Plugins

Enhanced SSH ops: connectivity testing, remote ls, ssh-config import, known_hosts fingerprint checks and multi-host exec.

Adds a Continue button to the composer dock and resumes automatically when a turn is cut off by a network drop or an upstream output-limit cut. A resident link monitor asks every 10 seconds whether the network is back, because the link returning fires no event, and a turn that completes normally counts as proof the link works. The click goes through the host submission pipeline — beginSubmission plus session.prompt — so the message carries real user attribution instead of faking one, and a genuine refusal is reported rather than retried. On startup it also scans recent session logs for both fingerprints of a host that left mid-turn: an unclosed turn, and a turn closed as disposed, which is what a normal shutdown writes. A turn the user stopped by hand is never resumed.

Three-scope rule injector for DeepSeek Harness that re-publishes the rules into long sessions, with a loop-breaker, dedupe by content fingerprint, per-session persistence, and a settings-panel editor.

Adjust chat bubbles and message spacing with comfortable or compact density on verified Windows Desktop RC2/RC3/RC5 layouts, retaining native styles for unknown host fingerprints.

Structured image recognition: local sharp measurements plus a cloud vision model return description, OCR with coordinates, object locations and fine-grained attributes in one call; a fingerprint cache makes repeated images return in milliseconds without spending model quota.

Hermetic composition lock: fingerprints the profile's dependencies, bundle order, lockfile and patch layer; booting a drifted composition warns, or fails under strict mode (the --frozen posture for CI).

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

DeepSeek Harness (dsh) plugin: live local LLM endpoint health in the web rightbar. llama.cpp slots (busy/TTFT/wedged, /metrics) + Ollama MODELS (loaded vs empty). Engine fingerprinted by response shape. Installable dsh.bundle.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

DeepSeek Harness plugin for CVE impact retesting: fingerprint a target, judge it against a CVE's affected range, gather passive evidence, and report a verdict with confidence and limitations.

Hard break on repeated tool calls: a synchronous ctx.tools.guard gate that counts semantic fingerprints (net/site/sink/cmd/exact) over a per-agent sliding window, ignoring decoy arguments such as description and timeoutMs.

DeepSeek Harness Agent 团队的信任指数插件 —— 为 spawn 出的 teammate 做实时信任评分：四维 EWMA 信任账本（按 agent 类型指纹跨会话累积）DeepSeek Harness Agent teams plugin — live trust scoring for spawned teammates: a four-dimension EWMA ledger keyed by agent-type fingerprint (cross-session)

Drag or paste any local file onto the DSH page; it resolves the real absolute path (Spotlight + size/mtime + head/tail fingerprint match) and inserts it into the composer, with a content-cache fallback.

Android companion bridge: QR-code LAN pairing with revocable device tokens and TLS fingerprints, a phone-connection and device-management panel, and an HTTPS access proxy serving sessions, live events and approvals to the paired native app.

Share any DeepSeek Harness session as a self-contained read-only static webpage — timeline, collapsible tool calls & reasoning, default redaction, dual SHA-256 fingerprints, watermark. · 把 DSH 会话一键变成可分享的只读静态网页：单文件 HTML、离线可开、默认脱敏。