Plugins

Conflict diagnosis and repair for DeepSeek Harness plugins. Builds a capability graph of the running Loader profile and of the on-disk cordis.patch.yml layers, comparing imports, peer ranges and config against the host that is ACTUALLY running rather than the profile's possibly-stale copies, and reports the conflicts that fail silently: a fiber stuck PENDING on a service no plugin provides, a browser half injecting a client module nothing provides, a tool id two plugins both register, duplicate Loader entry ids, a row disabled by one layer and re-inserted by another, an import of a host subpath the running host does not export, and a cycle among inject declarations. Every finding carries its evidence, a confidence grade for who owns a name, and a repair with a risk grade — verify it with a dry-run difference table, or take the individual .patch.yml files that --fix-out writes (never auto-loaded, so picking wrong breaks nothing).

Registers one `ocr` tool for text-only models: it runs the offline script bundled in the repo over a single image or PDF and returns the recognized text — Windows native OCR first, then RapidOCR, then Tesseract. Recognition runs locally with no network request and no API key. Needs Python 3.11 on PATH plus `pip install winocr pillow` (winocr is the preferred engine; RapidOCR and Tesseract are fallbacks). Per-line results for images, per-page results for PDFs.

Publishes an ordered system prompt section that names wsl as the command executor to reach for first, so the agent prefers WSL over PowerShell on Windows. Registers no tools, and only advertises executors the agent can actually call.

Time-based model routing: a settings panel defines weekday peak and off-peak windows and the provider/model each one uses, the choices are read from the harness registry (API keys and subscription logins alike), and a global switch decides whether that policy sets the model and reasoning effort of every request. The switch is independent per session, each session row carries a light showing its own state, and the settings panel names the model in force right now and why. A day no window matches — every weekend and holiday — uses the primary model of the first plan; the advanced thinking model is a separate axis, used only when a session itself asks for max reasoning.

Skill browser and switchboard for the DSH web GUI: a sidebar entry lists skills from configurable source directories as cards, clicking a card opens the full SKILL.md, and the per-card switch writes disable-model-invocation and registers or removes that skill in the agent skill catalog, so the model can load exactly the skills that are switched on. It also recognises WorkBuddy expert-team folders and shows avatar, tags, quick prompts and members, registering its lead prompt as a skill when switched on. Source directories are editable in the panel.

Registers the TypeSafe/Jev (System One) skill into DeepSeek Harness's global skill layer, so every session can classify, route, score, extract and gate on confidence using typed judgments instead of prompt-and-parse. Ships no API key; the user supplies OPENROUTER_API_KEY.

Reads the session event stream, with no extra model calls, and turns corrections, failures and fixes into pending lesson candidates. Every candidate is judged against written criteria and carries the reason it passed or was refused; only confirmation writes a skill, and only through the single validated writer `learn_skill_manage`. An idle curator marks unused skills stale and archives them by moving rather than deleting, and spares any skill that is still being loaded. Five tools: `learn`, `learn_review`, `learn_curator`, `learn_skill_manage`, `learn_skills`. Registers a prompt section stating the criteria, and a tool guard that refuses direct edits to skill files so the writer cannot be bypassed.

Adds a right-click menu on file references in chat output, listing registered applications with icons for open-with, revealing files in the file manager, and copying absolute or relative paths resolved against the session workspace, while code blocks, plain text and external links keep the native menu.

PostgreSQL expertise for DeepSeek Harness: 11 curated pg-aiguide skills from Tiger Data registered natively, plus the pg-aiguide MCP server for version-exact manual search.

Wraps the Scrapling Python library in up to nineteen model tools, registered by probed capability: real-browser rendering for JavaScript-only pages, CSS/XPath extraction that returns data instead of Markdown, self-healing selectors, reusable login-state sessions, XHR capture, page screenshots, gated browser actions and a domain-scoped crawler with content/sitemap/feed/Shopify modes on the official job backend. It can also replace the built-in web_fetch / web_search, and serve the same tool table over MCP. Requires Python 3.14+ with Scrapling installed; the browser tools also need a Chromium engine for patchright, which an optional CLI installs on macOS arm64 only.

Drive local Origin/OriginPro from chat via 27 MCP tools: import .dat/.csv/.txt and CHI workstation .bin files, plot, style, fit, and deliver PNG/TIF/SVG/PDF plus an editable .opju project, with read-back verification on plots, styles and exports. Requires Windows, Origin/OriginPro 2021+ and Python 3.10+, plus `pip install originpro numpy` into the interpreter dsh launches: without the package every tool answers `missing_originpro`, and without an interpreter on PATH no tools register at all.

Read-only Windows registry access from WSL, restricted to an allowlist of key prefixes; list a key's values or its child keys.

Registers external databases and document corpora as callable model tools: a per-source access boundary, a credential reference ledger that never stores values, and a fetch ledger that keeps fingerprints and content hashes instead of payloads.

Replaces the sidebar workspace region with a two-tab browser: several workspace roots stay registered side by side while conversations are filed under the real working directory of each session, with a read-only resource tree that previews files in the right sidebar. Hiding is per tab, display-only and fully reversible; a resource folder or file can be copied as a path or dragged into the composer as a native reference, and @ completion covers every registered root rather than the working directory alone.

Graph runtime capabilities for the DeepSeek Harness: register LangGraph compiled graphs as DSH tools, plus a graph-driven routing agent.

