Plugins

Keeps the Auto permission preset across DSH restarts: the auto-review unload migration no longer rewrites a live Auto Session to Full access during application shutdown, and a stored Auto Session no longer fails to open when its integration is absent.

Pre-execute hook that denies writes under a read-only result zone of protected roots; every other path passes through.

Adds a Git chip beside the composer that opens a centered workbench (changes, history, files, tags, stash) plus a Git section in settings. Supports multi-account OAuth device flow and PAT with per-repository permissions (full, read, none), gates writes behind a global switch and reads behind an allowed-directory list, and refuses a push whose target remote belongs to no writable account. Diffs preview in place with line numbers, four layouts, word-level emphasis, syntax highlighting and Ctrl/⌘+F find; Markdown and images render inline, commit messages are searchable, and commit messages can be generated from the staged diff through the host LLM service. Ships 8 Agent tools, 51 local HTTP endpoints and 8 languages, with tokens encrypted at rest by AES-256-GCM.

Delivery workflow preset for DeepSeek Harness: an agent protocol plus seven tools that keep user requests verbatim, record feedback decisions, plan tasks with acceptance criteria, log real verification commands and exit codes, and write completion summaries as per-project JSONL files.

Work-review loop for an Obsidian-style vault: writes a day's Dream with a numbered T/G plan, executes only the items marked routine (read-only by default, local commits only with --live), folds seven days into an ISO-week routine, and shows every day and week in a read-only sidebar panel.

Searches medical and life-science literature by topic, keyword or DOI through Europe PMC, PubMed, OpenAlex and Crossref; decides open-access status through Unpaywall/OpenAlex/Europe PMC; downloads the PDF when an OA route exists (verified by magic bytes and page count) and otherwise writes a decision card with the exact failure reason plus four manual fallback channels: AbleSci assistance, Sci-Hub, SciDown and X-MOL. The bundled Python tool uses only the standard library.

Strips AI-flavor from LLM text with local density scanning and deterministic fact/strength/safety checks; a rewrite that fails verification falls back to the original.

Memory for DeepSeek Harness with five sections (memories, tree, profile, graph, inbox), a rule-based capture policy that decides what to keep and what to drop, and hybrid BM25 plus vector retrieval over parent and child chunks, backed by twelve agent tools that read and write the same local files.

Changes and pins the shared default model — new conversations, restarts and switching models inside a chat no longer rewrite it.

Adds an optimize-prompt button to the left of the composer's send button; it rewrites the draft with the session's own model route and writes the result back through the normal editor path, so a single undo restores the original.

Rewrite the last turn of a DeepSeek Harness session in place: edit a cancelled or failed prompt and resend it, keeping the files it already wrote.

DeepSeek Harness plugin: tell every agent to write its private reasoning in Simplified Chinese.

反盲批 / Anti Blind Approval — DeepSeek Harness approval guard: review workspace-write escalation requests with the session model, then gate the Allow button on a strict JSON verdict.

A hard hat for AI coding: graded writes (L0 read-only / L1 workspace-only / L2 full) put privileged edits in a cage. Below the level it refuses to write and hands back a paste-ready block instead. Every path passes a raw-string traversal check plus realpath, so junction escapes are caught.

Lets build commands run inside the DSH sandbox instead of asking for elevation on every invocation: redirects pure caches (GOCACHE, NPM_CONFIG_CACHE, BUN_INSTALL_CACHE_DIR, PIP_CACHE_DIR) to a temp root, or grants the real cache directories write access in place so they stay shared with the terminal. Dependency stores (GOMODCACHE, CARGO_HOME) are never redirected, only granted. Adds optional user-directory grants (~/.config and friends, all off by default) and a command allowlist that matches exact strings or per-segment after splitting on &&, ||, ; and |, while rejecting redirects that write files (fd duplication like 2>&1 and /dev/null are allowed), command substitution and backgrounding outright. Settings are per-profile or per-session; file edits apply without a restart.

Git workflow studio for DeepSeek Harness: pick a branch model, enforce Conventional Commits, review PRs by defect density, rewrite history safely, rescue lost commits with reflog, and version releases by actual behavior change.

Connects a GitHub account to DSH from the composer button (OAuth device flow or a personal access token) and exposes one github_api tool for REST calls — create repositories, write files, read pull requests and workflow runs — with a read-only switch and an in-panel call log. A rewritten fork of Moon-shiyue/dsh-github-connect (MIT): device-flow Client IDs are no longer rejected, paths may carry query strings and non-ASCII characters, undici is no longer a hard dependency, and the panel has four tabs. Registers the same github_api tool name and the same credential namespace, so it cannot be installed alongside that plugin.

Graph-first permission preflight for DSH. The model declares a computation graph whose nodes state the semantic operation (download what to where, write what, delete what); the user approves nodes one at a time in a side panel, one approval covers one successful execution, and each node keeps an audit trail of what actually ran. Uncovered operations still ask through the native approval card, and a node blocked by an unanswered permission is suspended so work that does not depend on it can continue.

Translate installed plugins' documentation into Simplified Chinese: README sections are translated with a persistent section-level cache, and an opt-in metaSidecars mode (off by default) writes a locale/zh.json sidecar for each Plugins list row so the list can render Chinese natively.

Annotates pages inside the built-in browser: click an element, write a comment, and send the batch to the conversation as one message, with a cropped screenshot per note where the element can be located.

Douyin operator for DSH: drives your own Chrome to read the feed, comments and DMs, reply in-thread, and upload a local video through the creator center - every write passes a policy gate and publishing always needs your click.

Shared Markdown memory for every DSH session: persona, requirements, corrections, lessons, methods, requests, sessions, a method library and ingested documents, mirrored to a second disk with version snapshots and a cross-process write lock; entries move between the main file and a searchable archive by hit frequency and repeated emphasis, and retrieval is keyword co-occurrence plus BM25. Also ships a skills library (SKILL.md playbooks with optional guarded run.mjs execution) and a sticker library: users import their own images, the plugin classifies them by mood, and it automatically sends a fitting sticker at the right moment in the conversation to express emotion.

Adds an Auto-rename row to each Session sidebar menu: the model reads the Session log, weights recent user messages higher (exponential decay, 3-day time constant), and writes a title of at most 10 CJK characters into the Session title. Also opens that Session menu on right-click, and exposes the same operation as the session_auto_rename agent tool. Requires DSH 0.2.1-rc.5 or newer.

Peak/off-peak and balance pill for the DSH composer, forked from xiangrikuibaize/dsh-tide-badge. Unlike the original, the conversation cost is priced from that session's token usage (uncached input, cache-read, cache-write and output tokens) against the official price table, so other conversations and API keys on the same account are not charged to it. It keeps the upstream package name, so it replaces the npm version — install one or the other, not both.