Plugins

Browser notifications and a beep when a session turn ends, the agent asks a question or approval is pending; clicking the notification jumps to the session; remote trigger endpoint and SSE channel (npm: `bsfeng-dsh-notify`).

SVN (Subversion) toolset for DeepSeek Harness: 33 agent tools (status, diff, log, blame, commit, merge, props, lock, changelist...) plus a sidebar panel with side-by-side BASE/working-copy diff, conflict resolution and AI commit logs.

Adds a subagent_codex tool that delegates tasks to the local OpenAI Codex CLI, running the work in an isolated external process.

Adds local PDF reading, a durable paper library, traceable evidence records, and cross-paper comparison and synthesis tools.

Model-facing display_file tool that renders 36 file extensions inline in the web UI: images with a click-to-zoom lightbox, seekable video, audio, PDF, Office and OpenDocument files converted to PDF on the host via LibreOffice, and local HTML in a sandboxed frame; bytes stream from a signed HTTP route with range support, and PNG/JPEG/WebP/GIF also enter model context on image-capable routes.

Evidence-driven goal verification plugin for DeepSeek Harness. Locks goals via /ultragoal and verifies completion against command exit codes and generated artifacts, preventing the model from falsely reporting task completion.

Brain-inspired cognitive plugin: episodic, semantic, procedural and emotional memory with reinforcement-learning signals, a goal stack with time triggers, curiosity-driven autonomous web research and proactive initiatives.

Model Capability Manager for DSH Web: thinking levels, context window, output caps, input modalities, gateway compat presets, EN/中文 UI.

TRAE SOLO supplier plugin for dsh-router, ported from traework2api. Provides the traework supplier, a free SOLO chat channel, and reports single-account status to dsh-router core.

CLIProxyAPI quota for DeepSeek Harness: a ring beside the model picker plus a settings panel listing every account quota windows with plans and reset times.

DeepSeek Harness plugin that blocks risky npm installs with metadata and deep supply-chain scans

Read-only trajectory review in a resizable conversation sidebar, with rule analysis, optional model explanations, evidence navigation, and same-range run comparison.

Interactive whale-girl desktop pet for DeepSeek Harness: live balance/usage/context occupancy, slingshot toss, easter-egg bubbles, eco mode. 346KB package, zero extra processes.

Codex-style side chat + selection annotations for DSH web.

Security audit plugin for DeepSeek Harness: static permission profiling and a runtime sentinel for third-party plugins

Publishes the DSH Web GUI to LAN or internet with dsh kept on loopback. Every source must sign in for an HMAC session cookie unless passwordless LAN is opted into. Adds self-signed or custom TLS, a secureCookies override for plaintext-HTTP proxies, and a UUID shim for plain-HTTP origins.

Authentication gate for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing, HttpOnly SameSite session cookies and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a password or second-factor step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); admin-only model and API-key configuration guards; per-user isolation on the REST/list APIs and on the WebSocket event streams; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Runs on both DSH transport lines (0.1.1-rc.2 legacy and 0.1.2+ modern) with no configuration; passkey login needs a localhost or HTTPS origin because browsers require a secure context.

Bidirectional Hermes ↔ DSH bridge: import Hermes sessions into DSH, consult Hermes, and receive Hermes-dispatched tasks as a single Cordis plugin.

Math Agent Framework for DeepSeek Harness: symbolic derivation engine (CES / quadratic forms / ODE / PDE), SymPy verification, Lean 4 compiler-verified formal proofs, and QED-style multi-agent adversarial verification, exposed as native DSH tools through a TS shell bridging a Python engine. Requires cloning the math-agent-framework repo and `pip install -r requirements.txt`, with MATH_AGENT_HOME pointing at the repo root. Every result carries provenance (engine versions, seed, tolerances) and is marked untrusted data.

Structural code index for DSH: Tree-sitter symbol search across 8 languages (including C/C++), a bounded repository map ranked by import-graph PageRank and injected into the system prompt, function-level call graph via code_refs, optional circular-dependency and orphan-module checks via code_health, plus working-tree change context and task-aware code context.

Kiro model provider with Builder ID, Identity Center, Google, GitHub and credential-import sign-in, automatic token and profile refresh, account usage, live model discovery, selectable reasoning efforts, streaming tool calls, provider stop-reason and context-overflow handling, and token accounting that uses Kiro's exact counters when it sends them and otherwise scales the context-usage percentage it does send by the model's advertised window.

Identity-gated Tailscale access to the Web GUI with dsh still bound to loopback: a 127.0.0.1 proxy published by `tailscale serve` admits a request only when the Tailscale login it stamps is allowed, with an optional per-device allowlist, so the privileged /api methods behind the loopback check — Settings, Models, Plugins — answer without dsh being told to trust a remote host.

A governed swarm of six specialist DSH agents — orchestrator, planner, knowledge-base bridge, developer and two reviewers — turns a requirement into a strict phase pipeline where every delivery must prove itself with structured evidence before the next phase may start; reviewers are read-only, code merges only after a review pass, and an append-only event log gives full replay and audit on a live kanban board. Its design draws inspiration from the Hermes Agent kanban.

Provides the see_image tool for DSH: send an image file to a configurable OpenAI-compatible vision model and relay its description back to a text-only model.