Plugins

China-network bootstrap for dsh: probes npm/npmmirror/GitHub/HuggingFace/Gitee and local proxies, reads registry config, recommends mirrors/proxy, and generates a PowerShell + bash bootstrap script. Read-only by default; apply is explicit. CLI plus an agent-callable cn_boot tool.

Cross-session recall for dsh web: '@' mentions and a composer picker link previous sessions as reference chips; the host snapshots them in as recall context right before the question, recorded read-only in a session-header chain badge

Typed, read-only DeepSeek Harness tools for installed Kungfu Projects and Work.

Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no network, a read-only rootfs, dropped capabilities, and kernel-enforced memory, CPU and pid ceilings.

Verification toolkit for DSH agents: evidence-based claim checking against workspace files with line citations, config validation (JSON/YAML), and read-only URL/npm/GitHub submission-readiness probes.

Session lifecycle CLI: export (md/json/jsonl), archive/restore, trash, search, and stats. Read-only by default; nothing is ever deleted by the engine.

Archived conversations list in the sidebar footer with read-only previews of the most recent messages, for sessions the product deliberately keeps hidden and unreopenable.

A read-only neuroscience data preview plugin for DeepSeek Harness (DSH)