Plugins

Adds upload, download, new folder, delete, drag-to-move, drag-to-chat and in-place text editing with auto-save to the workspace Files tab and file previews.

Freezes the DSH chat scroll position: new replies no longer drag the viewport to the bottom — it stays where you left it. Only after you send a message does it follow to the bottom so you can see your own input, then it locks again once the answer starts streaming. Each session remembers its own position (persisted across reloads), a settings toggle turns it off, and it never intercepts your own scrolling.

Responsive card grid for the DeepSeek Harness composer model picker, grouped by provider. Host-only: injects a stylesheet through webserver/index-inject without rebuilding the client bundle, and supports both the stock picker and the dsh-peakrate menu.

Adds a restart control at the DSH Web sidebar foot: the host exits through its own graceful path and the detected supervisor (systemd, Kubernetes or Docker) boots the replacement, or the plugin starts one directly when it finds no supervisor; a frame-wide notice polls the host pid until a new process answers.

Declarative interactive cards for DSH: the model writes a spec, the Host compiles it into a JSON program, and the client renders forms, tables, charts and lists with local state and explicit submit.

Adds a lightweight follow-up row under each DSH answer: one anchor question plus 1-3 user-voice quick replies, so the next turn is one click away; supports always / balanced / conservative strategies and optional refusal or emotional-context skips.

Opens .blend files in the right-Sidebar document preview: Blender headless exports a cached GLB with scene statistics, rendered by a dependency-free WebGL viewport. Requires Blender 3.6+ on PATH (or set blenderPath).

Give DeepSeek Harness its own persistent computer: a bundled microVM with shell, browser, live view and approval gates

DSH guard against self-repetition in streamed model output: detects a degeneration loop in reasoning or visible text, aborts the runaway turn and wakes the agent with a corrective notice.

Operate the Chrome or Edge tab you are already in, through the unpacked extension: hover, coordinate clicks, drag, batched actions, whole-page screenshots, file upload, image addresses and switching between connected browsers — with approval-gated actions

Two-player chess in a draggable floating window with full rules, undo and PGN export.

A social deduction game played against your own model configurations. A table has N seats (six by default, one of them yours) and some of the rest are played by agents bound to different provider, model, temperature, system prompt and disguise settings; you interrogate them and cross-check the answers to work out which seats are not human. Seat identity and each agent model configuration stay hidden in the host state until a seat is judged, then the disguise parameters are revealed. Every round exports a per-seat conversation JSONL plus the judgment record, and the same seed with the same move script replays byte-identical, so runs with different models or disguise strengths can be diffed.

Three-player LAN Dou Dizhu (斗地主) played from a floating window: one machine opens a room on its own port, the other two join with a six-character room code plus an address. Empty seats can be filled by computer players in four switchable strengths (easy, medium, hard, hell), so one or two people can still play a whole hand; the deal starts as soon as the three seats are filled. 54 cards in four suits, bidding of 1/2/3 or pass, the landlord takes the three bottom cards and holds 20, play runs clockwise, and the first-bid seat rotates clockwise between hands. The rule engine is pure and covers 11 legal shapes, with big joker > small joker > 2 > A > K down to 3, suits never compared, straights, pair-straights and planes excluding the 2s and the jokers, and a rocket that beats everything. The table itself is built to be read at a glance: three seat cards side by side in play order (you, then your next and previous seats) with role, hand count and a bar that runs out, one line that says whose hand is on the table and what would beat it, the bottom cards as text, an in-place play history that folds into a single summary line and unfolds into every trick including the passes, plus hint and auto-play buttons that pick the cheapest legal answer out of the local rule enumeration. Nicknames can be changed mid-hand (twelve characters, duplicates get a suffix). Computers run inside the authority and are handed only their own hand, the public record and the seat counts, so no hand can leak; the authority is the only place that decides which card ids leave it. Computers are driven by the room itself, so a one-person table keeps playing with nobody else on the LAN port. Humans have no turn timer, the collapsed floating pill can be dragged around the screen, and 179 unit tests pin the rules, the wire format, the theme tokens, the drag gesture, the history grouping and the computer seats.

Two games inside DeepSeek Harness where the model supplies intent and a local engine owns the rules: a twin-brain snake that periodically draws a strategy card, and Chinese chess where the model only comments on a move picked from locally generated legal candidates. Both keep running when the model is slow, offline or out of quota.

Adds a checkbox-style switch at the right end of the Installed group header on the DSH Plugins page: it opens a checklist of the unofficial plugins, all checked by default, and toggles only the ones you keep checked. Once everything is off the button flips to enabling them again. Disable/enable only — it never uninstalls a plugin or deletes plugin files and configuration, and its UI copy follows the app language.

Exports the plugin profile together with selected $DSH_HOME files and browser localStorage into one JSON, imports it back after a per-file preview, and can run pnpm install to reinstall the listed plugins; the format is interchangeable with the dsh-market profile backup.

Control Proxmox VE virtual machines from the conversation: 16 tools for the VM console over VNC (screenshots, mouse, keyboard, batched actions, Unicode text and clipboard) and for running commands and reading or writing files through the QEMU guest agent, all over one ssh connection to the node, so the host needs no X11 or Wayland.

Connects the DeepSeek Harness agent running on your own computer to the HarnessMate platform, so you can chat with it, exchange files and approve its tool calls from a phone or a browser.

Deterministic prompt-injection interception: tool results from file reads, repo searches and web fetches are scanned before they enter model context; high-severity findings quarantine-wrap or block, and credential-material files quarantine on the path alone.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Deterministic network egress gate: web fetches and searches are checked against a destination allowlist in tools/pre-execute and denied before they run; shell fetch-verbs are observed (enforcement opt-in).

Context firewall for DeepSeek Harness: credentials in successful plain-text tool results become opaque ⟦cloak:category:n⟧ placeholders before they reach the model, with originals kept only in a process-memory, agent-scoped vault. 36 built-in signature families (shared with the cloakpack git pre-push guard), key-name rules for unknown formats, custom regex rules, dry-run mode, an audit log, and the /cloak command.

Watches a turn's thinking and output streams and cancels the turn when the model starts repeating itself. Four detectors: a verbatim cycle, a counting loop whose lines differ only by a number, repeated lines separated by other text, and a user-supplied phrase list. A catch raises a manual-dismiss alarm card in the global overlay with an optional tone, and a Monitor tab holds the switches, thresholds and hit history. Detection is local string comparison with no model calls, so it costs no tokens.

Safety guard that makes self-killing commands impossible: a safe_kill tool that always excludes the caller and every ancestor process, a bash pre-execute check for pkill self-matches, sudo -S stdin grabs, rm -rf / and similar patterns, and an extensible rule library with block / warn / hint severities.