Plugins

TongFlow film-crew studio for image, voice, music and video production: the agent writes per-asset TongFlow workflow files (.tongflow.json) that run through TongFlow plugins, with an embedded workflow canvas, a shot/character/take project layout and a manga-drama template; sessions starting with @tongflow open the Studio view.

Red-team engagement mode: send one target organization name; a planner session runs five execution roles (recon, asset triage, vulnerability discovery, exploitation, internal pivot) with configurable concurrency; preflight checks skills/resources; scoring uses four stages (recon, internet, boundary, internal) with server-side caps and privilege-wins dedup; findings stay in a local SQLite fact base. The persistent right-side console has nine pages and includes asset mapping, agents, sessions/tunnels, findings, score targets, reports, POC knowledge base and skill library. v0.15.2 adds automatic HTTP evidence/action records, batch ingest, scope check, tunnel pivot probe, data proof, cleanup ledger and T0-T3 asset admission to prevent scope drift. 59 redteam_* tools; 38 bundled skills.

A-share multi-agent analysis behind /trading-agent, ported from TradingAgents-AShare, running 14 roles (analysts, bull/bear debate, risk review, trader) through the harness LLM route.

A ZCode-styled skin for DSH Web: Zai light/dark themes, sidebar workspace session tree, global search, turn navigation with hover wave, and approval-card / message-keycap styling aligned to ZCode — every visual value guarded by contract assertions. A fork of MichengAI/dsh-codex-ui; do not install it alongside the upstream plugin — both repaint the same sidebar and conversation surfaces.

Windows-only local encrypted credential vault (DPAPI-wrapped AES-256-GCM) plus a headless-Chrome login keeper: 31 agent tools log a site in once, keep the session on disk, and fetch login-walled pages (Tieba, NGA, Pixiv, one book site) with per-floor post extraction. The live page mirrors into a draggable, collapsible right-edge dock where clicks, typing and scrolling replay over CDP, so a captcha can be solved without a separate browser window. Edge/Chrome saved passwords can be migrated: the plugin reads the browser's Login Data store, decrypts v10/v11 entries in-process, and copies the store and its key blobs into its own controlled profile so the browser can autofill them (v20 app-bound entries can only be autofilled, not decrypted offline). Ships a one-command installer that repairs the DSH profile registration and a built-in self-test.

Writing bridge to the open-source QingAgent client: the agent drafts and revises documents through qing_ prefixed host tools, typeset on a rice-paper panel with mermaid, drawio, tables and KaTeX; edits stage as reviewable diffs and land only on commit, and it requires the QingAgent desktop app on the same machine.

Suiji Word Book: a word book panel that shows one word per page with picture, phonetics, pronunciation, five phrases and an example sentence, plus fill-in-the-letters spelling practice and a 12-type word-recognition quiz. Word data is kept as plain files in a local directory, and an included skill lets an AI add cards from a word list. The “+Word” button (hidden until enabled in Settings) starts an AI session and by default switches it to danger-full-access; turn that off in Settings.

Connect one or more Feishu bot apps to the local DeepSeek Harness (DSH): each bot app is a channel with its own model, workspace, permissions and private-chat allowlist, and every chat under it gets its own DSH session. Derived from MichengAI/dsh-im-connect (Apache-2.0) with the other IM channels removed and identifiers renamed so both can be installed side by side.

Adds two enhancements to DSH ask_user_question choice cards: right-clicking an option expands a per-option note that is merged into the submitted custom answer, and a footer field asks a side question answered by a fork subagent from the session context, read-only, with no write-back. Keeps left-click, skip, paging and the countdown working as before, and only claims generic choice cards, not plan review or approval cards. Supports DSH 0.2.x from 0.2.0-rc.1 (verified on 0.2.2-rc.1) and Node.js 20+. Derived from buaaflyaway/dsh-question-note (MIT) and inspired by MichengAI/dsh-btw (Apache-2.0); do not install it together with dsh-question-note — both take over the same ask_user_question card.

Bundled Pixiv skill backed by a Python CLI: search illustrations, manga and novels, browse daily/weekly/monthly/rookie/original/AI/R-18 rankings, look up works, novel series and artists, and download originals, with multi-page works merged into PDF, ugoira converted to GIF and novel series merged into TXT; requires Python 3.9+ with requests, img2pdf and Pillow installed (pip install -r requirements.txt), and R-18 content needs your own Pixiv cookie.

Ships the Codex UI 1.1.49 sidebar inside the plugin itself, so no upstream release can change the interface, and adds a real delete to the session menu: it provides the remote.workspaceRegistry.deleteSession service, unhides the per-session ... button, and permanently removes the session log, workspace records and projection cache, with subagent and forked conversations selectable in a family-tree dialog. Bundles the Codex UI 1.1.49 sidebar from MichengAI/dsh-codex-ui (Apache-2.0) — do not install both; the delete engine is adapted from Lzcdebear/better-dsh-session-deletetool (MIT).

