Development & Runtime

Real-time stage, ETA & cost dashboard for headless dsh tasks: turns the black-box session event stream into a live multi

LAN / remote-access control, frpc NAT tunneling, a panel password gate, and mobile UI adaptation for the DSH Web GUI.

Agent governance suite: policy-based tool gating (allow/deny/ask with wildcards and priorities), a structured JSONL audi

Installation safety gate for DSH plugins: antivirus-style scan of install scripts, permissions, secrets and network call

Verification toolkit for DSH agents: evidence-based claim checking against workspace files with line citations, config v

Update management for the whole stack: compares DeepSeek Harness and every installed third-party plugin against npm and

Dead-code detection for AI-generated codebases: graphlint builds a dependency graph, finds code unreachable from any ent

Static pre-install security auditor for plugin bundles: lifecycle scripts, dynamic execution, credential-exfiltration co

Secure remote access for the official Web UI: authenticated LAN/tunnel gateway with QR + HMAC one-time pairing, per-devi

Contract regression harness for plugin authors: a scripted LLM adapter drives the real pipeline in isolated child proces

Zero-touch runtime telemetry for DSH: every session auto-writes task, model tier, tools, failures, duration, status into

System proxy detection (scutil/env/PAC) with a status tool and a proxy_export bash snippet tool.

Token usage and cost tracking with daily/session budget alerts and a usage_report tool.

Dependency-topology guard: pre-install conflict prediction and post-install detection of duplicate @deepseek-ai/dsh-* co

Capability transform & assembly engine (Qian Xuesen cybernetics/systems framework): static resident layer manages the sk

Update checker (npm edition): a settings page comparing local and latest versions of @deepseek-ai/dsh and every installe

Git and GitHub panel for the DSH web profile: stage/unstage/discard/diff, branches, commit, push/pull/sync, log, file br

Evidence-backed Skill self-evolution for DeepSeek Harness: redacted trajectory learning, quarantined proposals, arena va

Collapsible right-docked web terminal (xterm.js) bridged to a host PTY over WebSocket: bash/zsh switching, resizable pan

Adversarial multi-lens code review: parallel correctness/security/maintainability lenses attack a diff, with determinist

Reuses hooks declared in Claude Code, Codex and opencode configs on dsh, executing shell, webhook, oracle and proxy hand

Branch switching and isolated git worktrees as real workspaces, from the Web UI composer.

Remote host tunnel manager: runs dsh web on a remote Linux server (systemd supervision, no root needed) behind an auto-r

One-click health check for the DSH Web GUI: a sidebar button runs the ops kit's check-health.ps1 through a plain HTTP ro

Discovers installed DSH plugins with tags, overlap and compatibility detection, one-click enable/disable, failure diagno

Autonomous permission classifier for the auto preset: tool-scoped allow/deny rules, an LLM semantic judge, and git check

Test-stability tools: repeatedly run vitest/jest/pytest/node:test suites, classify flaky cases, keep history and maintai

Loader-independent startup recovery for DSH Web that detects likely broken plugins, temporarily skips them, and restores

A TPS metrics plugin.

Aborts startup when another live dsh instance holds the same DSH_HOME data directory, preventing the concurrent session-

Login gate for the dsh web surface: password or shared-token authentication, session cookies, rate limiting, and a user-

Conversation header badge showing the DeepSeek Harness version, checking npm for the latest release and prompting upgrad

Password-gated public access for the DSH Web GUI through quick or named Cloudflare Tunnels, with HTTP/WebSocket proxying

Boot-time guard that repairs corrupt session logs, preflights plugin composition, vm-checks client artifacts, smoke-test

Read-only health clinic for the installed DSH plugin set: loader health, dependency integrity, version compatibility, in

On Windows, the available bash tool is limited to Git Bash and PowerShell is disabled.

Static and runtime security guard for dsh: rule-based scans for malicious code, prompt injection and token waste, runtim

Per-process tool-call statistics: a `tool_stats` tool reporting per-tool call counts, error counts, and average duration

Run the dsh runtime on Multica.

Windows desktop shortcut for dsh web: launches the server, auto-opens the browser when ready, and stops the service when

Environment housekeeper for the agent: toolchain inventory (node/pnpm/git/gh/ffmpeg/browsers), scratch/cache scan with w

Tested-curation lab for DSH plugins: every entry passes real install/static-scan gates in an isolated environment, with

Unifies every DSH extensibility seam behind one declarative DSL: a runtime `fabric` service, `fabric_extend`/`fabric_ins

Plugin compiler with a blueprint registry (scaffold → validate → deploy) exposed as a runtime service, three model tools

Update copilot for DeepSeek Harness: one scan covers the dsh core, official bundles, and every profile plugin; explains

Docker-isolated real-host lifecycle tests for DSH plugins across install, boot, tool registration, update, uninstall, re

Metadata-first runtime profiler for DSH agents: turn/step traces, model and tool wall-time timelines, provider usage, re

Local AI code-review gate: review a workspace/branch/commit diff via the managed ocr.js, returning structured findings w

Evidence-first guard: warns the agent when it claims success without a matching tool-execution record in recent context.

