Plugins

Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted resources (RAM, S3, Redis, Slack, Gmail, Notion, Postgres) instead of the host disk, with per-mount read/write/exec modes, per-command sandbox routing (monty, pyodide, quickjs in process; docker, e2b, daytona remote), and installed CLIs (git, gh, slack, linear, ntn, gws, or one you register) as head words in the virtual terminal.

Local IMAP invoice download, OCR, archive, and Excel reimbursement summaries for DeepSeek Harness.

Read-only IMAP search and attachments, plus SMTP sending under DSH permissions, with separate reading and sending switches and a credential-backed settings page.

Local IMAP invoice download, OCR, archive, and Excel summary bundle for DeepSeek Harness

IMAP/SMTP email tools (list/read/search/send/folders/attachment/health/watch/mark/reply) with since/until date-range filters, email_mark for read/unread/star/move, email_reply for reply/reply-all/forward with threading headers, QQ/163/126/Sina/Aliyun/Gmail/Outlook/iCloud presets, multi-account support, a send-approval gate, a web settings page and a whale-girl new-mail popup driven by the incremental email_watch checker. Outlook OAuth2 device-code login works out of the box through a built-in community client, and an account can still supply its own clientId instead. A step-by-step first-run guide (4 steps) now opens inside its settings panel.

Provides DeepSeek Harness agents with native identities based on the open Agent Network Protocol (ANP), plus identity-based direct, group, mail, and Agent-to-Agent communication.

PII masking for DeepSeek Harness — anonymizes names, phones, emails, ids, and keys before requests and restores them at the display layer, keeping plaintext out of session logs.

Agent teams: spawn named long-lived teammates, coordinate them with a shared task list, member mailbox, and virtual workspaces, and watch the team live in a team-room tab.

Office workspace & session dashboard: a floating 6-column sprite panel visualizing workspaces, sessions, token usage and subagents, plus Agent Mail and an office log tab. Feishu/Lark views (message feed, meeting schedules, transcripts) additionally require the `@larksuite/cli` tool installed and authenticated separately.

Pin Git commit authorship to the environment identity (gh account + noreply email).

Multi-platform message gateway and WeCom AI bot bridge with session context compression and smartsheet creation.

Runtime extension suite for DeepSeek Harness: cross-session mailbox with wake cold-start, agent teams (captain + members + dependency task board + team_wait), subagent spawn policy with escalation approval, task-aware routing preset, plugin market, skill manager and runtime injector.

Design workbench in the right sidebar. When the model builds web pages, app screens, posters, slides or emails, each HTML file shows up as a screen on a canvas inside a device frame and refreshes when the file changes; local dev servers are proxied with hot reload intact. Click an element or drag a region to put its selector, source file and styles into the composer. Also has a design tokens panel, versions saved before and after each turn with drag-to-compare and restore, image export, a LAN QR link for viewing on a phone, link arrows and a click-through demo mode, a multi-size view, in-place text editing, reference-image palettes, and a bundled ui-design skill plus a preview_page tool.

Orchestrates durable multi-agent teams from one DSH session: a captain spawns member subagents, drives a dependency-aware task DAG with quality gates, and coordinates through persistent mailboxes, with a live activity panel.

Douyin local-promotion OEM ad daily/weekly report automation (Author: Kirin): collects 3 data sources (laike leads, plan-level delivery, video analysis) via a one-time Edge login, computes metrics, builds A4-style docx reports, supports free-choice scheduled run times and email notifications.

Relay agent approval requests and questions to iMessage / Email / WeChat channels and resolve them by replying with the request number (#N 批准 / 拒绝 / 回答).

Replaces the sidebar account label — the phone number, email, username, or account name — and avatar with your own display name and image. A new "Edit display name" row in the account menu opens one dialog for both, so screenshots do not expose the original.

Verifies letters signed by other agents: a canonical field order, digest and HMAC checks, and fail-closed handling of missing or unregistered fields. Off by default; when enabled, a letter that fails any check is refused rather than delivered.

File-backed post office between DeepSeek Harness sessions: every letter is sealed with an HMAC and a body digest, recipients are resolved through a roster interface, and delivery is offline-first, so an undeliverable letter waits in the mailbox instead of being lost.

Daily sending quotas and quiet hours for agent mailboxes: letters are counted in named buckets that each carry a per-day limit, the day boundary is configurable, and a quiet window tells the core to hold online letters rather than deliver them.

核心：信封／签名／握手／幂等／落盘 · Core: envelope, signing, handshake, idempotence, on-disk store

Zero-credential Outlook automation: 13 tools that drive the local desktop Outlook client via COM — search/read mail, drafts, reply/forward, calendar, address book, rooms, free/busy — plus a sidebar new-mail badge. No Graph API registration, no SMTP passwords; anything that leaves the machine passes a three-layer human approval gate.

Multi-channel notifications for DeepSeek Harness: registers a send_notification tool and a settings page fanning out to NotifyX, WeCom app webhook, WeCom group robot, email (Resend), SMTP, DingTalk, Feishu robot; plus browser notifications and automatic notification on task completion and blocking events.

Gives an agent its own email inbox through AgentMail — eleven tools for sending, reading and labelling mail, plus inbound mail delivered into one harness session per email thread, with an approval gate and recipient allowlist on everything outbound.