Plugins

DeepSeek Harness 插件：在 Boss 直聘求职者侧浏览岗位，为每条 JD 生成只属于它的自我介绍并发给 HR（可见浏览器 + CDP 状态机 + 文案护栏）

模型故障转移队列：P1 限额/限流/不可用时自动切到队列下一个模型继续，全部图形界面配置 | Model fallback queue for DeepSeek Harness: auto-switch to the next model when the current one hits quota or rate limits

Hybrid model router for DeepSeek Harness: declarative rules, user-configurable cost control (cost-first / quality-first / balanced), optional LLM task classifier, and failure fallback chains.

Agentic roleplay for DSH with structured worlds, autonomous characters, persistent sessions, world authoring, speech, and image generation. Requires Firefox2100/dsh-agentic-roleplay#state to be installed and enabled.

On every DeepSeek Harness launch, checks the installed and enabled plugins for newer npm versions, lists them in the UI and updates them after confirmation.

Union IM bridge for DSH — an independent implementation uniting the capability sets of community peer plugins (xmanrui/dsh-im, MichengAI/dsh-im-connect). Drive your agent session from 15 channel adapters across 12 platforms (including email; WeCom/DingTalk/QQ each contribute two: bot + self-built app or notify tier) — WeChat (official iLink QR bind), Feishu/Lark (long-connection + streaming cards; the voice tier requires system ffmpeg), Telegram, Discord, WeCom intelligent bot & self-built app (signed callback), DingTalk (stream + AI Card and custom-robot notify), QQ official bot (plus notify tier), Slack (Socket Mode), WhatsApp (Baileys QR pairing; the dependency ships as an optionalDependency of the plugin package), Matrix, iMessage (macOS only), Email (IMAP/SMTP thread routing). The cross-version narrow waist auto-adapts settings gen1/gen2/gen3 across hosts 0.1.2-rc.1→0.2.1-rc.2 (12-tag enum; rc.2 verified by a real desktop-profile install with double read-back) using capability probing only, never version branches. In chat: a 25-command panel, tool-approval and question loops answered in the originating chat (deny-by-default, initiator-only, 5-min expiry), image/file input gated on host model metadata, deliverable file return, a delivery log with bounded retry (uncertain is never re-sent), proactive delivery and fragment composition. It also splits the native sidebar into self-owned Tasks / Channels tabs (standing down entirely when another plugin already owns the slot), registers an `im-concise` agent preset plus reply sanitisation that keeps GenUI fences and raw HTML out of text-only chats, renders `svg` fences to PNG images, guards model choice with an allowlist, and mirrors each turn's final answer to notify channels via `/relay` (addressed by account ID or alias, never guessed on ambiguity). Secrets are one-way into the vault and never echoed back. npm: `dsh-im-union`.

Chinese progress guidance and user-confirmed project or global memory, respecting DSH Full access and reusing host Auto review to reduce repeated prompts.

Restrict the file access of agents in any sandbox mode (read-only / workspace-write / danger-full-access / auto) to the session workspace, and ask the user to rule on cross-border access. Each session can also use the gear selection box next to the composer to relax the cross-border gate to 「 read-only outside workspace 」 or 「 fully release 」.

Outbound route pool for DeepSeek Harness. Ships 15 seed routes plus a 20-entry candidate pool covering 7 target kinds (GitHub raw/codeload/main, npm registry, PyPI index, HuggingFace, general). Routes are verified before use: upstream IP lists go through a TLS handshake with full certificate-chain validation (a bare TCP check can be answered locally and report dead IPs as healthy), and failures advance a cooldown ladder of 2/5/15 minutes with the fastest healthy route picked per target kind. Routes are applied by rewriting the URL with one of four rules (prefix, registry, index, host-replace), reaching git, pip, npm, pnpm, gh, curl and wget through three paths: the shell seam (download commands the model runs through the bash tool are intercepted and rewritten automatically; commands wrapped by the pwsh tool, and fetches made by the host itself or the renderer, are not covered), two registered tools the model can call directly (line_pool_status, line_pool_run), and child-process spawn. Multi-line commands keep their line breaks and only the download segment is touched. URLs carrying credentials (user:token@host) are never rewritten, so tokens are not forwarded to third-party mirrors. No global config is modified. A sidebar panel lists every route with latency, failure reason and cooldown countdown, supports per-route retest and enable/disable, and shows live TUN/proxy status from network-adapter and loopback port checks. The candidate pool is re-verified every 24 hours so newly usable routes are added and dead ones dropped. 570 tests, 87% line coverage.

