Plugins

Multi-source web search and fetch failover for DeepSeek Harness sessions: takes over the session searchProvider and fetchProvider seams and tries configured sources in a chosen order — TinyFish, Tavily and the official search as a fallback that always participates and can be repositioned but not removed. Multiple API keys per platform are spread round-robin, usage snapshots drive pre-flight exclusion of exhausted accounts, and per-request timeouts plus same-platform retry control failover granularity. Web fetching runs local HTTP first, then falls back to TinyFish Fetch server-side rendering and Tavily Extract, so pages still load when local egress is blocked by proxy or DNS policies. A per-platform panel shows key usage and plan limits. Install from npm with `dsh plugin --profile web add @tnnevol/dsh-failover-search`.

Web access for DSH agents: fetch JS-rendered or protected pages as clean markdown, aggregated search across 14 engines, and stateful interactive sessions (click, type, scroll, eval, screenshot) against a hosted or self-hosted Rust browser engine. Every session returns a live view URL so a human can watch the agent browse and take over with the mouse.

Analyze usage across models, providers, workspaces, and time ranges — including custom start/end dates over the full retained history — with live cache-hit visibility and separate model and provider breakdowns. Includes hourly single-day trends, daily cross-day trends, a 53-week GitHub-style heatmap, usage streaks, model and workspace Token-share donut charts with Token, cost, and percentage details, independent combinable filters, cache-efficiency trends, DeepSeek account balance, workspace aliases, CSV export, and a durable ledger that preserves successfully flushed usage after session deletion — and after a workspace is deleted, where its recorded usage is summed into one Deleted row — and rebuilds incrementally — on restart, unchanged sessions are applied from the ledger without re-reading their logs (a per-session log revision is the change signal), and only changed/new events are folded. The workspace registry is kept fresh automatically through the DSH domain/changed probe: only added/removed workspaces are reprocessed incrementally, unchanged workspaces reuse their computed aggregates and ledger with zero rescan, and usage is strictly limited to DSH-registered workspaces (unregistered cwds are ignored). After a scan, lightweight revision status fetches full history only when the Host/data state changes and exposes non-sensitive sync health (revision reuse, rereads, ledger recovery, and failures). Token accounting is explicit: input is fresh (cache read/write and reasoning are separate buckets) and zero-usage replays never overwrite recorded usage. Chinese uses local time, English uses UTC; API access is loopback-only.

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

Adds edit and delete to your own message bubbles: editing truncates the following turns and resends the new text, deleting removes the message and those turns, and either can optionally roll back the recorded file changes of the removed turns (refusing when a file has changed since). The sidebar keeps a single conversation.

Groups the DSH model picker by provider: the menu lists sources with their model counts, and hovering a source slides that provider's models out in a side panel (default); in panel mode a click opens the same panel, and double-clicking a source title cycles hover -> panel -> inline (expand below the title). The active model stays visible at a glance. Pure DOM enhancement with zero intrusion - the panel is plugin-owned DOM mounted on body and selection happens by programmatically clicking the real menu buttons, so no React-managed node is moved or removed, keeping the host rendering intact and coexisting with other UI plugins. Styling follows the host by reusing the official --dsw-* theme tokens, with an enforced opaque background, sufficient contrast, and one shared set of sizing and colour tokens for both menu levels. No network access and no telemetry. Built for DSH kernel 2.0.15-next.

Three-layer local memory for DeepSeek Harness: L1 snapshot memory (MEMORY.md/USER.md) read on demand through the memory_* tools + L2 searchable knowledge base (facts + SQLite FTS5, Chinese search via sliding-window tokenization) + L3 import from Hermes/Claude Code/Codex/WorkBuddy and from approved Agent Hub documents (memory/global, memory/projects, accepted decisions) with content-hash dedup. v0.2.0 removed every automatic injection: memory enters the context only when the model calls one of the 12 memory_* tools, and data stays on the local drive.

Adds Delete conversation and Batch delete to the sidebar session menu; a deleted conversation and its subagent sessions are moved to the Windows recycle bin, from where they can be restored.

