Plugins

Read-only GitHub access for agents, wrapping several tools. Inside the tool it automatically probes and selects whichever GitHub access method works locally, and tries network proxies on its own. That cuts down the network and parsing problems an agent may hit when accessing GitHub, and the overhead of it repeatedly trying different approaches.

China A-share stock research: ticker search, announcements over any date range, financial report cards, valuation profiles and signal-factor explanations (~5,000 stocks since 2011, public read-only data service), plus a link-out tool to an external trading-sandbox product.

Grok-compatible web search with retained source pagination, Context7 and Exa documentation lookup, bounded page extraction, site mapping, offline research planning, and read-only diagnostics.

Registers `list_profiles` and `export_profile`, so the agent can show what setups exist and hand back a whole profile — bundle order, plugin versions and patch — as one portable file to share. Read-only.

Agent config packer for DeepSeek Harness: pack local agent assets (skills/sessions/profiles/settings/memory) into a zip for migration or sharing, with privacy scanning, diff-based restore, pack management, and a settings UI; memory ships as a read-only Markdown mirror, not the live database.

Offline diagnostic for DSH: 19 checks across env, profile, and session state, with a settings "Doctor" panel and a read-only JSON API.

A timer wakes a DSH session to read the GitHub repos and topics you follow, decide which changes are worth your time, and write a dated report while keeping a table of what it already saw. A sidebar panel keeps the run history and the GitHub trending list. Read-only.

Read-only DeepSeek web archive tools for DSH: list/download/search sessions, share-list, and a digest tool that compresses the 100-session history into one high-density page with activity bars and topic clusters. Write operations are intentionally not exposed (the web client rate-limits them). Requires the separately installed deepseek-ops Python client (github.com/Panniantong/deepseek-ops, by another author) with QR-code login; set scriptDir to its path.

Mounts external skill directories (Claude Code, Codex, ZCode) into DSH as read-only skill providers: frontmatter field mapping, name slug normalization and hot reload.

Read-only audit of the local CLI toolchain as a sidebar panel in the DSH web GUI: lists installed versions across Homebrew, npm global, pip, Rust/Bun/uv and self-updating CLIs, flags which ones have a newer release available, and shows the dependency impact for installed packages. It reports only and never runs an upgrade, so no tool on the machine is modified. The DSH plugin ships on npm as `dsh-cli-doctor`.

Long-term memory scoped to the DSH workspace. A session opens with a one-line-per-memory index - bodies are fetched on demand by the `memory` tool, so the same character budget holds about three times as many entries - and when a turn ends a purely local search over the last user message pulls the matching memories into the next briefing at no model cost. Optional auto-capture distils a stretch of conversation into structured memories; in draft mode they wait in an approval queue instead of landing directly. A portrait layer keeps a workspace and a global picture, rewritten from the journal and the records, with the same draft-or-direct choice. Settings → Memory holds the archive, list and timeline views, a health check (duplicate clusters, stale entries, broken links), the supersede version chain with rollback, and a read-only scan that imports existing WorkBuddy / Qoder memory files.

Right-sidebar page for DSH that draws the current session's repository as a VS Code-style commit graph - colored branch/merge lanes, ref chips and per-commit details - with a working-tree Changes area above it (staged/unstaged sections with inline diffs) for every working tree of the repository; read-only, works with or without dsh-better-sidebar, and follows the session's worktree label when dsh-session-worktree is installed.

Run a read-only Dameng DM8 database inspection with 85 checks and produce an HTML report.

Allowlisted SSH into Unix/AIX/macOS from DeepSeek Harness (no shell; read-only by default), with remote_ssh_probe OS-aware suite.

Per-project memory for DeepSeek Harness. Three Markdown files per workspace — PROJECT.md, DECISIONS.md and SESSIONS.md — are auto-created on the first step of any session in that workspace, re-read from disk and re-injected only when they change (and re-injected if compaction dropped them), and written back by classification through a memory_checkpoint tool, with a bounded end-of-turn nudge when a turn did work but recorded nothing. memory_read and memory_search read the live log and the archive, the latter over a zero-dependency BM25 index. The session log is capped at 200 entries with the overflow moved to SESSIONS-archive.md — never injected, but visible, readable and searchable, and restorable one entry at a time. Settings page: a workspace list with a path filter, read-only tabs for the three memory files plus the archive, reload, export/import of one workspace's memory as a JSON bundle, a two-step clear, a panel that rewrites or removes the AGENTS.md instruction block, and a PROJECT.md staleness reminder. A composer status chip shows that workspace's sync state and creates the files on click. Zero dependencies — no vector store, no embeddings, and no model calls.

Read-only DeepSeek Harness Web sidebar version chip that shows the running DSH version, npm latest/next/alpha channels, compatibility labels, and a copy-only upgrade command.

Process management: brings ntd-style processes (multi-stage, multi-step agent workflow templates) into the dsh web UI — browse, edit, validate, import/export and AI-generate processes; the built-in library is read-only while the personal library is writable with live file sync, and agents read the library through process_* tools and advance work stage by stage.

Side-ask drawer opened from a completed answer's action row: follow-up questions run in an independent, auto-archived session seeded with the prior conversation text (read-only, capped at 48,000 characters), leaving the main session untouched. The side session inherits the main session's model, switchable inside the drawer, with a context-usage ring.

Read-only SonarQube Community Build tools: instance status, project Quality Gate for a branch or pull request, issue and Security Hotspot search, single hotspot detail, and coverage, duplication or caller-selected measures. Issue and hotspot results carry a normalized location with component key, file path, line and text range.

Read-only Sentry tools: project listing, issue search at organization or project scope, single issue detail, and the latest or a specific event with a trimmed stacktrace. Local variables, request headers and bodies, query strings, packages and secret-looking tags are removed before the event reaches the model, and oversized events degrade through source context, breadcrumbs and frames rather than failing.

Read-only Odoo tools over JSON-RPC: server info, model field introspection, and a restricted search_read limited to an allow list of models whose domain field names may not contain dots, so related-record traversal is not possible. A draft-create tool is registered only when allowWrite is enabled, and is limited to sale.order and project.task with the draft state enforced by the plugin.

Read-only Grafana tools that query metrics through the data source proxy: instance health, data source listing, instant and range PromQL queries, current alert state, and provisioned alert rules. Range queries downsample to a point budget; an explicitly supplied step that would exceed it is rejected rather than silently changed, so the model never receives data at a resolution it did not ask for.

DSH-native uv environment manager: create, sync and run Python virtualenvs from the settings tab, with pip fallback, read-only conda visibility and a dry-run project sync preview.

Instance manager for DSH Web: a Mini Utility Dock panel that lists every local dsh web instance the machine can see (port, PID, uptime, live session count, resident memory, version), starts a new instance on an automatically picked free port in 3080-3129 or on a port you name, opens a row in a new tab, and stops one or all of them through that instance’s own graceful shutdown (appExit). Rows also show what each instance is serving, and read-only instance logs and session summaries are one click away. Where a peer is configured, the same panel lists and queries instances on other machines over a bearer-authenticated link. Every route is loopback-guarded, and a browser-facing action must additionally pass the host’s own browser authentication.