Plugins

Registers one `doc_ocr_sign_fix` tool for DeepSeek Harness: on macOS it diagnoses and repairs the condition where the bundled Python cannot load native extensions (onnxruntime, cv2, pypdfium2) because of the hardened runtime and library validation, by injecting the disable-library-validation entitlement and re-signing the interpreter, then verifying the imports. Operations are idempotent and the original binary is backed up first. It never touches the enclosing application bundle.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

List the LLM provider routes a running DSH process registered and run one real streamed call.

Hot-reloads DSH plugin modules without restarting the app (module-cache purge, junction-path matching, bust fallback) and registers a refresh button in the session header so the browser page loads the new plugin bundles.

Registers system-prompt sections that make the model reason in Simplified or Traditional Chinese, with strict/prefer modes and an optional reply-language policy. Adds a /thinking-zh command for per-session switching. Zero runtime dependencies.

WeChat Mini Program engineering tools: scan a project for pages missing from app.json, scaffold pages with automatic registration, fix orphan pages, manage subpackages, tabBar and components, and drive the WeChat DevTools CLI for preview QR codes and uploads.

Development tooling for Minecraft 26.3 mods: starts a real dedicated server and a real client from JSON instance registrations, drives both through an authenticated HTTP probe, and asserts on world, UI and log state across Fabric, Forge and NeoForge, writing per-run evidence and shipping no game or loader files. Requires JDK 25 and a Minecraft 26.3 instance.

Fork and delete buttons on each workspace row of the Harness sidebar, plus a /fork-worktree command: fork creates a git worktree and registers it as a new workspace, delete removes the workspace folder through git worktree remove (asking again before discarding uncommitted work) and drops the registration.

Test work framework for DSH that scaffolds a product, module and version directory tree, registers seven test_framework_* tools and four runtime skills, and adds a prompt-level gate that reports which requirement-document splits, versions, related documents and environment credentials are still unrecorded before testing starts. Requires the playwright MCP server (no fallback).

Evidence-first reuse skill for DeepSeek Harness: before implementing, porting, choosing dependencies, or troubleshooting a tool, it searches the local project and machine for existing solutions in layers, judges reuse on checkable evidence, refuses reuse when essential requirements or risks are unmet, and reports what could not be verified. Ships as a DSH bundle that registers the skill on ctx.skills.

Tag-based skill filtering: attach tags to DSH skills, then hand each workspace or conversation only the subset its boolean tag expression selects (for example `pdf + docx` or `aegis * plugin`). Excluded skills are deny-shadowed out of the model catalog rather than merely hidden in the settings UI; skills outside the expression can still be added by hand or force-disabled, and the bundled `tagging-skills` teaches the agent to derive a tag set from the machine it is running on.

Previews a workspace OpenWiki in the DSH Web right Sidebar: detects the wiki directory, serves it with the official `openwiki visualize` reader on a loopback port, and embeds it in its own tab, reporting the installed openwiki and DSH versions against configurable floors and checking the registry for its own updates.

Registers two tools for DeepSeek Harness. `doc_ocr` turns scanned PDFs and images into structured text (per-page text, financial tables with a balance-sheet tie-out check, contract-clause hits) through a local RapidOCR engine or a Zhipu GLM-OCR cloud engine, and `doc_preprocess` turns a directory of raw files into an Obsidian-ready knowledge base through a seven-stage pipeline with backend routing and sha256-based incremental skipping. Numbers that fail the tie-out are reported, not invented. The local engine needs Python 3 with rapidocr-onnxruntime, pypdfium2 and Pillow (pip install -r requirements.txt); the GLM engine needs ZHIPU_API_KEY.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Adds a logon autostart switch for the DeepSeek Harness desktop app on Windows. It manages a single shortcut in the user Startup folder: no registry writes, no admin rights, no extra background process.

Registers one `workpaper_gate` tool for DeepSeek Harness: it audits a workpaper set for completeness, covering both the target design or template itself and the instance-versus-template structure, with the rule list, template list and core-table list all configurable in one spec file. Findings come back as blocker, warning and info, and the workpapers are only read, never modified. Requires Python with openpyxl.

Registers one `valuation_service` tool that reads a workpaper tree of 01/02/04 JSON and returns one unified schema: six ratio groups, forecast ratios, DCF input slots with explicit missing markers, comparable PS/PE and IRR. Deterministic and local: missing WACC, growth, capex, D&A or working-capital inputs stay blank instead of being guessed, and assumption differences are flagged for review.

Registers one `principles_audit` tool for DeepSeek Harness: it reviews a principle library for principle_id collisions and legacy ids, missing causal statements, boundaries, counter-examples or evidence, duplicate and near-duplicate principles, status-versus-confidence inconsistencies, long-stale entries and dimension-coverage gaps. Findings are severity-ranked and a hard gate turns them into pass, warn or fail, where every critical finding must be covered by a valid, unexpired exemption. The library is only read.

Registers one `office_audit` tool for DeepSeek Harness: it recalculates formulas with the bundled LibreOffice Kit and then audits the recalculated values — formula errors, broken sheet references, formula-consistency, hardcoded constants, number-format and unit mismatches, balance-sheet balance, retained-earnings roll-forward, cash tie-out, cash-flow subtotals, ratio-table conventions and data-cleaning issues. Findings are severity-ranked with the offending cell, and an optional findings sheet can be written into a copy. The source workbook is never modified. Requires Python with openpyxl and the bundled LibreOffice Kit.

Registers one `context_extract` tool for DeepSeek Harness: it compresses a long raw document (financial report, contract, ledger) into dense structured Markdown plus JSON — key metrics, tables, numbered clauses, entities and cross-check alerts — so a downstream pipeline can work from the compressed form instead of re-reading the raw document. Financial statements, legal contracts and business ledgers are detected and handled differently; balance-sheet and cash tie-outs are run and mismatches are flagged as alerts rather than silently fixed. Read-only; never modifies the source file. Requires Python with openpyxl and python-docx.

Per-workspace closet for temporary scripts and their run logs, kept in a .dsh-fix directory inside each project. Registers a script with its language and purpose, scans a project for leftover scratch scripts, backups and log files, runs registered scripts with a timeout and writes each run to a timestamped log, and sweeps chosen files into a reversible trash with per-batch restore. Scanning only lists and never deletes; cleanup moves files instead of deleting them; files already tracked by git are refused unless forced. Ships 7 agent tools and a settings panel.

Author custom tools in Python from a web page, in chat, or from the dsh-go app's native panels, and register them as DSH tools without a restart; dangerous tools need built-in approval on every run, tools can be grouped into packs, and an optional unlock mode exposes them per conversation. Needs Python 3 on PATH.

Deliverables registry for DeepSeek Harness: agents register the final artifacts of a task (reports, pages, documents, sheets, images, datasets) into one settings section and manager page that store paths only, never copies, and remove recoverably; a standalone CLI (add, list, stats, check, remove, restore) reads and audits the same registry outside the app.