v0.2.10 — 设置界面与会话搜索

更新内容

• 重做账户、模型、搜索、媒体和网络五页设置界面，改善明暗主题、窄窗口和键盘操作。
• 支持接入插件按会话开启或关闭融合搜索；辅助调用独立处理，切换搜索方式时保留完整对话上下文。
• 将锁文件中的 Zod 更新至 4.6.7，修复上游资源耗尽漏洞。

更新后请重启 DSH。账号订阅权限和媒体风险确认规则不变；图片、编辑和视频仍默认关闭。

English

• Refresh the five-tab settings UI for Account, Models, Search, Media, and Network, with improved themes, narrow layouts, and keyboard controls.
• Let integrating plugins enable or disable fused search per session. Handle auxiliary calls separately and replay the full conversation when search mode changes.
• Update the locked Zod version to 4.6.7 to fix an upstream resource-exhaustion vulnerability.

Restart DSH after updating. Subscription entitlements and media risk confirmations are unchanged; image generation, editing, and video remain off by default.

v0.2.9 — 安全依赖与主页更新

安全更新

• 将网络请求依赖 Undici 升级到 8.12.3，包含上游 2026 年 10 月的安全修复，并提高最低依赖版本，避免新安装继续使用旧版。
• 插件功能、配置格式及支持的 DSH 版本不变。建议现有用户更新插件并重启 DSH。
• 更新首页 hero，展示现有的对话、搜索及可选图片/视频能力；媒体仍默认关闭。

Security update

• Updated the HTTP dependency Undici to 8.12.3, including upstream security fixes from October 2026, and raised its minimum version to keep new installations off older versions.
• Plugin features, configuration format, and supported DSH versions are unchanged. Existing users should update the plugin and restart DSH.
• Refreshed the homepage hero to show existing chat, search, and optional image/video capabilities; media remains off by default.

v0.2.8 — 配额显示与网络兼容修复

中文

• 修复部分账号缺少额度百分比时的显示。仅在官方响应完整、计费周期有效时恢复 0% 已用；无法核实时保留未知或部分信息，不估算用量。
• 新增默认关闭的「配额请求兼容模式」，用于处理其他组件的网络包装影响额度读取的情况。仅额度查询使用插件专用通道，沿用当前插件代理；聊天和登录保持原路径。
• 网络设置加载失败时可以直接重试，未保存的地址和开关会保留；修复卸载时旧实例的设置写入可能覆盖后续保存的问题。

现有配置无需迁移，媒体默认关闭策略与账号权限不变。依赖宿主统一出口、数据防泄漏（DLP）或强制网络包装控制的环境不要开启兼容模式；填写插件代理也不会恢复这些控制。

感谢 @KouzakiUmi 的修复与测试补充（#13、#15）。

English

• Fixes quota display for some accounts with a missing usage percentage. The plugin restores 0% used only from a complete official response with a valid billing period; otherwise it keeps the result unknown or partial, without estimates.
• Adds off-by-default Quota request compatibility mode for cases where other components' network wrappers interfere with quota reads. Only quota reads use the plugin-owned channel and current plugin proxy; chat and sign-in keep their existing paths.
• Adds retry for failed network-settings loads without losing unsaved URL or toggle edits, and prevents an old instance's pending settings write from overwriting a subsequent save during unload.

No configuration migration is required. Media-off defaults and account entitlements are unchanged. Do not enable compatibility mode where host-level egress controls, data loss prevention (DLP), or mandatory network wrappers are required. A plugin proxy does not restore those controls.

Thanks to @KouzakiUmi for the fixes and tests (#13, #15).

v0.2.7 — 加固 OAuth 凭据请求边界

中文

• 统一检查 OAuth 登录凭据的请求目的地，拒绝向未列入允许名单的地址发送 Bearer 令牌。
• 带凭据的请求拒绝重定向，聊天 SDK 的实际请求也经过检查；正常端点、代理配置和媒体默认关闭策略不变。
• 新增开发与 CI lint 检查，帮助发现未处理的 Promise、未使用变量和遗漏的分支。

无需重新登录或迁移配置。不新增订阅权限，也不改变现有图片/视频的启用与风险确认方式。

English

• Centralizes destination checks for OAuth sign-in credentials and refuses to send bearer tokens to destinations outside the allowlist.
• Credentialed requests reject redirects, and actual chat-SDK requests are also inspected. Normal endpoints, proxy settings, and media-off defaults are unchanged.
• Adds development and CI lint checks for floating promises, unused variables, and missing switch cases.

