Plugin

Housekeeper dell'ambiente per l'agente: inventario della toolchain (node/pnpm/git/gh/ffmpeg/browsers), scansione scratch/cache con pulizia in un clic protetta da whitelist ed editor del file di regole della macchina (AGENTS.md) - tutto nelle impostazioni della GUI web.

Scheda Install in Settings → Plugins: installa, aggiorna e rimuove qualunque plugin tramite specifica npm, `github:user/repo` o percorso locale usando lo stesso percorso CLI `dsh plugin add`; i controlli di aggiornamento confrontano npm latest o GitHub HEAD con protezione dal downgrade e verifica della versione risolta, bypass del release-cooldown pnpm 11 a ogni add/remove e riavvio del servizio tramite la shell DSH Desktop o un processo relay con `dsh web` standalone.

A focused end-user QA surface backed by native DeepSeek Harness sessions

Keeps what the agent builds at runtime: turns a `cordis_define` dynamic package into a real installed plugin that survives restart, writing the bundle and registering the profile layer with no pnpm, no network, and no build authorization.

Engineering work-tools for DeepSeek Harness: registers two model-facing Host Tools — a scoped `git` runner, and a package-manager runner (`dev`) that detects npm/pnpm/yarn/bun from the workspace lockfile and picks the right verb per manager. Both run through dsh's sandboxed shell and return structured stdout/stderr/exitCode, so the agent gets focused, reviewable results instead of raw bash, and adding another tool is a copy-paste of one register block.

DeepSeek Harness plugin: discovers the npm/pnpm/yarn/bun scripts of the current workspace (never descending into node_modules) and runs any of them in the background from a compact control in the composer area or the session header.

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

First-run health check for DeepSeek Harness: verifies Node/pnpm/dsh toolchain, home, profile, API key (names only, never values), workspace writability and npm registry, then prints actionable next steps — CLI plus an agent-callable quickstart tool, dsh-firstrun/v1 reports, zero runtime deps.