プラグイン

アーカイブ済みセッション管理、タスク停止通知、更新チェッカー、モデルルーティング（キーワード規則 + allowlist で制御される model_route）、複数タスクのスケジュールトリガー（ハートビートと固定時刻タスク）、および dsh web GUI 向けの DeepSeek 風メッセージスクロールナビゲーション。

データソースプロキシを通じてメトリクスを照会する読み取り専用の Grafana ツール：インスタンスのヘルス、データソース一覧、インスタントおよび範囲の PromQL クエリ、現在のアラート状態、プロビジョニング済みのアラートルール。範囲クエリはポイント予算までダウンサンプリングされ、明示的に指定された step がそれを超える場合は黙って変更せず拒否されるため、モデルが要求していない解像度のデータを受け取ることはありません。

アーカイブ済みセッション向け Settings セクション。ワークスペース別の閲覧、検索、サイドバーをライブ更新する一括アーカイブ解除、ドライランプレビュー付きの任意の自動アーカイブ規則（アイドル日数、ワークスペースごとに直近 N 件を保持）を備える。さらに、長い会話のターン間を移動する左端ターンレールと、コンポーザー内の ↑/↓ 入力履歴も提供する。

DeepSeek Harness (dsh) 向け Rust 開発ドメインプラグイン：検証ピラミッド fmt→clippy→build+test→miri+audit(+semver) をモデル向けツールとして提供 + グラフ層ガバナンス（anti-Goodhart 8 ルール：#[allow] 密度／削除済みテストを含む、Cargo.toml および pub 経由の blind-spot

Claude Code 風の権限ルールエンジン：hard/deny/ask/allow の階層（全アクセスより上位の hard 層）、ワークスペース単位のルール、ワイルドカードによるパス保護、視覚的な段階編集 UI。ルールは settings.yaml に保存されます。

Claude Codeのrules.md形式のルールプロンプト：エージェントが読み取りまたは編集するファイルをglobマッチングしてルールMarkdownファイルを有効化し、prompt injectionと順序指定をサポートします。

dsh のルール・コマンド・スキルマネージャー：/rules スラッシュコマンド、ビジュアル編集（追加/編集/無効化/削除、フリーゾーン対応）付き設定パネル、{input} 引数付きのユーザー定義カスタムコマンド、スキル管理、AGENTS.md の自動バックアップとワンクリック復元。

DSH設定ナビゲーションを整理します。折りたたみ可能なグループ行の下にサードパーティ製プラグイン項目をまとめ、ブックマーク風のカスタムグループ、折りたたみ切り替え、自動分類（マーケットタグ → 名前ルール → お使いのAIモデル）を提供します。

Settings-UI editor that assigns per-teammate model and reasoning-effort rules for DSH native agent teams, resolved at spawn time by wrapping SubagentRuntime.startContinuable. No official files are modified.

DSH plugin that registers the ai-eight-honors-eight-shames skill: eight checkable working rules for coding agents (verify before calling, confirm ambiguity, cite evidence, reuse before creating, test before claiming done, follow local conventions, separate fact from inference, keep changes reversible) plus a ninth rule that logs each user request and the change made in report files at the workspace root.

Audio cues for DeepSeek Harness: a short synthesized sound when an agent needs confirmation, finishes a turn or a background job, or fails, with five sound packs, per-event toggles and volume, and do-not-disturb rules stored in the host settings document.

DSH plugin that registers the ai-eight-honors-eight-shames skill: eight checkable working rules for coding agents (verify before calling, confirm ambiguity, cite evidence, reuse before creating, test before claiming done, follow local conventions, separate fact from inference, keep changes reversible) plus a ninth rule that logs each user request and the change made in two fixed report files at the workspace root.