No new sign-in or configuration migration is required. This update adds no subscription entitlements and keeps the existing image/video enablement and risk-confirmation flow.

v0.2.6 — 修复部分账号的额度加载

更新内容

• 修复部分账号在设置页看到“无法加载配额”的问题：计费接口遇到服务端错误或连接故障时，会尝试 grok.com 的额度接口。
• 额度回退复用同一 OAuth 登录凭据和已配置的代理；登录失效、权限不足或限流时不会额外回退。
• 校验回退响应的状态、大小与用量数据。无法读取时仍显示失败或未知状态，不把缺失数据当作 0% 或无限额度。

此修复不改变订阅资格或各功能权限；额度接口的可用性仍取决于账号和上游服务。

Changes

• Fixed “Unable to load quota” for some accounts. Billing-service errors or connection failures now trigger a fallback to the grok.com quota endpoint.
• The fallback reuses the same OAuth sign-in credential and configured proxy. Invalid sign-ins, access denials, and rate limits do not trigger an extra fallback.
• Validates the fallback response status, size, and usage data. Failed or missing readings remain unavailable or unknown, rather than appearing as 0% or unlimited quota.

This fix does not change subscription eligibility or feature access. Quota availability still depends on the account and upstream service.

v0.2.5 — 徽标布局与文案修正

更新内容

• 修复“搜索与对话”和“媒体与任务”页的四处“实验性”徽标：徽标恢复为开关旁的小标签，不再拉伸成整行长条。
• 改写中英文订阅用量、网络代理和登录说明，消除“代理”歧义，并区分通用用量展示与 X Subscription 的共享周额度。
• 整理 README 的视频说明，统一页面名称，说明本插件不提供 Cursor 或其他模型、外部 Agent 的接入。

本版不改变登录、搜索或媒体功能行为；图片、编辑和视频仍默认关闭，开启时仍需确认风险、保存并重启 DSH。

Changes

• Fixed four Experimental badges on Search & conversation and Media & tasks. They now sit beside their switches instead of stretching across the card.
• Clarified subscription usage, proxy, and sign-in copy in both languages, distinguishing general usage reporting from the X Subscription’s shared weekly allowance.
• Tidied the README’s video section, aligned page names, and clarified that the plugin does not provide Cursor sign-in or integrations for other models or external agents.

Sign-in, search, and media behavior are unchanged. Image generation, editing, and video remain off by default; enabling them still requires risk confirmation, saving, and a DSH restart.

v0.2.4 — 订阅额度与分类设置

更新内容

• 更新 Grok / X 订阅登录入口，已登录时可重新授权或切换账号，并提供官方订阅管理链接。
• 账号页新增订阅额度、重置时间、套餐与余额展示，按账号缓存 60 秒。缺失数据保持未知，不编造百分比或余额。
• 设置拆为账号、模型、搜索与对话、媒体与任务、网络五页；按页保存和重置，切页保留未保存草稿。
• 修复登录状态请求卡住后停止轮询、旧账号读取或媒体操作迟到覆盖新状态的问题，完善取消与响应资源清理。

图片、编辑和视频工具仍默认关闭；已确认的选择保留，首次开启需确认风险、保存并重启。额度展示不证明媒体权限，停止等待也不会撤销已提交的上游任务。插件为非官方集成，可用性取决于账号资格与 xAI 服务规则；不包含 Cursor 接入。

支持范围仍为 DSH 0.2.0-rc.2 / pi-ai 0.87.1（Node 22/24）。感谢 @KouzakiUmi 在 #8 中的贡献！

Changes

• Updated Grok / X subscription sign-in, with reauthorization, account switching, and a link to the official subscription dashboard.
• Added account-scoped subscription quota, reset time, plan, and balance, cached for 60 seconds. Missing values stay unknown rather than being estimated.
• Split Settings into Account, Models, Search & conversation, Media & tasks, and Network. Saves and resets are page-scoped, and drafts survive tab switching.
• Fixed stalled login polling and stale account/media results overwriting newer state; improved cancellation and response cleanup.

Image generation, editing, and video remain off by default. Acknowledged choices are preserved; first-time enablement requires risk confirmation, saving, and a restart. Quota does not establish media entitlement, and stopping a wait does not cancel submitted upstream tasks. This unofficial integration depends on account eligibility and xAI service rules; it does not add Cursor integration.

