Plugins

A phone shell for the web GUI - the sidebar becomes an overlay drawer that closes when a session is tapped, the settings sheet goes full-screen single column, and the transcript is retuned for phone reading.

LLM debug console for DeepSeek Harness: captures the full content of every model call at the llm/stream waterfall (options, stream chunks, usage, wire protocol) and shows it in a DevTools-style docked panel, with shared-prefix context diffing, wire-JSON reconstruction, JSON export and a runtime-tunable capture policy.

Forwards a local dsh web UI to the public internet under a *.ds.hn subdomain (or your own self-hosted relay), gated by a login, with optional end-to-end encryption (PBKDF2 to AES-256-GCM).

Mobile pairing remote for DeepSeek Harness: E2EE companion over dual-plane allowlisted RPC (LAN, Tailscale, optional Cloudflare Quick Tunnel or self-hosted rendezvous).

Persistent image or MP4 wallpaper for the DSH Web profile: a wallpaper card under Settings -> General selects a local image or MP4 (up to 300 MB), tunes surface opacity and blur, compresses video locally to H.264 when ffmpeg/ffprobe are on PATH, stores media under ~/.dsh/wallpapers, and pins the Web server to port 9191 so the saved wallpaper survives restarts.

Put a dsh (DeepSeek Harness) workspace on ANY machine. Two modes in one plugin: (1) fleet — enroll an off-site machine behind NAT into your dph via a one-time token + reverse tunnel to your own relay VPS, so it appears as a dsh-ssh host; (2) execution wor

Contract regression harness for plugin authors: a scripted LLM adapter drives the real pipeline in isolated child processes with session-event assertions (load/contract/behavior/fault layers); zero API key, CI-ready.

LAN access portal for DeepSeek Harness with dual-password authentication and subpath reverse proxy support. Derived from wenbin-wb/dsh-bridge v2.17.8 (MIT, several modules reused verbatim); both default to port 3082, so change one port before running both. Authentication is opt-in: set the visitor and admin passwords and enable it before exposing the port to the LAN.

Remote access for DeepSeek Harness: expose this machine's DSH Web GUI through an SSH reverse tunnel and a QR gate — scan and enter. Requires your own Linux server with root SSH access plus nginx, openssl and qrencode; it rewrites that server's nginx config, and the QR link is a one-year login secret, so treat it like a password.

Fixes web_fetch failing with "non-public IP address" while Clash, Surge or v2rayN runs in TUN/fake-IP mode: finds your local HTTP proxy by itself, sends web_fetch through it while the proxy is on and directly when it is off, and adds an Auto/Proxy/Direct switch to the sidebar. Model calls are left alone by default.

Chat wallpaper for the DSH desktop UI: paint one image from a local folder across the app, tune the left sidebar, main window and right sidebar scrims separately, rotate through a group with fade effects, and add a bar under the composer, a task progress bar and an all-session token total.

Layered global and workspace memory for DeepSeek Harness, with a web panel to browse entries and tune distillation and consolidation, an index kept in context with records loaded on demand, and a per-session choice of layer.

Lets a phone reach the DeepSeek Harness desktop over a LAN address or a Cloudflare quick tunnel, with QR pairing, a live session feed, approval prompts and a floating desktop widget. Both entry points (LAN and the Cloudflare quick tunnel) start enabled by default; each phone pairs with its own token.

Expose local listening ports as public HTTPS URLs via Cloudflare Tunnel, with automatic DNS management and one-click token template authorization.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

LAN phone drop: a QR code on the computer screen opens a page on the phone, and photos or scanned documents land in a computer folder over the local network, with no tunnel and no cloud in between. Document mode binarizes locally in the browser (adaptive threshold plus speckle removal and edge crop) so an ordinary phone photo comes out as a black-and-white scan. Adds a "phone drop" entry at the foot of the DSH sidebar that opens the QR page, plus a phone_drop tool for the assistant; the same CLI also runs standalone without DSH.

Uses Z.ai / ZCode Start Plan quota inside DeepSeek Harness as a GLM model provider (GLM-5.3-Flash, GLM-5.3) with tool calling and reasoning levels; the settings page shows quota bars, gifted-plan claiming, refresh opportunities and a redacted request log. Requires the ZCode desktop app installed and signed in at least once (the plugin reads its local credential store) and an account with an active Z.ai / Start Plan entitlement.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

In-app server monitor window for DSH that tunnels to a lightweight agent on your server: memory, swap, load, disk, per-container usage and QQ status, cache purge and container restarts, plus an embedded VNC desktop for manual QQ QR login and sign-out. The agent ships in the repository (server/monitor.py) and you deploy it yourself.

Connects DeepSeek Harness to MCP Bids public US federal opportunities and connected TED notices, with source-linked document tools and personal API-key authentication.

Drives the DSH right-sidebar built-in browser from the agent side with 38 tools (open, navigate, read page text and interactive elements, accessibility tree, click, fill, select, check, key press, scroll, resize the browser frame by dragging its corner, with the page inside reflowing responsively so a narrowed frame shows the mobile layout, screenshot, full-page screenshot, PDF, markdown export, scrape to JSON, download, cookies, per-step operation records with replay and action whitelisting), serves the built-in web_search from a self-hosted SearXNG over an SSH tunnel with Tavily and a real-browser fallback, and registers a fetch provider that retries blocked GitHub URLs through measured mirrors and sniffs charset from the response header so GBK and GB2312 pages decode correctly.

Loopback relay as DSH's process-wide proxy route: web_fetch works under TUN fake-ip; a dead proxy gets same-request direct fallback, and a probe switches back.

Draggable floating TES-gyro widget for the DSH Web UI: click to spin it with linear friction decay, tune the spin speed from a slider, and play the bundled track with its LRC lyrics scrolling in sync. Spin speed and position are remembered.

Adds a draggable lucky-block button to the DeepSeek Harness web UI. Single-click plays zero-cost little performances (popups, a fake blue screen, daily fortune, trivia, cold jokes, music, and a set of visual stunts); a 1.4-second long-press mines the block open and starts a new session to write a random paper, read the news, invent something, or spin a short story. It also appends a "lucky block" choice to the model's multiple-choice questions and rolls a random pick, reversible by saying "rollback". Block appearance and event weights are adjustable in settings.