Plugins

Adds an independent settings page to update npm-stable dshmarket through the DSH plugin manager, with version verification and best-effort recovery on installation failure.

Categorize the plugins installed in a DSH profile into groups (skins, MCP, tools, ...), with per-category batch enable/disable, drag reordering, and automatic skin detection.

Ranks the top 400 DSH plugin candidates by live npm download counts and shows the top 200, with daily, weekly and monthly boards.

Enable permessage-deflate on DSH's WebSocket transport without modifying the DSH install tree.

A separate narrow-screen web surface for DeepSeek Harness rather than the desktop GUI scaled down: it serves its own session list and chat stream behind a random access token over LAN, a tunnel (cloudflared, localtunnel or localhost.run) or an SSH reverse forward through a server you own. On the phone it streams assistant text, thinking, tool calls and results, sends prompts, stops the running turn, answers blocking questions and tool approvals (including ones waiting in other sessions), switches model, thinking level and permission preset, sends up to four photos compressed on the device, and keeps the computer awake.

Adds a toggle to the DSH UI that opens the current session to a phone browser through an embedded loopback reverse proxy and a Cloudflare quick tunnel, and pushes each new tunnel address to WeChat.

Approve tool calls, watch streaming output and answer questions from a phone over a zero-knowledge relay, with payload-level end-to-end encryption.

Telegram remote for DeepSeek Harness — attach a live web session from your phone and answer its questions there, with a Russian UI. Russian fork of hi-wenw/dsh-telegram-channel (MIT).

Blocks API keys pasted into the composer or written by tools, logs leak events, and scans the workspace for exposed secrets.

Counts persistent operations within a turn and escalates on the total: a reminder first, then an explicit stop instruction, then an approval prompt. Reads the session sandbox mode on every call, and stays silent under read-only and workspace-write.

Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an HTML report with GB/T 22239-2019 control mapping. Needs Java 8+ and a DmJdbcDriver jar you provide yourself.

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Source-install updater for DeepSeek Harness: checks the official GitHub release and the npm record, builds the target tag in an isolated directory, smoke-starts it, then switches through a supervisor process with rollback, with scheduled checks and a daily idle-only install window. Source install only (macOS/Linux); requires Node.js 22.19+, pnpm and Git.

Android development toolchain inside DeepSeek Harness: 23 android_* tools that find the SDK, create and manage AVDs, start and stop emulators, scaffold a Kotlin/Compose project, build and run it with Gradle, then install, launch, screenshot, tail logcat and drive the UI. A settings page holds the SDK, emulator, API-level, build and output parameters.

Automatic second-opinion review: a restricted child session re-reads the agent's recent work with read-only tools and delivers at most one evidence-backed note, or stays silent. Requires a model route in the config; the plugin stays disabled until one is set.

Agent-facing plugin installer that resolves DSH-compatible versions, handles ambiguous names, and verifies the loader entry after install.

Safe detached DSH restart: /restart and /dsh-restart slash commands with native candidate styling plus a dsh_restart agent tool; a detached worker restarts DSH after 3 seconds without freezing the session, and Windows/macOS use a native Node helper built on the official appExit service.

Panel entry for the official client-plugin hot reload that tells you what actually changed first: it diffs each row rev against the last seen state and reloads only the plugin bundles that changed, keeps whole-graph reloads behind an explicit confirmation (a bare call is refused and reports the affected row count), and reports replay counters so a silent no-op cannot hide.

Sentry for DeepSeek Harness: the tools of Sentry MCP server, a result card, and an issue panel with resolve, ignore and assign.

Self-healing plugin doctor: detects failed DeepSeek Harness plugin rows, disables them automatically after backing up the profile patch, and reports diagnostics via /doctor.

DeepSeek Harness plugin for rulemux: asks the local rulemux CLI for the rules rendered for this workspace (rulemux inject --agent dsh) and injects the output into the session at the first user turn, once per session. Nothing is written into the workspace for rules; skills are the only part that lands on disk.

Windows desktop notifications for DSH that speak the turn result by default: Windows TTS needs no download, and 13 VOICEVOX voice packs can be installed from the settings page. A completed alert waits until running subagents and background jobs finish; approval, question and error alerts fire immediately. Voice packs are downloaded from GitHub after a terms confirmation.

One-way Telegram notifications for DSH.

macOS 13+. Plays a macOS system sound when DeepSeek Harness needs a tool approval, an agent question, a macOS permission prompt, or an administrator password sheet, then repeats on a 0/25/20/15/10/5 second cadence until the request is resolved. Ships as a bundle with a switch and a config form in the Plugins page.