Plugins

A dsh bundle plugin: preview local Markdown/HTML documents per workspace in the Web GUI via a /docs route on ctx.webServer + ctx.workspaceRegistry.

Open folders on remote hosts over SSH as Harness workspaces: file tools (read/write/edit/grep/glob) and shell commands run directly on the remote host over SFTP, ripgrep, and ssh2 exec, with no local mirroring, an encrypted multi-host registry, and the local sandbox policy still enforced.

Skills and MCP browser behind one floating ball with five tabs: Skills (native folder picker, two-level categories plus custom groups, tree or flat view, manual, keyword and AI grouping on metadata only, search, and per-card or whole-library enable/disable with timestamped backups), Call Ledger (counts, success rate, trend, ranking), MCP (live loader config, real Fiber states, per-server tools and call stats, enable, disable, reconnect, export to mcpServers JSON, plus scan-and-AI-fix for unconfigured servers), Market (MCP marketplace: the official MCP Registry plus 29 curated free servers, 19 flat categories with per-category counts, grid and list views with 3-6 cards per row, one-click install into cordis.patch.yml with automatic backup, one-click uninstall, every server shown with its own real icon, two-way instant sync with the MCP tab, and the last scroll position is recalled) and Quick Start. 130 skins sync across the three balls. Adapts DSH kernel 0.2.2-rc.1.

Drag a conversation onto any workspace group in the sidebar to relocate it between DSH workspaces, updating its cwd, disk location and registry ownership.

Exposes dsh's internal capabilities (language, workspace registry, agent-status and approval events) over HTTP under /dsh-api on the local loopback socket dsh already listens on, with SSE fan-out at /dsh-api/events.

DeepSeek Harness dual-face plugin: a visual plugin manager tab in Web Settings — enable/disable any plugin row, check installed plugins (including official @deepseek-ai/* rows) against the npm registry, update them, repair pristine files, and update the h

Adds "Delete conversation" (zh/en) to the sidebar conversation menu. Confirming removes the durable session log under <DSH_HOME>/sessions, drops the id from the workspace registry (sessionIds, pin, archive), detaches a live session before its files go away, and emits api-session/removed so every connected client drops the row.

Agent skills for the Lark/Feishu CLI: exports the 27 skills embedded in the lark-cli binary (docs, sheets, base, calendar, drive, task, wiki, approval, mail, slides, vc, minutes and more) and registers them with the DeepSeek Harness skill registry so the agent can read them on demand. Excludes lark-im so it complements an IM bridge plugin rather than duplicating one. Requires lark-cli to be installed.

Registry of 119 quant and crypto sources covering regulator filings, point-in-time fundamentals, macro series, exchange APIs and on-chain data, each tagged with an authority tier, verification state, five-state point-in-time, revision risk and dataset tags; ships qt_source_find and qt_source_audit tools for source lookup and for citation audits that redact credential-like URL parameters.

Bundled registry of 119 computer-science sources (textbooks, official docs, standards, preprints) across the 17 CS2023 knowledge areas, each tagged with an authority tier, evidence type and refresh interval, plus cs_source_find and cs_source_audit tools that look up a source or audit the URLs in a draft.

Adds the Foxy agent preset, sidebar entry, settings page, editable prompt suffix, and a small capability registry to DeepSeek Harness.

A versions tab on the plugin page: every installed bundle with its current version, the newest published version and a status (update available, up to date, follows the harness version, or not updatable from a registry). A row opens the official bundle page, where the update button lives; check results are cached and re-checked oldest first. The bundle page also gets a jump-to-bottom and a back-to-top button.

On Windows (PowerShell 5.1), snapshots whitelisted registry keys, hosts, user environment variables, services, firewall rules and scheduled tasks, diffs changes, and restores only registry, hosts and user environment variables.

Aggregated MCP market for DeepSeek Harness: 26 curated presets plus the official MCP Registry and user-added JSON sources, with search, source filters, connectivity tests and one-click install into the profile.

Brings the third-party deepseekbase.com index into DSH: eight tools and five DSHIO standard skills (from the @liangjiehappy/dsh-dshio dependency). Search 8,400 plugins with real sandbox install verdicts and risk levels (including red-line warnings where credential access meets network), submit a plugin for a four-stage sandbox test from the conversation, read the verdict, check the remaining free quota, and run a clause-by-clause DSHIO/T 10 conformance check. The skill text is fetched from dshio.org at startup and replaces the bundled copy, so updates need no reinstall. Network: HTTPS to deepseekbase.com and dshio.org, plus an npm registry lookup before a test is submitted; no file reads or writes, no credential access, no shell.

Security review for DSH plugins: reads the manifest, install hooks, native dependencies and source for network egress, dangerous APIs and credential paths, cross-checks the curated market registry, and returns a 100-point verdict with itemised findings. Read-only — it never executes the audited code.

Search DSH plugins on the npm registry by a name fragment and install them from the Plugins page.

Lists resumable Codex chats under the DSH composer, grouped by the concrete project each one belongs to, and inserts a mechanically extracted recovery context into the draft without sending it. Project ownership is resolved from the Codex project registry with path-boundary matching and labelled by how reliable it is: recorded session ownership, registered directory, unreadable metadata, or a directory registered under several projects (left unknown rather than guessed). Also reports when the stored autosave is behind the log tail, which usually means the turn ended without a stop. The chat list requires python3 >=3.8 on PATH; Windows is not supported yet, and without python3 the list stays silently empty.

File-based environment registry for DSH: manage environments, services, deployments and operation-to-Skill bindings through a panel and model-facing tools.

Actually delete DSH sessions instead of archiving them (Windows only). Clears all six on-disk locations (transcript, title cache, billion-context SQLite index with VACUUM, workspace registry, cost-meter ledger, bridge logs) with a dry run, a backup, byte-for-byte rollback, and an automatic quit-delete-relaunch flow.

A Settings page for the memo plugin suite in DSH Web: edits the memo Host's AI route, archived-session summary language, length, transcript budget, template and prompt, and repository URL, adds a GitHub intake section for the claim label, per-run issue cap, autopilot switch and its working directory, preset, time zone and dispatch prompt, with per-field reset and saves that reach the running services without a restart, and carries an update entry that checks the npm registry and can install a newer release through the deployment's plugin manager.

Remote Linux server manager in the Harness Web UI: browse and edit files, inspect host status, start/stop/restart Docker containers, inspect images, configure Docker registry mirrors, manage firewalld/ufw rules, switch apt sources, and detect developer tools or install/upgrade them with apt.

System proxy control for DSH — NO_PROXY policy, connection diagnostics, and proxy environment inventory via the `dsh-flash` QuickControl registry.

Registers named Claw agents, isolates them from the official workspace sidebar, and provides settings plus a global new-agent template. Hard deps (install together or single install fails): dsh-claw-policy, dsh-claw-observability, dsh-claw-permissions.