Self-healing runtime layer: a resource control loop with strategy switching and repair escalation, error-storm and fiber

DSH environment diagnosis, graded repair with one-click rollback, and a runtime self-healing service.

A small self-contained power control for DSH: sidebar power button with an upward restart/shutdown menu and a Windows-sh

A starter template for dsh plugins covering config, tools, events, services, hooks, browser UI slots, and slash commands

Progressive-disclosure MCP gateway that searches large remote catalogs through `mcp_search`, then invokes exact schemas

Generate Functions, MCP tools, workflow Skills, and offline test packages from user-authorized source code.

REST + SSE gateway exposing running Harness sessions to third-party clients: API-key auth, token streaming, workspace gr

One-command bundle of the three AgentFrame plugins: memory-director, compaction, and aura-scheduler together.

Adds dangerous-operation policy checks, output redaction, and a security-review workflow.

Converts session, agent-loop, LLM, and tool lifecycle events into OpenTelemetry GenAI traces and metrics, exported over

Self-editing desktop workbench for DeepSeek Harness: a full dsh web replica with an edit mode in which the agent modifie

Code smell radar: statically scans TODO/FIXME debt, stub implementations, long lines, oversized files and duplicated blo

Document-code consistency guard: audits version headers / changelog tables / directory trees / module & test counts / cr

Git hygiene checker: read-only scan of merged and stale branches, oversized tracked files, untracked files and uncommitt

Weekly digest generator: aggregates git commits, DSH session activity and daily memory entries into a Markdown weekly re

Close and restart controls for DeepSeek Harness Desktop and Web on Windows, in Settings → General.

Model-driven /init command: the agent analyzes the current repo and generates/updates a high-signal AGENTS.md, with a pe

Offline diagnostic for DSH: 19 checks across env, profile, and session state, with a settings "Doctor" panel and a read-

Claude Code rules.md-style rule prompts: activate rule markdown files by glob-matching the files an agent reads or edits

Minimal-anchored agent preset: request #1 keeps the real bash + str_replace_editor pair with auto-injected context strip

Move a whole Claude Code setup into DSH. Skills, MCP servers, hooks, subagents and permission rules, with a dry-run movi

Fine grained per tool permission rules for DSH at the tools/pre-execute gate, deny and ask lists in Claude Code rule syn

Makes Minimal mode work on Windows by supplying the missing win32 process inspector, so the persistent shell actually st

Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted r

Reloads an upgraded plugin inside the running dsh process instead of restarting it, and rolls back to the old version wh

Keeps what the agent builds at runtime: turns a `cordis_define` dynamic package into a real installed plugin that surviv

Container-isolated backend for the `ctx.codeRuntime` seam: each Code Mode program runs in a fresh container with no netw

HashiCorp Vault backend for the credential seam: KV v2/v1, AppRole machine auth, per-operation reads so rotation needs n

S3-compatible backend for the spill seam: oversized tool output goes to object storage (S3, MinIO, R2) with hashed sessi

Runtime plugin loading for the Web UI: a watched hot directory installs/updates client-plugin bundles live on every open

Vets third-party plugins before you trust them: static scan for malicious patterns (exfiltration, credential access, obf

Reports bounded, repository-relative Git status as structured data without staging, committing, or changing branches.

Ecosystem infrastructure: a thin browser console for managing official repository plugins (zero patches) plus a make-dsh

Reverse tunnel for the DSH Web GUI: exposes a `dsh --profile web` deployment at a public frp URL and switches the direct

Plugin trust pipeline for DeepSeek Harness: deterministic static scan with verdicts, opt-in runtime guard with honeypot

A development safety kit: rolling config snapshots, automatic rollback on plugin failures, boot-failure rescue, and an i

A hands-off safety net: directories the agent deletes go to a trash folder first and symlinks are never followed, with z

Exposes bounded Prometheus metrics for DSH sessions, agents, LLM calls, tools, approvals, subagents, and jobs, with a Gr

Health checks for DSH plugins: manifest/patch/entry/build/pack/install verification, model-callable plugin_check, profil

Verification-driven self-evolution loop: failure logs become verified AGENTS.md rules; in-session plugin (evolve_learn /