Plugins

Complete LAN/remote access for the Web UI: 0.0.0.0 binding, crypto.randomUUID polyfill, token gate (401 login page + WebSocket interception, loopback exempt), privileged-fence and settings-persistence exemptions, and an idempotent installer with upgrade recovery.

Drive your dsh agent from WeChat over the iLink gateway: two-way encrypted media transfer (auto-decrypt inbox + /send), proactive weixin_send tool, completion notifications, multi-session switching, and a health panel with file logging.

Reverse tunnel for the DSH Web GUI: exposes a `dsh --profile web` deployment at a public frp URL and switches the directory picker to the in-app browser, so a phone or remote machine can open and manage the workspace.

Evidence-first operating kit: six read-only tools (capability catalog, staged workflow plans, packaged skill reader, bounded local memory search, repository release audit, release checklist) and five packaged skills - plans and audits, never remote writes.

Inspects the model's streamed reply before it is committed and either discards it or holds it for review when it reads as a refusal, so that text does not stay in the session context. Detection combines built-in phrase rules (an opening refusal, a capability denial, policy wording, first-person intent, refusals quoted in reasoning) with a plain-text word list and optional regular expressions. Interception can sit at the llm/stream waterfall, at the HTTP fetch layer before encryption (not TLS decryption, and it cannot tell which session a call belongs to), at both, or in a preview mode that shows a transient preview while the original chunks stay in memory until the whole reply has been checked. The same plugin also guards tool calls on tools/pre-execute: a command that deletes a drive, filesystem or user-profile root, formats or repartitions a volume, empties the Recycle Bin, fetches and executes a remote script, or writes to a raw device is denied, and a recursive delete outside build directories is recorded by default. Each tier can be set to deny, ask, record, or off, and the disk guard has its own switch. Both halves are heuristics: they can miss phrasings, the disk guard sees the arguments of a call rather than what a running script does, and they fail open.

Right-sidebar Reference Links tab that collects every http(s) URL from a conversation, with pins, per-link turn counts and a click-through list of the turns that mentioned it, search, manual renaming, single-link or whole-host hiding, and a Cmd/Ctrl+Shift+L shortcut. Titles come only from the conversation (markdown labels, web search results, fetched page titles) — no remote title scraping and no model calls.

The mobile client for DeepSeek Harness: use the DSH running on your computer from your phone. The Android app signs in with the same account, picks this computer from the device list and opens its DeepSeek Harness UI on mobile. The desktop plugin handles registration and the connection, and nothing on the computer needs an inbound port. The UI adapts on its own: on a phone it becomes a touch-friendly layout, and returns to the desktop layout when a foldable opens or the window gets bigger. A PC-side panel shows login state, device quota, device list and the app download QR code.

Control a DeepSeek Harness session from an Android phone: pair over Wi-Fi or Tailscale, follow the live transcript, send prompts, switch model, mode and permission, browse workspace files, run a terminal and change settings.

Database structure the agent already knows: dbgraph indexes a remote catalog into local SQLite, answering schema questions offline and fetching data in one query.

Use SSH hosts and WSL distributions as remote DSH workspaces, with environment setup, model configuration porting, and the remote interface embedded locally.

Git tab in the DSH web UI right sidebar for the current session repository — switches branches from a dropdown of local and remote branches (with ahead/behind counts), stages files in staged/unstaged/untracked/conflicted groups, commits, fetches, pulls and pushes with automatic upstream setup, drafts a Conventional Commits message from the staged diff with the default model and falls back to a plain chore message when none is available, and renders git log --graph with per-branch colors plus a word-level highlighted diff.

VSCode-style remote development for DSH: SSH host manager (key/password), helper deploy pipeline with version check, remote file explorer + editor + terminal in dsh-better-sidebar.

Android remote access and multi-agent group chats for DSH, based on ds-harness-remote and DeepSeek-Bot

Publishes the DSH Web GUI on your tailnet whenever DSH runs, so a phone anywhere can connect, and removes the route on exit. Every remote page is the lite plugin set by default (about 1.1 MB gzip instead of about 5.3 MB) and the full page only happens whe

19 browser_* tools that let agents drive DeepSeek Harness's built-in sidebar browser over a loopback bridge: accessibility-tree reads with stable refs, real CDP clicks and keys, screenshots, network interception, device emulation, a cookie vault, document-start script injection, multiple browser instances, and raw CDP passthrough. Requires DSH launched with --remote-debugging-port=9222.

Jira and Confluence for DeepSeek Harness: the tools of Atlassian remote MCP server, a result card for issues and pages, and an issue panel.

Adds download actions to DSH delivery cards, changed-file review, and the document preview, and hides native open controls that cannot work when the Host is remote or headless. Needs DSH Web; the native open controls are hidden by default and can be restored per browser.

SSH workspaces for Windows DeepSeek Harness Desktop 0.2: discover OpenSSH hosts, add or browse remote project directories, and route file, search and Bash operations by workspace while the DSH runtime stays local. A Desktop compatibility fork of Yan-Zero/dsh-remote-ssh that preserves local permission defaults.

Branch and worktree management for DeepSeek Harness: the workspace toolbar shows the current branch with in-place switching, plus an IDEA-style branch selector, remote branch checkout, context menus (create, rename, delete, copy), push and update, and branch isolation into standalone worktrees with managed creation and deletion.

Allowlisted SSH into Unix/AIX/macOS from DeepSeek Harness (no shell; read-only by default), with remote_ssh_probe OS-aware suite.

Personal paste inbox for DeepSeek Harness (dsh): /inbox in the composer or the sidebar panel files links, images, text and credentials into a local vault, classifies them by local rules and then by a rate-capped model pass, and browses, searches and edits them from the panel; the assistant retrieves records on request in conversation, credential bodies stay encrypted at rest, and an optional WebDAV or S3 remote syncs records and attachment bytes. Windows only so far.

Task monitor plus remote chat for DeepSeek Harness. Read sessions, background jobs, subagents, goal rounds, workflows and pending approvals from a phone-friendly page, and talk to any session from it: streamed replies, tool-call progress, stop at any time, switch sessions and models. Also ships a GUI sidebar panel.

Forwards an unattended DeepSeek Harness run's tool-call approvals and ask_user_question prompts to Feishu cards on your phone. The desktop GUI answers first — a card is only sent after `delaySeconds` (120 by default) with no answer there — and a phone approval grants `allowed-once`, so no authority accumulates on the phone. One outbound WebSocket long connection to Feishu: no public IP, domain, tunnel or relay.

Model-visible SSH file tools read_remote, write_remote and edit_remote: read a remote UTF-8 file with line-numbered paging, create a new remote file (an existing target is refused, there is no overwrite branch), and apply literal replacements with unique-match checking — all addressed through a single "alias:path" field whose alias comes from ~/.ssh/config.