Plugins

Vision bridge for text-only DeepSeek routes that analyzes attached and local images through configurable OpenAI Responses, Chat Completions, or Anthropic Messages endpoints while leaving image-capable routes native.

Reuses DeepSeek web's built-in vision mode for text-only models: the deepseek_vision tool drives the local deepseek-vision-cli browser automation (manual login helper, deep-think enabled, auto-closes browser) and returns image descriptions as text.

Vision toolkit for text-only DeepSeek: model-invokable `vision` tool, wrapper adapters for deepseek/opencode-go (v4 flash/pro), Antigravity IDE quota (default, flash/pro) / any OpenAI-compatible VLM / Gemini / local Ollama channels, evidence memory with compaction rehydration, content-hash cache, and a bilingual client panel.

macOS Keychain credential provider that replaces the local-file provider and uses a signed, notarized universal helper.

dsh-skin 增强版：为 DeepSeek Harness 提供皮肤切换与自定义背景壁纸。在原版基础上修复了两处问题——① 大图/特殊格式上传无响应（改用 createImageBitmap 直接解码、增加处理中与错误提示）；② 主题切换时 overrideTokens 触发 theme/change 导致无限递归栈溢出（加皮肤/明暗守卫断开循环）。壁纸存储从 localStorage 压缩方案改为 IndexedDB 原文件直存，全画质显示、零压缩，并自动迁移旧数据。

Skill manager for the dsh web GUI: a sidebar entry plus a panel listing the skills visible to the current session (split into global / local groups) with per-skill on/off switches, create / import / edit / delete. Disabling a skill removes it from the mod

Evidence-first operating kit: six read-only tools (capability catalog, staged workflow plans, packaged skill reader, bounded local memory search, repository release audit, release checklist) and five packaged skills - plans and audits, never remote writes.

Bounded, privacy-safe local scanner for Codex, Claude Code, WorkBuddy, and CodeBuddy metadata: atomically aggregates keyed evidence and deterministically advises built-in DSH presets and optional capabilities—without content retention, network access, or preset mutation.

Bounded local memory with CBDC authority gating: SQLite + FTS5 claims, scoped recall with explainable use/verify/ignore decisions and a full audit trail, /memory commands, ≤3-claim/1200-char injection per call, no extra model call.

Local, per-session LIFO prompt stash for temporarily setting aside unfinished composer text and safely restoring it later.

Inspect the files an agent touched, review session artifacts, preview bounded content, and manage local Workspace Memory without leaving the conversation.

DSH File Converter: local file conversion across 20 tool chains and 1000+ format pairs — convert files, query the format matrix, and check converter availability via model tools. DSH 文件格式转换插件：跨 20 个转换器、覆盖 1000+ 格式对，以模型工具提供本地文件转换、格式矩阵查询与转换器可用性检测

DeepSeek Harness (DSH) plugin: injects a bounded, timestamped snapshot of your local Second Brain (identity + state fingerprint + pointers) into every new session's prompt. Read-only, zero-write, fail-loud, zero dependencies. 第二大脑载入器：让每个新会话开局自带记忆快照。

Local-only cross-session memory for DSH with tools, system-prompt injection, and a Settings page.

DeepSeek Harness conversation polish: message and step folding, composer and sidebar sizing, folded-content search, turn timing, and confirmed local conversation history deletion.

Git tab in the DSH web UI right sidebar for the current session repository — switches branches from a dropdown of local and remote branches (with ahead/behind counts), stages files in staged/unstaged/untracked/conflicted groups, commits, fetches, pulls and pushes with automatic upstream setup, drafts a Conventional Commits message from the staged diff with the default model and falls back to a plain chore message when none is available, and renders git log --graph with per-branch colors plus a word-level highlighted diff.

A 护航 panel in the session header that switches the local dsh-guard watchdog on or off and shows whether scanning is enabled, whether the guard is alive and when it last scanned; the Python watchdog that does the watching is deployed separately and found through the DSH_GUARD_ROOT environment variable. The watchdog defaults to a Windows checkout (D:\AI\Projects\dsh-guard); set DSH_GUARD_ROOT to point at another directory.

Runs the model's bash commands in a local shell chosen in Settings (Niubash, Git Bash, MSYS2, Cygwin, or any bash.exe on PATH) instead of rewriting them for PowerShell, and hides the pwsh tool on Windows.

Encrypted, scheduled backup and restore of a DSH profile — plugins, settings, skills, UI preferences and optional MCP connector or API keys — to S3-compatible storage, WebDAV or a local folder.

Whole-disk file search tool backed by the local Everything (voidtools) index: millisecond path queries for the agent over a loopback-only HTTP fast channel with es.exe fallback, plus verified auto-install of the latest stable Everything + ES CLI backend (signature-checked, proxy-aware). Windows only.

Bilibili autopilot run by a local Ollama model: it picks videos within per-topic quota, reads subtitles, hot comments and keyframes, decides whether a reply is warranted, then writes and posts one comment through a five-level safety gate. Triggered by dsh-schedule; write tools are not registered while commenting is disabled. v1.1 hardens the write path: revoking write access is a runtime state checked before every send, publishing is atomic, risk-control errors persist as a pause, and the final post re-checks persona style. Needs Python 3.10+ with the repo's requirements.txt installed.

Local-first long-term memory for DeepSeek Harness: text packages, on-demand recall, raw event citation, multiple brains and workspace boundaries.

Original CSS gold and purple glass theme with local avatar upload, crop controls, assistant naming and reading styles; no bundled game media. The package was renamed from dsh-glass-theme to dsh-glass-aurum because another author publishes an unrelated package under the old name; stop the old package before installing this one.

Scans a repository when a Harness agent starts working in it and, if more than a fifth of it is build output, lockfiles and logs, injects a note naming the largest offenders plus an .aiignore block that cuts them. Stays silent on clean repositories.