Plugins

Registers one agent tool, plugin_guard, that statically scans a DSH plugin package before it is installed and reports a verdict with the reasons: a missing or broken dsh.bundle.patch, a missing dsh.permissions block, install scripts, dangerous APIs and obfuscation, dependency risk, and source that is not indexed and therefore cannot be verified. Read-only: the scanned code is never imported, installed, evaluated or run.

Pre-execution guard: a `tools.guard` predicate decides allow, ask or refuse per permission preset for dangerous shell commands (git hook bypass, catastrophic `rm`, download-and-run, git history rewrites) and for edits to credential paths or to files the turn never read, and hands the model the reason plus a working alternative.

Replaces detected secrets (OpenAI, AWS, GitHub, PEM, Bearer) with deterministic, structurally valid honey tokens before they reach the model or the session file; adds manual marking for values the detectors miss, explicit user-visible restore, and a cross-session canary alarm.

Client-side performance HUD and always-on recorder for DeepSeek Harness: FPS and worst frame, long tasks with four-leg attribution (React fiber / subtree / DOM writes / scheduler), per-plugin callback rate and sync time, DOM growth and writers, JS heap, host event loop and link RTT, plus a night-watch recorder that keeps the worst stalls and exports incident packs for replay.

Windows only; the upgrade path needs DSH_AUTO_UPDATE_LAUNCH_CMD configured. Checks, installs and rolls back DeepSeek Harness CLI updates from the web settings page, switching the launcher pointer only after the new version passes a config-tree check and a health-checked restart, and reverting automatically when it does not boot.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

Windows-only DSH sidebar preview and Dart hot reload for configured Starcompanion / Operit2-derived projects; requires the project preview scripts, a prebuilt debug APK, Android SDK, Flutter and scrcpy 3.3.3.

Plugin diagnostics for the dsh web GUI: finds plugins that failed to load, bundle rows that never started and broken file links, then reports the findings. Read-only: it does not repair, journal or undo anything.

List the LLM provider routes a running DSH process registered and run one real streamed call.

Session-level verdict on whether compaction would lose unlanded state; structurally refuses per-block screening.

Mirrors assistant streaming frames (deltas, blocks, commits, turn fences) to a configurable NDJSON sink for external consumers.

Hot-reloads DSH plugin modules without restarting the app (module-cache purge, junction-path matching, bust fallback) and registers a refresh button in the session header so the browser page loads the new plugin bundles.

Low-code project workspace for the DSH web UI. A multi-level file tree with a push-status ledger, in-panel source view and edit, pre-push static checks, and a scaffold for an empty workspace. Requires the MagicalCoder platform and a server profile (address + designer account) for push/pull.

Checks installed DSH plugins for version-declaration and API risks against the current host, with source locations when available, certainty, impact basis and coverage limits. Adds a compatibility settings panel, plugin-detail findings/badges, a compat_check agent tool and a skill provider.

Configuration vault for DeepSeek Harness: snapshot, diff and safely roll back profile patches, plugin manifests, skills and workspace lists, with credentials excluded by default.

Turn-end quality gate: when the turn edited code or config it walks each file up to its project root, runs that root one check from a fixed whitelist (`pnpm check`, `cargo check`, `ruff check .`, `tsc --noEmit`) and, only if that check really ran and failed, opens a new turn carrying the failure output instead of letting the turn close.

Move an entire dsh installation to another machine and check it item by item. Three layers go across: the declaration layer (settings, credentials, plugin declarations and vendored link: sources), the state layer (sessions, storages, skills, attachments) and, optionally, the workspace project code. Sessions are rewritten at the zstd header frame only, workspace paths are remapped through an explicit path mapping, and at the end 14 checks (I1–I13 plus I6b) report PASS / FAIL / WARN. A LAN route pairs two machines and pulls the bundle over directly; merge mode diffs a bundle against a machine that has already been in use and stops before writing anything while conflicts are undecided.

Keep a DSH profile identical across machines through any WebDAV server. The plugin collects the five parts that make up a setup — models (the llm-pi-ai line of cordis.patch.yml), defaults (the agent-default-model line), patch (the remaining loader lines), plugins (package.json dependencies plus dsh.profile.bundles) and dirs (extra absolute-path directories picked in the panel, carried whole and restored to the same path, add-only, at most 5 with 2000 files / 8 MiB each) — encrypts them on this machine with a passphrase (AES-256-GCM, PBKDF2-SHA256 at 600000 iterations) and uploads one ciphertext file to <address>/dsh-webdav/dsh-profile.prop, so the server only ever holds the sealed copy (the older dsh-profile.dshsync name is still read). Merging is per part and three-way against the last synced baseline; a conflict keeps the newer copy and archives the losing one under sync/ (latest 5 per tag), every overwrite is sealed beforehand, and deletions propagate except in the plugins part, on the first sync, and in the dirs part, where dropping a directory on one machine only stops syncing it there and never deletes its files. Uploads carry ETag If-Match and If-None-Match so a concurrent change is refused instead of being clobbered. Sync runs on demand or on a 3/15/30/60 minute timer from a settings panel, and an optional local forwarder (off by default, loopback-only) re-serves the same target with locally generated credentials, rewritten PROPFIND hrefs and .prop aliases for extensionless resources. The local state lives in <profileDir>/.dsh-webdav-sync/ (sync.json is written 0600 and holds the WebDAV password and the passphrase).

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

Moves a DSH profile to another machine with its plugins, not only its files: packs the plugin bundle selection and the whole settings layer into one JSON file, then on restore writes the configuration back, restores local plugin sources and plugin-owned data, and installs the plugin bundles the backup recorded that the new machine is missing (plugin manager first, pnpm as a fallback).

macOS Desktop only: one-click restart of the DeepSeek Harness Electron app. Confirms before interrupting running turns, blocks during plugin install/update, and records restart phases/logs.

Turns what a design, plan or document claims into a model and decides it: UML diagrams rendered, read and reviewed; state machines, protocols and data models checked as models; migrations tested for coverage and rollback symmetry; concurrency claims mined and routed to the checker that can decide them; dependency graphs audited; reports diffed.

Inventory every listening TCP endpoint and grade each holder as agent-spawned, workspace, dev-server, unattributed, system or protected; only the first two can be auto-selected, and a reap previews its descendant-closure plan unless confirmed.

Task-priority session notifications for DSH: main-line sessions alert immediately on completion or failure, side-line completions can be batched into one alert, and questions or permission requests alert as they arrive; supports multiple main-line markers and a balanced mode that treats every session as main-line while nothing is marked.