AI Agent runtime authorization & integrity guard — framework-agnostic GuardrailProviders with sha256 decisionId integrity receipts, plus MCP/DSH security scanner (SSRF/command-injection/credential-exfil/prompt-injection). CCS 7-dimension verification & Ed

Unified security check framework for DeepSeek Harness ecosystem — covers the full plugin lifecycle (discovery → install → runtime → update → retirement)

Remote SSH operations for the dsh web GUI: host config store (~/.dsh/dsh-ssh.json, import from ~/.ssh/config), a persistent ssh2 connection pool with jump-host support, exec / PTY web terminal / SFTP transfer / local port-forward tunnels / cluster executi

DSH skill center: browse loaded skills by source (bundled / project / user / custom / runtime), enable or disable, create and delete, in a web GUI panel.

Sandbox-enforcing implementation of the DeepSeek Harness filesystem seam: fences write/edit by the per-call sandbox mode (read-only denies mutation, workspace-write contains it to the workspace + temp roots) while reads pass through

Self-referential cordis toolset: inspect the live runtime, mount and dispose model-written plugins

Encrypted credential vault for DeepSeek Harness: store and retrieve usernames, emails, phone numbers, passwords, TOTP secrets, SSH/API-key/OAuth developer credentials through model tools and a Settings UI page.

Shared filesystem path helpers for the DeepSeek Harness

Worker-thread implementation of the DeepSeek Harness code-execution seam

dsh CLI: profile boot, plugin management, and the browser UI alias

Scan-to-pair mobile and PC remote control for the dsh web GUI: QR entry beside the settings button, one-time pairing tokens, a gated /remote/api desktop channel, live device status, and revocable sessions

Model-facing subagent delegation tool over the ctx.subagents seam

Type-only Branded<B> nominal-typing primitive for the DeepSeek Harness

Utilities for working with htmlparser2's dom

worker-thread workflow engine: executes model-written orchestration scripts off the host event loop, bridging agent() calls back to ctx.subagents

Backup, restore, export, import, migrate and sync your DeepSeek Harness (DSH) configuration: settings, plugins, MCP servers, skills, agent presets and workspaces. One-click migration to another machine. DSH 配置一键备份、恢复、导出、导入、迁移与同步插件。

File-context policy plugin for the DeepSeek Harness — observed-state, read-before-edit, and version-guarded write/edit added over the ctx.fs provider seam through the fs/* event gate (no service API)

Abstract code-execution seam (ctx.codeRuntime) for the DeepSeek Harness

Opt-in DeepSeek Harness Skill-only bundle for the Archify architecture-diagram skill.

ES Math-related intrinsics and helpers, robustly cached.