Plugins

DeepSeek Harness 局域网中继插件：一台机器在 DSH 进程内做 hub，其余机器粘贴加入码即可加入；跨机器 Agent 消息互通、离线补投、自动唤醒会话，标准 DSH bundle，装完即用。

DSH company collaboration mode: companies, employee accounts, groups with an auto-joined AI member, persistent server-side DSH ACP host with SSE streaming activity and group approvals, and local Git AI tasks.

DeepSeek Harness Agent preset manager: register and manage agent presets at runtime without editing any DSH configuration file.

A cut-out whale-girl maid desktop pet in the corner; click her to see your DeepSeek account credit and this session's running state.

Pixel Whale: a hand-drawn pixel-art whale pet swimming in a small aquarium in your DSH sidebar. It cruises around, bobs, blinks and blows pixel bubbles; click the water to drop food and watch it swim over to eat (pixel hearts), click the whale to pet it. Pure client-side, zero network, zero config.

Spanish practice panel for DeepSeek Harness: six locally graded drill types (verb conjugation across 11 tenses, noun gender, plurals, vocabulary recognition, sentence cloze, ser/estar and subjunctive grammar points) plus a model-graded scenario-writing tab, 8-level spaced repetition, and four agent tools. Answers are computed and graded inside the plugin, so the model is only used for teaching and explanations.

Controls an already-running NetEase Cloud Music desktop client over CDP (the client must be started with --remote-debugging-port=9222) and searches songs through NetEase's public web API; no API key or extra login, and member-only features use the client's own signed-in account.

Typing effects, companions and sounds for DSH: theme presets with pets or whale, combos, fullscreen glow and optional key sounds.

Self-hosted plugin marketplace for DeepSeek Harness with accounts, groups, permissions, artifact storage, and install statistics; run the server with Docker and install this client bundle in DSH.

Expose local listening ports as public HTTPS URLs via Cloudflare Tunnel, with automatic DNS management and one-click token template authorization.

Adds chunked uploads with progress and resume, and native downloads of workspace files and the session log ZIP, to the DSH Web GUI, including sessions reached through a paired remote link.

Code security defense review judge for DeepSeek Harness: detects sessions that are writing code, reviews them against the Code Security Defense Architecture Rules, recommends which security architectures the program needs (one or several), checks conflicts between them, teaches the session AI after repeated failures, and teaches the session AI after repeated failures; once you grant it review authority in its panel, it gates task completion until the review passes (without that authorization it only observes).

Local tool guard that scores every DeepSeek Harness tool call with an Ollama decision model before it runs; risky calls come back as an approval prompt, and an unreachable model stops all calls. Requires DSH 0.2.x and a local Ollama 0.35.1+ with the default ~6 GB clef-flash model pulled first; without them every tool call is denied.

A hard hat for AI coding: graded writes (L0 read-only / L1 workspace-only / L2 full) put privileged edits in a cage. Below the level it refuses to write and hands back a paste-ready block instead. Every path passes a raw-string traversal check plus realpath, so junction escapes are caught.

Audits DeepSeek Harness plugins: a read-only pre-install check that grades a package S–D before it is installed, plus a runtime monitor that records plugin start/stop, sensitive tool calls and per-plugin token estimates in a settings panel.

Reviews destructive shell commands with a model before they run, asks you to confirm or blocks them, and aborts a running command once it has deleted too many files.

Unreal Engine 4/5 (UE4, UE5) asset browser and exporter for Windows x64: browse, preview and export cooked assets from local PAK archives via CUE4Parse, with 3D mesh preview, animation playback and a searchable asset index. Oodle-compressed archives need Epic's oo2core DLL, which is not bundled but can be downloaded from the settings page.

Runs DeepSeek Harness bash commands inside the workspace's Nix dev shell whenever a flake.nix is present.

Starts DSH at Windows logon by writing HKCU\Software\Microsoft\Windows\CurrentVersion\Run, and removes exactly that value when the plugin is disabled or uninstalled. 84 lines, no daemon, no background process, no service — the entry is written through execFileSync so a spaced install path stays quoted and actually launches.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

In-process crash guard: takes over the fatal-error handlers that would exit DSH, names the responsible plugin from the stack, and disables only that row in the home patch layer, leaving the profile and the provider config inside it untouched. The crash page offers retry, keep-disabled or uninstall, and opens a temporary safe-mode session when no culprit can be named (CLI and web launches only).

Reads IDEA run configurations and launches Java, Spring Boot and Vue projects inside DeepSeek Harness, with colored logs and a fast java -cp startup path.

Opt-in HTTP proxy service for DSH plugins, with native address and port settings. Exposes scopedHttpProxy for explicit callers, applies address changes to subsequent requests, and leaves system proxies, environment variables and global network dispatchers unchanged.

DSH plugin (fork of sj244/dsh-qq-bridge, MIT) that connects DSH sessions to QQ through OneBot/NapCat. Whitelist stays closed until filled in; @-mentions, nicknames and pokes always wake the model; other messages wake at a configurable probability. Cordis id remains qq-bridge. It keeps the upstream Cordis id (qq-bridge): uninstall sj244/dsh-qq-bridge before installing, the two cannot be installed together — and with an empty whitelist nothing wakes.