プラグイン

公式ストレージドメイン経由 DeepSeek Harness 用クロスセッションメモリ:メモリは ctx.storage(storageDomain テーブル)経由で永続化、登録されたセクション(memory:recall)経由でシステムプロンプトに注入され、memory_save / memory_forget ツールでエージェントが自身のメモリを読み書き(maxMemories 設定可能)。

DeepSeek Harness 向けのトークンアテンション管理パネル：タスク/日/週/月ごとのトークン使用量とコスト追跡（入力ヒット/ミス、出力、推論）、DeepSeek のピーク/オフピーク料金、タスク種別の認識、セッション切り替え・引き継ぎ作成・コンテキスト圧縮のタイミングに関する助言。

カスタム API モデルの推論努力階層マネージャーとセッション横断の好みメモリ：設定 → モデル内のインライン low/medium/high/max トグル、アトミックな設定書き込み付き。

DSH プラグインインストール・セキュリティゲートの静的バンドル形式です。フェイルセーフポリシーで cordis_define/cordis_run をレビューし、レビュー/監査ツールおよびブラウザ承認ポップアップ (agree / agree+whitelist / reject、agree+whitelist はプラグインファミリーを tru に書き込み) を提供します。

DSH Web用のピクセルアートの推論努力スライダー。0〜100の連続ドラッグ、16msスロットル書き込み、スナップでレベルコミット、そしてスライダーの動きに合わせて点火するWebGLの残り火の炎。

DSH用のremove-pdf-background-grayスキルを登録：画像ベースのPDF内のグレー/オフホワイトのスキャン背景を白くし、解像度、ページ形状、アンチエイリアス処理されたテキストエッジを保持（可逆Flate書き戻し）、単一のPythonスクリプト（pypdf + Pillow + numpy）で実現。

Xiaohongshu/REDのバズノート用エージェントスキルをバンドル：ホットノート調査、ノートの生成/書き換え、検証、認証済みアカウント分析、QRログイン、制御された公開。

開発前にローカルコードと GitHub/npm を調べて再利用可能な実装を探し、再利用と書き直しを比較し、アーキテクチャの結合度を確認する。

ハーネス自身の基盤上にある、ワークスペースごとのネイティブメモリ: storage-domain JSON ユニット上に、事実と上限付きの常時有効プロフィールを保持し、書き込みは承認ゲート付きで `(sessionId, seq)` の引用を伴います。決定論的な想起と、過去のセッションに対する session-query FTS を備え、外部サーバーもカスタム SQLite も不要です。

セッションヘッダーから、エージェントが書いたすべてのファイルをレビュー：ファイルごとの hunk と、変更とは別にカウントされる拒否された書き込み。

セッションスコープのMarkdownライティングパッドを会話の横にドッキング。編集/プレビューモード、選択ベースのAI書き換え、差分レビュー、元に戻す、下書き復元機能を備えています。

エビデンス優先の運用キット: 6 個の読み取り専用ツール（機能カタログ、段階的ワークフロー計画、パッケージ化された Skill リーダー、範囲限定のローカルメモリ検索、リポジトリリリース監査、リリースチェックリスト）と 5 個のパッケージ化された Skill——計画と監査のみで、リモートへの書き込みは一切行わない。

Claude Code's auto memory in DeepSeek Harness: the index in every request, and tools to write and edit it

Second-model gate on the assistant turn, installed in two parts: copy engine/ into ~/.dsh/plugins/ and mount it by absolute path in the profile patch (the bundle itself only installs the settings panel), then switch off the default dry-run mode that only logs verdicts. Once active, a separate judge call scores the draft against the numbered criteria (0-10 each); any criterion under 6 fails the turn and sends it back for a rewrite, up to 3 rounds by default. The web panel edits criteria and thresholds, and every verdict is appended to an audit log.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

A consent-gated personal profile store: people are indexed by name, entries by person and key, and no profile record is read before the current session is authorised. Sensitive entries come back masked unless the user authorises that tier separately; credential-like values are refused at write time. Ages and next birthdays are computed at read time, so asOf restores the answer for a past date, and facts that rot (height, weight, address) carry freshness warnings. Five profile_* tools plus a settings page to browse, edit, delete and revoke grants.

A memory plugin that forgets on purpose: short-term memories expire after 48h, long-term ones are rescheduled by Ebbinghaus/SM-2 curves and rarely-used ones fall asleep instead of bloating your context. Long-term writes stop in an approval center, so the agent cannot rewrite your persona on its own.

Prompt booster for the composer. Left-click the composer button and the draft is lightly polished and replaced in place (undoable, no popup). Right-click opens a menu with 8 built-in modes plus your own, where each mode's template can be edited or new modes added (saved on the host), and the model used for the rewrite is picked from the live dsh model list. Other modes show a before/after preview. Based on rongxingda/dsh-prompt-enhance (Apache-2.0); do not install both — both add a composer button and share Ctrl+Alt+E, so disable one of them if the upstream is present.

Adds two enhancements to DSH ask_user_question choice cards: right-clicking an option expands a per-option note that is merged into the submitted custom answer, and a footer field asks a side question answered by a fork subagent from the session context, read-only, with no write-back. Keeps left-click, skip, paging and the countdown working as before, and only claims generic choice cards, not plan review or approval cards. Supports DSH 0.2.x from 0.2.0-rc.1 (verified on 0.2.2-rc.1) and Node.js 20+. Derived from buaaflyaway/dsh-question-note (MIT) and inspired by MichengAI/dsh-btw (Apache-2.0); do not install it together with dsh-question-note — both take over the same ask_user_question card.

Optimize prompts in the DeepSeek Harness composer: identify missing requirements, insert a sentence from 90 method cards, or compare and edit a full rewrite before you send.

A sticky-note wall in the DSH sidebar: nine paper colors, categories, search, archive, to-do checklists with stable item ids, and agent read/write tools.

Brings the rtk token-saving setup from Claude Code to DeepSeek Harness: commands rtk can rewrite are rewritten, and builds, tests and logs it cannot reach are compressed; git, cargo, npm and pytest are covered. Compressed output tells the model what was elided and how to recover it; when the sandbox cannot reach the rtk store the original is saved and its path given. Savings show without a command: a pill below the composer, with `/rtk stats` for detail. When a rewrite is unreliable the original command runs as usual: if rtk cannot run, or the returned command would drop arguments, nothing breaks. The rtk binary ships with the package, so mainstream platforms need no separate rtk install, unlike most other rtk plugins.

Qoder-style workspace mode and branch chips on the session row; picking a branch arms it, and the first message creates a dedicated git worktree and moves the session into it. Windows only: the write grant runs PowerShell Set-Acl; elsewhere Worktree mode reports an error and stays in the main checkout.

Multi-round deep research in the DSH sidebar: each round fans sub-questions out to parallel sub-agents, then continues from where the last round stopped and writes a cited report.