Plugins

SSH server dashboard for DSH: per-host status, CPU, memory, disk and network meters, trend charts, an xterm.js terminal, SFTP file transfer, and server_box_hosts / server_box_exec / server_box_upload / server_box_download chat tools; imports ~/.ssh/config and mounts as a sidebar tab or a standalone drawer.

Removes sandbox_permissions / justification arguments that cannot widen the call's current sandbox mode, so calls no longer fail with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "danger-full-access" mode'. GPT models tend to fill these optional fields on every call and pick workspace-write, which is narrower than danger-full-access. Runs in tools/pre-execute: compares the requested mode with the mode the session's sandbox policy resolves, and drops the fields when the request is the same or narrower (also drops a lone justification). Also understands the values GPT carries over from Codex's own shell tool: null, empty and use_default are treated as no request, and in a danger-full-access session any value (including require_escalated) is dropped because nothing is wider. Real widening requests, unknown modes and tools that do not advertise DSH's escalation schema are left to DSH core. Never widens permissions. Configurable tool list (default bash, pwsh, write, edit, run_code). Zero dependencies.

Blocks AI coding agents from editing files without evidence and from running unapproved high-risk commands, and tells quoted dangerous strings apart from commands actually being executed.

\!WARNING\! this removes the authentication step !WARNING! Exchanges the process launch token for the browser-session cookie, so a first visit needs no ?token=... in the URL.

Reload a plugin or skill you just installed without restarting DSH. reload_plugin clears that plugin's own module cache, unloads the old instance and re-imports it, restoring the previous module if the new code throws; reload_skill forces skill directories to be re-discovered. Ships both as tools and as the /reload-plugin and /reload-skill commands.

Talk to DeepSeek Harness from Feishu / Lark. A chat maps to a DSH session, messages become turns and answers are pushed back as cards; questions, permission requests, model switches and conversation switches are interactive cards, and inbound files and images are downloaded into the workspace.

Pushes DSH session events to phone IM and lets you reply straight under that message, injecting the text back into the right session. Covers nine event kinds: task completion, execution error, execution blocked, manual abort, token limit reached, abnormal interruption, waiting for your answer, permission request, and waiting for plan confirmation. Channels are QQ single-chat bots and Feishu custom apps, both over WebSocket long connections — no public IP, domain or tunneling needed. Several bots can be configured at once, each subscribing to the sessions it cares about. Approvals and questions arrive with tappable buttons, and replies route home through three layers (button, quoted reply, explicit short-id prefix), falling back to the most recent intervention-needed notification and echoing which session it went to.

Bridges DeepSeek Harness sessions to Feishu/Lark, Telegram and DingTalk: each chat is bound to a resumable DSH session, replies stream back as cards, and a task-end card reports the model, token usage, step count and duration. Question and permission-approval cards are answerable from the chat, and a web settings pane configures the per-channel credentials.

Five task-state reminders for DeepSeek Harness (completion, approval, question, block, error) with four synthesized browser sound presets, system notifications that open the right session, and a terminal-BEL fallback when no browser is ready.

Source Control panel in the DSH Web left rail: search, switch and create branches with ahead/behind counts, a topo-order commit graph, and a click-to-expand preview of any commit showing its files (A/M/D), insertions and deletions, message, author and timestamp. An always-on footer dock above Settings carries the branch dropdown and recent commits and follows the open session; fetch and fast-forward pull are one button, and a git_worktree agent tool creates, lists and removes worktrees.

A code review workflow that reviews uncommitted changes, changes against a base branch, a single commit, a GitHub pull request, or a file.

Task workspace convention: one folder per session, one PROGRESS.md per task overwritten on each update, and per-task git once the task runs long.

Session-scoped delivery receipts for local artifacts: compare current file hashes with a recorded baseline, keep agent claims separate from explicit user acceptance, flag changed or unavailable files, and export a Markdown receipt through a tool, slash command, and conversation panel.

Agent skill and tool for querying multi-platform model account balances: DeepSeek, Doubao / Volcengine, Qwen / Alibaba Cloud, Hunyuan / Tencent Cloud, and custom HTTP endpoints. Read-only, with 60s cache.

Local OCR with nothing sent to a cloud: mounts the PP-OCRv6 Medium stdio MCP server (PaddleOCR on ONNX Runtime, CPU) as mcp__ppocr__ocr_image and mcp__ppocr__ocr_pdf for images and multi-page PDFs.

Vision through NVIDIA NIM: mounts the bundled stdio MCP server as mcp__opencode_eyes_nvidia__describe_image, which describes an image with any of seven hosted vision models (MiniMax-M3 by default) and rotates several API keys.

Eyes for text-only models: mounts the bundled stdio MCP server as mcp__opencode_eyes__describe_image, which sends an image file to StepFun step-3.7-flash and returns a detailed description.

Adds a "Check updates" tab to the Built-in plugins settings: one row per installed bundle, with its latest npm version and an update button. Each row also reports DSH-runtime compatibility. The registry is read through the .npmrc chain (environment, then profile, then user, first hit wins); with nothing configured it races a mirror against the public registry, and a private registry is never raced against a public one. A version is installed from the registry it was read from.

RSS/Atom reader with grouped subscriptions and unread/total counts, FreshRSS account sync over the Google Reader API with read/star written back, local image proxy, optional BYOK AI summary/translate/Q&A, podcast audio playback and full-text fetch.

Registers FilmLight's official FLAPI MCP assistant (flapi-dev-mcp) as an MCP server in DSH, so an agent can write and run Baselight / Daylight FLAPI scripts.

Mounts the hosted Reaudit MCP server (https://mcp.reaudit.io/mcp) through the in-box @deepseek-ai/dsh-mcp-client bridge with a REAUDIT_API_KEY bearer token: 238 mcp__reaudit__* tools for brand visibility in AI answers (ChatGPT, Perplexity, Gemini, Google AI Overviews), competitor and citation analysis, site audits, content generation and social scheduling.

Offline Wikipedia and ZIM lookups through your own kiwix-serve: the wiki_search, wiki_read and wiki_books tools run full-text search with snippets, read an article by exact title, and list the local ZIM library.

Mount the QianYuan MCP server inside DeepSeek Harness: one config-layer bundle brings 15 agent-record tools (pitfalls, cached results, identity, task board) to mcp__qianyuan__*. No runtime code; reads are anonymous, writes are ed25519-signed.

Connects DeepSeek Harness to the AdWhispr remote MCP server through mcp-remote with browser OAuth sign-in, adding tools for competitor ad research, ad creative cloning, and launching and managing Meta, Google and TikTok campaigns. Requires an AdWhispr account.