Plugins

DingTalk IM channel via Stream-mode WebSocket: each chat drives its own tooled agent; replies stream back as messages, no public callback URL needed.

Run Stata through DeepSeek Harness: the native Stata AI Skill service auto-starts with DSH (macOS/Windows binaries bundled), so you can run regressions, do-files and econometrics workflows with no manual setup.

Chat image-attachment bridge with a `view_image` tool for any OpenAI-compatible VLM (local Ollama or cloud): pasted/dropped images become `view_image` path markers before reaching text-only DeepSeek models.

CDP bridge to an already-running Chrome/Edge for DSH: screenshots, pixel assertions, DOM/CSS checks, and page JS evaluation over HTTP + WebSocket, with zero child processes, zero npm dependencies, and zero per-use approval.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

A consent-gated personal profile store: people are indexed by name, entries by person and key, and no profile record is read before the current session is authorised. Sensitive entries come back masked unless the user authorises that tier separately; credential-like values are refused at write time. Ages and next birthdays are computed at read time, so asOf restores the answer for a past date, and facts that rot (height, weight, address) carry freshness warnings. Five profile_* tools plus a settings page to browse, edit, delete and revoke grants.

Honor of Kings inspired theme for DeepSeek Harness: the Jing · Blazing Sunlight key art is inlined and painted into the window backdrop and both main panels, over an ink night sky with a molten gold sun, frosted mirror shards, drifting embers and a three-level motion switch (full / calm / off). Colours come from overridden design tokens, so panels, bubbles, menus and code blocks follow the theme.

Windows-only guard against the desktop shell locking itself out: it counts the dsh-auth-* launch cookies the shell has accumulated, reports how much of the 16 KiB request-header budget they consume, and once the count passes 40 it backs up the whole Cookies database and lets DSH rebuild it, so every cookie in that profile is cleared. Install is one command: on load the plugin registers its own weekly scheduled task pointing at the scripts inside the package, and uninstalling it removes that task — nothing to copy into your home directory and no schtasks line to run by hand. The check itself runs while the app is closed (it waits up to 3 hours for the shell to exit). It does not raise the header budget or keep a floating panel; scripts/ can also be run standalone without the app installed.

Policy-layer guard that checks tool calls before they run: a read whitelist, a sensitive-path deny list (credentials, browser profiles, chat history, other users' home directories), dangerous-command blocking, subagent isolation, and a static scan that quarantines executables. Every denial is appended to an audit log. It is a text-and-path filter, not a sandbox or antivirus: dynamically built paths, encoded payloads and packed binaries can get past it, and it does not replace the OS antivirus.

Reload a plugin's source the moment a file changes, without restarting the harness. Covers the third-party plugin case the built-in watcher misses because it skips node_modules.

An AI reading buddy: it sits next to you while you read, and only knows the pages you have already reached — so it cannot spoil the rest, and it never summarizes the whole book for you. Highlight a sentence and ask about it, or just ask about what you finished; it usually restates what you seem to mean and asks one concrete question back. What you work out can be saved as a takeaway and later becomes a review card that jumps back to the sentence. EPUB, MOBI, FB2, TXT, Markdown, HTML, CBZ.

Turns a repository and a running system into acceptance material - database design, design specs, a user manual with screenshots, and test / go-live / acceptance reports. Sections follow GB/T 8567-88; anything it cannot verify is left blank instead of invented. Requires Python 3 with python-docx for .docx output, and Google Chrome for automatic screenshots.

Long-term memory for dsh with defense-in-depth hardening. Two tiers (project `.dsh-memory/` and user `$DSH_HOME/memory/`), each a plain hand-editable JSON file with bounded entries and tags. Writes are atomic (unique temp file + rename, previous revision kept in a bounded history/) and serialized across processes by a per-tier lock with stale reclaim; a disk-revision check refuses lost updates instead of silently overwriting another writer. Memory text is wrapped in explicit untrusted-data boundaries (forged wrappers stripped on write) to blunt prompt injection from remembered content, load-time validation rejects out-of-bounds stores, and symlink escapes out of the tier directory are refused with MEMORY_STORE_ESCAPE. No content-heuristic filtering and no confirmation step, so headless auto-consolidation stays intact. Install: dsh plugin --profile web add github:RocoFish/deepseek-memory.

