Plugins

Registers Brave as the web_search provider, resolving the API key from the DSH credential store, $DSH_HOME/.credentials.yaml, or the environment. No settings card and no fallback engine: one request to Brave's Web Search API per search.

MCP server console under Plugins: manage the official @deepseek-ai/dsh-mcp-client at runtime — add/edit/delete servers, enable/disable/reconnect, per-tool switches, live status and tool lists over SSE, mcpServers JSON import, and auto-migration of profile-YAML MCP entries; an uninstall leaves a native fallback block that keeps the same servers loadable.

Read-only clinic for DSH session logs: 22 named diagnostics (token waste, retry and failure loops, context bloat, cross-session amnesia, idle MCP servers and skills), each reported with a replayable evidence locator such as session.v4.jsonl.zstd#L101-L110, and each finding turned into an executable prescription — a profile-patch YAML snippet or a command with current to suggested values, risk, verification and source — plus a feedback command that retires a prescription you reject, after which the report states it was removed by your feedback. Zero dependencies, default zero egress, session files are never written.

Multi-cluster Kubernetes management panel powered by local kubectl, with resource filtering, YAML editing, live Pod logs, interactive container terminals, workload restart/scaling, and DSH theme synchronization; accessible from the sidebar or session view. Requires DSH 0.2.0-rc.2.

A novel-writing workspace: one folder per book, YAML/Markdown sections, an auto-wired relationship graph, consistency checks, four LLM tasks and four export formats.

A pouch of practical micro-plugins for DSH: per-turn wall-clock time injection, safe restart, session ID header badge, Tavily search provider, configurable LLM request-header routes, and an MCP server console managing the official @deepseek-ai/dsh-mcp-client at runtime — add/edit/enable/disable/reconnect, per-tool switches, live status over SSE, mcpServers JSON import, and auto-migration of profile-YAML MCP entries.

Per-profile settings overlay for DeepSeek Harness: global settings.yaml stays the baseline while each profile overrides any namespace through its own profiles/<name>/settings.patch.yml — object sections merge recursively, scalars and arrays replace wholesale, and !unset masks an inherited value. The overlay is transparent to existing plugins (they keep reading ctx.settings unchanged), writes land in the profile overlay only, and official schema validation, revision semantics, expectedRevision conflicts, watchers and events are untouched. Ships a settings command family (get/set/unset/mask/unmask/promote/demote/migrate/diff/layers) plus a Profile Settings section in the web Settings panel over a loopback RPC channel.

DeepSeek Harness web client plugin: group sidebar workspaces into a configurable three-level tree (分类→项目→会话). Sidecar YAML rules. dsh-plugin.

Stores the agent's long-term memory as plain Markdown in an Obsidian vault — every memory is a .md file with YAML frontmatter that Obsidian indexes natively, so you can read, edit, link and back up it with tools you already use. Nothing is locked in a database. Ships a sidebar panel (tag filter, sort by recency or importance, edit in place), 7 agent tools, three-tier token-budgeted recall, BM25 ranking (no embeddings, no API key, works offline, CJK bigram tokenization), importance decay with archiving (moved to .archive/, never deleted), and optional GitHub Contents API sync. A note containing a secret is refused rather than redacted, because a redacted memory reads as complete while the important part is gone. Zero runtime dependencies; everything comes from the DSH host.

Named model routes for subagent delegations, configured from a settings page: each alias binds a subagent provider, model and optional reasoning effort, token cap, agent preset, tags, plus a "when to use" line the model reads to pick it, so a delegation names only the alias. Adds five tools (delegate, list routes, edit config, wait, release), shows the route a child actually ran on in its session header, lets each UI element be switched off, and keeps all configuration in one local JSON file instead of YAML.

Shows OpenCode Go subscription usage (5-hour, weekly and monthly) in the DSH sidebar footer, with a countdown to the 5-hour reset. Requires an OPENCODE_GO_API_KEY credential (Settings → Models, or a refs entry in ~/.dsh/.credentials.yaml); without it the card stays hidden.

Layered cross-session memory kept as plain YAML: facts carry a version history instead of being overwritten, a briefing is injected at session start, and a nightly pass consolidates and shards by topic past a threshold. Zero runtime dependencies, so it also runs inside the dsh Android app (verified there).

