Plugins

SSH server dashboard for DSH: per-host status, CPU, memory, disk and network meters, trend charts, an xterm.js terminal, SFTP file transfer, and server_box_hosts / server_box_exec / server_box_upload / server_box_download chat tools; imports ~/.ssh/config and mounts as a sidebar tab or a standalone drawer.

Removes sandbox_permissions / justification arguments that cannot widen the call's current sandbox mode, so calls no longer fail with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "danger-full-access" mode'. GPT models tend to fill these optional fields on every call and pick workspace-write, which is narrower than danger-full-access. Runs in tools/pre-execute: compares the requested mode with the mode the session's sandbox policy resolves, and drops the fields when the request is the same or narrower (also drops a lone justification). Also understands the values GPT carries over from Codex's own shell tool: null, empty and use_default are treated as no request, and in a danger-full-access session any value (including require_escalated) is dropped because nothing is wider. Real widening requests, unknown modes and tools that do not advertise DSH's escalation schema are left to DSH core. Never widens permissions. Configurable tool list (default bash, pwsh, write, edit, run_code). Zero dependencies.

Pushes DSH session events to phone IM and lets you reply straight under that message, injecting the text back into the right session. Covers nine event kinds: task completion, execution error, execution blocked, manual abort, token limit reached, abnormal interruption, waiting for your answer, permission request, and waiting for plan confirmation. Channels are QQ single-chat bots and Feishu custom apps, both over WebSocket long connections — no public IP, domain or tunneling needed. Several bots can be configured at once, each subscribing to the sessions it cares about. Approvals and questions arrive with tappable buttons, and replies route home through three layers (button, quoted reply, explicit short-id prefix), falling back to the most recent intervention-needed notification and echoing which session it went to.

Bridges DeepSeek Harness sessions to Feishu/Lark, Telegram and DingTalk: each chat is bound to a resumable DSH session, replies stream back as cards, and a task-end card reports the model, token usage, step count and duration. Question and permission-approval cards are answerable from the chat, and a web settings pane configures the per-channel credentials.

Skill browser and switchboard for the DSH web GUI: a sidebar entry lists skills from configurable source directories as cards, clicking a card opens the full SKILL.md, and the per-card switch writes disable-model-invocation and registers or removes that skill in the agent skill catalog, so the model can load exactly the skills that are switched on. It also recognises WorkBuddy expert-team folders and shows avatar, tags, quick prompts and members, registering its lead prompt as a skill when switched on. Source directories are editable in the panel.

Gives DSH the full 33-tool browser surface (ctx.browser seam -> a self-hosted headless moli browser over CDP: one 127.0.0.1 daemon with Bearer-token auth, request-path whitelist and WebSocket rewriting, no root/GUI/Electron needed; single-engine moli serve with auto LD_LIBRARY_PATH/FONTCONFIG_FILE injection and a persistent profile dir for logins), plus a web panel — a real page you can click, scroll and type in, operation/console/network logs with one-click cleanup, a customizable window (border color, transparency, glass, fit-to-picture with no black bars, top-inset and self-centering) and an adjustable page size (1920x1080 by default) — plus a collapsed pill that can be dragged to any spot on the screen (free position), a live view that auto-resumes when you switch back to the web tab, and a 1920px default max edge for the live frame — and two bundled skills (browser, browser-runtime) served through the plugin built-in skill provider, so the skill centre lists them as system-level by default without writing into $DSH_HOME/skills.

Adds a "Check updates" tab to the Built-in plugins settings: one row per installed bundle, with its latest npm version and an update button. Each row also reports DSH-runtime compatibility. The registry is read through the .npmrc chain (environment, then profile, then user, first hit wins); with nothing configured it races a mirror against the public registry, and a private registry is never raced against a public one. A version is installed from the registry it was read from.

