Plugins

Bounded local memory with CBDC authority gating: SQLite + FTS5 claims, scoped recall with explainable use/verify/ignore decisions and a full audit trail, /memory commands, ≤3-claim/1200-char injection per call, no extra model call.

Provides a skill for the LinShang LS125 UV irradiance meter and its UVALED-X3 probe: the reverse-engineered 9600 8N1 link (28-byte frames, CRC-16/MODBUS, poll and clear commands), a capture and decode toolchain, and a verified STM32F103 host firmware that reads the probe without the original meter. All code and documentation written by an AI agent (DeepSeek Harness).

Clusters arXiv, first-party lab, official artifact, hardware-vendor, and opt-in X signals into versioned release evidence bundles, then gates claim-level reproduction on commands, artifacts, metrics, and verifiers.

Workspace checkpoints per tool call: records every file mutation inside the workspace (excluding .git and node_modules by default), including changes made by shell commands rather than by write/edit, and stores the previous content of each changed path in a content-addressed store kept outside the workspace. Restores have two modes — undo one record, or return to a point in time — with a line-level diff preview, a dry run by default, and a rescue record written before every restore so the restore itself can be undone.

Cross-session experience memory for DSH. Lessons are evidence-graded, injected when the turn is about the same thing, and shown just before an action only when the record declares which call it applies to. A rule that holds whatever the turn is about — "always answer in Chinese" — can be marked **standing** and is then carried every turn: measured on 24 isolated real-model turns, a standing rule is followed 6/6 against 0/18 for the controls (empty store, same record unmarked, unrelated standing record). A guess still cannot become always-on: a standing record needs a verified passage like any other. What nobody looks up is retired, reversibly. Five tools, seven slash commands, zero runtime dependencies.

Compaction fallback for compaction-basic: when its LLM summary throws, comes back empty or cannot fit the window, the span is compiled deterministically with a seq pointer on every line (vendored dsh-compaction-instant compiler). Adds recall and search tools, /recall and /context commands, an idle trigger at 45% of the window and an on-disk span archive. The engine mounts as one row in the agent preset (docs/dsh-integration.md).

Dense translucent-glass Universal Palette for DeepSeek Harness Web — federates Commands, Models, Sessions and Conversation Hits with deterministic ranking and verified public-contract interoperability.

Per-command proxy for DeepSeek Harness: the agent decides which shell commands leave through a proxy, backed by a kernel the plugin installs and supervises itself.

Drive a local DeepSeek Harness agent from QQ and other IM channels through AstrBot: send tasks with /dsh, continue by quoting or @-mentioning the bot, answer approvals and ask_user_question prompts from chat (in parallel with the DSH web UI), and get results, inline images and file cards back. Ships session / workspace / model / permission commands, /compact and /last recovery, three progress-display modes, and group-shared or per-user session scoping.

Open folders on remote hosts over SSH as Harness workspaces: file tools (read/write/edit/grep/glob) and shell commands run directly on the remote host over SFTP, ripgrep, and ssh2 exec, with no local mirroring, an encrypted multi-host registry, and the local sandbox policy still enforced.

WSL tools for DSH: run Linux commands, convert Windows/WSL paths, and summarize the WSL environment.

Runs commands as background jobs that keep executing when DSH exits, with an optional sandbox to constrain file effects, plus a live web panel and offline CLI/GUI management. Windows only for now.

Workspace-first enhanced sidebar for dsh Web that shadows the built-in workspace browser at low priority (one-click toggle back to the official one) and adds soft workspace archive/restore, per-workspace SVG icons and accent colors, drag reorder and title/path/session-content search, plus a ⌘K Spotlight palette fuzzy-searching workspaces and sessions; the host half ships read-only workspace_find/workspace_list model tools and /workspace-find /workspace-list slash commands. Bilingual zh/en.

Slash commands ported from other coding agents (setup, connect, install, trust, browse, doctor, status, model, memory, compact, resume, review, mcp, init, suggest, improve, refactor), a zero-dependency static scanner for plugin source, and an in-repo catalog of audited plugin report cards that cite file-and-line evidence.

Drive your real logged-in browser through OpenCLI — browser primitives plus 170+ site adapters as deterministic one-shot commands, with in-session adapter authoring, a write-approval gate and a settings management panel.

Shows the installed DeepSeek Harness version in the sidebar, checks npm and GitHub Releases for updates, and provides manual or confirmed update commands.

OpenSpec — spec-driven development workflow ported to DeepSeek Harness (12 workflow skills + /opsx-* slash commands). Agree on what to build before any code is written.

Read and search bounded log output from allowlisted SSH servers and log roots without exposing arbitrary remote commands.

Loads Claude-style plugins into DeepSeek Harness (dsh): discovers skills, commands and optional SessionStart hooks from Claude plugin directories, with hot command reload and uninstall cleanup.

Antigravity-style run_command for DSH: short commands return inline within a configurable wait window (default 10s) while longer ones auto-promote into ctx.jobs for later collection and completion notices — executed via ctx.shell under the session sandbox and approval pipeline.

Minimal snippet and command toolbox for DSH: five tools over a single human-editable JSONL file, zero UI, zero database, zero network, explicit save-only memory.

The task-center plugin set for DeepSeek Harness in one package: task ledger, model tools, human commands, wake patrol, quota-resume guard, idle-session mining, the reaper, scheduled sends, and the web kanban.

Permission mode between workspace-write and full access: shell commands are checked by deterministic rules and a subagent review; irreversible or system-level actions require explicit approval.