Plugins

Estimate the current session cost and view model costs and the DeepSeek API balance below the composer.

A lazy-mode plugin for DeepSeek Harness: mode-graded decision guidance, fence-aware prompt filtering and a two-language skill catalog.

Pixel zen-garden plugin for DeepSeek Harness: eight pots and six plants, watering and bloom coins, live Open-Meteo weather, a local helper, and garden_status/garden_action agent tools.

Manage a LAN or Tailscale reachable dsh web instance from inside DSH. dsh web listens on loopback by default; this adds a Settings > Web access panel that detects the machine's Tailscale and LAN addresses, starts dsh web bound to the one you pick, and shows the token URL to open on a phone or another machine. Also stops and restarts it, tails the child log, persists the bind address and port, and registers two agent tools (dsh_web_control, dsh_web_config). Zero runtime dependencies. Anyone who can reach the bound address and holds the token URL gets your dsh's full privileges (files and commands); LAN mode is plain HTTP, Tailscale is encrypted by the tunnel, and the token is single-use and changes on every start.

Peer sessions between DeepSeek Harness instances on a LAN: UDP discovery, an explicit one-way allow list with open or confirm approval, HMAC-signed HTTP with a ±60 s window and nonce replay protection, a `跨端 · <peer>` session for delivered prompts, two-phase file transfer up to 100 MiB with SHA-256 receipts, and seven agent tools that call the named tools listed in `exposedTools` on the receiving side. Its local /cross-agent panel routes are guarded only by a loopback check, without DSH's Host/Origin admission.

Maintained continuation of dsh-network: authenticated LAN, Tailnet and HTTPS access to a DSH host, with pairing QR and current Web browser-auth support. Replaces the upstream dsh-network (remove it first; both register the same /dsh-network routes); the gateway listens on 0.0.0.0:3081 by default, set bindHost to restrict it.

Security guard for DeepSeek Harness (Cordis): reviews every tool call in pre-execute against SlowMist agent-security rules, denying or flagging risky commands, MCP servers and skill loads, external URLs and repositories, untrusted documents, and EVM or Solana addresses; scans tool results for prompt injection after execution and ships a slowmist_scan audit tool plus an injected security policy prompt. Rules follow the open-source SlowMist Agent Security Skill (MIT).

Read-only diagnostics for a DSH install — boot-crash logs and the cause named in them, config drift against a recorded fingerprint, backup freshness, workspace growth, plugin updates, host-version compatibility, duplicate client ids, and model availability — plus an action layer that always shows a plan first and needs a single-use fingerprint and explicit confirmation before anything is written. A checkup also runs 45 seconds after every host start; when the 3-hour probe cache is stale it sends a one-line test prompt to the default model and a few models of each configured provider (model.probeOnReport can switch this off). Registers the agent tools dsh_steward_report and dsh_steward_act (clean caches via dsh-disk-cleaner, backup via dsh-config-manager, disable or enable a bundle, set the default model; execute takes the plan's hash plus confirm: true) and a system-prompt section telling the agent to run the report first when something crashed.

Moves reasoning that a provider leaks into the visible text channel back into the reasoning channel, and emits a text block when a whole turn of answer text lands only in the reasoning channel. Catches three shapes: `<thinking>`-tagged text, text that continues a reasoning tail which ended mid-token, and an answer-only reasoning turn that stops. Healthy streams pass through unchanged, block order is preserved, and each of the four rules can be switched off in one JSON config.

Godot game development workbench for DeepSeek Harness. Windows only, preview release: plans a game (GDD, tasks, acceptance checks), changes project files through controlled read/write tools, diagnoses the project and runs it for evidence. Runtime and import checks launch your configured Godot as a normal process with your permissions (the AppContainer sandbox applies only in the restrictedProduction option); the official Godot 4 standard build can be downloaded on request after confirmation (SHA-256 checked), creating a project registers it in Godot's project list, and the selected project context is sent to your configured model.

