DeepSeek Harness plugins — Page 88

DSH Web UI 浮动小游戏窗口：18 款离线小游戏，可扩展游戏注册表。等待模型回复或修 bug 时的摸鱼神器。

Professional Tavily-backed web search provider for DeepSeek Harness — full request parameters in a WebUI settings card, yaml-first priority, and API connectivity test

DSH subagent providers for the local claude-code / codex CLIs: registers the host-plane 'claude-code' and 'codex' providers the nine security presets' tool rows name. The CLIs keep their own model backend config (~/.claude/settings.json env, ~/.codex/config.toml); this plugin only spawns them headless and maps exit to a subagent run.

Session-scoped redteam findings registry for the nine security presets: model-side register/update/delete tools, a loopback RPC surface, and a per-session conversation tab (redteam 成果) with per-mode pages — pentest page ships first with severity stats, type distribution, lifecycle status, pagination, verify-to-session and MD exports.

DSH host-plane refusal-repair proximity injection for the five security presets: watches assistant turn text on session/event, detects refusal/moralizing patterns (two-tier: strong phrases full-text + weak keywords head-150, ), and when a hit lands re-injects a one-shot authorized-context reminder as a dynamic systemPrompt context contribution. RuntimeContextProjection dedupes: the reminder lands only when it appears (text change) and disappears after the repaired turn (change back to empty) — steady state costs nothing. Non-security presets resolve no preset id and render nothing.

DSH host-plane route booster for the nine security presets: infers the current (mode, phase) from the latest user message (sticky phase memory) and re-injects a compact governance envelope — gate checklist (from dsh-stage-gate GATES), review/double-sign reminder, boundary line, evidence-level pre-judgment, refs pointers or a forced-search nudge on miss — as a dynamic systemPrompt context contribution. A new snapshot lands only when the envelope text CHANGES (RuntimeContextProjection dedupes), so steady phases cost nothing.

DSH scanner-wrapper plugin (preset-plane, pentest/attack-defense): nuclei/httpx/ffuf as model tools with built-in rate discipline (conservative defaults, audited overrides), evidence-index landing, nuclei-hits→scan-reconcile pending rows, and assets.md registration enforcement for active scans (防盲打). Local binaries only — never auto-installs; MCP/install-request fallback hints built in.

DSH host-plane deterministic enforcement for the nine security presets : ctx.tools.guard() pre-execute interception — report files require a stage_gate PASS in gate-log.md, writes stay inside the task workspace (least privilege), conservative high-risk bash patterns must go through the ask-first flow, and bare full-port scans without rate controls are rejected with the fix. Guards fire only for the nine security presets; every denial appends to the workspace enforce-log.md.

DSH stage-gate host plugin: the stage_gate / gates_list model tools validate task-workspace artifacts against the nine security presets' gate schemas (structural checks, v1), append verdicts to gate-log.md, and list each mode's canonical gate files

VS Code-style three-column layout for the DSH web GUI: docked Explorer file tree + Monaco code editor that replaces the chat column when a file is opened

Installing plugins from the browser, as an ordinary dsh plugin

A terminal for the browser harness, as an ordinary dsh plugin

A DeepSeek Harness research workspace with archived PDF reading, optional OCR, human review, cited reports, and recoverable research tasks.

Restart recovery for dsh web: after a crash/restart, an interrupted agent turn continues automatically (host-side agent/created listener — no browser timing races). Pairs with the dsh-web-guard skill (which auto-relaunches the web process); together they make restart self-healing.

DSH Web 运维面板：安全重启、健康监控、备份和 Linux 权限维护。

Image generation for DeepSeek Harness: a generate_image tool with pluggable providers — the FAL queue, any OpenAI-compatible images API, or a ChatGPT/Grok subscription with no API key at all. The picture is shown inline in the conversation; the model receives either a link (works with any chat model) or the image itself (needs dsh-vision-bridge or a vision-capable model).

Per-provider API key rotation for DeepSeek Harness: a key pool per provider, auto-created clone routes, and switching to the next key on quota/rate-limit errors. Includes a Settings section (Key Rotation) to edit the key pools, cooldown and switch codes.

LAN and reverse-proxy access for the DeepSeek Harness Web UI: returns the settings service on pages that are not localhost, fills in the Web APIs the browser withholds on plain HTTP, and can open a listener of its own so nothing else is needed. Requires DeepSeek Harness 0.1.7+.

DSH 渗透测试模式：以探索链路记录目标、线索、资产与漏洞，并在 Web 中可视化展示。

RoundTable for DeepSeek Harness: turn one session into a visualized round-table meeting — expert nodes on a ring, directed edges, an aggregation gateway, proxy thinking for black-box worker models, and a live topology tab in the web GUI. Includes 针锋相对 (adversarial review): red-team experts attack a settled plan and you endorse real flaws.

A braided whip (辫子) hanging in the chat-flow — grab the tip and swing to send "go work!" to the agent.

DSH 社区插件生态指南 + 两个审计工具：注册「dsh-community-plugins」skill，让每个会话都知道如何发现、评估、安装社区插件；注册离线工具 dsh_plugin_audit，把已装插件的 bundle 层完整性、peer 区间、官方包的具名导出、slot 契约与服务注入逐条比对到本机 dsh 构建；注册联网工具 dsh_plugin_inspect，在安装前下载 tarball、校验 integrity、在临时目录里审计后删除，不安装、不执行 lifecycle 脚本。只提供方法与事实，不推荐任何第三方插件或市场。轻量：纯 JavaScript、单一依赖、无构建步骤。

通用 DSH 插件库（pnpm monorepo）：模板插件、插件开发工具包、一键聚合安装包。根包同时是全家桶 bundle（dsh.bundle.patch），DSH 与插件市场可直接识别安装。

OpenAI Codex OAuth provider and native settings UI for DeepSeek Harness