プラグイン

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network callbacks on local directories or npm tarballs, returning a BLOCK/WARN/PASS verdict before "dsh plugin add".

Aborts startup when another live dsh instance holds the same DSH_HOME data directory, preventing the concurrent session-log writes that corrupt transcripts.

One-command bundle of the three AgentFrame plugins: memory-director, compaction, and aura-scheduler together.

Paddock: constrained local filesystem MCP server for agents — text read/write, directory ops, filename and content search confined to configurable zones, with zero runtime dependencies and a dsh bundle.

SSH/SFTP remote sites and workspaces: manage connections and remote directories like local workspaces.

Toolbox plugin for the Web UI: session/trash/subdirectory/search/preset/config management, tag grouping, long-message collapse, and a scheduled heartbeat with optional IM channel push.

Auto-supplement QMD semantic search when the model greps/globs a knowledge-base directory: zero-dependency DSH plugin, async injection via next-step, no manual invocation.

LLM-driven remember/forget memory: after each turn a model decides what to keep (MemoryDirector), injects relevant memories before each step, dedups, and persists cross-session.

Upload files and folders straight into the conversation — images attach as real message blocks, text content is written into the composer draft, folders land by directory structure.

Shows the current conversation's working directory in a draggable directory panel with adjustable opacity.

手をかけずに済む安全網。エージェントが削除するディレクトリはまずゴミ箱フォルダに移動され、シンボリックリンクは決してたどりません。承認操作は一切不要です。