Plugins

Self-evolution: the agent hot-mounts/removes persistent plugins on itself mid-session.

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

Writing tools that remove AI-sounding patterns and match your personal voice. 8 deterministic tools scan text, build a style fingerprint from your samples, and return rewrite briefs.

DSH Web GUI right sidebar: VS Code-style file explorer plus source control (git status, stage/unstage/discard, commit, diff, commit graph, fetch/pull/push sync, branch and remote management, git init, multi-repo switch, color-coded file status, file-type icons), an editor view that opens every file reached from the chat, the file tree or source control (Markdown/HTML/PDF/image previews, 15-language syntax highlighting, hunk-level diff editing, Ctrl+S save), file operations (new/move/copy/delete, reveal in file explorer), a collapsible icon rail, a multi-tab bottom terminal (ConPTY), and commit messages generated from the staged diff by a host-configured model.

Knowledge base as a canvas in the right sidebar: notes are nodes, and nine tools let the model read, write, link and remove them. A node can carry pictures and documents, and reading one returns their text — Office files extracted in place — while pictures can be handed over as images.

One-command VPS deployment for DeepSeek Harness: a zero-dependency login gateway with automatic HTTPS that proxies the native web UI, a token-protected setup wizard, and one-click DSH upgrades with automatic rollback; as a plugin it adds Settings → VPS Deploy to install DSH on (or remove it from) a VPS over SSH from a form, plus version, upgrade, gateway status and a QR code to add DSH to a phone's home screen.

Move sessions across workspaces by drag-and-drop with true in-place migration; recover orphaned or unregistered sessions; re-point stale workspaces after folder renames. IDs and history stay intact, with per-step backup and rollback.

One-level session folders for the web sidebar - group sessions per workspace, move them by drag-and-drop or context menu, archive and restore, server-side persistence.

Side-panel Xiangqi board for DSH: play as red while the current DSH model chooses black moves, with Host-side rule and revision checks.

Curated research plugin market: adds a Research plugins page to Settings with hand-reviewed plugins for literature search, reference management, writing and workbenches — one-click install, update and remove pinned to the reviewed version, restart from the panel, and exactly one network request (its own catalog).

Faithful port of the hermes-agent MEMORY.md / USER.md mechanism for DSH: bounded dual-bank memory (2200/1375 chars), a single `memory` tool (add/replace/remove/batch), frozen-snapshot injection per session, nudge reminders, DSH-native JSON storage — zero external dependencies, zero LLM cost.

Git worktree panel for DSH Web: replaces the workspace sidebar with project → main/linked worktree → session groups, creates and removes worktrees, switches the main branch, and migrates configurable project-local or global storage with dirty-tree and active-session safeguards.

Move, archive, restore, portable backup/export and import sessions across workspaces in the DeepSeek Harness web UI.

Plugin marketplace in Settings that targets any local profile, not just the running one: install, update and remove across web, headless and other profiles, with install-script warnings, an installed view that also covers non-catalog profile dependencies, and an automatic DSH restart when the current profile changes.

Manage MCP servers from the Web settings panel: view, add, edit, remove, enable or disable them, with hot reload on save.

Adds Delete to the DSH sidebar session menu, moving the session — and its whole descendant tree when it has subagents — into a recycle bin that relocates the directory on disk (an atomic rename, never a copy), plus a sidebar bin panel with title and full-text search, workspace filter, sorting, per-session chat-log viewer, restore and permanent delete. Deleting also clears the workspace slot, the pin, the archive flag and the projection-cache row, so a restore puts the session back at its original sidebar position; permanent deletion also clears the schedules bound to it and removes the emptied project directory. Verified on DeepSeek Harness 0.2.1-rc.2, with a whole-profile residue scan coming back clean.

Orchestration-mode preset generator for DSH: a lead agent delegates to four built-in role helpers that carry only their own tools, and the web panel adds or removes custom helpers with their own tools, skills, and models, per workspace — zero changes to the harness source.

Vision-first Mac computer use, for when the accessibility tree is unavailable. Ships 11 desktop_* tools - window list, screenshots, OCR text targeting, numbered elements, coordinate clicks, typing, scrolling, drag - plus a Codex-style cursor overlay with spring animation. Clicks are delivered to the target process, so the real pointer never moves and nothing steals focus. In DSH it shows up as Mac Desktop Control with a settings page that checks the engine and the Screen Recording / Accessibility permissions, with a button that opens the matching System Settings pane. Works out of the box: the tarball bundles the dsh-cu engine and the overlay as prebuilt universal binaries (Apple silicon + Intel, macOS 11+, ad-hoc signed), compiled from the repo's Swift sources by the release workflow - no clone, no Xcode, no install.sh. The only setup is granting DeepSeek Harness Screen Recording and Accessibility once. macOS only; on Windows and Linux the plugin loads without registering the desktop tools.

Per-message delete for DSH: remove a user message, one reply step, or a whole assistant reply from the derived model context through the official surface-replace contract, and hide it from the visible transcript without rewriting the append-only log.

RSS/Atom subscription tools (list/add/remove/fetch/check/search/opml_import/opml_export/health) with cross-feed keyword search, cursor-based incremental fetch and OPML import/export, persisted to settings. A step-by-step first-run guide (3 steps) now opens inside its settings panel.

Move a session to another folder from the Web UI via drag & drop or a menu picker, permanently delete a session with a risk-consent dialog, and AI-rename a session by summarizing the whole conversation (typo-aware). Each action also ships as an agent tool.

Registers the minas-webdav MCP server as one stdio row, giving the agent 14 tools for a Xiaomi Smart Storage (MINAS) NAS without mounting it: list, stat, tree, find, du, df, cat, upload, download, mkdir, move, copy, delete and a capability probe. The Python package behind it is installed separately with pipx.

Moves a plugin set between DSH profiles (web to desktop by default): diff, pre-checks, an offline script for CLI-owned profiles, and a post-restart verification. It installs nothing itself.

Reports which skills each turn invoked (loaded by the model, typed as /name, or none) and manages the local skill directory: install from a pasted repository, folder, SKILL.md or zip address, set a Chinese display name in the skill meta.yaml, and remove a skill while keeping a backup.