Plugins

Failure-recovery memory: search and record failure-recovery lessons from real engineering sessions, with BM25 + semantic RAG retrieval and a lessons knowledge base.

Integrates TypeSafe Jev for skill and file selection, task supervision, shared-finding corrections, tool-output filtering, approval assistance, and recorded-stage navigation in DeepSeek Harness; all features are disabled by default.

Red-team engagement mode: send one target organization name and a planner session runs a five-role execution team (recon, asset triage, vulnerability discovery, exploitation, internal pivot) under a user-configurable concurrency limit (three by default, changed from the console and taking effect immediately), preflight-checking skills and resources and asking once for any missing key or VPS first, guided by a built-in first-run onboarding skill; scoring follows the merged intrusion scoring rules (8 categories / 25 points) with server-side caps, highest-privilege-wins and per-service dedup, and self-registered accounts never score — a login that fits no more specific category is scored as controlling a web application system rather than dropped; findings land in a local SQLite fact base with discovery timestamps, shown in a persistent right-side console of 9 tabs (asset mapping with a discovery timeline and the live test view, the agent roster with its concurrency setting and editable role prompts, session/tunnel state, findings — vulnerabilities, credentials and access sessions plus the attack files archived against each vulnerability — five-stage attack chain, scoring targets, an evidence-screenshot capability (register a screenshot per score point, at most three representative shots per point so a bulk result such as dozens of endpoints does not flood the console or the report, viewed inline in the console and embedded in the report, with on-site screenshots kept strictly apart from record-generated evidence cards), and a report that spells out how each score was obtained (actions, exact commands, credential provenance, tunnel build commands, a reproduction entry that is either a paste-ready HTTP request or a runnable command, plus success criteria and an evidence index), a category-organised POC/EXP knowledge base, and a skill library that reports for every unusable skill why it is unusable and the concrete steps to repair it); ships 14 reconnaissance/assessment skills (the npm package deliberately carries no tool auto-installer and no attack-chain skills — those ship as a separate toolkit Release attachment that the operator fetches and runs themselves), 56 redteam_* tools and one-command self-update.

Evidence-first attention supervision for DeepSeek Harness with C0–C3 policy, deduplicated Inbox alerts, quiet hours, and redacted outcome records.

Local meeting transcription with microphone and system audio recording, speaker labels, and transcript export for DeepSeek Harness on Apple Silicon macOS.

Recoverable file and Git operations for coding agents, with shared recovery and redaction tools, a DSH shell adapter and audit records; optional native text-read protection is off by default.

Project memory for dsh with native task-system integration: session todos and file reads auto-condense into cross-session task records (task↔file links), so workflows are switchable and resumable without re-contextualizing. Read-time memory (no upfront scan): extracts code symbols, summarizes docs, and cross-links docs↔symbols; optional TS semantic enhancement (auto on when TS installed). Experience notes auto-dedup. Every recall includes a traceable citation. Pure JS, single dep, works out of the box, silent operation, zero overhead.

DSH sidebar file-activity tab: records file reads/creates/modifies by the agent and the sidebar (including file ops hidden inside bash commands), per-session isolation, survives restarts, click a file for a floating preview (npm: `dsh-file-activity`).

Analyze usage across models, providers, workspaces, and time ranges — including custom start/end dates over the full retained history — with live cache-hit visibility and separate model and provider breakdowns. Includes hourly single-day trends, daily cross-day trends, a 53-week GitHub-style heatmap, usage streaks, model and workspace Token-share donut charts with Token, cost, and percentage details, independent combinable filters, cache-efficiency trends, DeepSeek account balance, workspace aliases, CSV export, and a durable ledger that preserves successfully flushed usage after session deletion — and after a workspace is deleted, where its recorded usage is summed into one Deleted row — and rebuilds incrementally — on restart, unchanged sessions are applied from the ledger without re-reading their logs (a per-session log revision is the change signal), and only changed/new events are folded. The workspace registry is kept fresh automatically through the DSH domain/changed probe: only added/removed workspaces are reprocessed incrementally, unchanged workspaces reuse their computed aggregates and ledger with zero rescan, and usage is strictly limited to DSH-registered workspaces (unregistered cwds are ignored). After a scan, lightweight revision status fetches full history only when the Host/data state changes and exposes non-sensitive sync health (revision reuse, rereads, ledger recovery, and failures). Token accounting is explicit: input is fresh (cache read/write and reasoning are separate buckets) and zero-usage replays never overwrite recorded usage. Chinese uses local time, English uses UTC; API access is loopback-only.

