DeepSeek Harness Plugins · admin-security
Plugins that extend DeepSeek Harness (DSH) with vision, workflows, memory, web tools and more.
HS256 JWT decode (no signature check), sign, and full verify with timing-safe comparison and base64url binary key support; pure functions, zero runtime dependencies.
Host-side password authentication for DSH Web deployments, unifying protection across API, SSE, and WebSocket routes with session management, failure locking, and a responsive login UI.
Evidence-backed runtime nutrition labels for DSH tool namespaces, separating declared capabilities from observed metrics in bounded JSON snapshots for local diagnostics.
Provides agent tools for safe DSH plugin install, uninstall, and restart with automatic backup, rollback, schema validation, and seamless conversation resume.
Toggle MCP servers on or off live from DSH Settings with instant tool unregister/register and persistence across restarts.
A zero-dependency plugin that adds a one-click restart button to the DSH settings page so plugin changes take effect without the command line.
Adds a token-usage stats page to DeepSeek Harness with summary cards, a 3-month heatmap, and real cost estimates at official peak/off-peak rates in CNY and USD.
List and permanently delete unused sessions in session management, cleaning up persisted logs, workspace registries, and search indexes with two-step confirmation.
Hard-stops consecutive identical tool calls (same tool + same arguments) to prevent agent spinning, blocking the 7th repeat by default.
A pure-Node HMAC message authentication code plugin with no network calls or external services.
A pure-Node TOTP/HOTP one-time password plugin that runs offline with no external services, providing multi-factor authentication for DeepSeek Harness admin.
A project scaffolding plugin that quickly generates common project files such as LICENSE, .gitignore, and .editorconfig.