Plugins

给Deepseek Harness添加网页的密码访问，以便于公开到局域网访问

General Agentics distribution bundle for DeepSeek Harness (DSH): one install brings the General Agentics white-label brand, curated plugins, bundled skills, and MCP pre-configuration. Built on DeepSeek Harness (DSH).

Two buttons beside the chat input: one rewrites the draft with the current directory in view, the other inserts a role template from 85 curated entries generated from the bundled `agents/` role library, which the settings card can extend with your own `.md` role files.

百通插件广场：在 DeepSeek Harness 中浏览、搜索并安装百通插件市场的 DSH 插件与百通技能库技能

Hover-reveal Douyin short-video feed inside DeepSeek Harness: move the pointer into a fixed hotspot to play, leave to pause in place, scroll the wheel to switch clips. Wheel travel is accumulated and cooled down so one gesture switches once, and the player stays mounted while hidden so re-entry resumes instead of restarting. The host half signs the requests and reverse-proxies the media stream, so no account or sign-in is needed.

Writes short plain-Chinese notes for installed dshmarket plugins that have none and shows them on the market cards; hand-written notes are left alone (only entries marked 🤖 may be regenerated with force=ai), and dshmarket is required.

Plugin advisor for DeepSeek Harness: describe what you need and it ranks the npm packages carrying the dsh-plugin keyword by denoised metrics (daily baseline, week-over-week growth, release cadence, freshness) into a first pick, alternates and plugins to avoid; ships a sidebar panel, four AI tools and one-click install.

On every DeepSeek Harness launch, checks the installed and enabled plugins for newer npm versions, lists them in the UI and updates them after confirmation.

Reach DSH from your phone with a single plugin — requires Tailscale on both the host and the phone. No other configuration needed.

Plain-language trust dashboard for the dsh trust family: aggregates the nine channels (injection interception, write denials, egress blocks, custody-chain verification, tool-surface and prompt drift, leftover scans, forgotten compaction constraints, profile composition) into one right-sidebar panel with a single status light and event cards that translate engine jargon into sentences a non-security user can act on; the read and egress engines run from the package's own npm dependencies so those channels work even without the sibling plugins, and absent plugins simply show as not installed.

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.

Plugin diagnostics for the dsh web GUI: finds plugins that failed to load, bundle rows that never started and broken file links, then reports the findings. Read-only: it does not repair, journal or undo anything.

Turn-end quality gate: when the turn edited code or config it walks each file up to its project root, runs that root one check from a fixed whitelist (`pnpm check`, `cargo check`, `ruff check .`, `tsc --noEmit`) and, only if that check really ran and failed, opens a new turn carrying the failure output instead of letting the turn close.

Moves a DSH profile to another machine with its plugins, not only its files: packs the plugin bundle selection and the whole settings layer into one JSON file, then on restore writes the configuration back, restores local plugin sources and plugin-owned data, and installs the plugin bundles the backup recorded that the new machine is missing (plugin manager first, pnpm as a fallback).

Tag-based skill filtering: attach tags to DSH skills, then hand each workspace or conversation only the subset its boolean tag expression selects (for example `pdf + docx` or `aegis * plugin`). Excluded skills are deny-shadowed out of the model catalog rather than merely hidden in the settings UI; skills outside the expression can still be added by hand or force-disabled, and the bundled `tagging-skills` teaches the agent to derive a tag set from the machine it is running on.

Previews a workspace OpenWiki in the DSH Web right Sidebar: detects the wiki directory, serves it with the official `openwiki visualize` reader on a loopback port, and embeds it in its own tab, reporting the installed openwiki and DSH versions against configurable floors and checking the registry for its own updates.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Diverts operation-script writes out of the workspace into a per-session scratch root and collects each one into an inspectable vault outside the workspace, so the workspace holds only real deliverables.

Encrypted, chunked full backups of a DSH installation: config, sessions, plugins, workspaces and Hindsight memory packed into AES-256-GCM volumes that unlock by passphrase, recovery code or this machine's DPAPI slot, each package carrying a self-contained restorer, GFS rotation (last, daily, weekly, monthly, plus a total size cap and a recycle bin) and network or WebDAV targets. Zero external dependencies — node: builtins only, no 7z, openssl or rclone.

Adds the fs_remove and fs_move tools, executed in the DSH host process so they can delete paths the sandboxed shell cannot, gated by a session allow list and a path allow/deny list that denies by default.

Per-workspace gate that hides the tool schemas and system prompt sections of selected plugins from the model in directories that do not need them.

PCL-style modpack for DSH plugins: export a small .dshpack.zip manifest of the selected third-party plugins and their versions, then import it with a preview before reinstalling.

Semantic workspace search: three model tools (`zg_search`, `zg_index`, `zg_status`) drive the `zg` CLI for hybrid BM25 + vector + RRF retrieval, with a search-first guard that makes `grep`/`rg` require a prior successful search in an indexed workspace.

Drives a local Hiddify installation from DeepSeek Harness without its GUI: seven tools to start and stop the core, switch split-tunnel modes (rebuilds the config and restarts the core), rotate exit nodes through the Clash control plane, and search or fetch pages through the proxy. Windows only.