Plugins

A dsh status plugin with host-plane and browser halves: harness runtime health (process, listener, API-key presence, memory, uptime, plugin inventory) as JSON plus server-pushed SSE alerts, surfaced as a header badge with an expanded panel in the Web UI

DeepSeek Harness plugin: web browsing tools (markdown / screenshot / pdf) powered by Cloudflare Browser Run — real headless Chrome with JS rendering, login sessions and WebMCP support.

Self-editing desktop workbench for DeepSeek Harness: a full dsh web replica with an edit mode in which the agent modifies the workbench (patch layers, plugins, UI) with hot reload.

/repro exports a minimal, secret-scrubbed, replayable problem bundle: the session log, failed commands, and Git diff.

The `dsh pm` plugin manager: multi-source search (awesome list + GitHub + npm), install/remove/update per profile, and a doctor audit of manifests, bundle patches, and version drift.

Enforced pain-point gate: after two non-converged experiments it injects the three questions, denies non-investigative tool calls until answered, and blocks same-direction retries.

Scans skills and MCP configs for prompt injection, homoglyphs, hidden Unicode, dangerous shell, and credential leaks.

Render Markdown to a standalone, self-contained HTML page: an `md_html_render` tool that works in a headless profile, plus a web drawer to browse, preview, edit and export local `.md` files; both share one renderer, with no runtime dependencies.

Read-only agent-fleet credential hygiene audit: credential-file permissions, embedded credentials in git remotes (masked in output), and provider token literal counts; zero-dependency and deterministic.

Text hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.

A floating command deck that lists every slash command in DeepSeek Harness as runnable buttons, sorted by usage.

内置 provider / 模型显示名的全量数据库：载入时按环境里实际启用的 provider 与模型覆盖显示名，只影响 UI，不改路由、请求与凭据。

One-click polish, expand and autopilot for the DeepSeek Harness composer: rewrite the draft with the model the session is switched to, expand a one-line wish into a task brief, or let an AI drive a goal round after round.

Runs one-night werewolf games inside DSH: deterministic dealing, night order, card swaps, voting and settlement, with a room UI and private night prompts. It vendors modified copies of baixianger/dsh-chat and baixianger/dsh-bridge; uninstall those two first, because enabling both registers the same dshChat/dshBridge services.

Opens the official Genshin Impact site and downloads the official launcher when DeepSeek Harness starts.

macOS always-on-top desktop pet for DSH Desktop: a bundled DeepSeek whale sprite with Codex-compatible skins, Settings gallery install/import, a recent-session ball, right-click New Session and a configurable global shortcut (default Command+Option+N) for a new-session ask box, and a first-run Electron download (~120 MB) into ~/.dsh.

Power Mode typing effects for the DSH web composer: caret particles and glowing character echoes, a heat ramp from amber to red with rising embers as the combo grows, a combo counter over visible glyphs, and a synthesized key tick with a heavier Enter impact.

A Windows pixel Madara desktop companion with 16 animation clips driven by Harness task events, using the original BigFish runtime dependency.

Checks enabled plugins for newer versions at startup, lists them in a corner card and upgrades them all with one click, reporting per-plugin success or failure; resolves the bundled dsh CLI on macOS, Windows and Linux instead of assuming a Windows executable.

SSH host manager for DeepSeek Harness: browse ~/.ssh/config, store AES-256-GCM encrypted passwords, run batch commands and SFTP, and open interactive PTY terminals in persistent sidebar tabs.

Android device workbench inside DSH: read the UI text tree, measure animation motion, tap/type/swipe by text, id or ref, mirror the screen into the right sidebar, and circle an area to send it back to the conversation. Requires adb (Android platform-tools) and ffmpeg on the host; the device-side helpers are bundled, and the OCR fallback is macOS-only.

A per-command sandbox allow-list for the bash tool: a rule names a CLI and the writable roots it gets, so allow-listed programs such as lark-cli and gh run inside the kernel sandbox with the workspace plus those roots appended. Unlike plugins that answer the approval for you or that widen the writable set for every command, the grant here is scoped to the matched command, the workspace stays writable, and other commands keep their exact behaviour. Matching is by write footprint rather than by command string, so write-neutral pipes like `2>&1 | tail -N` still match; rules are edited from a Settings page or the Plugins row. Overlays cover Seatbelt, bubblewrap and Landlock; on Windows the writable root is swapped for $HOME instead.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

Sends a VS Code selection or file path into the open DSH conversation as an @path reference with its line range, inserted at the composer without sending it. Requires the companion VS Code extension shipped as a .vsix inside the bundle (one-click install from the composer, or install it by hand).