Plugins

Encrypted, chunked full backups of a DSH installation: config, sessions, plugins, workspaces and Hindsight memory packed into AES-256-GCM volumes that unlock by passphrase, recovery code or this machine's DPAPI slot, each package carrying a self-contained restorer, GFS rotation (last, daily, weekly, monthly, plus a total size cap and a recycle bin) and network or WebDAV targets. Zero external dependencies — node: builtins only, no 7z, openssl or rclone.

Run the local Cursor CLI agent on a coding task in a workspace and continue the run by chat id.

Per-workspace gate that hides the tool schemas and system prompt sections of selected plugins from the model in directories that do not need them.

Semantic workspace search: three model tools (`zg_search`, `zg_index`, `zg_status`) drive the `zg` CLI for hybrid BM25 + vector + RRF retrieval, with a search-first guard that makes `grep`/`rg` require a prior successful search in an indexed workspace.

Adds extra working directories to a workspace, each read-write or read-only, from a folder button next to the composer or the `/add-dir`, `/remove-dir` and `/dirs` commands; the model sees them in its runtime context, and `write` and `edit` calls into read-write directories skip the sandbox escalation prompt by default while shell commands still ask.

AOCI binding toolkit for DSH hosts: discover workspaces that have an AOCI index, diagnose and repair their MCP bindings, initialize unbound repos, and expose status and doctor tools.

Trip planning workspace for DeepSeek Harness: a map page with day-by-day stops, roam_* tools that draft, review and adopt an itinerary, and optional MCP sidecars for rail tickets and Xiaohongshu notes.

Session deletion for DeepSeek Harness: a sidebar menu item, a workspace-grouped batch cleanup panel and a session_delete tool (dry-run by default). Deletes session logs, projection cache, workspace-registry references and derived search indexes, and cascades to all subagent sessions.

Delete sessions for real from the dsh sidebar (local logs and projection cache included, subagent and fork children cascade) and manage workspaces and ungrouped sessions, with an optional daily cleanup of ungrouped sessions.

Adds a permanent Delete session action to the sidebar session menu, behind a confirmation dialog that reports the log size, running turns, subagents, background jobs and reminders bound to the session; the id is then released from the live, archive and workspace registries, so the row stays gone on refresh instead of folding back in.

A DSH conversation workspace: turn actions, provenance quotes, local notes and summaries, in-conversation find, focus lock, and per-workspace command buttons.

Adds three actions to the sidebar session row menu: open the workspace location, move the session to another workspace, and delete the session to the Recycle Bin.

Mirrors other coding agents' sessions into DeepSeek Harness as continuable tasks, one workspace per application.

Cross-session token dashboard for DSH: daily spend as bars, trend or cumulative views plus a GitHub-style annual activity calendar, model and workspace splits, cross-filtering between day, model and workspace, and a per-turn timeline that also covers web-search and auxiliary model calls.

Replaces the new-session hero with a combined picker: role cards for the agent presets and a workspace card, collapsed into capsule buttons that expand into two scrollable rows.

Replaces the host-side folder chooser in the Add workspace flow with a name dialog, so a remote browser can create and open a workspace instead of an OS dialog appearing on the Host screen.

Sidebar workspace panel that switches between running tasks and all conversations, shown as one freely sortable card list with per-card pin, rename, copy ID, fork, stop, and archive actions.

Link local project directories from a project context menu, with scoped search, source reading and explicit per-session snapshot synchronization. Supports DSH 0.2.1-alpha.4 and 0.2.1-rc.2 only.

Folder-scoped sidebar for DSH Web: by default only folders you load are listed with their sessions; unload a folder without deleting its registration, mark folders to load at startup, and opening a session loads its registered workspace so it does not fall into Ungrouped.

A temp note in the DSH right sidebar with session, workspace, and global scopes, browser-local autosave, one-click copy, and one-click LLM polish through the default model.

Links DeepSeek Harness to VS Code: approvals answered in native notifications, ask_user_question answered in a sidebar card, an ide_context tool fed by the active file, diagnostics and selection, selection to composer, and a sidebar with the live transcript, workspace-scoped session picker, model and permission controls.

A file editor in the DSH web GUI right sidebar: open any text file, edit it, and save in place, with a version gate on every save — if the file changed on disk during the edit it stops and asks instead of overwriting. The document preview gains an edit button and a two-step delete button, and a separate File editor sidebar tool brings its own file tree for create, rename or move, copy, cut and paste (including a file taken from the system clipboard), delete and drag to reorganize. Two renderer bands cover 107 plain-text, config and source extensions; the second is offered only as an open-with choice, leaving the shipped Markdown and highlighted-code views as the default. All mutations run through the plugin's own trusted host routes, behind the connection trust fence, the workspace containment check and the sandbox policy.

Composer enhancements: caches unsent drafts per workspace for new sessions and per Session id for existing ones, restoring them after switching away and dropping them once sent or cleared; adds an @plugin completion group that mentions an installed plugin so the agent receives that plugin's metadata as runtime context for the turn.

Copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box copy while the real disk stays untouched (Windows only, requires Sandboxie-Plus).