Plugins

Neon-green deep-space skin with dual character art, a 9-slice composer frame and a black-and-neon palette.

Cross-session token dashboard for DSH: daily spend as bars, trend or cumulative views plus a GitHub-style annual activity calendar, model and workspace splits, cross-filtering between day, model and workspace, and a per-turn timeline that also covers web-search and auxiliary model calls.

Replaces the new-session hero with a combined picker: role cards for the agent presets and a workspace card, collapsed into capsule buttons that expand into two scrollable rows.

Adds a Traditional Chinese (zh-Hant) language to the web GUI, registered through the locale service with one dictionary per namespace and selectable in Settings, General, Language.

Replaces the host-side folder chooser in the Add workspace flow with a name dialog, so a remote browser can create and open a workspace instead of an OS dialog appearing on the Host screen.

Sidebar workspace panel that switches between running tasks and all conversations, shown as one freely sortable card list with per-card pin, rename, copy ID, fork, stop, and archive actions.

Link local project directories from a project context menu, with scoped search, source reading and explicit per-session snapshot synchronization. Supports DSH 0.2.1-alpha.4 and 0.2.1-rc.2 only.

Folder-scoped sidebar for DSH Web: by default only folders you load are listed with their sessions; unload a folder without deleting its registration, mark folders to load at startup, and opening a session loads its registered workspace so it does not fall into Ungrouped.

A temp note in the DSH right sidebar with session, workspace, and global scopes, browser-local autosave, one-click copy, and one-click LLM polish through the default model.

Links DeepSeek Harness to VS Code: approvals answered in native notifications, ask_user_question answered in a sidebar card, an ide_context tool fed by the active file, diagnostics and selection, selection to composer, and a sidebar with the live transcript, workspace-scoped session picker, model and permission controls.

A file editor in the DSH web GUI right sidebar: open any text file, edit it, and save in place, with a version gate on every save — if the file changed on disk during the edit it stops and asks instead of overwriting. The document preview gains an edit button and a two-step delete button, and a separate File editor sidebar tool brings its own file tree for create, rename or move, copy, cut and paste (including a file taken from the system clipboard), delete and drag to reorganize. Two renderer bands cover 107 plain-text, config and source extensions; the second is offered only as an open-with choice, leaving the shipped Markdown and highlighted-code views as the default. All mutations run through the plugin's own trusted host routes, behind the connection trust fence, the workspace containment check and the sandbox policy.

Composer enhancements: caches unsent drafts per workspace for new sessions and per Session id for existing ones, restoring them after switching away and dropping them once sent or cleared; adds an @plugin completion group that mentions an installed plugin so the agent receives that plugin's metadata as runtime context for the turn.

Copy-on-write permission preset: shell commands run inside a per-workspace Sandboxie box, so writes outside the workspace land in the box copy while the real disk stays untouched (Windows only, requires Sandboxie-Plus).

Records every session as one readable Markdown timeline inside the session workspace - the full request sent to the model (system prompt and plugin injections included), user input, replies, reasoning, tool calls and results, file reads and writes, web searches, skill loads, command runs and token usage - with a review page, a per-session tab and configurable capture scope.

Jenkins CI integration with a live build-progress panel in the right sidebar, a multi-instance settings page, five model-facing tools (list jobs, build status, console log, workspace, trigger build), and a failure wake that hands a failed followed build to the conversation that followed it.

Send local files to WeChat from any DSH session by reusing an installed IM plugin, plus cron-scheduled tasks that run in fresh sessions, a workspace activity glow, a header activity indicator, a completion chime, a macOS sidebar vibrancy toggle and a one-click host restart.

Windows balloon notifications for session lifecycle events (new / running / finished / error) across all workspaces, with a session-store watch that catches headless and A2A dispatch sessions whose events never reach the host bus. Windows only.

Agent-facing GitHub repository tools: binds an account through a first-run prompt, then clones into the workspace and reads, exact-replaces, commits and pushes files, with writes off by default.

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

Persistent Bots and group rooms inside DSH. Each Bot keeps its own model, permission preset, workspace and session across restarts; a Bot can also be backed by an installed local agent CLI (Codex CLI, Claude Code, ACP agents) using that CLI's own login and models. Unaddressed messages can be triaged by the room leader, the room accumulates a shared experience card, and every answer is a run in a durable ledger the sidebar panel replays. New Bots default to the full-access permission (any command, any file; the form asks you to confirm the risk), so choose read-only or workspace-write to confine one; Codex CLI and Claude Code Bots at full access run without their own sandbox or permission prompts.

Adds a right-column panel that compares a set of images the user picks from the workspace — 1/2/3/4/6 per page, per-image zoom and pan, the zoom and viewed position of one image synced onto the whole set, and a reorderable filmstrip. The browser loads every image, so none of it reaches the model.

Turn-level file undo for tool writes and edits: each file is snapshotted before the write lands, and the model (an undo tool), the human (a /undo command) or a button in the assistant message action row can roll back every file a turn changed. Snapshots are written in-process rather than by shelling out, so it needs no extra sandbox permission in sessions confined to workspace-write.

Chooses which skills and MCP servers each workspace may use, from a "Skills & MCP" item in the workspace row's "..." menu; unchecked skills leave the session catalog, the `skill` tool and `/name`, and unchecked servers have their `mcp__<server>__*` tools denied for that workspace's sessions, running ones included from the next turn.

Session map: a fork-tree canvas over DSH sessions, and a Settings page that clones a Git repository into a new workspace. The canvas is reachable from a session-header toggle and two right-side tabs, and from a conversation tab that is off by default; it starts on the current session's own tree, growing downward, with wheel pan, Ctrl/⌘-wheel zoom, a subagent-session filter and a per-session overview of turns, steps, model time, tool time, output tokens and running state. The clone page takes a repository address and a remembered parent directory with a native folder picker, offers a per-clone shallow switch (off by default), runs git clone on the host, and registers the cloned directory as a workspace.