Plugins

The generic New Session action opens a default-directory workspace instead of requiring a folder pick, and the workspace picker lists that workspace as a no-folder choice.

Cross-session semantic memory for DSH: indexes session history locally with EmbeddingGemma 2 embeddings and recalls relevant past context, injected as clearly-framed untrusted context. No npm runtime dependencies; synthesis is opt-in.

Cross-Workspace Memory: local-first, encrypted, per-session authorized memory for DSH.

Git inside your DSH session: a right-sidebar panel for the current workspace and a global page listing every workspace, one sync button that becomes Fetch, Pull, Push, Publish branch or Sync, a commit tab that opens first with every change checked, AI-written commit messages from the staged diff, plus history, branches, stash and in-panel conflict resolution.

Reversible context folding plus external memory for DeepSeek Harness: tool output collapses into expandable lines, session facts become auditable records.

Turns DSH sessions into a one-page daily brief: what you did, tokens spent, where you got stuck and what comes next. A morning card above the welcome-page whale, data pulled from other session plugins, and Windows reminders when you sit too long.

Prune low-value exchanges or single messages from a session: select them inline in the chat, drop them from the model-visible surface and the transcript, undo in one step.

Telegram look-and-feel for the DSH Web GUI — a solid-colour wallpaper with a tinted doodle pattern, a floating chat-list card, session rows with avatars and times, message bubbles with read ticks, a floating composer, and three palettes (Classic, Glass, Pink).

Opens a separately downloaded Windows desktop pixel monitor for pi, Claude Code and DSH sessions. DSH monitoring is read-only.

Bridge a running DSH session into any terminal supervisor — it sees the state, and it can steer.

Composer-side helpers for the DSH Web UI: next-message prediction shown as grey ghost text that Tab fills in, a one-line per-turn recap above the input (placeable below instead) that never enters the model context, a right-sidebar panel for follow-ups from past sessions, recap history and side questions with their own model picker, and config-driven reply length, style and actionable framing.

Grouped workspace browser for the DSH sidebar: named groups over group > workspace > session, group-level archive and delete that show the affected count, a three-way archived-session filter, and a group document the Host half writes to $DSH_HOME/storages. Drawn with the shell's own --dsw-* tokens and official components, so rows, menus and theme switching match the native sidebar.

Code review center for DSH, built on open-code-review: reviews current changes, commits, branch ranges, project architecture, code modules and business data flows, with live progress, a GitHub-style commit heatmap, fixed markers, automatic fix verification, light/dark themes and one-click fix sessions. Requires git and the open-code-review CLI 1.13 or later (npm i -g @alibaba-group/open-code-review); reviewed code is sent to the LLM configured for that CLI, or to the session model when the review is delegated to it, and reopening a report after a fix session re-runs the review to verify the fixes.

Project-scoped deterministic execution trace memory and zero-token session digest plugin for DSH, compiling session histories into guarded playbooks and behavior summaries with inline session_id lineage. Registers the /tmem slash command, recalls memories only on explicit file-path or error anchors in agent/pre-step (skipping unchanged repeated steps), and intercepts tools/post-execute errors and code edits with same-origin L2 fixes, failure-loop warnings, and statistical L1 co-change partner hints (skipping routine read calls when idle). Needs Python 3 on PATH (or TMEM_PYTHON) and spawns python3 -m tmem.cli with a 5-second timeout; stores all data inside each project's .tmem/ directory (no ~/.tmem/ global store) and makes no network requests. It needs Python 3 on PATH (or TMEM_PYTHON) and runs python3 -m tmem.cli synchronously, with a 5-second timeout, on every agent step and tool result; traces are stored in .tmem/ inside each project and in ~/.tmem/ shared across projects. It makes no network requests.

Global and in-session search for DeepSeek Harness: search chat history across all sessions or just the current one, and retrieve both paragraph text and file names — find it even when you only remember the file name. Filter by date range and each session recent turns; results expand as session → question → paragraph, and a jump lands on the match with the words highlighted. Defaults to the last 14 days and the latest 30 turns per session; leave either empty to search everything.

