Plugins

Sensitive-character replacement for DeepSeek Harness: matches messages and tool results against a YAML blocklist you maintain (global, per provider id, or per model) before the model reads them, and scrubs the outgoing request again before dispatch, so blocked characters cannot trip the official API Content Exists Risk 400.

Durable cross-session memory plus a fetch ladder that survives hostname-keyed blocking. Four tools: memory_recall, memory_save and memory_stats over a plain-JSON fact store at $DSH_HOME/memory/facts.json, plus resilient_fetch which tries plain fetch, then a same-service alias host (Wikipedia only for now), then curl over IPv6 and IPv4 (needs curl on PATH). No daemon, no npm dependency, no network at import time. (1.3.0 shipped a fifth tool, memory_prune; it was withdrawn in 1.4.0 because adding a tool to a running plugin breaks sessions that were opened before it.)

A lock button on every sidebar session row; archiving a locked session through the client-side workspaces.archiveSession — the ⋮ menu, or another plugin calling the same client method — is refused with a notice, the lock list is persisted on the host, and a host route bulk-archives inactive sessions while always skipping locked ones. Calls that reach the host registry directly are not intercepted.

Cover privacy protection for DeepSeek Harness Web, with a native lock indicator, policy editor, and local controls.

A collapsible "In Progress" group for the DSH Web sidebar: collect sessions from each session row's ... menu, pin the shortlist above the workspace list, reorder by dragging, and keep it across restarts.

Recent and active sessions block for the DeepSeek Harness Web sidebar

DSH plugin: offline JVM production-report diagnostics — thread dumps with Java-level deadlock cycles, GC-log pause percentiles, Maven/Gradle dependency conflicts, exception chains and Spring config diffs. Never touches a running process: no jcmd, no jstac

Adds a draggable lucky-block button to the DeepSeek Harness web UI. Single-click plays zero-cost little performances (popups, a fake blue screen, daily fortune, trivia, cold jokes, music, and a set of visual stunts); a 1.4-second long-press mines the block open and starts a new session to write a random paper, read the news, invent something, or spin a short story. It also appends a "lucky block" choice to the model's multiple-choice questions and rolls a random pick, reversible by saying "rollback". Block appearance and event weights are adjustable in settings.

Multi-agent Chinese debate simulator with eight debaters, live two-column discussion and draft notes, judges and scoreboard, single-side clocks, per-round ZIP archives, a training side with a configurable end condition (win-rate threshold or fixed rounds), and a Word prep package.

Remote access and mobile sync bridge for DSH iOS App with QR pairing, screen-lock resume, and tunnel management.

Plain-language trust dashboard for the dsh trust family: aggregates the nine channels (injection interception, write denials, egress blocks, custody-chain verification, tool-surface and prompt drift, leftover scans, forgotten compaction constraints, profile composition) into one right-sidebar panel with a single status light and event cards that translate engine jargon into sentences a non-security user can act on; the read and egress engines run from the package's own npm dependencies so those channels work even without the sibling plugins, and absent plugins simply show as not installed.

Registers one agent tool, plugin_guard, that statically scans a DSH plugin package before it is installed and reports a verdict with the reasons: a missing or broken dsh.bundle.patch, a missing dsh.permissions block, install scripts, dangerous APIs and obfuscation, dependency risk, and source that is not indexed and therefore cannot be verified. Read-only: the scanned code is never imported, installed, evaluated or run.

Session-level verdict on whether compaction would lose unlanded state; structurally refuses per-block screening.

macOS Desktop only: one-click restart of the DeepSeek Harness Electron app. Confirms before interrupting running turns, blocks during plugin install/update, and records restart phases/logs.

Move45clock: a health clock for DeepSeek Harness. A 45-minute work timer (5–120 minutes), 12 guided 12–15 minute seated/standing break plans, a visual plan editor, reminder cards scalable to 200%, night reminders at 21:30/22:00/22:30, and optional action-name voice coaching. Window wake is Windows-only.

By default, blocks marking a team task complete without a passed independent verification record whose commit matches the worktree HEAD, and adds a dependency DAG board and a settings page.

Injects a very short conventions reminder (absolute INDEX path + version) once per session per version; when the conventions version changes, the next turn re-injects it (chat turns included). Optional hard guard: on operation-like turns, write/edit tools are rejected until the session has read the index (chat turns and shell are not blocked by default). Ships example checklists or points at your own directory; zero dependencies, configurable paths. Solves: conventions are written down but never pulled up when the work starts.

Registers one `workpaper_gate` tool for DeepSeek Harness: it audits a workpaper set for completeness, covering both the target design or template itself and the instance-versus-template structure, with the rule list, template list and core-table list all configurable in one spec file. Findings come back as blocker, warning and info, and the workpapers are only read, never modified. Requires Python with openpyxl.

Author custom tools in Python from a web page, in chat, or from the dsh-go app's native panels, and register them as DSH tools without a restart; dangerous tools need built-in approval on every run, tools can be grouped into packs, and an optional unlock mode exposes them per conversation. Needs Python 3 on PATH.

Encrypted, chunked full backups of a DSH installation: config, sessions, plugins, workspaces and Hindsight memory packed into AES-256-GCM volumes that unlock by passphrase, recovery code or this machine's DPAPI slot, each package carrying a self-contained restorer, GFS rotation (last, daily, weekly, monthly, plus a total size cap and a recycle bin) and network or WebDAV targets. Zero external dependencies — node: builtins only, no 7z, openssl or rclone.

Git-based multi-device sync for DSH configuration — captures settings, plugin manifests, lockfiles and skills into a private repository, with one-click capture, apply, pull and restore, and plugin rebuilds from pnpm-lock.

One switch that takes an MCP server's tool schemas and its instructions block out of the model context for every agent, live and without a restart, built for the 207 tool schemas REA registers whether or not a task is reverse engineering. A pill in the composer dock, /rea on|off|status|toggle, and GET/POST /rea-toggle/state; the position is remembered across restarts and subagents are covered before their first step.

Creates and edits Feishu and Lark cloud content through ten tools - Bitable databases and their records, documents with Markdown converted to native blocks, spreadsheets, wikis, drive files and messages - plus Base V3 dashboard charts and server-side aggregate queries.

Archives the QQ Zone posts you published yourself into a local library, auto-sorted into three columns — thoughts, dreams and reviews (book/film recommendations) — all three of which can be corrected by hand, one column at a time, and undoing a correction never disturbs the other two. Ships a private web viewer that can be locked with a password, repairs long posts that the upstream API truncates to its first ~500 characters, counts words by year and month, and backs up attached images for offline reading. The cookie is stored on the local machine only.