Runs isolated install-and-smoke test drives for DSH plugins in throwaway profiles, returning structured pass/fail records and batch matrices without touching your real profile.

Records every agent write, edit and shell `rm` into a shadow git repository, then reviews them hunk by hunk in VS Code — accept or revert each one. Needs the companion dsh-review-vscode extension; the panel only appears inside VS Code's webview.

Connects DeepSeek Harness to Busabase: search workspace knowledge, work with structured records and apps, submit writes as reviewable ChangeRequests, and inspect results in live cards.

Manage conversation records from the DSH web GUI settings page: delete a whole session (archive plus physical log removal) or a single message (deleting a user message cascades to its assistant replies and tool results). Running and current sessions are protected.

Windows workspace pre-authorization: adds an explicit full-control DACL ACE (including WRITE_OWNER, required by dsh >=0.1.7 sandbox startup) to user-declared workspace directories, removing the repeated full-access escalation prompt. Grants only on explicit intent — new workspace records or paths added in the plugin settings page; system directories are hard-blocked. Windows only.

Adds local PDF reading, a durable paper library, traceable evidence records, and cross-paper comparison and synthesis tools.

Technical-preview local graph memory for DSH and Codex: recalls owner-global and current-project evidence before each turn, writes USER and ASSISTANT records separately, and preserves project, session, actor, and source provenance for a visual atlas and cited knowledge pages.

Technical-preview local graph memory for DSH and Codex: recalls owner-global and current-project evidence before each turn, writes USER and ASSISTANT records separately, and preserves project, session, actor, and source provenance for a visual atlas and cited knowledge pages.

DeepSeek Harness record macOS desktop workflows by demonstration and turn them into agent skills (open-record-replay skill + orr_* tools)

DSH Desktop enhancement plugin: it puts verifiable facts on the table. Constraints are injected only when relevant, so idle chat costs no extra tokens; injection is layered (session-stable text in the system prompt, volatile content as a tail snapshot) and the prompt cache stays valid. Discipline: each turn is classified (question / research / discussion / diagnosis / execution) with boundaries enforced - no file edits on question turns, no unsolicited fixes on diagnosis turns; citing code lines not opened this session, negative claims about unseen symbols, requirements that do not match the deliverable, and dressing up “I did not check” as “waiting for your decision” are all called out; replies are written for humans - a code, field name or id must be explained in plain words the first time it appears. Memory and knowledge: 75%/90% context warnings plus an exported session recap (say "continue" in a new session); project knowledge accumulated across sessions by working directory, auto-captured and deletable by id. Inspectable artifacts: task contract / change record (auto-logged, unverified items flagged at delivery) / hypothesis record (conclusions must pass an evidence gate) / design decisions. Dashboard and personas: routing, trigger hits and block assembly are written to lume-metrics.jsonl and queryable via lume_metrics; personas are distilled from chat logs, novels, scripts or character sheets, with long-term and temporary memory, a memory star map and persona card export/import.

Codex-style review of session file changes: per-turn cards (optionally taking over the shell edited cards) whose totals are the turn net diff, a review tab with syntax-highlighted diffs that never wrap, real line numbers, open-at-line and a draggable split, a hover preview of the whole file with three lines of context around each change, one-click per-turn revert, and the on-disk record size with a clear button in the review toolbar. Records are sharded per session, with content-addressed snapshot blobs that dedupe and are garbage collected. Light/dark presets follow the DSH theme, typography follows DSH and installed skins (or any font on the machine, with a px stepper), and a settings switch injects a think-in-Simplified-Chinese rule into the global AGENTS.md.

Fully customizable keyboard shortcuts for the Web UI: 34 pre-registered features (sessions, views, clipboard, models, silent permission cycling, settings), one-click recording to bind your own, and a shortcut cheatsheet with built-in diagnostics.

DSH Session Manager: manage conversations, archive/restore, delete safely, open record folders.

Audible feedback for the DSH web interface: button presses are classified by semantics (normal, primary, toggle, send, close, danger, link) and the current session's task transitions (started, finished, failed) plus any pending interaction play a cue, each scenario with its own cue picker and switch on a settings page. All 78 cues and 12 sound packs are synthesised in the browser with the Web Audio API, so the package ships no audio files and makes no network request. A community port of dsh-plugin-uisfx to DSH 0.2.0, with the ported changes recorded in PROVENANCE.md.

Captures the agent's own self-reported mistakes into a categorised lesson library that is re-injected into the system prompt every turn (each captured draft is confirmed or edited by the user before it is recorded), and adds two conversation-header panels for editing the cross-conversation global prompt and a per-session prompt.