Plugins

Pinned prompt shortcuts in a single row above the composer — one click replaces the draft with the saved text — plus a searchable panel for pinning, editing and deleting prompts, overflow collapsed into a "More" menu, storage in a Host-side JSON file, and a prompt_shortcuts agent tool that reads and writes the same file.

Gives the DSH conversation the Visual Studio Code editor chrome: a 14px always-visible scrollbar with a flat, translucent thumb, plus a VS Code-style minimap in the right margin (half-window column, media not painted, hover-only minimapSlider, click/wheel scrolling) and auto-expanded older pages.

Desktop tweaks: F11 fullscreen toggle; enables Ctrl+C / Ctrl+V copy and paste in the terminal, both switchable in the General settings.

Global back/forward navigation for the DeepSeek Harness Web UI: remembers every session and whole-page panel you visit, shows a configurable 1-7 entry history strip you can click, and supports browser-style shortcuts plus mouse side buttons.

See what you actually installed: a chip shows how many plugins your profile really loads, and a searchable panel lists every one with its version, its author-written one-liner, and whether it is built-in or third-party. Read-only, zero config.

Opens .blend files in the right-Sidebar document preview: Blender headless exports a cached GLB with scene statistics, rendered by a dependency-free WebGL viewport. Requires Blender 3.6+ on PATH (or set blenderPath).

DSH guard against self-repetition in streamed model output: detects a degeneration loop in reasoning or visible text, aborts the runaway turn and wakes the agent with a corrective notice.

Minesweeper in a draggable floating window with first-click-safe layout, flags, chord and timer.

Two-player chess in a draggable floating window with full rules, undo and PGN export.

Movable radio pill with live visualizer, station search, favourites and self-update check for DSH Web.

A social deduction game played against your own model configurations. A table has N seats (six by default, one of them yours) and some of the rest are played by agents bound to different provider, model, temperature, system prompt and disguise settings; you interrogate them and cross-check the answers to work out which seats are not human. Seat identity and each agent model configuration stay hidden in the host state until a seat is judged, then the disguise parameters are revealed. Every round exports a per-seat conversation JSONL plus the judgment record, and the same seed with the same move script replays byte-identical, so runs with different models or disguise strengths can be diffed.

Turns the right edge of the chat scroll area into a theremin-style strip: the vertical mouse position picks the pitch (higher up, higher note), and blue ticks mark your own messages so you can click one to jump to it. Includes a draggable on/off pill and volume slider.

Adds a checkbox-style switch at the right end of the Installed group header on the DSH Plugins page: it opens a checklist of the unofficial plugins, all checked by default, and toggles only the ones you keep checked. Once everything is off the button flips to enabling them again. Disable/enable only — it never uninstalls a plugin or deletes plugin files and configuration, and its UI copy follows the app language.

Exports the plugin profile together with selected $DSH_HOME files and browser localStorage into one JSON, imports it back after a per-file preview, and can run pnpm install to reinstall the listed plugins; the format is interchangeable with the dsh-market profile backup.

OpenAI-compatible HTTP endpoint for DSH sessions plus a phone panel that reads transcripts, browses files, sends or queues messages, and answers approvals and questions.

System-prompt surface drift gate: every section any plugin or preset contributes to the assembled system prompt is hashed and baselined; a silent rewrite of what the model is told fails loud.

Tool-surface snapshot and drift gate: baselines the full visible tool registry (name/description/parameters, MCP tools included) into a committable JSON file and warns loudly when an upgrade adds, removes or reshapes a tool.

Safety guard that makes self-killing commands impossible: a safe_kill tool that always excludes the caller and every ancestor process, a bash pre-execute check for pkill self-matches, sudo -S stdin grabs, rm -rf / and similar patterns, and an extensible rule library with block / warn / hint severities.

Adversarial review gate for tool calls. It hooks `tools/pre-execute`: a local regex pass over destructive commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP TABLE`, `format`, disk writes) and sensitive paths (`.env`, `id_rsa`, `.ssh`, `.git/`, `$DSH_HOME`) runs first with no latency, and only a hit is escalated to one review-model call that returns allow or deny. Plain reads and ordinary writes never enter that path, so everyday work pays no added delay. Every verdict is shown live in the Web GUI.

Writes a model-generated annotation into every DSH escalation approval prompt — what the command does, what the model intends, how risky it is and why, and what each choice means — and keeps a searchable history of past approvals at /dsh-approval/history, with a diagnostics page at /dsh-approval/diag.

Local-only telemetry service for DSH plugins: records operation trails and error events into a storage-domain KV table, applies a configurable redaction rule set before the write and again when the analysis reads back a record stored before a rule existed, and groups one plugin's failures by feature-code anchor, reporting the window it read, the route each group ran on, and the attempts recorded after its last failure in write order.

Routes eligible bash commands through rtk (Rust Token Killer) so tool output is compressed before it reaches the model, by asking the installed rtk to rewrite each command and adopting what it prints; when rtk is absent the executor behaves exactly like the stock one.

Records every session as one readable Markdown timeline inside the session workspace - the full request sent to the model (system prompt and plugin injections included), user input, replies, reasoning, tool calls and results, file reads and writes, web searches, skill loads, command runs and token usage - with a review page, a per-session tab and configurable capture scope.

Agent Studio for DSH Web: configure models, prompts, per-plugin tool bindings and Skills; trial-run with editable tool results and run history; preserve session capability snapshots; export standalone presets; draft Agents with a guided creator preset.