Plugins

Read-only runtime management panel for the official DSH MCP client: connection status, registered tools, errors, and reconnect counts through the /mcp command and a Settings tab, with sanitized display and enable/disable patch suggestions.

Detects prompt-injection, jailbreak, and secret-leak patterns on the agent/pre-step, tools/pre-execute, and tools/post-execute seams with allow/ask/block tiers, sanitized defend/detection audit events, a defend_report tool, and a destructive-delete command guard.

Windows desktop computer-use tools (click, type, key, screenshot) with freshness checks, approval gating, process-identity verification around every action, and a sanitized audit trail.

Exports the session event stream to OpenTelemetry OTLP and Langfuse as sanitized, buffered traces and metrics, off by default.

Sanitizes leaked DeepSeek DSML closing tags from model text streams.

Sanitizes fetched pages before the model reads them: strips hidden text, offsite images and inline data, wraps the rest in canary-tagged untrusted delimiters, and flags prompt injection.

Adds human-facing TypeSafe Jev advice to DSH multiple-choice prompts, on demand by default with optional automatic requests, recommendations, probabilities, confidence, close-call warnings, copyable suggestions, one-click adoption, profile-scoped card layouts, temporary decision preferences, optional request previews with common-credential masking, and local health checks with sanitized diagnostic exports.

Local-first experience library for DeepSeek Harness: indexed markdown knowledge with error-signature retrieval, failure capture, gap-to-entry closure, and a sidebar panel. Ships a sanitized starter library. No network access.

In-session "Files" tab (conversation.view, order 20) for dsh Web that browses the active session's workspace directory with breadcrumbs and previews files inline — sanitized Markdown (marked + DOMPurify), images, line-numbered text and PDF — served by read-only /dsh-files host routes registered on ctx.webServer; no write endpoints. Bilingual zh/en.

Browse and manage the community plugin catalog from a first-level DeepSeek Harness Settings page, with verified installs and updates, removal, pause and resume, installed-package state, and sanitized README previews.

Text hygiene as a dsh plugin: sanitize untrusted text, scan invisible characters, clean LLM formatting, and escape CSV formula injection.

Runs the upstream Headroom compression toolkit (headroom-ai, Apache-2.0) inside DeepSeek Harness over MCP: headroom_compress, headroom_retrieve and headroom_stats are exposed as mcp__headroom__* tools backed by the upstream server, installed on demand by uvx. Compression is lossy but reversible — originals are fetched back by hash from a local CCR store. Also ships a registrar that adds DeepSeek Harness to Headroom's own MCP registry, and a model-header sanitizer for the upstream proxy.

Bridge between DSH and the local WorkBuddy desktop app, in four parts: read, search and append WorkBuddy memory, skills, plans and daily logs; run tasks through the local CodeBuddy CLI with four permission profiles; drive the running WorkBuddy window over CDP (open a conversation, read its replies as sanitized rich HTML, type and send, switch the account-billed model, relaunch it with a debug port when it is missing); and a sidebar panel that puts that conversation surface inside DSH. 25 tools and 15 HTTP routes in one plugin.

Low-token web search that returns only {title, url, snippet} per hit — vendor extras such as answer, score and raw_content never enter the context. Five interchangeable backends (Tavily, Brave, SearXNG, Google CSE, Exa) with automatic failover to the next usable one in fallback / chain order when the primary fails, deduplicating repeated providers. Returned URLs and snippets are sanitized of tracking parameters.

OpenTelemetry (OTLP/HTTP) + Langfuse trace exporter for DeepSeek Harness — GenAI semconv, sanitized before send, batched with retry, off by default.

GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.