Plugins

Two-way agent bridge between two DeepSeek Harness hosts: either side can ask the other agent questions and run bounded dialogues over a PSK-authenticated TCP link, with a chat page on both sides and read-only tool posture by default. Both ends need the same shared key and a nodeId configured.

Synchronize DSH sessions, settings, attachments and project files using a user-configured private HTTPS Git repository or SFTP, with safe-scope online application, offline restore plans and user-confirmed plugin updates. Requires Node.js 24+; the SFTP path also requires OpenSSH (ssh/sftp).

Reach DSH from your phone with a single plugin — requires Tailscale on both the host and the phone. No other configuration needed.

Web GUI enhancement bundle: a standalone password gateway with optional HTTPS for LAN and remote access, PWA install and icons, and desktop plus Web Push notifications, configured from a settings page.

Compaction integrity: directive lines (never/must/必须 style markers) extracted from the compacted range are verified against the summary — verbatim or by content-word coverage — and every constraint the session silently forgot is reported and written to a JSONL ledger; pinned constraints from config are checked on every compaction.

Windows only; the upgrade path needs DSH_AUTO_UPDATE_LAUNCH_CMD configured. Checks, installs and rolls back DeepSeek Harness CLI updates from the web settings page, switching the launcher pointer only after the new version passes a config-tree check and a health-checked restart, and reverting automatically when it does not boot.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Windows-only DSH sidebar preview and Dart hot reload for configured Starcompanion / Operit2-derived projects; requires the project preview scripts, a prebuilt debug APK, Android SDK, Flutter and scrcpy 3.3.3.

Mirrors assistant streaming frames (deltas, blocks, commits, turn fences) to a configurable NDJSON sink for external consumers.

Configuration vault for DeepSeek Harness: snapshot, diff and safely roll back profile patches, plugin manifests, skills and workspace lists, with credentials excluded by default.

Turn-end quality gate: when the turn edited code or config it walks each file up to its project root, runs that root one check from a fixed whitelist (`pnpm check`, `cargo check`, `ruff check .`, `tsc --noEmit`) and, only if that check really ran and failed, opens a new turn carrying the failure output instead of letting the turn close.

Move an entire dsh installation to another machine and check it item by item. Three layers go across: the declaration layer (settings, credentials, plugin declarations and vendored link: sources), the state layer (sessions, storages, skills, attachments) and, optionally, the workspace project code. Sessions are rewritten at the zstd header frame only, workspace paths are remapped through an explicit path mapping, and at the end 14 checks (I1–I13 plus I6b) report PASS / FAIL / WARN. A LAN route pairs two machines and pulls the bundle over directly; merge mode diffs a bundle against a machine that has already been in use and stops before writing anything while conflicts are undecided.

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

Moves a DSH profile to another machine with its plugins, not only its files: packs the plugin bundle selection and the whole settings layer into one JSON file, then on restore writes the configuration back, restores local plugin sources and plugin-owned data, and installs the plugin bundles the backup recorded that the new machine is missing (plugin manager first, pnpm as a fallback).

Backup, restore and machine-migration for DSH: packs skills (which live outside ~/.dsh, in ~/.agents/skills), plugin manifests, core config, memories, todos and optionally sessions into a tar.gz with a sha256 sidecar, then imports it on another machine as a three-way merge against a baseline, listing per-file differences instead of overwriting changes made there. Credentials never enter an archive (filename deny-list of 27 names plus 7 private-key suffixes plus a content gate, enforced again on the import side), every import writes a pre-restore snapshot first, and an archive can be uploaded to any WebDAV server and pulled back on the new machine. Also includes scheduled backups, a read-only viewer for individual files, and an in-panel cloud card; no npm runtime dependencies (packing uses the system tar).

Speaks a cue for DeepSeek Harness on Windows: a configurable phrase when an agent turn completes normally, a second phrase when the agent needs you to choose — a question, a plan approval, or a permission request — and a time-of-day greeting when a new conversation starts. A small bubble in the lower-left corner mutes and unmutes every cue with one click, with its own toggle chime. Phrases are synthesized with a Microsoft Edge neural voice (skipping aborted and errored turns, subagent turns, and rounds that a goal is still driving), cached under the DSH home directory and replayed locally, with the desktop SAPI voice as the offline fallback.

Turn-finished music reminder: when an agent turn ends, play a ringtone or any local audio file (bundled synthesised telephone ring, custom absolute path, or an in-page upload), with a floating chip to pause, resume or dismiss it and loop-until-paused playback; configured in Settings, defaults overridable per deployment.

Toasts from DeepSeek Harness when a turn finishes, and when it stops for approval, a question or a plan exit. Native on Windows, text and timing configurable.

Generic monitor plugin for DSH Desktop: an HTTP polling rule engine. Poll any endpoint on schedule (multi-step, variable extraction, JS condition expressions); when conditions hit, wake a visible agent session to act — zero model calls otherwise. Configure everything in a sidebar GUI panel: create/edit/pause/test/fire-now/run history, same UX as the built-in scheduler plugin.

Dual-brain agent presets for DSH: one model plans the framework and delegates execution to a subagent pinned to a second model. Ships brain-ds (DeepSeek-V4.1-Flash plans, MiMo-V2.6-Flash executes) and brain-mimo (the reverse), switchable per session. Needs two providers configured (Xiaomi MiMo and a DeepSeek account), and the main brain must be selected manually.

Bidirectional dispatch for DSH: opens visible desktop sessions for tasks dispatched in by Grok Bot / Yobiru, adds /dispatch-grok and /dispatch-zcode slash commands to send tasks out, and reports the session result back to the dispatching peer on completion (peers are user-configured; nothing is sent until configured).

Codex-style hook management ported to dsh: hooks.json discovered from config, plugins and projects, each hook pinned to a sha256 fingerprint that must be approved before it runs; a review dialog in the composer, a `/hooks` browser, per-hook run stats, and trust / enable / dry run in Settings -> Hooks. The config file is dsh's own, with dsh event names.

Injects a very short conventions reminder (absolute INDEX path + version) once per session per version; when the conventions version changes, the next turn re-injects it (chat turns included). Optional hard guard: on operation-like turns, write/edit tools are rejected until the session has read the index (chat turns and shell are not blocked by default). Ships example checklists or points at your own directory; zero dependencies, configurable paths. Solves: conventions are written down but never pulled up when the work starts.

Keeps an unattended DeepSeek Harness session moving when nobody answers ask_user_question: it fronts the question waterfall, leaves a human answer untouched, and after a configurable window (120 s by default) submits the option marked (Recommended)/（推荐）, or the configured first/last fallback; plan reviews stay with the human unless explicitly enabled.