플러그인

자동 승인 검토: 읽기 전용 도구는 자동 승인하고 위험한 명령은 자동 거부하는 페일 클로즈드 정책 엔진.

베이징 차이즈과기(深知可信智能)의 정부/기업용 신뢰 오피스 스위트: 3가지 스킬 — 신뢰 상담(인용 마커 + 출처 HTML이 있는 정책/법규 Q&A), 신뢰 검색(추적 가능 HTML + 깨끗한 Markdown으로 권위 있는 정책/표준 검색), 공문 작성(초안/재작성/Word/홍두문서 납품). 모든 인터페이스는 dknowc 신뢰 워크벤치 MCP(Bearer 인증) 경유, 산출물은 세션 워크스페이스에 저장, 키 설정은 한 번으로 이후 세션에 유지. npm에는 dknowc-dsh로 배포.

컴포저 비용 칩: 공식 가격표(2026-08-17 피크/오프피크 정책 포함)를 사용하여 현재 세션의 DeepSeek API 지출을 메시지별로 계산합니다. 마우스를 올리면 내역, 오늘(DSH) 합계, 계정 잔액을 표시합니다. DeepSeek 모델 전용.

에이전틱 AI를 위한 권한 레이어, DeepSeek Harness 플러그인 형태로 제공. TapPass /v1/govern 정책 결정 지점을 통해 모든 도구 호출을 비즈니스 규칙에 따라 통제

위험 작업 정책 검사, 출력 마스킹, 보안 검토 워크플로 추가

Session-aware mesh relay for DSH agents: an Ed25519-signed receive route and delivery policy, plus outbound sending, a peer directory and a mesh-peer-registry client.

dsh plugin: unattended approval gate — subagent/scheduled/cron approval requests get a bounded answer window, then settle with a fail-closed default instead of hanging forever (per origin or per session)

Harness-neutral Traditional Chinese enforcer + offline converter (skill, DSH bundle, CLI). One script axis either way + Cantonese/Japanese-only filters. Converts both ways; optional wording preference. Also: an LLM output guard, cp950/GBK console scan.

Windows desktop control through UI Automation: nine tools that read a window control tree and drive elements by id through their own UI Automation patterns, with every write gated by an approval policy, an append-only action log and a settings panel.

Adds DSH restart and stop controls with token-aware reconnect and policy-based recovery for interrupted web sessions.

Declare any number of LLM providers, each with its own endpoint, credential and per-model parameters (reasoning-effort vocabulary, image input, retry policy), across the OpenAI Chat, OpenAI Responses, Anthropic Messages and Google Gemini wire formats, configured from a settings page.

Preventive content policy for DeepSeek Harness tool results: rewrite matched text with regex rules, or drop/truncate unpredictable payloads by field path before they are normalised, rendered, or persisted. The upstream counterpart to dsh-plugin-redact.

DeepSeek Harness plugin bundle: grill_tree, a fixed-policy design-space search tool. Expands one decision per node, fans out independent proposers, has a separate judge prune the branches, beam-limits each depth, and ends with complete designs or an infea

Enforces your comment policy at write time, inside DeepSeek Harness. Reads the policy from your AGENTS.md or CLAUDE.md, blocks violating writes, and re-injects the policy verbatim so the model stops drifting from it.

Preventive content policy for tool results: rewrites matched text, and drops or truncates whole fields by path before a result is normalised, rendered or persisted, so an unreviewed payload never enters it. Ships inert with no built-in category or domain blocklist.

DSH plugin security guard: 28-rule static scanner, risk scoring, whitelist/blacklist policy, local web dashboard and in-DSH risk popups.

Zero-config per-turn git checkpoints: after every completed agent turn in a git workspace, stages all changes into one tagged \[turnsnap] commit (serialized queue, sandbox-policy aware), so any turn is a rollback point.

dsh plugin: bounded retry for gateway network_error failures the stock retry policy cannot classify (e.g. OpenCode Zen finish_reason: network_error)

DeepSeek Harness plugin: a deployment deny list of filesystem roots the model may never touch - fences read, write, search, and shell tool calls at tools/pre-execute

DeepSeek Harness plugin for Readproof: stable readproof:// identity, freshness policy, snapshots, per-run manifests, diff, byte-exact replay, and evidence bundles as model-callable tools.

Local tool-call failsafe for DSH: blocks a fixed list of high-risk shell patterns and credential-file reads before execution, with a per-session hash-linked JSONL audit log, and an optional external Gateway for centralized policy.

Host-anchored provider, authentication, catalog, policy, and model-selection extension for DeepSeek Harness.

System parameter adjustment UI: grouped settings page for timeouts, parallelism, LLM retry policy, model params, web search, permissions and presets; safe profile-config editing with line-level YAML matching and post-write validation.

Egress policy for DeepSeek Harness: a host allowlist on web_fetch and web_search enforced at connect time, audit-mode by default, with OCSF Network Activity records