Plugins

A Bilibili companion that keeps its own schedule. A 60-second tick in the plugin host wakes a dedicated agent session at a random moment inside the configured time windows (opting out of a day is a configurable chance), then hands it a bundled CLI of 38 subcommands — feed, subtitles, danmaku, comments, ffmpeg frame grabs, and two diaries. Shares at most N items a day by commenting on them and @-mentioning the owner (default 3, enforced from a written quota log, and it stops on rate-limit or captcha signals). Also polls comment replies, direct messages and live-room danmaku; replies to anyone but the owner are queued for approval in Settings. Settings → 养鱼 writes ~/.dsh/bili-whale.config.json; cookies live separately in ~/.bili-ai/credentials.json and are never echoed back. The HTTP routes are loopback-only behind DSH's trust fence. Needs Node 18+ and ffmpeg on PATH for frame extraction.

Drive a real Chrome/Chromium browser from DeepSeek Harness with 35 structured tools for navigation, snapshots, clicks, forms, JavaScript/CDP, screenshots, downloads and tabs; a live sidebar mirrors the page and accepts mouse and keyboard input. It ships a managed CDP runtime, keeps login state across calls, and can import cookies from your everyday Chrome through a companion extension.

Shared real browser for DSH: a native Electron window the human can watch and take over, driven by the agent over CDP with 20 browser_* tools (open/snapshot/execute/fill/screenshot/download/auth), per-task session isolation, cookie persistence, CAPTCHA detection; self-hosts on plain dsh web without a desktop shell.

Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.

Secure remote access for the DeepSeek Harness Web UI: a login gate, MFA/TOTP, signed session cookies, optional admin/user/guest roles, in-browser workspace selection, and allowlisted remote file previews.

Login gate for the dsh web surface: password or shared-token authentication, session cookies, rate limiting, and a user-management CLI (dsh.bundle manifest since 0.4.1, one-command `dsh plugin add` mounting).

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.

Raises the local Host's HTTP header budget to 64 KiB and retires stale dsh-auth-* launch cookies on each response, so a fixed profile cannot lock itself out of the desktop welcome handshake after roughly 72 restarts.

Publishes the DSH Web GUI to LAN or internet with dsh kept on loopback. Every source must sign in for an HMAC session cookie unless passwordless LAN is opted into. Adds self-signed or custom TLS, a secureCookies override for plaintext-HTTP proxies, and a UUID shim for plain-HTTP origins.

Drives a real Chrome through a local MCP server so the agent can search Google/Bing/Sogou, read any page including JS-rendered and login-only content, automate click/scroll/type/key-press/select in a background window, and run platform search/detail/comment/download for Zhihu, Xiaohongshu, Douyin, Bilibili, X and Reddit; resumable comments, SHA-256-verified downloads, cookies never returned, localhost only.

Visible Electron browser for DSH with one shared BrowserWindow, isolated task views, explicit human-Agent handoff, snapshot-reference and native navigation tools, operation trails, demand-driven page thumbnails, keyed session recovery for reliable tab switching and closing, and site-scoped cookie clearing for login maintenance.

Windows-only floating percentage meter for the DSH desktop (0.2.x) cookie jar: it estimates how much of the request-header budget the dsh-auth cookies occupy, turns red past half, and clears the jar on the next launch with one click, avoiding the lockout that hits after roughly 72 launches.

Chrome and Edge browser control that drives the real logged-in profile, tabs and cookies through an MV3 extension and a loopback Bridge, exposing browser_* tools, a Skill and /chrome commands.

Controls the Chrome you are already logged into: the model clicks, types, fills in forms, reads pages, takes screenshots and downloads files in your real tabs, including inside same-origin iframes. Runs on macOS, Windows and Linux; needs Chrome 116+ and Node 18+. Works over native messaging and chrome.debugger instead of a listening port. Ships 12 browser_* tools and a cb CLI, dispatches real CDP input events, draws an on-page cursor that also appears in screenshots, and adds a toolbar panel with live status, the controlled tabs and a pause switch. browser_download saves a link, an element's target or a URL with the site's login cookies (following redirects, keeping the server's file name) to the Downloads folder or the session's working directory; cross-origin iframes are named in the snapshot but not entered. The native host and the MV3 extension travel inside this tarball: on first load the plugin copies them into place and writes the native-messaging registration itself, so there is no clone, no install.sh and no python3 - the one step left is adding the extension to Chrome: install DSH Bridge from the Chrome Web Store (https://chromewebstore.google.com/detail/bippcbbbipppmhjkjomgdnjbooecbimo, no Developer mode), or load the bundled unpacked copy at chrome://extensions (the plugin opens that page and puts the folder on the clipboard for you). Until then the tools fail loudly with those steps. On Windows the registration goes into the registry (for Chrome and Edge) and the host talks over a named pipe. A daily CI run on GitHub's macOS, Windows and Linux machines installs the plugin, loads the extension into a real Chrome and reads a page through the browser_* tools.

