Plugins

Manages DSH skills and MCP servers from the web settings: skill cards with hot enable/disable, workspace scopes, groups, batch migration and drag-and-drop import, plus stdio/HTTP MCP CRUD with connection tests, secret redaction and the unified dsh-panel CLI.

Read-only security and compliance plugin for DeepSeek Harness: prompt-injection detection, Chinese-PII redaction, and a local configuration audit with redacted, reproducible reports.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.

Task-event notification center: 6 event kinds (ask / approval / completion / subagent completion / error / turn end), dual channels (browser Notification + host system toast) plus Bark/Webhook push channels (ntfy, Gotify, self-hosted gateways); quiet hours with urgent exceptions, approval-timeout re-reminders, completion-storm aggregation, and notification text redaction.

Recoverable file and Git operations for coding agents, with shared recovery and redaction tools, a DSH shell adapter and audit records; optional native text-read protection is off by default.

A governed registry for MCP connectors (stdio and streamable-http): four-level fail-closed authorization, mcpServers JSON import that rejects malformed args, credential redaction at every output boundary, an agent bridge that returns an honest review verdict instead of a fake approval, and a /mcp-reg operator console plus a settings page.

Four-module session companion: smart conversation export (Markdown/PDF/JSON/PNG long-image with privacy redaction and batch ZIP), context handoff summaries with template save/import, API cost optimization (live official pricing, peak/off-peak scheduling, daily/monthly budgets, model routing), and global conversation search with in-chat find (Ctrl+F, CSS Custom Highlight API).

Drive PdfCraft from the agent: read and extract text, render pages to images, rotate, delete, reorder, combine or split pages, and audit faux redactions. Exposes PdfCraft's tool set as both commands and an MCP server. Requires the matching ArtCraft app CLI installed locally; it is not bundled.

Executor/advisor workflow ported from pi-advisor-flow: the executor calls ask_advisor for a second opinion at key decisions, after repeated failures and before completion; equivalent repeated tool calls are intercepted before execution for an advisor review with a proceed/revise/blocked verdict, and hard mode force-reviews every turn before it closes. Per-call token and cost ledger with /advisor status readout, privacy tiers for repo context and file contents, six-shape secret redaction, and a web settings card; advisor failures never stall the main loop.

Export any DeepSeek Harness session as a single self-contained HTML page that opens offline, with per-message picking, collapsed tool calls and default redaction of local paths and credentials.

A DeepSeek Harness document-redaction workbench adapted from whatcccup/cece_legal_skills (MIT). Processes DOCX, PDF, TXT and Markdown locally, with human review, PDF masking and OCR-line review, case-consistent placeholders, Word restoration, history and optional Agent rule previews and rollback. Requires Python 3.9+ and first-run dependency downloads; model access is needed only for rule generation. Version 1.4.0 is a prerelease verified on macOS Web and DSH desktop; new Windows setup and OCR paths await on-device revalidation. The upstream is a standalone offline tool/SkillHub skill, not a DSH plugin, so it cannot be installed alongside this bundle.

Irreversible secret-scrubbing guard: rewrites access keys, bearer tokens, and private key blocks into `[REDACTED:<category>]` placeholders before they reach the session log and the model.

Export and import DeepSeek Harness configuration across machines as same-OS .dshmig archives, with credential redaction, verification and rollback.

A DeepSeek Harness bundle adapted from whatcccup/cece_legal_skills (MIT) for local DOCX, PDF, TXT and Markdown redaction with human review, PDF masking, local history and optional Agent rule edits. Requires Python 3.9+ and first-run dependency downloads. Model access is needed only for rule generation; 1.3.0 is a development prerelease and Windows acceptance is pending. The upstream is a standalone offline tool/SkillHub skill, not a DSH plugin, so it cannot be installed alongside this bundle.

Maintained fork of dsh-approval-gate. A neutral operation whose confirmation count has reached the threshold auto-approves when the judge is unavailable, instead of prompting a human again; approver-facing explanations are generated in Chinese from the real sandbox mode, command and paths. Also carries deterministic hard-deny for credential exfiltration and system-path destruction, judge-input redaction, a judge model candidate chain, fingerprint-scoped allow rules, and an approval view with unified diff and one-click revert.

Session export and compliance archiving for DeepSeek Harness: deterministic redaction, Markdown/JSONL/PDF outputs, on-disk archive management, and a trend/audit view.

Turns the latest completed DSH session turn into a shareable vertical recap video: editable five-scene storyboard, host-side privacy redaction, optional AI polish and TTS narration, MP4/WebM export with PNG cover.

Redacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.

Cross-session memory as plain Markdown per workspace: weighted injection, bi-temporal invalidation, TTL review with stale markers, credential redaction, error and session retrospectives, SOP skills, and approval-gated self-improvement proposals.

Cut LLM costs: a Jev (System One) classifier vets each turn against a declarative policy and recommends the subagent model route, so routine work runs at flash rates while the main model keeps the hard parts; explicit /route trigger, runtime delegation-capability gate, credential redaction, and offline policy replay over the verdict log.

Share a selected chat segment as Markdown, HTML, TXT, or PNG; Session-header dialog with range or multi-select, redaction, tool calls, and subagent conversations, plus the /share command.

Agent-native API client for DeepSeek Harness: Postman-like debugging UI (request tree with context menus and full keyboard navigation, resizable sidebar, layered auto-generated header preview with per-item suppression and constant secret masking), six api_client_* agent tools sharing the same request core, redaction and audit chain with the human UI, Postman Collection v2.1 import with a migration report, environment variables with SecretRef indirection, and a fail-closed SSRF network policy.

Structured machine-readable CI output for DeepSeek Harness: JSON/NDJSON session reports, JUnit XML, semantic exit codes, artifact collection and privacy redaction - a dsh profile bundle plus a standalone CLI.

Runtime security gate on the tool pipeline: denies calls naming hosts outside an egress allowlist, redacts credentials from results at the canonical value rather than only the rendered content, and appends every decision to a JSONL audit log; ships in monitor-only mode.