플러그인

문서-코드 일관성 가드: 버전 헤더/변경 이력 표/디렉터리 트리/모듈·테스트 수/문서 간 참조의 어긋남을 감사하고 심각도순 읽기 전용 수정 제안을 제공합니다.

부팅 시 가드: 손상된 세션 로그를 복구하고, 플러그인 구성을 사전 점검하고, 클라이언트 아티팩트를 vm 검사하고, 호스트 apply()를 스모크 테스트하고, 크래시를 유발하는 번들을 격리해 깨진 플러그인이 시작을 망가뜨리지 못하게 합니다.

DeepSeek Harness용 프로젝트 독립적 멀티 에이전트 협업 프로토콜: 폭주하는 에이전트 루프를 멈추는 루프 가드, 6필드 핸드오프 형식, 위험 등급별 리뷰 라우팅, 고정된 verify→commit→push→review→close 순서. 같은 규칙을 모든 에이전트에 복사하는 대신 하나의 스킬입니다.

DSH용 문자 깨짐 가드 번들: 쓰기 전 특징 기반 깨짐 감지와 검토 후 릴리스(동일 재시도는 통과), 실행 전 pwsh 인코딩 감사(ANSI/GBK/UTF-16/Default). Windows와 중국어 우선.

영속화된 세션 프로젝션 캐시를 보호합니다: 행 단위 JSON 저하 처리로 문제가 있는 프로젝션 단위 하나(예: Map을 저장하는 서드파티 플러그인)가 세션 제목이나 전체 캐시를 다시 멈추게 할 수 없으며, 누락된 제목을 채우는 시작 시 자가 복구 기능도 제공합니다.

DeepSeek Harness용 Git 인식 쓰기 보호 플러그인: 사용자의 커밋되지 않은 변경 사항을 덮어쓸 전체 파일 쓰기를 차단하고, 턴 종료 시 보호된 파일에 어떤 일이 있었는지 보고

위험 작업 정책 검사, 출력 마스킹, 보안 검토 워크플로 추가

스킬과 MCP 설정에서 프롬프트 인젝션, 동형 문자(homoglyph), 숨겨진 유니코드, 위험한 셸 명령, 자격 증명 유출을 스캔

타입이 지정되고 가드가 적용된 컨테이너 제어: ps/logs/inspect/exec/start/stop과 compose up/down을 JSON 출력, 프로젝트 인식 타겟팅, 승인 게이트가 적용된 파괴적 작업으로 제공

Harness-neutral Traditional Chinese enforcer + offline converter (skill, DSH bundle, CLI). One script axis either way + Cantonese/Japanese-only filters. Converts both ways; optional wording preference. Also: an LLM output guard, cp950/GBK console scan.

A structured decision layer for the DeepSeek Harness agent loop: a danger-call gate, output self-check, tool narrowing, and loop guard backed by a pluggable adjudication model.

LAN access for the official DSH Web UI through a gated reverse proxy: DSH keeps its own loopback binding, and a second port adds a password gate, self-signed HTTPS and per-device pairing that can be revoked individually, with a QR code to open it from a phone.

Host- and agent-layer DeepSeek Harness plugin that prices every automatic context rewrite before it lands, asks the human by default, and reports what the provider had to re-read cold.

GitHub operations for DeepSeek Harness: releases, tags, a guarded generic API pass-through, workflow runs, secrets and sanitized mirror publication.

Pre-execution safety valve for DSH that judges with TypeSafe Jev: it hooks tools/pre-execute and decides every bash/pwsh call by first applying offline static rules, then by asking the Jev model — the System One model from TypeSafe, which returns a structured decision instead of prose — one yes-no question ("will this command irreversibly delete or overwrite real data?"), turning the answer into allow, revise, block or escalate; revise hands the model a safer rewrite, escalate offers a one-shot human token; exhausted credit or a missing API key degrades loudly instead of failing silent, and a missing key is requested in the conversation itself (`guard key set`, read from stdin); every verdict is appended to a shared audit log and the text people read is bilingual zh-CN/en.

Customize the dsh UI theme: 12 accent presets, dark-mode aware accents with a contrast guard, density, font family, animation toggle, and raw design-token overrides.

Zero-intervention permission gate for DSH agents on macOS: auto-allows local writes made reversible by git or Time Machine, blocks network, package installs, process control and sensitive-path reads, with full audit logs.

Agent 行为守护桌宠：跨 agent 监控可疑外传（加密打包直传对象存储 / DNS 外泄线索 / 敏感密钥被读），发现即告警，明确确认后按「一次一个」终止目标 agent；事件写入只追加 guard-events.jsonl，并通过 DSH host 工具 + MCP(stdio) 供其它 agent 查询

Consistency guard for long-form writing: scans conversation prose for character, timeline and numeric setting conflicts across chapters, then jumps straight to the conflicting message.

Auto-archives sessions idle beyond a configurable threshold, with safety guards (never touches live or running sessions), plus a full archived-session management UI: list, unarchive, safe delete and content preview.

Keeps a redundant sandbox-escalation argument from failing a tool call. Escalating tools (pwsh, bash, write, edit) advertise the full sandbox_permissions enum, but DSH only accepts a level strictly wider than the one already in effect — a check its own source calls 'deliberately not a schema constraint'. A model that reflexively passes the argument therefore picks the level it is already at and the call dies before running with 'sandbox escalation to "workspace-write" is not strictly wider than this call's current "workspace-write" mode', costing some models a whole turn of retries. This plugin registers one tools/execute waterfall listener and, only on that documented rejection and only when the arguments really carried an escalation field, re-issues the identical call once without it. Safe by DSH's own documentation: the rejection precedes any execution ('nothing has run'), and the corrected call cannot match again, so the retry is loop-free. Reproduced and verified end to end — before: isError true, the command never ran; after: the command's real output, isError false, one tool/call and one tool/result. Zero dependencies.

Control panel for a local credential-redaction gateway in DeepSeek Harness: gateway and model health, audit metrics, a dry-run leak tester, an exemption whitelist, encrypted key management, credential-protected model entries and deployment controls.

One install for the community's verified DeepSeek Harness fixes: a bundle that mounts every guard and patch in a single profile line, plus a read-only projection-cache footprint report.

DSH 插件：移动端切换会话时抑制 composer 的自动聚焦，避免软键盘被顶起