Plugins

A Bilibili companion that keeps its own schedule. A 60-second tick in the plugin host wakes a dedicated agent session at a random moment inside the configured time windows (opting out of a day is a configurable chance), then hands it a bundled CLI of 38 subcommands — feed, subtitles, danmaku, comments, ffmpeg frame grabs, and two diaries. Shares at most N items a day by commenting on them and @-mentioning the owner (default 3, enforced from a written quota log, and it stops on rate-limit or captcha signals). Also polls comment replies, direct messages and live-room danmaku; replies to anyone but the owner are queued for approval in Settings. Settings → 养鱼 writes ~/.dsh/bili-whale.config.json; cookies live separately in ~/.bili-ai/credentials.json and are never echoed back. The HTTP routes are loopback-only behind DSH's trust fence. Needs Node 18+ and ffmpeg on PATH for frame extraction.

Drive a real Chrome/Chromium browser from DeepSeek Harness with 35 structured tools for navigation, snapshots, clicks, forms, JavaScript/CDP, screenshots, downloads and tabs; a live sidebar mirrors the page and accepts mouse and keyboard input. It ships a managed CDP runtime, keeps login state across calls, and can import cookies from your everyday Chrome through a companion extension.

Replaces the dsh web startup to allow binding 0.0.0.0, gated by username/password login: signed session cookies, /api route protection, an auth tab in the settings panel, and a reset CLI that rotates the signing key to invalidate all sessions.

Secure remote access for the DeepSeek Harness Web UI: a login gate, MFA/TOTP, signed session cookies, optional admin/user/guest roles, in-browser workspace selection, and allowlisted remote file previews.

Raises the local Host's HTTP header budget to 64 KiB and retires stale dsh-auth-* launch cookies on each response, so a fixed profile cannot lock itself out of the desktop welcome handshake after roughly 72 restarts.

Login gate for the dsh web surface: password or shared-token authentication, session cookies, rate limiting, and a user-management CLI (dsh.bundle manifest since 0.4.1, one-command `dsh plugin add` mounting).

Authentication gateway for the DeepSeek Harness Web UI: the login gate covers pages, /api, /plugins and WebSocket upgrades; PBKDF2 password hashing with per-user salts, HttpOnly SameSite session cookies named per DSH_HOME and IP-based login lockout; invite-code registration; two-factor login with TOTP or passkeys (WebAuthn: several keys per account, phone enrolment by QR, username-less sign-in, and a step-up before any login factor is added or removed); a user-management settings panel (users edit their own profile and manage their own TOTP and passkeys, admins add or remove users, reset passwords, manage invites and clear the passkeys of a lost device); per-user model and API-key configuration whose private entries are encrypted with a key derived from the login password and stay unreadable by any admin, with admin sharing to selected users (usable, balance visible, key never shown, revocation immediate) and unconfigured users blocked rather than falling back to the deployment configuration; per-user isolation on the REST and list APIs and per-frame ownership filtering on the WebSocket mux; session persistence across restarts; a JSONL audit log; and a fail-closed gateway. Requires the DSH 0.2.0 line (the 0.1.1-rc.2 transport line was removed in 0.7.0); passkey login needs a localhost or HTTPS origin because browsers require a secure context.

WebUI authentication enforced at the HTTP/transport layer: four-layer login gate (resources, plugin bundles, /api, WebSocket), server-side sessions with HttpOnly cookies.

Controls the Chrome you are already logged into: the model clicks, types, fills in forms, reads pages, takes screenshots and downloads files in your real tabs, including inside same-origin iframes. Runs on macOS, Windows and Linux; needs Chrome 116+ and Node 18+. Works over native messaging and chrome.debugger instead of a listening port. Ships 12 browser_* tools and a cb CLI, dispatches real CDP input events, draws an on-page cursor that also appears in screenshots, and adds a toolbar panel with live status, the controlled tabs and a pause switch. browser_download saves a link, an element's target or a URL with the site's login cookies (following redirects, keeping the server's file name) to the Downloads folder or the session's working directory; cross-origin iframes are named in the snapshot but not entered. The native host and the MV3 extension travel inside this tarball: on first load the plugin copies them into place and writes the native-messaging registration itself, so there is no clone, no install.sh and no python3 - the one step left is adding the extension to Chrome: install DSH Bridge from the Chrome Web Store (https://chromewebstore.google.com/detail/bippcbbbipppmhjkjomgdnjbooecbimo, no Developer mode), or load the bundled unpacked copy at chrome://extensions (the plugin opens that page and puts the folder on the clipboard for you). Until then the tools fail loudly with those steps. On Windows the registration goes into the registry (for Chrome and Edge) and the host talks over a named pipe. A daily CI run on GitHub's macOS, Windows and Linux machines installs the plugin, loads the extension into a real Chrome and reads a page through the browser_* tools.

Publishes the DSH Web GUI to LAN or internet with dsh kept on loopback. Every source must sign in for an HMAC session cookie unless passwordless LAN is opted into. Adds self-signed or custom TLS, a secureCookies override for plaintext-HTTP proxies, and a UUID shim for plain-HTTP origins.

Drives a real Chrome through a local MCP server so the agent can search Google/Bing/Sogou, read any page including JS-rendered and login-only content, automate click/scroll/type/key-press/select in a background window, and run platform search/detail/comment/download for Zhihu, Xiaohongshu, Douyin, Bilibili, X and Reddit; resumable comments, SHA-256-verified downloads, cookies never returned, localhost only.