Per-project memory for DeepSeek Harness. Three Markdown files per workspace — PROJECT.md, DECISIONS.md and SESSIONS.md — are auto-created on the first step of any session in that workspace, re-read from disk and re-injected only when they change (and re-injected if compaction dropped them), and written back by classification through a memory_checkpoint tool, with a bounded end-of-turn nudge when a turn did work but recorded nothing. memory_read and memory_search read the live log and the archive, the latter over a zero-dependency BM25 index. The session log is capped at 200 entries with the overflow moved to SESSIONS-archive.md — never injected, but visible, readable and searchable, and restorable one entry at a time. Settings page: a workspace list with a path filter, read-only tabs for the three memory files plus the archive, reload, export/import of one workspace's memory as a JSON bundle, a two-step clear, a panel that rewrites or removes the AGENTS.md instruction block, and a PROJECT.md staleness reminder. A composer status chip shows that workspace's sync state and creates the files on click. Zero dependencies — no vector store, no embeddings, and no model calls.

Layered cross-session memory for DSH that pushes only what changed - the first round injects every active entry, later rounds push only added / updated / removed ones, and nothing at all is injected when nothing changed, with keys that merely repeat an entry id left out of the text so the baseline is about 26% smaller. Facts and decisions carry semantic keys (one active truth per key), the model may only write to an inbox that a human promotes, an entry can carry a review date that raises a one-time reminder when due, and search is relevance-ranked with journal lines down-weighted and Chinese matched by bigram. A sidebar tab tells the lifecycle story instead of listing files - entries are grouped by stage (awaiting confirmation / in use / archived) along four axes (topic - one level, human-assigned, type, tag, date), each group can be ticked for batch promote / withdraw / archive / restore / delete / assign topic, and topics can be renamed store-wide or searched on their own. The archived stage reads in three levels - the category says why an entry left (distilled into the docs / useless for good / not needed right now, the first two being defaults you can add to), below it the entry topic stays collapsed until you click it, and entries with no topic sit right under the category. The tab also shows the global and workspace instruction files plus the current injection size. A zero-dependency CLI ships with it, so the store is usable without DSH.

Read-only Sentry tools: project listing, issue search at organization or project scope, single issue detail, and the latest or a specific event with a trimmed stacktrace. Local variables, request headers and bodies, query strings, packages and secret-looking tags are removed before the event reaches the model, and oversized events degrade through source context, breadcrumbs and frames rather than failing.

Full-screen lightbox for chat images: click any image to open the full-resolution original with zoom (wheel, buttons, shortcuts), drag panning, prev/next paging, filename caption and download, plus keyboard-arrow and touch-swipe navigation. One "image display control" popover next to the composer collapses every image in the conversation into a thumbnail grid whose column count (1-12) is configurable and remembered, or hides them entirely so the space closes up and restores them later; images are styled in place and no node is ever moved or reparented. The host-side display_image tool takes a local path or directory (TIFF/HEIC transcoded, originals still saved on download), a remote URL, or a keyword search over Bing, Huaban and Sogou that samples loadability before picking a source, re-saves images blocked by hotlink protection and drops dead links after a magic-byte check, returning paste-ready Markdown. It also keeps a system-prompt rule that every delivered image must appear in the reply body as  markdown, because collapsed tool rows are invisible to the reader.

Novel writing engine for DeepSeek Harness: state machine, gates, rulepacks and ledgers moved from prompts into code.

Deep PTC mode is an open-source agent preset for DeepSeek Harness that keeps the built-in PTC tool surface and replaces the persona with a working contract: a DeepSeek identity and unlimited-token-budget instruction so the model does not skip reads, commands or checks to save tokens; planning by estimated size (internal up to 5 minutes, shown without approval up to 20, approval required beyond); and asking about unclear intent instead of guessing. Waiting is limited in code by wrapping the official shell, job and question tools: foreground commands move to background jobs after 30 s (configurable), a steered user message ends the current wait so the model reads it, foreground pauses over 5 s and long timers in run_code are refused, and questions run in timed mode. The mode derives its preset from the official PTC declaration shipped by the installed Harness and inherits upstream composition changes, so an official PTC update — including removed or renamed modules — does not break existing sessions. A settings card selects the preset executor — Automatic, WSL Bash, Windows PowerShell, native Zsh or native Bash.

