Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted resources (RAM, S3, Redis, Slack, Gmail, Notion, Postgres) instead of the host disk, with per-mount read/write/exec modes, per-command sandbox routing (monty, pyodide, quickjs in process; docker, e2b, daytona remote), and installed CLIs (git, gh, slack, linear, ntn, gws, or one you register) as head words in the virtual terminal.

Community distribution: TUI, desktop, and Web UI as one bundle with layered installation.

Compare multiple skills on the same task and pick the winner.

Ecosystem infrastructure: a thin browser console for managing official repository plugins (zero patches) plus a make-dsh-plugin skill for guided plugin development.

Run the dsh runtime on Multica.

Plugin health checks: manifest protocol / patch format / build traps, zero-dependency and read-only.

Finds potential UX issues in your project: automatically reviews React/TypeScript code, pinpoints each problem, and gives concrete suggestions.

An MC-Fabric-style hook processor.

Context injection audit: token costs of instruction chains / skill catalogs / tool schemas, duplicate and conflict detection.

Local security audit: config, plugin origins, sessions, network exposure — read-only redacted risk report.

Self-evolution: the agent hot-mounts/removes persistent plugins on itself mid-session.

Auto-log failed tool calls across native tools, PTC run_code, and inline invocations: dedup and count root causes into a skill so repeated mistakes fade.

Modifies DSH plugin code at runtime, with ordered patches, inspection, and hot reload.

Frame-level scan diagnostics for session files (torn/corrupt/empty detection).

Plugin template repo (based on the official turtle-ui repo).

Pin Git commits to the environment's own author identity; env-var injection overrides all `git config` settings.

Evidence-backed inspector for DSH Web built-in capabilities: runtime/config provenance, compatibility and drift diagnostics, plus fail-closed controls for nine reviewed UI leaves.

WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.

Select browser elements directly during Vibe Coding and send structured visual feedback to the DeepSeek Harness Agent.

LAN access for the Web GUI: 0.0.0.0 bind plus a crypto.randomUUID polyfill for non-secure (LAN HTTP) contexts.

Makes Minimal mode work on Windows by supplying the missing win32 process inspector, so the persistent shell actually starts. Adds a busybox-based preset whose persistent shell survives the workspace-write restricted token (MSYS shells die there), ConPTY console-list foreground resolution, GBK/UTF-16 file reads, and an install-trap doctor.

Turns DeepSeek Harness into a server-grade multi-tenant platform: remote access + auto HTTPS, subuser permissions & token/daily quotas, sandbox enforcement, encrypted auth & audit log.

DSH self-updater in the settings page: one-click check/pull (`git pull --ff-only`), auto background checks, version diff and changelog preview with a red-dot reminder.

Evaluation harness for DSH plugins: YAML cases drive real headless agent runs, assert on tool calls, args, results and token usage, with a baseline gate for CI regression.