Plugins

Fetches AOSP source snapshots from codeload and searches them on the device with ripgrep through nine tools covering mirror listing, preset bundles, fetch, incremental update, cross-module regex search, a heuristic call-chain trace and line reads, with no git, no root and no build.

勿忘我：给任何 LLM 用的封存式记忆大脑——艾宾浩斯遗忘、联想召回、可塑性性格、自动总结，附 3D 莫比乌斯记忆星环与脑图。DeepSeek Harness 插件 / MCP / REST

Workspace- and session-scoped rules for DeepSeek Harness · 按工作区/会话分层维护守则，会话里逐层勾选带入，默认关闭

odoo-lint for DeepSeek Harness: lint and fix Odoo addons, and lint every addon file the agent edits

Trim idle DeepSeek Harness session logs at startup: keep the last N windows, cut the ones the model can no longer see, and verify the result with the host's own format, session and projection validators before writing. Not context compaction: this shrinks

DSH 本地记忆插件：自动记忆、遗忘曲线、关键词关联、可检索可编辑，数据留在本机。

Sayaka Miki desktop pet for the DeepSeek Harness Web UI: twelve hand-drawn sprites follow the live session state and swap instantly, with a tired slump after a turn, a furious second stage after ten pokes, and idle sword-polishing; repeated states change her line and a voice line plays every five to eight encounters.

Quiet Carl the hedgehog easter eggs after a finished turn, plus local water, meal and rest reminders. Fully local scheduling with no model calls and no chat messages.

LAN pets for DeepSeek Harness. Neighbors' pets visit your desktop, and yours can visit theirs with a note or file along. Desktop pets need DSH Desktop (Electron) on macOS or Windows; on Linux or the web profile, discovery and visits still work but the desktop layer is unavailable.

Two columns for the dsh Plugins page, Minecraft resource-pack style: the left column holds the packs running together, the right holds packs that are installed but switched off, with arrow or drag moves between them, custom tags, search, scope filters, batch toggling and undo. Tags and display names live in a hand-editable packs.json under DSH_HOME instead of browser storage, so they survive a new browser or cleared site data.

Back up and restore DSH plugins through your own private GitHub repository — list, versions, configuration and local sources included.

Sidebar supervisor for installed DeepSeek Harness plugins: health, DSH compatibility, updates, usage frequency, per-plugin token cost, and local version backups with rollback.

Exposes a DSH Harness Desktop Web GUI to another machine's browser through a Cloudflare quick or named tunnel, an SSH reverse tunnel, or a custom command, and hands out a tokenised link to open it; a settings panel and CLI start, stop and print the link. Needs DSH Desktop 0.2.1-rc.2 or later and a cloudflared binary.

Loopback HTTP bridge that lets a peer machine ping this PC and run shell commands, with an optional ssh reverse-tunnel supervisor.

The mobile client for DeepSeek Harness: use the DSH running on your computer from your phone. The Android app signs in with the same account, picks this computer from the device list and opens its DeepSeek Harness UI on mobile. The desktop plugin handles registration and the connection, and nothing on the computer needs an inbound port. The UI adapts on its own: on a phone it becomes a touch-friendly layout, and returns to the desktop layout when a foldable opens or the window gets bigger. A PC-side panel shows login state, device quota, device list and the app download QR code.

A Feishu/Lark channel for DeepSeek Harness: WebSocket inbound messaging, Markdown tables rendered as native Feishu table components, 13 Feishu tools, a web settings page, voice input/output, media upload and a model fallback chain.

Remote control for DeepSeek Harness over an outbound Huawei Cloud DevBridge tunnel: a sidebar seat and a standalone control page start and stop the tunnel and show its public URL, QR code and logs. The plugin's own gateway stays on 127.0.0.1, checks a rotatable access token or HMAC session cookie, rate-limits failures and strips external identity headers before forwarding to DSH, so no inbound port is opened. The tunnel is off by default; tokens and state stay under ~/.dsh. Requires a Huawei Cloud account and devbridge CLI v0.2.x. The relay terminates TLS and can see plaintext HTTP — this is access control, not end-to-end encryption.

Agent-asked secrets for DeepSeek Harness: a masked card stores API keys and tokens in the local credential store without them entering the chat, then injects them into one command.

Security review for DSH plugins: reads the manifest, install hooks, native dependencies and source for network egress, dangerous APIs and credential paths, cross-checks the curated market registry, and returns a 100-point verdict with itemised findings. Read-only — it never executes the audited code.

Expires stale dsh-auth sign-in cookies once the Cookie request header passes 4 KiB, so per-port cookie accumulation can never reach Node's 16 KiB header limit (HTTP 431).

JetBrains IDE bridge for DeepSeek Harness on Windows: installs as a DSH bundle, publishes the authenticated DSH URL, registers the open IDE project, relays the IDE MCP server, and serves a compact tool-window panel with streaming, approvals, Plan/Act, steer sending, session switching and archived-session filtering. The matching IDEA plugin is attached to the same release; your DSH agent can install it.

Clears four kinds of idle-only system notices (approval policy, working directory, plan mode, plugin changes) that DeepSeek Harness counts as active work, so quitting with no running tasks no longer warns about interrupted work.

Adds a Windows system-proxy switch to DeepSeek Harness: toggles the HKCU Internet Settings proxy with a WinINET refresh, together with the git, npm and pip proxy settings, from chat, the /proxy command or a Settings page.

Blocks the end of a turn while temporary files from that turn are still lying around: it registers a listener on the serial agent/turn-stopping hook and, if anything is left, steers the model with the file list and two ways out — delete them, or justify each one and move it somewhere deliberate. Candidates come from two narrow temp-file sources, plus a backup-retention channel that is on by default and flags excess .bak copies of files touched this turn. The first is the .agent-tmp/ convention directory under the session cwd: whatever is left in it is reported outright, because that directory exists only for throwaway files. The second is the paths this turn actually wrote, captured through the fs/write-intent hook; those are reported only when they sit under that cwd, fall outside .git, node_modules, .tmp-sessions and out, match a temp-file pattern, and the file is still present — which is what keeps junk already sitting in the workspace from being resurrected as a complaint about this turn. One steer per turn, subagent sessions skipped, nothing deleted by the plugin in the default steer mode (only the opt-in mode: prune deletes backups), and the check is readdir plus stat only.