Plugins

Passcode marketplace inside DeepSeek Harness: enter a six-character code to unlock and install plugins shared by creators, plus themes, backup, updates and diagnostics.

DeepSeek Harness plugin that locks the web chat composer Enter-send. Toggle with a lock button or Ctrl+Alt+L to prevent accidental sends while typing or editing long prompts; unlock to send. IME-safe and per-session.

Three-tier now/next/later input planning dock for the DeepSeek Harness web GUI: a red/yellow/green priority strip replaces the busy-Enter queue, plain Enter queues to later, with in-place multi-line editing, drag reorder, and session-isolated freeze/resume; the freeze button bridges a separate plugin, [dsh-session-guard](https://github.com/drscrewdriver/dsh-session-guard) (installable from dsh-market), via stopNextTurn/resume RPC + composer lock for a real per-session lock, pairing with its global peak-hour auto-pause to stop sessions during DeepSeek's high-cost windows and resume off-peak.

Preview Mermaid diagrams as images via local rendering in DSH Web when the chat message contains a Mermaid fenced code block, and also allow integration with external rendering servers.

DSH Web 广告拦截器，四层独立防御拦截 dsh-ads 插件的所有广告位 | DSH Web ad blocker with four independent defense layers targeting the dsh-ads plugin

Per-workspace completion ringtones plus attention sounds for approval, question, plan-review, goal-blocked, and task-failure events, with built-in synth, voice (TTS), and custom audio.

Keep a multi-PR effort on one board you can trust at a glance: the hub agent keeps a tree of steps, each linked to its issue, PR, branch and worktree, through four board tools, and you see what is done, what is blocked and what needs you in a right-sidebar Board tab and a progress strip above the composer. Each board is one plain JSON file your scripts can read, and an optional drift command you configure flags steps whose status no longer matches their work.

Layered long-term memory for DeepSeek Harness: each turn injects a persona frame plus a relevance-ranked memory index while full transcripts stay on disk and are expanded on demand, so the vault never floods the context window. Facts are slot-keyed, so a changed mind retires the old value instead of recalling two contradictory answers. The persona frame is derived from memory by the model itself, behind three anti-pollution gates (rejecting development chatter, blocking echoes of its own injection, and merging restatements by shared content words). Periodic consolidation merges near-duplicates, rolls long topics into digests, and archives low-value old entries by tagging only — raw text is never deleted. The append-only store is compacted in place (measured 4.7 MB to 355 KB). Zero third-party dependencies, no build step. Note: per-turn injection inevitably lowers prompt-cache hit rates, so this plugin is not recommended for work scenarios.

Runtime plugin firewall for sessions started through its launcher (the DSH Desktop app cannot be injected and is not covered): filesystem, network and subprocess calls plugins make are attributed to the plugin that made them and judged against what that plugin declares, so a plugin doing its declared job stays silent and leaving it is recorded. Attribution is best-effort, not a guarantee - uncovered calls fall back to host, never to another plugin. Also adds a pre-install health card (capability surface, red-line combinations, PASS/WARN/BLOCK), boundary judging, opt-in pre-execution blocking with a credential-exfil rule, update diff with a trial install in an isolated child process, SARIF/CSV audit export, and multi-source aggregation. Local-only storage, no telemetry; the optional webhook is off by default.

DeepSeek Harness plugin that stops hand edits to generated files (lockfiles, protobuf/codegen output, files marked @generated or DO NOT EDIT) and tells the model which source to edit and what to run instead.

A chip at the left end of the composer tool row showing whether DeepSeek bills at peak or off-peak right now. Clicking it opens a card with the current state and rate, the next switch with a countdown, and why this instant is in that state: a weekend, a named statutory holiday, a 调休 make-up workday, or simply outside the peak windows. Times are resolved in Beijing time with an explicit UTC offset, so the verdict does not depend on the machine clock; a hard-coded 2026 Chinese holiday table carries the 33 holiday days and the six 调休 workdays, and a year beyond the table says so instead of guessing.

A Versions tab on the Plugins page: one-click upgrades that replace the plugin in place where they can (no uninstall, enabled state preserved, falling back to remove + reinstall with the reason logged when the profile writer lock is busy), live pnpm output with per-step timing and cancel, the full published version history with one-click rollback, every version checked against the running DSH so incompatible ones are marked and blocked, a rollback that installs the old version but cannot activate it reported separately from a lost package, profile manifest writes taken under the harness writer lock with one recoverable journal record per package after a failed upgrade, mirror-gap warnings, and a selectable npm registry saved in the profile.