Read-only writing-workspace panel for projects that contain a .writing-anything/ workspace: per-work overview cards, a unit tree, YAML artifact views as semantic cards or highlighted source, the source list and the decision/review queues, and in-panel unit review whose feedback is written back by wa-cli.

For DSH plugin AUTHORS: run this after you finish writing a plugin and it audits the entire publish path, then hands you the exact GitHub + npm + market commands. Pre-publish gate for DSH plugins. Turns every silent failure in the publish path into a deterministic check: package.json completeness (missing exports\["."], files omitting lib/ so the tarball is empty, no "type": "module", client declared without a ./client export), UTF-8 BOM, JSON/YAML parse errors, cordis.patch.yml insert rows written at the wrong indent (the bug that makes a plugin install and never mount), insert name mismatches, missing entry exports, require() inside ESM, missing LICENSE or README install line, missing tests, unscoped npm names that return a 403 no granular token can diagnose, versions already on the registry, and missing GitHub repos. Six agent tools; every finding carries its fix. Read-only, no LLM.

Telegram, Discord, Slack, Mattermost, Zulip and Matrix channels in one plugin, with per-conversation sessions that survive restarts, a Settings page that adds, tests and saves channels without YAML, and a fail-closed allowlist that rejects every sender until one is configured.

Sensitive-character replacement for DeepSeek Harness: matches messages and tool results against a YAML blocklist you maintain (global, per provider id, or per model) before the model reads them, and scrubs the outgoing request again before dispatch, so blocked characters cannot trip the official API Content Exists Risk 400.

DSH plugin: 29 deterministic, offline tools for JSON validation with exact line/column, JSONPath queries, YAML/CSV conversion, text diff, regex capture, encodings, hashes, Unicode, CIDR, JWT structure and timestamps. Every call returns a { result, meta }

Five production-grade DSH tools bundled into one plugin (8 tool slots total): git regression finder (find introducer, recent changes, bisect, blame age), stack-trace decoder with local code context, YAML/ENV/properties config validator with typo suggestions, cross-platform shell escape (POSIX/PowerShell/cmd), and MyBatis Plus SQL static auditor (N+1, missing @Transactional, LIKE leading %, SELECT *, missing WHERE). Zero npm dependencies, all offline; concurrency-safe except the bisect tool (dsh-when-broke). Each sub-plugin is also installable standalone (dsh-when-broke, dsh-stackdecoder, dsh-config-guard, dsh-cmd-shield, dsh-mp-auditor).

Gives the model a private glossary: reads 「滚木」 as "none" and 「棍母」 as "doesn't exist", and decides on its own whether to phrase a sentence with those words when expressing that meaning. Registers one system-prompt section and rewrites nothing; word lists ship as per-category YAML (moba/fps/comments/ai/dev/private) with a settings page to toggle files, change reminder strength and open the glossary folder.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Injects your existing markdown documents (notes, rules, knowledge-base files) into every dsh session's system prompt as read-only memory — list file or directory paths in `files`; no database, no service, no write path; UTF-8 byte-budgeted truncation with line-boundary fallback, total budget, YAML front-matter stripping, and freshness timestamps.

Adds two visual pages to DSH Settings. MCP servers are kept as a JSON source of truth that rewrites the profile patch managed block, with YAML validation and timestamped backups, plus import of a pasted mcpServers JSON that first lists what will be added or overwritten. Thinking unlock probes each OpenAI-compatible gateway for the reasoning efforts it really declares and writes the per-level config back while leaving other hand-written YAML byte ranges untouched; the available model list syncs from a separate button that previews additions and removals, then writes levels and models in one atomic pass, and can also run on the page schedule.

基于 DeepSeek Harness 的 GitHub 插件静态安全审查预设，该项目代码由ai生成，主要框架由我搭建，通过“侦察员+审计员”双 Agent 协作、通过实验性ai自测攻防。主要功能有防死机上下文裁剪，有效防御投毒与提示词注入。包含21条安全红线、依赖树连坐排查与自动 YAML 校验，这是一名20岁非科班大学生的AI安全探索，欢迎大佬指导。本项目不能代替人工审计。请勿在生产环境或敏感凭证环境中使用。

Pure JavaScript macOS Keychain credentials provider for DeepSeek Harness, replacing plaintext .credentials.yaml storage and fully supporting both refs and records without native builds, signing, or Xcode.