Plugins

Delegate DSH tasks to a paired LAN worker and drive it like a subagent (ACP over WebSocket).

Token-efficient web reading for DeepSeek Harness: one call fetches several pages through a real Chrome/Edge over CDP, gates them by relevance and returns a single digest, cutting context tokens by 80-98%. Real search URLs, login flow, screenshots, three proxy modes.

ogin wall and public gateway plugin for DeepSeek Harness cloud deployments

DeepSeek Harness host plugin for the DSH Mobile Android app: pair with a QR, use DSH on the phone through its own HTTPS gateway, answer approvals and questions from notifications, push turn completion.

Plain-language trust dashboard for the dsh trust family: aggregates the nine channels (injection interception, write denials, egress blocks, custody-chain verification, tool-surface and prompt drift, leftover scans, forgotten compaction constraints, profile composition) into one right-sidebar panel with a single status light and event cards that translate engine jargon into sentences a non-security user can act on; the read and egress engines run from the package's own npm dependencies so those channels work even without the sibling plugins, and absent plugins simply show as not installed.

Pre-claim gate: a commit, push or tag claim like "tests pass" is checked against the session evidence ledger before it is written.

Restrict the file access of agents in any sandbox mode (read-only / workspace-write / danger-full-access / auto) to the session workspace, and ask the user to rule on cross-border access. Each session can also use the gear selection box next to the composer to relax the cross-border gate to 「 read-only outside workspace 」 or 「 fully release 」.

Turn-end quality gate: when the turn edited code or config it walks each file up to its project root, runs that root one check from a fixed whitelist (`pnpm check`, `cargo check`, `ruff check .`, `tsc --noEmit`) and, only if that check really ran and failed, opens a new turn carrying the failure output instead of letting the turn close.

Inspects ONNX models (inputs/outputs, shapes, opset, operators, size) and benchmarks them with ONNX Runtime on the local machine or on a remote target over SSH, reporting average/P50/P95/P99 latency, FPS and the execution provider actually used, with PASS/FAIL gates for FPS, P95 latency and model size. Requires Python 3.10+ with numpy, onnx, onnxruntime, and psutil installed (pip install numpy onnx onnxruntime psutil); remote targets need python3, numpy, and onnxruntime.

Let external MCP agents delegate tasks to the existing DSH desktop, with visible sessions, user takeover, and optional approval handoff.

Expose a running DeepSeek Harness instance over MCP, so an external agent can list, create and continue that instance's own sessions, delegate a turn and collect its result, answer the questions the DSH agent asks, and set how future approval requests resolve.

Test work framework for DSH that scaffolds a product, module and version directory tree, registers seven test_framework_* tools and four runtime skills, and adds a prompt-level gate that reports which requirement-document splits, versions, related documents and environment credentials are still unrecorded before testing starts. Requires the playwright MCP server (no fallback).

Project Development Mode preset plus an in-chat development board for DeepSeek Harness: the lead conversation clarifies requirements and delegates to an Agent Team, and the floating board tracks each user change request through dispatch, execution, testing and acceptance with 7 board tools.

A machine-checked reasoning ledger: every fact must resolve to a real file:line and be quoted verbatim from it, every assumption must state what would falsify it, and a conclusion may not rest on an assumption that never comes back for review. The ledger can carry a review date, a confidence and a kill condition. Ships the checker tool, an /fp command family, an optional gate that asks before irreversible shell commands, and a web panel listing the error codes each round fixed.

Investment research bundle: 10 tools (search, page fetch, source audit, claim verification, numeric rigor, channel health, workflow loader, chart engine, PDF renderer, PDF gate) and 23 skills adapted from ai-berkshire. Runs a six-phase workflow where four parallel agents (Duan Yongping, Buffett, Munger, Li Lu) research a company, cross-examine each other, and ship a chart-rich PDF with cover, tables, captions and page numbers. Requires Python 3.10+; the chart and PDF tools also need python-docx and matplotlib.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Registers one `workpaper_gate` tool for DeepSeek Harness: it audits a workpaper set for completeness, covering both the target design or template itself and the instance-versus-template structure, with the rule list, template list and core-table list all configurable in one spec file. Findings come back as blocker, warning and info, and the workpapers are only read, never modified. Requires Python with openpyxl.

Registers one `principles_audit` tool for DeepSeek Harness: it reviews a principle library for principle_id collisions and legacy ids, missing causal statements, boundaries, counter-examples or evidence, duplicate and near-duplicate principles, status-versus-confidence inconsistencies, long-stale entries and dimension-coverage gaps. Findings are severity-ranked and a hard gate turns them into pass, warn or fail, where every critical finding must be covered by a valid, unexpired exemption. The library is only read.

Requires Claude Code installed and signed in on this machine. Delegates coding tasks to the local Claude Code agent through the Claude Agent SDK, reports which files changed, supports one-command revert, and adds a Claude Mode toggle to the composer.

Adds the fs_remove and fs_move tools, executed in the DSH host process so they can delete paths the sandboxed shell cannot, gated by a session allow list and a path allow/deny list that denies by default.

System One decision runtime for dsh. Ships fast non-generative tools (choice, score, screen, gate) on a local or hosted System One gateway, and — without the model calling anything — prunes oversized tool output segment by segment, refuses repeated identical calls once System One confirms stagnation, verifies completion claims against real tool evidence, and corrects failing retries. Published on npm as dsh-harness-reflex (plugin) and harness-reflex (core, also a stdio MCP server).

Per-workspace gate that hides the tool schemas and system prompt sections of selected plugins from the model in directories that do not need them.

Frontend aesthetics engine as 17 native tools — a 118-palette evidence library matched by register, cross-register whole-page design directions, four mechanical gates (WCAG contrast, color-blind simulation, AI-slop detection, scorecard) with digest-bound verdicts, plus semantic design tokens, existing-page audit, CVD-checked chart palettes, CJK type scale, render-vs-tokens reconciliation and measured-numbers rationale. Fully local, zero network. Requires Python 3.8+.

Release gate for AI answer quality. Two channels: replay an existing VeriScope archive through the original Python quality gate, or run a threshold gate over a Ragas per-row export with Node only — no VeriScope, Python or pandas. Returns PASS, FAIL or REVIEW with source evidence and a re-checkable receipt; supports per-row thresholds and exact decimal comparison. It never re-evaluates and never calls a model, and REVIEW never becomes PASS.