Plugins

Unofficial Qwen Token Plan provider: registers a `qwen-token-plan-full` route with a model catalog fetched from the gateway, Responses and Chat Completions protocols, server-side built-in tools, image and video generation tools, and per-entitlement budget tracking that disables a benefit once its quota is exhausted.

Unofficial Volcengine Ark Agent Plan provider: registers an `ark-agent-plan` route with a model catalog fetched from the gateway, per-model thinking-effort control, server-side harness tools, and a quota badge with a panel showing remaining plan capacity.

Automatically discovers the local Magpie gateway to sync chat models, enables Codex and Gemini image generation, and configures image sources for eligible workbenches.

QwenWork (千问办公) model provider for dsh: signs in through the desktop device flow and then calls the official OpenAI-compatible gateway, so tool calls, image input and usage pass through; adds the tiers of the plan as a qwenwork provider, keeps the credential in a local file that a refresh rewrites in place, and shows the remaining credits of the account.

A fork of dougen/dsh-deepseek-usage (the upstream repository has no license file; its manifest declares MIT) that adds IKunCode account balance queries alongside the upstream provider readers, subscription usage windows and model price snapshots. For IKunCode, your key is sent as a Bearer token to api.ikuncode.cc. It installs as @elsebit/dsh-deepseek-usage-extended from GitHub Releases with its own routes and settings, so disable the original usage plugin if you want a single card; the OAuth credential references it inherits are shared with the original.

A DSH sidebar panel that talks to locally running Hermes TUI gateways over JSON-RPC: switch between bot profiles, resume their Bot Chat sessions, stream message and tool deltas, and embed the Hermes terminal view.

All provider quotas and prepaid balances from your local Magpie AI gateway (auto-discovers its port) inside the DSH composer: per-window usage bars, remaining percent, reset countdowns, and money-balance accounts.

HTTP API for DeepSeek Harness: agents / sessions / event timeline / SSE streams / steering / messages / runs / files / questions / subagents, with archived run manifests, per-key metering and tenant isolation.

Mobile gateway plugin that pairs DSH Mobile App with a self-hosted DeepSeek Harness host over an authenticated WebSocket. Fork of Clarklevis1995/dsh-plugin-mobile-gateway (same package name, install only one) that adds an optional encrypted address book deployed to your own Cloudflare account as a Worker with wrangler, an experimental WebRTC P2P transport, and a public-DoH fallback for its endpoint check.

Maintained continuation of dsh-network: authenticated LAN, Tailnet and HTTPS access to a DSH host, with pairing QR and current Web browser-auth support. Replaces the upstream dsh-network (remove it first; both register the same /dsh-network routes); the gateway listens on 0.0.0.0:3081 by default, set bindHost to restrict it.

Stops session lockups from OpenAI-compatible gateways that stream empty tool-call ids: intercepts llm/stream chunks in memory to synthesize consistent call_<sha256> ids across tool-call-delta and block-end, plus offline session repair/verify scripts under tools/.

Agent gateway manager: picks a working gateway among proxies and direct, verifies the model channel, and switches online; DSH plugin plus standalone CLI.

Access the DSH Web GUI from your LAN: a listener on the address you set forwards the browser to the loopback GUI with this process's launch token, and 0.0.0.0 answers on Wi-Fi, VPN and wired alike. Address, port, session lifetime and password are edited in an Access section of Settings. The password is on by default — a fresh entry starts with a generated random one — and can be switched off on a network you trust for direct access; the Host stores only its scrypt hash.

IPv6 remote-access gateway for DSH: PIN-protected HTTPS reverse proxy with a Let's Encrypt certificate (DNS-01 via DuckDNS), QR scan-to-connect and a settings page, no relay in the data path. Needs a public IPv6 address (detected on Windows and Linux only, not macOS), a free DuckDNS subdomain and token, and inbound ports 8787/8788 open on the router; the AAAA record is only auto-updated when the plugin config sets ddns or tls.

