Plugins

All seven Kimi ask/review/challenge/rescue/pursue/swarm/swarm-write providers through the local Kimi Code CLI, with managed hooks, jobs, budgets, and artifacts; also supports Claude Code and Codex.

One-command backup, restore & migration for all DSH user data (~/.dsh) with a visual Settings panel: scheduled auto-backup with tiered retention, sha256 verification, hardened restore with auto-rollback and a result receipt, typed sub-backups (--types), credential redaction into a local vault, private-repo GitHub sync for moving to a new machine, and an out-of-process rescue console (zero-dependency rescue web UI in the backup dir) that works even when the host won't boot. /backup doctor checks and repairs corrupt session logs from a known-good backup and quarantines them before rotation; migrate-check statically predicts which sessions a host upgrade would break (frozen event-list rules, filename/generation mismatch, hardlink support, legacy credentials); the credential sentinel preserves pre-migration copies before the host rewrites them; smart backup snapshots before host upgrades; /backup check-update and /backup update report and install new releases (snapshotting first). Restore handles attachment hard links and arbitrarily large archives (streamed listing). Current npm version 0.13.4; spans DSH 0.1.1-rc.2 through 0.2.0-rc.1, including 0.2.0's install-time peer gate. macOS/Linux/Windows.

Plugin manager with a rescue center: grouped enable/disable by necessity, multi update sources (npm / dshfind market / GitHub), browser-first downloads with an auto-install folder, P2P fallback, pre-boot self-check and broken-bundle quarantine.

Fixes plugins a DSH upgrade left behind: rehearse each rejected plugin in a throwaway home, grant a reversible exact-version exemption when it boots, and refuse when it does not. Also a multi-host compatibility matrix, a public table of every catalogued plugin, and a read-only plugin_health tool.

Serves a live /auth-cookie-sweep page showing how full the local Host's cookie jar is, how many random-port launches are left before the 431, and repairs the jar in one click, while stale dsh-auth-* cookies expire automatically and the rescue budget grows to four times the largest jar seen, with no ceiling; DSH 0.2.2-rc.2 fixed only the desktop shell, so browser jars and older releases still accumulate.

Auto maintenance and resilience for DeepSeek Harness: startup self-diagnosis, automatic repair of missing directories, scheduled configuration backups with rotation, one-click restore, smart-start port detection, plugin-change self-check with automatic rollback, startup failure rescue, and a health watchdog that restarts a stuck-but-alive instance. Ships as a Cordis plugin plus a standalone CLI.

Adds a compact mid-turn steering box above the composer for text, images, and files, with read and pending status, cancel, and unfinished-draft rescue.

Automatic recovery when a turn ends badly: resume after a transient failure, continue after output truncation, re-run after an unfinished todo list, plus a request-level 429 backstop and a client dock with edit-resend, manual retry and stop-and-re-ask.

Detect DSH plugin conflicts and loading failures, quarantine affected bundles and recover them, with offline startup rescue.

Detects repetitive loops in an agent's reasoning output and records, nudges, or cuts them, with a history report. Defaults to a nudge (a reminder injected into the next request); cutting and auto-resuming is opt-in, and should not be combined with another plugin's cutting such as dsh-loop-rescue. Needs DSH 0.2.1+ and Node.js 22.15+.

Standalone rescue for a broken DeepSeek Harness profile: a CLI that runs without DSH diagnoses the crash logs (six classified causes, from real incidents), pre-flights the profile for command-name collisions and files plugins read at construction time, arms a safe mode that loads only official bundles until a healthy boot restores them, and keeps manifest snapshots for rollback. A resident watcher watches the crash-log directories via OS file events — idle costs nothing, and when the loader dies the report is written within seconds, one file overwritten per crash. Windows only: crash logs are read from %APPDATA% and the watcher autostarts from the Windows Startup folder.

Crash-recovery guard for DeepSeek Harness: records plugin install/update recency plus declared compatibility metadata, blocks the offending suspects before the next boot after a crash, and rolls back to the pre-crash plugin startup state when the disable escalation tops out (keeping only the head suspect disabled). Ships a management panel with an interactive capability graph, impact analysis, an execution log of every guard action, early-warning indicators that only observe (they never disable anything), per-project partition isolation, archive-and-reset, and an offline rescue CLI.

Back up and restore the whole $DSH_HOME: one-click or scheduled ZIP archives (optional password encryption applies to manual and agent-made backups only; scheduled ones are not encrypted), a settings section, agent tools to create, list, restore and prune backups, and a standalone restorer (Windows .bat or POSIX .sh) that runs without DeepSeek Harness installed.

Auto-continues turns stalled by DSML tool-call markup leaking into reasoning.

Git workflow studio for DeepSeek Harness: pick a branch model, enforce Conventional Commits, review PRs by defect density, rewrite history safely, rescue lost commits with reflog, and version releases by actual behavior change.

Recovers a session the host already refused for exceeding the context window: it re-checks the gateway message the built-in classifier misses, takes the real window out of that message, and folds the oldest span into one checkpoint without a model call (tool-result pruning, the host compaction engine when it can shrink the projection, or a mechanical digest fold), then retries the failed step; a context_rescue tool and /rescue, /rescue-status expose the same path by hand.

Uses a dedicated model for context compaction rescue and adds manual compaction to the native context popup.

Workspace checkpoints per tool call: records every file mutation inside the workspace (excluding .git and node_modules by default), including changes made by shell commands rather than by write/edit, and stores the previous content of each changed path in a content-addressed store kept outside the workspace. Restores have two modes — undo one record, or return to a point in time — with a line-level diff preview, a dry run by default, and a rescue record written before every restore so the restore itself can be undone.

Savepoints for DeepSeek Harness before plugin updates break it, with offline rollback and a rescue UI that still opens when DSH will not load.

Crash protection for installed plugins: crash cards with one-click disable, static pre-flight inspection, black-box crash telemetry, and a safe-mode rescue profile for a broken UI.

A development safety kit: rolling config snapshots, automatic rollback on plugin failures, boot-failure rescue, and an in-settings management panel.