Plugins

Per-task isolated git worktrees with a full create/sync/finish lifecycle: task names auto-derive branches, merge targets are double-checked, and batch cleanup is built in — zero manual git operations.

Surveys local code and GitHub/npm for reusable implementations before development, evaluates reuse versus rewrite, and checks architecture coupling.

Minimal prompt x Web PTC capabilities: one-line persona, run_code SDK, subagents, Ralph, web search/fetch, and Windows Git Bash; the general-purpose workflow tool stays hidden.

Independent browser acceptance testing for agent deliverables: JSON spec in, real-Chromium verdict out.

Read-only repo bootstrap scanner (repo_setup_scan tool): detects stack/tests/docs/git/db and recommends plugins, MCP servers and hygiene files.

Reviews every file the agent wrote in a session from the session header, with per-file hunks and refused writes counted apart from changes.

Usage statistics dashboard for the DSH Web UI: info cards, a 280-day GitHub-style activity heatmap, daily token trend, and model-usage donut chart.

Right-side developer panel for DeepSeek Harness: files, session history, and git version control

Structured, safe Git tool family for DeepSeek Harness: status/diff/log/branch/stage/commit/stash/show/fetch/pull/remote/checkout with a destructive-command guard.

Browse and search GitHub dsh-plugin repositories from Web UI Settings, sort by stars, and install plugins through the DSH CLI.

Git-like immutable session lineage for DeepSeek Harness

Native interactive Git diff review for DeepSeek Harness with structured annotations sent back to the current Agent session.

Windows tray desktop shell for DSH: auto-installs the exe from GitHub Releases, creates a desktop shortcut, and adds a desktop_launch tool to start it from chat.

Multi-platform Git workbench for DeepSeek Harness: manage Gitea, GitHub, GitLab and Gitee accounts at the same time, browse repositories and branch graphs, review pull and merge requests, check contribution heatmaps, and sync-push one commit to several platforms.

Read-only Git graph tab for the DSH right sidebar — colored branch/merge lanes, HEAD / branch / tag / remote badges, commit details with a changed-file tree and per-file diff, virtualized rows that page through large histories — plus a branch chip in the composer that searches local and remote branches and switches with guards against uncommitted changes, detached worktrees and in-progress merges or rebases.

Runs the AI coding CLIs on your machine as a Tang-dynasty court: one tool drafts a plan, a second tool reviews or vetoes it, six ministries carry out the steps in parallel by dependency, an inspector checks each output and a final audit runs before you approve. Each task works in its own git worktree and branch and is merged only on approval. Supports Claude Code, Codex, Gemini CLI, Cursor CLI, OpenCode, Qwen Code, WorkBuddy and DSH itself via dsh headless, with a tool catalog that shows install commands. Also includes a task queue that splits a list into separate tasks, per-call token and cost accounting with budgets, and an English Roman Senate mode. Its HTTP routes have no DSH access check, so a web page open in your browser could call them.

Pre-install security gate: quarantines each plugin, skill and subagent bundle with install scripts disabled, scans it with Cisco Skill Scanner, SkillScan, Cisco MCP Scanner, OSV-Scanner, Trivy, Gitleaks and optional SARIF tools or an LLM judge on a DSH model, then passes, asks for review or blocks it. Needs the install-gate hook proposed in deepseek-ai/deepseek-harness#12999.

Git workbench for DeepSeek Harness: session-header chips keep branch, change count and sync state at hand for in-place switching, review and pull/push; the full window adds a lane commit graph, block-level staging, interactive rebase and history rewrite with restore points, batch cherry-pick, a three-way conflict editor, inline blame, worktree management and Git LFS import/export.

One switch that routes the git, npm and pip commands DSH runs through a local HTTP proxy, restoring every previous setting when turned off.

Project reporting in the DSH sidebar: draft a per-project report from its git commits and session records with one click, run it on a built-in schedule with a configurable daily cutover offset, and optionally submit Moka overtime automatically; all sessions of a project share one report.

Multi-account manager for GitHub Copilot in DSH: device-code sign-in for GitHub.com and GitHub Enterprise Cloud tenants on `*.ghe.com`, one-click account switching, per-account plan and AI credits display, and a preset Copilot provider route with first-login model catalog fallback.

Observes detected background download commands and renders live cards with bytes, speed and ETA; silent downloads get a total from a HEAD probe.

A credential proxy for outbound API calls: keeps keys for GitHub, Cloudflare, Vercel, npm, Docker Hub, Hugging Face and custom platforms, and calls them from the Host so the model never holds the key. apikey_call takes a path rather than a URL, pinning the host to the platform definition; apikey_platforms lists accounts without values; apikey_key gets, sets or clears one; apikey_upload sends multipart with a file read from disk, bounded by an allowlist. Supports five auth shapes (bearer, custom header, x-api-key, basic, query string). Optional layers, each off by default or preserving existing behaviour: an AES-256-GCM vault with a scrypt-derived key and an authenticated header, a SHA-256 hash chain over credential operations that records no key values, response redaction of the key actually used, and per-platform failover on 401/403/429. Ships a CLI (list, verify, audit, call) that reads the same vault without the harness. By default (exposeKeys on) the apikey_key tool can return a stored key's value to the model, which puts it in the session log; turn exposeKeys off to keep keys inside the Host.

Sprite-sheet workspace on an infinite canvas: slice by grid, row scan or alpha connectivity, matte solid-color backgrounds, compose characters from a 1066-item Liberated Pixel Cup material library, generate seamless backgrounds and 12 procedural effects, then export ZIP or an atlas with Aseprite-format JSON. The LPC character parts are fetched on demand from raw.githubusercontent.com (LiberatedPixelCup), so GitHub must be reachable.