Plugins

iOS home-screen fix and always-on kit for DeepSeek Harness remote access: overrides the PWA manifest start_url to /pair-app so the phone icon stops hitting the harness 401, and ships a hidden watchdog that keeps the desktop host and its tunnel alive while the PC is on. Requires @linxin666/dsh-remote-web-ui (it serves /pair-app); the watchdog scripts are Windows-only.

Registers one `doc_ocr_sign_fix` tool for DeepSeek Harness: on macOS it diagnoses and repairs the condition where the bundled Python cannot load native extensions (onnxruntime, cv2, pypdfium2) because of the hardened runtime and library validation, by injecting the disable-library-validation entitlement and re-signing the interpreter, then verifying the imports. Operations are idempotent and the original binary is backed up first. It never touches the enclosing application bundle.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Hot-reloads DSH plugin modules without restarting the app (module-cache purge, junction-path matching, bust fallback) and registers a refresh button in the session header so the browser page loads the new plugin bundles.

WeChat Mini Program engineering tools: scan a project for pages missing from app.json, scaffold pages with automatic registration, fix orphan pages, manage subpackages, tabBar and components, and drive the WeChat DevTools CLI for preview QR codes and uploads.

Move an entire dsh installation to another machine and check it item by item. Three layers go across: the declaration layer (settings, credentials, plugin declarations and vendored link: sources), the state layer (sessions, storages, skills, attachments) and, optionally, the workspace project code. Sessions are rewritten at the zstd header frame only, workspace paths are remapped through an explicit path mapping, and at the end 14 checks (I1–I13 plus I6b) report PASS / FAIL / WARN. A LAN route pairs two machines and pulls the bundle over directly; merge mode diffs a bundle against a machine that has already been in use and stops before writing anything while conflicts are undecided.

macOS Desktop only: one-click restart of the DeepSeek Harness Electron app. Confirms before interrupting running turns, blocks during plugin install/update, and records restart phases/logs.

A small dock in the DSH Web UI: restart the host or reload the page in one click. Restart asks first (now / 30s / 60s / 2min / cancel); the dock drags to any edge only after a 320ms hold, and stays anchored when the window resizes. Refresh refuses to run unless the plugin bundle is verifiably loadable (timestamp baseline + real bundle fetch + syntax compile), so a reload can never brick the app. Restart is Windows-only (PowerShell 5.1); the UI and page refresh work on all platforms.

Speaks a cue for DeepSeek Harness on Windows: a configurable phrase when an agent turn completes normally, a second phrase when the agent needs you to choose — a question, a plan approval, or a permission request — and a time-of-day greeting when a new conversation starts. A small bubble in the lower-left corner mutes and unmutes every cue with one click, with its own toggle chime. Phrases are synthesized with a Microsoft Edge neural voice (skipping aborted and errored turns, subagent turns, and rounds that a goal is still driving), cached under the DSH home directory and replayed locally, with the desktop SAPI voice as the offline fallback.

Flashes the DeepSeek Harness taskbar button on Windows when an approval, a question or a plan review is waiting, or when a turn finishes.

Focus-aware notifications for DeepSeek Harness: approvals, questions, plan reviews and finished replies appear as one alert only when the conversation window loses focus; background conversations alert at any time and subagent sessions never do.

Plays a sound when a DSH task completes, fails, or waits for approval, with per-category switches.

Toasts from DeepSeek Harness when a turn finishes, and when it stops for approval, a question or a plan exit. Native on Windows, text and timing configurable.

Flashes the Windows taskbar icon in the DSH desktop app when a turn finishes in the background or an approval or question is waiting for you.

Let external MCP agents delegate tasks to the existing DSH desktop, with visible sessions, user takeover, and optional approval handoff.

Expose a running DeepSeek Harness instance over MCP, so an external agent can list, create and continue that instance's own sessions, delegate a turn and collect its result, answer the questions the DSH agent asks, and set how future approval requests resolve.

Bundles the kb-curator skill, which keeps a local three-layer knowledge base and refuses to index anything the user has not approved. The L2 retrieval layer needs @kenz1117/dsh-engram installed separately, and the engine runs on Windows only.

Shows which skills each turn invoked and installs, updates or removes skills inside the app.

Two-way voice for the DSH web app: dictate with the unified composer, hear replies with speaker buttons and auto-read, on any device. Needs DSH 0.1.7+, Node 22+, Python 3 with numpy and requests, a TTS model, and a microphone.

Meeting notes for dsh: one meeting per conversation, transcribed and speaker-separated on the machine itself, with points, assignments, handwritten notes, reviews and monthly scores in the same panel. Exports SRT/Markdown/Word and packs a meeting into a portable zip another dsh can import; confirmed assignments go to DingTalk/WeCom in one click, following your robot settings. Recognition models are swappable (a stronger local model can be imported from a file), and cloud recognition is off by default with no request made before consent. Word export needs Python and python-docx; the first run downloads a recognition model (28 or 77 MB).

Requires macOS and AirPods with head tracking. Answer DSH permission prompts and questions with AirPods head gestures — nod to allow or confirm, shake to reject or shift the selected option — and install the companion macOS menu-bar app from a card inside the session.

Windows x64 only, 0.5.4 preview: two scoped tools (dragon_browser and dragon_desktop) that drive a visible browser through the DOM or CDP and Windows apps through UI Automation, with per-origin and per-executable read/control scopes, batch steps, a physical-Esc emergency stop and a redacted action log. 0.5.4 only widens the DSH compatibility range to 0.2.0-rc.2 through 0.2.1.x, because 0.5.3 pinned it to an exact DSH version and was silently skipped on DSH Desktop 0.2.1. Two long-lived native processes remove the per-action process spawn, so a single key step takes about 0.7 s on the same machine; when another window steals the foreground the step is aborted instead of typing into the wrong place. The browser side ships its own Edge/Chrome launcher and CDP client, so it no longer needs another browser plugin or the Electron runtime. It is not an OS sandbox; logins, admin windows and secure desktops stay with the user.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).