Plugins

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

Adds file-backed Chinese web-fiction planning, chapter writing, consistency review, rollback, and style-profile skills.

Self-contained personal portfolio and investment-research workspace for DSH with local registration, asset import and allocation views, market and news tracking, a research library, and optional user-configured AI briefs; ships a Windows runtime and stores data locally.

Conversation outline panel for the DSH web surface: user questions as root nodes (index, time, tool count and text volume per turn) with the Markdown headings of assistant replies hanging beneath them, plus level slider, search scope, bookmarks, copy and export as Markdown, section jump, keyboard navigation, a right-edge density rail and per-session reading-position memory. Read-only UI: it never touches prompts, tool results or provider traffic, and writes nothing outside its own localStorage keys.

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

A native reasoning-effort control for the composer: a blue-to-violet tier bar with a starfield and a sheen sweep. It owns the model seat and drives the official model-directories service, so the ladder comes from each model's own reasoning declaration and no other plugin is required.

A dsh-better-sidebar tab that statically parses Qoder Canvas `*.canvas.tsx` files into structured pages in the DSH right sidebar (the source is never executed: no eval, no bundler, no sandbox iframe), with a file-viewer takeover for `.tsx` and a bundled Skill for authoring the format.

Merges other sessions' context into the current turn: evidence-weighted conflict resolution, retraction of claims whose premises were retracted, trust labelling that resists cross-session prompt injection, and budget-bounded packing. Ships a benchmark.

Desktop companion pet in its own always-on-top window: imports Codex pet folders from ~/.codex/pets as-is, with affinity ranks, session-linked activity bubbles, snap-to-edge dragging, a right-click-reachable smart click-through mode and a daily token meter that mirrors the dsh-usage ledger when installed.

WeChat Official Account channel for DSH — WeChat messages run agent turns and the answers are pushed back through the customer-service message API, with signature-checked callbacks and an openid allowlist.

Forwards an unattended DeepSeek Harness run's tool-call approvals and ask_user_question prompts to Feishu cards on your phone. The desktop GUI answers first — a card is only sent after `delaySeconds` (120 by default) with no answer there — and a phone approval grants `allowed-once`, so no authority accumulates on the phone. One outbound WebSocket long connection to Feishu: no public IP, domain, tunnel or relay.

Mind-map project planning with blocking drift protection: plans, modules and tasks as a dependency DAG with topological execution order, an agent position marker, a human approval gate on every board edit, git cross-checks, and evidence-gated task completion.

Runs a thesis-antithesis-seal debate whose verdict is computed from real command exit codes and case counts, never from agent prose.

Ships a skill about writing DSH skills - SKILL.md frontmatter and root precedence, how to phrase a description so it actually triggers, length and splitting rules, and an A/B check that the finished skill changes agent behaviour. The package also carries the checker the skill uses to validate a skill directory.

Per-reply read-aloud with a multi-provider settings page — MiniMax or any OpenAI-compatible /audio/speech endpoint, with voice, emotion, speed and model selection plus an auto-read toggle.

Plays a voice line or a sound when a turn finishes and a failure cue when a tool call or a turn errors — user aborts stay silent by default and subagent sessions are skipped, both configurable. Three alert modes: voice, effects, or off. Effects is the default and ships 20 built-in sounds (10 alert chimes + 10 nature), each assignable to the done, fail or approval event with per-row preview, so it needs no API key and no audio files; the voice route uses Volcengine TTS with cloned or preset voices, batch-imported voice IDs and fingerprint reuse that skips re-synthesis when text, voice and parameters are unchanged. A third approval slot exists but has no automatic trigger — it only plays when called manually. Playback goes through winmm/waveOut as-is, never changing the system volume or mute state, and the player is spawned detached so session teardown cannot silence it. Windows only.

SearXNG search and Scrapling multi-tier fetch provider bundle for DeepSeek Harness ctx.web with SSRF protection and markdown conversion.

Per-project memory for DeepSeek Harness. Three Markdown files per workspace — PROJECT.md, DECISIONS.md and SESSIONS.md — are auto-created on the first step of any session in that workspace, re-read from disk and re-injected only when they change (and re-injected if compaction dropped them), and written back by classification through a memory_checkpoint tool, with a bounded end-of-turn nudge when a turn did work but recorded nothing. memory_read and memory_search read the live log and the archive, the latter over a zero-dependency BM25 index. The session log is capped at 200 entries with the overflow moved to SESSIONS-archive.md — never injected, but visible, readable and searchable, and restorable one entry at a time. Settings page: a workspace list with a path filter, read-only tabs for the three memory files plus the archive, reload, export/import of one workspace's memory as a JSON bundle, a two-step clear, a panel that rewrites or removes the AGENTS.md instruction block, and a PROJECT.md staleness reminder. A composer status chip shows that workspace's sync state and creates the files on click. Zero dependencies — no vector store, no embeddings, and no model calls.

Feeds every dsh prompt into the local agent-feedback-loop feedback-memory pipeline — captures dissatisfaction, reviews it offline into reflections, and attaches the compiled recurrence-rule context back to the turn, never blocking a prompt. Requires the agent-feedback-loop runtime; running agent-feedback-loop install afterwards wires existing dsh profiles automatically.

Layered cross-session memory for DSH that pushes only what changed - the first round injects every active entry, later rounds push only added / updated / removed ones, and nothing at all is injected when nothing changed, with keys that merely repeat an entry id left out of the text so the baseline is about 26% smaller. Facts and decisions carry semantic keys (one active truth per key), the model may only write to an inbox that a human promotes, an entry can carry a review date that raises a one-time reminder when due, and search is relevance-ranked with journal lines down-weighted and Chinese matched by bigram. A sidebar tab tells the lifecycle story instead of listing files - entries are grouped by stage (awaiting confirmation / in use / archived) along four axes (topic - one level, human-assigned, type, tag, date), each group can be ticked for batch promote / withdraw / archive / restore / delete / assign topic, and topics can be renamed store-wide or searched on their own. The archived stage reads in three levels - the category says why an entry left (distilled into the docs / useless for good / not needed right now, the first two being defaults you can add to), below it the entry topic stays collapsed until you click it, and entries with no topic sit right under the category. The tab also shows the global and workspace instruction files plus the current injection size. A zero-dependency CLI ships with it, so the store is usable without DSH.

One-click brand replacement for the DSH web GUI — logo, product name, version badge, hero headline, tab title and favicon.

Edit system-prompt sections with live preview.

A file-view enhancement plugin that extends the official DSH sidebar, providing source view, in-place editing, line number display, search, and font zoom.

Kinich and Ajaw theme for DeepSeek Harness Web with three visual styles, session-state feedback, companion interactions, and configurable ambient effects.