Plugins

Keyless web search that fuses eight engines, fetches page text through a proxy ladder, and adds eight vertical sources for packages, papers and questions.

Drives a local Hiddify installation from DeepSeek Harness without its GUI: seven tools to start and stop the core, switch split-tunnel modes (rebuilds the config and restarts the core), rotate exit nodes through the Clash control plane, and search or fetch pages through the proxy. Windows only.

Turn English audiobooks (MP3) and documents into listening lessons: transcribe every sentence locally with the speech model DSH voice input already downloaded (about 241 MB, fetched on first use if missing; ffmpeg required), proofread and explain each sentence with your DSH model, then drill with blind listening, intensive listening and spaced repetition, with Chinese-dubbing export and offline Kokoro voices; ships a sidebar panel and four AI tools.

Adds a download_file tool that fetches a URL over 16 aria2c connections and falls back to a single stream when aria2 is unavailable. Needs aria2c installed separately; the aria2 channel does not verify TLS certificates.

Web search, page fetch and one-call research through DeepSeek's official Search and Fetch API; needs a DeepSeek API key.

Runs the upstream Headroom compression toolkit (headroom-ai, Apache-2.0) inside DeepSeek Harness over MCP: headroom_compress, headroom_retrieve and headroom_stats are exposed as mcp__headroom__* tools backed by the upstream server, installed on demand by uvx. Compression is lossy but reversible — originals are fetched back by hash from a local CCR store. Also ships a registrar that adds DeepSeek Harness to Headroom's own MCP registry, and a model-header sanitizer for the upstream proxy.

Wraps globalThis.fetch to route chosen domains through one or more named HTTP/SOCKS proxies (exact host or *.suffix rules, per-card enable), with global direct rules that override every proxy; unmatched requests keep the host default network, and saved settings apply on the next request without a restart.

Deterministic prompt-injection interception: tool results from file reads, repo searches and web fetches are scanned before they enter model context; high-severity findings quarantine-wrap or block, and credential-material files quarantine on the path alone.

Deterministic network egress gate: web fetches and searches are checked against a destination allowlist in tools/pre-execute and denied before they run; shell fetch-verbs are observed (enforcement opt-in).

DSH Cordis computer-use provider for the ZTE Nde desktop. npm install auto-fetches the musl binary built by computer-use-linux-zte-nde (v0.7.7-nde.3) into the package's own bin/ via postinstall; resolveCommand() resolves the cordis command path against import.meta.url so the mount works regardless of dsh web's cwd. Reserves the shared computer-use slot via ctx.computerUse.register and exposes MCP tools under mcp__computer-use-linux-nde-mcp__* (screenshot, list_windows, click, type_text, doctor, etc.). Two notable Nde fixes upstream of this provider: KWin caption+coords fallback for window targeting, and SnapshotCache that keeps AT-SPI single-wake per (app, pid) so Chrome is not repeatedly disturbed.

Sidebar Git panel for the DSH web GUI: Local Changes and All Commits views, branch, tag and stash management with fetch, pull and push dialogs, merge with conflict handling, and a zsh-style branch marker in the input bar.

Skill-creation console for the Web UI: fetches the official creator skills, hands the requirements to the Huawei Cloud, generic, or REST API creator, then scores the generated skill against a 10-point rubric and returns the itemised deductions to the creator until it reaches 8.5/10.

Registers OpenCode Zen free models as a native provider: the catalog is discovered live from opencode.ai intersected with models.dev pricing, and a detail page can re-fetch it or test which models answer. Declares no dependencies, so the host's pi-ai stays the only one.

Connects Trae enterprise models to DeepSeek Harness from a personal access token alone, calling llm_raw_chat directly with no trae2api or traecli process; fetches the model catalog from upstream on startup and shows remaining quota for personal packs and enterprise seats.

You.com web search and page-fetch providers for DeepSeek Harness, returning source lists and extracted page text through a configurable API key and endpoint.

Source Control panel in the DSH Web left rail: search, switch and create branches with ahead/behind counts, a topo-order commit graph, and a click-to-expand preview of any commit showing its files (A/M/D), insertions and deletions, message, author and timestamp. An always-on footer dock above Settings carries the branch dropdown and recent commits and follows the open session; fetch and fast-forward pull are one button, and a git_worktree agent tool creates, lists and removes worktrees.

Session-scoped research evidence ledger with sources, linked claims, open questions, and explicit user review; provides a tool, slash command, and conversation panel, with selected-claim Markdown export that omits excerpts, review notes, and local paths by default; does not fetch sources or verify their truth.

Makes the built-in web_fetch tool work when Clash / mihomo runs in TUN mode with fake-ip: it lets the fake-ip address ranges (198.18.0.0/15, fdfe:dcba:9876::/64, 2001:2::/48) past the public-address check that otherwise rejects them, while loopback, private and link-local addresses stay blocked as before. Works with no proxy environment variables and no Clash changes.

RSS/Atom reader with grouped subscriptions and unread/total counts, FreshRSS account sync over the Google Reader API with read/star written back, local image proxy, optional BYOK AI summary/translate/Q&A, podcast audio playback and full-text fetch.

Runs git in the Host process so push, pull and fetch work inside the agent sandbox; exposes 8 agent tools (status, diff, log, stage, commit, push, fetch, pull) and 11 slash commands including /git-status, /git-commit, /git-tag and /git-name-set.

Open a page, wait for it the way it actually needs, extract the readable article, and take a screenshot. Playwright is optional: when it is absent the tools fall back to a static fetch and say so in the result, because a page whose JavaScript never ran means something different from one that rendered. Content is chosen by scoring candidate subtrees on prose density rather than on tag names, so a container loses to the article inside it instead of winning by containing more of the document.

Keenable web search and page fetch for the built-in web_search and web_fetch tools, working with any model and no API key.

Composer-dock badge showing DeepSeek peak/off-peak pricing on a Beijing-time calendar whose China holiday schedule is fetched online at runtime (off-peak costs half the peak rate); auto-hides for non-DeepSeek models and cycles seven readouts on click.