Plugins

Cross-session task relay for DSH Desktop 0.2: six relay_* control tools, independent sidebar sessions, live host-origin discovery, durable turn-completion checks, and a bundled relay skill.

Cross-session long-term memory backed by a local Go service (~50MB RAM, SQLite-vec + verify-augmented claims): zero-lag recall injection on every user message, session-end transcript ingest, and memory_search / memory_logs / memory_ingest tools. Install with `dsh plugin --profile web add @djasdh/interest-memory-dsh-bridge`. Protocol bridge only: the Go service is not installed by `dsh plugin add` — install and start it per the repository README first; until it runs, the tools silently return nothing.

Folds each 4-50 KB paste in the DSH composer into its own chip (expand or delete it individually), and turns a paste of 50 KB or more into a real file attachment. Declares DSH >=0.1.7-rc.2 <0.3.0-0, so it stays visible on the 0.2 release line.

Read-only Skill inspector for DeepSeek Harness. It shows which Skills a conversation actually loaded — from observed loading evidence only — and which Skills the current environment can discover, and gives each Skill a detail page whose left column switches between the framework, the evidence, validation, evaluation, step evidence, run logic, the before/after of a modification when there is one, the definition facts and the raw SKILL.md. Declaration and run stay apart: the body is split into structure, declared workflow and progressive disclosure, the run logic is read from local receipts, and every declared step carries its own evidence — no observed evidence is reported as exactly that, not as executed or not executed, and the run's instruction hash sits beside the current definition as match, mismatch or unavailable. The evidence view gives each subject one of three states (declared, observed, unavailable), walks definition → load → use → outcome, names what each stage cannot reach, declines to attribute an outcome to the Skill, and can copy the snapshot out as byte-stable JSON. Validation checks the Agent Skills open standard and the platform profiles separately, each finding on a rule id and labelled standard compliance or platform compatibility. Evaluation keeps repeatable cases with the conditions each run was recorded under and the four stages of runtime evidence, comparing two runs of one case item by item without scoring them. The trigger boundary keeps should-trigger and should-not-trigger prompts, has you run them in a real new session, then records what was observed — whether a load record appeared and whether it was model-invoked or user-explicit; a typed /name is not a natural trigger, and an absent load record is reported as not observed, not as not triggered. The same projections are exposed to the agent as a read-only skill_review tool, which returns a structured review packet and says what it omitted when the packet will not fit whole. The inspector, the evidence chain and these reviews are computed on this machine from the definition and the session receipts; the Chinese reading version sends the body through the host's model when you ask for it, keeping code fences, paths and frontmatter verbatim and storing the result on this machine. A Skill can also be cloned into a local copy. It does not write back to the source Skill and does not run its scripts.

Turns course, lecture, tutorial, meeting, and talk videos into structured study notes: it extracts the audio track with ffmpeg, transcribes it with Whisper, then writes notes with a chapter outline, emphasis markers, and a quick-reference card.

Fireworks celebration engine: floats fireworks above the chat window while the agent codes — welcome show, per-turn salutes, tool sparks, milestone celebrations, a finish finale and a dud on failure; each event type has its own fireworks card group with random variants, and token usage decides firework size, height and splendour.

The built-in web_search bills a full model turn against DeepSeek's own endpoint; this runs it on an OpenRouter-compatible gateway instead, so search is billed where your chat already is, at the model and price you pick.

Markdown visual enhancement and session workbench for DSH Web Composer: live syntax presentation with caret-row source reveal (inactive-line markers can be hidden or faded), deterministic local completions, and list/quote continuation on line break with ordered-list renumbering; long pastes fold into persistent chips with inline context or file-mode delivery (@path across 50+ extensions) plus sidebar LLM rewrites (stop, preview diff, undo/redo); real-time context map with token gauge, composition breakdown, per-turn growth chart with anchor lines, in-place /compact, turn forking, and a Context Doctor workspace (overview, diagnostics, analysis, feedback).

Adds an Explain button to the approval card: one model call returns exactly three lines reading the pending operation, covering what it does, which files or system state it reads, writes, modifies or executes, and a risky/attention/safe verdict with a one-sentence justification. It also renders the detail area for `write` and `edit` calls, which the shipped renderer leaves blank because it only reads a `command` field.

Conversation outline panel for the DSH web surface: user questions as root nodes (index, time, tool count and text volume per turn) with the Markdown headings of assistant replies hanging beneath them, plus level slider, search scope, bookmarks, copy and export as Markdown, section jump, keyboard navigation, a right-edge density rail and per-session reading-position memory. Read-only UI: it never touches prompts, tool results or provider traffic, and writes nothing outside its own localStorage keys.

Session cleanup for the DSH sidebar: drag a conversation row onto the balance widget's whale and it eats the row — the session directory goes to a recycle bin, not to rm. Deletion asks one short question first (how many tokens it burned, and that prompt can be turned off in Settings). Undo from the persistent toast or the 12-entry log in Settings. Clicking the whale jumps straight to the plugin's Settings, where you can swap the avatar, drag the mouth into place and rewrite all 17 UI strings; blank, currently-open and running sessions are refused in place with a reason.

