Plugins

Talon: a terminal UI for DeepSeek Harness agents (dsh plugin)

Read-only DSH plugin auditor with static scanning, current-session model review, and confirmation gates.

Static capability disclosure for DeepSeek Harness plugins: a Settings page and CLI that list installed plugins' capabilities, literal destinations, install scripts, and injection shapes (prompt registrations, shipped skill text, bundle patch), each with file:line evidence. Code-determined, reproducible, zero-token. Disclosure only — not a security verdict, never a safety claim.

Turns code review into a hard gate: deterministic severity rules, LLM-assisted findings, a team approval quorum and a durable compliance audit trail that must pass before a merge proceeds.

Branch-role guard for AI coding agents: configurable integration/preview/production/archive roles, blocking direct push, force-push and delete on protected branches and agent merges into production/archive.

Three-layer skill management for DeepSeek Harness: a library pool, per-workspace enablement whitelists, and per-session picks, with a Web settings panel, a conversation-embedded view, a skill file browser/editor, zip and folder import, and engine-load validation.

Type /tabs to pick a browser tab (via chrome-devtools-mcp) and auto-fill its URL into the composer.

HTTP network debugging toolset for DeepSeek Harness: a general-purpose HTTP client with SSRF/private-network protection, per-session request history with replay, response inspection and HAR export - three dsh tools plus a zero-dependency CLI.

Runs headless-style tasks through the live dsh web process (POST /x/headless + GET status + SSE events) so CLI-invoked sessions appear in the Web UI in real time.

Local semantic index over workspace documents (MD/PDF/DOCX/TXT): FTS5 BM25 + local embedding hybrid retrieval, hit citations with line numbers, and incremental updates.

Security auditing and session forensics for dsh: full tool-invocation-chain recording (who/which tool/files/timestamps), redacted playback, and rule-based scanning.

WeChat Official Account source collector: QR-login credential profiles, rate-limit-safe crawling with cooldown, RSS second water source, and secret-safe handoff to ContentStudio.

Drag a conversation onto any workspace group in the sidebar to relocate it between DSH workspaces, updating its cwd, disk location and registry ownership.

DeepSeek account balance in the sidebar footer plus spend per session, today, this month and all time, priced by a configurable time-of-day price table per currency (DeepSeek CNY/USD defaults included). Two read-only remote methods, no host routes, key read through the host credentials seam on every call, egress only to the configured provider origin.

Real DeepSeek account balance and official spend tracker in the session header, with peak/off-peak badge, monetary alert with auto-stop, and one-click top-up.

Phone-first drawer shell for DSH Web. Collapses the session list into a tap-to-open drawer, keeps header plugin actions, and turns Settings into a full-width sheet.

Quote earlier content of the current session into the composer: select text in any message for a Quote pill, or type @ to pick a whole message; the quote travels as a native reference chip and is serialized into the prompt as a blockquote. Client-only, no host routes, no custom session events.

Expand button for the DSH Web UI composer — appears at 3+ lines, stretches to near-fullscreen height, auto-collapses on send, and Enter inserts newlines in expanded mode.

Instantly find DSH settings pages, tabs and rows by keyword, pinyin, intent or AI — and jump straight to them.

Johari cognition-quadrant dialog prompt composer — adds a button above the composer that opens a 2×2 quadrant panel (known/unknown × AI-known/AI-unknown) to groom conversation context into a structured prompt written back into the draft.

Portrait-adaptive communication skill: builds a live user portrait (proficiency, per-domain gaps, current state) from the conversation and calibrates every answer's depth, jargon density and step granularity to it; behavior-over-claims dumb-play detection; transparent profile snapshot export. MIT.

Piano performance plugin: ask the agent to play a piece and it renders on a Canvas2D grand piano with real Salamander Grand samples, an immersive stage, and an interactive 88-key keyboard.

Auto-continue for the dsh web GUI: when a local model hits its output-token cap and the max-tokens notice appears, the plugin automatically queues a short continue message so the reply keeps flowing — dual-source truncation detection, loop protection, and no UI.

DeepSeek account-wide usage & balance panel from the official platform API (api/v0/usage/by_api_key): cache hit/miss & output tokens, cost, 24h–90d ranges, persistent platform token, and a model-visible `deepseek_usage_query` tool.