플러그인

Web 클라이언트용 플로팅 워크스페이스 파일 미리보기 창: 지연 로딩 파일 트리, CodeMirror 미리보기와 창 내 편집·저장, Markdown 및 이미지 미리보기, Quick Open 검색, 대화에서 클릭한 경로 열기.

DSH Web 프로필용 영구 이미지/MP4 배경화면: 설정 → 일반의 배경화면 카드에서 로컬 이미지나 MP4(최대 300MB)를 선택하고, 표면 불투명도와 흐림을 조정하며, ffmpeg/ffprobe가 PATH에 있으면 동영상을 로컬에서 H.264로 압축하고, 미디어를 ~/.dsh/wallpapers에 저장하며, 웹 서버를 9191 포트로 고정해 재시작 후에도 배경화면이 유지됩니다.

DeepSeek Harness의 자기 보호 가드레일입니다. 보호 경로 가로채기, 파괴 전 백업, CLI 자가 복구 명령, 엄격한 샌드박스 기본값을 제공합니다.

DSH 글로벌 경험 플러그인(골격): 로컬 의존성/편리한 경로/네트워크/디스크를 자동 감지하고 세션 간 환경 프로필로 침전, session/event 구독으로 세션별 통계 접기, 저오버헤드 요약을 모든 시스템 프롬프트 턴에 주입, 필요 시 전체를 조회하는 env_profile 도구 — 반복 감지 감소, 세션 가속, 토큰 소비 감소

DashScope OpenAI 호환 API(qwen3.7-flash) 기반의 모델용 image_describe(识图) 도구와 붙여넣기 브리지: 텍스트 전용 세션에서 붙여넣은 이미지가 전송 시 파일 경로로 자동 변환되고 트랜스크립트에 다시 렌더링되어 이미지 허용 단계에서 걸리지 않습니다. DASHSCOPE_API_KEY는 BYOK, 엔드포인트/모델/예산 설정 가능, 리다이렉트 방지 HTTP 클라이언트, 모든 agent preset에서 동작.

주류 DSH 스킨 패키지용 DSH 웹 스킨 관리자: 로컬 경로 또는 GitHub 컬렉션 가져오기, 웹 프로필에서 설치된 스킨 스캔, 미리보기/사용/비활성화/새로고침/삭제, 호스트 측 영구 저장 포함.

채팅에서 Ctrl+클릭으로 파일 경로와 링크 열기: 경로는 OS 파일 관리자에서 해당 폴더를 열고(파일이 선택된 상태), 링크는 새 브라우저 탭에서 엽니다.

행 범위 선택: 워크스페이스 파일을 탐색하고 행 번호가 있는 코드를 미리 본 뒤 범위를 시각적으로 선택해 @path:start-end 참조를 컴포저에 기록합니다. 전송 시 에이전트가 정확한 선택 행을 받습니다.

어떤 파일이든 대화에 가져오기 — 워크스페이스에 저장되어 경로로 참조됨; 파일 형식 제한 없음

DSH plugin: Windows correctness layer — GBK/GB18030/UTF-16/Big5/Shift-JIS encoding detection with confidence and lossy reporting, Windows path legality (reserved device names, 8.3, UNC, MAX_PATH), netstat interpretation and bounded read-only disk inspecti

DSH plugin: 29 deterministic, offline tools for JSON validation with exact line/column, JSONPath queries, YAML/CSV conversion, text diff, regex capture, encodings, hashes, Unicode, CIDR, JWT structure and timestamps. Every call returns a { result, meta }

Synchronize DSH sessions, settings, attachments and project files using a user-configured private HTTPS Git repository or SFTP, with safe-scope online application, offline restore plans and user-confirmed plugin updates. Requires Node.js 24+; the SFTP path also requires OpenSSH (ssh/sftp).

An independent permission gate above the built-in sandbox. It blocks writes outside the workspace and to protected paths even under danger-full-access, refuses whole-file overwrites without a complete fresh read, and keeps ZIP restore points plus Recycle Bin copies before destructive actions.

