Plugins

Manages DSH skills and MCP servers from the web settings: skill cards with hot enable/disable, workspace scopes, groups, batch migration and drag-and-drop import, plus stdio/HTTP MCP CRUD with connection tests, secret redaction and the unified dsh-panel CLI.

Lowtide (as in low tide) runs task batches automatically in off-peak hours — a highly customizable task framework with four execution strategies, L1–L3 semi/full-auto adjudication, in-place task editing and preflight checks, built on the Cordis microkernel, one build for both desktop and web.

Red-team engagement mode: send one target organization name; a planner session runs five execution roles (recon, asset triage, vulnerability discovery, exploitation, internal pivot) with configurable concurrency; preflight checks skills/resources; scoring uses four stages (recon, internet, boundary, internal) with server-side caps and privilege-wins dedup; findings stay in a local SQLite fact base. The persistent right-side console has nine pages and includes asset mapping, agents, sessions/tunnels, findings, score targets, reports, POC knowledge base and skill library. v0.15.2 adds automatic HTTP evidence/action records, batch ingest, scope check, tunnel pivot probe, data proof, cleanup ledger and T0-T3 asset admission to prevent scope drift. 59 redteam_* tools; 38 bundled skills.

DeepSeek Harness session and workspace manager —— Workspaces: archive and visibility. Sessions: move, migrate presets, delete, favorite, review later, prioritize, tag, and annotate. Batch operations.

Node-based creation studio for DeepSeek Harness - script, storyboard, reference images and multi-shot video generation on an infinite canvas, drivable from the chat in batches; bring your own image/video/TTS providers (OpenAI-style endpoints or Seedance/Sora-style video APIs), and with none configured the pipeline runs offline in demo mode with placeholder media.

Deep-read books and articles in five modes (quick, deep, knowledge map, Feynman, full book) with claim-evidence-data reports, Mermaid/XMind mindmaps, batch comparison, budget preflight, transparent background-job progress, and MD/HTML exports from URLs, files, or pasted text.

Read, create and edit Figma designs through natural language in DSH, including batch layer edits, components, variables, screenshots and asset exports. Local mode does not use the official Figma MCP call quota.

Real session deletion with trash and restore, archived cleanup, and batch delete from settings.

lowtide: human-adjudicated off-peak batch task pipeline for dsh (peak/valley pricing aware)

Off-peak batch runner for DeepSeek Harness: users define tasks during busy hours — prompt, strategy, priority, workspace, locked files — and release them by hand; the plugin then runs the batch automatically inside user-defined off-peak windows. Each run passes five preflight checks (workspace, git HEAD, locked-file sha256, window fit, daily budget), supports four execution strategies (single / iterative / sampling / review) and three autonomy levels (L1 per-task, L2 batch, L3 full-auto), and closes the loop with a morning report containing diffs, actual spend and savings from a daily ledger aligned with official peak/valley pricing.

Use a native browser sidebar or @ to reference logged-in Chrome/Edge tabs, authorized local HTML and running Windows apps. Read compact snapshots, batch actions, capture screenshots and use available WebMCP tools; supports user-authorized file uploads, same-frame element drag/file drop and opt-in network metadata capture. Page/app context appears as expandable chips; dockable element annotations and selected local diagnostic logs append to chat drafts without sending. App control prefers a matching installed MCP or approved installation, then falls back to Cua Driver with text, hotkeys and paged controls; desktop reads present the window once per connection or when recovery is needed, and failed actions retain evidence and stop without automatic replay. Background input depends on the app. Requires Chromium-based Chrome or Edge 125+ with the companion MV3 extension loaded unpacked and paired once; installing the plugin does not install the extension.

Hash-anchored read / edit / batch_edit / undo_last_edit tools: every line gets a unique 3-character content hash, edits target hashes instead of line numbers, and served-state verification rejects stale ranges with fresh anchors.

Novel-writing guardrails: 20 novel_* tools enforce fact-ledger consistency, phase and chapter gates, machine audit with deterministic metrics, and proposal-only revisions; a right-panel workbench covers reading, TTS playback, polish, proofread, continuity checks and batch drafting, and a bypass engine runs internal steps off the main conversation.

Paper reading workbench: library + PDF reader + tutor-style companion. Answers cite clickable page numbers that jump back and flash the exact passage; select-to-ask without leaving the paper; bundled strict-tutor preset (reading plan, section coaching, graded quizzes tracked across sessions). With MinerU configured (self-hosted, no signup / mineru.net cloud token): scanned PDFs become readable, formulas become click-citable (one click sends the LaTeX source into the chat) and searchable (QK^T hits directly), plus a per-page formula panel; optional embeddings endpoint adds semantic recall for plain-language questions. Rename/delete topics and papers — deletes go to a recoverable .trash with a batch-clear flow for non-empty topics; reader with scroll/single-page modes, rightbar-fullscreen safe, one-click path copy and translated-PDF export; in-place original ↔ Chinese toggle (babeldoc, zero preinstall). Transcription and search run locally by default — documents never leave your machine; only when cloud MinerU, an embeddings endpoint, or a translation endpoint is enabled does the corresponding text go to the service you configure.

A drawer panel for the DSH web UI with a paginated list of free LLMs; one-click or batch writes each as a custom model provider into Settings, plus a local multi-key rotation proxy.

AI image and video studio as a floating DSH panel, so creation runs alongside the conversation instead of replacing it: text-to-image, image-to-image and multi-image composition at 1K-4K across eight aspect ratios; text-to-video and image-to-video with first-frame control at 4-12 seconds; short-drama mode that imports a script (.txt/.md/.json), breaks it into storyboard shots for preview and batch generation; and a prompt-expert workspace. Zero runtime dependencies.

Read any page as clean main content: charset auto-detect (GBK/GB2312/UTF-8/Big5), noise stripping, compact text/Markdown, offset continuation, optional SPA rendering, batch reads and site crawling.

Windows only: the agent edits documents inside the Word, Excel and PowerPoint (Microsoft Office or WPS Office) windows you have open, through the applications' automation interface, so changes appear live and you can edit alongside; it reads structure, applies batches of edits, renders pages to images to check layout, and saves or exports PDF.

Manage DSH conversations: one cross-workspace table with batch archiving, body search over message text, and recycle-bin deletion you can undo.

Runs isolated install-and-smoke test drives for DSH plugins in throwaway profiles, returning structured pass/fail records and batch matrices without touching your real profile.

Skill pool manager in the Settings sidebar: enable/disable, folder batch import with rename-conflict prompts, state-driven one-click DSH-spec check & auto-fix, system/project scope labels.

273 ECC skills (95.8% of the 227k-star operator system) ported to DSH in four batches.

Global cross-session todo list in the sidebar that the person and the agent both write to: ten global_todo_* tools add, batch-capture, update, attach documents and links to, append progress notes to and complete items from any session, and each item can be handed to an agent session in one of four modes with the outcome recorded on the item. The list is a single JSON file.

Security scanner for DSH plugins: static and semantic passes over plugin source, DSH-specific attack-surface rules, npm audit, batch scanning, and an HTML report with per-finding severity and evidence.