Plugins

Deterministic prompt-injection interception: tool results from file reads, repo searches and web fetches are scanned before they enter model context; high-severity findings quarantine-wrap or block, and credential-material files quarantine on the path alone.

Deterministic network egress gate: web fetches and searches are checked against a destination allowlist in tools/pre-execute and denied before they run; shell fetch-verbs are observed (enforcement opt-in).

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

GitHub issue service for DSH: turns a telemetry failure analysis into a uniform issue report, builds a pre-filled new-issue URL that is shortened when it would exceed a configured length budget, rewrites a plain description into a structured issue with the deployment's model, and closes the intake loop by listing the open issues that carry a claim label and handing each one to a fresh session as a one-shot automation task on the host's Schedule service, which delivers the rendered prompt into that session when the task comes due and shows up on the Web Automation tasks page (a host with no Schedule service admits the prompt directly instead), skipping issues an earlier pass already dispatched, leaving the local day uncommitted when every dispatch is refused so the next startup tries again, and repeating the pass on the first start of each local day when autopilot is enabled.

Prints every plugin in the DeepSeek Harness loader tree at boot, with the exception text for anything that failed, and checks dependency version drift, profile config validity, web port reachability and registered tools.

Records every session as one readable Markdown timeline inside the session workspace - the full request sent to the model (system prompt and plugin injections included), user input, replies, reasoning, tool calls and results, file reads and writes, web searches, skill loads, command runs and token usage - with a review page, a per-session tab and configurable capture scope.

Agent Studio for DSH Web: configure models, prompts, per-plugin tool bindings and Skills; trial-run with editable tool results and run history; preserve session capability snapshots; export standalone presets; draft Agents with a guided creator preset.

DSH Cordis computer-use provider for the ZTE Nde desktop. npm install auto-fetches the musl binary built by computer-use-linux-zte-nde (v0.7.7-nde.3) into the package's own bin/ via postinstall; resolveCommand() resolves the cordis command path against import.meta.url so the mount works regardless of dsh web's cwd. Reserves the shared computer-use slot via ctx.computerUse.register and exposes MCP tools under mcp__computer-use-linux-nde-mcp__* (screenshot, list_windows, click, type_text, doctor, etc.). Two notable Nde fixes upstream of this provider: KWin caption+coords fallback for window targeting, and SnapshotCache that keeps AT-SPI single-wake per (app, pid) so Chrome is not repeatedly disturbed.

Sidebar Git panel for the DSH web GUI: Local Changes and All Commits views, branch, tag and stash management with fetch, pull and push dialogs, merge with conflict handling, and a zsh-style branch marker in the input bar.

Skill-creation console for the Web UI: fetches the official creator skills, hands the requirements to the Huawei Cloud, generic, or REST API creator, then scores the generated skill against a 10-point rubric and returns the itemised deductions to the creator until it reaches 8.5/10.

Turns a streaming assistant reply into short blips, one per character at a configurable minimum spacing, for the reply text only, and keeps sounding when the window is minimized, covered, or in a background tab. Two built-in voices, or a custom one shaped by waveform, or loaded from an audio file.

Push-to-talk dictation for the Web composer: hold a hotkey to record and the transcript is written into the draft through DSH's own speech Remote (local SenseVoice), with an optional auto-send.

Keyless web powers for any MCP client: web_search, JS-rendered web_extract over dual CDP Chrome with proxy failover, and 7 real-browser page_* tools in an isolated context.

OpenAI-compatible web search provider for the built-in web_search tool: one baseURL/apiKey/model config powers Qwen Token Plan, OpenAI and any Responses API gateway.

Annotate pages inside the existing Harness Browser: click or drag to select, comment or ask, then send marked screenshots or DOM location details to the current session. While enabled it replaces the official Browser, Chat and Layout providers; targets Harness 0.2.1-alpha.2.

Chat with the DeepSeek web app (chat.deepseek.com) in a native DSH panel — a real browser drives the site on your existing web login, with streaming replies, deep-thinking and smart-search toggles, and image or document attachments. Conversations can be recovered from the web side, exported as Markdown, and distilled or replayed into a harness session, and the agent reaches the same web chat through six tools (dschat_status, dschat_send, dschat_stop, dschat_recover, dschat_import, dschat_transfer).

CCReach capability-search provider for DeepSeek Harness, letting agents discover data sources, tools, APIs, MCP servers, skills and workflows.

MCP server manager for DSH: nine mcp_manager_* tools, a CLI and a web panel that list, validate, probe, add, edit, enable/disable and remove servers in ~/.dsh/cordis.patch.yml, search and install servers from the official MCP Registry, and locate or rotate stored credentials.

C++ runtime info probe for Windows via CDB: cpp_trace prints variables at multiple breakpoints in one session (replaces hand-written print), cpp_probe dumps the call stack at a conditional breakpoint. Install: dsh plugin --profile web add dsh-cpp-probe.

Literature search tools for DeepSeek Harness: four model-facing tools — paper_search, paper_get, paper_citations and book_search — over OpenAlex, arXiv, Crossref, Semantic Scholar and PubMed, with open-access PDF resolution through Unpaywall.

Shows a Spark Scope card at the bottom of the dsh sidebar: model server decode and prefill rates with sparklines, running and queued requests, KV cache, TTFT and TPOT p95, and GPU temperature, power, load and memory for each DGX Spark node. Read-only; needs a running Spark Scope server. Works in dsh web and the desktop app.

Local-folder wallpaper for the DSH Web UI: it defaults to your Pictures library (C:\Users\<you>\Pictures) and the host serves those images over same-origin HTTP, rotating one every N minutes (0-1440, default 5) in a shuffled pass with no repeats; the settings page under Plugins picks a different folder through the native system dialog, and tunes image opacity (100%), darkening scrim (25%) and panel opacity (15%) with changes applied live. Dialogs, modals and menus keep the default opaque background so text stays readable. Reads .jpg .jpeg .png .webp .gif .avif .bmp straight from disk, and keeps per-user settings under $DSH_HOME so upgrades never ship your folder path.

ChatGPT-like conversation layout for the DeepSeek Harness Web client: a 768px centered column, right-aligned neutral bubbles for user turns, full-width assistant text at 16/28, and rounded code blocks with their own copy banner. Adds semantic inline markup (`==confirmed==`, `!!risk!!`, `++key word++`, with bare 4xx/5xx codes highlighted automatically) and line-start check/warn/tip callouts; a fast/thinking chip in the composer that switches the model reasoning effort through ctx.modelDirectories; and sidebar contrast, where the selected session gets a tinted row with an accent bar and workspace folder icons are colored.

Token statistics for every stored DSH session: a Host service folds the durable session logs into a persisted checkpoint and serves them over one read-only HTTP route, and the Usage settings page paints the saved aggregate immediately, then updates it in the background. Days are bucketed by hour behind a date picker, next to a trailing window with per-model breakdowns, request and web-search counts; no cost or pricing model.