Replaces identity numbers, phone numbers, bank cards, emails, addresses, customer names and secrets with numbered placeholders before a model request leaves the machine, restores the response, and keeps an encrypted local mapping plus a hash-chained audit log exportable as CSV.

Toolbox panel for the DeepSeek Harness Web GUI: a right-side drawer (full screen on phones) with connection information (Wi-Fi details and gateway ping need a Windows host), one-click diagnostics, a speed test with server-side timing, a quality monitor, history and auto patrol; the host registers the /api/toolbox routes.

Adds three session tools — create_image and edit_image over GPT Image or Gemini through the TLPro gateway, and speak for text-to-speech through xAI — plus a viewer in the chat UI for the images and audio they produce. Needs your own TLPRO_API_KEY and XAI_API_KEY, and publicOrigin and mediaDir set in the profile config.

macOS (Apple silicon) fork of aureth-labs/dsh-aurabot-qq: the same QQ persona bot (chat, voice notes, stickers, memory, song covers, modules) with the Windows-only code removed. It connects to a OneBot v11 gateway such as SnowLuma running in OrbStack or Docker, falls back to the macOS `say` voice, sends files over 30 MB to a containerised gateway through a loopback-only temporary download link, and installs the song-cover environment (Applio, audio-separator, uv, Rubber Band, separation models) at pinned versions. It keeps the upstream package name and plugin id (dsh-aurabot-qq), so it replaces upstream and cannot be installed alongside it; use upstream on Windows.

Account-based access to the ToTonAI gateway inside DeepSeek Harness: sign in or register in the settings panel, use 65 mainstream models (GPT, Claude, Gemini, DeepSeek, Doubao, Grok, GLM), and pick a plan then pay by QR code in the same panel. Upstream API keys stay on the server.

Configuration panel for an existing `oneapi` route of the pi-ai provider adapter (declare that route in the llm-pi-ai settings first, with api: openai-completions): edit display name, Base URL, API key and default model, test connectivity per model and sync the model list from the gateway, with six agent tools and an optional left-sidebar panel. Written for a Baidu-internal gateway: the Base URL placeholder and token link point there, so set your own OneAPI-compatible gateway.

Stores provider API keys in one local pool and hands out the least-used enabled key over a loopback-only endpoint, tracking usage counters without proxying requests.

Digital Study: a private WeRead study in the DSH sidebar, in a calm light-green paper palette. The shelf folds into ten categories and carries a slightly deeper paper tint of its own; highlights and thoughts page through, copy per item, and export as front-matter Markdown (one file per book or a cross-book batch) into a folder you choose; the whole study backs up and restores as a single JSON bundle. Thoughts read like handwritten notes: looser line height, the source book shown in full, long entries folding behind a show-all control, and a same-chapter highlight block for context. A five-shade reading heatmap draws only the days up to today, keeps its numbers on one line underneath, and a year-scoped KPI dashboard sits above it. Sync is incremental: a local ledger plus per-book counts mean an unchanged library refreshes in 2-3 seconds instead of a full pull, and a banner reports progress and dismisses itself after eight seconds. Search covers shelf, books, highlights and thoughts with type filters. Reads WeRead through the official agent gateway using your own API key, keeps everything in local JSON and never writes back. Requires DSH >=0.2.2-rc.1.

Remote control for DeepSeek Harness over an outbound Huawei Cloud DevBridge tunnel: a sidebar seat and a standalone control page start and stop the tunnel and show its public URL, QR code and logs. The plugin's own gateway stays on 127.0.0.1, checks a rotatable access token or HMAC session cookie, rate-limits failures and strips external identity headers before forwarding to DSH, so no inbound port is opened. The tunnel is off by default; tokens and state stay under ~/.dsh. Requires a Huawei Cloud account and devbridge CLI v0.2.x. The relay terminates TLS and can see plaintext HTTP — this is access control, not end-to-end encryption.