Drives a Chromium browser you are already running — Chrome, Edge, Brave, Vivaldi, Opera, Chromium, Arc or Thorium — over one long-lived CDP connection, so the remote-debugging approval is asked once instead of per command. Commands for tabs, navigation, JS evaluation, DOM snapshots, clicks, typing, screenshots and CSS/DOM/pixel assertions go over a loopback HTTP route that the agent calls with the shell tool it already has, so no new tools are registered, and the plugin registers its own usage skill with no runtime dependencies.

Russian interface translation for DeepSeek Harness (DSH): registers complete ru dictionaries for the DSH platform and its plugins, adds Russian to the language picker, and activates it on first run. Translation only - no typography, spell-check or layout-

DSH plugin that registers the ai-eight-honors-eight-shames skill: eight checkable working rules for coding agents (verify before calling, confirm ambiguity, cite evidence, reuse before creating, test before claiming done, follow local conventions, separate fact from inference, keep changes reversible) plus a ninth rule that logs each user request and the change made in two fixed report files at the workspace root.

OAuth2-capable IMAP email reader for accounts where password authentication is disabled. Microsoft disabled Basic Auth for personal Outlook IMAP in 2024, so this plugin authenticates via refresh-token OAuth2 (XOAUTH2) with automatic token refresh, plus app-password login for Gmail through an optional local HTTP/SOCKS proxy. Registers list/read/search as ol_email_* so it can coexist with the market dsh-email plugin without tool-name clashes.

Skills, MCP & CLI manager for the dsh web GUI: browse/enable/import/delete skills across project and user roots; manage MCP servers with a REAL connection through @deepseek-ai/dsh-mcp-client (enabled servers connect and register their tools on ctx.tools;

Ponytail lazy-senior-dev ruleset for DeepSeek Harness: a 7-rung minimal-code ladder (YAGNI, reuse, stdlib, native, installed deps, one line, minimum), six skills (main rules, over-engineering review, repo audit, debt ledger, gain scoreboard, help), a /ponytail session command for lite/full/ultra/off levels, and optional always-on ruleset injection via config. Vendored verbatim from upstream ponytail (MIT), zero tools registered, clean uninstall.

0.8.6 fixes a startup crash: the host runtime package is an optional peer, never an installed dependency. TypeSafe Jev (System One decision model) wired end to end into DeepSeek Harness (0.8.6). Seven tools: jev_decision (1-25 parallel atomic verdicts in one call; noul/choice/score; typed answers with calibrated confidence; measured median 266-484 ms; verdicts only, never prose), jev_choose (rank 2-10 candidate approaches - fit 0-3 and risk - into an explicit composite with a recommended pick), jev_batch (NEW in 0.8.6: one set of 1-5 judgments over 1-20 texts, one real call per text at bounded concurrency, returning a paste-ready markdown table sortable by a judged dimension; built-in sentiment/priority/intent/pii/spam presets; a failed row is reported as failed with the raw error, never guessed), jev_usage (locally measured usage: calls, tokens, estimated cost, latency median and p95, per-tool mix, rolling windows, projected burn rate, optional local hard budgets, and a declared-balance remainder), jev_overview (session ledger), jev_guard_status (guard counters plus a registrations block that surfaces per-surface registration failures) and jev_verify (frozen 27-question live benchmark at concurrency 6: 96.3%, 26/27). WHAT IS NEW IN 0.8.6 - the ledger survives a restart, the remainder is derived instead of invented, and the plugin can now do batch paperwork. (1) The local ledger persists to $DSH_HOME/jev-usage.json BY DEFAULT, so the cumulative total no longer resets when the host restarts. Two real bugs behind the old silent zero were found and fixed: the ledger path only honoured DSH_HOME (absent inside the host process, so persistence was silently disabled and the file name was null), and save() wrote the still-empty in-memory ring over the history file because it ran before the first load while the debounce window swallowed the follow-up write. (2) Remaining is derived, never invented: TypeSafe exposes no balance endpoint - /v1/usage, /v1/quota, /v1/account, /v1/account/balance, /v1/balance, /v1/credits, /v1/billing, /v1/me, /v1/limits and a dozen more all return 404, and only /v1/models answers, with no balance headers - so the panel shows the remainder as your declared balance (quota.declaredBalanceUsd) minus locally measured spend since quota.balanceSince, and says plainly that it cannot be fetched instead of printing a number. (3) The composer pill re-reads every 20 s instead of every 60 s, so a call you just made shows up while you are still looking at it. (4) The collapsed pill leads with the remainder once you declare a balance, and the cumulative row is renamed when the ledger is on disk. Every tool has an in-conversation structured view; the Settings > Plugins card covers credentials, tool switches, the auto-guard, the dashboard, the prompt section, usage/quota and auto-triage. Honest by design: no API key means an explicit error, never fabricated results; every registration is quarantined so a failure degrades one surface. Tests 38/38 (npm test, ~2.5 s). Client half applies on refresh; server half needs a host restart.

Back up your DSH profile configuration to a private GitHub Gist on a schedule, with merged restore.

Registers a keyless search provider for the built-in web_search tool so it works without an API key, failing over between the documented no-key tiers of Tavily and Firecrawl; a TAVILY_API_KEY or FIRECRAWL_API_KEY is picked up automatically when present. Two Bing scrape backends are included but off by default.