Plugins

COM-driven real Microsoft Office automation for DeepSeek Harness: drives a running Excel/Word instance through OfficeMCP — VBA macros, pivot tables, live formula recalculation, and deep document layout; plus an accounting suite (double-entry journal posting with debit/credit balance check, and SUMIF general ledger).

About section for the DeepSeek Harness settings: version info, npm latest/next update check with one-click install and auto-restart, and GitHub release history.

Identity-gated Tailscale access to the Web GUI with dsh still bound to loopback: a 127.0.0.1 proxy published by `tailscale serve` admits a request only when the Tailscale login it stamps is allowed, with an optional per-device allowlist, so the privileged /api methods behind the loopback check — Settings, Models, Plugins — answer without dsh being told to trust a remote host.

Rewrites the Chinese copy of a market-installed plugin into English using a model already configured in the harness — automatically when the plugin is installed, then live-reloaded. Each file is translated in one whole-file pass, validated by a real parser where one exists (node --check for JavaScript, JSON and YAML parsers otherwise) and handed back to the model with the error for up to three repair attempts; files above 48 KB, or that never parse, fall back to a line-range pass that checks every returned line against the original for structure. Trigger phrases and locale tables can optionally be preserved rather than translated, and the untouched original is kept beside the file as a .zh.bak.

A guarded local fetch provider for the ctx.web seam — the backend dsh does not ship for its own web_fetch tool. Every redirect hop is re-resolved and checked against the non-routable ranges, with a streamed size cap and a content-type allowlist.

Credential provider for DSH with password-protected AES-256-GCM storage, Argon2id key derivation (legacy scrypt v2 auto-upgrade), SHA3-256 integrity checks, and temporary runtime decryption.

Health checks for DSH plugins: manifest/patch/entry/build/pack/install verification, model-callable plugin_check, profile host-shadowing + BOM detection, environment diagnostics, and poison preflight.

Finance data toolkit for DSH agents: number and currency formatting (incl. Chinese wan/yi units), return and CAGR math, valuation and profitability ratios, PV/FV, risk metrics, and a data-quality checklist.

RigorQuant preset + skill pack: unattended walled multi-agent research for empirical and computational mathematics (economics, finance, portfolio), with a four-part pre-implementation check battery and a jacobian/Lean escalation lane.

Adversarial checkup → fix → review loop toolset.

Moves a plugin set between DSH profiles (web to desktop by default): diff, pre-checks, an offline script for CLI-owned profiles, and a post-restart verification. It installs nothing itself.

One-click prompt improvement for the DSH composer: press the sparkle button to rewrite the draft into an agent-ready prompt, replaced in place and undoable, with a deterministic fidelity check that keeps every path, identifier, number, URL and backticked token verbatim, plus a length ceiling that blocks inflation.

Evidence-first conclusion gate that cross-checks first-hand claims against a durable per-session tool-activity index, blocks unverified guesses and tracks blocked-versus-converted metrics.

Dispatch subagents with named profiles (model, reasoning effort, and tool scope per task), safety checks, cost estimation with savings comparison, and a full dispatch decision ledger.

DSH Desktop enhancement plugin: it puts verifiable facts on the table. Constraints are injected only when relevant, so idle chat costs no extra tokens; injection is layered (session-stable text in the system prompt, volatile content as a tail snapshot) and the prompt cache stays valid. Discipline: each turn is classified (question / research / discussion / diagnosis / execution) with boundaries enforced - no file edits on question turns, no unsolicited fixes on diagnosis turns; citing code lines not opened this session, negative claims about unseen symbols, requirements that do not match the deliverable, and dressing up “I did not check” as “waiting for your decision” are all called out; replies are written for humans - a code, field name or id must be explained in plain words the first time it appears. Memory and knowledge: 75%/90% context warnings plus an exported session recap (say "continue" in a new session); project knowledge accumulated across sessions by working directory, auto-captured and deletable by id. Inspectable artifacts: task contract / change record (auto-logged, unverified items flagged at delivery) / hypothesis record (conclusions must pass an evidence gate) / design decisions. Dashboard and personas: routing, trigger hits and block assembly are written to lume-metrics.jsonl and queryable via lume_metrics; personas are distilled from chat logs, novels, scripts or character sheets, with long-term and temporary memory, a memory star map and persona card export/import.

Codex-style review of session file changes: per-turn cards (optionally taking over the shell edited cards) whose totals are the turn net diff, a review tab with syntax-highlighted diffs that never wrap, real line numbers, open-at-line and a draggable split, a hover preview of the whole file with three lines of context around each change, one-click per-turn revert, and the on-disk record size with a clear button in the review toolbar. Records are sharded per session, with content-addressed snapshot blobs that dedupe and are garbage collected. Light/dark presets follow the DSH theme, typography follows DSH and installed skins (or any font on the machine, with a px stepper), and a settings switch injects a think-in-Simplified-Chinese rule into the global AGENTS.md.

Detects which conversation model an account is being served: launches concurrent throwaway probe conversations, scores each streaming chain-of-thought by how its paragraphs open, and cancels probes that read as the older model within seconds. Includes an offline self-check that replays 13 hand-labelled chains-of-thought through the same classifier.

Version management for dsh: inspect the installed version against every npm channel or version line, install or downgrade in one click, stream the install log live (rollback-snapshot copy progress, npm extraction progress, elapsed time), roll back instantly from local snapshots, and automate the cycle with a policy engine (silent auto-update, execution windows, daily checks). Never stops npm mid-install — a wedged run is only stopped after an hour, and a half-committed global tree is detected and repaired from the pre-install snapshot automatically. Confirms before installing a found update, auto-restarts the host after install, and falls back to a mirror when the primary registry is unreachable.

Local-first usage and cost meter for the DSH web UI: composer button with live session cost and balance; panel with a stacked per-model daily/7-day chart priced per effective list-price interval (official pricing page synced daily), monthly usage tiers with a canvas share card, 30/50/85% context-pressure warnings with one-click /compact, budget alerts, and an in-panel npm update check with one-click update.

Reference verification for DeepSeek Harness (参考文献真实性检查器): the reference_checker model tool checks a paper's bibliography (.pdf/.bib/.tex/.txt or pasted text) against Crossref, OpenAlex and arXiv, reports found / partial / not_found / error per entry, and emits corrected citations in the input's style (APA, GB/T 7714, IEEE, Vancouver, MLA, Chicago, Harvard, ACS, BibTeX).

Browses checkpoints produced by dsh-checkpoint-rewind as a timeline of time nodes and shows per-file line diffs between any two of them, with trace replay from session logs (no snapshot producer needed) and preview-first workspace rollback with single-shot undo, via /diff and /rollback commands, a JSON HTTP API, and a GUI panel.

Native tools for an Obsidian wiki vault: wiki_query, wiki_write, wiki_rename, wiki_scaffold, wiki_archive, and wiki_lint cover BM25 search with link-graph context, bookkeeping writes with sha256 source tracking, vault-wide renames, mode scaffolds, source archiving, and health checks — with cross-process locks and optional git auto-commit.

Browse, search, delete, undo-delete, and update user skills from the Web settings panel; checks GitHub/Gitee Releases for newer skill versions.

Voice tools: free edge-tts neural speech synthesis, OpenAI-compatible ASR transcription, voice list, batch voice preview and health self-check.