Plugins

Framework-upgrade safety and plugin gating for DSH: a pre-upgrade session-format contract preflight that adapts incompatible plugins and agent presets before you upgrade, automatic rollback on failure, auto-quarantine of plugins that broke a boot, plus environment fingerprinting and a public contract-rule pack. The built-in multi-source marketplace is a discovery layer only.

One-command backup & restore of DSH user data with a visual Settings panel: scheduled auto-backup, sha256 verification, hardened restore with auto-rollback, typed sub-backups (--types skills), credential redaction into a local vault, GitHub sync for cross-machine moves, and an out-of-process rescue channel that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials layout) and the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades and quarantines corrupt logs before rotation. macOS/Linux/Windows.

Plugin manager with a rescue center: grouped enable/disable by necessity, multi update sources (npm / dshfind market / GitHub), browser-first downloads with an auto-install folder, P2P fallback, pre-boot self-check and broken-bundle quarantine.

Model high-availability failover (quarantine, circuit breaking, probe recovery) and subagent orchestration (fanout/pipeline/supervisor) with bilingual settings UI.

Boot-time watchdog for DSH web: detects broken plugins, disables them persistently so the UI opens, with quarantine audit, automatic probe recovery, and one-click restore.

Task-to-skill pairing meta-skill with a laziness ladder for minimal loading, a user-editable routing table, and a quarantine, SkillSpector scan, human-approval install flow.

Global prompt-injection / context-virus defense for DeepSeek Harness: scans tool arguments, tool results, pre-model messages and the outbound stream; quarantine/block/monitor modes, canary trap, and an evolvable on-disk signature library with learn/import/export.

Test-stability tools: repeatedly run vitest/jest/pytest/node:test suites, classify flaky cases, keep history, maintain a quarantine manifest and health self-check.

Boot-time guard that repairs corrupt session logs, preflights plugin composition, vm-checks client artifacts, smoke-tests host apply() and quarantines crash-causing bundles, so a broken plugin can never brick startup.

Task-to-skill pairing meta-skill with a laziness ladder for minimal loading, a user-editable routing table, and a quarantine, SkillSpector scan, human-approval install flow.

Skill shelf for DeepSeek Harness (dsh): a sidebar panel next to Plugins and Automation that lists every skill DSH resolves, discovers and installs skills from skills.sh, upgrades them safely (previous version quarantined, never deleted), uninstalls or res

In-place redaction and row-level rollback for session logs, preserving the seq-equals-row-index invariant that makes deleting a middle row corrupt the entire log. Originals are copied to a quarantine sibling before any write, and the reader's own semantics are replayed as a pre-write gate.

Scan, view, and safely clean local AI terminal session histories (Claude Code, Codex CLI, WorkBuddy, DSH) from a settings card — quarantine-first with SHA-256 manifests, one-click restore, audit log, and phrase-confirmed hard delete.

Real AST-based scan of installed plugins for malicious-intent patterns (dynamic eval, cross-plugin writes, exfiltration-shaped network calls), with an optional periodic schedule and auto-quarantine on critical findings.

Evidence-backed Skill self-evolution for DeepSeek Harness: redacted trajectory learning, quarantined proposals, arena validation, canary monitoring, automatic rollback.