Plugins

Pair a second model that passively reviews each turn and injects notes.

Lets the primary model ask an independent reviewer model to review a decision it has already made, with off, shadow and advisory modes. Requires your own service implementing POST /v1/decision.

Second model passively reviews each turn and injects notes.

Pair a second model that passively reviews each turn and injects notes.

On-demand second opinions through ask_advisor, with editable requests, per-call human approval, and text advice from a model configured in DSH.

Tool-call discipline for DeepSeek Harness with behavior prompts, failure-driven concurrency reduction and retry guidance, post-write checks with backup rollback, high-risk command gates, change summaries and verification reminders, advisory project-memory checks, configurable project-discipline reminders after compaction or at intervals, and compliance statistics.

Executor/advisor workflow ported from pi-advisor-flow: the executor calls ask_advisor for a second opinion at key decisions, after repeated failures and before completion; equivalent repeated tool calls are intercepted before execution for an advisor review with a proceed/revise/blocked verdict, and hard mode force-reviews every turn before it closes. Per-call token and cost ledger with /advisor status readout, privacy tiers for repo context and file contents, six-shape secret redaction, and a web settings card; advisor failures never stall the main loop.

Pairs the running executor with a stronger reviewer model through zero-parameter advisor() calls and step-based patrol checks, returning plan, correction, or stop guidance.

Adds human-facing TypeSafe Jev advice to DSH multiple-choice prompts, on demand by default with optional automatic requests, recommendations, probabilities, confidence, close-call warnings, copyable suggestions, one-click adoption, profile-scoped card layouts, temporary decision preferences, optional request previews with common-credential masking, and local health checks with sanitized diagnostic exports.

Advisor reviews that converge over rounds, an engineering mode whose writes require a design token, escalation of a task to a stronger model, and parallel multi-model consultation; a settings page edits the model routes, timeouts and budgets.

Autonomic heartbeat for each root agent: silent pulses diff the session's todos, Agent Team board and goal against what the last pulse saw, and speak only on a signal — L1 report, L2 ask (ask_user_question), L4 escalate — never starting work. Each message carries a why-now line, an optional one-line physiology signature (time since your last message and how many times it has reached out today) and a compact task snapshot (800-char cap); a dedupe window, quiet hours, a daily budget, refractory/restart cooldowns and persisted vitals keep it quiet, while busy-safe followup injection never stacks. It shares one advisory speech floor with dsh-plugin-memory (~/.dsh/proactive-cooldown.json, 180 s) so the two never talk over each other, stays silent while a child subagent or teammate is still working, and surfaces a "subagents working · N" pill in the conversation header (polling pauses while the tab is hidden). v0.8 adds a diagnostics panel that explains recent quiet pulses and names the current speech-floor holder, plus panel controls for the arbitration window, presence suppression and the physiology line; its settings section carries a stroked heart mark (16×16, stroke 1.3, same spec as dsh-plugin-memory). v0.8.1 makes the plugin compatible with DSH 0.2.2-rc.2: the agent registry is read with agents.roots() when available and falls back to agents.list() on rc.2, and every agent/created listener is exception-guarded — on rc.2 an unguarded throw there rejects agent registration and no session can be created, so rc.2 users must upgrade to 0.8.1 or newer.

Plugin security review for DeepSeek Harness: dependency advisories, contextual static evidence, a call-time gate for high-risk plugins, and reversible review-gated enforcement.

Verification gate for DSH agents: every acceptance criterion must be backed by server-stamped real tool evidence before the completion gate lets a goal through (advisory audit, enforce gate, durable permits).

Quality-aware in-agent plugin discovery: a find_dsh_plugins tool that ranks the whole dsh-plugin topic through a daily quality-scored index (installable manifest, curated listing, license, activity) merged with a live gh search — zero LLM API cost, risk flags and exact install commands in every result.

Peer messaging between user-launched sessions in one workspace: discover peers, relay coordination messages, pause reception, and get advisory write-scope conflict warnings.

Automatic second-opinion review: a restricted child session re-reads the agent's recent work with read-only tools and delivers at most one evidence-backed note, or stays silent. Requires a model route in the config; the plugin stays disabled until one is set.

Companion sidebar panel for the Kaipu site plugin: shows the built-in advisory team and seat status. Install together with kaipu-platform — seat data comes from the site plugin's gateway endpoints; a standalone install honestly reports "channel not ready". Removable: uninstall it and the site plugin stays fully usable.

Consult multiple expert advisor models in a retro CRT chat-group card: one ask_advisors call runs an auto-deepen pipeline (driver deep-question, advisor relay, synthesis conclusion) with SSE streaming, 26 provider presets, a configurable daily quota, stop/resume, and optional advisor tool calling.

Headless Claude Code consultations with advisor, reviewer, and designer roles, returned as reference answers.

Companion sidebar panel for the Kaipu site plugin: shows the built-in advisory team and seat status. Install together with kaipu-platform — seat data comes from the site plugin's gateway endpoints; a standalone install honestly reports "channel not ready". Removable: uninstall it and the site plugin stays fully usable.

Persistent Codex advisor threads for DSH sessions, with six native tools, a Codex trail, a sidebar status card, and explicit model/effort provenance. Requires a locally installed Codex CLI with app-server support and a logged-in ChatGPT/Codex account (the CLI is not bundled); tested on Windows 11 with DSH Desktop 0.2.1-rc.5.

Injects the non-obvious operating rules of Agent Teams into the Lead session through one ordered system-prompt section: plan the roster before spawning, roster slots are never released, write scopes are advisory, and wait_agent short-circuits when no peer is running.

Master Duel utility panel for DSH: card lookup with banlist filters and AI-assisted effect search, related cards, rarity badges, favorites, a deck builder with drag-and-drop and a collapsible favorites panel, engine-tested opening hands and hand_odds opening probabilities, deck-type rankings, and deck checking. Card images and text are fetched from third-party sources at runtime; the plugin bundles no card data and requires the separate master-duel-ai-advisor MCP server.

Advisory permission checks for DSH tool calls: risk tiers, a path sandbox (empty allowed_roots denies every path-like call), a per-minute call limit and a JSONL audit, exposed through gate_check / gate_check_path / gate_policy and ctx.gate — other plugins or prompts must call the gate; it does not intercept tool calls by itself.