Plugins

Synchronize DSH sessions, settings, attachments and project files using a user-configured private HTTPS Git repository or SFTP, with safe-scope online application, offline restore plans and user-confirmed plugin updates. Requires Node.js 24+; the SFTP path also requires OpenSSH (ssh/sftp).

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.

Replaces detected secrets (OpenAI, AWS, GitHub, PEM, Bearer) with deterministic, structurally valid honey tokens before they reach the model or the session file; adds manual marking for values the detectors miss, explicit user-visible restore, a cross-session canary alarm, and an opt-in JSONL log of substitution counts that never records the underlying values.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Bidirectional GitHub repository sync for DSH: git sync with conflict rollback and pre-push checks, Actions/CI monitoring with per-step run detail, repository add/remove/rename, a web panel with local and remote file browsers, scheduled automation, and six agent tools.

Redundant branch cleaner: finds branches whose work already landed in the mainline — merged, squash-merged, patch-equivalent after rebase or cherry-pick, upstream-gone, or PR-merged — and deletes them when asked. It only reports by default, never switches branches or rebases, and backs every deleted local branch up under refs/backup/branch-cleaner/ (deleting remote branches has no backup).

Turns real git history into two Chinese changelog drafts (short for users, long for developers); every entry carries its commit SHA and an evidence-backed verified/unverified mark, and commit subjects are never translated.

Branch panel for the composer: creates rule-checked branches from production6, validates commit messages against a type(scope) convention, and commits, pushes, or merges into stage in one click.

Fork and delete buttons on each workspace row of the Harness sidebar, plus a /fork-worktree command: fork creates a git worktree and registers it as a new workspace, delete removes the workspace folder through git worktree remove (asking again before discarding uncommitted work) and drops the registration.

Shows what each installed skill costs in the model context and hides a skill from the catalog without deleting it. Lists every skill found on disk with the exact catalog line the model receives (description normalized and truncated at the catalog cap), its body size and token estimate; previews the catalog message byte-for-byte as the agent will receive it, compares that with the copy already published in the current session, and reports skills on disk that never reach the catalog (invalid frontmatter, or shadowed by a higher-priority root). Hiding writes disable-model-invocation into frontmatter and keeps the file, so the skill still works via /name. Also imports skills from ClawHub, Skills.sh and GitHub URLs and uninstalls user-owned ones.

Skill manager page for dsh: set each skill to on, manual only, model only, or off per agent mode; count how often each skill is loaded per mode from the session history; search skills.sh and install from GitHub; import from Codex, Claude Code, or a folder; create, edit, and version skills, with a trash for deleted ones; modes keep working after an uninstall.

Prose review for human-facing writes. The write and edit tools require a human_facing flag; the plugin reviews the text against layered PROSE.md rules in the background, stages annotations, reconciles them against the full file, and merges them through /humanize, /humanize-loop or post-compaction while the main session keeps working. /humanize-review runs a batch over git-tracked files on demand.

Manage a GitHub Pages blog from a DSH panel — browse the Markdown articles grouped by tag, edit them in a split editor with a front-matter form, and publish the changes as one commit over the GitHub REST API.

Per-workspace closet for temporary scripts and their run logs, kept in a .dsh-fix directory inside each project. Registers a script with its language and purpose, scans a project for leftover scratch scripts, backups and log files, runs registered scripts with a timeout and writes each run to a timestamped log, and sweeps chosen files into a reversible trash with per-batch restore. Scanning only lists and never deletes; cleanup moves files instead of deleting them; files already tracked by git are refused unless forced. Ships 7 agent tools and a settings panel.

Five production-grade DSH tools bundled into one plugin (8 tool slots total): git regression finder (find introducer, recent changes, bisect, blame age), stack-trace decoder with local code context, YAML/ENV/properties config validator with typo suggestions, cross-platform shell escape (POSIX/PowerShell/cmd), and MyBatis Plus SQL static auditor (N+1, missing @Transactional, LIKE leading %, SELECT *, missing WHERE). Zero npm dependencies, all offline; concurrency-safe except the bisect tool (dsh-when-broke). Each sub-plugin is also installable standalone (dsh-when-broke, dsh-stackdecoder, dsh-config-guard, dsh-cmd-shield, dsh-mp-auditor).

Ship a local DSH plugin project to GitHub and the plugin market in one call: preflight, per-file upload with byte verification, the market registry PR, then pull every published file back and compare bytes.

One screen for every work you have shipped: local project facts, GitHub stars and last push, whether the plugin market has picked it up and how many downloads it has, plus pending pull-request wait times against the upstream median.

Local long-term memory for DSH: browse, search (BM25 + synonyms) and edit entries in a panel; folders, archive and a recycle bin; choose per session what to inject; model-written memories need your approval; import/export backups; optionally sync across devices via your own Git or WebDAV.

Automatic, versioned backup of your DeepSeek Harness home — sessions, memories, settings and the profile plugin tree — to a private git remote you own, with commits and pushes on a schedule and every failure surfaced in the DSH log.

Treats the session as a mainland-China user (zh-Hans-CN, Asia/Shanghai, ISO dates, CNY currency) and generates a self-consistent test persona: five tools, six cross-checks, GB 11643 check digit, phone prefix matched to carrier ASN.

Cross-session token dashboard for DSH: daily spend as bars, trend or cumulative views plus a GitHub-style annual activity calendar, model and workspace splits, cross-filtering between day, model and workspace, and a per-turn timeline that also covers web-search and auxiliary model calls.

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

GitHub issue service for DSH: turns a telemetry failure analysis into a uniform issue report, builds a pre-filled new-issue URL that is shortened when it would exceed a configured length budget, rewrites a plain description into a structured issue with the deployment's model, and closes the intake loop by listing the open issues that carry a claim label and handing each one to a fresh session as a one-shot automation task on the host's Schedule service, which delivers the rendered prompt into that session when the task comes due and shows up on the Web Automation tasks page (a host with no Schedule service admits the prompt directly instead), skipping issues an earlier pass already dispatched, leaving the local day uncommitted when every dispatch is refused so the next startup tries again, and repeating the pass on the first start of each local day when autopilot is enabled.