Plugins

Dots-style always-on agent for DeepSeek Harness (dsh): its own computer, reachable over IM, scheduled work, hard budget limits

Operate the Chrome or Edge tab you are already in, through the unpacked extension: hover, coordinate clicks, drag, batched actions, whole-page screenshots, file upload, image addresses and switching between connected browsers — with approval-gated actions

Plays a 44-second sci-fi cold-boot sequence over the DSH window on startup: terminal log, whale mark, four spoken lines, and a skip button. Pure DOM and CSS in one self-contained client bundle, no runtime dependencies.

Minesweeper in a draggable floating window with first-click-safe layout, flags, chord and timer.

Three-player LAN Dou Dizhu (斗地主) played from a floating window: one machine opens a room on its own port, the other two join with a six-character room code plus an address. Empty seats can be filled by computer players in four switchable strengths (easy, medium, hard, hell), so one or two people can still play a whole hand; the deal starts as soon as the three seats are filled. 54 cards in four suits, bidding of 1/2/3 or pass, the landlord takes the three bottom cards and holds 20, play runs clockwise, and the first-bid seat rotates clockwise between hands. The rule engine is pure and covers 11 legal shapes, with big joker > small joker > 2 > A > K down to 3, suits never compared, straights, pair-straights and planes excluding the 2s and the jokers, and a rocket that beats everything. The table itself is built to be read at a glance: three seat cards side by side in play order (you, then your next and previous seats) with role, hand count and a bar that runs out, one line that says whose hand is on the table and what would beat it, the bottom cards as text, an in-place play history that folds into a single summary line and unfolds into every trick including the passes, plus hint and auto-play buttons that pick the cheapest legal answer out of the local rule enumeration. Nicknames can be changed mid-hand (twelve characters, duplicates get a suffix). Computers run inside the authority and are handed only their own hand, the public record and the seat counts, so no hand can leak; the authority is the only place that decides which card ids leave it. Computers are driven by the room itself, so a one-person table keeps playing with nobody else on the LAN port. Humans have no turn timer, the collapsed floating pill can be dragged around the screen, and 179 unit tests pin the rules, the wire format, the theme tokens, the drag gesture, the history grouping and the computer seats.

Exports the plugin profile together with selected $DSH_HOME files and browser localStorage into one JSON, imports it back after a per-file preview, and can run pnpm install to reinstall the listed plugins; the format is interchangeable with the dsh-market profile backup.

Watches a turn's thinking and output streams and cancels the turn when the model starts repeating itself. Four detectors: a verbatim cycle, a counting loop whose lines differ only by a number, repeated lines separated by other text, and a user-supplied phrase list. A catch raises a manual-dismiss alarm card in the global overlay with an optional tone, and a Monitor tab holds the switches, thresholds and hit history. Detection is local string comparison with no model calls, so it costs no tokens.

Safety guard that makes self-killing commands impossible: a safe_kill tool that always excludes the caller and every ancestor process, a bash pre-execute check for pkill self-matches, sudo -S stdin grabs, rm -rf / and similar patterns, and an extensible rule library with block / warn / hint severities.

Conflict diagnosis and repair for DeepSeek Harness plugins. Builds a capability graph of the running Loader profile and of the on-disk cordis.patch.yml layers, comparing imports, peer ranges and config against the host that is ACTUALLY running rather than the profile's possibly-stale copies, and reports the conflicts that fail silently: a fiber stuck PENDING on a service no plugin provides, a browser half injecting a client module nothing provides, a tool id two plugins both register, duplicate Loader entry ids, a row disabled by one layer and re-inserted by another, an import of a host subpath the running host does not export, and a cycle among inject declarations. Every finding carries its evidence, a confidence grade for who owns a name, and a repair with a risk grade — verify it with a dry-run difference table, or take the individual .patch.yml files that --fix-out writes (never auto-loaded, so picking wrong breaks nothing).

Records every session as one readable Markdown timeline inside the session workspace - the full request sent to the model (system prompt and plugin injections included), user input, replies, reasoning, tool calls and results, file reads and writes, web searches, skill loads, command runs and token usage - with a review page, a per-session tab and configurable capture scope.

