Plugins

File upload with color-coded attachment cards (session-isolated storage, sha256 dedup, TTL sweep) plus a content-sniffing read_document tool for PDF/DOCX/XLSX/TXT.

Remote & mobile security gateway: zero-modification Tailscale/LAN access with QR pairing, RSA encryption, brute-force defense and mobile style snippets; auto-yields the shared pairing service to other remote plugins so coexistence never crashes startup.

Claude-style drag-and-drop/paperclip file upload with content sniffing, document-to-Markdown via Microsoft MarkItDown (built-in JS fallback), text inlining, and a read_document tool for agents.

Terminal-style input history for the web composer: edge-first arrow-key recall with exact draft/caret restore, browser-local persisted history, Ctrl+R reverse search, and sliding-context awareness; 0.5.0 adds a smart input layer — cross-session snippets (/save, /load), prompt templates with variables, reuse insights, and compaction-summary highlighting.

Archived-session manager for DSH Web: workspace-grouped list, FTS5 full-text search over session content with per-session snippets, restore-and-open, and hard delete.

Sidebar session search that builds its own index instead of reusing DSH's full-text one: title to content toggle in one entry, results grouped per session with the strongest snippet and user/reply/tool tags, plus watermark-based incremental sync, archive-driven pruning of archived sessions, and a shadow rebuild that never blocks the live index.

Coding-learn floating panel: edits and runs Python/JavaScript/TypeScript/PowerShell with exit code and timing, grades JSON course lessons with progress export, keeps Markdown notes and snippet library, and sends code plus a question into the current conversation for the main model to answer.

All-media (video/audio/image) sibling of liustack/modlens: turns local media into structured evidence (timeline / transcript / layout regions) injected into the conversation so text-only models can cite concrete frames, seconds and speakers — Evidence, not imagination. One failover chain per media, recorded hop-by-hop in meta.attempts (a fallback is never silent): host-registered multimodal models first, then a configured OpenAI-compatible endpoint (comma-separated multi-key rotation), then local ffmpeg frame-sampling / a local ASR CLI, degrading to metadata-only as a last resort. Absorbs modlens battle-tested rules — cooldown keyed only on auth/quota failures and softened to chain-tail (never dropped), redact-before-clip error text, magic-byte sniff that never trusts file extensions. Optional vision-bridge registers a media-lens wrapper into the host model selector so a pure-text model gains image/audio/video sight. Registering / authenticating multimodal models and true inline audio-video upload lean on two companion plugins, declared as optional peers (absence auto-degrades, never errors): dsh-thinking-levels fronts the model config / registration surface, dsh-llm-openai-completions takes over the OpenAI-compatible transport that serializes file blocks into video_url / input_audio. Privacy: media goes to remote providers by default; strictLocalOnly keeps content on-machine. Prerequisites not shipped with the package: ffmpeg/ffprobe on PATH (frame sampling / reencode / duration probe; degrades to metadata when missing) and a user-configured local ASR CLI for the audio fallback. Hosts 0.1.7 / 0.2.0 / 0.2.1 (6 rc, exact engines.dsh enum). npm: dsh-media-lens.

Ctrl+F find-in-session for the conversation, powered by the session store rather than the DOM - labels every hit by source (you / assistant / reasoning / tool call / tool result / system), groups results by turn, merges identical snippets, offers prose-vs-everything scope, regex / case / whole-word options, highlights all matches, and copies or exports the result set as Markdown.

Sidebar session-search toggle between title and content: title filters by session title, content searches historical messages through DSH's built-in full-text index, grouped per session with the strongest snippet and message-type tags.

Composer-side prompt library: a button next to the input opens a picker with group chips and word-split AND search over saved snippets, inserting one into the draft or appending it, filling {{variables}} before insertion, with 13 built-in templates. Snippets live in one local JSON file behind a rev lock, a per-save backup, and whole-library JSON import/export; a settings page handles editing, grouping, pinning and a 6-second delete undo.

Generative UI: the model calls render_ui with a React snippet and the answer renders as an interactive card in the conversation. The snippet runs in a sandboxed iframe with an opaque origin, so it cannot read the host page, its storage or its cookies, and the frame CSP blocks the network; a message from a card is only sent after the user confirms it, and a failing card shows its error with the source behind a toggle.

DSH prompt library and reusable snippets plugin: save, edit, delete, and append prompt templates, workflow instructions, and reusable text from a button beside the composer without sending.

Zero-key web search provider for the built-in web_search tool: scrapes Bing China, 360 and SearXNG through a backend fallback chain and returns real URLs with snippets and publish dates. No API key and no settings card are required. SearXNG is used only when you set your own instance URL, and installing this plugin switches web_search to it and turns off the official DeepSeek search row.

Snipaste-style screenshot for DeepSeek Harness: press F1 (a real Windows global hotkey) to freeze and dim the whole screen, drag a region, then draw red boxes and click-to-type text annotations with wheel-resizable font; the annotated PNG drops into the composer at native resolution. Esc exits. Windows 10/11.

Complementary web-search provider: every web_search merges the DeepSeek Search API (primary) with serper.dev Google results (secondary) at a fixed 2:1 ratio. Both sides are direct HTTP retrievals with no auxiliary model turn: URL-deduped sources, long DeepSeek summaries clipped into snippets, per-backend timeouts and graceful degradation to whichever backend answers.

Read-only clinic for DSH session logs: 22 named diagnostics (token waste, retry and failure loops, context bloat, cross-session amnesia, idle MCP servers and skills), each reported with a replayable evidence locator such as session.v4.jsonl.zstd#L101-L110, and each finding turned into an executable prescription — a profile-patch YAML snippet or a command with current to suggested values, risk, verification and source — plus a feedback command that retires a prescription you reject, after which the report states it was removed by your feedback. Zero dependencies, default zero egress, session files are never written.

LaTeX snippet expansion in the composer, built from Obsidian LaTeX Suite's own defaults — 138 triggers expand as they are typed, Tab walks the tabstops, and the table of 142 is editable in one JSON file.

Select text in a reply and quote it into the composer as an atomic reference chip: delete the whole chip in one keystroke, click it to scroll back and highlight the quoted turn, and expand it into a bounded reference block at send time so the model can tell the quote apart from what the user typed. Also opens the snippet in a side chat, or copies it to the clipboard.

Document intake for agents: doc_route sniffs a file's real format by magic bytes and measures a PDF's text layer and page column layout before any conversion, and pdf_markdown converts PDFs to Markdown in column reading order with PyMuPDF. The PDF path needs a Python 3 interpreter with PyMuPDF.

Adds a Run button to shell code blocks in replies, executing the snippet through the host shell service and showing its output in a floating bottom-right dock, or in one bottom-panel tab per run.

Tailscale remote-access operations panel for the dsh web GUI: health checks, HTTPS entry toggle via tailscale serve, macOS proxy bypass, relay server ops, and ACL snippet generation.

Minimal snippet and command toolbox for DSH: five tools over a single human-editable JSONL file, zero UI, zero database, zero network, explicit save-only memory.

System proxy detection (scutil/env/PAC) with a status tool and a proxy_export bash snippet tool.