, projected burn rate, optional local hard budgets, and a declared-balance remainder), jev_overview (session ledger), jev_guard_status (guard counters plus a registrations block that surfaces per-surface registration failures) and jev_verify (frozen 27-question live benchmark at concurrency 6: 96.3%, 26/27). WHAT IS NEW IN 0.8.6 - the ledger survives a restart, the remainder is derived instead of invented, and the plugin can now do batch paperwork. (1) The local ledger persists to $DSH_HOME/jev-usage.json BY DEFAULT, so the cumulative total no longer resets when the host restarts. Two real bugs behind the old silent zero were found and fixed: the ledger path only honoured DSH_HOME (absent inside the host process, so persistence was silently disabled and the file name was null), and save() wrote the still-empty in-memory ring over the history file because it ran before the first load while the debounce window swallowed the follow-up write. (2) Remaining is derived, never invented: TypeSafe exposes no balance endpoint - /v1/usage, /v1/quota, /v1/account, /v1/account/balance, /v1/balance, /v1/credits, /v1/billing, /v1/me, /v1/limits and a dozen more all return 404, and only /v1/models answers, with no balance headers - so the panel shows the remainder as your declared balance (quota.declaredBalanceUsd) minus locally measured spend since quota.balanceSince, and says plainly that it cannot be fetched instead of printing a number. (3) The composer pill re-reads every 20 s instead of every 60 s, so a call you just made shows up while you are still looking at it. (4) The collapsed pill leads with the remainder once you declare a balance, and the cumulative row is renamed when the ledger is on disk. Every tool has an in-conversation structured view; the Settings > Plugins card covers credentials, tool switches, the auto-guard, the dashboard, the prompt section, usage/quota and auto-triage. Honest by design: no API key means an explicit error, never fabricated results; every registration is quarantined so a failure degrades one surface. Tests 38/38 (npm test, ~2.5 s). Client half applies on refresh; server half needs a host restart.

Multi-instance ComfyUI orchestration: probes every configured ComfyUI endpoint for its GPU, free VRAM and queue depth, then dispatches a generation job to the idlest eligible instance. Ships three tools (comfyui_farm_status, comfyui_farm_pick, comfyui_farm_run). An instance is eligible only if it is reachable, has at least the requested free VRAM, and its queue is no deeper than the configured ceiling; eligible instances are ranked by free VRAM minus queue depth times a weight, so an idle shallow queue wins over a busy large one. Zero runtime dependencies. Optional retry on probe failure, because a single timeout across an SSH tunnel is not proof that an instance is down.