Plugins

Umgebungs-Housekeeper für den Agenten: Toolchain-Inventar (node/pnpm/git/gh/ffmpeg/browsers), Scratch/Cache-Scan mit Whitelist-geschützter Ein-Klick-Bereinigung und Editor für die Maschinenregeldatei (AGENTS.md) – alles in den Web-GUI-Einstellungen.

Installations-Tab unter Einstellungen → Plugins: Installieren, Aktualisieren und Entfernen beliebiger Plugins per npm-Spezifikation, `github:user/repo` oder lokalem Pfad über denselben CLI-Pfad `dsh plugin add`; Aktualisierungsprüfungen gegen npm latest oder GitHub HEAD mit Downgrade-Schutz und Prüfung der aufgelösten Version, ein pnpm-11-Release-Cooldown-Bypass bei jedem Hinzufügen/Entfernen sowie Dienstneustart über die DSH-Desktop-Shell oder einen Relay-Prozess unter eigenständigem `dsh web`.

A focused end-user QA surface backed by native DeepSeek Harness sessions

Keeps what the agent builds at runtime: turns a `cordis_define` dynamic package into a real installed plugin that survives restart, writing the bundle and registering the profile layer with no pnpm, no network, and no build authorization.

Engineering work-tools for DeepSeek Harness: registers two model-facing Host Tools — a scoped `git` runner, and a package-manager runner (`dev`) that detects npm/pnpm/yarn/bun from the workspace lockfile and picks the right verb per manager. Both run through dsh's sandboxed shell and return structured stdout/stderr/exitCode, so the agent gets focused, reviewable results instead of raw bash, and adding another tool is a copy-paste of one register block.

DeepSeek Harness plugin: discovers the npm/pnpm/yarn/bun scripts of the current workspace (never descending into node_modules) and runs any of them in the background from a compact control in the composer area or the session header.

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

First-run health check for DeepSeek Harness: verifies Node/pnpm/dsh toolchain, home, profile, API key (names only, never values), workspace writability and npm registry, then prints actionable next steps — CLI plus an agent-callable quickstart tool, dsh-firstrun/v1 reports, zero runtime deps.