Mount the QianYuan MCP server inside DeepSeek Harness: one config-layer bundle brings 15 agent-record tools (pitfalls, cached results, identity, task board) to mcp__qianyuan__*. No runtime code; reads are anonymous, writes are ed25519-signed.

Inspect conversation context and apply configurable compaction with usage history.

Registers a configurable prompt variable so an agent preset whose persona uses complete: true can still receive an injected text block; the plugin ships no content of its own and reads the text from its config.

Adds a thinking-depth slider mapped to declared model levels, configuration guidance, and optional inline model settings.

Adds a one-click switch to every provider row in Settings - Models: turn a provider off and it leaves the model picker, turn it back on and it returns. It works by wrapping the model catalog call, so it affects the catalog and the picker only, never routing, keys or provider config; existing sessions that already use such a model keep working.

SSH workspaces for Linux/macOS with SSH config import, remote folder selection, and file tools, Bash and persistent remote terminals following native DSH session permissions.

macOS only: holds a PreventUserIdleSystemSleep assertion (caffeinate -i -w <host pid>) while any DSH session runs, and releases it when the last one stops, so a long turn is not cut off by idle sleep. The display may still turn off. It keeps holding through the maintenance phase, where Agent.status reports idle and a long manual /compact runs, via the compaction/start and compaction/end events. It reconciles against ctx.agents.list() every 60s, so a session already running when the plugin is hot-reloaded is picked up at once instead of at the next turn boundary. A failed hold retries with exponential backoff capped at 60s and never gives up; release escalates from SIGTERM to SIGKILL after 2s, and -w lets caffeinate exit by itself if the host dies. No browser half — configured through the profile patch. 51 tests, including two that read pmset -g assertions on real hardware.

Replaces the built-in bash executor so every command gets an environment resolved from its own working directory: configurable PATH prepends, Python venv activation and mise shims, with a dedicated section in the Web UI settings.

Read, write, convert and retime a subtitle track across SRT, WebVTT and ASS, audit it for over-long or unreadable cues, and transcribe audio through a configured speech recogniser.

Extract text from an image or PDF, reading a born-digital text layer directly and falling through to a configured OCR engine for scans.

Connects dsh to the GreatArrow.ai MCP server over Streamable HTTP, so the agent can search and save workspace memories, tasks and decisions shared with your other AI clients; a config-only bundle that reads the token from great-arrow.token in the dsh home, never from the environment.

Compaction backend that replaces the default compaction-basic: it summarizes the conversation with a configurable pool of low-cost models, sizes each chunk to the chosen model's context window, and merges all digests in one call, with per-route cooldown and session-model fallback.

Favourite any conversation from the sidebar row menu or an inline star, copy its id plus the transcript absolute path in one click, and permanently delete a single conversation behind a confirm — the sidebar row drops at once. A settings card batch-archives sessions idle past a configurable hour threshold with one-click undo, exports the candidates as a tab-separated txt carrying name, id, workspace, idle time and last activity, and batch-deletes archived conversations that are not favourites. Two view-options rows narrow the sidebar to favourites that are archived and to those that are not. Every addition is additive — three official slots plus one cloned filter row, editing no official file.

Installable wrapper for the DSH plugin in dsh-kdczyz-mode/: WorkBuddy model pool + Trae connector + Qoder account pool as three independent providers, plus one settings page with six tabs (XD Pool / Trae config [provider switch, account binding, model sel

Packaging pipeline for uni-app x projects: reads the local HBuilderX version, recommends and one-click installs the matching iOS / Android / HarmonyOS offline SDK (panel card with official download links), then drives the HBuilderX CLI to build, sign and upload apps from per-project config files; the engine also ships as list / doctor / check / build tools for the agent.

Buffers consecutive short messages from the composer and merges them into one turn: no model wake-up until the user stops for a configurable silence window; long messages and attachments bypass the buffer.

Token usage statistics for DeepSeek Harness with a session drawer and today / last-3-day / last-7-day panels, plus configurable charts and metrics.