Plugins

Scene-awareness probe for DSH on macOS: a privacy-first, pull-model `look` tool that reads the frontmost non-self window (app info, AX title/selection, gated local OCR), plus a summon-hotkey snapshot captured the instant you press.

Windows desktop control through UI Automation: nine tools that read a window control tree and drive elements by id through their own UI Automation patterns, with every write gated by an approval policy, an append-only action log and a settings panel.

Brings the Codex (ChatGPT Plus/Pro) subscription already signed in on this machine into DSH. It (1) shows the 5-hour and weekly windows with their reset times and the remaining reset credits in a sidebar panel, with one-click reset that consumes a credit; (2) registers the subscription route in llm-pi-ai (openai-codex) when the quota is read, so the Codex models appear in the model picker; (3) refreshes the OAuth access token before expiry and writes it back atomically, so no key has to be replaced by hand; and (4) adds a codex tool that delegates a task to the local Codex agent. No API key has to be entered.

Floating phone-pairing QR button for the DSH WebUI. One click opens the dsh-remote-link pairing QR (image + 6-digit code + TTL) in an in-app overlay — works in both browser and DSH Desktop (same-origin img, no iframe).

DSH plugin: audio chimes, cross-session toasts, desktop push, and IM webhooks for turn completion, errors, and approvals.

Speaks a short status line when DSH changes state — turn done, turn error, job done, job failed, goal complete, goal blocked, an approval waiting, or the agent needs your answer — using eight pre-recorded clips in Chinese (default) and English. The audio is played by the host process through ffplay, or through the Windows PowerShell player that ships with the OS, so it does not depend on a Web Audio tab. Windows only.

Webhook notifications for dsh sessions: a POST when an approval is requested or a turn ends, to ntfy, Bark, a Slack/DingTalk/WeCom bot URL, or any HTTPS endpoint.

Structured git tools for DeepSeek Harness agents: status, diff, log, branch, commit and stash. Output is pinned with ten `git -c` overrides so a user pager, colour or quotepath setting cannot reshape what the agent reads; every invocation is an argv array, so no shell ever parses an argument; and the mutating actions go through the harness approval service, refusing rather than proceeding when no approval service is mounted.

Turns the browser PWA shortcut already on your desktop into a real launcher: it adopts that shortcut and keeps its icon, then starts dsh web silently on double-click and opens the app window; adds restart and dsh self-update (with rollback) controls to the web UI. Windows only.

Live progress for long-running DSH tasks: a script appends JSON lines to a per-session progress file, the Web UI draws them in a floating overlay and a right-sidebar tab that also lists background jobs which reported nothing, and `dsh-progress run -- <cmd>` wraps a command that cannot report for itself.

Google Jules as a DeepSeek Harness capability — delegate coding tasks to the remote agent, watch them in the background, approve plans, and land the diff.

Windows-native computer use for DeepSeek Harness: two tools drive and read any desktop app. One batch call runs find, click, type, key, read, wait and screenshot steps in a single engine pass, so a task whose steps are known up front costs one model round trip; reading returns window text rather than an image, and input and capture prefer UI Automation patterns, Win32 messages and offscreen PrintWindow so the user's focus and pointer stay untouched.

Telegram channel for DeepSeek Harness — real Telegram markdown, and answer the agent's questions and approvals straight from chat

Customize the dsh UI theme: 12 accent presets, dark-mode aware accents with a contrast guard, density, font family, animation toggle, and raw design-token overrides.

Zero-intervention permission gate for DeepSeek Harness (DSH) agents on macOS — active on install. Writes that can be undone via a local git baseline or macOS Time Machine are auto-approved and automatically snapshotted; network access, package installs, process/system management, and reads of sensitive credential paths are blocked; every decision is audited — the audit log keeps everything by default, with optional automatic cleanup of the oldest records.

Plays a chime when DeepSeek Harness asks for approval; tone, volume and on/off are set in Settings → Notifications.

Appends actionable hints to failed tool results, such as the nearest existing directory when a path does not exist.

One-click Approve & escalate on the approval card: answers the pending request and switches the live session to a permission preset.

DeepSeek Harness skill plugin that reviews law theses (international economic law and other legal topics): reads a student Word .docx, checks it against a bundled common-issue checklist, applies definite fixes as tracked changes, and adds Word comments for overall/section problems and missing-basis issues, then emits a short objective overall review plus a fix list.

Always-on-top lamp board for macOS: one lamp per agent, one row per session, collapsing to one lamp per running task; a lamp turns blue and blinks while an approval or a question is waiting on you, and the root agent finishing raises a system notification.

Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

A continuation of simon300000/dsh-auto: the Auto Approve permission preset for the DSH Web UI reviews each approval with one single-shot model call instead of a reviewer subagent, auto-approves only the actions that pass and hands the rest to human approval, and remembers confirmed decisions as project- and global-scope allow/deny lists, with an approval timeline in the right sidebar.

Sound alerts for the DSH web UI: a chime when an answer completes and a three-tone prompt when your approval or question is pending, with optional custom WAV stored only in the local browser (pure client-side, zero assets).

Computer Use for macOS desktop applications: reads any app's accessibility tree as text with element indices, then clicks, types, pastes, scrolls, drags, selects text and sets values through it, plus screenshots read back as images. Driven by a persistent JavaScript REPL — the agent gets two tools (`js`, `js_reset`) and calls an `sky` API inside them, so state survives between calls and the tool schema stays fixed as capabilities grow. Accessibility trees come back as diffs after the first read; actions address elements by index and indices from a stale read are refused rather than misapplied; typing waits for keyboard focus and reads the field back; paste restores the clipboard. Requires macOS 14.4+, Accessibility permission (Screen Recording only for screenshots) and Node 20+; ships a prebuilt native module, so nothing compiles at install time.