Embeds an Overleaf site (overleaf.com or a self-hosted instance) into a conversation tab through a same-origin reverse proxy, with cookie or popup login, selection quoting, caret insertion, compile-log driven fixes, outline navigation, and .bib / .tex synchronization.

Tokenrhythm (基元律动) finance dashboard for DeepSeek Harness: account balance & expiring credits, category-filtered model price cards (with discounted prices), service status and platform key management; login via platform account or session cookie — credentials stay on the local host.

Floating NetEase Cloud Music player for DSH Web: draggable collapsible window with mini mode, playlist discovery with search and hot lists, synced lyrics with translations, persistent playback queue, QR-code or Cookie login, colors following the DSH skin theme.

Union web search for DSH (consolidated successor of DDDMUC/dsh-free-search, which it credits): 28 engines across three tiers — keyless free (Bing/DuckDuckGo/AnySearch/SearXNG multi-instance union, plus Exa/Tavily/Keenable/Firecrawl/Parallel keyless modes), paid-with-key (Zhihu/Perplexity/Serply/DeepSeek official/You.com/Baidu/Kimi/Aliyun/Doubao/Zhipu/Bocha/Metaso), and model built-in search (OpenAI/Gemini/Claude/Grok, explicit opt-in only) — with auto smart routing, per-engine enable/disable & fallback priority, parallel top-3 merge, multi_search, failure-aware fallback, a toggle to block the system built-in search, time filtering, platform search, web_fetch and a web settings UI. Experimental free advance_fetch: whole-page GFM-Markdown or CSS-selector/fields structured extraction with no API key and no per-call billing; fetch identity configurable (custom User-Agent, Referer, per-domain cookies attached only on domain match, never leaked across cross-domain redirects). Hosts 0.1.0-rc.2 through 0.2.1-rc.2 (17-tag exact engines.dsh enum; the rc.2 search-provider takeover goes through volatile config pinning after capability probing, never version branches). Paid engines need your own API keys (optional; free engines work keyless). npm: @drscrewdriver/dsh-union-search and bare dsh-union-search.

Windows-only. Counts the dsh-auth-* login cookies the DSH desktop shell has accumulated, shows how much of the 16 KiB request-header budget they eat and how many launches are left before the shell stops opening with "desktop welcome: Web authentication failed". The web UI gets a draggable floating card that re-checks every 10 minutes, keeps one snapshot per local date and can refresh on demand; a standalone Windows checker ships in desktop/.

Douyin (抖音) automation for DeepSeek Harness: watch private messages and wake the agent event-driven, plus 10 tools (read DM, send DM, comment, @ mention, reply, delete comment, read notice, share video card, pick feed candidates, cookie backup/restore) —

Generative UI: the model calls render_ui with a React snippet and the answer renders as an interactive card in the conversation. The snippet runs in a sandboxed iframe with an opaque origin, so it cannot read the host page, its storage or its cookies, and the frame CSP blocks the network; a message from a card is only sent after the user confirms it, and a failing card shows its error with the source behind a toggle.

Browser automation for DSH: the agent fills in forms, scrapes lists and works across tabs in real pages, using the logins you already have. It drives its own visible window on your desktop — minimise it and it keeps working without stealing focus — and a sign-in, CAPTCHA or native dialog stops the run and hands the page back to you: it never confirms on your behalf. Login state persists (own profile plus session-cookie re-injection). 23 Playwright tools (20 always on, 3 gated and off by default), with a URL allowlist, dialog suspension and a CDP method allowlist that are mechanism-level and pinned by tests.

TikTok-style video feed in a floating sidebar window: swipe local or SMB-NAS folders, or paste online video URLs (yt-dlp, bilibili/YouTube, cookies.txt login state); the window auto-fits the video aspect ratio, with fullscreen, drag-resize, Range streaming and an agent video-queue endpoint.