Plugins

深鲸企业审计套件：审批台账 + 决策复盘 + 审计报告导出 + 定时复盘任务，一个授权全部可用

瞭望哨：盯着你的每个会话——谁跑完了、谁出错了、谁卡住了、谁在等你审批，用浏览器图标角标、红点/黄点和邮件通知你；顺带显示当前会话 ID。· Lookout: watches every session — who finished, who errored, who is stuck, and who is waiting for your approval — and notifies you through the browser favicon badge, red/yellow dots, an

审批台账 + 企业审计面板：记录每次审批（风险/决策/结果），gate 模式拦高危，Web 面板可看可导出

反盲批 / Anti Blind Approval — DeepSeek Harness approval guard: review workspace-write escalation requests with the session model, then gate the Allow button on a strict JSON verdict.

DSH company collaboration mode: companies, employee accounts, groups with an auto-joined AI member, persistent server-side DSH ACP host with SSE streaming activity and group approvals, and local Git AI tasks.

SSH remote workspaces for the dsh web GUI, reusing the session sandbox mode and approval flow.

Inventories installed DSH skills and profile plugins, checks their upstream sources for newer versions, applies the updates, and installs skills from a searchable catalog.

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

Opt-in HTTP proxy service for DSH plugins, with native address and port settings. Exposes scopedHttpProxy for explicit callers, applies address changes to subsequent requests, and leaves system proxies, environment variables and global network dispatchers unchanged.

Paints a colored counter badge (green = unread completed sessions, orange = pending question or approval) on the DeepSeek Harness taskbar icon on Windows, and plays a chime when a session finishes. Fork of dthcle/dsh-badge-notify (MIT) with a completion chime and green/orange state colors; both draw the same taskbar badge, so the two cannot be enabled together.

Cross-device notifications for DeepSeek Harness. While a long task runs unattended, a finished turn, a pending approval or a question reaches you through the enabled channels: desktop toast, browser tab, ntfy push or Feishu bot.

Plays a random chime when a reply finishes, a one-shot reminder chime if the conversation stays quiet for a configurable number of seconds afterwards, and a chime the moment DSH needs you to step in: an approval request, a question, or a plan confirmation. Three independent switches and sound pools, persisted on disk.

Strikes a single short chime, raises the DSH window, floats a reminder card above the page and sends a system notification whenever the agent needs your approval or an answer. Sound and popup are two independent switches in the session header, remembered across reloads and restarts.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

To-do list panel for DeepSeek Harness: large task cards in collapsible sections, hour-precision due times, per-task reminder lead times, and DingTalk notifications through a group robot webhook or an enterprise-app work notice. Each task can bind to a workspace session and jump to it on click.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

In-app browser for DSH: a dedicated Chromium rooted at a persistent profile so a Feishu or SSO login survives restarts, driven over CDP, exposing seven agent tools (status, open, eval, read, feishu, screenshot, tabs) and mirroring the page live in a right-sidebar panel that tool calls open by themselves. Also converts Feishu documents to Markdown by sweeping their virtual scroll. Requires a locally installed Chrome, Edge, Chromium, or a Playwright Chromium build (it never downloads one); set DSH_IAB_CHROME to point at a specific binary.

Windows only (binds user32.dll via koffi; inert on macOS/Linux). Remembers the DeepSeek Harness main window's size AND position: restores both on every launch (re-asserted during a grace period to beat the default layout), saves stable manual moves/resizes as the new lock, never records minimized/maximized/fullscreen states, never adopts the default rect DSH itself places the window at (so the app's own layout resets can never poison the lock), and stays on-screen when monitors change. Compatible with DSH 0.2.1-rc.3+.

Connects AutoCAD, ZWCAD, GstarCAD and BricsCAD to DeepSeek Harness over MCP, bundling the CAD server and building a private Python environment on first run. Requires Windows, one of those CAD applications installed, Python 3.10+ on PATH, and CAD running as the same Windows user and at the same privilege level as DSH.

Long-term memory kept as blocks: one event per block, written to a local append-only event log with a block view and derived indexes, so a full history stays recoverable while only the matching blocks reach the context. The model saves entries with memory_remember and pulls the relevant few with memory_recall, plus one automatic recall pass before each step. Data stays in ~/.beme; no external service and no API key.

Local long-term memory for DeepSeek Harness with SQLite storage, automatic extraction, semantic recall, corrections, reliable forgetting, and an in-app summary dialog.

Layered long-term memory for DeepSeek Harness: append-only event log, rebuildable tag index, day diaries, semantic layer, trend quarantine, and an offline knowledge-graph panel.

Adds per-model hide/show switches for custom (llm-pi-ai) providers to the DSH settings page. Hidden models disappear from the conversation model picker and are archived verbatim, so they can be restored at any time; disabling or uninstalling the plugin restores everything automatically. Built-in DeepSeek providers are not managed.