Plugins

Connector hub for DeepSeek Harness: browse 13 curated remote MCP connectors in a Connectors tab, authorize them with OAuth or an API key, and keep credentials in the macOS Keychain. MCP tools mount at the profile root and credentials pass through a loopback-only gateway.

Embeds a private local Sub2API gateway (Sub2API + PostgreSQL + Redis via Docker) into the DeepSeek Harness sidebar with automatic local login. Windows only, with Docker Desktop and its WSL2 backend already installed; the first start pulls about 250 MB of images and needs local ports 18080 and 18081 free.

Declares two model routes in the llm-pi-ai settings section — a TLPro gateway and Z.ai's GLM-5.3 endpoint — with per-model context windows, output caps and reasoning-effort ladders, so the stock model picker can select and tune them. Requires your own TLPRO_API_KEY and a Z.ai coding-plan ZAI_API_KEY; the patch replaces the whole llm-pi-ai row config.

LAN access for the harness process: writes the authenticated links for the harness port, one per local IPv4 address, to a token file and registers DSH_LAN_LINK in the shell environment, and can run a gateway on a fixed LAN port that holds the browser session on this machine, so devices need no token; forwarded requests get Host and Origin rewritten for the same-origin guard, and a host-claim marker is injected so the page renders as the full desktop UI instead of remote-visitor mode. Devices are admitted by CIDR, with optional Basic auth.

DSH host bundle for the ShyPie privacy-first workflow: extracts attached images and PDF/Office files locally before they enter the session log (requires poppler pdftotext/pdftoppm on PATH and a local OCR engine — Windows OCR on Windows, optionally tesseract; without them attachments are rejected, not forwarded); default filter mode keeps text local (optional local masking); blocks unmaskable media/BLOB; provides local privacy_extract, privacy_ocr, privacy_scan and privacy_rehydrate tools; denies read_image and binary/document reads outside allowPaths; and enforces a fail-closed llm/stream egress guard before DSH dispatches a model request (the default provider allowlist is the local Magpie gateway).

TeleAgent (China Telecom TeleAI "Stellar" agent) model provider for DeepSeek Harness with the working v1 gateway signing: two-round HMAC-SHA256 keyed by the login JWT signature segment, which fixes the 40104 rejections the older local-v1 signing produced. Signs in through a dedicated browser window over the DevTools protocol — the plugin intercepts the login callback the same way the official desktop app does, so nothing has to be copied by hand — and also accepts a pasted token. Ships points balance, daily check-in, an in-composer account chip, and a configurable context window (100K by default, 16K–2M, since the gateway declares no catalogue and the official client ships one shared 100K preset for all three tiers). Cannot be installed alongside anye-99/dsh-codearts-auth: both register the same teleagent provider, and this plugin reuses its credentials and derives its SSE/tool-call parsing from it. It also registers the same teleagent provider as anbulang/dsh-connect-teleagent, so install only one of the two.

Pushes a notification when a long agent turn finishes, a turn fails, or an approval waits too long, via ntfy, Bark, Gotify, ServerChan, Feishu, DingTalk, WeCom, Telegram or a webhook. Port of @magpie-community/gateway-notify (MIT); the upstream is a magpie API-gateway plugin that does not install into DSH, so the two never coexist in one host.

QQ 消息网关：NapCat / OneBot 11 收 QQ 消息投给 DSH 会话，助手回复自动回传 QQ；附带 qq_* 模型工具、主号管理指令、拟人延迟与禁回。

DeepSeek account-backed web search and page fetching for DeepSeek Harness sessions whose chat model runs through a third-party subscription or gateway (for example OpenCode Go): registers deepseek-account-search and deepseek-account-fetch providers that call the official Search and Fetch APIs with the signed-in DeepSeek account token, so the built-in web_search and web_fetch keep working without a DEEPSEEK_API_KEY.

Fork of kirkchinese/dsh-capability-catalog 0.1.4 (cannot be installed alongside the upstream capability catalog / @kirkchinese/dsh-rea): a REA-focused MCP gateway with three fixed search, describe and call tools, cached schemas, session controls and native DSH result handling. Requires DSH 0.2.1-rc.4 or 0.2.2-rc.1 and a Node/npm setup able to run REA.

