Plugins

Multi-bot workbench for DeepSeek Harness: bridges the sdk-bots orchestration gateway (group chats, single bots) into the dsh web shell with official-styled UI.

保险产品分析对比专家(险析君)·DSH插件｜条款解读/性价比/产品横向对比/保障规划(含重疾+医疗)，中立公允第三方。Insurance product expert (InsureGuide): clause analysis, cost-effectiveness, comparison & coverage planning.

Self-organizing AI second brain for Obsidian, as a single DeepSeek Harness plugin. Merged fork of dsh-plugin-wiki-skills + dsh-plugin-wiki-tools, targeting parity with claude-obsidian.

Explains which layer killed a failed turn: times every model request (first byte, longest silence, total) and combines that with the error to name the culprit (dsh idle watchdog vs Node undici timers vs SDK timer vs server crash, context overflow, gate queue, tool timeouts, failed compactions) and the exact setting to change; verdicts in the DSH terminal plus a /why command, subagents included.

DeepSeek Harness 插件：生成前注入「人味」风格约束 + AI 味检测报告（纯代码、零 token、结果可复现）。dsh plugin: human-flavor style injection + AI-flavor detection report, judged by code.

DeepSeek Harness (DSH) 会话内图片渲染插件：全局 show_image 工具 + 点击放大 lightbox。 | Inline image rendering plugin for DSH: global show_image tool + click-to-enlarge lightbox.

Cloudflare MCP connection for DeepSeek Harness: official OAuth 2.0 flow (dynamic client registration + PKCE) against mcp.cloudflare.com, Cloudflare API tools under mcp__cloudflare__*, and a web settings panel

基于隐藏影子 jj 仓库的会话级文件快照与回退，并内置 AI 改动文件审查：侧边栏 diff、聊天轮尾卡片、hunk 级撤销/重做、终端写盘审计（检查点窗口归属 + 轮末检查点精确归属 + 写盘归因 + 可撤销）、Code Mode 录制（融合 dsh-file-review-tab）。

DeepSeek Harness plugin: per-day token usage statistics — 13-week heatmap, stacked daily chart, /token-usage command

Cross-session knowledge for DeepSeek Harness: ctx.knowledge service + knowledge_* tools, SQLite FTS5 trigram retrieval (CJK substring) with L1 query expansion. V1.11 contract (write/update/search/list/delete + budget + events + error codes).

Local and remote SSH terminals for DeepSeek Harness Web with three permission levels, human approval for risky AI commands, and encrypted credential storage.

Teaches Herdr about DSH panes: reports agent working/idle/blocked state — including the blocked state DSH itself lacks — enabling panel jump and --wait. (Herdr integration / agent state display / panel jump)

Bridges WeChat private messages to DSH with two-way text, image, file, and media transfer, aiming to restore the native DSH experience in WeChat.

Standalone mobile surface for dsh: scan-to-pair device trust, realtime SSE sync, three-channel completion notifications (in-app / Web Push / Server酱·Bark·Telegram), offline outbox, approval & question panels, per-provider usage meters, PWA; a native narrow-screen phone UI.

Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.

Runtime security guard for DSH: loader import confinement, HTTP Host header validation, and source patch for VM sandbox escapes (4 CVEs). AI-assisted.

Tiered task queue as the single source of truth for DSH↔Hermes work (reset > approve > review): enqueue tools for all submission paths, lease/claim model with concurrency 1, priority aging against starvation, atomic busy mutex, and a Hermes-side consumer (cron */1 + monitor gating) that drains tasks, writes review-handoff requests with single-slot checks, and invokes the reset agent.

Auto-approval agent for DSH permission requests: rule layer (denyAlways/allowlist) plus Hermes Pro semantic adjudication with quick-fail retries, fail-closed to human when Hermes is unavailable, rejection feedback returned to the requesting session, and approve tasks enqueued into the task queue with a shared busy mutex.

Replaces the headless startup to add --model provider/model, --resume <id|latest>, --continue and --session-info flags to dsh headless runs.

Plays a chime when the AI asks a clarifying question (a `?` / `？` in the message, or an `ask_user_question` tool call). Synthesized via Web Audio API, no audio file, works on every OS.

Reminder bubbles beside the input for DeepSeek Harness: any plugin or AI can push reminders (text/link) with chat-style stacking, drag-resize, AI summary, visual customization and random outfit presets. A static profile plugin available in every preset without disappearing on restart.

Git Changes tab for the DSH web GUI: staging, diffing, AI-drafted commit messages, branch/merge/stash/worktree operations and sync, with live updates via fs.watch plus a changeToken poll.

Maintains reusable named subagent profiles for DeepSeek Harness and runs them with per-profile model, reasoning effort, and agent-preset settings.

Task Runner mode for DeepSeek Harness: the main agent decomposes large tasks into independent subtasks, dispatches them to subagents (default local model) in fresh short contexts, and synthesizes results; concurrency and worker/orchestrator models are configurable in the settings panel.