Plugins

Import Agent Skills from Git repositories, group them by repository, and enable or disable each one in DSH settings.

Adds a "Handoff session" item to the session context menu: pick an older session, choose how the new one should read it, and a fresh session is created with the handoff instruction pre-filled in its composer while the old session stays untouched. Three read modes — the AI decides what to read, a six-part summary written into a .md file, or just the last 20 turns. The second tab turns those .md files into a cleanup list grouped by workspace, deletable once the receiving session has run 3 turns or the handoff is 7 days old. All file, record and turn-count operations run in the host process; the browser half only renders and requests. Requires Windows and the DSH desktop app (it uses Electron shell.openPath and explorer.exe/cmd.exe).

Browse and continue DeepSeek web conversations in DSH, or import them with attachments into a workspace.

A Storage settings page for DeepSeek Harness: a donut of what dsh occupies on this machine (install, sessions, attachments, runtimes, plugins, temp), a drill-down that lists archived sessions and can delete them, and a clean action that only touches rebuildable caches. Deleting to the system Recycle Bin and Open folder are Windows-only; scanning works everywhere. Host routes accept loopback connections only and are CSRF-guarded; nothing leaves the machine.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

Mem0-backed long-term memory for DeepSeek Harness with managed Platform, self-hosted server and local OSS backends; visual settings, automatic recall and capture, editable memory summary, token budgets and weekly memory hygiene.

Adds an /if slash command to DSH: the first line is a condition and the remaining lines are an instruction. A fork subagent that inherits the session tools, system prompt and message history judges the condition and answers YES or NO, and only on YES is the instruction sent to the main agent as an ordinary user message, while a NO sends nothing. The condition, judge prompt and verdict never enter the main transcript. While the agent is busy the command queues with ordinary messages, editable, removable and steerable from the queue panel, and a setting switches to the 0.2.x background mode. The judge runs read-only, and falls back to a one-shot model call over a plain transcript when the host has no context-inheriting fork provider. Supports DSH 0.2.1-rc.5 and later (verified on 0.2.1-rc.5 and 0.2.2-rc.1) and Node.js 20.3 or later.

Prompt booster for the composer. Left-click the composer button and the draft is lightly polished and replaced in place (undoable, no popup). Right-click opens a menu with 8 built-in modes plus your own, where each mode's template can be edited or new modes added (saved on the host), and the model used for the rewrite is picked from the live dsh model list. Other modes show a before/after preview. Based on rongxingda/dsh-prompt-enhance (Apache-2.0); do not install both — both add a composer button and share Ctrl+Alt+E, so disable one of them if the upstream is present.

A session auto-compaction plugin that is friendly to local models: compaction never makes the local engine re-read history, saving a lot of time; the trigger point and the saved content of the compacted session are user-configurable. After installing, point the agent preset's compaction-basic slot at dsh-auto-compaction-engine (or save the settings page to switch it); until then compaction stays native.

Route table assigning provider, model, and reasoning effort to subagents by workspace directory prefix; supports global default policy and in-composer session popover.

Honor of Kings inspired theme for DeepSeek Harness: the Jing · Blazing Sunlight key art is inlined and painted into the window backdrop and both main panels, over an ink night sky with a molten gold sun, frosted mirror shards, drifting embers and a three-level motion switch (full / calm / off). Colours come from overridden design tokens, so panels, bubbles, menus and code blocks follow the theme.

A sticky-note wall in the DSH sidebar: nine paper colors, categories, search, archive, to-do checklists with stable item ids, and agent read/write tools.

Tarot readings with a dealt card table, a reading tool, and a reviewable history.

Fork of @linxin666/dsh-ssh (the two cannot be enabled at the same time): resolves an SSH host by its NIC MAC address before dialing, so DHCP address changes stop breaking saved hosts.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Host-plane sovereignty clause and content guard: appends user-held adjudication to the system prompt tail, redacts credentials and hidden carriers in tool results, and vetoes irreversible actions before they run. Applies to every agent preset.

IMPORTANT: refresh immediately after installation or open /login. An old page showing connection failure or HTTP 401 needs sign-in, not reinstalling; it may be unable to load the plugin notice. Windows 11 Web users can enable background power services from the Power menu without a terminal. Initial setup displays a temporary password on the page, never in terminal logs; initialize in a trusted network and change it immediately. Web-profile lock screen with password/OTP/Passkey, persistent sessions and custom wallpapers. Linux/macOS power controls need the bundled systemd/launchd controller; npm updates require a dedicated managed install, never a shared/global prefix. Electron Desktop is not supported. Stopping interrupts active tasks. Auth kernel adapted from xbzbing/dsh-auth-gateway (MIT); do not co-install, both own the web gateway port.

Brings the rtk token-saving setup from Claude Code to DeepSeek Harness: commands rtk can rewrite are rewritten, and builds, tests and logs it cannot reach are compressed; git, cargo, npm and pytest are covered. Compressed output tells the model what was elided and how to recover it; when the sandbox cannot reach the rtk store the original is saved and its path given. Savings show without a command: a pill below the composer, with `/rtk stats` for detail. When a rewrite is unreliable the original command runs as usual: if rtk cannot run, or the returned command would drop arguments, nothing breaks. The rtk binary ships with the package, so mainstream platforms need no separate rtk install, unlike most other rtk plugins.

Registers one tool, report_health, that answers whether a scheduled report job actually ran. It judges by side effects rather than exit codes: how old the newest report folder is, how many documents it holds, whether more than one report category is present, whether the audit ledger was synced recently, and how long ago the last log was written. Exits nothing, calls no model, and reads only local paths you can override by config or environment variable.

HarmonyOS delivery orchestration for DSH: freezes a four-dimension acceptance pack whose measurable criteria carry machine-checkable assertions, runs an adversarial pre-review before dispatch, hands the work to DevEco Code in Goal mode, then audits the delivery with independently gathered evidence (screenshots, UI tree, logs, hashed evidence bundle), recomputing assertion verdicts against measured values and filing rework orders; includes a cited rule catalog, a user-confirmation state and a gate calibration ledger.

Diagrams a reader understands on first look: nine types from one JSON spec, with a checked title, reading path, legend, contrast and connectors. Requires Python 3.9+ for the render and check scripts.

Whole-PDF paper translation for DSH on top of a BabelDOC installation you provide (Python CLI, with an OpenAI-compatible API key in its config.toml): bilingual dual-page output, a token cost estimate before running, a per-domain glossary reused across papers, and the server-side thinking overhead disabled for translation.

Compiles a repository into a source-grounded code map: structured pages where every claim carries a verifiable path:line citation, an interactive dependency graph, knowledge cards, four model tools and the /codemap command. Deterministic, no model calls, zero dependencies.

GitHub Trending radar inside the Harness Web UI: fetches the daily, weekly or monthly board (optionally filtered by a language), analyzes each repository into description, star gain, tech stack, highlights and risks, renders the result as a filterable card panel with paging, and registers the github_trending tool plus the /github-trending command.