Plugins

Local kanban boards shared by people, DSH sessions and optional DS Bot, with role permissions, change history and explicit task completion.

Keyboard-driven quick switching for DSH — model palette with colored provider tags, suffix tags and pins, a two-column session palette with per-question prompt preview and archived-session restore, recency-ordered session cycling, find-next-answered jump, composer focus, and configurable permission cycling, managed from a sidebar control panel.

SSH remote workspaces for the dsh web GUI, reusing the session sandbox mode and approval flow.

Self-hosted plugin marketplace for DeepSeek Harness with accounts, groups, permissions, artifact storage, and install statistics; run the server with Docker and install this client bundle in DSH.

Reviews destructive shell commands with a model before they run, asks you to confirm or blocks them, and aborts a running command once it has deleted too many files.

Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_roots denies every path-like call), a per-minute call limit and a JSONL audit, exposed through gate_check / gate_check_path / gate_policy and ctx.gate — other plugins or prompts must call the gate; it does not intercept tool calls by itself.

Windows-only DeepSeek Harness host plugin that shows Windows 11 style desktop cards in the bottom-right corner: a card when a turn completes — clicking anywhere on it brings Harness forward and switches back to that conversation — or fails, a native choice card for ask_user_question where clicking an option answers the tool and a free-text field accepts a typed answer, and an approval card for tool-permission requests. Cards follow the current Harness theme, open on the screen that hosts the main window, and the notification sound (including a custom .wav) plus notify timing, approval takeover and timeouts are configurable in the Harness settings page.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

Registers named Claw agents, isolates them from the official workspace sidebar, and provides settings plus a global new-agent template. Hard deps (install together or single install fails): dsh-claw-policy, dsh-claw-observability, dsh-claw-permissions.

Injects SOUL, IDENTITY, AGENTS, and TOOLS into Claw session prompts. Hard dep (install together or single install fails): dsh-claw-permissions.

Adds a /new slash command that opens a blank session in the current workspace (reusing an existing blank one when there is one) and carries the old session's permission preset and agent preset into it, so starting fresh never changes what the agent may do.

A right-Sidebar video player with a folder playlist (first-frame thumbnails, duration badges, sort by name/duration/modified/size, fullscreen, and a context menu for rename/copy/delete/refresh when the folder is opened with write access), live playback telemetry (buffered range, decoded FPS, dropped frames) and a read-only MP4/MOV reader for codec profile/level, exact frame count, per-track bitrate and rotation. Registers no agent tool; file writes use the browser File System Access API only after a write-permission folder choice.

Single-owner cloud tasks for DeepSeek Harness (大肥鱼 bot): submit from local chat or either IM bot, run continuously in a native cloud worker, and follow overall progress and artifacts in one workbench. Task permissions are independent of IM; includes agreed delivery and session archive recovery.

Runs OpenCode as a DSH subagent over ACP and shows each task live in the right sidebar — its agent and model, tool calls, and the subagents OpenCode spawns itself; permission requests become DSH question cards with allow once, allow always or reject.

Composer history that restores the whole input state: composer contents, image and file attachments, @ references and slash commands, plus the model, thinking effort, permission and agent preset used.

Windows sandbox ACL-repair plugin for DeepSeek Harness (dsh) — fix the grantWrite failure (SetNamedSecurityInfoW Win32 5) and retry the command invisibly

Arabic-first actionable Windows notifications for DeepSeek Harness (dsh): toast buttons that continue, stop, or open the app — and approve or reject the agent's permission requests — without leaving your seat. Bilingual ar/en with RTL.

DeepSeek Harness plugin: secondary working directories for a project. The agent keeps the primary workspace as cwd, gains equal write/exec permissions on configured secondary directories under workspace-write mode, and is notified of configuration changes

Archives DSH conversation output into SiYuan notes: a single siyuan_archive call files content under `<archive path>/<year-month>/<type>/<date>_<time>_<topic>_<content>` with a metadata table and auto-maintains an index document at the notebook root; 6 siyuan_* host tools (list notebooks, full-text search, read document, archive, delete block, remove document) and a Web settings page for base URL with connection test, API token in the host credential store, archive target and title template, plus notebook/document-level read/write/delete permissions with default deny and child levels able to only tighten.

/cmd <command> in the composer runs that shell command in the session working directory, sends the command and its output to the model as a user message, and renders the input as a terminal card with exit status, expandable output and copy buttons; a bare /cmd opens an interactive terminal whose transcript is sent to the model with Ctrl+Enter. Runs with its own terminal permissions (danger-full-access) by default; set useSessionPolicy: true to use the session sandbox.

Adds a Polish button to the composer tool row right of the permission control: it reads the draft you have already typed, has the current model infer your intent and rewrite the draft into a clearer prompt, then turns the button into Cancel so one click restores the exact pre-polish text.

Con's 自动审查（DCAR）：确定性规则优先、LLM 按需升级的 DeepSeek Harness 工具审查插件，提供 CAutoR 权限模式。Deterministic-first auto review for DeepSeek Harness.

Registers one agent tool, plugin_guard, that statically scans a DSH plugin package before it is installed and reports a verdict with the reasons: a missing or broken dsh.bundle.patch, a missing dsh.permissions block, install scripts, dangerous APIs and obfuscation, dependency risk, and source that is not indexed and therefore cannot be verified. Read-only: the scanned code is never imported, installed, evaluated or run.

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.