Plugins

User-owned system-prompt insertion for DeepSeek Harness: place your own text at the head, middle, or tail of the assembled prompt, and edit it from a left-column Web panel with a live preview.

Per-package automatic updates for the DeepSeek Harness plugins you choose. On a schedule it asks npm for the latest version of installed plugins, updates only the packages you check, and skips local link or file installs, pinned versions and packages with errors; upgrades stay inside the major version and skip prereleases by default. Updates go through the profile's own plugin manager, so the profile write lock, pnpm step, bundle-patch validation and hot reload are the host's, and a failed install puts the previous version back. Each cycle is appended to a JSON log.

检查并更新第三方 DSH 插件：对比 npm 最新版本，精确升级（绕过 pnpm 新版本观察期）。入口在「插件页 → 插件更新」标签页。

Read-only DSH profile doctor: the seven config-tree checks (config-clobber, dead-patch, tool-collision, plugin-not-mounted, plugin-stale, entry diff, explain) plus eight ecosystem checks learned from real failures — pnpm store version conflicts that break `dsh plugin add`, patch insert names node_modules cannot resolve, broken junctions, duplicate-capability plugins, orphan backup dirs, GitHub-source deps, npm publish-scope hints, and the minimumReleaseAgeExclude gap. Four agent tools; every finding carries its fix.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Turn-end quality gate: when the turn edited code or config it walks each file up to its project root, runs that root one check from a fixed whitelist (`pnpm check`, `cargo check`, `ruff check .`, `tsc --noEmit`) and, only if that check really ran and failed, opens a new turn carrying the failure output instead of letting the turn close.

Moves a DSH profile to another machine with its plugins, not only its files: packs the plugin bundle selection and the whole settings layer into one JSON file, then on restore writes the configuration back, restores local plugin sources and plugin-owned data, and installs the plugin bundles the backup recorded that the new machine is missing (plugin manager first, pnpm as a fallback).

Git-based multi-device sync for DSH configuration — captures settings, plugin manifests, lockfiles and skills into a private repository, with one-click capture, apply, pull and restore, and plugin rebuilds from pnpm-lock.

Exports the plugin profile together with selected $DSH_HOME files and browser localStorage into one JSON, imports it back after a per-file preview, and can run pnpm install to reinstall the listed plugins; the format is interchangeable with the dsh-market profile backup.

Plugin updater for DeepSeek Harness that delegates every version decision to the dsh CLI, so the pnpm release-age policy still decides what is eligible; it snapshots before applying, can roll back, keeps a lock list, and can check or auto-apply on a schedule the user turns on.

Fish 自建 DSH 插件全家桶聚合包：一键插入全部本人自建插件的插件行（approval-guide / session-title-refresh / git-sync / settings-nav-order / visual-companion / agent-teams）。

Engineering work-tools for DeepSeek Harness: registers two model-facing Host Tools — a scoped `git` runner, and a package-manager runner (`dev`) that detects npm/pnpm/yarn/bun from the workspace lockfile and picks the right verb per manager. Both run through dsh's sandboxed shell and return structured stdout/stderr/exitCode, so the agent gets focused, reviewable results instead of raw bash, and adding another tool is a copy-paste of one register block.

DeepSeek Harness plugin: discovers the npm/pnpm/yarn/bun scripts of the current workspace (never descending into node_modules) and runs any of them in the background from a compact control in the composer area or the session header.

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

First-run health check for DeepSeek Harness: verifies Node/pnpm/dsh toolchain, home, profile, API key (names only, never values), workspace writability and npm registry, then prints actionable next steps — CLI plus an agent-callable quickstart tool, dsh-firstrun/v1 reports, zero runtime deps.