Pre-execution safety valve for DSH that judges with TypeSafe Jev: it hooks tools/pre-execute and decides every bash/pwsh call by first applying offline static rules, then by asking the Jev model — the System One model from TypeSafe, which returns a structured decision instead of prose — one yes-no question ("will this command irreversibly delete or overwrite real data?"), turning the answer into allow, revise, block or escalate; revise hands the model a safer rewrite, escalate offers a one-shot human token; exhausted credit or a missing API key degrades loudly instead of failing silent, and a missing key is requested in the conversation itself (`guard key set`, read from stdin); every verdict is appended to a shared audit log and the text people read is bilingual zh-CN/en.

Merges other sessions' context into the current turn: evidence-weighted conflict resolution, retraction of claims whose premises were retracted, trust labelling that resists cross-session prompt injection, and budget-bounded packing. Ships a benchmark.

Turns the MacBook keyboard Caps Lock light into an agent status light: on while the agent works, flashing when it waits for your approval or answer, off when idle.

Live progress bar under the composer with a percentage and an estimated time left for the current DeepSeek Harness turn; the estimate re-anchors as the turn runs and never reads 100% until the turn ends, and the bar turns red when the turn fails or is interrupted.

WeChat Official Account channel for DSH — WeChat messages run agent turns and the answers are pushed back through the customer-service message API, with signature-checked callbacks and an openid allowlist.

Voice or sound cue when a turn finishes and a failure cue when a tool call or turn errors; user aborts stay silent and subagent sessions are skipped by default. Three modes: voice (Volcengine TTS with cloned or preset voices, fingerprint reuse so unchanged text is not re-synthesised), effects (20 built-in sounds assignable to done, fail and approval, with per-row preview and no API key; the approval slot has no automatic trigger, so it plays only manually) and off. Plays through winmm without touching system volume. Windows only. Adapts DSH kernel 0.2.2-rc.1.

English word bank for one or more children, built for DSH 0.2 and newer (0.2.0-rc.1 and 0.2.0-rc.2 verified, including the desktop shell; 0.1.7 through 0.2.x all work). 1.10 added pronunciation: in the memory cards and in the online quiz every word and every example sentence has a speaker button that reads it aloud with the built-in Windows voice - offline, with no network call and no model call - and the whole batch of audio is pre-rendered in the background whenever cards or an exam are generated, so a click starts instantly. 1.11 adds: pick words in bulk straight from the library (10 at a time, top-down, up to 50 selected, with a live counter); turn the words a child got wrong in a quiz into a one-click review set - an online card page that speaks plus a printable PDF; and every card example sentence now carries its Chinese translation underneath. Words marked on textbook or workbook photos (highlighter, red pen) are found by their marks, then translated and stored in a local SQLite bank with an occurrence count; the clipboard picker, the photo route and dictation all land in the same bank. High-frequency words surface by count, three correct answers in a row flag a word as learned, and any selection prints as a memory card set (a word split into chunks, real IPA per chunk, a grade-7 example sentence, a mnemonic hook, an A4 sheet of eight) in HTML, PDF or Word, with a print-and-answer exam page whose four options are set against each other for meaning. On 0.1.5 the settings panel does not appear - install dsh-word-vault@1.0.2 instead.

Per-project memory for DeepSeek Harness. Three Markdown files per workspace — PROJECT.md, DECISIONS.md and SESSIONS.md — are auto-created on the first step of any session in that workspace, re-read from disk and re-injected only when they change (and re-injected if compaction dropped them), and written back by classification through a memory_checkpoint tool, with a bounded end-of-turn nudge when a turn did work but recorded nothing. memory_read and memory_search read the live log and the archive, the latter over a zero-dependency BM25 index. The session log is capped at 200 entries with the overflow moved to SESSIONS-archive.md — never injected, but visible, readable and searchable, and restorable one entry at a time. Settings page: a workspace list with a path filter, read-only tabs for the three memory files plus the archive, reload, export/import of one workspace's memory as a JSON bundle, a two-step clear, a panel that rewrites or removes the AGENTS.md instruction block, and a PROJECT.md staleness reminder. A composer status chip shows that workspace's sync state and creates the files on click. Zero dependencies — no vector store, no embeddings, and no model calls.

Feeds every dsh prompt into the local agent-feedback-loop feedback-memory pipeline — captures dissatisfaction, reviews it offline into reflections, and attaches the compiled recurrence-rule context back to the turn, never blocking a prompt. Lessons are compiled into a layered rules block (an index that names every family on every turn, plus on-demand instructions), same-class reflections are merged so one lesson is not re-read as many, and each index fact decays through current → possibly-stale → dormant instead of being trusted forever. Requires the agent-feedback-loop runtime; running agent-feedback-loop install afterwards wires existing dsh profiles automatically. On every prompt it runs ~/.agent/feedback-loop/hooks/core-hook.sh with the prompt on stdin.

On-demand memory for DeepSeek Harness: session logs are distilled into layered markdown (a summary, an index and per-topic files), and a mem_query tool returns only the matched entries rather than the whole index. Nothing is injected per turn, there are no dependencies, and every entry keeps a source pointer back to the conversation it came from.

Peak/off-peak billing clock with a provider-neutral account readout (DeepSeek balance, subscription plan windows, relay credits), per-turn spend measured from the provider's own counter, and a /hist token-history scene split per provider for dsh-tui

Removes the queued prompts a DSH fork child inherits from its parent, so the first turn in a new branch runs the prompt typed there instead of the parent's next one.

L-clone 记忆钩子：DSH 每轮结束(turn/end)自动 capture 到外置大脑；Web GUI 侧边栏「大脑看板」按钮一键打开记忆工作台。