DSH Cordis computer-use provider for the ZTE Nde desktop. npm install auto-fetches the musl binary built by computer-use-linux-zte-nde (v0.7.7-nde.3) into the package's own bin/ via postinstall; resolveCommand() resolves the cordis command path against import.meta.url so the mount works regardless of dsh web's cwd. Reserves the shared computer-use slot via ctx.computerUse.register and exposes MCP tools under mcp__computer-use-linux-nde-mcp__* (screenshot, list_windows, click, type_text, doctor, etc.). Two notable Nde fixes upstream of this provider: KWin caption+coords fallback for window targeting, and SnapshotCache that keeps AT-SPI single-wake per (app, pid) so Chrome is not repeatedly disturbed.

Emails you when a long turn finishes or errors, when a goal completes or blocks, and when an approval or a question has waited past a timeout; each new notification deletes the previous one from the inbox over IMAP, so the inbox holds at most one.

Send local files to WeChat from any DSH session by reusing an installed IM plugin, plus cron-scheduled tasks that run in fresh sessions, a workspace activity glow, a header activity indicator, a completion chime, a macOS sidebar vibrancy toggle and a one-click host restart.

Zagent — unified three-role self-improvement loop with three operators. Data-RSI (daily cross-sectional cleaning: winsorize → cross-sectional standardization → median fill, plus experience extraction), Harness-RSI (evolves system prompt / memory / skills), and Model-RSI (evolves alpha training recipes via framework-native walk-forward with 2-day gap and multi-seed). Offline one-command run, GPU auto-detect. Ships one skill.

Host-side long-task detection for small-context local models: long outputs are scaffolded into a parts skeleton (one part per reply, then assemble), and multi-step work into a PLAN.md ledger with notes/ (plan first, one step per reply). Detection is heuristic and host-side, so it does not depend on the model judging its own limits.

Verified-progress ledger: three tools record a claimed step as progress only after an independent subagent with a fresh context confirms it against the workspace. The declared scope is fingerprinted before and after each verification, so a verifier that changed anything has its verdict voided and the round cannot become progress.

A resident assistant for DeepSeek Harness that is deliberately not another chat box: one floating window plus one standing conversation, both independent of every other session. The heartbeat is held back by four gates — an authority grant, a daily turn budget, quiet hours and a pacing cooldown — and it keeps working across restarts through a lease it has to hold. Each wake is decided by a model that must answer SKIP or a short message, so silence is a decision rather than a failure. The window shows the standing conversation's real message flow, read from the host session store, or from the on-disk session log when the host does not publish that session, and it can send into that conversation directly. den carries the same reach as the person it stands in for, with one limit: read-only. It may read every session, this machine and work channels such as GitHub, but it does not write, send or publish, it never asks anyone for permission, and it never gates another session's tool calls. `npm run digest:github` turns GitHub notifications and your own open pull requests into three Chinese sections — waiting on you, waiting on your review, and yours — with reply drafts that are explicitly marked as unsent.

Daily brief for DeepSeek Harness. Every day at a fixed hour it ranks the plugin market by real install counts and stars, cross-checks it against your own agent memory and working conventions, and proposes two kinds of item: concrete deltas on the plugins people actually use (original does A, the proposal does B) and directions nobody has built yet. The popularity numbers come from the catalog the market itself publishes and are quoted into the prompt rather than guessed; an entry the market has not measured is shown as unmeasured, never as zero. Approving an item opens a new session named after it and hands that session a fixed delivery contract — implement independently, never fork, test green before publishing. Rejected sources are remembered so they stop coming back.

Answers a hard question with a one-page visual HTML explainer: the model writes a short Markdown draft and the bundled dependency-free `am` CLI builds the layout, CSS and diagram coordinates. Vendors the upstream answer-me-with-html skill verbatim as a skill-only DSH bundle with no Host code.

Live skill provider that reads every Xiaomi MiMo (MiMo Desktop / MiMoCode) skill into the DSH session catalog: the engine-bundled skills under engine-config (unpacked from app.asar when that directory is absent), the MiMoCode global and project roots, extension-contributed skill directories declared in extensions.json, and the brand compatibility roots MiMo's own skillPathCompat setting enables.

Strict verification for every task: plan 2-7 steps, execute them with worker subagents, verify each deliverable with an independent memoryless verifier subagent, and fix in at most three cycles before reporting honestly.

Spring Boot admin toolkit: EasyExcel batch import/export code generation and Thymeleaf + LayUI template safety guard.

Forces ASD-STE100 Simplified Technical English on every reply and every document. Commands: /asd100 on, /asd100 off, /asd100.

Bridge to the local doc2md (markdown_monitor) CLI — one doc2md tool with convert, read, scan and status actions over docx, doc, xls, xlsx, pdf and image files.