Ponytail lazy-senior-dev ruleset for DeepSeek Harness: a 7-rung minimal-code ladder (YAGNI, reuse, stdlib, native, installed deps, one line, minimum), six skills (main rules, over-engineering review, repo audit, debt ledger, gain scoreboard, help), a /ponytail session command for lite/full/ultra/off levels, and optional always-on ruleset injection via config. Vendored verbatim from upstream ponytail (MIT), zero tools registered, clean uninstall.

Skill that fact-checks a claim against the open web rather than model memory: it splits the claim into independently checkable fact points, routes each point to the primary-source ladder for its domain (policy, academic, medical, financial, disaster and accidents, food safety, science, education, sports, entertainment, judicial, and more), searches domestic and international ecosystems in parallel, fetches primary pages, grades sources by type, re-searches with debunking keywords, and reports conclusion-first with a full URL and citation position behind every statement, keeping unverified and undecidable points separate from confirmed ones. Three factual judgements can be routed to a TypeSafe Jev (System One) decision model when a key is configured, falling back to the skill's deterministic rules when it is not; a model verdict can only lower a confidence tier.

Blocks an agent from reading, searching, writing, or editing chosen files and directories, keeping their contents out of the conversation — including sensitive-word files whose text can make later provider requests fail with a 400. Rules are picked from a file/directory browser on the plugin page.

Filesystem permissions for shell calls, granted per path and capability rather than per command name. The command line is parsed for the read, write, create, delete and execute effects it needs, a capability it lacks raises the approval card instead of a flat refusal, and the same rules are compiled into the macOS Seatbelt profile the process, its children and the code its arguments never showed all run under. An Approvals tab in the conversation reads the audit log back and shows which rule, automatic reviewer or person answered each call.

BaziDIY ontology plugin: deterministic bazi/wuxing/bead/style rules as DSH tools (calculate_bazi, propose_designs, generate_design, save_design, load_design), plus bracelet SVG rendering and a bead editor; no LLM calls inside execute.

Mobile-first Web UI quality-of-life pack for the DeepSeek Harness: a Chrome-style active-session tab bar, full-screen sidebar swipe open/close, overlay sidebar, collapsed-sidebar recents, keyboard-suppressing session switching, viewport/IME keyboard adaptation, touch feedback, code/table inner scrolling, hidden permission dropdown, a full-screen settings rewrite with tab memory, and a compositor-driven status pulse, no-touch-drag long-press protection — 14 features, each independently toggleable from the Settings QoL section with instant effect, persisted per browser in localStorage; pure client-side CSS/JS, mobile rules locked to viewports of 768px and below so desktop stays untouched.

Reads .mcp.json from the .dsh home and from the agent workspace, mounts every mcpServers entry into DSH, and adds an MCP tab in the Web UI for listing, adding and unloading servers.

Injects the rule files under $DSH_HOME/rules and <cwd>/.dsh/rules into the conversation at the first agent pre-step, re-injecting them after compaction.

Language-pack framework that rewrites model replies: A is an independent LLM rewrite, B injects FTS5 terminology retrieval into that rewrite, C applies local dictionary and regex rules, and composite runs a pipeline such as B then A then C. Ships a GitHub pack marketplace, a ZIP installer with path, size and file-type checks, and a mandatory risk disclaimer gate.

Hot-switches in-process DSH fetch traffic among direct, manual HTTP(S)/SOCKS5 proxy, and ambient system-proxy modes, with no-proxy rules and optional proxy-environment export for newly spawned child processes.

Team cost captain: meters every model call (subagents included), attributes each call to a member by workspace rules, prices it with the built-in DeepSeek 2026-09 catalog (peak/off-peak, CNY/USD) or user overrides, and appends it to a local JSONL ledger. Adds hot-reloadable member budgets, 80%/100% webhook alerts, optional over-budget enforcement, a team_cost_report tool with CSV export, and a settings-page team dashboard served over a Typert RPC service.

Task board plugin for the DSH web GUI: a sidebar entry plus a multi-column kanban view with real execution through DSH sessions, schedules, session rules and auto-cruise automation. Board truth lives on the host and syncs to every device over SSE (the bro