플러그인

DSH Web용 따뜻한 라이트/다크 테마: 반응형 레이아웃, 이중 언어 설정, 안전한 Markdown 미리보기, 블록별 복사 컨트롤, 텔레메트리 없음.

DeepSeek Harness용 Git 인식 쓰기 보호 플러그인: 사용자의 커밋되지 않은 변경 사항을 덮어쓸 전체 파일 쓰기를 차단하고, 턴 종료 시 보호된 파일에 어떤 일이 있었는지 보고

DSH 웹 플러그인: 워크스페이스별 배경, 채팅 글꼴 크기, 줄 간격, 블록 간격, Retina 글꼴 렌더링

강제 페인 포인트 게이트: 수렴하지 않는 실험이 두 번 발생하면 세 가지 질문을 주입하고, 답변할 때까지 조사 외 도구 호출을 거부하며, 같은 방향의 재시도를 차단

Retired version-locked upgrade skill for the 0.1.3-alpha.1 → 0.1.5-rc.1 corridor; superseded by dsh-codemod.

Blocks tool calls that create temporary files or directories in the workspace root, and moves new root-level temp entries into tmp/_quarantine at turn end.

A five-stage engineering loop for agent-built projects — spec, build, verify, ship, learn — with one artifact and one gate per phase, so an agent always knows the single next action. Role policy, project templates and deployment sit behind explicit ports: swap the implementation without rewriting the loop. Its scaffold generator lays out the internal layers of a project — `init --layout {none,webapp,service,plugin} --stack {python,node,none}` — from nine layers sampled out of three unrelated production projects: entry docs, an OpenSpec plan face, a spec truth layer (INDEX, one file per domain, TESTING, CONSTITUTION), a wiki split into knowledge / progress / runbook, the six `.agents/` slots, server+web, scripts/deploy/config, tests+e2e and a gitignored out/. Non-none layouts also gate the directory contract and compile every source root. Ships a Python CLI (init/next/check/ship/new) plus a local command adapter and an SSH/systemd adapter with release directories, an atomic current/previous switch, a deploy lock, a commit-versioned JSON probe and automatic rollback on a failed probe; bootstrap and teardown provision and remove the unit and the reverse-proxy block idempotently and refuse to delete a root they did not create. Includes a runnable example workspace and a skill that keeps the agent on one phase at a time. Requires Python 3.10+ and PyYAML; remote deploys need SSH access, rsync, systemd and Caddy on the target.

Read-only Home Assistant panel for DeepSeek Harness: a full status overview, a compact right-sidebar card, a system-prompt environment block, one read-only ha_status tool, and optional browser notifications on Home Assistant down/recover. Configure the instance URL and token once; it does not control devices or change Home Assistant configuration.

Read-only persona injection for DSH: when a session opens inside your workspace, your persona files and the latest diary entries are prepended to the system prompt, and those source files are never modified. It keeps a short cross-session feed of recent messages under <root>/live/feed.json and can write a QQ hand-off file at <root>/live/web-for-qq.md; nothing is uploaded. Variable blocks (clock, recent actions, other sessions) are delivered as a per-step context message, so the prompt prefix stays byte-stable and keeps its cache.

Wall-clock session and turn timing for the DSH Web GUI: a timer chip in the session header shows the session total, every finished turn shows its own duration above the action row, and a sidebar panel totals today, the last 7 days, the last 30 days or all sessions. The numbers are folded from turn/start and turn/end in the session log, so paging, compaction and restarts do not change them.

A countdown pill under the message composer showing how long is left before you clock off, with a workday progress bar; click it to set your own start and end times (saved in this browser), and after the end time it turns into an overtime timer.

Renders the chat turn navigator as a clock-like half dial: one graduation per turn, a purple graduation every fifth turn, and a blue needle on the current turn.

Quote selected text from a DSH message into the composer as a blue chip, hover to read the full quote, and remove it with X or Backspace; sent quotes reach the model as a blockquote.

Quote and reply the way Claude Code does it: select text, answer it in a popover, stack the pairs as blocks above the composer, send them as one message.

Privacy guard for git workflows: before git commit, git push or gh repo sync it scans the content that would enter git (local paths, user info, API keys, private keys, connection strings) and blocks anything not approved in the DSH approval UI; approved items go into a manageable, masked whitelist. Native DSH Config schema with live settings, first-push full-repository scan, fail-closed checks, zero npm runtime dependencies.

Two small macOS features in one plugin. keepAwake stops the display and system from sleeping while dsh runs (caffeinate tied to the host process). taskNotify posts a system notification when a top-level conversation finishes its turn, with the outcome (completed, error, blocked, output cap) and the duration; clicking the notification brings DeepSeek Harness forward. Click-to-focus needs Xcode Command Line Tools to build the notifier; without the toolchain the notification still appears but clicking it opens Script Editor. Subagents and Agent Teams members never notify, and a stop you pressed is silent by default. Both features can be switched off separately.

BreezeBlue text-to-speech for DSH: three agent tools, a header toggle that reads assistant replies aloud (markdown and code blocks stripped), and local HTTP endpoints for audio playback, synthesis and long-poll delivery. Requires a BreezeBlue API key (BREEZE_API_KEY); synthesis is billed per character.

Registers two LLM account pools as model providers: TeleAgent (China Telecom TeleAI; paste a token once) with a daily 09:00 UTC+8 full-pool check-in — currently check-in, balances and model listing only, since its chat is blocked by the client signing key — and AutoClaw (Zhipu desktop, Windows), whose tokens are decrypted from the local DPAPI-protected credential store and whose chat streams through the desktop bridge. Both pools report credit balances and model catalogs; quota-triggered failover across local desktop instances is automatic, while switching the AutoClaw account is an opt-in setting (off by default). Panels ship in settings and the left sidebar.

Draws every question and answer in the DSH Web conversation blurred until the pointer rests on that row, and locks the mask to always-blurred while the window is unfocused; one control below the composer switches between off, hover to reveal, and always blurred, remembered per browser.

Measures what your assembled system prompt is actually made of - rules, identity, workspace policy, tool descriptions - in bytes and percentages, then moves the operating protocol ahead of the rule block so the model reads who it works for before it reads the prohibitions. Config-driven via ~/.dsh/prompt-balance.json; two hooks, no build step, no dependencies.

Minecraft server ops via RCON with static command blocking, pluggable local/Pterodactyl adapters, configurable community voting, and multi-layer process detection for Paper, Forge, Fabric, and vanilla servers. The QQ group surface requires the @tencent-connect/dsh-qqbot plugin first; the local adapter runs through PowerShell 5.1 on Windows.

Adds twelve chain_* tools that turn a multi-agent role chain into a round state machine with one frozen baseline, per-signature failure counts, role-tagged evidence, blocking approval gates and one audit file per round; also adds a settings card that routes each role to its own model and thinking effort. Requires the sibling l1-presets bundle (plan/work/code/review) - without those presets every chain_* tool returns ROLE_DENIED.

Replaces the full skill catalog with keyword-based discovery, per-skill enable/disable switches, and system-prompt section controls. Disabled skills are refused by the skill tool, and their slash-command invocations are blocked at pre-step.

Renders mermaid fenced code blocks in the conversation as real diagrams, with the source one click away.