Plugins

Select text anywhere in DeepSeek Harness, click the quote pill next to the pointer, and the selection lands in the composer as a small quote chip; hover the chip to read the full quote.

Shows the signed-in DeepSeek account's remaining balance in the DSH composer bottom bar, next to the shipped turn/step and token-usage pills, and refreshes it periodically and after each turn.

DuckFleet: one flock of machines, one command. Add a machine once and its ACP delegation tool appears — drive one, several, or all of them from natural language. ／ 鸭群：一群机器，一声令下。添加一台机器即自动获得它的派活工具，用自然语言让某个／某几个／全部机器干活。

Adds a checkbox-style switch at the right end of the Installed group header on the DSH Plugins page: it opens a checklist of the unofficial plugins, all checked by default, and toggles only the ones you keep checked. Once everything is off the button flips to enabling them again. Disable/enable only — it never uninstalls a plugin or deletes plugin files and configuration, and its UI copy follows the app language.

Control Proxmox VE virtual machines from the conversation: 16 tools for the VM console over VNC (screenshots, mouse, keyboard, batched actions, Unicode text and clipboard) and for running commands and reading or writing files through the QEMU guest agent, all over one ssh connection to the node, so the host needs no X11 or Wayland.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box copy while the real disk stays untouched (Windows only, requires Sandboxie-Plus).

Periodic water, stand-up, eye-break and stretch reminders on your own work schedule, with daily and 7/30-day statistics and multiple switchable reminder plans.

System notifications, a tab-title dot and a PWA taskbar badge when a reply finishes in the background or a session waits for your approval, plan review or answer, all cleared when you return to the window.

Host-side long-task detection for small-context local models: long outputs are scaffolded into a parts skeleton (one part per reply, then assemble), and multi-step work into a PLAN.md ledger with notes/ (plan first, one step per reply). Detection is heuristic and host-side, so it does not depend on the model judging its own limits.

Daily and weekly task manager: startup popup reminder, a marquee strip above the composer, one-click circle completion, editable task cards, and a Sunday AI weekly summary, plus a sidebar DeepSeek API usage widget with balance card, today/cumulative tokens and cost, per-model breakdown and a 7-day chart. Persists as JSON under $DSH_HOME.

Provides 15 Superpowers skills for DeepSeek Harness, covering test-driven development, debugging, planning, and code review.

Strict verification for every task: plan 2-7 steps, execute them with worker subagents, verify each deliverable with an independent memoryless verifier subagent, and fix in at most three cycles before reporting honestly.

A mandatory 7-step plan on every request, each step with a binary acceptance criterion, executed through worker subagents and validated by independent memoryless verifier subagents that report PASS or FAIL with evidence.

OpenAI-compatible web search provider for the built-in web_search tool: one baseURL/apiKey/model config powers Qwen Token Plan, OpenAI and any Responses API gateway.

Bridge between DSH and the local WorkBuddy desktop app, in four parts: read, search and append WorkBuddy memory, skills, plans and daily logs; run tasks through the local CodeBuddy CLI with four permission profiles; drive the running WorkBuddy window over CDP (open a conversation, read its replies as sanitized rich HTML, type and send, switch the account-billed model, relaunch it with a debug port when it is missing); and a sidebar panel that puts that conversation surface inside DSH. 25 tools and 15 HTTP routes in one plugin.

Code retrieval engine exposed as an MCP server: four tools (code_search, code_outline, code_index, index_status) over a SQLite FTS5 index with BM25 ranking, CJK bigram indexing, declaration-aware tree-sitter chunking, incremental reindexing, and a three-layer secret filter. The bigram index matches Chinese-language queries against English code, and the default path needs no vector store or embedding model. Requires a local Python 3.10-3.12 engine installed by scripts/install.sh, and CODERAG_ROOT set in the profile patch.

Turn-level file undo for tool writes and edits: each file is snapshotted before the write lands, and the model (an undo tool), the human (a /undo command) or a button in the assistant message action row can roll back every file a turn changed. Snapshots are written in-process rather than by shelling out, so it needs no extra sandbox permission in sessions confined to workspace-write.

Use the free AtomGit quota already signed in on this machine to have AtomCode run an independent code review: the model calls the atomcode_ask tool on its own, and you can also use the /atomcode-review command to review uncommitted changes, a branch or a PR in one click. The plugin reads no API key; a usage pill below the input box shows the CodingPlan quota.

A shareable delivery receipt for a project hand-off. The `ship_receipt` tool measures what it can and records what it was told, then sorts every line into three zones: verified (evidence this run produced and that reproduces elsewhere — a command that actually ran with its exit code, a file hash for a file that is under version control, a scan that found files, a git ref present in the recorded remote), local-only (true on this machine alone — uncommitted changes, unpushed commits, an artifact no one else can see), and unverified (no evidence, including every sentence a human typed). A claim with no evidence keeps its label and leaves the body blank rather than printing the claim; declares the commit and branch, artifact byte sizes and sha256 with PNG dimensions, and the three pre-push checks.

A delivery receipt panel for a project hand-off. One trigger collects the branch and commit, the test and build results, screenshot dimensions with sha256, and the secret-scan verdict, then assigns every line to one of three zones by evidence alone — verified, local-only, or unverified. A claim in the unverified zone keeps its label and prints an explicitly empty slot instead of the claim itself, because a confidently worded sentence with nothing behind it is the exact thing the receipt exists to catch. Test failures and secret-scan hits are still evidence, so they land in the verified zone with a red tone rather than being quietly dropped.

Balance dashboard, allowing the addition of multiple pay-as-you-go/Token plans, while simultaneously checking balances.

Week-keyed personal memo service: stores entries in ISO-week tables, resolves week/month/quarter/year navigation from one period calendar, archives quarters, runs AI analysis and Markdown report export, summarizes archived DSH sessions into the week as one entry per session in the language and at the length the reader picks, requires an explicit force flag to edit a past week, turns one suite-wide telemetry failure analysis into a GitHub issue report, and checks the npm registry for a newer release, returning the exact upgrade command instead of installing anything.

Keeps a per-turn receipt that later turns do not clear (final todo counts, goal id and phase, end reason, and a fail-closed pass/fail/inconclusive plan verdict), plus a read-only tool to read recent receipts. Stores counts and ids only.