Windows-only floating percentage meter for the DSH desktop (0.2.x) cookie jar: it estimates how much of the request-header budget the dsh-auth cookies occupy, turns red past half, and clears the jar on the next launch with one click, avoiding the lockout that hits after roughly 72 launches.

Union web search for DSH (consolidated successor of DDDMUC/dsh-free-search, which it credits): 28 engines across three tiers — keyless free (Bing/DuckDuckGo/AnySearch/SearXNG multi-instance union, plus Exa/Tavily/Keenable/Firecrawl/Parallel keyless modes), paid-with-key (Zhihu/Perplexity/Serply/DeepSeek official/You.com/Baidu/Kimi/Aliyun/Doubao/Zhipu/Bocha/Metaso), and model built-in search (OpenAI/Gemini/Claude/Grok, explicit opt-in only) — with auto smart routing, per-engine enable/disable & fallback priority, parallel top-3 merge, multi_search, failure-aware fallback, a toggle to block the system built-in search, time filtering, platform search, web_fetch and a web settings UI. Experimental free advance_fetch: whole-page GFM-Markdown or CSS-selector/fields structured extraction with no API key and no per-call billing; fetch identity configurable (custom User-Agent, Referer, per-domain cookies attached only on domain match, never leaked across cross-domain redirects). Hosts 0.1.0-rc.2 through 0.2.1-rc.2 (17-tag exact engines.dsh enum; the rc.2 search-provider takeover goes through volatile config pinning after capability probing, never version branches). Paid engines need your own API keys (optional; free engines work keyless). npm: @drscrewdriver/dsh-union-search and bare dsh-union-search.

The cyber-elixir of youth for the desktop client: fixes the `desktop welcome: Web authentication failed` (HTTP 431) launch failure — an Electron random-port launch lets `dsh-auth-*` login cookies pile up per port (70+ of them, ~229 B each), the startup request headers blow past Node's default 16 KB cap, and the client can no longer launch. Two fixes in one: a scriptable cleaner that removes leftover login cookies from the cookie database (Chromium SQLite) — explicit, offline, keeps a `.bak` copy, `--expired-only` narrows the scope — and a `patch` feature on the settings panel that fixes the launch port through the profile `cordis.patch.yml`, so the client always starts from a single port and cookies stop accumulating across different ones (rewrite `port` as a `!!js` expression to keep the `--port` flag in charge; a per-profile snapshot makes one click revert it). Read the README for usage. Interface, CLI output and market metadata in 9 languages. The purge runs from the bundled CLI (`dsh-cookie-cleaner --clean`) only while the client is fully closed; the in-app half is read-only. npm: `dsh-cookie-cleaner`.

Bilibili live-room danmaku for DSH: read live chat, send messages only after explicit confirm, hang out in a room in the background, optionally let the model decide whether to reply, and optionally transcribe stream audio to text; no video understanding. Setup needs a Python 3 venv with the bundled requirements plus Bilibili cookies; transcription additionally needs ffmpeg and a Whisper engine.

Chrome and Edge browser control that drives the real logged-in profile, tabs and cookies through an MV3 extension and a loopback Bridge, exposing browser_* tools, a Skill and /chrome commands.

Windows-only. Counts the dsh-auth-* login cookies the DSH desktop shell has accumulated, shows how much of the 16 KiB request-header budget they eat and how many launches are left before the shell stops opening with "desktop welcome: Web authentication failed". The web UI gets a draggable floating card that re-checks every 10 minutes, keeps one snapshot per local date and can refresh on demand; a standalone Windows checker ships in desktop/.

Generative UI: the model calls render_ui with a React snippet and the answer renders as an interactive card in the conversation. The snippet runs in a sandboxed iframe with an opaque origin, so it cannot read the host page, its storage or its cookies, and the frame CSP blocks the network; a message from a card is only sent after the user confirms it, and a failing card shows its error with the source behind a toggle.

Serves a live /auth-cookie-sweep page showing how full the local Host's cookie jar is, how many random-port launches are left before the 431, and repairs the jar in one click, and expires stale dsh-auth-* cookies once a few have piled up, so a profile already locked out recovers after one restart.

Caps the lifetime of DSH desktop's dsh-auth-* session cookies at 7 days, so they stop piling up in the Cookie header until startup fails with HTTP 431.

Drives the sidebar browser already open on the right: same cookies and same sign-in, a pointer you can watch, no second window.

DeepSeek Harness plugin: restart without losing work. It waits until every conversation is idle, restarts the host, and picks the interrupted work back up instead of dying with it; where a supervisor already manages the host it asks that supervisor, and it never starts a second host next to a running one. It also fixes a common one: stale login cookies pile up on every launch until the request header overflows and the host will not start; the plugin clears them before each restart. Every restart is preceded by a snapshot of the configuration and the installed plugins - 2 are kept by default, up to 10 are allowed, and old or incomplete ones are pruned. That snapshot is never applied automatically: the plugin does not watch the host and does not restore anything on its own; it is only there for you to look at, or to roll back by hand. When the work is done it counts down and powers the machine off, so nobody has to stay up at night. It works on the Windows desktop client, and on a hosted dsh web instance - verified on WSL with systemd; Windows-hosted web, WSL without systemd, and native Linux are untested.

TikTok-style video feed in a floating sidebar window: swipe local or SMB-NAS folders, or paste online video URLs (yt-dlp, bilibili/YouTube, cookies.txt login state); the window auto-fits the video aspect ratio, with fullscreen, drag-resize, Range streaming and an agent video-queue endpoint.

Transport-level authentication gate for the DeepSeek Harness Web GUI with server-side sessions, HttpOnly cookies, IP-based login throttling, and an scrypt password CLI.