Plugins

Context observability and control for DeepSeek Harness: cross-session token analytics, session-level budget/prompt/tool controls, and optional agent scaffolds. It reuses the official tokenMeter, compaction, systemPrompt, and tools.restrict seams; monitoring is read-only.

Select a statement in an AI answer, find candidate support in earlier chat and tool records, classify support, and jump to original passages for review.

Persona manager for DeepSeek Harness — a JSON-backed persona library, a per-session binding so each session can run a different persona, an optional default persona for sessions that have no binding, and switching that applies either at once or from the next session; the Web UI adds a Model personas settings page and a persona chip next to the composer, and three model tools let the model list, switch and create personas itself.

Treats the session as a mainland-China user (zh-Hans-CN, Asia/Shanghai, ISO dates, CNY currency) and generates a self-consistent test persona: five tools, six cross-checks, GB 11643 check digit, phone prefix matched to carrier ASN.

Stops compaction summaries and session titles from burning their output budget on reasoning, by lowering the thinking level and raising the token floor for auxiliary calls only.

Use your ChatGPT account to bring Codex models into DSH: choose models and thinking effort, chat with images, use tools and skills, approve local tasks, answer interactive questions, continue and compact long conversations, check quota and Token history, and maintain a supported Windows screenshot helper.

Grok model provider for DeepSeek Harness with model discovery, image and video generation, text-to-speech tools, and durable local media tasks over an OpenAI-compatible gateway.

Local-first usage analytics for DSH: subscribes to session events and aggregates tool calls, turns, errors, latency and capability usage into daily tables, shown in a sidebar panel (6 KPIs, 14-day trend, top tools, capability breakdown) and served over a fenced local HTTP API with 18 JSON-RPC methods. Zero runtime dependencies, local mode makes no outbound requests, and no message bodies are collected.

Task details sidebar for DeepSeek Harness: a "View task details" button under every finished turn opens a resizable right-sidebar panel showing that task's input files, intermediate artifacts, output files, tools and skills used, inferred languages, a step-by-step flow timeline, and the model provider with token usage and cache hit rate.

Visible terminal panel that streams the agent's shell commands into an in-app terminal and lets the agent capture the terminal screen as text.

Adds a low-key companion panel with a pomodoro timer, a todo list, drink-water and stand-up reminders, plus lesson explanations and homework tutoring through the installed desktop pet.

Full-page NetEase Cloud Music player for DSH: daily recommendations, playlist browsing by category, charts, new releases, search, playlist/album/artist pages, QR-code login, synced lyrics, queue and downloads, plus four agent tools for search, song URLs, lyrics and playlist tracks.

Agent2Agent (A2A) protocol bridge: serves an A2A endpoint with agent card, message/send, message/stream SSE, task lifecycle (get/cancel/resubscribe) and input-required continuation; a2a_discover/a2a_send/a2a_task_status/a2a_cancel tools for calling remote agents; plus a web ops panel with live task board, one-click cancel and a remote agent directory.

Control Proxmox VE virtual machines from the conversation: 16 tools for the VM console over VNC (screenshots, mouse, keyboard, batched actions, Unicode text and clipboard) and for running commands and reading or writing files through the QEMU guest agent, all over one ssh connection to the node, so the host needs no X11 or Wayland.

Tool-surface snapshot and drift gate: baselines the full visible tool registry (name/description/parameters, MCP tools included) into a committable JSON file and warns loudly when an upgrade adds, removes or reshapes a tool.

Deterministic network egress gate: web fetches and searches are checked against a destination allowlist in tools/pre-execute and denied before they run; shell fetch-verbs are observed (enforcement opt-in).

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

Prints every plugin in the DeepSeek Harness loader tree at boot, with the exception text for anything that failed, and checks dependency version drift, profile config validity, web port reachability and registered tools.

SSH and JumpServer terminal plugin: real-machine read tools, human-initiated read-write operations, and session management from inside DSH.

DSH Cordis computer-use provider for the ZTE Nde desktop. npm install auto-fetches the musl binary built by computer-use-linux-zte-nde (v0.7.7-nde.3) into the package's own bin/ via postinstall; resolveCommand() resolves the cordis command path against import.meta.url so the mount works regardless of dsh web's cwd. Reserves the shared computer-use slot via ctx.computerUse.register and exposes MCP tools under mcp__computer-use-linux-nde-mcp__* (screenshot, list_windows, click, type_text, doctor, etc.). Two notable Nde fixes upstream of this provider: KWin caption+coords fallback for window targeting, and SnapshotCache that keeps AT-SPI single-wake per (app, pid) so Chrome is not repeatedly disturbed.

Jenkins CI integration with a live build-progress panel in the right sidebar, a multi-instance settings page, five model-facing tools (list jobs, build status, console log, workspace, trigger build), and a failure wake that hands a failed followed build to the conversation that followed it.

Agent-facing GitHub repository tools: binds an account through a first-run prompt, then clones into the workspace and reads, exact-replaces, commits and pushes files, with writes off by default.

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

Publishes HTML pages and Markdown documents written by the agent to GitHub Pages as shareable links, with tools to update them in place, list, read back, and delete them; adds an Artifacts sidebar panel and a bundled page-design skill.