Plugins

Install it by asking DSH in one sentence, then it reads your local Codex CLI/Desktop chat history from ~/.codex/sessions and makes it usable inside DeepSeek Harness: a panel under the composer lists sessions with keyword and date filters and one-click import, the codex_history tool lets an agent list, read, search and summarize past conversations, a session whose working directory matches is injected automatically when a new agent starts, new Codex messages arrive as incremental updates in the running conversation, and a shared folder can mirror both Codex and DSH sessions across machines. Read-only — nothing is written back to Codex.

The official ZCode ios-simulator plugin ported to native DSH tools: the original 20 ios_* tools keep their names and arguments, plus ios_shutdown_simulator, covering Xcode project discovery and scaffolding, simulator boot and shutdown, build, install, launch and terminate, screenshots, log reading, an in-app settings page and optional idb UI automation. macOS only.

Backup, restore and machine-migration for DSH: packs skills (which live outside ~/.dsh, in ~/.agents/skills), plugin manifests, core config, memories, todos and optionally sessions into a tar.gz with a sha256 sidecar, then imports it on another machine as a three-way merge against a baseline, listing per-file differences instead of overwriting changes made there. Credentials never enter an archive (filename deny-list of 27 names plus 7 private-key suffixes plus a content gate, enforced again on the import side), every import writes a pre-restore snapshot first, and an archive can be uploaded to any WebDAV server and pulled back on the new machine. Also includes scheduled backups, a read-only viewer for individual files, and an in-panel cloud card; no npm runtime dependencies (packing uses the system tar).

Export a whole working DSH home — profile, installed plugins with their node_modules, skills, hooks and task boards — into one .dshpkg tar and import it on another machine without network or pnpm; also streams over HTTP or a one-shot LAN link.

Workspace-scoped DSH migration: package a project's conversations, files and attachments, restore them on another machine into a chosen root with historical absolute paths rewritten, and re-sync only what changed afterwards.

Model-linked characters and a shared world for DSH, with separate editable personas and memories, optional AI diaries and sleep consolidation, Chinese/English controls, task-aware desktop pets, themes and usage statistics; updates preserve user customizations. Supports Windows, Linux and macOS; see the guide for each system's installation requirements. Diaries and consolidation consume tokens. Before installing or updating, we recommend closing visible desktop pets and bubbles; open files may cause installation to fail. Codex and OpenAI API account queries have been user-validated; other sources await user validation and feedback.

A no-limit Texas holdem table where you are the only human. Eight seats: you plus seven LLM agents written on AI-founder personas (Altman, Dario Amodei, Musk, Liang Wenfeng, Jensen Huang, Lei Jun, Zhang Yiming). Each agent bets through the currently selected host model and falls back to its own heuristic style when no model is available; every agent only ever sees its own hole cards, because the prompt is built from that seat alone. A hand ends by revealing the winner hole cards, with a flip animation replayed on every community card, and a rail keeps a live action-and-table-talk timeline. LAN mode (off by default, single-machine play is unaffected) lets another install on the same network join this very table: the host shows a six-digit room code, UDP broadcast discovers nearby tables, and a joiner randomly takes over one bot seat, with the seat handed back to its character on leave or after twenty seconds of silence. The room code is never put on the wire and every snapshot is generated for one viewer seat, so nobody, not even the host, can read another player hole cards. Fork of BubblePtr/dsh-holdem (MIT), credited in the README and in the UI.

Read-only audit of the local CLI toolchain as a sidebar panel in the DSH web GUI: lists installed versions across Homebrew, npm global, pip, Rust/Bun/uv and self-updating CLIs, flags which ones have a newer release available, and shows the dependency impact for installed packages. It reports only and never runs an upgrade, so no tool on the machine is modified. The DSH plugin ships on npm as `dsh-cli-doctor`.

Verifies letters signed by other agents: a canonical field order, digest and HMAC checks, and fail-closed handling of missing or unregistered fields. Off by default; when enabled, a letter that fails any check is refused rather than delivered.

An announcement file shared by several agent sessions on one machine. It is a plain text file the agents only append to; before each step a session receives the entries it has not seen yet, a new session catches up on the ones still in effect, and a session whose context was compacted gets them re-sent.

Desk-to-desk tickets between sessions on one machine. A session says which desk it belongs to by putting a number prefix in its title; a ticket names one desk and is taken by the first session of that desk to start working, so the desk is the address and a ticket is not delivered to a session that is just passing by.

File-backed post office between DeepSeek Harness sessions: every letter is sealed with an HMAC and a body digest, recipients are resolved through a roster interface, and delivery is offline-first, so an undeliverable letter waits in the mailbox instead of being lost.

