プラグイン

Web UI とデスクトップクライアントから DSH セッションを削除: ヘッダーの危険操作ボタンとセッション行メニュー項目にリスク同意ダイアログを付与。ホストエンドポイントとエージェントツールが、セッションログ・投影キャッシュ・ワークスペース会計情報を削除。

DeepSeek Harness における mcp__omni__parse のハードニングガード: プライベート/予約済みホスト URL（SSRF）を拒否する tools/pre-execute リスナー。許可リストまたは ask（同意）を強制し、allowedRoots が空の場合はフェイルクローズ。

Web UIからドラッグ＆ドロップまたはメニュー選択でセッションを別のフォルダーに移動し、リスク同意ダイアログでセッションを完全に削除し、会話を要約してAIでセッション名を変更（誤字認識対応）。各操作はエージェントツールとしても提供されます。

Delete sessions from the DSH Web sidebar: adds a Delete action to the session row menu with a risk-consent dialog, then removes the session log, workspace accounting and live session state.

Consent-bound one-turn voice preview for DSH Web with a credential-free local synthetic demo, optional Qwen Audio, exact Session isolation, and explicit transcript-to-draft handoff without automatic submission.

Task-aware DSH plugin navigator: builds a local index from GitHub topics and community lists, retrieves across 28 bilingual capability classes, and provides commit-level static risk audit, consent-gated pinned installation, composition checks, and recovery.

Human-in-the-loop tools (`human_task` / `human_task_ready_check`): pause the agent until the user performs a real-world action or returns an observation (GUI operation, game testing, visual verification, hardware checks), gated by session consent and an AFK presence check, returning a structured JSON result via a web task dialog.

Figma design context for the agent: reads a frame's node tree, auto-layout, paints and typography, resolves the variables it is bound to, and renders a screenshot to compare code against — plus four bundled design-to-code skills. Connect with one button against Figma's own consent page; the plugin ships its own OAuth app, refreshes tokens automatically, and never asks for or displays a token.

Drives the GME Test Agent from inside Harness: three tools list interface catalogs, start and repair autonomous test generation in a local Python backend, poll the task until review, and keep PR, skip and cleanup actions behind explicit user consent.

Delete sessions of a DeepSeek Harness profile from the UI: header danger button + session-row menu item with a risk-consent dialog; host endpoint + tool delete the log, projection cache and workspace accounting. Works in web and the desktop client alike.

Human-in-the-loop tools (`human_task` / `human_task_ready_check`): pause the agent until the user performs a real-world action or returns an observation (GUI operation, game testing, visual verification, hardware checks), gated by session consent and an AFK presence check, returning a structured JSON result via a web task dialog.