Plugins

Version and maintenance suite for DSH itself: detects new host releases from npm dist-tags, upgrades with one click, restarts safely, and the web page auto-recovers once the host is back.

Turn event notifications: six event classes (completed, error, interrupted, approval requested, AI question, limit reached) delivered via sound, system notification, in-page banner, webhook, IM and host desktop-notification channels; when several browser windows are open, only one rings.

Cron job board: schedules local scripts or dsh session tasks (fresh or pinned sessions) by cron expression, with inline timezone suffixes (T±N), per-task model and agent-preset selection for session tasks, centralized environment-variable management, run logs, per-task concurrency limits and a per-task timeout for script runs.

Session lifecycle: auto-archives sessions older than a configurable threshold (the check interval is configurable too), and an archive panel lists archived sessions for unarchive or deletion; deletion moves the session artifacts to the OS recycle bin, falls back to a plugin-managed quarantine directory where no recycle bin is available, and a ledger re-attaches a session whose artifacts were restored.

Session-affinity keys for LLM gateway requests: it decorates the official pi-ai adapter so Chat Completions calls carry session_id and x-client-request-id headers and Anthropic Messages calls carry a session-derived metadata.user_id, which lets a gateway pin requests per session and raise prompt-cache hits. It registers no provider and takes nothing over — the official llm-pi-ai keeps serving, and disabling or uninstalling the plugin leaves its behaviour unchanged.

Multi-platform LLM balance and quota panel: configure DeepSeek, OpenRouter, Kimi, Zhipu GLM, MiniMax, NewApi or custom endpoints, poll on a schedule, draw balance and quota trend charts, and push threshold and window-reset notices through multiple channels.

Session usage dashboard: day/hour/minute token and request statistics, a 26-week activity heatmap, cache-hit-rate curve, per-model donut and list, and a settings page; it appends its cost item after the official session bottom bar (per-turn cost chips included, no separate detail button), renders the official cache-hit-rate number with two decimals, and estimates costs from multi-condition, time-segmented pricing rules. Re-implemented from HaoyueQin/dsh-usage-statistics-panel with extensions.

Auto-expands streaming thinking: always keeps the latest thinking block expanded, manual actions take priority, only the last block expands when opening a session, and nothing remains after uninstall.

Section icons for the settings navigation: replaces the uniform gear icons with per-section glyphs and fills the plugin-market card avatar slot with a semantic icon chosen per plugin name; a page reload after uninstall restores the official icons.

Conversation enhancements: a history-input overlay (Alt+Up, with workspace/session/global/favorite-prompt scopes), recall of interjected messages that were not applied, rewrite-style forking (fork a child session from before a turn and backfill that turn input for editing, including turns whose reply is still running), optional auto-resend after forking (off by default), and a copy-session-id action in the title bar.

Records real clicks, inputs, navigation and network traffic in a user-guided browser session for DSH, then generates a Markdown timeline report (report.md + events.jsonl) to build API-level skills.

Voice assistant for dsh web: say the wake phrase (e.g. "小鲸") to activate hands-free dictation — what you say is transcribed and typed into the chat box automatically. Supports spoken edit commands (send, clear, new line, stop reading) and reads assistant replies aloud in Chinese. Speech recognition runs locally in-browser via sherpa-onnx WASM, so it works offline without an API key.

Rate-limits LLM requests per provider and per model using a reservation-based token bucket, with queue or reject modes, plus gateway identity rules that rewrite user-agent and inject custom headers.

Shows DeepSeek account balance and current-session token and cost usage in the sidebar footer and composer dock, including peak and off-peak billing and subagent consumption.

DeepSeek Harness Web plugin — PDF text-layer and scanned-PDF OCR, Office docx/xlsx/pptx to Markdown, TIFF/epub and long-document index cards.

Ownership-checked tools and HTTP routes to list, release and permanently delete subagent sessions, with automatic web UI refresh after deletion.

Manage, discover, install, update, and uninstall DSH skills as plugins.

RLM mode for dsh: recursive sub-agents via a unified rlm() function — spawn, await, and chain child agents as first-class Python calls. Adds a persistent IPython kernel with tools.* bindings and context-as-variable.

Electronic wooden fish in the bottom-right corner of the DSH web UI, a whale-girl sprite by default: tap the head to earn merit; it knocks by itself while the model is busy; per-session merit is stored locally, and the sprite can be swapped for custom art.

DSH 社区插件市场：设置内「插件市场」入口 + 卡片弹窗 + 一键安装/卸载/管理（bundle 走 dsh plugin add，pack 走 zip 落盘）

Open plugin marketplace: live GitHub dsh-plugin topic search with per-repo package.json verification (dsh.bundle/dsh.client manifest badges and a verified-only filter), npm-first installs with same-source anti-squatting checks, update detection, and five agent tools for headless use.

Plugin trust pipeline for DeepSeek Harness: deterministic static scan with verdicts, opt-in runtime guard with honeypot lures, agent audit-protocol skill, and a browser shield status light. Alarm-only, never an enforcer.

Specialized in Git branch and status handling: a Git status drawer on the right edge of the DSH web UI with a commit DAG lane graph, uncommitted changes and stash rows, inline diffs, right-click branch/tag actions, and one-click fetch from all remotes.

Give agents access to files on the machine where the browser runs: user authorizes a local directory via File System Access, tool calls relay over the plugin's own WebSocket; read-only compat mode for mobile/insecure contexts.