Plugins

Redacts secrets, cookies and personal data in every model request at the host process undici dispatcher and restores the placeholders in the reply, so one interception covers every provider, adapters that plugins add included; per-kind actions mask / warn / block, an optional same-shape fake key, records written to disk by the day and a statistics card.

Drives a plugin page in the running DeepSeek Harness UI — opens the panel, reads real DOM and computed styles, clicks, types, waits for async effects, collects console errors, then returns to the original conversation.

A Storage settings page for DeepSeek Harness: a donut of what dsh occupies on this machine (install, sessions, attachments, runtimes, plugins, temp), a drill-down that lists archived sessions and can delete them, and a clean action that only touches rebuildable caches. Deleting to the system Recycle Bin and Open folder are Windows-only; scanning works everywhere. Host routes accept loopback connections only and are CSRF-guarded; nothing leaves the machine.

Adds a { } button under each assistant reply in the DSH Web GUI that opens the exact request sent to the model for that reply: model, call parameters, messages, tools, and provider-reported token usage.

Bridge DSH sessions, prompts, tool calls and approvals to CodeIsland's macOS notch, including the latest reply on Stop.

Session-header environment and branch chips: Local git-switches the checkout; Worktree creates an isolated git worktree under .agents/worktrees, registers it as a workspace, and offers merge, squash, delete, and auto-cleanup.

Merged commit timeline for the Git repositories in a DSH workspace, with per-repository dirty and ahead/behind state, fetch, and right-sidebar file diffs.

Manage blog categories, save drafts, and upload images, audio, and video to R2 from Harness.

One leader, many sessions: tell the leader the goal and it splits the work into cards, runs persistent worker sessions in the background, collects their reports, and keeps the facts on a per-project board in the right sidebar, so several features move in parallel instead of one at a time. Project-level LEADER.md and SLOTS.md prompts shape every request, and `read_worker_session` replays a worker transcript read-only without waking it.

Skill for building a game design brief into a playable, publishable TapTap Maker project: it picks the browser workspace or local MCP route, extracts the five elements of the brief, writes a first-round prompt for a minimal core loop, iterates in the official order, checks preview and release materials, and keeps credit, credential and irreversible-action limits in view. Includes eight reference notes on the product, credits, themes and asset limits, the leaderboard, brief parsing, iteration, publishing and safety, four templates, and three read-only Python checks for brief completeness, project layout and release materials.

Turns one journal paper PDF into a Chinese group-meeting literature report deck (.pptx) in the Nanyang Normal University physics template, plus a matching Word speaker script. Requires Python 3 with python-pptx, python-docx, Pillow and pymupdf (pypdf fallback); install them with pip install -r requirements.txt.

Turn code flows into source-linked Mermaid diagrams and interactive CodeWalkthrough explainers.

Adds right-sidebar document previews for STL, OBJ, PLY, glTF and GLB models, zip/tar/gzip archives, audio and video, fonts, subtitles, TOML, Intel HEX, JCAMP-DX spectra, VCD waveforms, KiCad schematics and boards, and DFU firmware images.

Read Markdown aloud, dictate and transcribe audio, and export narrated media from Harness.

Records browser bugs, freezes expected results, and verifies fixes against a fresh original-code control.

Exa web search and fetch provider for DSH: replaces built-in web search and exposes multi-source research capabilities.

Keyless web-search provider for DeepSeek Harness: Startpage, DuckDuckGo, Exa, and more behind a consensus fan-out.

Connects DSH to timestamped video reading, shared queues/history and Scroll personal Bilibili workflows through an existing Video Reader installation. Windows x64 only: install the core and set VIDEO_READER_ROOT before starting DSH; the bundle does not install Python, FFmpeg, models or Bilibili credentials.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

Indexes each chat of a workspace into a small topic graph every 4 turns (one model call, verbatim source kept under .context-graph/), appends up to 5 matching topics from the other chats to each message, searching a named day such as "yesterday" first, and adds a recall tool that returns the original text by topic, chat, day or turn. On and shared by default; /context-graph off and unshare opt a chat out, and stats, build, map and find inspect it.

A consent-gated personal profile store: people are indexed by name, entries by person and key, and no profile record is read before the current session is authorised. Sensitive entries come back masked unless the user authorises that tier separately; credential-like values are refused at write time. Ages and next birthdays are computed at read time, so asOf restores the answer for a past date, and facts that rot (height, weight, address) carry freshness warnings. Five profile_* tools plus a settings page to browse, edit, delete and revoke grants.

A memory plugin that forgets on purpose: short-term memories expire after 48h, long-term ones are rescheduled by Ebbinghaus/SM-2 curves and rarely-used ones fall asleep instead of bloating your context. Long-term writes stop in an approval center, so the agent cannot rewrite your persona on its own.

Review every five distinct ended project sessions in DeepSeek Harness, retain sourced lessons and workflow drafts, and supply project memory to later sessions.

Mem0-backed long-term memory for DeepSeek Harness with managed Platform, self-hosted server and local OSS backends; visual settings, automatic recall (from the first turn) and capture, editable memory summary, token budgets and weekly memory hygiene that only deletes memories this plugin wrote. Captured text is redacted; the memory summary is a stable system-prompt section (plugin:dsh-mem0:profile) and recall a separate mem0:recall block appended last, so the cached prompt prefix stays stable; recall and capture have timeouts (recallTimeoutMs, addTimeoutMs). With dsh-strata installed, recall size follows its strataBudget allowance, and the optional captureStrataFolds setting (off by default) also saves its fold summaries as memories.