Plugins

UI-level access gate + process-wide agent tool brake for DeepSeek Harness: shared session, strict 60-minute idle lock, native settings module. NOT server-side authentication.

Remote DSH access that needs no hosting of your own — the Feishu DM chat is the interface over the bot's outbound long connection, with cards for workspace, session (switch and rename), model, reasoning effort, permission preset and balance, and tool approvals and agent questions answered in that same chat.

Turns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.

Local and remote SSH terminals for DeepSeek Harness Web with three permission levels, human approval for risky AI commands, and encrypted credential storage.

Install and call external Agent CLIs (Codex, Claude Code) from DSH without touching the system install. Each CLI gets its own Provider, model, reasoning effort and permission preset, callable directly or as a native subagent.

Localizes the DeepSeek Harness interface — tool call cards, plugin list, command menu and permission selector display Chinese text while keeping the English originals.

A permanent DSH plugin that bundles a developer workbench, an in-session conversation tree, and a plugin manager: build and run an LVAL project, browse its code, and keep per-program version snapshots with rollback; edit, retry, or branch any message in place, with message micro-versions; a feature manager plus a global-plugin library whose entries each carry an enable tier; cross-dialogue memory, one-shot temporary chats, and model collaboration; five network-permission tiers, mixed-model routing, a security audit, and browser control through a companion extension.

Read and search logs and run permitted commands over SSH according to configured permissions.

Uses an isolated LLM review to approve or reject DSH sandbox permission requests.

A full-screen interactive terminal UI for the DeepSeek Harness agent runtime — live streaming, reasoning blocks, tool cards, sessions, permissions, plan mode, and a full slash-command suite. The web UI, reimagined for the terminal.

DeepSeek Harness (dsh) approval answerer backed by the agent-governance sidecar — every approval/request is decided by the deny-by-default gate, L0–L4 rules and the organizational audit chain.

Permission mode between workspace-write and full access: shell commands are checked by deterministic rules and a subagent review; irreversible or system-level actions require explicit approval.

WeChat iLink ClawBot bridge: official Tencent iLink protocol, Web UI settings (QR login / model / preset / permissions / session management with delete), 24h auto-renewal pushes a fresh QR before expiry, zero downtime.

Auto-approval permission guard: a middle tier between workspace-write and danger-full-access — auto-allows safe operations inside trust directories, always asks a human for destructive ones, with 11 per-category switches and an audit trail.

Autonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git checkpointing for unattended sessions.

Codex-style auto-review permission mode: adds an auto-review preset that auto-approves safe sandbox escalations, asks on risky or ambiguous ones, and rejects critical unconfirmed operations.

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".

Event sounds for DSH: plays a chosen sound on session end, options popup, permission request and stop, with AI-generated character voice lines and a manageable sound library.

A middle permission tier for DeepSeek Harness between workspace-write and danger-full-access: auto-approves harmless commands and operations targeting configured trusted areas, beyond the current workspace.

Read-only agent-fleet credential hygiene audit: credential-file permissions, embedded credentials in git remotes (masked in output), and provider token literal counts; zero-dependency and deterministic.

Community fork of KyoMio/dsh-zen-remote (do not enable both simultaneously — shares the ~/.dsh/zen-remote state and /_dsh/zen-remote/* wire protocol, and auto-defers if dsh-zen-remote is active): keeps the pairing-code PWA with Web Push and multi-host session relay, and adds a desktop Local / Remote / All workspace switcher, remote directory browsing with folder creation and workspace rename/delete (/v1/workspace-manage), automatic custom LLM provider and API-key sync to paired hosts, and bidirectional cross-host @ session reference hydration (session-ref-bridge). The gateway binds 127.0.0.1 by default; the LAN/Tailscale mode binds 0.0.0.0 behind a private-IP wall, and a paired desktop client runs terminals and file previews with the host's OS-user permissions.

Registers 36 bundled agent skills (research writing, LaTeX, experiments, design review, office documents, animation, Windows shell and dsh plugin conventions) as one host-only skill provider with no UI, no network calls and no telemetry of its own; skill scripts run with the user's permissions only when invoked, local skills of the same name take priority, and uninstall removes all 36.

macOS only. Shows a live badge in DSH and an optional SwiftBar menu-bar item reporting what the Yunshu (Eagleyun SASE) endpoint agent is doing on this Mac right now — TCC permission requests, its own agent logs (screen capture, clipboard, browser URL reads, browser window counts), DLP scan paths and the process table. Read-only: it never blocks, disables or modifies the agent, keeps the last 60 events in memory only, writes three state files locally and makes no network calls. Requires the Yunshu agent to be installed; SwiftBar is optional.

Feishu/Lark channel that pushes finished or failed turns to a phone and delivers group messages back into the workspace session. Group messages are delivered into the session as user messages, so anyone who can post in a chat listed under task.chats can instruct the agent with that session's tool permissions; no chat is listed by default. The app secret is stored in plain text in ~/.dsh/feishu/app.json.