Plugins

Integrated control plane for the local strata model stack: manage the strata-hop :8080 model-switching router (status/models/warm/logs), stream live model-switch and load state into the web GUI status chip and the strata_status tool, preload a model engine the moment it is selected, edit run-config and shared chat settings from a GUI tuning panel or strata_params, and ship the dsh provider patch that routes chats to the router with Effort-level mappings. Read-only toward inference: it never sends a prompt and spends no tokens; bring your own running strata plus strata-hop (defaults :8080 hop, :8756 monitor). As shipped, the status server listens on 0.0.0.0:8756 with no authentication and open CORS, and its endpoints can change run-config and restart the engine; set host to 127.0.0.1 in cordis.patch.yml to keep it on this machine. It expects strata-hop as a systemd user unit.

Raises the local Host's HTTP header budget to 128 KiB and prunes stale dsh-auth cookies only on the launch-token response that mints the replacement, so an already-locked-out desktop profile recovers and later random-port launches stay at one cookie.

Qoder supplier plugin for dsh-router, covering both the CN and international regions. Uses a personal access token for authentication, signs requests to the Qoder cosy gateway and converts upstream SSE to OpenAI SSE; the model list reports the upstream display name alongside the key, while account selection and cooldown stay in dsh-router core.

All-in-One MCP and skill manager with feature-based recognition and native OAuth 2.1 authentication.

Cloudflare Zero Trust access for DeepSeek Harness (DSH). Access 认证、Tunnel 与 DNS 配置，无需公网 IP。

UI-level access gate + process-wide agent tool brake for DeepSeek Harness: shared session, strict 60-minute idle lock, native settings module. NOT server-side authentication.

OAuth2-capable IMAP email reader for accounts where password authentication is disabled. Microsoft disabled Basic Auth for personal Outlook IMAP in 2024, so this plugin authenticates via refresh-token OAuth2 (XOAUTH2) with automatic token refresh, plus app-password login for Gmail through an optional local HTTP/SOCKS proxy. Registers list/read/search as ol_email_* so it can coexist with the market dsh-email plugin without tool-name clashes.

WebDAV server: turns a shared directory into a WebDAV service that Windows, macOS and Linux can mount as a local disk, with token authentication, optional read-only mode, configurable directory/port/token, and per-platform mounting guides built into the settings page.

Offline, deterministic public API catalog search for DeepSeek Harness, with Chinese and English queries plus exact filters for authentication, HTTPS, CORS, status, source tier, and category.

Single-password authentication gate for the dsh web surface: configurable session validity, Ctrl+Shift+L lock, CLI password management, brute-force lockout, in-UI password controls.

OAuth2-capable IMAP email reader for accounts where password authentication is disabled. Microsoft disabled Basic Auth for personal Outlook IMAP in 2024, so this plugin authenticates via refresh-token OAuth2 (XOAUTH2) with automatic token refresh, plus app-password login for Gmail through an optional local HTTP/SOCKS proxy. Registers list/read/search as ol_email_* so it can coexist with the market dsh-email plugin without tool-name clashes.

Command Code provider plugin for DeepSeek Harness (dsh) — works with every Command Code plan including the $1 Go plan; uses the Studio authentication API key over /alpha/generate, not the Provider API

Local-first memory nebula for DeepSeek Harness with graph views, evidence chains, hygiene checks, and offline snapshots. Reads the memory stores of every workspace and of other memory plugins (read-only, for example meow-memory's SQLite) and writes only under $DSH_HOME/memory-nebula. Registers 9 agent tools and a system-prompt section (usage rules every turn, plus not-yet-read neighbouring memories after a few reads); its /export and /share endpoints return the full memory text without authentication on the local server, and an optional standalone engine listens on 127.0.0.1:7890.

Configurable static launch token for the DeepSeek Harness Web GUI across restarts and reverse proxies.

Provider pool for DeepSeek Harness. It runs a local OpenAI-compatible proxy that tries configured LLM providers in priority order and falls back on authentication, quota, rate-limit or server errors, with per-provider usage statistics.

Native DeepSeek Harness panel for local CLIProxyAPIPlus with Qoder and Codex authentication, quota views, automatic provider and model catalog sync, YAML editing, service control, request trends, and runtime logs.

Windows x64 bundle with the official Antigravity CLI, using agy acp and cached CLI login. Delegates one-shot text tasks with selectable authentication, model and thinking level; uses host peers for Harness 0.2.1 from rc.3 and 0.2.2 from rc.1, including subsequent RCs and stable releases within both series.

Appearance suite for DeepSeek Harness: deep-space starfield background, Cyberpunk 2077 HUD theme, startup authentication sequence, and a sidebar toggle for borderless windows.

DSH 手机远程访问 + 远程桌面：内置本地代理(8090)+配置面板+远程屏幕/鼠标/键盘。配合任意内网穿透工具（cpolar/frp/ngrok等）把公网URL转发到 127.0.0.1:8090 即可用手机浏览器远程使用本机 Harness。本包为 dsh-remote-desktop 的修复分支，已修补 DSH 0.2.x browser-auth 导致的 401（dsh web authentication required）。

Connects DeepSeek Harness to MCP Bids public US federal opportunities and connected TED notices, with source-linked document tools and personal API-key authentication.

Restart initiated by the agent itself, not by a button. The agent calls one tool, then the plugin takes over: it waits until every agent and background job on the host is idle, runs a visible ten-second countdown that a click, a scroll, or a key press cancels, then restarts DSH and wakes the original session so the agent carries on from its last sentence. No button, no manual entry: the tool is the only way in. Works on the official desktop app and the official web client; third-party shells are not supported out of the box. Windows only. One thing to know: every launch of the DSH desktop app writes a fresh identity cookie into its own profile and never prunes the old ones, so after enough launches the cookie header outgrows the request limit and the next start dies with HTTP 431 and `Error: desktop welcome: Web authentication failed`, with no window at all. Restarting by hand runs into this too; this plugin simply restarts far more often, so it brings that day closer.

Registers one `wind_finance` tool for DeepSeek Harness: it routes a financial question to the right Wind data domain, executes it over the Wind meta-router MCP endpoint (or the per-domain CLI in batch mode), and keeps a per-day receipt so the same dataset is not pulled twice against one shared daily quota. Authentication, quota and network failures are reported with their error codes instead of falling back to another data source. Credentials are read from the environment and are never bundled with the plugin.

\!WARNING\! this removes the authentication step !WARNING! Exchanges the process launch token for the browser-session cookie, so a first visit needs no ?token=... in the URL.

Routes DSH filesystem, shell, subprocess, and PTY operations to local, SSH, and Docker execution nodes, with a node registry, an authentication gate, a mobile-aware management UI, and per-workspace custom project instructions.