Plugins

Aggregated live streaming for DeepSeek Harness: browse and play bilibili, douyu, huya, douyin and kuaishou live rooms from one sidebar panel, with danmaku and model tools.

Community fork of KyoMio/dsh-zen-remote (do not enable both simultaneously — shares the ~/.dsh/zen-remote state and /_dsh/zen-remote/* wire protocol, and auto-defers if dsh-zen-remote is active): keeps the pairing-code PWA with Web Push and multi-host session relay, and adds a desktop Local / Remote / All workspace switcher, remote directory browsing with folder creation and workspace rename/delete (/v1/workspace-manage), automatic custom LLM provider and API-key sync to paired hosts, and bidirectional cross-host @ session reference hydration (session-ref-bridge). The gateway binds 127.0.0.1 by default; the LAN/Tailscale mode binds 0.0.0.0 behind a private-IP wall, and a paired desktop client runs terminals and file previews with the host's OS-user permissions.

Session-level root privilege bridge for DeepSeek Harness: ask mode with per-request web approval, full root mode (polkit password entry in the web UI) and fakeroot mode, with sudo or run0 --empower escalation and a configurable subagent sudo policy. It escalates real commands with sudo or run0: in ask mode each request waits for your approval; in full root mode every bash command of the session runs elevated after one password entry in the web UI. Delegated subagents need per-request approval by default (subagentPolicy: request).

Shows and loads Qwen (qianwen*) skills only when the session runs on the Qwen Token Plan CN provider, and hides and blocks them on any other provider.

Companion sidebar panel for the Kaipu site plugin: shows the built-in advisory team and seat status. Install together with kaipu-platform — seat data comes from the site plugin's gateway endpoints; a standalone install honestly reports "channel not ready". Removable: uninstall it and the site plugin stays fully usable.

Tool-surface governance for DeepSeek Harness: six scope-separated deny lists cut each agent's tool visibility through the host tools.restrict() API, unseen tool names wait in a pending gate, and dispatch_composed assembles a minimal surface from capability tags — a tasks array runs subagents in parallel, and a continued subagent keeps its original surface. Every decision goes to an append-only ledger that rotates into dated archives without ever losing history.

Unofficial Qwen Token Plan provider: registers a `qwen-token-plan-full` route with a model catalog fetched from the gateway, Responses and Chat Completions protocols, server-side built-in tools, image and video generation tools, and per-entitlement budget tracking that disables a benefit once its quota is exhausted.

Unofficial Volcengine Ark Agent Plan provider: registers an `ark-agent-plan` route with a model catalog fetched from the gateway, per-model thinking-effort control, server-side harness tools, and a quota badge with a panel showing remaining plan capacity.

Automatically discovers the local Magpie gateway to sync chat models, enables Codex and Gemini image generation, and configures image sources for eligible workbenches.

QwenWork (千问办公) model provider for dsh: signs in through the desktop device flow and then calls the official OpenAI-compatible gateway, so tool calls, image input and usage pass through; adds the tiers of the plan as a qwenwork provider, keeps the credential in a local file that a refresh rewrites in place, and shows the remaining credits of the account.

Password gate and reverse proxy for the DeepSeek Harness web interface.

Research-style problem solving in four gated stages: record sources by retrieval tier with local before web, turn each shortfall of existing tools into a gap that needs evidence, score candidates against weighted metrics with a deterministic engine, fuse or improve the weak ones, then iterate on measured deltas. Also organizes a directory into human-facing and machine-facing trees.

Blocks the first animated-image read in a session until the model has read a strategy document, returning the opening lines of that document in the denial and releasing the session once it is read; only reads by file path are covered.

A fork of dougen/dsh-deepseek-usage (the upstream repository has no license file; its manifest declares MIT) that adds IKunCode account balance queries alongside the upstream provider readers, subscription usage windows and model price snapshots. For IKunCode, your key is sent as a Bearer token to api.ikuncode.cc. It installs as @elsebit/dsh-deepseek-usage-extended from GitHub Releases with its own routes and settings, so disable the original usage plugin if you want a single card; the OAuth credential references it inherits are shared with the original.

Standalone mobile page for DeepSeek Harness served at /dsh-web-mobile-pmsfh/, with workspace-grouped sessions, streaming chat with markdown and collapsible reasoning, attachments via the official fileUploads API, read-only workspace file browsing, and login-gated static routes.

A DSH sidebar panel that talks to locally running Hermes TUI gateways over JSON-RPC: switch between bot profiles, resume their Bot Chat sessions, stream message and tool deltas, and embed the Hermes terminal view.

All provider quotas and prepaid balances from your local Magpie AI gateway (auto-discovers its port) inside the DSH composer: per-window usage bars, remaining percent, reset countdowns, and money-balance accounts.

HTTP API for DeepSeek Harness: agents / sessions / event timeline / SSE streams / steering / messages / runs / files / questions / subagents, with archived run manifests, per-key metering and tenant isolation.

Mobile gateway plugin that pairs DSH Mobile App with a self-hosted DeepSeek Harness host over an authenticated WebSocket. Fork of Clarklevis1995/dsh-plugin-mobile-gateway (same package name, install only one) that adds an optional encrypted address book deployed to your own Cloudflare account as a Worker with wrangler, an experimental WebRTC P2P transport, and a public-DoH fallback for its endpoint check.

Maintained continuation of dsh-network: authenticated LAN, Tailnet and HTTPS access to a DSH host, with pairing QR and current Web browser-auth support. Replaces the upstream dsh-network (remove it first; both register the same /dsh-network routes); the gateway listens on 0.0.0.0:3081 by default, set bindHost to restrict it.

Stops session lockups from OpenAI-compatible gateways that stream empty tool-call ids: intercepts llm/stream chunks in memory to synthesize consistent call_<sha256> ids across tool-call-delta and block-end, plus offline session repair/verify scripts under tools/.

Self-managed persistent browser for DSH automation — launches its own Chrome/Edge profile, navigates, switches tabs, snapshots with semantic refs, acts by ref, evaluates JS, screenshots, and uploads files. Does not bypass CAPTCHAs by design.

Adds one tool, echo_judge, that scores 1-4 draft replies to an emotionally loaded message on three steps (perception, mental-state inference, response strategy), combines the steps with a cascade gate and step-level credit assignment, and names the weakest step to redo; scoring runs through ctx.llm of the running engine, so no API key is needed.