Plugins

A Bilibili companion that keeps its own schedule. A 60-second tick in the plugin host wakes a dedicated agent session at a random moment inside the configured time windows (opting out of a day is a configurable chance), then hands it a bundled CLI of 38 subcommands — feed, subtitles, danmaku, comments, ffmpeg frame grabs, and two diaries. Shares at most N items a day by commenting on them and @-mentioning the owner (default 3, enforced from a written quota log, and it stops on rate-limit or captcha signals). Also polls comment replies, direct messages and live-room danmaku; replies to anyone but the owner are queued for approval in Settings. Settings → 养鱼 writes ~/.dsh/bili-whale.config.json; cookies live separately in ~/.bili-ai/credentials.json and are never echoed back. The HTTP routes are loopback-only behind DSH's trust fence. Needs Node 18+ and ffmpeg on PATH for frame extraction.

Cyberpunk 2077 / Night City theme: NC yellow and neon cyan identity, CRT scanlines, Kiroshi hover lock-on, combat-state HUD, synthesized typewriter and message SFX, and hidden easter eggs (relic / johnny).

Access the dsh web UI over LAN: HTTP/HTTPS/WS forwarding plus TLS (self-signed or custom certificates); adaptive Brotli/gzip compression for HTTP and permessage-deflate for WebSocket; half-open WebSocket probing keeps mobile clients from going stale after backgrounding; launch-token auto-injection lets LAN devices connect without copying the token; DNS-rebinding protection + loopback-only upstream allowlist.

Analyze usage across models, providers, workspaces, and time ranges — including custom start/end dates over the full retained history — with live cache-hit visibility and separate model and provider breakdowns. Includes hourly single-day trends, daily cross-day trends, a 53-week GitHub-style heatmap, usage streaks, model and workspace Token-share donut charts with Token, cost, and percentage details, independent combinable filters, cache-efficiency trends, DeepSeek account balance, workspace aliases, CSV export, and a durable ledger that preserves successfully flushed usage after session deletion — and after a workspace is deleted, where its recorded usage is summed into one Deleted row — and rebuilds incrementally — on restart, unchanged sessions are applied from the ledger without re-reading their logs (a per-session log revision is the change signal), and only changed/new events are folded. The workspace registry is kept fresh automatically through the DSH domain/changed probe: only added/removed workspaces are reprocessed incrementally, unchanged workspaces reuse their computed aggregates and ledger with zero rescan, and usage is strictly limited to DSH-registered workspaces (unregistered cwds are ignored). After a scan, lightweight revision status fetches full history only when the Host/data state changes and exposes non-sensitive sync health (revision reuse, rereads, ledger recovery, and failures). Token accounting is explicit: input is fresh (cache read/write and reasoning are separate buckets) and zero-usage replays never overwrite recorded usage. Chinese uses local time, English uses UTC; API access is loopback-only.

Private Tailscale access for DeepSeek Harness Web that allowlists users from the trusted Tailscale-User-Login header that Serve injects, with a loopback-only gateway and guarded Serve setup.

SearXNG-backed web_search provider for the web seam: free, self-hosted, key-less metasearch through your own instance's JSON API, with a bundled loopback-only docker-compose example.

Proxies the loopback-only dsh web onto a LAN port so phones and other machines can reach it, with an optional access password that browsers type in and the bundled Android client unlocks with biometrics. Adds a LAN-access settings page with QR codes, inlines dsh-web-mobile (MIT, attribution kept) for the mobile layout, and the Android client in the same repository adds finish/approval notifications, voice input and a home-screen widget.

HTTPS + login gateway for the DeepSeek Harness web surface: access your DSH Web UI securely from another machine on your LAN, or from the internet via port forwarding. Fail-closed defaults (loopback-only, no accounts until configured); setup and security notes in the README.

Plan-usage pet for the DSH web GUI: a floating skeletal-animated character reports quota in a speech bubble, auto-matching the configured provider (OpenCode Go, Command Code, DeepSeek) to show a plan percentage or an account balance, and falling back to local token stats when the provider API is unavailable; draggable, wheel-scalable (90-260px), synthesized click sounds, loopback-only routes.

Delivery board for client-project teams: stage pipeline (default or governance template, or custom stages), cards with owner, due date, acceptance criteria and DoD, an automatic handoff audit log when a card changes stage, a progress/risk/blocker/decision log, a weekly Markdown client report, a loopback-only drag-and-drop board and a read-only HTML export; state lives in delivery.json in the workspace (11 delivery_* tools plus a /delivery command).

