Plugins

Housekeeper de ambiente para o agente: inventário de toolchain (node/pnpm/git/gh/ffmpeg/browsers), verificação de scratch/cache com limpeza de um clique protegida por lista branca, e editor do arquivo de regras da máquina (AGENTS.md) - tudo nas configurações da GUI web.

Separador Install em Settings → Plugins: instala, atualiza e remove qualquer plugin por especificação npm, `github:user/repo` ou caminho local através do mesmo percurso da CLI `dsh plugin add`; verifica atualizações contra npm latest ou GitHub HEAD com proteção contra downgrade e verificação da versão resolvida, ignora o período de arrefecimento de lançamento do pnpm 11 em cada adição/remoção e reinicia o serviço através da shell DSH Desktop ou de um processo relay sob `dsh web` autónomo.

A focused end-user QA surface backed by native DeepSeek Harness sessions

Keeps what the agent builds at runtime: turns a `cordis_define` dynamic package into a real installed plugin that survives restart, writing the bundle and registering the profile layer with no pnpm, no network, and no build authorization.

Engineering work-tools for DeepSeek Harness: registers two model-facing Host Tools — a scoped `git` runner, and a package-manager runner (`dev`) that detects npm/pnpm/yarn/bun from the workspace lockfile and picks the right verb per manager. Both run through dsh's sandboxed shell and return structured stdout/stderr/exitCode, so the agent gets focused, reviewable results instead of raw bash, and adding another tool is a copy-paste of one register block.

DeepSeek Harness plugin: discovers the npm/pnpm/yarn/bun scripts of the current workspace (never descending into node_modules) and runs any of them in the background from a compact control in the composer area or the session header.

Scan project lockfiles (npm/pnpm/yarn/pip/go/cargo/maven/gradle/...) against the free OSV API and report confirmed dependency vulnerabilities with fix versions and remediation commands.

First-run health check for DeepSeek Harness: verifies Node/pnpm/dsh toolchain, home, profile, API key (names only, never values), workspace writability and npm registry, then prints actionable next steps — CLI plus an agent-callable quickstart tool, dsh-firstrun/v1 reports, zero runtime deps.