Columbina mascot for DeepSeek Harness: a 2D live pet on the desktop and inside the web panel, with four sprite sets, 76 official voice lines in Chinese, Japanese and English, weather reports, sticker moments, idle whispers, and a right-click menu for the sprite switch interval, sprite set, language and scale. Also includes quiet hours, volume with one-click mute, a searchable idle-action picker, and a power-save mode. It is a 2D-only fork of PC2005-cloud/dsh-pet (MIT) with upstream's 3D skin switching removed; it uses its own plugin id and can be installed alongside dsh-pet.

Folders for the DSH Plugins page: group installed plugins, toggle a whole group, batch move with undo, search across groups, long-press drag to reorder, reinstall removed plugins from their record, and restart Harness with one click.

Warns the session to flush what matters before context compaction kicks in, and rolls a long-term ledger into a frozen archive with a digest of title plus up to three lines per moved section. The roll-up stays off until home is set.

DSH web plugin that browses, previews, restores and deletes archived sessions that were moved out of the sessions directory.

Keyboard confirmation for approval cards: the card takes focus when it appears, so Enter allows once and Esc rejects, and those two keys are forwarded through the card handler when focus has moved elsewhere. It never auto-approves and never steals focus from a text field.

Session trash: move conversations to a trash instead of deleting them, restore them, or delete them permanently after a second confirmation; a session opened in this run is hidden and moved at the next start.

Pins a selected passage of a finished user or assistant message as source text and keeps it in the model input across context compaction: each pin is recall-on-demand by default, or can be moved to a neutral resident system-prompt section or an emphasised highlighted one. Selections are aligned back to the source text with source-exact, source-normalized or rendered fidelity, and each of the three levels has its own character budget.

Read-only clinic for DSH session logs: 22 named diagnostics (token waste, retry and failure loops, context bloat, cross-session amnesia, idle MCP servers and skills), each reported with a replayable evidence locator such as session.v4.jsonl.zstd#L101-L110, and each finding turned into an executable prescription — a profile-patch YAML snippet or a command with current to suggested values, risk, verification and source — plus a feedback command that retires a prescription you reject, after which the report states it was removed by your feedback. Zero dependencies, default zero egress, session files are never written.

Session-scoped diff view for the DSH Web right sidebar: opening a file the current conversation changed renders it in place with git-style added/removed line backgrounds, +/− gutter markers and dual old/new line numbers under syntax colouring, a header with +added −removed counts, a Changes only / Whole file toggle and a Re-read button, plus a companion tab that lists every file the session changed and opens each one in the same view. Files the conversation did not touch keep the shipped text viewer.

Browse and govern the skill library from a floating-ball panel with three tabs — skills, call ledger and quick start. You choose the skill root yourself through a native directory chooser (defaults to ~/.dsh/skills, no path is shipped with the plugin); skills are grouped into two levels of categories, with manual, keyword-based and AI grouping available and a tree or flat view toggle, and grouping is purely visual so no skill file is ever moved. Descriptions are read from each SKILL.md frontmatter, search filters by skill name, description or original text, and a card opens the full SKILL.md. Skills can be switched on and off per card, per category or for the whole library — the toggle rewrites disable-model-invocation in that SKILL.md and writes a SKILL.md.bak-toggle-<timestamp> backup before saving, rolling back if the write fails; disabled cards grey out until restored. The call ledger separates automatic from manual entries, records skill successes and failures by listening to tools/result events, and reports call counts, success rate, trend and a ranking, reusing an existing ledger file found in the library. Hot reload picks up skill edits without a restart. The DSH settings page gains a floating-ball section that shows or hides the three balls, offers one-click restore of a ball dragged off-screen, and picks the shared 130-skin catalogue for all three balls.