Plugins

White-box causal guardrail for dsh: every tool call is adjudicated before execution along a deterministic causal logic chain — blocks destructive and credential-file operations, escalates repeated boundary violations, cuts faulting links until verified-fixed, and gives risk verdicts on un-auditable execution; runs fully local with zero API cost, plus 6 white-box self-check tools.

LLM-assisted auto approval with countdown fallback for the Auto permission preset: static rules, risk tiers, breaker and file audit.

Expert-mode agent preset for DeepSeek Harness (v0.9.2, npm dsh-expert-mode, bilingual EN/ZH): a chief coordinator plus 17 domain-expert subagents with automatic task delegation. Features: taskboard scheduler (file-system task state machine pending/ready/running/done/failed, dependency DAG, atomic claim, retry, crash recovery), quality gates (5-stage pipeline for high-risk tasks: requirement clarity, implementation, verification, independent review, integration, with 2-round rework limit), Five-Anchor constraint (review/convergence/anti-drift/collaboration-check/resource-awareness per turn), Near-distance Guidance (identity/task/output template per expert), progressive disclosure (~28% token savings), expert persistence, inter-expert file message bus (direct P2P comm, zero coordinator relay), cross review, experience pool, fast-track for simple tasks, fault recovery with auto-retry. Experts: data analyst, copywriter, legal review, product manager, frontend, UI/UX, architect, social media ops, growth hacker, quant finance, finance, backend, DevOps, database, QA, security.

Usage tiers and shareable stats cards: 🐟→🐳 ranks by monthly token burn with a locally-computed estimated percentile, precise pricing for 46 models across 6 vendors (including size-tiered Chinese pricing), backfill of pre-install sessions, and old-vs-new comparison across the 2026-08-17 rate change. Local-only, no telemetry.

Business knowledge-network context for DeepSeek Harness: bind a session to an OpenBKN knowledge network, query its objects and metrics through managed MCP tools, and open trace-backed provenance (execution facts and a business graph) for each answer. Ships with the OpenBKN Runtime; the provenance views need an OpenBKN enterprise license.

DeepSeek usage dashboard for DSH Web: days-left estimate from recent average spend, daily/monthly/cumulative costs with period-over-period comparison, per-model cost ranking, cache savings, peak/off-peak pricing impact, and a draggable floating balance widget.

Media and vision workspace for DeepSeek Harness: image, video and speech generation, image Q&A and element locating, long-image OCR, pixel diff, HTML-screenshot verification and video summarization, with DashScope and OpenAI-compatible providers, model pools and a workbench client.

Enterprise AI resource platform as a 22-plugin cordis bundle: org/account/role IAM, OIDC provider and App SSO, MCP server management with the platform itself exposed as an MCP server, NAS asset storage, skill hub, agent and app registries, SaaS connector management, enterprise portal data channel, department agent workbench panel, DingTalk group bridging for message and approval push, one-click remote dsh enrollment with tool proxying, usage metering, wallet billing, model gateway, audit with alerts, self-update, and a reviewed third-party plugin marketplace — 70+ ops tools become callable by the dsh agent.

Tool-call discipline for DeepSeek Harness: injects a static behavior-constraint prompt section, drops the parallel pool to 1 after a tool failure (restoring after 3 consecutive successes), nudges the model to stop retrying after repeated failures, verifies writes with .bak rollback, gates high-risk commands, and tracks compliance stats via /behavior-status.

Enhances data visualization in DeepSeek Harness by automatically selecting chart types from user input and generating images for trends, comparisons, proportions, relationships, and flows.

Browse and install DSH plugins without leaving the harness: a /store command, a Settings → Plugins tab, two agent-callable tools and a bundled skill, with an approval gate that lists the detected risk flags before anything installs.

A second brain for your DeepSeek Harness agent — strong-model review before risky tool calls, plus 67 models from one wallet. No accounts, no API keys.

Financial research workflow and portfolio risk tools with source discipline for current market facts.

Standards-based OIDC identity, enterprise API-key binding, declarative branding, and OpenAI-compatible model integration for DeepSeek Harness

Live security beacon for DSH that follows tool activity. Click to view call statistics, risk provenance chains and blocked actions, with read-only task restrictions and tool metadata change detection.

Turns a one-line DSH draft into a complete task brief (role / goal / constraints / output format). The engine is a byte-verified port of linshenkx/prompt-optimizer (three modes, 10 templates identical to upstream); history is consent-gated with version chains and structural comparison; every run reports its token usage. Nothing is written back or sent without a click.

Manage VPS servers over SSH key login: 22 zero-token /vps- commands (status queries, recipe installs with a plan and /vps-yes confirmation, reboot that waits for the machine to come back), an in-conversation terminal (xterm.js over ssh -tt) for interactive programs, 5 agent tools with risk-tiered confirmation, file backup with automatic restore and a firewall/SSH safety net, 29 built-in recipes, and a settings page for adding machines.

Cristiano Ronaldo desktop pet for DeepSeek Harness: a chibi Portugal number 7 mascot in a bottom-right overlay whose animation follows the agent state — dribbling while tools run, thinking during a turn, waiting at approvals, diving on errors — and jumping in a SIU celebration with a host-process sound when a turn completes; it can be dragged, looks at the cursor on hover, dives on a triple click, and a settings panel manages several pets and imports custom spritesheets. It also runs as a borderless, always-on-top native Windows window that keeps living after the browser is closed: hovering shows the current workspace and conversation title, double-clicking opens the Harness page in Edge, and dragging, mouse-wheel resizing and a right-click menu work there too, sharing position, size and behaviour with the web panel. Pet sheets may use any cell resolution and scale preserving aspect ratio (atlas.scaling: smooth | pixelated). v2.2 adds a video route — feed it a clip (green screen or ordinary footage) and its real motion becomes the pet animations, via automatic backdrop sampling, chroma keying with spill suppression, motion-based segment splitting and union-bbox alignment; already-extracted PNG frames work too, with no video decoder installed, and the clip audio can be cut into per-action sounds. Pets can also be published to the community gallery under the DPSL-1.0 sharing declaration, and installed from it in one click. v2.3 adapts it to DSH 0.2 desktop clients — the celebration sound now falls back to spawning PowerShell when the host no longer provides the shell service — and makes a single click play a short, configurable taunt animation (`interactions.clickAnim`).

Adds local PDF reading, a durable paper library, traceable evidence records, and cross-paper comparison and synthesis tools.

A content-aware PDF reading plugin for vision models: profiles each page for figures (vector and raster), tables, formula risk and double-column layout, then applies content-aware hybrid extraction, rendering figure/table/formula pages as high-DPI region crops. Provides a low-resolution preview to understand the page layout, and renders a specified region at high resolution. Packaged as multiple tools for agents.

Static security scanner for DSH plugins: read-only audit (exec, credentials, exfiltration, obfuscation, install scripts, bundle manifest) with a 0-100 risk score.

Finance data toolkit for DSH agents: number and currency formatting (incl. Chinese wan/yi units), return and CAGR math, valuation and profitability ratios, PV/FV, risk metrics, and a data-quality checklist.

Move a session to another folder from the Web UI via drag & drop or a menu picker, permanently delete a session with a risk-consent dialog, and AI-rename a session by summarizing the whole conversation (typo-aware). Each action also ships as an agent tool.

Dispatch subagents with named profiles (model, reasoning effort, and tool scope per task), safety checks, cost estimation with savings comparison, and a full dispatch decision ledger.