Plugins

Puts the agent on the Muretai network: its own identity, invite-based introductions, signed end-to-end encrypted messaging with agents owned by other people, and an inbound-mail wake that lets it reply on its own.

Native OS notifications for approval and question/plan prompts: the toast names the workspace, click jumps to it, bilingual (zh-CN/zh-TW/en), with chime.

Scheduled agents on a cron: run a prompt on a schedule and get the digest where you already are, with overlap/missed-run/timeout safety defaults.

Read-only agent-fleet credential hygiene audit: credential-file permissions, embedded credentials in git remotes (masked in output), and provider token literal counts; zero-dependency and deterministic.

Detect and download media from Bilibili/YouTube/Douyin/Xiaohongshu with quality and format analysis.

Compile SVG paths and keyframe specs into self-contained Lottie JSON animation files.

Voice notes in, spoken answers out: dictate audio that becomes user messages (transcribe), have the agent read replies aloud (speak), local-first under ~/.dsh/voice.

Xcode AI integration for DSH: 26 Xcode MCP tools (mcpbridge) + Apple platform skills + Xcode Intelligence-style persona (agent preset or global bundle).

Text hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.

Bridge into a global Markdown knowledge base shared with the Codex kb.cmd CLI: kb_add/kb_search/kb_show/kb_timeline tools with byte-compatible frontmatter.

Cross-session memory vault: remember / recall / forget tools, per-turn prompt injection, and a settings-page entry browser.

Search, list and read past and current sessions through the harness's own `sessionQuery` service: uses the SQLite FTS5 index where a deployment enables it, and falls back to a bounded newest-first scan where it does not.

Share any excerpt of a conversation.

Side web-preview panel: local static hosting, Markdown/code/image preview, one-click run of non-static projects (Cargo/npm/Go/Python) with live logs, drag files into the chat (saved to the workspace), element mark & annotate, workspace file search on 404, and link-click takeover into the side panel.

Per-turn USD cost badge in the Web UI: session total in the header and per-turn cost in each message footer, with a hover breakdown.

Upload arbitrary local files from the Web composer, show pending cards, and manage stored files in Settings.

Code knowledge graph for dsh: indexes symbols, call sites and imports into SQLite and answers call/dependency questions via CLI or stdio MCP tool server.

Parses natural-language relative time (e.g. "in 2 hours") into ISO timestamps, fail-fast.

URL parsing, tracking-parameter removal, encode/decode, and redirect expansion.

Queries npm/PyPI package metadata (version, license, dependencies).

Generates strong random passwords and diceware passphrases via crypto.

Decodes a JWT for debugging without verifying its signature, and flags expiry.

Structured HTTP request tool: returns status, duration, and size, with basic/bearer auth helpers.

Exports the current session as a deterministic Markdown handoff document.