Plugins

Step-0 observation probe for dsh-compaction-audit: logs every compaction/* session event and probes whether shadowedSeqs still resolve to readable events in session.events. Observe-only; never injects, never blocks.

Private local file attachments for DeepSeek Harness with native images and bounded document reading.

Escaped, theme-aware HTML code-block rendering service for DSH Web plugins, built on structured syntax-highlight tokens with source line-ending preservation.

把九种 IM 机器人和公网 AI Office 接入本机 DeepSeek Harness（支持飞书、微信、钉钉、企业微信、QQ、Slack、Telegram、Discord、WhatsApp 和 AI Office）。 Connect nine IM channels and a public AI Office to a local DeepSeek Harness. Fork of @xmanrui/dsh-im — Feishu HTML media fix (private/custom).

Human-in-the-loop tools (`human_task` / `human_task_ready_check`): pause the agent until the user performs a real-world action or returns an observation (GUI operation, game testing, visual verification, hardware checks), gated by session consent and an AFK presence check, returning a structured JSON result via a web task dialog.

An elevated Plugin list for DeepSeek Harness Web Settings — trust tiers, collapsible groups, and complete per-plugin detail

Automatic secret redaction in tool results: masks API keys, tokens, JWTs, private keys and configured secrets before the model sees them.

Routes chat images to a fixed OpenAI-compatible vision model, returns factual observations to the selected main model, and reuses session-scoped observations across replay, compaction, and restarts.

A DeepSeek Harness plugin that turns the anywhere-claude-mem git sync into a DSH peer: pull cross-machine memory at session start and push new prompts/observations as they land in the claude-mem worker

Replaces the built-in bash executor so every command gets an environment resolved from its own working directory: configurable PATH prepends, Python venv activation and mise shims, with a dedicated section in the Web UI settings.

Pull invoice number, date, parties, tax IDs and the amount/tax/total triplet out of text, then verify that amount plus tax really equals the total and flag documents that do not reconcile.

Creates, activates, checks and removes external DSH plugins from a conversation through fixed tools; requires the external DSHX devkit.

TangSan mascot appearance layer for the DeepSeek Harness web GUI: wears a generated TangSan portrait as the GUI background (surface-token fade with opacity, blur, scrim and position controls), seats the matching square avatar as the sidebar and conversation brand mark, and edits it all from a Settings section; the host serves the artwork and config locally under /api/tangsan, and the config lives at $DSH_HOME/tangsan.json.

Nai milk-frog mascot appearance layer for the DeepSeek Harness web GUI: wears the bundled milk-frog artwork as the GUI background (surface-token fade with opacity, blur, scrim and position controls), seats the matching square avatar as the sidebar and conversation brand mark, and edits it all from a Settings section; the host serves the artwork and config locally under /api/nai, and the config lives at $DSH_HOME/nai.json.

MDSM (Male DeepSeek Mascot) appearance layer for the DeepSeek Harness web GUI: wears the bundled mascot character as the GUI background (surface-token fade with opacity, blur, scrim and position controls), seats the matching square avatar as the sidebar and conversation brand mark, and edits it all from a Settings section; the host serves the artwork and config locally under /api/MDSM, and the config lives at $DSH_HOME/MDSM.json.

Per-workspace activation control: a dialog opened from the workspace row menu switches individual plugins, MCP servers, and skills on or off, and the host applies the choice in that workspace's own agent scope — a disabled skill leaves the model catalog, an MCP server has its mcp__<server>__ tools denied, and a plugin has the tool names its entry declares denied.

Maintained fork of dsh-prompt-enhance, brought up to DSH 0.1.7 — the plugin would not even load on current hosts (InputState.imageIds became attachmentIds, so the composer button crashed the input box; settings.get() was removed; /enhance read a session id the agent no longer exposes). Rewrites default to reasoningEffort off, which measured 252 output tokens for a draft where the model default spent 2897, and a Settings page for all 17 fields is bundled. Verified on a real 0.1.7-rc.2 host: activation, a live HTTP enhancement request, /enhance in the GUI, and the Settings page reading and persisting configuration. 204 tests.

Cross-session long-term memory: captures durable facts from each turn, auto-associates them by shared entity and tag, and recalls with BM25 plus spreading activation over the link graph.

Memory bridge between DeepSeek Harness and ai-memory: runs ai-memory's finalize-session when a DSH session ends, so the observations it already captured become searchable wiki pages. Skips subagents, queues concurrent session ends, and sweeps sessions abandoned by a forced restart. Requires a separately installed ai-memory server with its DSH lifecycle hooks wired by hand — ai-memory’s own install-hooks does not support DSH; this plugin only finalizes what capture has already recorded.

A headless-first macOS Computer Use driver for DeepSeek Harness with AX-first observations, window-bound multimodal evidence, host-owned approval, and evidence-backed action receipts

Sync your DeepSeek Harness (DSH) configuration between machines over a private git or WebDAV channel: settings, plugins, MCP servers, skills, agent presets, workspaces and provider credentials. DSH 配置远程同步插件（私有通道，明文自用）。

33 github_* tools covering REST reads, issue writes, Git data writes, private repo creation, and clone; in-process permission gate and cost-discipline companion skill; no gh CLI required.

Insight dock for the DSH Web GUI: lets an agent park a short, strictly-bounded side observation while it works, shows it above the composer, and lets the user ask to hear it later — with a context anchor that survives context compaction.

DSH plugin: sync model settings, plugin manifests, patch layers and lockfiles across devices through a private Git repository (manual push/pull; https+token or ssh public-key auth).