Plugins

Lowtide (as in low tide) runs task batches automatically in off-peak hours — a highly customizable task framework with four execution strategies, L1–L3 semi/full-auto adjudication, in-place task editing and preflight checks, built on the Cordis microkernel, one build for both desktop and web.

Red-team engagement mode: send one target organization name; a planner session runs five execution roles (recon, asset triage, vulnerability discovery, exploitation, internal pivot) with configurable concurrency; preflight checks skills/resources; scoring uses four stages (recon, internet, boundary, internal) with server-side caps and privilege-wins dedup; findings stay in a local SQLite fact base. The persistent right-side console has nine pages and includes asset mapping, agents, sessions/tunnels, findings, score targets, reports, POC knowledge base and skill library. v0.15.2 adds automatic HTTP evidence/action records, batch ingest, scope check, tunnel pivot probe, data proof, cleanup ledger and T0-T3 asset admission to prevent scope drift. 59 redteam_* tools; 38 bundled skills.

Framework-upgrade safety and plugin gating for DSH: a pre-upgrade session-format contract preflight that adapts incompatible plugins and agent presets before you upgrade, automatic rollback on failure, auto-quarantine of plugins that broke a boot, plus environment fingerprinting and a public contract-rule pack. The built-in multi-source marketplace is a discovery layer only.

Deep-read books and articles in five modes (quick, deep, knowledge map, Feynman, full book) with claim-evidence-data reports, Mermaid/XMind mindmaps, batch comparison, budget preflight, transparent background-job progress, and MD/HTML exports from URLs, files, or pasted text.

Off-peak batch runner for DeepSeek Harness: users define tasks during busy hours — prompt, strategy, priority, workspace, locked files — and release them by hand; the plugin then runs the batch automatically inside user-defined off-peak windows. Each run passes five preflight checks (workspace, git HEAD, locked-file sha256, window fit, daily budget), supports four execution strategies (single / iterative / sampling / review) and three autonomy levels (L1 per-task, L2 batch, L3 full-auto), and closes the loop with a morning report containing diffs, actual spend and savings from a daily ledger aligned with official peak/valley pricing.

Preflight for plugin authors: the checks the market runs — root export, dsh.client against exports\["./client"], whether npm pack ships the panel — on any folder or GitHub repo, from a panel or one command; plus release tooling and a Node testkit for client bundles.

Whale-girl wallpaper background with a frosted semi-transparent app surface; customize image, opacity, and contain/cover from the Web settings, with remote image preflight and no-referrer loading.

蒸馏主管（distillation-director）：把一本书蒸馏成可执行 Agent 技能的判态制元技能（V4.6：V4.3–V4.5 防坑体系与判官工作流之上，增 §21 **强制门禁**——gate_start 开工自证闸（手册哈希＋条款逐字抄录＋执行单＋机器层＋官方模板）／gate_stage 阶段依赖链（前阶段未过不得进入）／preflight 自动纳入活跃蒸馏任务）

Turns real DSH crash logs into a short hard-constraint list: static preflight before a plugin installs, conflict check afterwards, controlled self-heal when the harness will not start — plus handing a huge session over to a fresh one, the brief written by a model that reads the original transcript.

Web search and fetch provider for DeepSeek Harness and Pi: anonymous-first routing across Exa, Tavily, Parallel, Firecrawl and TinyFish, with opt-in billing, quota preflight and bounded cancellation.

Preflight checks for a DeepSeek Harness plugin before submitting it to the community list: verifies the dsh.bundle manifest, cordis.patch.yml wiring, client bundle shape, and peer ranges that silently exclude prerelease harness builds. CLI plus one read-only agent tool.

Update copilot for DeepSeek Harness: one scan covers the DeepSeek Harness core and every profile plugin; explains what changed and how risky each update is, then updates only what you confirm.

Boot-time guard that repairs corrupt session logs, preflights plugin composition, vm-checks client artifacts, smoke-tests host apply() and quarantines crash-causing bundles, so a broken plugin can never brick startup.