Puts the DSH web UI on a phone browser over your own tailnet, with the remote channel built on Tailscale Serve. Both sides need only Tailscale: no dedicated app, no QR code, no login page, no account of its own, and no relay of your content. The desktop half runs on macOS, Windows or Linux.

A chip at the left end of the composer tool row showing whether DeepSeek bills at peak or off-peak right now. Clicking it opens a card with the current state and rate, the next switch with a countdown, and why this instant is in that state: a weekend, a named statutory holiday, a 调休 make-up workday, or simply outside the peak windows. Times are resolved in Beijing time with an explicit UTC offset, so the verdict does not depend on the machine clock; a hard-coded 2026 Chinese holiday table carries the 33 holiday days and the six 调休 workdays, and a year beyond the table says so instead of guessing.

Cone crusher selection and crushing-plant design for MACKORN NH/NS single-cylinder hydraulic cone crushers: requirement-form intake, equipment selection, plant configuration, proposal generation, product-size simulation and field-data calibration. 21 tools, 6 skills, an MCP server, no runtime dependencies.

Run one instruction on every online Windows and macOS machine, across networks and regions: a dependency-free relay talks to each machine over outbound connections only (Tailscale, a public VPS behind TLS, or a tunnel), every machine runs the command in its own checkout, and results come back with a commit, a working-tree fingerprint and a command hash so an environment mismatch is reported as unverifiable instead of being mistaken for a different result. Sending work needs its own operator token, separate from the per-machine device token.

Read-only Skill inspector for DeepSeek Harness. It shows which Skills a conversation actually loaded — from observed loading evidence only — and which Skills the current environment can discover, and gives each Skill a detail page whose left column switches between the framework, the evidence, validation, evaluation, step evidence, run logic, the before/after of a modification when there is one, the definition facts and the raw SKILL.md. Declaration and run stay apart: the body is split into structure, declared workflow and progressive disclosure, the run logic is read from local receipts, and every declared step carries its own evidence — no observed evidence is reported as exactly that, not as executed or not executed, and the run's instruction hash sits beside the current definition as match, mismatch or unavailable. The evidence view gives each subject one of three states (declared, observed, unavailable), walks definition → load → use → outcome, names what each stage cannot reach, declines to attribute an outcome to the Skill, and can copy the snapshot out as byte-stable JSON. Validation checks the Agent Skills open standard and the platform profiles separately, each finding on a rule id and labelled standard compliance or platform compatibility. Evaluation keeps repeatable cases with the conditions each run was recorded under and the four stages of runtime evidence, comparing two runs of one case item by item without scoring them. The trigger boundary keeps should-trigger and should-not-trigger prompts, has you run them in a real new session, then records what was observed — whether a load record appeared and whether it was model-invoked or user-explicit; a typed /name is not a natural trigger, and an absent load record is reported as not observed, not as not triggered. The same projections are exposed to the agent as a read-only skill_review tool, which returns a structured review packet and says what it omitted when the packet will not fit whole. The inspector, the evidence chain and these reviews are computed on this machine from the definition and the session receipts; the Chinese reading version sends the body through the host's model when you ask for it, keeping code fences, paths and frontmatter verbatim and storing the result on this machine. A Skill can also be cloned into a local copy. It does not write back to the source Skill and does not run its scripts.

Allowlisted SSH into Unix/AIX/macOS from DeepSeek Harness (no shell; read-only by default), with remote_ssh_probe OS-aware suite.

Builds, tests, archives and runs an Xcode project or workspace on iOS or macOS through xcodebuild — a live filterable build log, scheme and destination pickers read from the project, and log streaming for simulators and USB devices, including iOS 16 and earlier over libimobiledevice, whose app logs stay readable while the device is locked. macOS only.

QA orchestrator plugin for DeepSeek Harness: an agent explores your app and leaves evidence, then the explored path replays deterministically. Drives the browser, macOS desktop, iOS and Android drivers.

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

Turns the MacBook keyboard Caps Lock light into an agent status light: on while the agent works, flashing when it waits for your approval or answer, off when idle.

Zero-credential Outlook automation: 13 tools that drive the local desktop Outlook client via COM — search/read mail, drafts, reply/forward, calendar, address book, rooms, free/busy — plus a sidebar new-mail badge. No Graph API registration, no SMTP passwords; anything that leaves the machine passes a three-layer human approval gate.

Per-turn file-change card for DSH Desktop: +N −M badges, aligned diffs, and Mac/Windows file open (system app, Finder/Explorer, VS Code).