Plugins

Blocks an agent from reading, searching, writing, or editing chosen files and directories, keeping their contents out of the conversation — including sensitive-word files whose text can make later provider requests fail with a 400. Rules are picked from a file/directory browser on the plugin page.

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

Back up your DSH profile configuration to a private GitHub Gist on a schedule, with merged restore.

Render and iterate on Blender scenes from DSH: 16 tools for scene specs, previews, visual review and delivery renders, with immutable revisions and an approval gate.

Fronts stdio MCP servers with three router tools (list_capabilities, describe_tool, call_tool) so schemas load on demand instead of riding every request; shapes every tool result through a deterministic output ladder that archives the original first (retrieve_spill reads it back); prices tool groups in tokens and can hide built-in groups per agent. Bridges to a standard-library Python router, so Python 3.9+ is required.

Mounts the mcptoon MCP gateway as one stdio server, so the agent discovers the tools of every MCP server you have configured through mcptoon's compressed view instead of full JSON schemas on each turn. Ships a doctor CLI that checks the mcptoon executable resolves and prints the exact command/args override when it does not.

Panel to edit dsh's native AGENTS.md from the web settings page: every layer in the instruction chain is clickable, three activation scopes, and a visual budget meter.

Universal on-screen translator for DeepSeek Harness Web UI: translates text, attributes, Shadow DOM, and iframes across 45+ languages.

A dsh-better-sidebar tab that statically parses Qoder Canvas `*.canvas.tsx` files into structured pages in the DSH right sidebar (the source is never executed: no eval, no bundler, no sandbox iframe), with a file-viewer takeover for `.tsx` and a bundled Skill for authoring the format.

Simulated life context for DeepSeek Harness: every turn injects the past 24h of simulated life events from the workspace .life/ directory (sliding-window filter, session-level deduplication with delta updates, world summary) as a collapsed context notice, and the life_react tool lets the agent record feelings, thoughts and actions back into its life log for the next round of world evolution — turning a DSH agent into a roleplay character with a persistent daily life.

Compaction fallback for compaction-basic: when its LLM summary throws, comes back empty or cannot fit the window, the span is compiled deterministically with a seq pointer on every line (vendored dsh-compaction-instant compiler). Adds recall and search tools, /recall and /context commands, an idle trigger at 45% of the window and an on-disk span archive. The engine mounts as one row in the agent preset (docs/dsh-integration.md).

Top-right status plate for DeepSeek Harness. DSH 右上角状态提示板。

Long-term memory and self-evolving skills for the DeepSeek Harness · DeepSeek Harness 的长期记忆与自我演进能力 —— Plain Markdown on disk, no vector store

Lightweight zero-dependency memory plugin for DeepSeek Harness: Markdown-file memory store, L0 catalog injection, and 5 model-facing tools.

Discord-like communities in DSH with channels, roles and permissions, message search, and sharing or cloning of DSH sessions.

In-page task notifications with collapsible status toasts, sound, and session navigation.

Bridges Feishu, WeCom, DingTalk, QQ, Slack, Discord, Telegram and Mattermost into dsh agents (outbound WS/Stream/Gateway/long-poll/webhook), with im_status, optional local Whisper ASR, plain-text outbound for QQ/DingTalk/Telegram/Mattermost, and env CSV allowlists (DSH_IM_*_ALLOWED_USER_IDS). Empty allowedUserIds means EVERYONE can drive your agent — set a whitelist before exposing a bot.

BaziDIY ontology plugin: deterministic bazi/wuxing/bead/style rules as DSH tools (calculate_bazi, propose_designs, generate_design, save_design, load_design), plus bracelet SVG rendering and a bead editor; no LLM calls inside execute.

Prompt-polish template injector for DSH: click ✨ in the composer to inject a "polish my prompt" template (current draft auto-embedded), no send, no network, no model — the main agent rewrites with full context. Replaces narrative-prompt-polish (2026-09-14 migration).

Model-autonomous context compaction for DeepSeek Harness: a mind_map tool surveys the agent context surface (stable seq ids, roles, token weights, clear-boundary markers, the clear-mind playbook), a clear_mind tool replaces a chosen conversation-history span with a model-written checkpoint through the native compaction transaction, call and result pairs self-collapse into one-line tombstones, and a proactive reminder nudges the model when the context grows long or a turn runs too many steps.

Model-callable compact_agents tool that force-compacts context in every live session (main session, ordinary sub-agents and AgentTeams members alike), queues busy targets and compacts them when the turn ends, reports the shadowed node count and estimated tokens per target, and ships a browser form for the trigger ratio, retained ratio, controlled-phase output budget, auto-continue budget and an end-of-turn pre-compaction ratio that compacts near the trigger line once a turn ends, so a reply no longer opens with a wait for the summarizer.

One settings page that lists every subscription sign-in the harness can offer and walks you through it — ChatGPT (Codex), Claude, GitHub Copilot, OpenRouter, Kimi and xAI — reading the list from the authorization seam instead of hardcoding providers, and showing credential records no registered flow claims any more.

Pool AI provider accounts per platform and route them through a local loopback proxy that bridges the OpenAI, OpenAI-Responses, Anthropic and Gemini protocols, then write the proxy into Codex, Claude Code, Gemini CLI, Grok, OpenCode, OpenClaw and Hermes config files with snapshot-and-rollback safe writes; registers no agent tools.

Publishes a lesson into the DSH conversation: the dependency spine, the question and the vault's drawings, drawn in the vault's own palette.