Plugins

Daily remote job hunting across BOSS Zhipin, Liepin, LinkedIn and other Chinese job boards, scored against a saved profile and shown in a Harness panel. Requires a local Chrome/Chromium install (the plugin launches its own browser profile) and a BOSS Zhipin account for BOSS results.

Keep your git workflow inside DeepSeek Harness. A composer chip shows the current branch at a glance; the TRAE-style popup lets you switch or create branches, fetch remotes, commit & push a subset of changes, merge with a clear source -> target flow, and stash / restore partial changes — all without leaving the chat. Popovers dock above the composer so your draft stays visible; the change list is prefetched when the menu opens; and the plugin confirms before touching a dirty tree.

深鲸远程门禁：上线前扫描监听地址、鉴权开关、CORS、默认口令等远程暴露风险

Host-side dsh plugin that pairs a phone to a dsh instance through a self-hosted relay: one outbound connection carries the session list, streaming chat, approvals, attachments and file previews to a dedicated mobile web shell, and devices pair with a one-time QR link and can be revoked from a console inside the dsh web GUI.

Map a remote server directory over SSH and SFTP into a controlled local cache workspace, so the model, agent, session and memory keep running on the local machine.

LAN access for the harness process: writes the authenticated links for the harness port, one per local IPv4 address, to a token file and registers DSH_LAN_LINK in the shell environment, and can run a gateway on a fixed LAN port that holds the browser session on this machine, so devices need no token; forwarded requests get Host and Origin rewritten for the same-origin guard, and a host-claim marker is injected so the page renders as the full desktop UI instead of remote-visitor mode. Devices are admitted by CIDR, with optional Basic auth.

Phone access to the DSH web UI: LAN pairing plus remote access through your own tunnel command (e.g. cloudflared) or a fixed public URL, with automatic LAN-to-tunnel failover and dshlanpair:// deep links; the phone client is the bundled Android app (APK, Android 8+, sideloaded).

A five-stage engineering loop for agent-built projects — spec, build, verify, ship, learn — with one artifact and one gate per phase, so an agent always knows the single next action. Role policy, project templates and deployment sit behind explicit ports: swap the implementation without rewriting the loop. Its scaffold generator lays out the internal layers of a project — `init --layout {none,webapp,service,plugin} --stack {python,node,none}` — from nine layers sampled out of three unrelated production projects: entry docs, an OpenSpec plan face, a spec truth layer (INDEX, one file per domain, TESTING, CONSTITUTION), a wiki split into knowledge / progress / runbook, the six `.agents/` slots, server+web, scripts/deploy/config, tests+e2e and a gitignored out/. Non-none layouts also gate the directory contract and compile every source root. Ships a Python CLI (init/next/check/ship/new) plus a local command adapter and an SSH/systemd adapter with release directories, an atomic current/previous switch, a deploy lock, a commit-versioned JSON probe and automatic rollback on a failed probe; bootstrap and teardown provision and remove the unit and the reverse-proxy block idempotently and refuse to delete a root they did not create. Includes a runnable example workspace and a skill that keeps the agent on one phase at a time. Requires Python 3.10+ and PyYAML; remote deploys need SSH access, rsync, systemd and Caddy on the target.

Sync DeepSeek Harness sessions and workspace files to a private GitHub repository for cross-device handoff, with sync badges, search and bulk upload, independent local/remote delete, conflict "pick a side", and multi-device-safe index merging.

DSH 插件：把电脑上的 DeepSeek Harness 变成手机可访问的服务——起桥接、自动开隧道（ngrok / cloudflared）、签发 30 天 Cookie，并输出地址与凭据，配合 DSH Remote Android App 使用。

LAN access portal for DeepSeek Harness running on a NAS or other always-on host, letting a phone browser reach the DSH instance on that device; intranet penetration is supported through external tunnels such as frps or EasyTier. Its HTTP/WebSocket reverse proxy is specifically optimized for subdomains, subpaths and second-level directories (login entry, Location and Cookie Path adapt automatically), and adds opt-in visitor/administrator password protection plus remote workspace registration. Derived from wenbin-wb/dsh-bridge v2.17.8 (MIT, several modules reused verbatim); both default to port 3082, so change one port before running both.

