Plugins

Telegram remote for DeepSeek Harness — attach a live web session from your phone and answer its questions there, with a Russian UI. Russian fork of hi-wenw/dsh-telegram-channel (MIT).

An independent permission gate above the built-in sandbox. It blocks writes outside the workspace and to protected paths even under danger-full-access, refuses whole-file overwrites without a complete fresh read, and keeps ZIP restore points plus Recycle Bin copies before destructive actions.

Blocks API keys pasted into the composer or written by tools, logs leak events, and scans the workspace for exposed secrets.

A global permission watchdog: a hard budget on auto-approved permission requests. At most 10 per rolling 60 seconds, at least 3 seconds apart; anything past either limit is deferred to the human answerer and waits. It never refuses and never changes what is asked -- it only decides who answers and how fast. Installs disabled; enable it with the plugin manager toggle.

Run a read-only security assessment of a Dameng DM8 database with 60 checks and produce an HTML report with GB/T 22239-2019 control mapping. Needs Java 8+ and a DmJdbcDriver jar you provide yourself.

File-defined command hooks across the session, prompt, tool, permission, Stop and PostCompact seams, with an approval-only GUI: no unapproved command runs, and approval binds the exact definition, canonical working directory and pinned watchFiles. Commands run as the DSH OS user without a hook sandbox, so the trust ledger is explicit.

Source-install updater for DeepSeek Harness: checks the official GitHub release and the npm record, builds the target tag in an isolated directory, smoke-starts it, then switches through a supervisor process with rollback, with scheduled checks and a daily idle-only install window. Source install only (macOS/Linux); requires Node.js 22.19+, pnpm and Git.

Automatic second-opinion review: a restricted child session re-reads the agent's recent work with read-only tools and delivers at most one evidence-backed note, or stays silent. Requires a model route in the config; the plugin stays disabled until one is set.

Windows only; the upgrade path needs DSH_AUTO_UPDATE_LAUNCH_CMD configured. Checks, installs and rolls back DeepSeek Harness CLI updates from the web settings page, switching the launcher pointer only after the new version passes a config-tree check and a health-checked restart, and reverting automatically when it does not boot.

Mirrors assistant streaming frames (deltas, blocks, commits, turn fences) to a configurable NDJSON sink for external consumers.

Connects DSH to local HTTP proxies automatically via a loopback relay. No TUN, no env vars, zero-restart switching, with sidebar/composer dock controls and live topology.

Safe detached DSH restart: /restart and /dsh-restart slash commands with native candidate styling plus a dsh_restart agent tool; a detached worker restarts DSH after 3 seconds without freezing the session, and Windows/macOS use a native Node helper built on the official appExit service.

Registers system-prompt sections that make the model reason in Simplified or Traditional Chinese, with strict/prefer modes and an optional reply-language policy. Adds a /thinking-zh command for per-session switching. Zero runtime dependencies.

Panel entry for the official client-plugin hot reload that tells you what actually changed first: it diffs each row rev against the last seen state and reloads only the plugin bundles that changed, keeps whole-graph reloads behind an explicit confirmation (a bare call is refused and reports the affected row count), and reports replay counters so a silent no-op cannot hide.

Read-only panel reporting an instance's plugin bundles, patch inserts, skills, upgrade health and decoupling health.

Self-healing plugin doctor: detects failed DeepSeek Harness plugin rows, disables them automatically after backing up the profile patch, and reports diagnostics via /doctor.

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

DeepSeek Harness plugin for rulemux: asks the local rulemux CLI for the rules rendered for this workspace (rulemux inject --agent dsh) and injects the output into the session at the first user turn, once per session. Nothing is written into the workspace for rules; skills are the only part that lands on disk.

Rebind running sessions onto a rebuilt agent-preset revision, so preset changes apply without restarting dsh.

Task-tiered session notifications for DSH: marked main-line sessions alert as they finish, other sessions batch into one summary, plus balanced and silent modes; per-event sounds or uploaded audio, per-session mute, click-through notifications, and an option to wait for subagents.

One-way Telegram notifications for DSH.

macOS 13+. Plays a macOS system sound when DeepSeek Harness needs a tool approval, an agent question, a macOS permission prompt, or an administrator password sheet, then repeats on a 0/25/20/15/10/5 second cadence until the request is resolved. Ships as a bundle with a switch and a config form in the Plugins page.

Sends an Edge/Windows desktop notification when a tool call waits for approval, the agent asks you to choose an option, or a session finishes a turn, and only while the DSH page is in the background or unfocused; an optional chime covers cases where the browser or Windows suppresses the notification.

Runs a diff past several reviewers at once — a CLI coding agent such as codex or claude, or a DSH subagent — and merges their separate sections into one report; reviewers and named review modes are configured in the settings UI.