Plugins

Multi-device remote access for DeepSeek Harness and supported coding workspaces through an end-to-end encrypted channel, with adaptive Relay/WebRTC transport, device authorization, workspace files, read-only previews, terminals, and optional Codex Remote.

Rhine Lab-style boot animation for DeepSeek Harness: six acts from a black title plate through irradiated white-out to a warm dossier panel, five access-authorization steps (the first two can wait for a click or Enter, and Esc skips), real-voice recordings for the first five lines, and a settings page that switches between warm-light and dark themes and live-edits 33 playback, identity, voice and visual options.

Multi-device remote access for DeepSeek Harness: continue an active session from your phone, tablet, browser, or another computer over an end-to-end encrypted channel (Noise IK + adaptive relay/WebRTC transport), with device authorization, ApiProxy-only remote capabilities, and read-only file preview via dsh-file-viewer — no shell, remote desktop, or write access.

Full-screen Changzhengji-themed boot animation for DSH with a six-step authorization sequence, seven built-in real-voice packs, two switchable emblems, five switchable character portraits, and an optional access-password gate.

MCP Connector for DeepSeek Harness: a specialist MCP marketplace and MCP manager panel for Model Context Protocol data sources. Connect enterprise, financial, legal, patent, research and geospatial data; manage authorization, search tools and troubleshoot connections. Supports OAuth, API keys and HTTP/stdio. Provider permissions and fees apply.

Two-way iMessage channel for DeepSeek Harness over Photon: sender allowlisting, session commands, in-chat approvals and questions, and a Settings page for device authorization and hosted-line setup.

Lets one session read, write and run bash across several folders, not just the primary root — additional roots are registered from a sidebar Folders panel or the /workspace-folders command (inherit/read-only/read-write) and share the primary root's file-fence + OS-sandbox authorization; adds no new tools.

WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.

Windows workspace pre-authorization: adds an explicit full-control DACL ACE (including WRITE_OWNER, required by dsh >=0.1.7 sandbox startup) to user-declared workspace directories, removing the repeated full-access escalation prompt. Grants only on explicit intent — new workspace records or paths added in the plugin settings page; system directories are hard-blocked. Windows only.

A governed registry for MCP connectors (stdio and streamable-http): four-level fail-closed authorization, mcpServers JSON import that rejects malformed args, credential redaction at every output boundary, an agent bridge that returns an honest review verdict instead of a fake approval, and a /mcp-reg operator console plus a settings page.

GitHub authorization, repository browsing, AI-written project intros and confirmed Release publishing inside DeepSeek Harness.

Project autopilot for DSH 0.2.1-rc.2 and 0.2.1-rc.3, with scoped authorization, independent verification, editable memories and companion chat, including automatic installation of the compatible desktop pet fork. The bundled pet is a fork of takboo/dsh-coopanion (AGPL-3.0-or-later); do not install the upstream pet alongside it.

Zotero skill for DeepSeek Harness: page-anchored Q&A, full-text translation and close reading, native highlights and Chinese notes, bilingual PDF and paragraph Markdown, evidence comparison tables, and reviews with citation tracking; finds papers on OpenAlex or Crossref, imports Chinese CNKI export files, classifies the library into research-direction folders, surfaces research gaps, and runs a ranked daily digest of new papers. Python-based (basic library management uses the standard library; the reading workflow downloads its PDF/OCR components on first use); writes need a one-time Zotero authorization, and daily scheduling is Windows-only. Adapted from the OpenAI MIT Zotero plugin.

Multi-tenant primitives for DeepSeek Harness (DSH): tenant identity, immutable session ownership, fail-closed authorization, and a replaceable ownership-store contract.

Keeps a pool of models and routes every agent step to one of them with its reasoning effort set — configured by clicking in the composer, no JSON needed. The router takes over the composer's model cell, so one control shows the session's model and reasoning effort alongside the router's own settings. Three authorization scopes (model / effort / full) where a manual pick only counts in the scope that owns it, and in effort scope the router is bound to the one model you choose. Task presets with per-model weights, vision routing for image steps, session signals (active todo, context pressure, token budget, subagent depth), and an optional semantic task classifier. Thinking stays on, because DeepSeek rejects a thinking-enabled request whose history contains a tool call made with thinking off.

LAN task delegation between DSH hosts on one network: the parent dispatches a task to a child host, the child works in its own session and workspace, results and files return to the parent's inbox, sensitive actions wait for the parent's approval, and a finished task can be continued with one follow-up inside the child's existing session. Since 0.4.0 a fresh host listens on loopback only and keeps its listener off until it is enabled, the six-digit pairing code is single-use and rotates with a lockout after repeated failures, tokens travel in an Authorization header and are stored hashed, and a dispatch with no grant or with a permission above the grant is refused before anything is sent. Transport is still plain HTTP with no TLS, so use it on a trusted LAN.

Switch sessions between Standard and Fast tiers via the model selector or `/fast` command, attaching the `priority` tier to eligible Responses requests and forwarding them to the target endpoint when Fast is enabled. Interactive sessions can toggle tiers on the fly while team roles lock in their tier at launch; once Fast is active alongside required configuration and upstream support, requests are routed with `priority`, with actual speed and billing governed by your provider. It needs provider, source and target URLs filled in; it then runs a loopback proxy that sends matching requests, with their authorization header, to the target URL.

A collaboration front-office for AI agents and humans — department boards, tickets, approvals and industry calculations run inside the DSH conversation and panel, so agents do the work in chat while humans stay accountable in the panel. It calls the 01men/ybkkasi governance base over existing contracts (asset ledger, IAM, OIDC SSO, RBAC and scene-level authorization) instead of re-implementing governance. Ships as a Cordis bundle and mounts at /gate01; the selftest suite is green on every push. Do not install this and 01men/ybkkasi as dsh bundles in the same profile: both register the ops-platform-core / ops-iam / ops-authn rows. Requires DSH >=0.1.0-rc.7 <0.2.0.

Mounts Microsoft's Playwright MCP through the official dsh-mcp-client so the agent gets its browser tools over stdio; the one-time CDP authorization is guided by a prompt note, a call guard and the /bw-setup command.

Web reading tools for text-only agents. Five read-only tools: web_fetch (any URL rendered as clean Markdown or plain text), web_links (inventory of a page's links), web_feed (RSS 2.0 / Atom entries), web_headers (HTTP status, response headers and redirect chain without downloading the body, HEAD with automatic GET fallback), and web_table (HTML tables extracted as structured rows with header detection and colspan/rowspan grid expansion). Transport is Node fetch plus a zero-dependency HTTP proxy implementation (CONNECT tunnelling, absolute-URI requests, NO_PROXY with suffix/wildcard/IPv4-CIDR matching, Proxy-Authorization). Zero runtime dependencies.

Connects DeepSeek Harness to Baidu Netdisk's official MCP service for file search, file metadata, and storage quota. Requires Baidu account authorization after installation.

Native Harness workbench and local gateway for Dot to read saved projects and conversations, dispatch native tasks, inspect progress, continue or cancel tasks, and manage connection authorization.

Anchors an approve/answer bubble to each DSH Web sidebar session row — one-click handling of authorization, questions, plan reviews and blocked goals without opening the conversation.

Cross-computer Harness Agent messaging and task handoff; pairing, binding and the receiver's existing local authorization remain required. Not open source (UNLICENSED evaluation build, not for production); requires Node.js 24+, tested only on macOS arm64 and Windows 11 x64 build 22621+. Its last full install-and-run test was on DSH 0.2.1-rc.2; on 0.2.2-rc.1 only the version gate has been checked.