Plugins

Connects the DeepSeek Harness agent running on your own computer to the HarnessMate platform, so you can chat with it, exchange files and approve its tool calls from a phone or a browser.

Connects the DSHM Android client to computer-hosted DeepSeek Harness sessions for remote chat, model switching, and approvals with device pairing and revocation.

Launch Android apps on a virtual display and drive them with screen reading, taps and swipes, leaving the main screen untouched.

iOS remote companion for DSH Desktop 0.2.0-rc.2 on macOS Apple Silicon, with pairing, approval notifications, and device revocation.

OpenAI-compatible HTTP endpoint for DSH sessions plus a phone panel that reads transcripts, browses files, sends or queues messages, and answers approvals and questions.

Signed chain-of-custody for sessions: every watched tool result appends a hash-chained, ed25519-signed record, with commits bound into the chain — tampering with any line or truncating the tail fails deterministic replay verification.

Writes a model-generated annotation into every DSH escalation approval prompt — what the command does, what the model intends, how risky it is and why, and what each choice means — and keeps a searchable history of past approvals at /dsh-approval/history, with a diagnostics page at /dsh-approval/diag.

Local-only telemetry service for DSH plugins: records operation trails and error events into a storage-domain KV table, applies a configurable redaction rule set before the write and again when the analysis reads back a record stored before a rule existed, and groups one plugin's failures by feature-code anchor, reporting the window it read, the route each group ran on, and the attempts recorded after its last failure in write order.

Staleness keeper for the Codebase Memory knowledge graph: it compares the graph Branch node head_sha with git rev-parse HEAD and reports an exact behindBy, rebuilds only the stale projects through the codebase-memory-mcp CLI so the MCP tool 60-second cap does not apply, watches each project for edits, and mirrors the same state into a settings card and a REST control surface.

Adds a Restart dsh button above Settings that restarts dsh in place: through systemd when dsh runs as a systemd unit, otherwise via process.execve with the same PID (a thin wrapper parent on Windows or Node < 22.15), so whatever started dsh needs no supervisor config (verified on Linux; Docker, macOS and Windows not yet run for real); the page reloads once the new boot id answers.

DSH Cordis computer-use provider for the ZTE Nde desktop. npm install auto-fetches the musl binary built by computer-use-linux-zte-nde (v0.7.7-nde.3) into the package's own bin/ via postinstall; resolveCommand() resolves the cordis command path against import.meta.url so the mount works regardless of dsh web's cwd. Reserves the shared computer-use slot via ctx.computerUse.register and exposes MCP tools under mcp__computer-use-linux-nde-mcp__* (screenshot, list_windows, click, type_text, doctor, etc.). Two notable Nde fixes upstream of this provider: KWin caption+coords fallback for window targeting, and SnapshotCache that keeps AT-SPI single-wake per (app, pid) so Chrome is not repeatedly disturbed.

Emails you when a long turn finishes or errors, when a goal completes or blocks, and when an approval or a question has waited past a timeout; each new notification deletes the previous one from the inbox over IMAP, so the inbox holds at most one.

System notifications, a tab-title dot and a PWA taskbar badge when a reply finishes in the background or a session waits for your approval, plan review or answer, all cleared when you return to the window.

Daily brief for DeepSeek Harness. Every day at a fixed hour it ranks the plugin market by real install counts and stars, cross-checks it against your own agent memory and working conventions, and proposes two kinds of item: concrete deltas on the plugins people actually use (original does A, the proposal does B) and directions nobody has built yet. The popularity numbers come from the catalog the market itself publishes and are quoted into the prompt rather than guessed; an entry the market has not measured is shown as unmeasured, never as zero. Approving an item opens a new session named after it and hands that session a fixed delivery contract — implement independently, never fork, test green before publishing. Rejected sources are remembered so they stop coming back.

Live skill provider that reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session catalog: the engine-bundled skills under engine-config (unpacked from app.asar when that directory is absent), the MiMoCode global and project roots, extension-contributed skill directories declared in extensions.json, and the brand compatibility roots MiMo's own skillPathCompat setting enables.

Removes the model-capability gate that blocks image prompts: patches llm.resolveModelInfo results and adapter model tables to declare image input, so routes with no declared input modality can send and read images. No app.asar or config-tree edits.

Chat with the DeepSeek web app (chat.deepseek.com) in a native DSH panel — a real browser drives the site on your existing web login, with streaming replies, deep-thinking and smart-search toggles, and image or document attachments. Conversations can be recovered from the web side, exported as Markdown, and distilled or replayed into a harness session, and the agent reaches the same web chat through six tools (dschat_status, dschat_send, dschat_stop, dschat_recover, dschat_import, dschat_transfer).

Bridge between DSH and the local WorkBuddy desktop app, in four parts: read, search and append WorkBuddy memory, skills, plans and daily logs; run tasks through the local CodeBuddy CLI with four permission profiles; drive the running WorkBuddy window over CDP (open a conversation, read its replies as sanitized rich HTML, type and send, switch the account-billed model, relaunch it with a debug port when it is missing); and a sidebar panel that puts that conversation surface inside DSH. 25 tools and 15 HTTP routes in one plugin.

AList v3 file management: browse, search, upload (streamed and multipart), offline downloads, archive listing, task polling and control, plus admin tools for storages, users, roles, meta rules, settings, search index, shares and labels - 75 tools in total; every write goes through the approval flow and passwords are never read back.

Folder time machine for DeepSeek Harness: snapshot any folder, browse its timeline, roll back with one click — Git-like history without needing Git, for folders that never had a repo (game saves, app config dirs, loose documents). Snapshots are content-addressed and deduplicated, and unchanged files are not re-hashed. Automatic snapshots come in two modes: realtime (fs.watch — one version ~8s after the last change, so a save-all or a build counts once) and timed (checks every N minutes, stores only when something actually changed; identical content never adds an empty version). Empty folders are recorded and recreated on restore. Every restore takes a safety snapshot first, so a rollback is itself undoable, and exact-mode cleanup only removes files and empty folders — a non-empty folder is never deleted. Ships a folder_timemachine model tool (status/history/diff need no approval; writes ask first) plus a floating panel with the timeline, one-click restore and mode switching. Pure JS, zero runtime dependencies, 110 tests included.

Replaces rolling narrative summaries with an append-only session index, so early facts survive compaction verbatim and shadowed text stays retrievable by anchor.

Inlines an image block as base64 only in the one request where it first appears, and marks that same block offloaded on every later request so DSH's own image-offload projection renders it as the placeholder text carrying the read-only local path. An occurrence is keyed by session id, message id, content-tree path and attachment id, and a request is only counted after it produces its first chunk, so retries do not count as sent. Requests carrying a purpose are neither rewritten nor counted, a later read_image of the same file is a new occurrence and inlines once more, and only that request's copy is rewritten, so nothing is written back to the session.

Shows a Spark Scope card at the bottom of the dsh sidebar: model server decode and prefill rates with sparklines, running and queued requests, KV cache, TTFT and TPOT p95, and GPU temperature, power, load and memory for each DGX Spark node. Read-only; needs a running Spark Scope server. Works in dsh web and the desktop app.