Carries a DSH environment between machines through one private GitHub or Gitee repository: third-party plugins (reinstalled from a version, or carried as a tarball or source tree), the four profile configuration files, and folder snapshots. A restore resolves each folder through an absolute path, a registered root, or a confirmed new path, compares file by file, leaves locally edited files alone, backs up anything it replaces, and refuses writes that escape a root, cross a junction, or land on a directory the plugin does not own. Configuration files and folder contents are uploaded as they are (no secret scrubbing) and the plugin does not check that the repository is private; the access token stays in the credentials service, and on first start a GIT_SYNC_* token left by dsh-plugin-git-sync is copied over. Needs Node 22.12 or later.

Adds a /grill-me slash command that switches the session to plan mode and prompts the agent to ask 3 to 20 structured questions about your goal, each with a recommended option and alternatives, through ask_user_question before it plans.

Document-form plan task-book plugin for DeepSeek Harness: one entry skill plus three tools — structure check, skeleton generator, package self-check — for a four-element task book, with the protocol reference shipped in-package. Only the generator writes files, and it refuses to overwrite an existing one unless force is set.

Render PlantUML diagrams from plantuml, puml and wsd fenced code blocks in the DSH sidebar Markdown preview, using a bundled browser-side PlantUML engine; no Java or PlantUML server is required.

Zhihu inside DeepSeek Harness: hot, recommendation and follow lanes plus in-site search, formatted question and column bodies, a per-item discussion that runs as a real Session, and one-key export to Obsidian through its REST API. Reads with your own signed-in cookie, kept in the credentials service.

Download only a time range of a video (yt-dlp segments; long videos fall back to HLS when the DASH URL cannot be seeked), verify the cut with ffprobe and sampled frame contact sheets, and serve the clip over a temporary LAN HTTP link with byte-range support. Exposes video_clip_download, video_clip_verify and file_share tools plus a video-clip skill; requires ffmpeg/ffprobe. Installs yt-dlp with pip into $DSH_HOME/cache/video-clip when it is missing; file_share serves a file or directory over unauthenticated HTTP bound to 0.0.0.0 (visible on the LAN) for 30 minutes by default.

Dispatch a task to a real DSH session by workspace path or session id; results land in a persistent task ledger that can be queried without triggering the model. It serves HTTP on 127.0.0.1:7391 and requires a bearer token it generates on first run (kept in ~/.dsh/relay/token), rejects non-loopback Host and foreign Origin, and stores task results as JSON files under ~/.dsh/relay/tasks; an optional notifyUrl receives each finished result.

Session archive with tags, notes and per-session metrics, plus a Plan-Do-Check-Act loop over the archived sessions that produces prompt and AGENTS.md rules and re-measures them on later sessions. Runs locally without calling a model.

Exposes the chat models of a locally signed-in QwenWork desktop app as a Harness provider, with a multi-account pool, session affinity and failover, pre-expiry credential renewal, a health watchdog, per-model enable/context-window/input-type settings, and account status with credit balance. Unofficial local integration that reuses your own signed-in client credential; your own account only. Windows only: needs the QwenWork desktop app signed in, and keeps its account pool in a DPAPI-protected file under %LOCALAPPDATA%. The author warns that reusing the client credential may conflict with the vendor's terms.

Shows the remaining MiniMax coding-plan quota (5-hour window and weekly window) below the chat composer, and keeps the profile's MiniMax model list current by appending newly released models.

OpenDesign (AMR) quota readout: the Design Plan 5-hour and 7-day windows, wallet balance and days-to-exhaust in a composer pill, read over a local controlKey or a browser session. The local source reads the controlKey from ~/.amr/config.json; the browser source opens a temporary Chrome window, and after you log in collects the session cookie over CDP into DSH's credential store.

Provider-aware account balance chip for the DeepSeek Harness composer dock: DeepSeek, OpenRouter, Moonshot/Kimi, Zhipu/GLM, MiniMax and Alibaba Cloud Token Plan, with peak/off-peak and night-discount countdowns.

Shows the agent's live state in an always-on-top strip on the desktop — one ball when idle, a pill with the running tool name and elapsed time while working, expandable to the last message.

Adds a quick-select model list to the DSH composer model button: a settings icon on the Model row of the model menu opens a dialog to pick and reorder favourite models, dragging vertically on the model button switches between them on release, and dragging left or right steps the reasoning effort; the menu's reasoning-effort row also gets a draggable slider (based on Microqian2th/dsh-codex-effort-slider). Text follows the DSH language setting (English / Chinese).