Plugins

Song-dynasty-inspired theme for the DSH web UI: a light "rice paper" and a dark "night ink" variant, Ru celadon carrying interactive states while kiln copper is reserved for blockquotes, plus a 4pt spacing scale and a 46-glyph mask icon set.

Auto-expands streaming thinking: always keeps the latest thinking block expanded, manual actions take priority, only the last block expands when opening a session, and nothing remains after uninstall.

Cherry Studio-style paste: multi-line/indented/fenced text or code pasted into the DSH Web composer collapses into a bordered, collapsible, language-tagged card and is restored as a fenced code block on send.

Irreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.

Product Design workflow suite for DeepSeek Harness - a router plus nine pd-* skills carrying ideas from a minimum design brief through visual directions, evidence-grounded research and audits, URL cloning, frontend builds and a blocking design-QA gate.

Listen to Xiaoyuzhou (小宇宙) podcasts in the DSH web UI: paste a share link to play anonymously (host proxies the audio with Range/seek), or log in via QR code to sync subscriptions, keyword-search shows/episodes, page full episode lists, and unlock purchased paywalled episodes; a `podcast_play` tool lets the agent play by link, podcast pid, or episode eid.

A Taffy mood mascot for the DeepSeek Harness Web UI: the corner GIF reacts live to agent state — approval pending / approved / rejected / begging, thinking, tool runs, interrupts, ask_user_question waiting, compaction, long-task fatigue, idle-ignored approval, idle / sleeping — with SSE-pushed state, drag positioning, middle-click console, tool-card mirror console, per-mood locking, persisted appearance settings and per-day bucket statistics.

Conversation minimap docked on the right edge of the dsh Web chat: colour-block and to-scale thumbnail modes, drag-to-resize (10–320px), hover loupe preview, click-to-jump and drag-to-scroll with a live viewport indicator, and collapse to a 4px strip.

Three-tier agent memory harness: L1 always-on CLAUDE.md, L2 index, L3 detail skeleton with templates, a gate that blocks writes to protected files without a one-time approval token, zero-judgement event logging, weekly distillation, and a TDD execution-loop skill.

Markdown sidebar preview and source editor for dsh-better-sidebar, with block- and text-range annotations that can be sent to the conversation as structured revision requests.

Achievement system for the DSH Web UI: gallery with category/rarity sorting, unlock toasts, sidebar trophy, composer dock, crossover achievements, and local persistence.

Alternative plugin market for DSH: curated catalog plus live GitHub browsing, zh/en cross-language search, a fail-closed pre-install static security audit with an install-hook block, and per-plugin README viewing with garbled-encoding repair.

Rules execution engine for dsh: parses AGENTS.md, hard-blocks rule-violating tool calls, text-based B/D rule auditing, /guard command, version-guard for versioned files, and free-zone support (engine skips free-zone sections).

Evidence-bound negative-knowledge ledger: persists disproven paths (command_failed, file_missing) with their outcome and precondition evidence, then warns or blocks repeat attempts until the evidence changes.

Agent trajectory governance and anomaly diagnosis: rebuilds flat session logs into multi-branch trajectory trees, detects loop deadlock, invalid retry, and goal drift, alerts with cost attribution, one-click interrupt and breakpoint fork via official APIs, independent GUI tab.

Per-model jailbreak armor: a Settings table arms model patterns with spells (25 spells: 20 across 11 model families, plus a model-agnostic armor, an upstream preferences file and three stackable persona layers), previews the exact injected block, and writes it into the armed model's system prompt only, leaving every other model untouched.

Blocks a tool call whose arguments lost their boundary, keeps a closing turn open when a step silently never ran so the model can re-issue it, and replaces damaged output on the model-visible surface after a fork. Zero dependencies.

Normalizes every generated .docx to one Chinese official-document layout: XiaoBiaoSong title, FangSong body at a fixed 29pt leading with zero paragraph spacing, character-unit 2-character first-line indent, fully centered table cells with repeating header rows, and a centered footer page number. Long attachment entries are split into real paragraphs at the wrap point measured by Word, producing a 2 / 6 / 5 / 6 character indent ladder. It applies the layout only when the request mentions 公文 (official document) and writes no signature block unless asked.

Strips DSML markers that leak into the assistant text stream and resumes a turn only when it genuinely produced nothing — an invoke-block leak with no tool call emitted, or a closing-tag leak whose prose is near-empty; upstream jitter codes retry, while quota, rate-limit, auth and context-window errors never do. Requires DSH 0.2.1-rc.2 or newer, below 0.3.0, and Node 20 or newer.

Composer-side prompt library: a button next to the input opens a picker with group chips and word-split AND search over saved snippets, inserting one into the draft or appending it, filling {{variables}} before insertion, with 13 built-in templates. Snippets live in one local JSON file behind a rev lock, a per-save backup, and whole-library JSON import/export; a settings page handles editing, grouping, pinning and a 6-second delete undo.

Adds a power button to the session header with two actions, each requiring a second click to confirm. Restart terminates the Electron main process itself (taskkill /F without /T), so no crash dialog appears: the host then exits gracefully on its own once the IPC channel drops, and a detached helper relaunches the same executable after the single-instance lock is released, confirming the new instance by a real window handle. Shut down does the same without relaunching. Leftover GPU and renderer processes from the previous run are reaped best-effort. Windows desktop app.

Session-level autonomy gears for DSH: a rail on the edge of the conversation area switches P/R/NT/NC/NE/M-/M+/D/A and injects the active gear's behavioral prompt into every request; the model's set_gear tool can only downshift, and handbrake H blocks all tool calls. The set_gear tool can downshift on its own; upshifts need user approval.

Samples a video the way a person does instead of downloading it: metadata and chapters first, then timestamped frames as images, subtitle-first transcripts (local ASR only when the platform carries no subtitles), AudioSet 527-class sound tags and top comments — 21 tools sharing one on-disk cache behind a cross-process lock. Needs Python 3.10+, ffmpeg and the vidlens package (pip install vidlens-mcp); a missing install comes back with the two ways to fix it instead of a bare ImportError.