A transparent always-on-top desktop pet for DSH on Linux (X11 / XWayland), driven by the session state. The pet lives outside the browser as its own window, follows the pointer with a distance and per-display limit, shows a live session-status bubble that lists each session task and state, and auto-starts with your session. Linux only (X11/XWayland); needs Python 3 with PyGObject, GTK3, GdkPixbuf and xdotool. Its sprite sheets come from @michengai/dsh-codex-pet (MichengAI/dsh-codex-pet in this list).

Union IM bridge for DSH — an independent implementation uniting the capability sets of community peer plugins (xmanrui/dsh-im, MichengAI/dsh-im-connect). Drive your agent session from 15 channel adapters across 12 platforms (including email; WeCom/DingTalk/QQ each contribute two: bot + self-built app or notify tier) — WeChat (official iLink QR bind), Feishu/Lark (long-connection + streaming cards; the voice tier requires system ffmpeg), Telegram, Discord, WeCom intelligent bot & self-built app (signed callback), DingTalk (stream + AI Card and custom-robot notify), QQ official bot (plus notify tier), Slack (Socket Mode), WhatsApp (Baileys QR pairing; the dependency ships as an optionalDependency of the plugin package), Matrix, iMessage (macOS only), Email (IMAP/SMTP thread routing). The cross-version narrow waist auto-adapts settings gen1/gen2/gen3 across hosts 0.1.2-rc.1→0.2.1-rc.2 (12-tag enum; rc.2 verified by a real desktop-profile install with double read-back) using capability probing only, never version branches. In chat: a 25-command panel, tool-approval and question loops answered in the originating chat (deny-by-default, initiator-only, 5-min expiry), image/file input gated on host model metadata, deliverable file return, a delivery log with bounded retry (uncertain is never re-sent), proactive delivery and fragment composition. It also splits the native sidebar into self-owned Tasks / Channels tabs (standing down entirely when another plugin already owns the slot), registers an `im-concise` agent preset plus reply sanitisation that keeps GenUI fences and raw HTML out of text-only chats, renders `svg` fences to PNG images, guards model choice with an allowlist, and mirrors each turn's final answer to notify channels via `/relay` (addressed by account ID or alias, never guessed on ambiguity). Secrets are one-way into the vault and never echoed back. npm: `dsh-im-union`.

Read Xiaohongshu recommendations, browse Baidu Tieba threads and nested replies, and quote posts when replying on NGA from DSH workspaces.

Measured /pua for DeepSeek Harness: every pressure message gets a receipt comparing the last N completed model steps with the next N — tool calls, verification-class steps, repeated-call peak, failed calls and text volume — with a three-way verdict (changed approach / merely restated / no change) and a daily ranking of which sentence moved the work. Ships a conversation-view panel, a /pua command with list/status/receipts/rank/off, append-only local JSONL receipts (no tool arguments, content or session ids), 38 node:test tests and a zero-dependency build. Reports observed differences, not causality. Inspired by MichengAI/dsh-pua (independent code); it registers the same /pua command, so it cannot be installed alongside dsh-pua.

Five-tier reasoning protocol injected into the system prompt — off / light / standard / deep / multi-agent, 0 / 3 / 9 / 17 / 19 rules — with the tokens each tier adds per request shown beside it. Alongside it: a claim ledger that marks a load-bearing claim with no evidence or check as unsupported, read-only analyst briefs, JSON-declared custom tools that work in the same turn, one persistent PowerShell session, and re-injection of host context after a configurable message gap. Tier 0 injects nothing and mounts no tools. A derivative of husongan/dsh-deepseek-2027 (MIT); do not install both — each injects its own reasoning-protocol section into the system prompt.

A Madara pixel theme with dark crimson colors, Chinese pixel fonts, and a skippable Sharingan startup animation.

Extract short-video scripts and captions from Douyin, Bilibili, Kuaishou and YouTube, including titles, authors, hashtags and engagement data, through a bundled Python extractor.

Puts a working delete-session row back into the Codex UI sidebar by providing the remote.workspaceRegistry.deleteSession service that @michengai/dsh-codex-ui checks for, unhides the per-session ... button its stylesheet hides, and permanently removes the session log, workspace records and projection cache, with subagent and forked conversations selectable in a family-tree dialog. Delete engine adapted from Lzcdebear/better-dsh-session-deletetool (MIT); both can be installed together (distinct route prefix).

Fork of @michengai/dsh-pua that removes the upstream global kill-switch so the composer entry is always visible while the feature stays off by default and can be toggled per session; the entry is a dropdown (Turn on / Turn off / Options) with a more compact options panel.

归档会话增强版（fork 自 @michengai/dsh-archive-manager v0.1.40）：收藏与一键删除未收藏、置顶会话、按对话轮次排序、复制会话 ID 与转录文件路径、归档界面排版重整。

Plugin Cordis para o DeepSeek Harness v0.1: interceta a camada HTTP (auth barrier sobre o fallback da Web UI) e orquestra subprocessos de longa duracao com ciclo de vida reversivel.