Plugins

LAN access for the official DSH Web UI through a gated reverse proxy: DSH keeps its own loopback binding, and a second port adds a password gate, self-signed HTTPS and per-device pairing that can be revoked individually, with a QR code to open it from a phone.

Instance manager for DSH Web: a Mini Utility Dock panel that lists every local dsh web instance the machine can see (port, PID, uptime, live session count, resident memory, version), starts a new instance on an automatically picked free port in 3080-3129 or on a port you name, opens a row in a new tab, and stops one or all of them through that instance’s own graceful shutdown (appExit). Rows also show what each instance is serving, and read-only instance logs and session summaries are one click away. Where a peer is configured, the same panel lists and queries instances on other machines over a bearer-authenticated link. Every route is loopback-guarded, and a browser-facing action must additionally pass the host’s own browser authentication.

Loopback-first multi-agent message relay: HMAC-authenticated broker plus dsh plugin (relay_send/recv/peers/history), zero-dependency CLI and Python clients, wire protocol v1.0.

Brings the free models of a locally installed OpenCode CLI into DSH: starts or reuses a local opencode serve, discovers the live catalog and refreshes it every five minutes, and bridges the session event stream to OpenAI-compatible SSE through a loopback-only shim that validates Host and Origin.

Two-way bridge between GNU Emacs and a running DeepSeek Harness session over loopback HTTP + SSE: submit prompts, stream replies, manage sessions and workspaces, and answer ask-user/approval prompts from Emacs, with a Plugins-page card that installs the Emacs package.

Local Git plus the four GitHub remote tabs in the official DSH right sidebar: Changes (per-file staging, line diffs, and commit messages written by the model already configured in DSH), History, then Code, Issues, Pull requests and Actions proxied by the host half. The token stays in the host half through ctx.credentials and /dsh-git/* accepts loopback requests only.

Complete LAN/remote access for the Web UI: 0.0.0.0 binding, crypto.randomUUID polyfill, token gate (401 login page + WebSocket interception, loopback exempt), privileged-fence and settings-persistence exemptions, and an idempotent installer with upgrade recovery.

Windows terminal dock inside the DSH web GUI. It is the occupant of the shipped shell.bottom slot: showing it splits the screen (the columns shrink instead of being covered), hiding it returns the space and keeps the PTY session alive. Each session is a local ConPTY child spawned through node-pty and rendered by xterm.js over a loopback-fenced WebSocket (backpressure, debounced resize). Other plugins can add terminal or DOM views through a host registerView API and a window CustomEvent channel.

Turns every file artifact the agent names in chat into a clickable entry — and refuses to paint one that does not resolve. Hover resolves asynchronously, and only a file that really exists becomes a hand pointer with a dashed blue outline (30 s TTL cache, so repeated hovers cost nothing); confirmed non-artifacts stay plain text and the right-click falls through to the host menu untouched. Left click reveals the file in Explorer already selected (Shell.Application Explore plus SelectItem with SVSI_ENSUREVISIBLE, so the pane scrolls to it; explorer.exe /select is deliberately not used because it silently drops the selection when an instance is already running). Right click offers seven actions: preview in DSH's built-in sidebar, open with the default app, reveal in Explorer, save as, copy the file itself to the clipboard, copy the absolute path, or insert the path into the composer. Ctrl or Shift with left click opens with the default app, Alt with left click copies the path. Names resolve through the absolute path, the session workspace and every profile workspace, then a cached basename index built with a depth budget, shrinking from the left when a mention swallows leading words. The host half also keeps six system-prompt rules resident, so absolute paths stay in tool arguments while the body shows only file names, and every route is loopback-only.

Whole-disk file search tool backed by the local Everything (voidtools) index: millisecond path queries for the agent over a loopback-only HTTP fast channel with es.exe fallback, plus verified auto-install of the latest stable Everything + ES CLI backend (signature-checked, proxy-aware). Windows only.

OpenCode Zen free-tier models for DeepSeek Harness with anonymous no-key access, a loopback OpenAI-compatible shim, and real bash/read gate tools.

One-click restart for the DSH desktop client, from five entries you can toggle individually: a sidebar panel, the sidebar footer, the conversation header, a Settings → General row, or the /restart slash command. The app is closed gracefully (only the main process is signalled, so the host can flush session logs) and relaunched by a detached helper that survives the shutdown; optional guards wait for running tasks or an in-progress plugin install, results land in a receipt, requests are fenced to loopback same-origin, and every switch is persisted in the profile config file. Only the four UI entries can be switched off; the slash command is always available.

Makes the built-in web_fetch tool work when Clash / mihomo runs in TUN mode with fake-ip: it lets the fake-ip address ranges (198.18.0.0/15, fdfe:dcba:9876::/64, 2001:2::/48) past the public-address check that otherwise rejects them, while loopback, private and link-local addresses stay blocked as before. Works with no proxy environment variables and no Clash changes.

Local multi-plan bridge for DeepSeek Harness: use your existing ChatGPT Codex, Claude, ZCode (GLM) and Qwen subscriptions through one loopback proxy, with a settings-page status card and one-click provisioning. No dsh core changes.

Adds a row at the top of the sidebar that switches the whole Web GUI to another DSH host reached over a loopback port, and shows that host's session state on the row (running, unread activity, or waiting for your answer).

DeepSeek Harness plugin: provider sign-in, model catalog, and selection routing over a loopback-only /model-hub channel

Floating power dock for the DSH web GUI: one-click restart or graceful shutdown of the dsh host, loopback-guarded and dependency-free.

One-click start/stop button pinned to the window bottom-right corner: restarts DeepSeek Harness in place via a detached helper that relaunches the exact boot invocation (loopback same-origin guarded), with an optional stop-only action.

A Storage settings page for DeepSeek Harness: a donut of what dsh occupies on this machine (install, sessions, attachments, runtimes, plugins, temp), a drill-down that lists archived sessions and can delete them, and a clean action that only touches rebuildable caches. Deleting to the system Recycle Bin and Open folder are Windows-only; scanning works everywhere. Host routes accept loopback connections only and are CSRF-guarded; nothing leaves the machine.

Kizuna agent letterbox: four tools that let an agent read its own inbox (mailbox status, pending letters, one letter in full) and answer a letter with completed / failed / input-required / working state. Kizuna is an agent directory with a reliable task relay: a per-agent kizuna-box on the same machine holds the inbox, retries unanswered deliveries after 3 / 10 / 30 / 60 / 120 minutes and records every delivery attempt in an append-only trail. The plugin talks to the local loopback box only and holds no credential.

Registers a QwenWork (千问办公) model provider that reuses the desktop client's local sign-in, runs a loopback OpenAI-compatible bridge on 127.0.0.1, and translates DSH model requests into the ACP-style control-envelope conversation protocol the upstream actually speaks.

Open a Mac or Windows DeepSeek Harness Web instance from iPhone or iPad Safari: 8-digit pairing, a LAN gateway for loopback-only hosts, optional Tailscale Serve, and iOS-only Safari input and touch fixes. Installs with dsh plugin add.

Local non-generative decision layer: phocinae_ask and phocinae_gate return typed verdicts with calibrated confidence from a small decision model, with fail-closed escalation. Needs a local phocinae-server (pip install phocinae-server) with the Phocinae-Largha-150M-v1 model on loopback port 8155.

Adds a toggle to the DSH UI that opens the current session to a phone browser through an embedded loopback reverse proxy and a Cloudflare quick tunnel, and pushes each new tunnel address to WeChat.