Plugins

Drives the Edge already open on your machine through a local WebSocket bridge and an unpacked MV3 extension: the agent reads the page as Markdown, dumps its interactive elements with stable refs, clicks and types with pre-action assertions and a three-valued effect state, and can capture pages from the extension popup as self-contained HTML snapshots, filed into a kb.py literature knowledge base when one is configured (kbRoot or DSH_KB_ROOT). Seven browser tools stay unregistered until edge_bridge is started, so an idle session pays no context cost.

An upgrade assistant for DSH plugins. Checks which installed plugins have newer versions, then upgrades them in one click or on a schedule — taking a snapshot before every upgrade and rolling back automatically if the install fails, so a bad upgrade never breaks your environment. Also runs a health check: conflicts, undeclared compatibility, missing dependencies, ranked by review priority. Auto-update scope is configurable (patch / minor / major) with a per-package exclude list. Any operation can be reverted to a historical snapshot.

A-share assistant: 19 tools for quotes, K-line, screening, sentiment and backtests, plus a manual trade ledger, a sidebar panel, daily archive snapshots and risk-alert email. No broker connection or order placement.

Fast-execution runtime for dsh: context governance with 4 KB tool-result caps and field projection, zero-LLM fast-path templates with idempotency keys, PTC container scripts that keep intermediate results out of context, a three-tier sandbox with file/command/network rules, injection detection, secret redaction, snapshots with a recycle bin, and append-only audit logs; 10 runtime_kit_* slash commands, no business dependencies.

Minimizes or closes only the windows the agent opened during a task, using a baseline snapshot; pre-existing user windows and shell processes are left alone. Windows only.

On Windows (PowerShell 5.1), snapshots whitelisted registry keys, hosts, user environment variables, services, firewall rules and scheduled tasks, diffs changes, and restores only registry, hosts and user environment variables.

Elysia's memory plugin for dsh. One shared, human-editable MEMORY.md across every session: two-disk mirror, history snapshots, cross-process write lock; entries tier between the main file and a searchable archive by hit frequency; retrieval is keyword co-occurrence plus BM25. Nine sections (persona, requirements, corrections, lessons, methods, requests, sessions, method library, ingested docs) plus a dedicated self-identity section for a character's own self-cognition, injected above the persona. Ships an opt-in memory pack (packs/elysia: 61,903-char identity + 2,482-char persona, distilled from 1,696 officially-confirmed voice lines and checked against a 112,175-line game-dialogue corpus) that is off by default, backs up before writing, only touches identity/persona, and can be uninstalled. Also a skills library and a sticker library (you import your own images; none are bundled) that sends a fitting sticker at the right moment. On by default: a text bubble with her avatar after each reply, which costs one extra small model request unless the agent already announced (voice.bubble: false turns it off). Opt-in voice playback needs a local GPT-SoVITS engine (about 27 GB, installed separately, NVIDIA GPU required; the plugin downloads about 200 MB of weights) and is Windows-only; the automatic second-drive mirror is Windows-only too (elsewhere set mirrorPath, otherwise there is no mirror).

Ship OpenTelemetry GenAI observability and multi-device cloud state sync from one DSH bundle. It reuses and replaces the standalone @loongsuite/dsh-plugin (traces + metrics for sessions, agent loop, LLM and tool lifecycle; do not install both — disable or remove the upstream plugin first), and adds a WebSocket client that pushes full session event logs (header + snapshotEvents) to a relay you run so different local DSH instances share state. On connect it pulls and rebuilds the other devices' sessions automatically (cross-device resume). The sync client itself has zero third-party runtime dependencies; a small Node.js relay is included in the repo. The local /cloud-sync/* HTTP routes (status, sessions, config, resync, delete) have no origin or loopback check, and the bundled relay accepts unauthenticated connections unless AUTH_TOKEN is set — keep the DSH web port off untrusted networks and run the relay with a token.

Long-task continuity for DSH: every turn end writes a breakpoint (what it did, which tools it used, and — when the turn did not finish cleanly — what is still unfinished; the manual continuity_breakpoint tool can record the next step), injected as a snapshot when the same workspace starts a fresh session so work resumes instead of restarting. It also stores SHA-256 fingerprints of persona or config files so you can verify afterwards whether anything was altered. Four tools (continuity_breakpoint, continuity_breakpoints, continuity_ledger, continuity_attest), plain JSONL under <workspace>/.dsh-continuity/, zero dependencies, no network calls. Note: nothing writes ledger.jsonl yet — continuity_ledger only reads it.

A credit meter for XD Pool (WorkBuddy) accounts that shows each account's remaining credits and package breakdown, measures today/month/all-time consumption from balance snapshots, and warns about credits expiring within 3, 7 and 30 days. It reads its data from the XD Pool plugin (XDTrees/dsh-xdpool) and shows a data-source-unavailable state when that plugin is not installed.

Fetches AOSP source snapshots from codeload and searches them on the device with ripgrep through nine tools covering mirror listing, preset bundles, fetch, incremental update, cross-module regex search, a heuristic call-chain trace and line reads, with no git, no root and no build.

