Plugins

Permission mode between workspace-write and full access: shell commands are checked by deterministic rules and a subagent review; irreversible or system-level actions require explicit approval.

Ranked subagent delegation: role-based model routing with failover, per-route reasoning effort, model-transparent labels, fork delegation, and a visual route editor.

Exposes bounded Prometheus metrics for DSH sessions, agents, LLM calls, tools, approvals, subagents, and jobs, with a Grafana dashboard and a loopback-only endpoint by default.

Vision for any DSH route: paste images in the Web composer with intent-aware auto-analysis, delegate workspace image reads to a Kimi/MiniMax vision subagent, and materialize pasted originals for editing.

A GUI subagent-model selector beside the main model seat: pick a model and reasoning effort per session, applied to every in-process subagent.

Runtime plugin loading for the Web UI: a watched hot directory installs/updates client-plugin bundles live on every open page, no restart. Includes a right-column subagent dashboard example.

PMO 审查循环按钮 —— 为 AI 会话挂载一位“资深项目总监”。持久审查子代理 + 双线路 + STATUS 协议（CONTINUE/DONE/NEED_HUMAN）自动循环（DeepSeek Harness 插件）

Make your dsh ready for serious coding. (Tools x Schemas)^REPL. `skill://`, `ctx://`, `agent://`, `dvc://`, `dsh://`, IPython REPL, Context as Variables, cross compactions recallable, full context revive. `hash-edit`, `dvc://browser`, subagent as function, workflow as function.

Raises one desktop notification when a turn stops, a question waits, or an approval waits. Each event has its own switch; subagent Sessions stay quiet; a click opens the Session. Uses the page's own Notification API, so there is no helper app or install-time registration.

Wires Claude Desktop, Claude Code and Codex to a local DeepSeek Harness over MCP, and adds a status panel to the DSH web UI.

Session-scoped system prompts: maintain a library of prompts in a settings page and tick them above the composer to inject into the current session only (subagent child sessions inherit via parentSession; empty tick list opts out), plus quick prompts that paste their text into the composer draft on click.

Bind prompts to individual providers and models for use across Standard-mode conversations and subagents.

A Dynamic-Island-style status panel that lives in the macOS notch and lists running turns, background jobs and subagents, with a completion banner and a spoken reminder.

Tool-surface governance for DeepSeek Harness: six scope-separated deny lists cut each agent's tool visibility through the host tools.restrict() API, unseen tool names wait in a pending gate, and dispatch_composed assembles a minimal surface from capability tags — a tasks array runs subagents in parallel, and a continued subagent keeps its original surface. Every decision goes to an append-only ledger that rotates into dated archives without ever losing history.

Defines named roles that each pair a persona with a bound model and fallback chain, and exposes one delegation tool per role, so subagents are dispatched by role name instead of a provider/model string.

Adds one system-prompt section that limits delegation to subagents and teammates to two cases: adversarial review of freshly produced output, and one-shot context reading that returns a summary.

🌐 A DeepSeek Harness plugin: pick the language beside the model selector and every reply — sessions, subagents, teammates, side chats — follows. Auto releases the pin.

Run Google Antigravity CLI (agy) as DeepSeek Harness subagents, with Gemini web Deep Research and parallel/team modes.

HTTP API for DeepSeek Harness: agents / sessions / event timeline / SSE streams / steering / messages / runs / files / questions / subagents, with archived run manifests, per-key metering and tenant isolation.

Sound cues played by the host operating system, not the browser: three bundled WAV files fire through the machine's own audio (SoundPlayer on Windows, afplay on macOS, paplay/aplay on Linux) when an agent's turn completes, when the context is compacted and when the agent is waiting for your answer; subagent turns can be included, cues fired closer than a configurable interval are skipped, and each bundled sound can be replaced with your own file via plugin config.

Health check for a DSH profile: scores skills and agent instruction files, subagent definitions and presets on one shared 18-bucket S–E grade scale, with a sidebar panel, four dsh360_* tools, and a backup with undo for every write.

Session trash for DeepSeek Harness: move cold sessions out of the sidebar into a recoverable trash, restore them within the retention window (30 days by default), or delete their logs permanently. A trashed subagent tree moves and restores as a whole, a shared DSH toast offers undo, and the settings page supports search, sorting, multi-select batch restore and emptying the whole trash.

Export a DSH session tree (lead plus subagent fleet) to two Markdown files from one frozen snapshot: a readable narrative summary and a complete raw archive. Target directories are checked against the session file policy, and a blocked location falls back to the workspace exports folder.

Adds a "Delete session" item to the sidebar session menu that moves the session transcript directory to the Windows Recycle Bin, or to a plugin trash folder under ~/.dsh/plugin-data when that is unavailable (restorable either way), and deletes its spill files and projection cache in one request, detaching a live session first and cascading to its subagent sessions. A setting switches the confirmation step off so deleting takes one click; duplicate delete items registered by other plugins are collapsed so only one remains.