플러그인

DeepSeek Harness의 클라우드 워크스페이스: 워크스페이스 선택기에서 "Cloud (SSH)"를 고르면 에이전트의 bash/read/write/edit/glob/grep 도구가 SSH를 통해 투명하게 당신의 Linux 서버에서 실행됩니다. ssh_* 에이전트 도구, SSH 호스트 설정 카드, 점프 호스트 지원을 포함합니다.

net_doctor 도구를 추가합니다. 프록시 환경, NODE_USE_ENV_PROXY, DeepSeek API 및 npm 레지스트리의 접근 가능성을 보고하고, bash 및 npm 자식 프로세스에 NODE_USE_ENV_PROXY를 설정합니다.

DSH Windows 기본 Shell 정책 플러그인: git-bash/MSYS2 탐지, 구성 패널에서 bash/pwsh 전환, bash 도구 동적 등록 및 프롬프트 도구 표면 축소.

Lets the AI insert streaming-generated UI into the conversation or a side panel, written in TSX — already one of the model's native languages, so there is no JSON schema to teach it. Rendered without flicker, state kept across frames with no hard remount, and a click in the card driving the next chat turn. Inline is where streaming matters most; the side Canvas is the more agentic shape. Cards get agentic capabilities of their own — run bash, curl, call the model, read and write files.

Forge quality gates for DeepSeek Harness (dsh): task gates, read-before-edit, bash hazard interception and quality scoring, driven by the forge CLI through DSH's typed interception points.

dsh용 중국 네트워크 부트스트랩: npm/npmmirror/GitHub/HuggingFace/Gitee 및 로컬 프록시를 확인하고, 레지스트리 설정을 읽으며, 미러/프라이시 추천하고, PowerShell + bash 부트스트랩 스크립트를 생성합니다. 기본적으로 읽기 전용이며 적용은 명시적입니다. CLI와 에이전트 호출 가능한 cn_boot 도구 제공.

DeepSeek Harness 내부에 재구성된 Pi 호환 도구 모음: 소문자 read/write/edit/bash/find/grep/ls 핵심 도구를 설치하면서 DSH 기반의 web, task, plan, todo, think 및 슬래시 확장은 유지합니다.

DeepSeek Harness의 실험적 agent preset: 앵커링 턴 라우팅, epoch별 승격, 점진적 도구 해제, Windows Git Bash 실행기, 선택적 워밍업 재생.

시스템 프록시 감지(scutil/env/PAC)와 상태 도구, proxy_export bash 스니펫 도구.

Windows에서는 사용할 수 있는 bash 도구가 Git Bash로 제한되고 PowerShell은 비활성화되어 있습니다.

최소 프롬프트 × Web PTC 기능: 한 줄 페르소나, run_code SDK, 서브에이전트, Ralph, 웹 검색/가져오기, Windows Git Bash. 범용 워크플로 도구는 숨겨진 상태로 유지.

Web 루트 세션용 최소 호환 첫 턴: 영구 bash와 str_replace_editor로 시작하고 자동 워크스페이스/스킬 컨텍스트를 제거한 뒤 첫 도구 호출 또는 답장 후 선택 프리셋을 복원합니다. 영구 컴포저 토글 포함.

Make DSH llm-pi-ai opencode routes pass Zen free-tier gate: opencode User-Agent + canonical ses_ session + bash/read tools. Scoped to opencode.ai only.

Nushell-only shell executor, dialect preflight, and Nushell syntax teaching for DeepSeek Harness (dsh 0.1.7-rc.1): every ctx.shell execution runs as `nu --no-config-file -c`, other shells are refused, bash/PowerShell habits are refused before they spawn (

DSH Web plugin: check and update DeepSeek Harness CLI and all profile plugins from Settings → General.

Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

Adds a Check for Updates row in Settings and a right-sidebar card that update the DSH CLI and every profile plugin, with npm channel selection (auto/stable/next/alpha), minimum release age, backups, one-click rollback and a test reminder for the badge and browser notification.

Pre-execution safety valve for DSH that judges with TypeSafe Jev: it hooks tools/pre-execute and decides every bash/pwsh call by first applying offline static rules, then by asking the Jev model — the System One model from TypeSafe, which returns a structured decision instead of prose — one yes-no question ("will this command irreversibly delete or overwrite real data?"), turning the answer into allow, revise, block or escalate; revise hands the model a safer rewrite, escalate offers a one-shot human token; exhausted credit or a missing API key degrades loudly instead of failing silent, and a missing key is requested in the conversation itself (`guard key set`, read from stdin); every verdict is appended to a shared audit log and the text people read is bilingual zh-CN/en.

让 dsh 在 Windows 上使用用户自安装的 Git Bash，并绕过其沙箱限制 | Enable dsh to use a user-installed Git Bash on Windows by bypassing its sandbox restrictions.

Approval-free writes into whitelisted directories — wraps the filesystem fence for write/edit tools and auto-answers bash sandbox escalations that touch whitelisted paths, with a settings GUI.

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Shell tool with four Windows backends (PowerShell / Git Bash / WSL / MSYS2) plus an interactive PTY terminal; the MSYS2 backend starts bash.exe with -lc so /etc/profile puts /usr/bin and /mingw64/bin on PATH, and injects MSYSTEM=MINGW64 into the PTY environment. Written in TypeScript, targets DSH 0.1.2+.

Make a Git for Windows installation resolvable as `bash` inside the dsh host process, so the official bash shell stack (dsh-bash-sandbox + dsh-tool-bash) can run on Windows