Plugins

Data cleanup and reconciliation for dsh, built around reviewable evidence: original sources stay read-only, a cell is accepted only after independent checks agree, and every accepted value keeps its provenance and audit trail.

Run your DSH agents like a company: departments, order dispatch, attempt credentials, an audit ledger and cost accounting on top of ctx.agents/subagents — plus a work board, an org chart and DAG task planning, no native team layer required.

检查日志是否开启、是否记录了该记的、是否留够法定 6 个月

按 GB/T 22239-2019 逐项对照代码与配置里可静态发现的等保项

Delete a DeepSeek Harness conversation from the sidebar: a recoverable trash with restore and purge, or permanent removal, with a path-safety guard and an audit trail. | 在 DeepSeek Harness 侧边栏删除对话：可恢复的回收站（支持还原与彻底删除），或永久删除，并带有路径安全校验与审计日志。

深鲸企业审计套件：审批台账 + 决策复盘 + 审计报告导出 + 定时复盘任务，一个授权全部可用

审批台账 + 企业审计面板：记录每次审批（风险/决策/结果），gate 模式拦高危，Web 面板可看可导出

Audits DeepSeek Harness plugins: a read-only pre-install check that grades a package S–D before it is installed, plus a runtime monitor that records plugin start/stop, sensitive tool calls and per-plugin token estimates in a settings panel.

Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_roots denies every path-like call), a per-minute call limit and a JSONL audit, exposed through gate_check / gate_check_path / gate_policy and ctx.gate — other plugins or prompts must call the gate; it does not intercept tool calls by itself.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

Adds an ego-webqa MCP server that audits deployed pages across the mobile viewport matrix and returns structured repair evidence; needs uv/uvx on PATH and a Playwright Chromium headless runtime on the same machine.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

A reflection layer for DSH sessions that slowly rewrites a 3-7 entry worldview across value, preference and habit layers, tracks spirit, health and account balance, ingests Bilibili/Douyin videos, and keeps an auditable growth archive. Video intake is optional and needs site cookies; Douyin parsing also needs Edge/Chrome and yt-dlp.

A DeepSeek Harness workbench with model metrics, cost estimates, prompt presets, optional auditing, and context-aware reply suggestions; automatic suggestions default on and may incur API fees.

Report-and-ledger plugin for DSH: front-matter 汇报 as the first-class agent-to-agent interaction primitive, with upward/downward delivery, co-authorship, CC, and a complete transfer-path audit trail; plus a conversation timeline tab.

DSH 探针工具包：卡面合法性、卡契约校验、审计档生成 —— 四个零依赖 CLI ＋ 一个最小宿主插件壳。

Compaction ledger for the DeepSeek Harness: audit every context compaction (what was shadowed, when, at what token cost) and let the model recall pruned content on demand

Read-only audit of whether a DSH plugin's HTTP routes are actually fenced, discovering the registered routes by reading plugin code and probing loopback only.

Auditable token-cost ledger for DeepSeek Harness: wraps the llm/stream waterfall and records every call with provider, model, input/output/cache-hit/cache-write tokens, usage source and integer nano-CNY cost from an explicit price table. Aggregates by hour, day and session; exports JSON or CSV with a no-write dry-run preview; keeps a manually entered official platform bill in a parallel column with actual-minus-estimate diff. Unknown provider/model routes stay explicitly unpriced. Zero runtime dependencies; no balance query, notifications or animations.

Arms an explicit per-session scope contract from a `$stop-that-shit` directive and audits every tool call against it; unarmed it is inert. A DSH bundle wrapping lennney/stop-that-shit (MIT). Do not install it alongside the upstream lennney/stop-that-shit DSH bundle.

OpenFOAM case doctor for DeepSeek-Harness. Six agent tools: audit a case for 25 classes of silent failure (steadyState paired with timeStep writes, limiters set to 1 that let k/epsilon go negative, unbounded advection of transport scalars, nNonOrthogonalCorrectors 0 on a skewed mesh, loose solver tolerances, blockMesh vertex/block mismatch, stray time directories, purgeWrite 0); read any dictionary as JSON; survey a sweep of cases; run checkMesh/blockMesh/snappyHexMesh/foamRun inside WSL with log parsing; parse logs into the metrics that matter (aspect ratio, non-orthogonality, skewness, residual floor, fatal errors). Deterministic text analysis — no LLM — validated against a real 82k-cell street-canyon snappy case.

Audit how each turn's context budget is spent. Breaks down what a turn pays for AGENTS.md, the skill catalog, tool schemas and runtime context; flags repeated injection of unchanged content as pure waste; ranks skill-catalog bloat (with 60+ skills installed, how many tokens of descriptions does the model read every turn) and tool-schema inflation per plugin. Deterministic — no LLM, so a wrong answer is a rule bug with a name. Four tools including a cross-session sweep.

Audit what context compaction actually lost. Reads the raw session event log and checks session-constraint survival (the standing instructions the user gave — do-not-X, must-Y, only-in-Z — and whether the summary still carries them; arXiv 2608.11242 measured ~17% survival across compactors), summary hallucination (paths, versions, ports and identifiers the summary invents that were never in the history it replaced), ghost references ("see above" pointing at removed text), token accounting (a summary nearly as large as what it claims to free), and unaccounted prunes. Four agent tools including a cross-session sweep that ranks conversations by how much compaction hurt them. Deterministic — no LLM, so a wrong answer is a rule bug with a name.