Wraps the separately installed agent-desktop CLI (`npm i -g agent-desktop`) as nine DSH tools (ad_status, ad_list_windows, ad_snapshot, ad_find, ad_click, ad_type, ad_press, ad_launch, ad_close_app) so an agent can list windows, read an accessibility tree, click a snapshot ref, type text, send keys, launch an app and close it gracefully. The plugin adds no automation logic of its own: it validates arguments, calls the CLI and returns the parsed JSON envelope, and asks the caller to take a fresh snapshot instead of retrying a stale ref, so a click never lands on a shifted target.

Elysia's memory plugin for dsh. One shared, human-editable MEMORY.md across every session: two-disk mirror, history snapshots, cross-process write lock; entries tier between the main file and a searchable archive by hit frequency; retrieval is keyword co-occurrence plus BM25. Nine sections (persona, requirements, corrections, lessons, methods, requests, sessions, method library, ingested docs) plus a dedicated self-identity section for a character's own self-cognition, injected above the persona. Ships an opt-in memory pack (packs/elysia: 61,903-char identity + 2,482-char persona, distilled from 1,696 officially-confirmed voice lines and 112,175 dialogue lines — not written by hand, measured) that is off by default, backs up before writing, only touches identity/persona, and can be uninstalled. Also opt-in voice playback through a local GPT-SoVITS engine, a skills library, and a sticker library that sends a fitting sticker at the right moment.

Agent-facing keyword search over local DSH session logs: session_search returns matching sessions with timestamps and excerpts, session_read dumps one conversation, and both skip injected context such as memory snapshots; no index is built.

Layered context management: at each turn end older tool output becomes a deterministic card, the model can fold older ranges into its own summaries in up to three tiers (compress), and every original is archived locally for decompress and search_context. Works alongside DSH-Mem0: superseded runtime-context snapshots (such as recalled memories) are never archived, carded or folded, and are replaced by a one-line placeholder at turn end when the prompt cache is already broken, when the saving outweighs the cache miss, or above 75% of the window; a strataBudget service (pressure, allowance, countTokens) and a strata/fold-landed event are provided for other context plugins; strata_status warns when DSH's automatic compaction is off or its official summary keeps failing. Its L1 layer, archive rotation, prune guard and preset takeover are forked from dsh-live-compact 1.0.6 (MIT); uninstall dsh-live-compact or billion-context first — they replace the same compaction rows and Strata will not take over while either is installed.

File-based task pool and dispatcher for DeepSeek Harness: keeps a P0-P3 backlog as Markdown, hands one task at a time to a background subagent, gates delivery by rerunning the project test command, and accepts the result against a git commit or a file snapshot; git and non-git directories both work.

Windows desktop control for DeepSeek Harness: accessibility-tree snapshots, click by control name, delivery verdicts, and repeatable task files.

One-person-company operations SOP for DeepSeek Harness: 8-field company profile, a daily cycle from morning brief through two execution shifts to an evening report, ledger and cash-snapshot conventions, quote/contract shapes, and six red lines with a human-approval outbox.

Runs Hindsight long-term memory on your own machine: after a one-time uvx --from hindsight-embed@latest hindsight-embed profile create server setup (~450 MB of Python dependencies) and with your own LLM key, the plugin manages the local memory server itself (health probe, start, stop, logs), registers ten hindsight_local_* tools for status, page search, page read, recall, remember and reflect, injects a knowledge-page index once per session, writes each finished turn back into the bank, and extracts facts with your own LLM key. Do not enable it alongside the official @vectorize-io/hindsight-coding-agents plugin: both read the same bank and would inject duplicate context. At session end it writes a handoff snapshot that the next session injects as previous progress. The data directory is configurable (dataDir) and scripts/relocate.mjs moves an existing install to another drive, creating directory junctions where the server hard-codes its paths.

Plugin steward for DeepSeek-Harness: checks every installed plugin for newer versions and installs them, snapshots the profile first and rolls back automatically when the post-update health check regresses. Also scans plugin code for risky behaviour before you install (eval, reverse shell, credential access), browses the 8.5k-plugin catalog with compatibility badges, restarts the host by itself after install/uninstall/disable, and shows everything in plain language.

Restores the Windows desktop after a restart or power loss: snapshots open apps, documents, folders and window positions, and reopens them on demand. Windows 10+ only; automatic capture before shutdown needs two scheduled tasks registered once with collector/install-tasks.ps1.

Read-only install doctor: capability snapshot, tarball assert and install diagnosis.

Sidebar node canvas for DSH where each node is an agent task and each link a dataflow dependency. One deterministic import (no model calls) produces both a task pipeline and a file-level module graph; file nodes carry a coupling score, and every run is snapshotted so it can be undone as a whole.

Injects a Chinese-thinking reminder around the system prompt and the per-step runtime snapshot, so the agent reasons in Simplified Chinese instead of drifting back to English as the transcript grows.