Plugins

Remote-control your local DeepSeek Harness from a phone through your own zero-knowledge relay: phone-first page, QR pairing, end-to-end encryption, approvals, full desktop UI fallback.

Runs commands on remote hosts over SSH in-process, so password auth works without a terminal. Remote host passwords are read from a local hosts file in plain text (or from an environment variable named by passwordEnv).

Community fork of KyoMio/dsh-zen-remote (do not enable both simultaneously — shares the ~/.dsh/zen-remote state and /_dsh/zen-remote/* wire protocol, and auto-defers if dsh-zen-remote is active): keeps the pairing-code PWA with Web Push and multi-host session relay, and adds a desktop Local / Remote / All workspace switcher, remote directory browsing with folder creation and workspace rename/delete (/v1/workspace-manage), automatic custom LLM provider and API-key sync to paired hosts, and bidirectional cross-host @ session reference hydration (session-ref-bridge). The gateway binds 127.0.0.1 by default; the LAN/Tailscale mode binds 0.0.0.0 behind a private-IP wall, and a paired desktop client runs terminals and file previews with the host's OS-user permissions.

Phone access to a local DeepSeek Harness through a relay you run: QR pairing, request payloads sealed end to end, and a host machine that opens no inbound port.

Git plugin — adds a Git panel to the session tab bar: changes, commits, history, branches, remote sync, and merge-conflict resolution in one place, with AI-written commit messages.

Confluence and Jira over Atlassian remote MCP as a configuration-only bundle: one MCP client row, OAuth handled by mcp-remote with the token cached in ~/.mcp-auth, no login command and no in-app UI. Exposes mcp__atlassian__* tools (CQL search, pages, comments, JQL issues, transitions).

Adds a top-left Harness/Chat switcher and a web-chat workspace that drives your own logged-in chat.deepseek.com session in a persistent headless browser, with one-click task extraction to a Harness session and results sent back to the web chat. Starts a persistent Chrome or Edge profile with remote debugging on 127.0.0.1:9410 that keeps your chat.deepseek.com login; its /dual-mode routes have no DSH access check and can create Harness tasks from the web chat.

Multi-machine job board for DSH: 14 board tools, 4 shell tools, a GUI panel, and a dispatcher that hands queued tasks to remote hosts through dsh-remote-agent. Pick the target machine and model from the panel or the board_options tool; rename machines with display aliases while task ownership stays keyed to the host identity (machine). Failed tasks can be retried with their original goal/workspace/model, and the panel checks npm for a newer plugin version. Single-machine use starts its own loopback board; multi-machine use needs the bundled Python board server (tools/board_server.py, started with GP_BOARD_TOKEN set, binding 0.0.0.0 by default) and dsh-remote-agent hosts. The sh_* tools only reach directories on the allowedRoots list.

Adds one button to the sidebar foot that opens the desktop DSH Web GUI — in the system browser on a phone, in a new tab on a desktop. The target address is read from plugin config, DSH_DESKTOP_URL, or ~/.dsh/desktop-url.txt, and falls back to the relay origin published by dsh-remote-web-ui; the button renders inert with a hint when nothing is configured. It also adds a small gear button that saves the address into ~/.dsh/desktop-url.txt; on a phone with no separate launch address set, a click asks the local pairing service (/api/pair/issue) for a one-time pairing link and opens it; its HTTP routes (/api/desktop-link/…) have no DSH access check.

SSH workbench for launching remote agent CLIs with durable sessions, terminal, file editing, Git worktrees and local port forwarding. It drives the local OpenSSH client (macOS/Linux; remote Linux with GNU coreutils, tmux optional) to run commands, edit files and forward ports on any host from ~/.ssh/config, with host-key checking defaulting to accept-new; the last 512K characters of each terminal's output are saved under ~/.dsh/remote-agent/terminals. It uses the same package name and mount id as zbzbhs/dsh-remote-agent, so the two collide if installed together.

Experience and skill engine with a sidebar console and exp_record / exp_recall / exp_feedback / exp_consolidate / exp_type tools, stored in a local JSON file. Optional Git backup (off until you configure a remote) pushes the library to a remote you choose; GitHub sign-in uses a device code or a token kept in local settings.

