v1.0.2
LyShell v1.0.2 — Plugins, MCP Audit & Terminal Polish
🧩 Plugin System
A full plugin host with per-plugin capability gates, token-based auth, and local dev installation UI. Plugins run inside the host with scoped API tokens
(Python one-shot/persistent, Node.js persistent); they can also spawn controlled external processes that connect back over stdio MCP. Install from a dev
directory, ZIP, or URL all sandboxed behind granular capability gates.
🛡 MCP Security & Audit
- Activity audit panel real-time MCP call log with calendar picker, filtering, and pagination, accessible from the title bar
- Destructive command confirmation guard
- Per-session token model with fine-grained capability toggles (read / interactiveWrite / execute / localExecute / fileWrite / sessionControl /
sessionMetadataWrite) - Built-in brand icon matching by command name + emoji picker overlay
- Agent sessions are now transient (never leak into the session list)
🖥 Terminal
- Canvas now follows light/dark theme with a unified terminal background color
- CJK IME candidate positioning fixed
- First-column text drift on xterm resize eliminated
- Ctrl+F1F12 shortcuts now work even when the terminal is focused
🪟 Window
- Built-in Chinese and English language bundles
🔧 Fixes
- Closing a tab now fully removes the runtime session entry no more leaked temporary sessions
- File transfer Worker security hardening
- Settings panel split into Terminal / MCP tabs with improved readability
- Status bar cols rows indicator now clickable to clear screen (Ctrl+L), scrollback line counter clickable to scroll to bottom / double-click to clear