Plugins

DSH markdown preview: clicking a markdown document in the conversation opens a rendered preview panel docked to the right of the chat.

Open folders on remote hosts over SSH as Harness workspaces: file tools (read/write/edit/grep/glob) and shell commands run directly on the remote host over SFTP, ripgrep, and ssh2 exec, with no local mirroring, an encrypted multi-host registry, and the local sandbox policy still enforced.

Policy plugin that gates kubectl by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.

Gives read-only advice for Windows .wslconfig memory and mirrored networking.

DSH plugin: auto-upload conversation progress to Tencent IMA (daily note + Work knowledge base), mirroring the local Claude Code ima-upload workflow

Permission mode between workspace-write and full access: shell commands are checked by deterministic rules and a subagent review; irreversible or system-level actions require explicit approval.

Floating workspace file-preview window for the Web client: lazy file tree, CodeMirror preview and in-window edit with save, Markdown and image preview, Quick Open search, and opening paths clicked in the conversation.

Destructive-command interception gate for dsh: parses shell semantics, judges risk against 41 built-in rules, and holds irreversible rm -rf, git reset --hard, and git push --force style commands at a confirmation gate.

Union IM bridge for DSH — an independent implementation uniting the capability sets of community peer plugins (xmanrui/dsh-im, MichengAI/dsh-im-connect). Drive your agent session from 15 channel adapters across 12 platforms (including email; WeCom/DingTalk/QQ each contribute two: bot + self-built app or notify tier) — WeChat (official iLink QR bind), Feishu/Lark (long-connection + streaming cards; the voice tier requires system ffmpeg), Telegram, Discord, WeCom intelligent bot & self-built app (signed callback), DingTalk (stream + AI Card and custom-robot notify), QQ official bot (plus notify tier), Slack (Socket Mode), WhatsApp (Baileys QR pairing; the dependency ships as an optionalDependency of the plugin package), Matrix, iMessage (macOS only), Email (IMAP/SMTP thread routing). The cross-version narrow waist auto-adapts settings gen1/gen2/gen3 across hosts 0.1.2-rc.1→0.2.1-rc.2 (12-tag enum; rc.2 verified by a real desktop-profile install with double read-back) using capability probing only, never version branches. In chat: a 25-command panel, tool-approval and question loops answered in the originating chat (deny-by-default, initiator-only, 5-min expiry), image/file input gated on host model metadata, deliverable file return, a delivery log with bounded retry (uncertain is never re-sent), proactive delivery and fragment composition. It also splits the native sidebar into self-owned Tasks / Channels tabs (standing down entirely when another plugin already owns the slot), registers an `im-concise` agent preset plus reply sanitisation that keeps GenUI fences and raw HTML out of text-only chats, renders `svg` fences to PNG images, guards model choice with an allowlist, and mirrors each turn's final answer to notify channels via `/relay` (addressed by account ID or alias, never guessed on ambiguity). Secrets are one-way into the vault and never echoed back. npm: `dsh-im-union`.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Mirrors assistant streaming frames (deltas, blocks, commits, turn fences) to a configurable NDJSON sink for external consumers.

A machine-checked reasoning ledger: every fact must resolve to a real file:line and be quoted verbatim from it, every assumption must state what would falsify it, and a conclusion may not rest on an assumption that never comes back for review. The ledger can carry a review date, a confidence and a kill condition. Ships the checker tool, an /fp command family, an optional gate that asks before irreversible shell commands, and a web panel listing the error codes each round fixed.

Registers one `valuation_service` tool that reads a workpaper tree of 01/02/04 JSON and returns one unified schema: six ratio groups, forecast ratios, DCF input slots with explicit missing markers, comparable PS/PE and IRR. Deterministic and local: missing WACC, growth, capex, D&A or working-capital inputs stay blank instead of being guessed, and assumption differences are flagged for review.

Mirrors a USB-connected Android phone in the DSH sidebar and drives it over scrcpy's control protocol: 12 agent tools for tap/swipe/type/keys, multi-frame scroll-and-stitch long screenshots, and agent-first control that hands over the moment a human touches the phone. Ships its own adb and scrcpy-server. Windows 10/11 only; the live sidebar mirror additionally requires dsh-better-sidebar.

Mirrors other coding agents' sessions into DeepSeek Harness as continuable tasks, one workspace per application.

Bridge DSH to OpenCode-compatible models via the local OpenCode CLI: native LlmAdapter passthrough, persistent OC sessions with cross-turn tool results, tool mirroring, and a CLI environment check panel. Requires the OpenCode CLI installed locally.

A music dock for the DSH web GUI. A draggable capsule in the bottom-right corner opens into a player card with a queue, previous and next, a draggable progress bar, a volume knob driven by drag or mouse wheel, three loop modes and per-track cover art for resolved links (local files show a vinyl placeholder); audio files dropped onto the card play immediately. Paste a Bilibili, NetEase Cloud Music or QQ Music track or playlist link to resolve it: NetEase and QQ audio is signed by the host into an opaque HMAC token, so the browser never receives a plain CDN address and cannot forge one. A spectrum canvas along the page bottom reads a real AnalyserNode and draws in six styles (dots, bars, blocks, mirror, line, wave) with adjustable width, bar count, sensitivity, glow, height, frame rate and placement; the row is fitted to the container width, falling back to a slight overflow when the gaps would fall below half a pixel. Seven colour themes (whale blue-white, aurora, mint, sunset, rose, neon, mono). The settings section is grouped into interface, theme, playback, links and spectrum, and carries favorites and history tables.

Staleness keeper for the Codebase Memory knowledge graph: it compares the graph Branch node head_sha with git rev-parse HEAD and reports an exact behindBy, rebuilds only the stale projects through the codebase-memory-mcp CLI so the MCP tool 60-second cap does not apply, watches each project for edits, and mirrors the same state into a settings card and a REST control surface.

Bidirectional bridge between Hermes Agent and DeepSeek Harness: dispatch_task with UI-visible sessions in the DSH sidebar, session mirroring, and 10 DSH-to-Hermes tools.

Adds a "Check updates" tab to the Built-in plugins settings: one row per installed bundle, with its latest npm version and an update button. Each row also reports DSH-runtime compatibility. The registry is read through the .npmrc chain (environment, then profile, then user, first hit wins); with nothing configured it races a mirror against the public registry, and a private registry is never raced against a public one. A version is installed from the registry it was read from.

One-shot entrance animation when the workspace opens: the logo is written onto the canvas, then an inverted color bar sweeps across on exit; mirrors light/dark themes automatically.

Automatically group every DeepSeek Harness (DSH) Web GUI tab into one browser tab group. One package, two faces: the Chromium extension owns all grouping behaviour, and the DSH plugin mirrors it to a fixed path, detects it in the Web GUI, guides installat

Prices tokens with the official model price table, keeps the per-session and global running cost beside the composer context meter, mirrors your DeepSeek account balance in the sidebar, blocks a turn once this period passes your own global ceiling (clamped to that balance) or a per-session ceiling (each session sets its own, independently), and resets the billing baseline per session or globally — the two are independent, so resetting one never resets the other — so the period goes back to zero while history only rolls into the lifetime total.

Markdown live rendering for the DSH Web UI composer: typed Markdown (bold, lists, code fences) renders as you type in a CodeMirror-based takeover composer; sent user messages render as Markdown; pasted rich text becomes clean Markdown.