DSH Web GUI right sidebar, replaced end to end: VS Code-style file explorer plus full source control (git status, stage/unstage/discard, commit, diff, a VS Code-style commit graph, fetch/pull/push sync, branch/remote management, git init, repository/workt

Remote access for DeepSeek Harness: open your desktop DSH web UI from a phone through your own Cloudflare relay.

Live view of the agent machine's desktop in the DSH Web UI, with sound, relayed through DSH's own login. Take control for a CAPTCHA or QR login, with clipboard and file transfer, also from a phone. Needs cua-spacesd from a Cua desktop image on the same machine.

Adds a Phone page to dsh web that shows a QR code; scan it, sign in to OpenTandem on the phone and tap Allow, then send tasks to this computer's dsh from OpenTandem. Installs the OpenTandem command line and a background Runner on first use.

DSH sidebar page for a dsh-mesh network: peer topology, latency, TLS/version health and a delegation list. Resolves the installed dsh-mesh-node package for data.

DSH host-side bridge for a multi-device mesh: exposes local sessions and tools over a token-protected loopback HTTP endpoint so the dsh-mesh server on this machine (separate npm package dsh-mesh-node) can create sessions, prompt them and call tools for paired peers.

Keeps a dsh-mesh server alive across DSH engine restarts by supervising it from inside the host process; resolves the installed dsh-mesh-node package and fails loud when it is missing.

IPv6 remote-access gateway for DSH: PIN-protected HTTPS reverse proxy with a Let's Encrypt certificate (DNS-01 via DuckDNS), QR scan-to-connect and a settings page, no relay in the data path. Needs a public IPv6 address (detected on Windows and Linux only, not macOS), a free DuckDNS subdomain and token, and inbound ports 8787/8788 open on the router; the AAAA record is only auto-updated when the plugin config sets ddns or tls.

Keep SSH, WSL and Docker projects in the native DSH sidebar. Group directories by environment while choosing full remote DSH or lightweight local Agent mode per project. Manage shared full-backend connections together, keep lightweight connections independent, and selectively sync local Skills with difference previews. Aimed at the Windows desktop client with Linux, WSL or Linux-container remotes that have Python 3 and Bash (macOS and Linux hosts untested); lightweight SSH needs an existing SSHFS mount, and Docker has not yet been run against a live daemon.

Amazon product research workbench for DeepSeek Harness: category, brand and follow-seller collectors driven through the local Edge browser, a product library with unified filters, an FBA/FBM/self-operated profit calculator, blue-ocean category scoring with candidate picks, trademark lookup, supplier image search and Excel export. Proprietary software: it installs and starts without a license, but every data call returns 403 until the author issues a device-bound license key. Needs Edge started with --remote-debugging-port=9222 and signed in to Amazon; starts a local backend on port 3088. The separate 智赢 collector browser extension is optional and adds size, weight, trademark and monthly-sales fields.

DSH → MAX messenger plugin: compact UX, briefings, status, reliable replies, remote control, GUI settings, reply threads, tables, schedules, webhook, cost & budget. Zero runtime deps.

Fork of SheepofSheep/dsh-doyourweb that puts the browser on another machine: the MV3 extension dials out to this plugin over TLS, so DSH reads and acts on a remote Chrome or Edge rather than a local one. It also generates ready-paired extension packages for the current configuration, adds tab open and close tools, writes annotation detail to a file instead of pasting it into the chat, and shows a checklist naming which part of a remote setup is misconfigured. Interfaces with no DOM at all are reachable too: canvas games, canvas maps and hand-drawn widgets take coordinate clicks, drags and wheel input that glide, pause and hold like a person's, and the viewport is checked before every action so a stale coordinate is refused rather than clicked blindly. It reuses the same browser-tabs plugin id as the upstream, so do not install both in the same profile. Requires Chrome or Edge 125+ and an unpacked MV3 extension loaded manually on the browser machine; the plugin does not install the extension. With tls: true, trust the generated ca.crt as a root certificate there. The extension gives the model access to the tabs and signed-in sessions of the browser it is paired with. The bridge listens on 127.0.0.1 by default; a non-loopback bind needs remote: true, and the extension pairs with a token confirmed by the user.

Control a remote DeepSeek Harness project over SSH: remote runtime, local panel, on-demand history.