Plugins

Windows-only process control for the harness: a sidebar button that shuts DSH down through the host's own graceful exit path, an app-window / normal-tab switch on the Plugins card that rewrites the desktop shortcut and restarts, and advanced settings for the wait before exit, the process exit code and a force-quit option.

Native Goal Autopilot Harness for DeepSeek Harness (dsh): plan-execute-audit gates, mechanical enforcement, and evidence-bound closeout as an out-of-tree plugin bundle.

Persistent, searchable, per-project memory for the DeepSeek Harness: decisions, rules, and sprint context in a queryable DuckDB file, rules enforced on every model request, with a full management UI in the Web Client

Enforces your comment policy at write time, inside DeepSeek Harness. Reads the policy from your AGENTS.md or CLAUDE.md, blocks violating writes, and re-injects the policy verbatim so the model stops drifting from it.

Browse the awesome-dsh-plugin catalog from a dedicated page opened through the DSH left sidebar. Search, filter by category or installed state, and sort by stars, downloads, name or date added. Three tabs show all, installed and updatable plugins, with a separate count when update status cannot be determined. Install into the active Web or Desktop profile using the package manager supplied by DSH, while preserving disabled bundles. Reload the profile through HMR when available, with restart guidance otherwise. Installed state is isolated per profile, installation and reload requests are mutually exclusive, and pagination keeps the submitted search. Expired catalog and installed-state snapshots are served immediately while refreshing in the background. Unversioned npm installs resolve the official registry latest tag to an exact version, and confirm the installed version before reporting success. Registry updates install the exact catalog version; Git updates force source resolution. The catalog is cached locally for one hour, with mirror, CDN and npm fallbacks.

Turn-level workspace undo for Git worktrees: every agent turn gets a private snapshot, /undo previews a red/green diff card that is confirmed in place, files changed after the turn are refused with a conflict diff unless --force or --skip-conflicts is passed, and HEAD, index, stash and commit history of the user repository are never written.

Force the model to write all replies in a chosen language (Simplified Chinese by default) via a system-prompt section, switchable anytime with a tool.

Dot-matrix backdrop for the DSH Web UI: the dots form the DeepSeek whale or a transparent PNG you import (alpha-masked), each dot carries its own low-frequency force and follows the cursor in manual mode, while an auto screensaver mode sweeps 360-degree waves and full-screen breathing across the artwork; sliders and toggles live under Settings > Plugins.

Keeps every model request inside a per-provider allow-list, enforced at the agent/request waterfall: disallowed models are redirected to a fallback or refused; subagents stop inheriting stale creation-time routes; warns when consecutive requests would make a --models-max 1 llama.cpp router reload models. A one-entry list is a global single-model mode.

Intercepts turn-stopping to force one critique-and-improve round after each completed turn before the agent stops.

Algorithm learning toolkit syncing Codeforces and AtCoder submissions, profiling weaknesses, generating AI training plans, and tracking spaced-repetition reviews across a 114-lesson algorithm curriculum.

Drag-and-drop enhancer for the composer: drop .md/.txt/.markdown to inline small files into the draft or save large ones to .dsh-drop with @-references (Shift forces inline), and drop SKILL.md packages to validate frontmatter and install them to project/user skill roots with one click - effective immediately via the skill watcher.

Toolbar picture button in the DSH Web composer: click to pick multiple images through the native file dialog — they join the same draft-image rail as drag-and-drop and paste, with the host image-format, per-message-count and per-image-size limits enforced inline.

Curated file-based long-term memory for DeepSeek Harness — human-readable markdown notes, one plain-file store shared across hosts (git-ignored when it lives inside a project repo), and a deterministic index cap enforced by ctx.tools.guard()

Sidecar markdown memory for DSH: per-session index injection, one-click memory-flow button, enforced 分类-主题.md format, cross-project search.

Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records

Force-switch the agent preset (mode) of a DSH session after it has started, bypassing the blank-only lock. 会话模式强切插件：绕过「仅空白会话可切换」锁定，随时强制切换当前会话的模式。

Audit an agent harness against the harness-evaluation criteria, with machine-enforced evidence validation.

Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.

Zero-interruption audit and fuse blocking for DeepSeek Harness: silently records every tool call with deterministic risk scoring, cumulative-risk bonuses, risk-level breakdowns and retention-based cleanup; blocks irreversible catastrophes (protected-path deletion, disk wipe, force-push to protected branches/refs, credential exfiltration), and renders a redacted /risk-guard operation bill with --since filtering.

Browser operation by accessibility refs: navigate, snapshot the page as a ref tree, act on elements, and wait for conditions; the origin policy follows the session approval stance and is enforced by request interception.

Long-lived background terminal jobs for dsh: launch processes in a PTY, write input (including control sequences like Ctrl+C), page through ring-buffered output, and stop jobs gracefully or forcefully.