Plugins

Second-model gate on the assistant turn, installed in two parts: copy engine/ into ~/.dsh/plugins/ and mount it by absolute path in the profile patch (the bundle itself only installs the settings panel), then switch off the default dry-run mode that only logs verdicts. Once active, a separate judge call scores the draft against the numbered criteria (0-10 each); any criterion under 6 fails the turn and sends it back for a rewrite, up to 3 rounds by default. The web panel edits criteria and thresholds, and every verdict is appended to an audit log.

Adds a "Handoff session" item to the session context menu: pick an older session, choose how the new one should read it, and a fresh session is created with the handoff instruction pre-filled in its composer while the old session stays untouched. Three read modes — the AI decides what to read, a six-part summary written into a .md file, or just the last 20 turns. The second tab turns those .md files into a cleanup list grouped by workspace, deletable once the receiving session has run 3 turns or the handoff is 7 days old. All file, record and turn-count operations run in the host process; the browser half only renders and requests. Requires Windows and the DSH desktop app (it uses Electron shell.openPath and explorer.exe/cmd.exe).

Two filter chips at the foot of the sidebar: one counts the sessions that are running, the other those waiting for your approval, plan review or answer, and each opens a popover listing those sessions grouped by workspace where a row opens the session. A separate panel adds an all-sessions chip and a more menu that filters by the last day, three days, week or thirty days.

Rose Queen and Hatsune Miku theme suite for DSH with built-in theme management, light and dark appearance, phone layouts, and custom startup videos.

App Updater for DeepSeek Harness: detect every installed app that has a newer version and update it with one click by downloading the vendor's full installer from its official website and installing it silently — without launching the app. Windows (winget

Bridge DSH sessions, prompts, tool calls and approvals to CodeIsland's macOS notch, including the latest reply on Stop.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

Indexes each chat of a workspace into a small topic graph every 4 turns (one model call, verbatim source kept under .context-graph/), appends up to 5 matching topics from the other chats to each message, searching a named day such as "yesterday" first, and adds a recall tool that returns the original text by topic, chat, day or turn. On and shared by default; /context-graph off and unshare opt a chat out, and stats, build, map and find inspect it.

A memory plugin that forgets on purpose: short-term memories expire after 48h, long-term ones are rescheduled by Ebbinghaus/SM-2 curves and rarely-used ones fall asleep instead of bloating your context. Long-term writes stop in an approval center, so the agent cannot rewrite your persona on its own.

Mem0-backed long-term memory for DeepSeek Harness with managed Platform, self-hosted server and local OSS backends; visual settings, automatic recall (from the first turn) and capture, editable memory summary, token budgets and weekly memory hygiene that only deletes memories this plugin wrote. Captured text is redacted; the memory summary is a stable system-prompt section (plugin:dsh-mem0:profile) and recall a separate mem0:recall block appended last, so the cached prompt prefix stays stable; recall and capture have timeouts (recallTimeoutMs, addTimeoutMs). With dsh-strata installed, recall size follows its strataBudget allowance, and the optional captureStrataFolds setting (off by default) also saves its fold summaries as memories.

Honor of Kings inspired theme for DeepSeek Harness. Each launch starts with an about 5 second mirror-break opening: the key art appears as a glass pane, cracks outward from the impact point, bursts into 56 shards with gold edges, depth and spin, hangs still, then rotates back together before a golden flash reveals the picture, the sun halo and the light beams. The key art is also inlined as the window backdrop and the texture of both main panels over an ink night sky with a molten sun, frosted mirror shards and drifting embers; the mirror emblem at the bottom left switches motion between full, calm and off, and colours come from overridden design tokens so panels, bubbles, menus and code blocks follow the theme.

