DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
Configures DSH Web's native LAN binding, trusted-host fence, and signed Cookie session for persistent local-network access without a custom proxy.
A resource governor for long DeepSeek Harness sessions: measures per-request weight, tracks token growth, optionally triggers compaction, and optimizes browser rendering of extended history.
A persistent, draggable close button for the DSH web UI that gracefully shuts down the running DSH process after a two-step confirmation and attempts to close the current tab.
Enforces a per-call wait-time ceiling on DSH agent tool invocations, rejects over-limit requests, and guides the model to request a session-scoped extension via native approval.
A DSH host-plane tool-guard plugin that blocks designated tools at both the presentation and execution layers, with instant hot-reload via WebUI or manual YAML editing.
Adds a bounded timeout to the ask_user_question tool so the agent loop cannot hang indefinitely when no browser session renders the question, returning a structured ASK_TIMEOUT result on expiry.
Blocks AI agent reads of sensitive files (.env, keys, credentials) across file tools, shell, search, and code execution, with custom hide-path and credential redaction support.
Safe restart execution for DeepSeek Harness that validates requests, enforces exclusive locks and checkpoint gates, writes a checksummed ticket, and delegates relaunch to an external supervisor.
Visualize and manage trusted remote domains in the DSH settings panel, fixing Models and settings page errors when accessing via reverse tunnel or custom domain with instant effect and no restart required.
Connects your self-hosted Bitwarden or Vaultwarden vault to DSH so every session can look up credentials automatically through three global tools.
A per-session-tree budget circuit breaker for DeepSeek Harness that monitors cumulative spend and burn rate, refusing the next model request or delegation when limits are exceeded.
A fail-closed host and scheme allowlist plugin that validates outbound URLs by parse-and-match before any connection is opened, defaulting to deny-all.