Plugins

Opérations SSH améliorées : test de connectivité, ls distant, import de ssh-config, vérification des empreintes known_hosts et exécution multi-hôtes.

Adds a Continue button to the composer dock and resumes automatically when a turn is cut off by a network drop or an upstream output-limit cut. A resident link monitor asks every 10 seconds whether the network is back, because the link returning fires no event, and a turn that completes normally counts as proof the link works. The click goes through the host submission pipeline — beginSubmission plus session.prompt — so the message carries real user attribution instead of faking one, and a genuine refusal is reported rather than retried. On startup it also scans recent session logs for both fingerprints of a host that left mid-turn: an unclosed turn, and a turn closed as disposed, which is what a normal shutdown writes. A turn the user stopped by hand is never resumed.

Three-scope rule injector for DeepSeek Harness that re-publishes the rules into long sessions, with a loop-breaker, dedupe by content fingerprint, per-session persistence, and a settings-panel editor.

Adjust chat bubbles and message spacing with comfortable or compact density on verified Windows Desktop RC2/RC3/RC5 layouts, retaining native styles for unknown host fingerprints.

Structured image recognition: local sharp measurements plus a cloud vision model return description, OCR with coordinates, object locations and fine-grained attributes in one call; a fingerprint cache makes repeated images return in milliseconds without spending model quota.

Hermetic composition lock: fingerprints the profile's dependencies, bundle order, lockfile and patch layer; booting a drifted composition warns, or fails under strict mode (the --frozen posture for CI).

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

DeepSeek Harness (dsh) plugin: live local LLM endpoint health in the web rightbar. llama.cpp slots (busy/TTFT/wedged, /metrics) + Ollama MODELS (loaded vs empty). Engine fingerprinted by response shape. Installable dsh.bundle.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

DeepSeek Harness plugin for CVE impact retesting: fingerprint a target, judge it against a CVE's affected range, gather passive evidence, and report a verdict with confidence and limitations.

Hard break on repeated tool calls: a synchronous ctx.tools.guard gate that counts semantic fingerprints (net/site/sink/cmd/exact) over a per-agent sliding window, ignoring decoy arguments such as description and timeoutMs.

DeepSeek Harness Agent 团队的信任指数插件 —— 为 spawn 出的 teammate 做实时信任评分：四维 EWMA 信任账本（按 agent 类型指纹跨会话累积）DeepSeek Harness Agent teams plugin — live trust scoring for spawned teammates: a four-dimension EWMA ledger keyed by agent-type fingerprint (cross-session)

Drag or paste any local file onto the DSH page; it resolves the real absolute path (Spotlight + size/mtime + head/tail fingerprint match) and inserts it into the composer, with a content-cache fallback.

Pont compagnon Android : jumelage LAN par code QR avec jetons d'appareil révocables et empreintes TLS, un panneau de connexion téléphonique et de gestion des appareils, et un proxy d'accès HTTPS servant sessions, événements en direct et approbations à l'application native jumelée.

Share any DeepSeek Harness session as a self-contained read-only static webpage — timeline, collapsible tool calls & reasoning, default redaction, dual SHA-256 fingerprints, watermark. · 把 DSH 会话一键变成可分享的只读静态网页：单文件 HTML、离线可开、默认脱敏。