Windows-only guard against the desktop shell locking itself out: it counts the dsh-auth-* launch cookies the shell has accumulated, reports how much of the 16 KiB request-header budget they consume, and once the count passes 40 it backs up the whole Cookies database and lets DSH rebuild it, so every cookie in that profile is cleared. Install is one command: on load the plugin registers its own weekly scheduled task pointing at the scripts inside the package, and uninstalling it removes that task — nothing to copy into your home directory and no schtasks line to run by hand. The check itself runs while the app is closed (it waits up to 3 hours for the shell to exit). It does not raise the header budget or keep a floating panel; scripts/ can also be run standalone without the app installed.

Adds two enhancements to DSH ask_user_question choice cards: right-clicking an option expands a per-option note that is merged into the submitted custom answer, and a footer field asks a side question answered by a fork subagent from the session context, read-only, with no write-back. Keeps left-click, skip, paging and the countdown working as before, and only claims generic choice cards, not plan review or approval cards. Supports DSH 0.2.x from 0.2.0-rc.1 (verified on 0.2.2-rc.1) and Node.js 20+. Derived from buaaflyaway/dsh-question-note (MIT) and inspired by MichengAI/dsh-btw (Apache-2.0); do not install it together with dsh-question-note — both take over the same ask_user_question card.

Russian UI language pack for DeepSeek Harness 0.2.1-rc.5 with 2,909 strings based on official translations, version-specific compatibility fixes, and no app archive patching.

Output gallery in the DSH sidebar, built to fix DSH reporting produced files only after a task ends: it watches your on-disk output folders and shows files as they appear, so you can verify and intervene mid-task instead of after. Auto-refreshing image thumbnails with zoom and pan, documents, code, data, archives and links that open in DSH native preview, per-conversation filtering, and multi-folder support for sessions whose cwd is outside the default output folder. Zero dependencies.

DeepSeek Harness (DSH) 插件：原生工信部 ICP 备案查询（网站 / APP / 小程序 / 快应用 + 四类违法违规黑名单）——Node 进程内直连官方接口并本地求解滑块验证码，无需 MCP 服务、外部服务或 API Key。Native MIIT ICP filing lookup for DSH.

把 DeepSeek 養進 Instagram — a DSH plugin that gives an agent an IG life

The judgment layer for DeepSeek Harness plugins: attribute why a plugin silently disappeared, judge a candidate against your exact environment, and keep a capability ledger. Offline, read-only, evidence-first.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Host-plane sovereignty clause and content guard: appends user-held adjudication to the system prompt tail, redacts credentials and hidden carriers in tool results, and vetoes irreversible actions before they run. Applies to every agent preset.

FOFA cyberspace mapping inside the conversation: check the account quota, run FOFA queries and export the full result set into CSV/JSON/TXT files in the session workspace by paging through a time cursor. A CSV or TXT export stopped by its time budget or by an upstream error continues into the same file from the saved cursor, so rows already fetched are kept. Results render as conversation cards (query, match count, file path), and the API key is saved from the plugin page into the Harness credential store.

WEB ONLY: designed specifically for the Web profile, NOT Electron Desktop. Windows support means Web on Windows, not the Desktop application; installing into Desktop can break startup or restart. Refresh immediately after installation or open /login; HTTP 401 on an old page means sign-in is required, not installation failure. Only an uninitialized data directory displays the temporary password; existing passwords survive reinstalling. Initialize in a trusted network and change the publicly displayed initial password immediately; passwords are never printed in terminal logs. Web lock screen, password/OTP/Passkey, persistent sessions and wallpapers; Windows Web power services can be enabled from the page. Linux/macOS need the bundled controller; npm updates require a dedicated managed install. Stopping interrupts active tasks. Auth kernel adapted from xbzbing/dsh-auth-gateway (MIT); do not co-install.

Compares installed plugins against a downloaded DSH update and reports which interfaces they use that the update no longer exposes. Runs before you install, with a dry-run diagnose command for when it declines to act. Windows only, on the DSH desktop app, with Node.js 18+.

macOS Share menu receiver for DeepSeek Harness: appends shared files, images, text and links to the current thread’s draft attachments (requires the DSH Share app).