All-media (video/audio/image) sibling of liustack/modlens: turns local media into structured evidence (timeline / transcript / layout regions) injected into the conversation so text-only models can cite concrete frames, seconds and speakers — Evidence, not imagination. One failover chain per media, recorded hop-by-hop in meta.attempts (a fallback is never silent): host-registered multimodal models first, then a configured OpenAI-compatible endpoint (comma-separated multi-key rotation), then local ffmpeg frame-sampling / a local ASR CLI, degrading to metadata-only as a last resort. Absorbs modlens battle-tested rules — cooldown keyed only on auth/quota failures and softened to chain-tail (never dropped), redact-before-clip error text, magic-byte sniff that never trusts file extensions. Optional vision-bridge registers a media-lens wrapper into the host model selector so a pure-text model gains image/audio/video sight. Registering / authenticating multimodal models and true inline audio-video upload lean on two companion plugins, declared as optional peers (absence auto-degrades, never errors): dsh-thinking-levels fronts the model config / registration surface, dsh-llm-openai-completions takes over the OpenAI-compatible transport that serializes file blocks into video_url / input_audio. Privacy: media goes to remote providers by default; strictLocalOnly keeps content on-machine. Prerequisites not shipped with the package: ffmpeg/ffprobe on PATH (frame sampling / reencode / duration probe; degrades to metadata when missing) and a user-configured local ASR CLI for the audio fallback. Hosts 0.1.7 / 0.2.0 / 0.2.1 (6 rc, exact engines.dsh enum). npm: dsh-media-lens.

Claude Design System theme for DeepSeek Harness: warm-grey surfaces and a clay accent, refined composer, sidebar, code blocks and Markdown, localized edit/write cards with workspace-relative paths, and an ASCII ocean on the blank-session page with three whale colour modes.

Render Mermaid fenced code blocks as native diagram cards with 8 design-system themes and adaptive layout.

Generative UI: the model calls render_ui with a React snippet and the answer renders as an interactive card in the conversation. The snippet runs in a sandboxed iframe with an opaque origin, so it cannot read the host page, its storage or its cookies, and the frame CSP blocks the network; a message from a card is only sent after the user confirms it, and a failing card shows its error with the source behind a toggle.

Arknights-flavoured startup animation for the DSH Web GUI: a PRTS terminal boot, sonar scan, hologram lock-on and an operator-file splash that end in a deep-sea lockup, about 4.6 seconds, with four selectable original score presets (or sound off), skippable with a click or Esc and switchable, re-timed or replayed from Settings.

Adds a Batch Uninstall page to the DSH settings dialog: a checklist of every installed bundle with multi-select, select-all, a confirmation dialog and per-plugin progress, where official bundles stay locked and each removal goes through the host pluginManager service.

Pulls GitHub repo content into DSH conversations at start and writes extracted long-term memory back with SHA-locked multi-file commits at conversation end; per-file read/write permissions, native settings page, turn indicators and global change notices.

Selection quoting and anchored annotations across DSH chats and document previews: numbered quote blocks stay visible in the composer and in sent messages and click back to the source, notes from docx / PDF / Markdown / code / Excel-range previews collect into one batched send, and each note can be dictated by voice.

A lightweight font and theme plugin for the DSH client: Latin/Chinese/code font pickers that list only installed families, and five official palettes (One Dark Pro, Dracula, Nord, GitHub, Catppuccin) applied through the official theme tokens, including code-block syntax colors. No bundled fonts, no dependencies, no build step. Requires DSH 0.2.0-rc.2 or newer.

Exposes the models already configured in DeepSeek Harness through an OpenAI-compatible gateway, so other local projects can call them with any standard OpenAI client. Multiple provider candidates share one named group with ordered, balanced or random dispatch; upstream failures before any output switch to the next candidate transparently, and rate-limited requests are retried after the provider's backoff. Per-candidate call statistics (attempts, answers, failures, token/TTFT totals) appear as badges in the settings page, and daily aggregates persist to a local file with a 30-day heatmap and trend view. Until you create a key in the UI, the endpoint accepts calls from anyone who can reach it; keys (stored as SHA-256 hashes) then turn authentication on, and the endpoint stays locked even after the last key is revoked. Exposing the optional LAN listener without a key leaves the port open to the whole network. Runs on DSH 0.1.2-rc.1 through 0.1.7-alpha.1 and later.

Active wait for background subagents in DeepSeek Harness: registers a wait_subagent model tool that blocks until a named background continuable subagent settles, then returns its stop reason and closing message — optional timeout, membership gate rejects unknown ids, event-driven with zero polling. Closes the gap between run_in_background fire-and-return and the async settlement notice; wait for a background subagent without polling list_agents.