Fail-closed Feishu (Lark) channel bridge: chat with a bot, get dsh agent turns back — with opt-in human-in-the-loop tool approval (Allow/Deny cards before every bash call, fail-closed timeout). Official-Python-SDK-only integration (exact-pinned); deny-by-default allowlist, webhook signature/timestamp/replay verification, per-chat sticky sessions; daily latest-SDK compatibility canary; bilingual docs.

Arknights-flavoured startup animation for the DSH Web GUI: a PRTS terminal boot, sonar scan, hologram lock-on and an operator-file splash that end in a deep-sea lockup, about 4.6 seconds, with four selectable original score presets (or sound off), skippable with a click or Esc and switchable, re-timed or replayed from Settings.

Whole-disk file search tool backed by the local Everything (voidtools) index: millisecond path queries for the agent over a loopback-only HTTP fast channel with es.exe fallback, plus verified auto-install of the latest stable Everything + ES CLI backend (signature-checked, proxy-aware). Windows only.

DeepSeek Harness plugin: provider sign-in, model catalog, and selection routing over a loopback-only /model-hub channel

K-ON! themed tea-table widget: click it to see the DeepSeek balance, today's spend and peak-hour state; each finished turn pops a cost bubble; double-click shows zh/ja character lines.

Turns every file artifact the agent names in chat into a clickable entry — and refuses to paint one that does not resolve. Hover resolves asynchronously, and only a file that really exists becomes a hand pointer with a dashed blue outline (30 s TTL cache, so repeated hovers cost nothing); confirmed non-artifacts stay plain text and the right-click falls through to the host menu untouched. Left click reveals the file in Explorer already selected (Shell.Application Explore plus SelectItem with SVSI_ENSUREVISIBLE, so the pane scrolls to it; explorer.exe /select is deliberately not used because it silently drops the selection when an instance is already running). Right click offers seven actions: preview in DSH's built-in sidebar, open with the default app, reveal in Explorer, save as, copy the file itself to the clipboard, copy the absolute path, or insert the path into the composer. Ctrl or Shift with left click opens with the default app, Alt with left click copies the path. Names resolve through the absolute path, the session workspace and every profile workspace, then a cached basename index built with a depth budget, shrinking from the left when a mention swallows leading words. The host half also keeps six system-prompt rules resident, so absolute paths stay in tool arguments while the body shows only file names, and every route is loopback-only.

Open a Mac or Windows DeepSeek Harness Web instance from iPhone or iPad Safari: 8-digit pairing, a LAN gateway for loopback-only hosts, optional Tailscale Serve, and iOS-only Safari input and touch fixes. Installs with dsh plugin add.

Brings the free models of a locally installed OpenCode CLI into DSH: starts or reuses a local opencode serve, discovers the live catalog and refreshes it every five minutes, and bridges the session event stream to OpenAI-compatible SSE through a loopback-only shim that validates Host and Origin.

Alibaba Cloud / Qwen balance card above the Settings row in the DSH web sidebar: account available and cash balance, coupon balances with expiry dates (student vouchers included) read through the BSS OpenAPI, and OpenAI-compatible relay quota. An official DashScope sk- key has no balance endpoint at all, so real money and coupons require an Alibaba Cloud AccessKey with bss:DescribeCoupons + bss:DescribeAcccount (AliyunBSSReadOnlyAccess is enough); secrets stay in the host process, the browser only sees a masked AccessKey ID, and /api/dsh-qwen-balance/* is loopback-only.

Adds a restart button to the DSH Web UI through a loopback-only endpoint that requests a relaunch using the current process executable, arguments and working directory.

Password-optional LAN entry for the DSH Web GUI. DSH stays loopback-only while a settings-card plugin serves its HTTP and WebSocket traffic on port 3301, storing the password only as a scrypt verifier.

Live Android device pane next to your DSH conversation: scrcpy-server H.264 streaming (WebCodecs, 30-60 fps), agent tap/swipe/text with auto-screenshot verification, uiautomator element tree with tap coordinates, host-managed recording + logcat debug sessions. FLAG_SECURE pages are detected automatically with a mitigation chain and a tappable text-view fallback. Emulators and USB real phones, human+agent co-operation, session-isolated, loopback-only.

Exposes bounded Prometheus metrics for DSH sessions, agents, LLM calls, tools, approvals, subagents, and jobs, with a Grafana dashboard and a loopback-only endpoint by default.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.