Plugins

Audits every plugin HTTP route in a profile for a browser-trust fence: plugin routes win the web server's longest-prefix match ahead of the /api gateway, so they never see its trust check and must pin the Host to loopback themselves. Grades PASS/WARN/FAIL per route and fails a fence that compares Origin to Host without pinning it (bypassable by DNS rebinding). Ships as a CLI for CI and a route_fence_scan tool.

Crash protection for installed plugins: crash cards with one-click disable, static pre-flight inspection, black-box crash telemetry, and a safe-mode rescue profile for a broken UI.

Auto-approval agent for DSH permission requests: rule layer (denyAlways/allowlist) plus Hermes Pro semantic adjudication with quick-fail retries, fail-closed to human when Hermes is unavailable, rejection feedback returned to the requesting session, and approve tasks enqueued into the task queue with a shared busy mutex.

Read-only repository fact scanner kernel for DSH analysis plugins: deterministic probe / file index / modules / dependencies / entry points / symbols / graphs and git facts over a stable JSON schema (CLI + library + skill runbook).

Reminder bubbles beside the input for DeepSeek Harness: any plugin or AI can push reminders (text/link) with chat-style stacking, drag-resize, AI summary, visual customization and random outfit presets. A static profile plugin available in every preset without disappearing on restart.

Maintains reusable named subagent profiles for DeepSeek Harness and runs them with per-profile model, reasoning effort, and agent-preset settings.

Task Runner mode for DeepSeek Harness: the main agent decomposes large tasks into independent subtasks, dispatches them to subagents (default local model) in fresh short contexts, and synthesizes results; concurrency and worker/orchestrator models are configurable in the settings panel.

Plan-and-execute orchestration over ReactLoopAgent — turns a goal into reviewable steps with a web UI plan card.

Preset workflow template library: 12 reusable orchestration script templates with wf_template_list / wf_template_search / wf_template_run / wf_template_validate tools and static template validation.

DSH session workflows for packaging verifiable capsules, evaluating reusable Skills, and comparing controlled session trajectories.

Folds the DSH skill catalog prompt surface with KV-cache-stable rendering, BM25/bge-m3 hybrid skill search, and optional auto route hints.

Model-facing image-generation tool with a configurable channel and normalized image parameters.

Adds image input and recognition through configured DSH providers or an OpenAI-compatible endpoint.

Switchable web-search provider for DSH: native DeepSeek web search or an OpenAI-compatible custom backend. Installation automatically routes DSH web searches to the plugin; only provider, API key and model are required. Published on npm as @lp181818/web-search-advanced@0.1.3.

Resident-index grep for DeepSeek Harness that shadows the built-in grep/glob tools under the same names: repeated content searches hit an in-memory index ranked by access/modification frecency, and glob serves the built-in ripgrep semantics when available, falling back to the index otherwise.

Route every host-process undici fetch through a local HTTP(S) proxy while keeping localhost and China-reachable APIs direct.

Web search provider powered by ZAI GLM MCP: search and fetch via Open BigModel API with credentials auto-injection from ~/.dsh/.credentials.yaml or environment variables — no API key in config files.

Folds the tool-definition prompt surface when many MCP servers are installed: a static KV-cache-stable catalog plus BM25/bge-m3 hybrid tools_search and batch tools_schema expansion, so hundreds of tools stay discoverable without spending their full schemas every turn.

This plugin locates the root cause of a failed DeepSeek Harness agent session and produces a shareable diagnostic report.

Adds a structured TextIn xParse tool and document parsing skill to DeepSeek Harness, supporting document parsing, cached-content navigation and durable multi-document tasks, with AppKey or Device OAuth authentication, paid-operation approval and bundled cross-platform CLI binaries.

Native WCAG accessibility scanner: runs axe-core over local HTML files / build output / URLs and reports violations (rule id, impact, WCAG 2.1 mapping, element targeting, fix suggestions) as Markdown/HTML/JSON. Read-only, CI-able.

Persistent conversation memory for DeepSeek Harness: memory tab, automatic AI naming, per-AI privacy isolation, sidebar AI names, and automatic experience archiving. A static profile plugin available in every preset without disappearing on restart.

Cumulative token usage tracking for DeepSeek Harness, with per-model and per-day breakdowns, a settings-page dashboard and an online-changeable data directory.

Aipx toolkit: skills plus a Hub Console that fronts every MCP server with ~4 meta tools — server pool health, per-tool enable/disable, a tool catalog, and a search playground showing exactly what mcp_search hands the model.