Plugins

Persistent read-only side conversations anchored to exact prose in DeepSeek Harness

Adds read-only, scriptable playback to native DSH conversations, with simulated user typing, forward and reverse playback, event stepping, speed control, idle-gap compression, and direct seeking by event, turn, or recorded time.

Read-only Claude Code compatibility bridge for DeepSeek Harness: Skills, Rules, command Hooks, and Agents from .claude as SSOT.

Automated approval review: auto-approve read-only tools, auto-deny dangerous commands, fail-closed policy engine.

Document-code consistency guard: audits version headers / changelog tables / directory trees / module & test counts / cross-doc references for drift, with severity-sorted, read-only fix suggestions.

Hands standalone jobs to the Cursor CLI signed in on the same machine, with CLI readiness and proxy diagnostics, child-model settings, and a read-only connectivity test.

Read-only health clinic for the installed DSH plugin set: loader health, dependency integrity, version compatibility, install-script risk, duplicates and patch integrity, delivered as a model tool, a Settings dashboard and JSON reports.

Registers a `config_doctor` tool that checks the harness's own configuration for problems that boot silently: fields a patch dropped by whole-config replacement, patches targeting missing entry ids, and tool-name collisions. Read-only.

Code smell radar: statically scans TODO/FIXME debt, stub implementations, long lines, oversized files and duplicated blocks, with severity-sorted read-only fix suggestions.

Read-only side-by-side comparison of related DeepSeek Harness conversation histories, including messages, tool calls, responses, timing, and usage.

Sidebar system monitor for the DSH Web UI: live host overview (CPU/memory/network/disk), process list, and Docker container status, all read-only.

Independent read-only acceptance layer: spawns a read-only verifier before each top-level turn closes and steers non-pass gaps back into the agent.

Read-only Windows device information tools: one agent tool per Win32 device category (time, system, cpu, memory, disk, gpu, network, battery, processes, usb, audio, printers) via WMI/CIM and Node os collectors.

Read-only agent-fleet credential hygiene audit: credential-file permissions, embedded credentials in git remotes (masked in output), and provider token literal counts; zero-dependency and deterministic.

DSH plugin: Windows correctness layer — GBK/GB18030/UTF-16/Big5/Shift-JIS encoding detection with confidence and lossy reporting, Windows path legality (reserved device names, 8.3, UNC, MAX_PATH), netstat interpretation and bounded read-only disk inspecti

Whale-girl desktop pet for the DSH Web UI, drawn with hand-written SVG + CSS (no image or audio assets, zero runtime dependencies): swims while a turn runs, blows labeled bubbles on tool calls, taps the glass with an amber pulse when an approval is waiting, jumps with a turn duration/tool-count report on success and droops on failure, naps after dark or when idle. Click to poke, double-click to pet (affinity hearts), drag with remembered position, right-click menu (feed / mute / reset / hide), hover card with level, title, XP bar and per-turn stats. A `whale_say` tool lets the agent make her speak or act as a lightweight visible notification. Read-only over sessions and workspace; only ~/.dsh/whale-girl/state.json is written.

Two-way agent bridge between two DeepSeek Harness hosts: either side can ask the other agent questions and run bounded dialogues over a PSK-authenticated TCP link, with a chat page on both sides and read-only tool posture by default. Both ends need the same shared key and a nodeId configured.

Registers one agent tool, plugin_guard, that statically scans a DSH plugin package before it is installed and reports a verdict with the reasons: a missing or broken dsh.bundle.patch, a missing dsh.permissions block, install scripts, dangerous APIs and obfuscation, dependency risk, and source that is not indexed and therefore cannot be verified. Read-only: the scanned code is never imported, installed, evaluated or run.

Restrict the file access of agents in any sandbox mode (read-only / workspace-write / danger-full-access / auto) to the session workspace, and ask the user to rule on cross-border access. Each session can also use the gear selection box next to the composer to relax the cross-border gate to 「 read-only outside workspace 」 or 「 fully release 」.

Plugin diagnostics for the dsh web GUI: finds plugins that failed to load, bundle rows that never started and broken file links, then reports the findings. Read-only: it does not repair, journal or undo anything.

Read-only panel reporting an instance's plugin bundles, patch inserts, skills, upgrade health and decoupling health.

Backup, restore and machine-migration for DSH: packs skills (which live outside ~/.dsh, in ~/.agents/skills), plugin manifests, core config, memories, todos and optionally sessions into a tar.gz with a sha256 sidecar, then imports it on another machine as a three-way merge against a baseline, listing per-file differences instead of overwriting changes made there. Credentials never enter an archive (filename deny-list of 27 names plus 7 private-key suffixes plus a content gate, enforced again on the import side), every import writes a pre-restore snapshot first, and an archive can be uploaded to any WebDAV server and pulled back on the new machine. Also includes scheduled backups, a read-only viewer for individual files, and an in-panel cloud card; no npm runtime dependencies (packing uses the system tar).

Read-only orchd panel for the DSH right sidebar: task board, ideas board, dependency graph, review timeline and an install entry for the project of the current session.

Read-only JSONL and NDJSON viewer with a byte index, record navigation, and streaming previews for large records. Host DSH 0.2.1-rc.2; other versions are not declared compatible.