Plugins

Tools guard that moves agent-issued `rm` targets to the macOS Trash instead of deleting, with a shell-aware lexer covering compound and disguised commands; a switch in Settings → General turns it off.

Background security auditor for DeepSeek Harness: scans agent outputs for secret leakage, checks command safety before execution, and surfaces findings in a persistent audit log.

Crash protection for installed plugins: crash cards with one-click disable, static pre-flight inspection, black-box crash telemetry, and a safe-mode rescue profile for a broken UI.

Auto-adjust model reasoning effort per task (off/low/high/max): task classification, \[effort=...] markers, in-turn error escalation, DeepSeek peak-pricing-period capping with countdown notices, and manual-selection priority.

WSL (Windows Subsystem for Linux) bridge for DeepSeek Harness: run Linux commands, manage distros, convert paths, and copy across the Windows/Linux boundary.

Microsoft Agent Framework (MAF) plugin for DeepSeek Harness: validate, run, and scaffold declarative agents and workflows (YAML).

Real AST-based scan of installed plugins for malicious-intent patterns (dynamic eval, cross-plugin writes, exfiltration-shaped network calls), with an optional periodic schedule and auto-quarantine on critical findings.

Tiered task queue as the single source of truth for DSH↔Hermes work (reset > approve > review): enqueue tools for all submission paths, lease/claim model with concurrency 1, priority aging against starvation, atomic busy mutex, and a Hermes-side consumer (cron */1 + monitor gating) that drains tasks, writes review-handoff requests with single-slot checks, and invokes the reset agent.

Hands DSH reset requests to an external ops agent via a versioned JSON protocol: preflight snapshot, pre-restart maturity gate (no pending approvals, free disk, cooldown), restart, health check, and interrupted-work recovery, with the result delivered back to the requesting session.

Auto-approval agent for DSH permission requests: rule layer (denyAlways/allowlist) plus Hermes Pro semantic adjudication with quick-fail retries, fail-closed to human when Hermes is unavailable, rejection feedback returned to the requesting session, and approve tasks enqueued into the task queue with a shared busy mutex.

Replaces the headless startup to add --model provider/model, --resume <id|latest>, --continue and --session-info flags to dsh headless runs.

Quality suite: background tsc --noEmit diagnostics fed back after the agent edits TypeScript, plus a /code-review command running five parallel review lenses with confidence scoring; absorbs dsh-code-check and dsh-command-code-review.

ServerChan3 (Server酱) push notifications when a turn finishes — title, model, project directory, git branch, status and a reply excerpt, with subagent filtering and fire-and-forget delivery.

Git Changes tab for the DSH web GUI: staging, diffing, AI-drafted commit messages, branch/merge/stash/worktree operations and sync, with live updates via fs.watch plus a changeToken poll.

✨ One-click prompt polisher for the DSH composer — an agent refines your rough draft in a side chat over multiple turns, and you copy the result back when you're happy.

Turns a product or UI request into an implementation-ready design spec with /ui-workflow and /ui-rerun. Analysts run through a read-only ui_analyst tool, and the lead agent writes docs/ui-workflow reports.

Intercepts turn-stopping to force one critique-and-improve round after each completed turn before the agent stops.

Claude Code style /init command and tool that writes a minimal CLAUDE.md and symlinks AGENTS.md to it.

Captures every plan the agent presents through exit_plan_mode as markdown under <workspace>/.dsh/plans, opens a review window, and keeps a Plans history tab recording the outcome of each plan.

Preset workflow template library: 12 reusable orchestration script templates with wf_template_list / wf_template_search / wf_template_run / wf_template_validate tools and static template validation.

Resolves unique kebab-case skill substrings in slash tokens, so /oneshot can load game-package-oneshot.

Product-thinking companion for DeepSeek Harness: clarifies negative boundaries first, separates facts from assumptions, routes through seven product lenses, and persists confirmed decisions to project memory.

Serves the obra/superpowers skill catalog to the harness and injects its using-superpowers bootstrap as a persistent, compaction-safe system-prompt section.

Skill provider that installs the whole @dennisrongo/skills catalog as one npm dependency, so skills install and update without cloning or linking directories.