Remote access for DeepSeek Harness: expose this machine's DSH Web GUI through an SSH reverse tunnel and a QR gate — scan and enter. Requires your own Linux server with root SSH access plus nginx, openssl and qrencode; it rewrites that server's nginx config, and the QR link is a one-year login secret, so treat it like a password.

Registers the hosted SpecStream MCP server with the harness MCP manager and keeps the API key in the credential store. The server returns live web data as structured rows, each value with its source URL, and a run starts only after the quote's maximum is approved.

Connects DeepSeek Harness to Postel over MCP: search a library of X posts that went viral by topic, write posts and X threads in the user's saved voice, and save, schedule or publish them to X, LinkedIn, Bluesky and Mastodon; adds a postel-writing skill. Research works without an API key.

Run shell commands on the host instead of inside DSH, triggered by exact-match QQ messages through NapCat, and DM the result; requires EviMing/dsh-napcat-tools. plus Python 3.10+ for napcat_api.

An Orchestrate tab in dsh-better-sidebar and 14 orch_* tools to spawn, prompt, fork and cancel agent chats, run command, scrape, http and agent tasks on local, ssh or remote runners, show provider status cards, and serve a secret-protected machine API. Requires DSH >= 0.1.1-rc.1, Node >= 22.5, the web profile and dsh-better-sidebar.

Rclone backup tooling with four tools: target inventory, local/remote status, rclone check verification, and approved copy/sync transfers with dry-run previews and an audit line. Requires rclone installed and a remote configured with `rclone config`; the plugin never reads the rclone config or credentials.

Remote Linux server manager in the Harness Web UI: browse and edit files, inspect host status, start/stop/restart Docker containers, inspect images, configure Docker registry mirrors, manage firewalld/ufw rules, switch apt sources, and detect developer tools or install/upgrade them with apt.

Adds a Git chip beside the composer that opens a centered workbench (changes, history, files, tags, stash) plus a Git section in settings. Supports multi-account OAuth device flow and PAT with per-repository permissions (full, read, none), gates writes behind a global switch and reads behind an allowed-directory list, and refuses a push whose target remote belongs to no writable account. Diffs preview in place with line numbers, four layouts, word-level emphasis, syntax highlighting and Ctrl/⌘+F find; Markdown and images render inline, commit messages are searchable, and commit messages can be generated from the staged diff through the host LLM service. Ships 8 Agent tools, 51 local HTTP endpoints and 8 languages, with tokens encrypted at rest by AES-256-GCM.

Starts the published local BeatDesign 0.2.5 workspace and connects 30 MCP tools for projects, Canvas, Assets and Timeline, with a shared-project Skill and remote-generation approval guidance. Requires Node.js 22.12+ and a free port 3020; frame extraction and timeline rendering also need ffmpeg/ffprobe on PATH (browser export does not).

DSH 插件：远程连接 + 逆向分析（REA / Ghidra）

一个插件、两种角色：主服务端把 DeepSeek Harness 变成手机能安全访问的 PWA（移动端界面、配对码网关、Web Push），并把选定会话共享给已配对的桌面端；子客户端在另一台 DSH 桌面端的侧边栏里远程使用这些会话。One DSH plugin, two roles: the host turns DeepSeek Harness into a phone-reachable PWA (mobile UI, pairing-code gateway behind your own rev

SSH remote workspaces for the dsh web GUI, reusing the session sandbox mode and approval flow.

Controls an already-running NetEase Cloud Music desktop client over CDP (the client must be started with --remote-debugging-port=9222) and searches songs through NetEase's public web API; no API key or extra login, and member-only features use the client's own signed-in account.