Plugins

Read-only CNKI bibliographic search for DSH: four MCP tools (search, detail, export, status) drive your own Edge/Chrome through a native-messaging bridge, with no PDF downloads, a 3-second minimum interval and a 300-action daily cap. Requires pip install wensu plus wensu setup and loading the browser extension before the four tools appear.

Adds Tako chat models to the official llm-pi-ai provider list from Tako's public catalog, with live refresh, context windows from size tags, and browser one-click sign-in writing a cr_ key into DSH credentials.

Draws the sidebar navigation as a compact two-column grid at every viewport; on narrow, short or coarse-pointer screens it additionally caps the navigation at 34vh with scrolling so the workspace and session history keep a 38vh floor. Also repairs dsh-resource:// records whose protocol the browser URL parser reports as empty.

A to-do list that lives in the right sidebar instead of the conversation: add an item, tick it off, delete it, and drag rows to reorder them. Items are kept only in the browser's localStorage, and the plugin registers no model-facing tools; a button in the conversation header opens the panel.

Enlarges the DSH web settings dialog (default 1180x920, 20px steps, remembered per browser) and adds an Advanced Settings page that resizes it and hosts Host operations: restart dsh with a 3-second delay and a busy confirmation, restart once all sessions have been idle for 10s (cancellable, repeat clicks idempotent), last start time with uptime, and a dsh version/update check that compares npm dist-tags across selectable channels without upgrading. The same bundle replaces the sidebar brand area with a machine name, adds a read-only provider, model and thinking-level cell beside the composer stats pills, and a switch that registers or unregisters the three dsh_restart_* agent tools at runtime. Zero dependencies, no build step; all routes sit behind the connection trust fence.

DeepSeek Harness plugin for harnesses running in a container, with no access to your local file system: download buttons instead of "Show file location", a "Show files" shortcut, and an in-sidebar Monaco file editor, all through the browser.

Token-efficient web reading for DeepSeek Harness: one call fetches several pages through a real Chrome/Edge over CDP, gates them by relevance and returns a single digest, cutting context tokens by 80-98%. Real search URLs, login flow, screenshots, three proxy modes.

Moves and resizes the DeepSeek Harness settings panel; its position and size are remembered per browser.

Open STL meshes in the right-Sidebar document preview: browser-side binary/ASCII parsing, a WebGL viewport, and size/volume/surface-area/watertightness statistics.

DeepSeek Harness 插件：在 Boss 直聘求职者侧浏览岗位，为每条 JD 生成只属于它的自我介绍并发给 HR（可见浏览器 + CDP 状态机 + 文案护栏）

Hot-reloads DSH plugin modules without restarting the app (module-cache purge, junction-path matching, bust fallback) and registers a refresh button in the session header so the browser page loads the new plugin bundles.

Plays a voice alert and a browser notification when a turn finishes, asks for input, or fails, and can push the same summary to a Feishu bot webhook as a card.

Bidirectional GitHub repository sync for DSH: git sync with conflict rollback and pre-push checks, Actions/CI monitoring with per-step run detail, repository add/remove/rename, a web panel with local and remote file browsers, scheduled automation, and six agent tools.

Windows x64 only, 0.5.4 preview: two scoped tools (dragon_browser and dragon_desktop) that drive a visible browser through the DOM or CDP and Windows apps through UI Automation, with per-origin and per-executable read/control scopes, batch steps, a physical-Esc emergency stop and a redacted action log. 0.5.4 only widens the DSH compatibility range to 0.2.0-rc.2 through 0.2.1.x, because 0.5.3 pinned it to an exact DSH version and was silently skipped on DSH Desktop 0.2.1. Two long-lived native processes remove the per-action process spawn, so a single key step takes about 0.7 s on the same machine; when another window steals the foreground the step is aborted instead of typing into the wrong place. The browser side ships its own Edge/Chrome launcher and CDP client, so it no longer needs another browser plugin or the Electron runtime. It is not an OS sandbox; logins, admin windows and secure desktops stay with the user.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Built-in browser: gives the agent a real headed Chromium it can open, click, type and scroll in, keeping page state across calls.

A persistent translate button lives in every page the browser opens: click it and every visible text node is replaced in place, click again to restore. Hold to drag, drop it near an edge and it tucks into a small handle; it is re-injected automatically after navigation. The host LLM service does the translation — the plugin holds no API key.

Installs the codex-cua skill so DeepSeek Harness can use Codex computer use: drives Chrome and native macOS apps through the runtime bundled with the ChatGPT/Codex desktop app, ships a persistent session client and a doctor self-check. Requires the ChatGPT/Codex desktop app with its Chrome extension, Python 3.9+, and macOS.

Bridges the Cua Driver MCP server into DSH: installs the cua-driver executable when it is missing, starts it over stdio through the in-box MCP client, and registers its 60 accessibility-first window, input, menu, and browser tools with a bundled workflow skill and one-time macOS permission guidance.

Live DeepSeek API balance and this session's token usage in the conversation header, with a detail panel for the topped-up / granted balance split, request count, input, output and cache-hit tokens, and context pressure. The API key is read on every query and is never cached, written to disk or returned to the browser.

DeepSeek API wallet balance in the composer dock with a popover showing topped-up and granted credit, the refresh time, and usage and top-up links, plus a /balance command and an api_balance tool; the Host reads a signed-in account wallet or the DEEPSEEK_API_KEY credential, so the browser only receives amounts.

Sparkle button immediately left of the model selector that rewrites the composer draft into an executable prompt in place, modelled on WorkBuddy: the host calls the conversation LLM with a prompt-engineering system prompt, multi-level undo keeps up to 8 previous drafts, and a token-level diff card shows added and removed spans, the number of changed spots and the net character delta. Runs on the session model, is disabled while the draft is empty, and keeps the browser-session cookie fence in front of the LLM call.

Replaces the host-side folder chooser in the Add workspace flow with a name dialog, so a remote browser can create and open a workspace instead of an OS dialog appearing on the Host screen.

Plays video and audio files in the right Sidebar preview pane, streamed over an authenticated HTTP Range route so a remote browser can play and seek a large file without launching a native player on the Host.