Plugins

String-matches tool-call input arguments, blocks dangerous tool calls (deny) or allows them with an injected warning (warn), and ships a full rules-management panel.

Vets local, npm, and GitHub plugin source before installation, blocks configured high-risk tool calls at runtime, audits output secret patterns, and writes HMAC-chained local audit logs.

Source-aware prompt injection guard for DSH: tracks untrusted turn context, detects injection signals, scores sensitive sinks, and blocks high-risk tool calls with explainable audit logs.

Claude-Code-style lifecycle hooks: configured shell commands run before/after model tool calls with a JSON payload on stdin; a non-zero pre-tool exit blocks the call.

Dracula (VS Code) dark theme for the DSH Web GUI: the vampire palette mapped onto the product colour tokens, plus a denser type scale, a 1080px reading column and code blocks that scroll instead of re-wrapping. Dark mode only.

Bridges DSH to a local MemVault store: core memory blocks injected into the system prompt, finished turns extracted through MemVault's own pipeline, and a panel to browse, trace, review and replay what was stored.

Readable transcript export for DeepSeek Harness: turn any Session into a Markdown / HTML / ZIP transcript with reasoning blocks, tool calls and results, images and usage — from the Session header or the /export-md command.

A dsh-better-sidebar reading view for .docx files: headings from the style map, paragraphs, lists, real table cells, inline pictures and header notes. Ceilings on archive size, per-part inflated bytes and rendered blocks keep a document from freezing the tab.

Adds a Run button to shell code blocks in replies, executing the snippet through the host shell service and showing its output in a floating bottom-right dock, or in one bottom-panel tab per run.

Pre-install compatibility gate for DSH plugins: locks the resolved version, checks peer/engines declarations, dry-installs into an isolated DSH_HOME and boots it with a timeout, blocks on any failure, and restores the profile if the real install fails. Optionally intercepts dsh-market install/update clicks. Compatible with DeepSeek Harness 0.2.x.

One-click draft polish for the DSH composer: rewrites your spoken draft into professional wording, sends only the draft snapshot (never conversation context), and never blocks sending if the LLM is unavailable.

Renders mermaid code blocks in the chat as diagrams in place (flowchart, sequence, class, state, ER, gantt, pie), with zoom, source toggle, copy PNG and SVG download.

Single-model disable gate: hides denied models from DSH catalogs, blocks direct dispatch with an in-protocol error chunk, and exposes a settings UI for the denylist.

Step-0 observation probe for dsh-compaction-audit: logs every compaction/* session event and probes whether shadowedSeqs still resolve to readable events in session.events. Observe-only; never injects, never blocks.

A full-screen interactive terminal UI for the DeepSeek Harness agent runtime — live streaming, reasoning blocks, tool cards, sessions, permissions, plan mode, and a full slash-command suite. The web UI, reimagined for the terminal.

DeepSeek Harness plugin that steers reasoning toward Simplified Chinese and translates eligible reasoning blocks.

Client-only dsh plugin that renders Mermaid fenced code blocks as SVG diagrams in the web UI

Blocks agents from reading or writing sensitive files (.env, credentials, key material), masks leaked secret-shaped values in tool results, keeps an audit journal, and exposes safe sg_* inspection tools that never print raw values.

Code smell radar: statically scans TODO/FIXME debt, stub implementations, long lines, oversized files and duplicated blocks, with severity-sorted read-only fix suggestions.

Mermaid diagram renderer for the Web UI conversation: renders mermaid code blocks into interactive cards (zoom, fit-width, fullscreen viewer, preview/code toggle) with official UI primitives, and keeps the original code block with an inline error banner when rendering fails.

Git-aware write guard plugin for DeepSeek Harness: blocks whole-file writes that would overwrite the user's uncommitted changes, and reports what happened to protected files at turn end

Enforced pain-point gate: after two non-converged experiments it injects the three questions, denies non-investigative tool calls until answered, and blocks same-direction retries.

Convert Notion blocks and Markdown in both directions, with no API client and no external dependency. A Notion paragraph is an array of rich-text runs while Markdown says one string, so the two directions are a split and a merge rather than a pair of inverses — rich-text runs are cut at every annotation boundary one way and re-merged the other, with fences widened when the content already contains backticks. Reports every lossy step instead of swallowing it.

Prices tokens with the official model price table, keeps the per-session and global running cost beside the composer context meter, mirrors your DeepSeek account balance in the sidebar, blocks a turn once this period passes your own global ceiling (clamped to that balance) or a per-session ceiling (each session sets its own, independently), and resets the billing baseline per session or globally — the two are independent, so resetting one never resets the other — so the period goes back to zero while history only rolls into the lifetime total.