Plugins

Policy plugin that gates kubectl by kubeconfig context: hard-deny irreversible verbs outside local clusters, ask for the rest.

Fullscreen business-app framework for DeepSeek Harness Web with a dark-sidebar workbench bundling a database connectivity tester and SQL query panel, a two-level knowledge base (bill and accounting) with local search and Word document ingestion, metadata environment comparison with alter-SQL generation, a data dictionary, agent log-search report demos, a system test-case runner, Evernote-style notes, developer utilities, and mini-games.

Capture selected DSH, local MCP, or native WebMCP calls as reviewed, parameterized routines, expose typed tools, and replay with fresh approval.

Offline voice input for the DSH Web UI: mic to local FunASR (SenseVoiceSmall), one-click install, no cloud.

Local-first HTML review and annotation workspace for coding agents: opens an isolated copy of a file in a browser editor, collects text edits, format changes and element/area comments, and returns a durable handoff the agent can claim and resolve.

Coding retrospect distilled memory for DSH: distills rejected solutions, pitfalls and constraints from each turn via a local LLM, tags them into MemOS (type:rejected_solution), and boosts weighted recall on coding tasks via agent/pre-step.

Local token usage and cost dashboard for DeepSeek Harness: four-segment token breakdown (miss/cache-hit/cache-write/output), cache savings estimate against the miss/hit price gap, per-session drill-down with context-growth curves and anomaly flags, global filters with shareable URLs, monthly budget progress with month-end projection, and day/month aggregate fast-path queries (O(days)) with incremental rescan.

Drag or paste files into the Web composer with one image-and-file preview rail; native PNG/JPEG/WebP/GIF keep the image attachment path, while other files reuse a matching local path or stream to Host staging and become @ references only at send time. Includes browser media/PDF and bounded text previews; Office and archives show identity cards, and unsent file entries are page-local.

DeepSeek Harness (Cordis) plugin — bi-temporal VSA memory + cognition engine + BLAKE3 provenance, exposed as a DSH storage+session plugin. End-to-end tested with a real Python subprocess.

Git-native, auditable long-term memory for AI agents

Local and remote SSH terminals for DeepSeek Harness Web with three permission levels, human approval for risky AI commands, and encrypted credential storage.

Installs a skill-router skill that semantically searches a local skill corpus on demand, keeping the corpus out of the per-turn model catalog.

Renders mermaid fences in dsh web chat as SVG diagrams by default, with cursor-anchored smooth zoom and pan, a per-fence diagram/code toggle persisted in localStorage, dark-mode follow, and a bundled offline engine.

Serve any local file in DSH web sessions - /ws/<absolute-path> maps disk files to same-origin http URLs that session markdown can render. Any drive, no staging directory.

Provisions the kimi-webbridge bridge daemon (auto-install with SHA-256 verification, auto-start) and registers a 25-action skill that drives the user's real browser through the local bridge.

Advises or applies allowlisted Windows portproxy for a WSL listen port, preferring the kit :3081 relay and launch token for local dsh UI.

Share the DSH workspace over the local network: phones, tablets and other computers browse, download and upload files via browser with no DSH login. Token gate, path boundary, read-only mode and rate limit. Zero-dependency (node:http).

Route every host-process undici fetch through a local HTTP(S) proxy while keeping localhost and China-reachable APIs direct.

Cross-app project memory for DeepSeek Harness with role-separated writeback, a visual knowledge workspace, confirmed corrections, session controls, local Writer and organizer settings, and an account-free Windows local installation preview.

Three independent language channels for model output — tool-call descriptions (every tool-call card title, including run_code in PTC-style presets), thinking, and replies — each set to follow the web GUI language, force a specific language, or turn off (default: only descriptions, following the GUI). One global runtime-context prompt directive on the host; the client half reports the GUI language; a Settings plugin card switches the modes.

Adds a Workspaces / Recent-sessions switcher above the sidebar list, with a pinned-sessions group, a per-row menu (pin/unpin, copy session id), title filtering, and browser-local pin storage with a one-shot migration from dsh-plugin-pin-session.

Browse local image, video, and SVGA artifacts from conversation nodes in a Finder-style column view.

Local-first file conversion: 26 conversions across images, PDF (with OCR and experimental PDF→DOCX), data, audio/video and office docs; 7 tools, all local, no API keys.

Per-provider concurrency gate on the llm/stream waterfall: holds surplus model requests in a FIFO queue inside DSH so main agent, subagents and compaction take turns on a single-slot local server (llama.cpp --parallel 1) instead of timing out; maxConcurrent / maxQueued / queueTimeoutMs.