Plugin

Static and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtime interception of dangerous tool calls, /scan command, plugin_scan tool, web panel, and allowlist.

One-command bundle of the three AgentFrame plugins: memory-director, compaction, and aura-scheduler together.

Manage and organize your agent skills by category, tags and collections in DeepSeek Harness, with a settings panel and a slash-command folder picker.

Update checker (npm edition): a settings page comparing local and latest versions of @deepseek-ai/dsh and every installed plugin, with a red-dot nav reminder and ready-made update commands.

Bidirectional Feishu/Lark channel for DeepSeek Harness: persistent conversations, true streaming replies, 40 MCP Feishu tools, slash commands, and an IM-bot status tab in the plugin settings.

Cron/one-shot scheduled tasks: run shell commands or fire webhooks on a schedule, with optional ServerChan/DingTalk/Feishu/webhook delivery of results.

Clusters arXiv, first-party lab, official artifact, hardware-vendor, and opt-in X signals into versioned release evidence bundles, then gates claim-level reproduction on commands, artifacts, metrics, and verifiers.

HTTP/API debugging toolset: full-control HTTP requests (method/headers/body/auth), curl command parsing and one-step execution, in-session request history with side-by-side response comparison, pagination-aware Link headers, and DeepSeek-branded UI cards (optional dsh-http-tools-ui).

Revisore diff incrementale per DSH: dopo l'approvazione di un batch, vengono mostrati solo i nuovi cambiamenti dal checkpoint, con un pannello di revisione web e un comando `/review` che inietta feedback di ritorno all'agente.

Front-end Pi TUI (framework per terminale a rendering differenziale): markdown in streaming, comprimibilità del pensiero, schede degli strumenti, comandi slash, overlay di approvazione/domanda, store di sessione dsh condiviso

Plugin provider Command Code per DeepSeek Harness (dsh) — funziona con ogni piano Command Code, incluso il piano Go da 1$; usa la chiave API di autenticazione Studio su /alpha/generate, non la Provider API

Hub globale delle skill per dsh: aggrega le skill di Claude Code, di progetto e .skill-package in ~/.dsh/skills con importazione per riferimento/copia e utilizzo tramite menu slash

Bundle ACP di DeepSeek Harness per la delega dell'editor: un profilo server stdio Agent Client Protocol avviabile con un comando, che condivide le credenziali dsh e i log di sessione

La CLI compagna mancante per DeepSeek Harness (dsh): gestisci i server MCP con un solo comando — add/list/remove/test con controlli di connessione in dry-run, più importazione una tantum da Claude Code / Codex. Si monta anche come plugin dsh in modo che l'agente possa gestire MCP da solo

Un livello di permesso intermedio per DeepSeek Harness tra workspace-write e danger-full-access: approva automaticamente i comandi innocui e le operazioni destinate ad aree attendibili configurate, al di là del workspace corrente

/repro esporta un pacchetto del problema minimo, ripulito dai segreti e riproducibile: il log di sessione, i comandi falliti e il diff Git

Un pannello di comandi flottante che elenca ogni comando slash di DeepSeek Harness come pulsante eseguibile, ordinato per utilizzo

AlphaRSI — three-role self-improvement loop that evolves the training recipe of alpha sequence models. Operator runs walk-forward, Evaluator grades with OOS RankIC, Refiner proposes hyperparameters via TPE Bayesian search; only strictly-better recipes are kept. Offline one-command run, data bundle shipped with sha1 reconciliation, GPU auto-detect. Ships one skill.

End-of-chat visual storyboard: a storyboard tool renders a self-contained HTML card (inline SVG diagram, numbered flow, facts grid, timeline) from a JSON spec, writes it under ~/.dsh/storyboard/<session>/ and opens it in the sidebar; a system-prompt section and a /storyboard command trigger generation. Server-only, zero runtime dependencies.

Dynamically trusts every Host header that actually arrives and flips the default web binding to 0.0.0.0: wildcard or unenumerable entry domains work without editing the start command, the authentication layer is untouched, and hosts are evicted by LRU beyond a capacity cap.

Query and manage JumpServer through conversation: assets, users, accounts, permissions, sessions, command audit logs, command filters, and RBAC roles, authenticated with an AccessKeyID/AccessKeySecret pair (HTTP Signature).

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Deterministic engineering orchestration runtime for DeepSeek Harness: the orbit_controller tool and OrbitService run Commander, Executor and Smart Watchdog children through PLAN, EXECUTE, EVALUATE, bounded correction and runtime recovery, with durable state in <project>/.cx/state.json.

Exa-backed web search provider for the ctx.web seam, with Exa Dynamic Highlights on by default and the Exa-Beta header that setting requires; exposes all eight Exa retrieval types, adds an /exa command to change highlights, search type and result count at runtime, and registers an exa_search tool that takes its own result count.