Plugins

Registers one `context_extract` tool for DeepSeek Harness: it compresses a long raw document (financial report, contract, ledger) into dense structured Markdown plus JSON — key metrics, tables, numbered clauses, entities and cross-check alerts — so a downstream pipeline can work from the compressed form instead of re-reading the raw document. Financial statements, legal contracts and business ledgers are detected and handled differently; balance-sheet and cash tie-outs are run and mismatches are flagged as alerts rather than silently fixed. Read-only; never modifies the source file. Requires Python with openpyxl and python-docx.

Requires Python 3.12+; Xiaohongshu reading needs the xiaohongshu-mcp backend and a QR sign-in (ffmpeg/OCR optional). Batch-read Xiaohongshu notes and WeChat public-account articles: per-note body, image text via local OCR, video frame text and comment samples, structured JSON/Markdown output, and the original source URL on every result. Read-only: it never publishes, likes, follows or comments.

Built for DSH 0.2.1-rc.2 (engines.dsh pins it exactly). Technical support for Dragonfly 3D World using 2027.1 help documents and read-only searches of a detected local installation, with an explicit help-only fallback.

Adds extra working directories to a workspace, each read-write or read-only, from a folder button next to the composer or the `/add-dir`, `/remove-dir` and `/dirs` commands; the model sees them in its runtime context, and `write` and `edit` calls into read-write directories skip the sandbox escalation prompt by default while shell commands still ask.

Connect DeepSeek Harness Web to MySQL, MariaDB, PostgreSQL, SQL Server, Oracle and MongoDB for schema discovery and read-only queries through session-authorized MCP tools.

Read-only inventory of every agent preset for the Web GUI, with a matrix of which preset holds which tools, MCP servers and skills, plus CLIs that move a plugin between presets.

Hides other memory plugins' context sections and tools inside a chosen DSH preset, so that session gets a clean context. Off by default; ships a read-only diagnostic tool.

Goal Map shows a read-only goal-to-plan progress route, session mindmap and step list using reported plan progress, without starting tasks or model calls. Beta.2 supports DSH Web 0.2.0-rc.2 or 0.2.1-rc.2, with Node.js >=24.

Context observability and control for DeepSeek Harness: cross-session token analytics, session-level budget/prompt/tool controls, and optional agent scaffolds. It reuses the official tokenMeter, compaction, systemPrompt, and tools.restrict seams; monitoring is read-only.

Reads a local Hermes Agent session store read-only and imports sessions into the current conversation as bounded, untrusted background context: a composer button opens a searchable list across every profile, plus the hermes_sessions_list and hermes_session_import tools.

Read-only lazy session viewer: lists sessions with stat only, then decompresses just the tail Zstandard frames to inspect recent events; includes search, stats, and export in a standalone /lazyview panel. Requires Node.js 24+.

Reuses the sign-in already held by the local Doubao desktop app as a DeepSeek Harness model provider, and adds a read-only quota view for the 5-hour and weekly windows. Windows x64 only: the credential is decrypted with DPAPI.

Manages a relay station's many groups and rates for DSH, switching the station's billing group in place and refreshing the model list and rate on stations that expose /v1/token/group; stations without it fall back to read-only and keep serving models.

DeepSeek account balance capsule in the conversation session header. A same-origin route registered by the package's own host half resolves the API key from the credential service and calls api.deepseek.com/user/balance, so the key never reaches the page; the capsule polls every 60 seconds and expands into a panel with per-currency totals, granted and topped-up amounts, last-updated time and a manual refresh. Read-only UI: it never touches prompts, tool results or model traffic.

⚡ One-click prompt enhance in the DSH composer. Still short? Keep going for up to 5 rounds; 🕐 every round is auto-saved, one click to roll back; ↩️ the result syncs back to the composer, with a line diff for every change; 🎨 6 read-only built-in presets plus up to 3 of your own, 🪄 button icon and 📍 position are all yours to tweak.

See what you actually installed: a chip shows how many plugins your profile really loads, and a searchable panel lists every one with its version, its author-written one-liner, and whether it is built-in or third-party. Read-only, zero config.

A resident assistant for DeepSeek Harness that is deliberately not another chat box: one floating window plus one standing conversation, both independent of every other session. The heartbeat is held back by four gates — an authority grant, a daily turn budget, quiet hours and a pacing cooldown — and it keeps working across restarts through a lease it has to hold. Each wake is decided by a model that must answer SKIP or a short message, so silence is a decision rather than a failure. The window shows the standing conversation's real message flow, read from the host session store, or from the on-disk session log when the host does not publish that session, and it can send into that conversation directly. den carries the same reach as the person it stands in for, with one limit: read-only. It may read every session, this machine and work channels such as GitHub, but it does not write, send or publish, it never asks anyone for permission, and it never gates another session's tool calls. `npm run digest:github` turns GitHub notifications and your own open pull requests into three Chinese sections — waiting on you, waiting on your review, and yours — with reply drafts that are explicitly marked as unsent.

Injects your existing markdown documents (notes, rules, knowledge-base files) into every dsh session's system prompt as read-only memory — list file or directory paths in `files`; no database, no service, no write path; UTF-8 byte-budgeted truncation with line-boundary fallback, total budget, YAML front-matter stripping, and freshness timestamps.

Keeps a per-turn receipt that later turns do not clear (final todo counts, goal id and phase, end reason, and a fail-closed pass/fail/inconclusive plan verdict), plus a read-only tool to read recent receipts. Stores counts and ids only.

Inlines an image block as base64 only in the one request where it first appears, and marks that same block offloaded on every later request so DSH's own image-offload projection renders it as the placeholder text carrying the read-only local path. An occurrence is keyed by session id, message id, content-tree path and attachment id, and a request is only counted after it produces its first chunk, so retries do not count as sent. Requests carrying a purpose are neither rewritten nor counted, a later read_image of the same file is a new occurrence and inlines once more, and only that request's copy is rewritten, so nothing is written back to the session.

Shows a Spark Scope card at the bottom of the dsh sidebar: model server decode and prefill rates with sparklines, running and queued requests, KV cache, TTFT and TPOT p95, and GPU temperature, power, load and memory for each DGX Spark node. Read-only; needs a running Spark Scope server. Works in dsh web and the desktop app.

Token statistics for every stored DSH session: a Host service folds the durable session logs into a persisted checkpoint and serves them over one read-only HTTP route, and the Usage settings page paints the saved aggregate immediately, then updates it in the background. Days are bucketed by hour behind a date picker, next to a trailing window with per-model breakdowns, request and web-search counts; no cost or pricing model.

Read-only unread-mail board for the accounts configured in dsh-email — unread messages appear as per-account cards in the DSH right sidebar (sender, subject, time) and refresh on demand.

Agent skill and tool for querying multi-platform model account balances: DeepSeek, Doubao / Volcengine, Qwen / Alibaba Cloud, Hunyuan / Tencent Cloud, and custom HTTP endpoints. Read-only, with 60s cache.