Read-only export of a chat.deepseek.com conversation into a new DSH session: builds a hand-off pack with the selected rounds kept verbatim and earlier rounds collapsed to one line each, then pre-fills the composer without sending it. Windows only as published (package.json os=win32); requires Edge or Chrome and a one-time chat.deepseek.com login.

A grey ASCII ocean behind the whole window: whales swim continuously across the sidebar and the chat area, so a creature can drift from one column into the other. Once a conversation starts, every creature leaves through its own edge — up, down, right, or left — while the sea calms, and the sidebar keeps one frosted surface whose height follows its content, so a passing whale becomes a soft shadow behind the labels; an empty conversation brings them back in from the edges. Streaming replies reveal from blur to clear, and reduced motion falls back to a still frame and the native renderer. Neutral ink only, with day and night palettes.

Detect which installed apps have a newer version and update them with one click, downloading each vendor's full installer from its official site and installing it silently. Windows via winget, macOS via Homebrew casks, matching the machine's ARM64 or x64 architecture.

Keep this session working until a wall-clock deadline: one button in the composer picks 22:30, +90m, or tomorrow 07:00, and after every finished turn the plugin posts one continuation message so the session keeps working; nothing is posted once the deadline passes. Stops early on a round cap (400), three consecutive failed turns, or four consecutive rounds that called no tool; a manual stop button is always there. The last part of the watch switches to wrap-up wording, sized to at most half the remaining time so a short watch is not entirely wrap-up. Armings persist to $DSH_HOME/nightwatch.json via an atomic write and are re-adopted after a restart. No slash command is registered by default (enableCommand turns one on); the continuation message carries source.kind cordis-host-runner, not user.

Monochrome UI, native agent collaboration, token usage, local skills and conversation import with owner-scoped WeChat controls.

DeepSeek Harness (DSH) plugin: edit a finalized assistant reply and its reasoning/thinking chain right in the conversation. A pencil action opens a single-message editor; edits become a plugin message projection, so the model and the UI only ever see your

Plugin discovery for DeepSeek Harness: multi-source, star-ranked search across GitHub's dsh-plugin topic and the awesome-dsh-plugin curated list, with a bundled offline index and a real offline keyword engine.

Restart the Harness itself and come back: a dedicated restart_dsh tool hands the session over to the next process, which resumes it, replays the pending instruction and wakes the subagents again.

Conversation lock for the DeepSeek Harness sidebar: every conversation row gets a lock button, and a locked conversation blurs only the conversation area behind a password box while the sidebar stays usable. Re-locks on window blur, tab hide, page hide, or whenever the open conversation changes, and never pauses a running turn - the veil reports that background work continues. The password digest, lock flags, and preferences live in <DSH_HOME>/session-lock/state.json behind two same-origin routes guarded by a custom header, so clearing the page localStorage unlocks nothing; PBKDF2-SHA256 with a random salt, and a 30-second input lockout after five wrong attempts. Recovery is opt-in per machine: a Windows login password (enabled only after a real .NET PrincipalContext ValidateCredentials check against the local machine, so Microsoft accounts and passwordless machines keep it off) and a cooling period chosen while creating or changing the password (1/6/24/72/168 hours; expiry clears the password and releases every lock, and the correct password cancels the countdown). A settings section covers status, changing the password, lock new conversations, hiding locked titles, a three-position archive-restore policy (all / locked only / off, switching needs the password), lock everything, and unlock everything. Dialogs use the native dialog top layer, so a dialog opened from Settings is never covered by it. Requires DSH 0.2.0-rc.1 or newer; no build step.

Xray-core supervisor and router for DSH with VLESS import, global/China-direct/whitelist routing, a three-card live panel, and self-update.

Syncs the DSH home directory and Mnemon memory data through a git remote: pull, push, sync on an interval, cross-device migration, initialization backups, and conflict detection that stops before pushing and keeps local commits. A panel lists up to 100 recent operations with their backup paths.