Plugins

Remote DeepSeek Harness with full server-side API access (`settings.*` / `credentials.*` / `host.listDirectory`). Token-gated reverse proxy, per-device sessions, phone invite QR, fence self-check, optional approval / CIDR / idle timeout / local TLS, WebSocket/SSE.

Web reading tools for text-only agents. Five read-only tools: web_fetch (any URL rendered as clean Markdown or plain text), web_links (inventory of a page's links), web_feed (RSS 2.0 / Atom entries), web_headers (HTTP status, response headers and redirect chain without downloading the body, HEAD with automatic GET fallback), and web_table (HTML tables extracted as structured rows with header detection and colspan/rowspan grid expansion). Transport is Node fetch plus a zero-dependency HTTP proxy implementation (CONNECT tunnelling, absolute-URI requests, NO_PROXY with suffix/wildcard/IPv4-CIDR matching, Proxy-Authorization). Zero runtime dependencies.

Password + CIDR gate for DeepSeek Harness web / DeepSeek Harness 局域网密码门禁