Plugins

A separate narrow-screen web surface for DeepSeek Harness rather than the desktop GUI scaled down: it serves its own session list and chat stream behind a random access token over LAN, a tunnel (cloudflared, localtunnel or localhost.run) or an SSH reverse forward through a server you own. On the phone it streams assistant text, thinking, tool calls and results, sends prompts, stops the running turn, answers blocking questions and tool approvals (including ones waiting in other sessions), switches model, thinking level and permission preset, sends up to four photos compressed on the device, and keeps the computer awake.

Connects DeepSeek Harness to the hosted Local Commander MCP server at localcmd.app via mcp-remote with browser sign-in, to read files and Git, run the checks you approve and check local services on your Windows computers. Requires a Local Commander account and the paired agent running on the Windows PC.

Rice on a Stick: Expose control over DeepSeek Harness (dsh) through MCP (Streamable HTTP) and dsh's native tools, with a configurable list of allowed models. Long-tail host endpoints can be invoked via a generic, audited bridge. By default, it listens only on 127.0.0.1, with an optional access token.

Adds a toggle to the DSH UI that opens the current session to a phone browser through an embedded loopback reverse proxy and a Cloudflare quick tunnel, and pushes each new tunnel address to WeChat.

Telegram remote for DeepSeek Harness — attach a live web session from your phone and answer its questions there, with a Russian UI. Russian fork of hi-wenw/dsh-telegram-channel (MIT).

An independent permission gate above the built-in sandbox. It blocks writes outside the workspace and to protected paths even under danger-full-access, refuses whole-file overwrites without a complete fresh read, and keeps ZIP restore points plus Recycle Bin copies before destructive actions.

Blocks API keys pasted into the composer or written by tools, logs leak events, and scans the workspace for exposed secrets.

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Source-install updater for DeepSeek Harness: checks the official GitHub release and the npm record, builds the target tag in an isolated directory, smoke-starts it, then switches through a supervisor process with rollback, with scheduled checks and a daily idle-only install window. Source install only (macOS/Linux); requires Node.js 22.19+, pnpm and Git.

Automatic second-opinion review: a restricted child session re-reads the agent's recent work with read-only tools and delivers at most one evidence-backed note, or stays silent. Requires a model route in the config; the plugin stays disabled until one is set.

Windows only; the upgrade path needs DSH_AUTO_UPDATE_LAUNCH_CMD configured. Checks, installs and rolls back DeepSeek Harness CLI updates from the web settings page, switching the launcher pointer only after the new version passes a config-tree check and a health-checked restart, and reverting automatically when it does not boot.

Mirrors assistant streaming frames (deltas, blocks, commits, turn fences) to a configurable NDJSON sink for external consumers.

Safe detached DSH restart: /restart and /dsh-restart slash commands with native candidate styling plus a dsh_restart agent tool; a detached worker restarts DSH after 3 seconds without freezing the session, and Windows/macOS use a native Node helper built on the official appExit service.

Panel entry for the official client-plugin hot reload that tells you what actually changed first: it diffs each row rev against the last seen state and reloads only the plugin bundles that changed, keeps whole-graph reloads behind an explicit confirmation (a bare call is refused and reports the affected row count), and reports replay counters so a silent no-op cannot hide.

Read-only panel reporting an instance's plugin bundles, patch inserts, skills, upgrade health and decoupling health.

Self-healing plugin doctor: detects failed DeepSeek Harness plugin rows, disables them automatically after backing up the profile patch, and reports diagnostics via /doctor.

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

DeepSeek Harness plugin for rulemux: asks the local rulemux CLI for the rules rendered for this workspace (rulemux inject --agent dsh) and injects the output into the session at the first user turn, once per session. Nothing is written into the workspace for rules; skills are the only part that lands on disk.

Rebind running sessions onto a rebuilt agent-preset revision, so preset changes apply without restarting dsh.

Task-tiered session notifications for DSH: marked main-line sessions alert as they finish, other sessions batch into one summary, plus balanced and silent modes; per-event sounds or uploaded audio, per-session mute, click-through notifications, and an option to wait for subagents.

One-way Telegram notifications for DSH.

macOS 13+. Plays a macOS system sound when DeepSeek Harness needs a tool approval, an agent question, a macOS permission prompt, or an administrator password sheet, then repeats on a 0/25/20/15/10/5 second cadence until the request is resolved. Ships as a bundle with a switch and a config form in the Plugins page.

Snapshot-bound multi-agent Git review with independent verification, majority voting, resolution tracking and an AI review gate.

Shows the repository, branch, working-tree change count and short commit SHA on the composer row, with a searchable branch switcher and a per-file diff pane in the right sidebar.