Plugin

Safe, audited SQLite/PostgreSQL/MySQL access for dsh agents: schema introspection, enforced read-only queries, a write approval gate, and a durable JSONL SQL audit trail.

SMS forwarding webhook for DeepSeek Harness. Phone apps (SMS Forwarder, Tasker, or any HTTP POST) push messages to a local HTTP endpoint; the plugin stores them as JSONL and exposes sms_recent / sms_search tools so the agent can read SMS verification codes during tasks. Auto-extracts the first 4-8 digit OTP from each message, supports keyword filtering, and works over LAN or Tailscale.

Recupera dal disco grezzo le sessioni dsh eliminate o corrotte (session.jsonl.zstd) e la memoria (memory.db), e ripara le sessioni ricostruite che non riprendono tramite il comando /session-repair nella UI web.

Cancello di sicurezza a runtime sulla pipeline degli strumenti: nega le chiamate che nominano host fuori da una lista di uscita consentita, redige le credenziali nei risultati sul valore canonico e non solo sul contenuto renderizzato, e aggiunge ogni decisione a un log di audit JSONL; viene fornito in modalità solo monitoraggio.

CLI per il ciclo di vita delle sessioni: export (md/json/jsonl), archiviazione/ripristino, cestino, ricerca e statistiche. Sola lettura per impostazione predefinita; il motore non elimina mai nulla.

Crea/modifica/inietta messaggi di test dell'assistente e importa/ripara log di sessione session.jsonl(.zstd) in nuove sessioni.

Pannello dei log a runtime per DeepSeek Harness: vista dei log live via SSE nelle Impostazioni più file JSONL con rotazione limitata per data/dimensione

Agent 行为守护桌宠：跨 agent 监控可疑外传（加密打包直传对象存储 / DNS 外泄线索 / 敏感密钥被读），发现即告警，明确确认后按「一次一个」终止目标 agent；事件写入只追加 guard-events.jsonl，并通过 DSH host 工具 + MCP(stdio) 供其它 agent 查询

dsh 插件：本地蒸馏器——扫描全部历史会话，挖出「用户纠错 → agent 改对」片段，脱敏后蒸馏成微调数据对（JSONL）、技能草稿与 AGENTS.md 规则补丁，带人工审核队列

Turns DSH permissions into 9 selectable presets (3 sandbox modes x 4 approval tiers), with rule plus LLM risk classification across four risk levels, password-gated approval for high-risk operations, and a JSONL audit log.

Drop-in web_search provider that follows the session's routed model: a runtime-editable priority chain with three wire dialects (Anthropic web search, OpenRouter online, Zhipu bigmodel), per-route endpoints and credentials, a Settings UI panel, local JSONL call audit, and built-in official fallback.

Mine local DSH session logs (JSONL) into personal usage & impact receipts: Markdown day/week/month reports plus a self-contained HTML receipt, cross-referenced with local git log — zero-network, privacy-first.

Local tool-call failsafe for DSH: blocks a fixed list of high-risk shell patterns and credential-file reads before execution, with a per-session hash-linked JSONL audit log, and an optional external Gateway for centralized policy.

Local JSONL run traces for DeepSeek Harness sessions

Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audit trail, and per-agent token quotas against the host token meter, with state under $DSH_HOME/gov.

Persistent model tool-call trace recorder: every tool call is durably written to a JSONL file that survives restarts, queryable via a structured call_trace tool and a callTraceHistory service, with size rotation and an optional floating canvas UI add-on.