Plugins

Adds a Git chip beside the composer that opens a centered workbench (changes, history, files, tags, stash) plus a Git section in settings. Supports multi-account OAuth device flow and PAT with per-repository permissions (full, read, none), gates writes behind a global switch and reads behind an allowed-directory list, and refuses a push whose target remote belongs to no writable account. Diffs preview in place with line numbers, four layouts, word-level emphasis, syntax highlighting and Ctrl/⌘+F find; Markdown and images render inline, commit messages are searchable, and commit messages can be generated from the staged diff through the host LLM service. Ships 8 Agent tools, 51 local HTTP endpoints and 8 languages, with tokens encrypted at rest by AES-256-GCM.

Pre-implementation design review gate: an Elephant agent drafts the design, zero-context Goldfish subagents attack it from fixed reviewer roles, and you approve before implementation.

Turn a feature that actually runs into a trustworthy delivery demo video, or a defect into a traceable feedback video: real screen recordings, edge-tts narration with word-clock subtitles, a self-contained ffmpeg pipeline, and a deterministic quality gate (spec, audio, loudness, black/freeze/silence scans) that refuses to pass a fake or broken demo. Feedback episodes add severity/phase chips, a repro-steps overlay and a ticket-ready report bound to the artifact SHA256. Preflight and artifact verification included. Requires Python 3.9+, ffmpeg/ffprobe on PATH, and `pip install edge-tts Pillow`; narration calls the public edge-tts endpoint.

Browser takeover for sign-in-gated sites: keeps a list of addresses that need a login (URL and date only, no credentials), answers before a visit whether an address is already on it, reports whether the debug browser is signed in there from the session-cookie names of that site (certain, likely, or not signed in — anonymous cookies such as _gh_sess never count), and opens saved addresses in that browser by navigating and clicking one element by its visible text, searching every iframe. One click per call, no crawling.

Character-chat memory layer that keeps persona, voice and relationship state separate from summaries, archives every raw message for retrieval, and ships a SillyTavern card importer plus an OpenAI-compatible gateway.

DeepSeek Harness plugin that starts each Vercel AI Gateway conversation on the fastest provider for its model

一个插件、两种角色：主服务端把 DeepSeek Harness 变成手机能安全访问的 PWA（移动端界面、配对码网关、Web Push），并把选定会话共享给已配对的桌面端；子客户端在另一台 DSH 桌面端的侧边栏里远程使用这些会话。One DSH plugin, two roles: the host turns DeepSeek Harness into a phone-reachable PWA (mobile UI, pairing-code gateway behind your own rev

Aggregate daily check-ins and credit balances from the AI clients installed on this machine, with a local dashboard, same-day idempotency and persisted results. Also wires the signed-in local clients (TRAE, Qoder CN, WorkBuddy, DuMate, WPS Lingxi) into De

审批台账 + 企业审计面板：记录每次审批（风险/决策/结果），gate 模式拦高危，Web 面板可看可导出

反盲批 / Anti Blind Approval — DeepSeek Harness approval guard: review workspace-write escalation requests with the session model, then gate the Allow button on a strict JSON verdict.

Delegate coding tasks from DeepSeek Harness to the Google Antigravity desktop agent, and watch every turn live in a War Room dashboard: a five-stage lifecycle stepper, streaming tool-call timeline with clean/hanging/escape/destructive verdicts, dual-windo

A plugin center for DeepSeek Harness: install, update and enable DSH plugins, aggregate plugin index sources, and install from a git branch. Also publishes a subscribable format-1 plugin index.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectures the program needs (one or several), checks conflicts between them, teaches the session AI after repeated failures, and teaches the session AI after repeated failures; once you grant it review authority in its panel, it gates task completion until the review passes (without that authorization it only observes).

Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_roots denies every path-like call), a per-minute call limit and a JSONL audit, exposed through gate_check / gate_check_path / gate_policy and ctx.gate — other plugins or prompts must call the gate; it does not intercept tool calls by itself.

Cursor-style mode switching for the dsh web UI: plan mode with a delegation gate, multitask mode with a tool-call quota, and the create_plan / request_more_edits / list_running_agent tools. Adds a plan card with Build buttons and compacts the subagent dropdown to running rows.

Event-driven trigger plugin (the doorbell beside dsh-proactive's alarm clock): recursive fs watchers with per-rule debounce windows and glob filters, plus a loopback-only local webhook endpoint with per-rule tokens, fire rules that wake a target session through the host agents service - live sessions get a direct follow-up, cold ones are resumed first - and inject a rendered prompt with template variables (paths, count, payload). Rules hot-reload from the event-gate rules file without restarting DSH, every trigger appends to an auditable JSONL history queryable via the trigger_list and trigger_history tools, and a loopback health route reports install and runtime status. Typical uses: auto-organizing a downloads folder, diagnosing CI or monitoring alarms posted from local scripts, and watching logs for errors. Pure JS, no build step, MIT.

A board for DeepSeek Harness that composes stations, workflows and projects from separate Git repositories; GitHub is the access gate.

Search, inspect, and use selected third-party skills and MCP tools through one on-demand gateway. Catalog trimming depends on the host and tool mode. A local journal records usage metadata.

Douyin operator for DSH: drives your own Chrome to read the feed, comments and DMs, reply in-thread, and upload a local video through the creator center - every write passes a policy gate and publishing always needs your click.

Recovers a session the host already refused for exceeding the context window: it re-checks the gateway message the built-in classifier misses, takes the real window out of that message, and folds the oldest span into one checkpoint without a model call (tool-result pruning, the host compaction engine when it can shrink the projection, or a mechanical digest fold), then retries the failed step; a context_rescue tool and /rescue, /rescue-status expose the same path by hand.

Neutralizes lone UTF-16 surrogates in tool output before they reach the session log, preventing permanent 400 INVALID_REQUEST errors.

Retry failed model requests automatically: intercepts every request error and replays the same step after a 2s / 5s / 10s / 20s backoff ladder, so gateway blips and rate limits no longer end the turn.

See the quota of every AI account connected to your local Magpie gateway at a glance, with usage breakdowns by day/week/month.

Two-level model picker for the DeepSeek Harness composer: browse providers, then models, search across all providers or within one provider, select supported reasoning-effort levels, and navigate with arrow keys, Enter and Esc.