Plugins

Connects DeepSeek Harness to a deployment-owned AI Asset Hub MCP server and exposes eight reviewed read-only asset tools.

Azure resource management: query and show resources, deploy Bicep/ARM templates, and check the activity log.

A full-page console panel opened from the sidebar, with eight tabs: an overview; a session list read from the sessions service (title, directory, running state, updated time, with filters); installed bundles and Loader entries from pluginInventory and pluginManager, with per-bundle enable switches; a plugin market listing public topic:dsh-plugin repositories from the GitHub search API; a model and provider editor that writes the llm-pi-ai settings namespace through remote.settings.mutate (switch a session model, add or edit providers and their model lists, and store API keys via remote.credentials, merging over the stored profile so fields the form does not expose survive an edit); MCP and skills tabs; and a usage tab that reads the host's loopback /api/dsh-usage/overview document. Services are declared through ctx.inject, so a deployment that omits one mounts without the console rather than crashing.

Control panel for a local credential-redaction gateway in DeepSeek Harness: gateway and model health, audit metrics, a dry-run leak tester, an exemption whitelist, encrypted key management, credential-protected model entries and deployment controls.

A DSH plugin that automates shipping a local project: create a GitHub repository and publish it (git init/commit/push + topics + tag + release), sync requirements/progress to Linear, publish to npm, and announce in the community Discussions — to join the

DSH Web trusted-domain bootstrap for reverse-proxy and tunnel deployments.

Web management panel for Docker on DeepSeek Harness: manages Docker MCP servers (deploy/remove, official catalog search/pull, gateway start-stop-restart, custom deploy) and containers/images (list, start/stop/restart, remove, logs, inspect, interactive terminal, create, pull, build, load) across local CLI and SSH remote targets with one-click switching. Credentials are encrypted with Windows DPAPI, HTTP is loopback-only, and command parameters are whitelist-filtered. Build-free pure ESM; client is zero-dependency.

Windows-only tray monitor for DeepSeek Harness: deploys and manages the standalone DshTaskWatcher tray app - four-state tray icon (gray=disconnected, green=idle, amber=running, red=attention), a per-task panel with live duration/tps/tokens, and completion & outcome notifications. Start/stop switch in Settings > Plugins; the watcher is an independent process that survives DSH restarts.

Version badge above the sidebar settings button: shows the current dsh version, expands to list every core package version, and checks npm for updates with one-click deploy.

DeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never touch - fences read, write, search, and shell tool calls at tools/pre-execute

Task-queue execution endpoint for DSH: requires a separately self-deployed Hermes Agent gateway plus your own WeChat inbound script; verified on a single environment — expect to adapt it.

Deployment-level static web plugin for DSH: cerrda dark re-theme of the DeepSeek Harness Web GUI (rose/purple oklch, Liquid Glass composer, Silk WebGL2 background, Sora/Fraunces/JetBrains Mono). Install with: dsh plugin --profile web add dsh-cerrda-theme