Find the right DSH plugin
for your next workflow

Loader-independent startup recovery for DSH Web that detects likely broken plugins, temporarily skips them, and restores only Boot Guard-managed changes.

Generate Functions, MCP tools, workflow Skills, and offline test packages from user-authorized source code.

Automated unit-test generation: a /testgen command and generate_tests tool that scaffold, run, and fix tests until they pass (LLM + offline template generators; vitest/jest/mocha/node:test).

An MC-Fabric-style hook processor.

Pin Git commits to the environment's own author identity; env-var injection overrides all `git config` settings.

Context injection audit: token costs of instruction chains / skill catalogs / tool schemas, duplicate and conflict detection.

Document-code consistency guard: audits version headers / changelog tables / directory trees / module & test counts / cross-doc references for drift, with severity-sorted, read-only fix suggestions.

Progressive-disclosure MCP gateway that searches large remote catalogs through `mcp_search`, then invokes exact schemas through `mcp_call` with lazy connections and bounded caches.

Enforced pain-point gate: after two non-converged experiments it injects the three questions, denies non-investigative tool calls until answered, and blocks same-direction retries.

Plugin health checks: manifest protocol / patch format / build traps, zero-dependency and read-only.

Local security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.

Frame-level scan diagnostics for session files (torn/corrupt/empty detection).

Self-evolution: the agent hot-mounts/removes persistent plugins on itself mid-session.

Telemetry backend exporting turns, model steps, and tool calls to yiTrace.

Exposes bounded Prometheus metrics for DSH sessions, agents, LLM calls, tools, approvals, subagents, and jobs, with a Grafana dashboard and a loopback-only endpoint by default.

Redacts supported secret patterns from the `session-telemetry/record` export copy before configured telemetry backends receive it.

Writes local JSONL summaries of per-turn tool counts and coarse verification signals without storing prompts, tool arguments, or result text.

Appends local hash-chained JSONL receipts for tool results and session events without storing prompts, tool arguments, result text, or raw session IDs.

Support for the microsandbox backend.

Microsoft cross-platform sandbox support.

Support for the nono sandbox backend.

Agent-tree token budget management.

The model switch for DSH: point it at any OpenAI-compatible endpoint, with curated free/cheap DeepSeek provider presets and automatic fallback when a free tier rate-limits you.

Fine grained per tool permission rules for DSH at the tools/pre-execute gate, deny and ask lists in Claude Code rule syntax (Bash(rm -rf:*), Read(*secrets*), mcp__server__tool), works standalone without migrating.