Host support remains DSH 0.2.0-rc.2 / pi-ai 0.87.1 (Node 22/24). Thanks to @KouzakiUmi for the contributions in #8!

v0.2.3 — 实验性视频与桌面设置

更新内容

• 新增实验性视频生成、查询与恢复工具，以及会话视频卡片；任务按账号隔离，断线后可恢复而不重复提交生成。
• 图片生成、编辑和视频默认关闭，升级不继承旧媒体开启状态。设置页开启时显示卡片内风险确认，保存并重启后生效；正常调用不重复询问。
• 修复桌面端设置请求被拒绝、视频下载提前结束时的流清理，以及关闭视频或恢复默认后的设置页提示。

升级后如需媒体功能，请重新确认并开启。生成可能消耗订阅额度或产生费用，账户资格与可用性由 xAI 决定；停止等待不会取消上游任务。接口仅支持本机回环，桌面页面和本机请求受信任，不提供本机进程隔离。宿主支持仍为 DSH 0.2.0-rc.2（Node 22/24）。

What's changed

• Added experimental video generation, status and recovery tools, plus session video cards. Tasks are account-scoped and can be recovered after an interruption without resubmitting generation.
• Image generation, editing and video are off by default; upgrades do not inherit old media enablement. Settings shows an inline risk confirmation before enabling. Save and restart to register the tools; normal calls do not ask again.
• Fixed rejected desktop Settings requests, stream cleanup when video downloads end early, and Settings feedback after disabling video or resetting defaults.

After upgrading, confirm and enable media again if needed. Generation may use subscription quota or incur charges; entitlement and availability depend on xAI. Stopping the wait does not cancel upstream jobs. Routes are loopback-only and trust the desktop page and local clients; they do not isolate local processes. Host support remains DSH 0.2.0-rc.2 (Node 22/24).

感谢 / Thanks to @KouzakiUmi for the video tools and media cards.

v0.2.2 — 暗色登录按钮与模型选择修复

更新内容

• 修复暗色模式下登录主按钮文字不清晰的问题，按钮文字颜色随宿主主题变化。
• 修复设置页点击“全部显示”后只剩一个模型的问题。现在会显示所有可聊天模型，重启后仍保留这一选择；图片与搜索专用模型不会进入聊天选择器。
• 已保存的单模型选择不会自动改变。如遇到模型列表被收窄，请在设置页点击“全部显示”。

升级

dsh plugin --profile web add dsh-grok-kit@0.2.2

宿主支持范围不变：DeepSeek Harness 0.2.0-rc.2、Node 22/24。安装及使用说明见 README。

感谢 @KouzakiUmi 在 PR #7 中提供修复。

---

Changes

• Fixed unreadable text on the primary sign-in button in dark mode. Its text color now follows the host theme.
• Fixed “Show all” reducing the model list to a single model. All chat models are now shown, and this selection survives restarts; image and search-only models stay out of the chat picker.
• Existing single-model selections are not changed automatically. If your model list was narrowed, click “Show all” in Settings.

Upgrade

dsh plugin --profile web add dsh-grok-kit@0.2.2

Host support is unchanged: DeepSeek Harness 0.2.0-rc.2, Node 22/24. See the English README for installation and usage.

Thanks to @KouzakiUmi for the fixes in PR #7.

v0.2.1 — 聊天流与图片卡片一致性

本版完善聊天流的终止处理和图片卡片的一致性，未新增模型或变更登录方式。

更新

• 聊天流在正常结束或重试结束后不再尝试补发错误，异常空流仍会明确报错。
• 图片编辑失败时显示正确的标题和读屏标签，不再混用“图片生成失败”。
• 再次编辑时统一去除图片来源的首尾空白，让长度判断与实际使用的来源保持一致。
• 缓存会话图片卡片的数据订阅源，并更新项目简介和安装说明。

升级

dsh plugin --profile web add dsh-grok-kit@latest

升级后重启对应的 DSH 宿主。宿主支持范围与 0.2.0 相同：DeepSeek Harness 0.2.0-rc.2、Node 22/24。

感谢 KouzakiUmi 的修复贡献（#5）。

---

This patch refines chat-stream termination and image-card consistency. It adds no models and does not change the sign-in method.

Changes

• Completed chat streams and retries no longer attempt to append an extra error; unexpected empty streams still report an error.
• Failed image edits use the correct title and accessibility label instead of the image-generation failure label.
• Source-image references are trimmed before re-editing, keeping length checks consistent with the references actually used.
• Session image cards cache their subscription source. Project descriptions and installation notes have also been updated.

Upgrade

dsh plugin --profile web add dsh-grok-kit@latest

Restart the corresponding DSH host after upgrading. Host support is unchanged from 0.2.0: DeepSeek Harness 0.2.0-rc.2, Node 22/24.

Thanks to KouzakiUmi for the fixes in #5.