Plugins

Invites people into one conversation through single-use links with no account: up to 20 guests discuss together and ask the AI, the shared fork runs read-only, and the owner can remove guests or end the share at any time.

A read-only Cordis Inspect provider that lets an agent see the interface it is driving: outline() reports which UI regions the running shell actually rendered, with occupancy, geometry and current or past failure state; snapshot() returns one region's rendered node tree (tag, role, aria-label, own text, geometry, computed styles) addressed by slot key or CSS selector; failures() keeps a history of regions that failed to render and whether they recovered. Regions are addressed by the anchor the shell already writes for every slot, so it needs no region list and covers regions added later or contributed by other plugins. No UI, no tools, no dependencies, no network access.

Read-only XLSX, XLS, ODS, CSV and TSV viewer for dock-files with worksheet tabs, sorting, filters, search and cell links.

Remote operations for the DSH Web app: manages SSH servers, collects hardware and process metrics, inspects logs with a read-only AI pass, and deploys a Git repo over SSH using git pull --ff-only plus a health check. Credentials are AES-256-GCM encrypted. Linux and macOS hosts; no Windows support.

Turns declared health readings — source, criterion, verdict — into one read-only verdict; an unreadable source is reported as `unknown`, never as healthy.

Three-window workbench for dsh web: chat, construct, and a read-only review window side by side for each workspace, per-window hooks, and an anonymous multi-model review that asks before it runs, groups findings by issue, and reports in Markdown.

DSH plugin: a four-entry learning flow in the session input bar — scaffold a preset, collect candidates, merge reviewed changes, and run a read-only workspace audit.

Read-only Automic Vault plumbing for DeepSeek Harness: the host ctx.av service (av CLI resolution + probe, scan/doctor/detectors/hardeners/list over the subprocess seam) backing the read-only vault tools in @hy-sde-org/dsh-tool-av — a standalone plugin wi

Read-only Git and SVN change review inside DeepSeek Harness, with repository browsing and side-by-side diffs.

Context compaction that keeps its receipts: a five-section handoff summary, a durable segment index, review tools that read compacted text back, optional working notes, and a read-only extraction exit. Mounts as the compaction-basic row's replacement; cha

Long-term memory for DeepSeek Harness, read-only as of 0.1.0: a scribe_recall tool that reads a plain-markdown memory room, path rules that refuse directory traversal, Unicode smuggling and NTFS alternate data streams, and a bounded index whose truncation is always reported rather than silent.

Session health check for DSH, read-only: scans the whole session library (totals, largest sessions, warnings for oversized sessions and event-count blowups) and deep-inspects a single session log (tail-balance / crash-tail check, tool-call/result pairing, event-type distribution).

Standalone read-only Linux server monitoring sidebar for DeepSeek Harness

Read-only enhancer for a file-based long-term memory library (markdown cards in git): a memory_find search tool, a small budgeted memory digest injected into the system prompt, and a settings page with library overview, health-check status and toggles.

Shared engineering skills, a read-only memory-bank dashboard with stages and SQLite audit browsing, and workflow request previews for DSH.

Database connections and SQL for DeepSeek Harness: register data sources, browse and comment schemas, run AST-checked SQL with a per-source read-only toggle, and render bar, line and pie charts, from chat or the Settings page.

One install for the community's verified DeepSeek Harness fixes: a bundle that mounts every guard and patch in a single profile line, plus a read-only projection-cache footprint report.

Local file recall: indexes the folders you choose into one local SQLite database, so 'where did I put that file?' is one query instead of a disk walk. Caches, VCS and program folders are pruned per directory; each folder keeps its own incremental anchor, so a folder added later is backfilled in full. Read-only: it never modifies, moves or deletes your files. Works on DeepSeek Harness 0.1.7 through 0.2.x, tested on 0.2.0-rc.1.

Adds an "approve for me" access mode whose approval requests are answered by an independent reviewer model instead of a person: the reviewer can read the workspace read-only, a reviewer that cannot run hands the request back to the human, and every decision is recorded with its rationale in an Approvals tab.

闲鱼 (Xianyu / Goofish) read-only MCP monitoring for DeepSeek Harness: drives the goofish-cli MCP server (stdio subprocess) and exposes read-only tools (search / item detail / listing / IM history) under mcp__goofish__*; write-capable tools (publish / delet

Diagnose duplicate DSH loader entry IDs before startup, report version-locked repair status in a read-only settings card, and apply or revert audited loader repairs through an external CLI.

Read-only in-conversation file preview for DeepSeek Harness: a session-authorized host Remote and a sanitizing browser modal, installed as one profile bundle.

Read-only MCP server over the DSH plugin-certification registry, exposing a plugin certification grade, its snapshot and the five-dimension evidence behind it.

Zhihu (知乎) for DeepSeek Harness: wraps the local pyzhihu-cli as 18 zhihu_* tools — 14 read-only (search, hot list, question, answer, user, feed, topic, notifications, collections) plus 4 publishing tools that are not registered until readOnly is turned off — with a web panel in the sidebar for login, config and lookups.