WeChat Mini Program engineering tools: scan a project for pages missing from app.json, scaffold pages with automatic registration, fix orphan pages, manage subpackages, tabBar and components, and drive the WeChat DevTools CLI for preview QR codes and uploads.

Config snapshot and rollback for DSH: auto-captures before risky changes, ships a standalone restore script that works even when DSH won't boot. Windows only; the restore script is a .bat and needs Node.js.

Inventory every listening TCP endpoint and grade each holder as agent-spawned, workspace, dev-server, unattributed, system or protected; only the first two can be auto-selected, and a reap previews its descendant-closure plan unless confirmed.

Daily AI digest by email: fetches ten sources (OpenAI, Anthropic, Google DeepMind, Hugging Face, arXiv, Hacker News and others), clusters near-duplicate stories, scores them in code and with an LLM, then emails the top three on a daily schedule with a four-part reading (facts, why it matters, impact, open questions). Adds four conversation tools and a sidebar panel for previewing the digest, sending it now and changing the schedule.

Bidirectional GitHub repository sync for DSH: git sync with conflict rollback and pre-push checks, Actions/CI monitoring with per-step run detail, repository add/remove/rename, a web panel with local and remote file browsers, scheduled automation, and six agent tools.

Test work framework for DSH that scaffolds a product, module and version directory tree, registers seven test_framework_* tools and four runtime skills, and adds a prompt-level gate that reports which requirement-document splits, versions, related documents and environment credentials are still unrecorded before testing starts. Requires the playwright MCP server (no fallback).

Keeps an unattended DeepSeek Harness session moving when nobody answers ask_user_question: it fronts the question waterfall, leaves a human answer untouched, and after a configurable window (120 s by default) submits the option marked (Recommended)/（推荐）, or the configured first/last fallback; plan reviews stay with the human unless explicitly enabled.

Windows-only: adds a switch to Settings → General that powers the computer off when the finished conversation ends (default delay 60 s, configurable 5–86400 s), behind a native countdown dialog that cancels the pending shutdown in one click (shutdown /a).

Arms a watch on a directory and delivers a batched, deduplicated diff when the tree goes quiet, filtering out the writes the session made itself; delivery is per watch, either waking a new turn or queueing for the next step.

Reads assistant replies aloud with Microsoft Edge neural voices and highlights the sentence being spoken, so you can follow along while listening. The highlight is yours to style: background colour, text colour and opacity are each adjustable in settings. Also adds a sound-wave play button to every reply, pause plus previous and next sentence, adjustable speed, and an auto-read toggle.

Two-way voice for the DSH web app: dictate with the unified composer, hear replies with speaker buttons and auto-read, on any device. Needs DSH 0.1.7+, Node 22+, Python 3 with numpy and requests, a TTS model, and a microphone.

Windows x64 only, 0.5.4 preview: two scoped tools (dragon_browser and dragon_desktop) that drive a visible browser through the DOM or CDP and Windows apps through UI Automation, with per-origin and per-executable read/control scopes, batch steps, a physical-Esc emergency stop and a redacted action log. 0.5.4 only widens the DSH compatibility range to 0.2.0-rc.2 through 0.2.1.x, because 0.5.3 pinned it to an exact DSH version and was silently skipped on DSH Desktop 0.2.1. Two long-lived native processes remove the per-action process spawn, so a single key step takes about 0.7 s on the same machine; when another window steals the foreground the step is aborted instead of typing into the wrong place. The browser side ships its own Edge/Chrome launcher and CDP client, so it no longer needs another browser plugin or the Electron runtime. It is not an OS sandbox; logins, admin windows and secure desktops stay with the user.

Adds a visible-browser Agent preset (persona and toolset for navigating, filling forms, clicking and screenshotting through the Playwright MCP toolset) plus a gate that refuses every browser tool call in other presets until the user approves that Session through the bundled browser_access tool. The bundle mounts the Playwright MCP provider itself, and both a settings page in the Plugins view and the browser_source tool switch the browser at runtime between Microsoft Edge (default), the Chromium shipped with Playwright, and a CDP endpoint. Requires keeping the shared browser-use registration row in the profile (one provider per process).

Agent tool that returns the running DSH Web GUI URL including its per-process launch token, so browser automation can open the GUI instead of getting a 401.

A persistent translate button lives in every page the browser opens: click it and every visible text node is replaced in place, click again to restore. Hold to drag, drop it near an edge and it tucks into a small handle; it is re-injected automatically after navigation. The host LLM service does the translation — the plugin holds no API key.