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.

Windows only; the upgrade path needs DSH_AUTO_UPDATE_LAUNCH_CMD configured. Checks, installs and rolls back DeepSeek Harness CLI updates from the web settings page, switching the launcher pointer only after the new version passes a config-tree check and a health-checked restart, and reverting automatically when it does not boot.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Requires mise installed on the host. A mise-backed toolchain manager for the host machine — a settings page listing the active, installed and available versions, with .mise.toml-driven install, use, uninstall and prune, mise shims prepended to the host PATH on load, and nine agent tools for the same work (status, versions, PATH scan, install, use, prune, uninstall, activate, progress).

Hot-reloads DSH plugin modules without restarting the app (module-cache purge, junction-path matching, bust fallback) and registers a refresh button in the session header so the browser page loads the new plugin bundles.

Move an entire dsh installation to another machine and check it item by item. Three layers go across: the declaration layer (settings, credentials, plugin declarations and vendored link: sources), the state layer (sessions, storages, skills, attachments) and, optionally, the workspace project code. Sessions are rewritten at the zstd header frame only, workspace paths are remapped through an explicit path mapping, and at the end 14 checks (I1–I13 plus I6b) report PASS / FAIL / WARN. A LAN route pairs two machines and pulls the bundle over directly; merge mode diffs a bundle against a machine that has already been in use and stops before writing anything while conflicts are undecided.

Keep a DSH profile identical across machines through any WebDAV server. The plugin collects the five parts that make up a setup — models (the llm-pi-ai line of cordis.patch.yml), defaults (the agent-default-model line), patch (the remaining loader lines), plugins (package.json dependencies plus dsh.profile.bundles) and dirs (extra absolute-path directories picked in the panel, carried whole and restored to the same path, add-only, at most 5 with 2000 files / 8 MiB each) — encrypts them on this machine with a passphrase (AES-256-GCM, PBKDF2-SHA256 at 600000 iterations) and uploads one ciphertext file to <address>/dsh-webdav/dsh-profile.prop, so the server only ever holds the sealed copy (the older dsh-profile.dshsync name is still read). Merging is per part and three-way against the last synced baseline; a conflict keeps the newer copy and archives the losing one under sync/ (latest 5 per tag), every overwrite is sealed beforehand, and deletions propagate except in the plugins part, on the first sync, and in the dirs part, where dropping a directory on one machine only stops syncing it there and never deletes its files. Uploads carry ETag If-Match and If-None-Match so a concurrent change is refused instead of being clobbered. Sync runs on demand or on a 3/15/30/60 minute timer from a settings panel, and an optional local forwarder (off by default, loopback-only) re-serves the same target with locally generated credentials, rewritten PROPFIND hrefs and .prop aliases for extensionless resources. The local state lives in <profileDir>/.dsh-webdav-sync/ (sync.json is written 0600 and holds the WebDAV password and the passphrase).

Command resolution forensics: which file a command actually runs, which PATH entry won, what it shadows, how many entries are duplicates or dead, and whether the copies behind one name report the same version.

Turn-finished music reminder: when an agent turn ends, play a ringtone or any local audio file (bundled synthesised telephone ring, custom absolute path, or an in-page upload), with a floating chip to pause, resume or dismiss it and loop-until-paused playback; configured in Settings, defaults overridable per deployment.

Injects a very short conventions reminder (absolute INDEX path + version) once per session per version; when the conventions version changes, the next turn re-injects it (chat turns included). Optional hard guard: on operation-like turns, write/edit tools are rejected until the session has read the index (chat turns and shell are not blocked by default). Ships example checklists or points at your own directory; zero dependencies, configurable paths. Solves: conventions are written down but never pulled up when the work starts.

Reads a local video or page link with ffmpeg and Paraformer ASR, returning a timestamped transcript plus key-frame images the agent can open; finds candidate videos by keyword and installs its own runtime dependencies on first use. Requires Python 3.8+ on PATH; video_discover also needs a one-time douyin/xiaohongshu login.