Derivative of cheesehaqi/dsh-qq-onebot-bridge with the same package name, so the two cannot be installed together. Bridges a personal QQ account into DeepSeek Harness over OneBot 11: private and group messages become per-conversation agent sessions and replies are sent back to QQ. Ships a reverse WebSocket server, allowlists (empty = deny all), @ parsing, image and SILK voice handling, and a separate local console on 127.0.0.1:8880 with the decision trace, offline replay, event injection, a read-only preflight and host/Waylay start-stop controls. Needs a separate OneBot v11 implementation (a third-party unofficial QQ client): the default, Waylay, injects into the official Windows QQ.exe (Windows 10/11 x64 only) and is distributed as a separate release archive, not bundled in this repo. botQqAllowed and replayGuardEnabled are edited in DSH Settings > QQ助手, and the replay guard is armed automatically when the logged-in account changes.

Grades every PowerShell command an agent is about to run before it runs: deletion, overwrite, network download and credential access are four required classes, plus dynamic execution, system and privilege changes. Verdicts are a pure deterministic rule function — no model call, no network, sub-millisecond — with two escalation rules (download+execute, credential+exfiltrate) that jump straight to high. High risk stops the tool call for a second confirmation (in-panel queue or the native approval), deny or timeout means it never runs; medium is logged but never blocked. Every command and its verdict, including the redacted command text, is appended to a local JSONL audit log. Quoted danger strings are treated as data, -WhatIf is respected, -EncodedCommand is decoded and analysed again. Host + client halves, zero runtime dependencies, 55 rules, 136 tests.

Adds an 'Upgrades' tab to the DSH Plugins page: npm update checks for all installed plugins, engines.dsh compatibility preflight before upgrading, and one-click in-place upgrades that bypass pnpm's 24-hour release-cooling gate. Also refreshes the npm dependency families pulled in by GitHub-sourced bundles, and checks the Harness itself against the latest npm release.

Checkup for the whole plugin lifecycle: before install it verifies dsh.bundle, engine and peer compatibility, native build needs, platform limits and whether the new patch would mount a loader name that is already installed (install-shadow prediction); after install it groups every installed plugin by capability; before update it runs the same checks against the new version and reports only the problems the update introduces. Ships a CLI that runs even when DSH will not boot, plus three read-only tools.

Local-first, file-native long-term memory for DSH with per-turn preflight, compact context injection, citations, human-approved writes, manual consolidation, nightly report-only maintenance, and a Web panel that is read-only for knowledge while allowing workspace-config edits.

A starter plugin to copy from: one right-sidebar tab with two languages, behaviour tests that mount the real bundle, and CI that runs the manifest preflight.

Turn a feature that actually runs into a trustworthy delivery demo video, or a defect into a traceable feedback video: real screen recordings, edge-tts narration with word-clock subtitles, a self-contained ffmpeg pipeline, and a deterministic quality gate (spec, audio, loudness, black/freeze/silence scans) that refuses to pass a fake or broken demo. Feedback episodes add severity/phase chips, a repro-steps overlay and a ticket-ready report bound to the artifact SHA256. Preflight and artifact verification included. Requires Python 3.9+, ffmpeg/ffprobe on PATH, and `pip install edge-tts Pillow`; narration calls the public edge-tts endpoint.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

Keeps discussion read-only and hands every repository code edit to the Codex CLI through a bundled MCP server; switches between the DSH model and the Claude Code CLI in the plugin form, with preflight checks and a write guard that blocks structured edits to repo files.

Manages the MCP servers of a DeepSeek Harness profile: lists each server with its connection state and the tools it registers, preflights a configuration before saving it (a missing executable, an npm package name used as a command, an unexpanded variable that would reach the child literally, a URL with no path), and adds servers by pasting a dsh patch fragment or a Claude Code mcpServers block, converted to the dsh shape.