Manages the lifecycle of the local UM GenAI proxy (127.0.0.1:8788) that DSH's um-genai provider talks to: wakes it on demand for llm/stream calls, stops it after an idle period, and reports health plus a read-only status endpoint. Also ships a DSH settings page for port, always-on mode, idle minutes, interpreter and paths, plus the UM account and proxy API key, and a button that writes the providers.um-genai entry into the profile patch and fills in its model list, since a fresh profile has no provider and the model picker would otherwise stay empty. A renewal watchdog logs in to the campus gateway on a hidden Windows desktop when the upstream token expires. The proxy itself is um_opencode_setup.py, a single-file tool distributed by the University of Macau; a copy is vendored in vendor/ so a fresh install works out of the box, while a copy in ~/.um-opencode/ takes precedence when present. The plugin still does not produce tokens: those come from logging in to the campus gateway. Requires Windows (process discovery and idle shutdown use netstat/taskkill; renewal uses PowerShell and a hidden desktop), Python 3.10+ and a University of Macau account.

Signs in to LightVela by WeChat QR code, reads the model gateway key from your own instance and writes the gateway into llm-pi-ai so its models appear in the picker.

Session cost meter forked from dsh-cost-meter, retargeted at a self-hosted gateway: per-session and per-day cost, a 90+ model price catalog with automatic matching, gateway quota (one-api / new-api / sub2api, auto-detected) shown as used/total bars for the provider configured in DSH settings, Coding Plan quotas, provider balances, peak/off-peak pricing notices, bilingual UI. It provides service:cost-meter like Han-1413141/dsh-cost-meter and the other dsh-subscribe-meter variants, so install only one cost meter: it replaces dsh-cost-meter rather than running alongside it.

Character-chat memory layer that keeps persona, voice and relationship state separate from summaries, archives every raw message for retrieval, and ships a SillyTavern card importer plus an OpenAI-compatible gateway.

DeepSeek Harness plugin that starts each Vercel AI Gateway conversation on the fastest provider for its model

一个插件、两种角色：主服务端把 DeepSeek Harness 变成手机能安全访问的 PWA（移动端界面、配对码网关、Web Push），并把选定会话共享给已配对的桌面端；子客户端在另一台 DSH 桌面端的侧边栏里远程使用这些会话。One DSH plugin, two roles: the host turns DeepSeek Harness into a phone-reachable PWA (mobile UI, pairing-code gateway behind your own rev

Search, inspect, and use selected third-party skills and MCP tools through one on-demand gateway. Catalog trimming depends on the host and tool mode. A local journal records usage metadata.

Recovers a session the host already refused for exceeding the context window: it re-checks the gateway message the built-in classifier misses, takes the real window out of that message, and folds the oldest span into one checkpoint without a model call (tool-result pruning, the host compaction engine when it can shrink the projection, or a mechanical digest fold), then retries the failed step; a context_rescue tool and /rescue, /rescue-status expose the same path by hand.

Retry failed model requests automatically: intercepts every request error and replays the same step after a 2s / 5s / 10s / 20s backoff ladder, so gateway blips and rate limits no longer end the turn.

See the quota of every AI account connected to your local Magpie gateway at a glance, with usage breakdowns by day/week/month.

DeepSeek Harness (DSH) plugin: Embeds upstream quota and usage progress rings from your local Magpie gateway (127.0.0.1:3425) right beside the composer context meter, with session-aware active model tracking and 5-hour limit reset tooltips.

Adds a `muse` subagent provider and the `subagent_muse` tool to DeepSeek Harness, so the main agent can hand one self-contained task to the Meta Muse Code CLI and get back only its final report. A patched fork of `@pascapone/dsh-muse-code` that loads on DSH 0.2.1: it carries local equivalents of the removed `settleRun` export and `subagents.start` method, and documents an optional proxy for the gateway stream-phase bug. Needs the `muse` CLI installed. Install either this fork or the upstream @pascapone/dsh-muse-code, not both: both register the same subagent-muse loader row.

Device-pairing gateway for DeepSeek Harness: by default it listens on 127.0.0.1:3443 over plain HTTP and reverse-proxies the local dsh at http://127.0.0.1:3080, so a loopback-only install works without any certificate. Production, cross-machine and app pairing require TLS: configure tlsCert/tlsKey plus an https publicUrl (self-signed is fine). A fronting Caddy/Nginx may terminate the public TLS, but the gate itself still needs tlsCert/tlsKey and the proxy must connect back over HTTPS. Features TOTP-authorised QR device pairing, username/password login, sliding sessions with absolute caps, device revocation, a WebUI admin panel and audit log, and a reverse proxy with WebSocket tunnelling. First-run setup is completed in the WebUI wizard. Tests: 171/171 unit tests, 29-step e2e.

Connects CANNBOT gateway models to DSH by reusing the sign-in CANNWork already establishes for opencode: the JWT and virtual key are read from disk on every request, so no separate OAuth flow or extra key is needed, and the account's visible models are registered in the model picker.