Abstract filesystem capability seam (ctx.fs) for the DeepSeek Harness — vocabulary types, the FileSystem service (text IO + optional version-guarded atomic mutations), and the fs/* policy event vocabulary

Local filesystem skill provider for the DeepSeek Harness

A simple parser and expander for GraphQL imports

Web ask_user_question feature: host tool mount plus composer-takeover question UI

LiangShen (梁神) agent preset for the dsh web GUI: a two-phase anchored-standard preset — the first model request exposes only the builtin Minimal exact two-tool surface (persistent bash plus str_replace_editor) with no runtime contexts or injected instruct

Bundled dsh badge skill provider for DeepSeek Harness

Abstract web access capability seam (ctx.web) for the DeepSeek Harness — search/fetch provider registry, registration-order-independent selection, request/result vocabulary, and the WebError taxonomy

Model-facing web tools (web_search, web_fetch) over the DeepSeek Harness web capability seam (ctx.web)

System prompt assembly registry for the DeepSeek Harness

Process-local implementation of the DeepSeek Harness background job registry seam

Repeat-tool-call guard plugin: advisory reminders when an agent loops on identical tool calls

Model-facing pwsh tool over the bash executor seam

Globally named send_message, interrupt_agent, and list_agents tools over ctx.subagents continuations

Zero-dependency bounded-retention primitive: ItemRetainer/TextRetainer + neutral notice helpers (what did we keep, what did we omit)

Sandbox-consuming implementation of the DeepSeek Harness PowerShell executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)

Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed

Local-filesystem implementation of the DeepSeek Harness filesystem seam (ctx.fs)

Client Tool call-tree renderer and keyed per-tool presentation slot

Zero-dependency no-shell execFile runner for host-native OS integrations: utf8 stdio capture, abort propagation, Windows hide

Model-facing workflow tool: run a JavaScript orchestration script over ctx.workflows