Inspects the model's streamed reply before it is committed and either discards it or holds it for review when it reads as a refusal, so that text does not stay in the session context. Detection combines built-in phrase rules (an opening refusal, a capability denial, policy wording, first-person intent, refusals quoted in reasoning) with a plain-text word list and optional regular expressions. Interception can sit at the llm/stream waterfall, at the HTTP fetch layer before encryption (not TLS decryption, and it cannot tell which session a call belongs to), at both, or in a preview mode that shows a transient preview while the original chunks stay in memory until the whole reply has been checked. The same plugin also guards tool calls on tools/pre-execute: a command that deletes a drive, filesystem or user-profile root, formats or repartitions a volume, empties the Recycle Bin, fetches and executes a remote script, or writes to a raw device is denied, and a recursive delete outside build directories is recorded by default. Each tier can be set to deny, ask, record, or off, and the disk guard has its own switch. Both halves are heuristics: they can miss phrasings, the disk guard sees the arguments of a call rather than what a running script does, and they fail open.

Literal substring search across every conversation in the workspace, from a search box in the conversation header. The built-in index tokenizes with unicode61 and only matches whole tokens; this plugin scans the local session logs directly, so mid-token fragments and two-character Chinese words match too. Searches user and assistant message text (tool output is opt-in), rotates results across sessions so one long conversation cannot fill the list, and opens the matched conversation scrolled to the hit. Read-only over local session logs, no network access.

macOS menu-bar status box for DSH: a whale status item shows running / waiting / completed counts and colours, its menu lists sessions grouped by workspace, a top-bar pill mirrors the counts inside the window, and the global hotkey ⌥⌘⇧D opens a single-field capture window that queues a task and sends it to the chosen workspace as a new session (queued while DSH is closed, delivered when it opens). A settings page adds an open-after-send switch. Needs macOS 11 or later, the Xcode command-line tools and the desktop app. The menu-bar part is a separate native helper that you build and install with menubar/install.sh from a copy of the repo: it compiles with clang, registers a login item (LaunchAgent) and listens on 127.0.0.1:59421, where the plugin posts session titles and status every few seconds.

Layered cross-session memory for DeepSeek Harness: L0 raw turns, L1 LLM-extracted facts with conflict resolution, L2 scenes with maxScenes eviction, L3 project + global persona, hybrid FTS + vectors (built-in 384-dim lexical hashing by default, or a confi

Drive the DSH Desktop right-sidebar browser on Windows through playwright-cli, with a stable per-session page ID. Needs DSH started with --remote-debugging-port=0 and @playwright/cli installed globally.

Windows-only local encrypted credential vault (DPAPI-wrapped AES-256-GCM) plus a headless-Chrome login keeper: 31 agent tools log a site in once, keep the session on disk, and fetch login-walled pages (Tieba, NGA, Pixiv, one book site) with per-floor post extraction. The live page mirrors into a draggable, collapsible right-edge dock where clicks, typing and scrolling replay over CDP, so a captcha can be solved without a separate browser window. Edge/Chrome saved passwords can be migrated: the plugin reads the browser's Login Data store, decrypts v10/v11 entries in-process, and copies the store and its key blobs into its own controlled profile so the browser can autofill them (v20 app-bound entries can only be autofilled, not decrypted offline). Ships a one-command installer that repairs the DSH profile registration and a built-in self-test.

Suiji Word Book: a word book panel that shows one word per page with picture, phonetics, pronunciation, five phrases and an example sentence, plus fill-in-the-letters spelling practice and a 12-type word-recognition quiz. Word data is kept as plain files in a local directory, and an included skill lets an AI add cards from a word list. The “+Word” button (hidden until enabled in Settings) starts an AI session and by default switches it to danger-full-access; turn that off in Settings.

A persistent download server for DSH — jobs outlive the session, survive a restart, and resume from the last byte.

Windowed handoffs on top of DSH native compaction: each compaction appends a bounded window message (goal, todos, recent user instructions, notes), with session-private notes, paged history recall and a /ctx switch; notes and history tools appear after the first rotation.