Плагины

DuckFleet: one flock of machines, one command. Add a machine once and its ACP delegation tool appears — drive one, several, or all of them from natural language. ／ 鸭群：一群机器，一声令下。添加一台机器即自动获得它的派活工具，用自然语言让某个／某几个／全部机器干活。

Operate the Chrome or Edge tab you are already in, through the unpacked extension: hover, coordinate clicks, drag, batched actions, whole-page screenshots, file upload, image addresses and switching between connected browsers — with approval-gated actions

A social deduction game played against your own model configurations. A table has N seats (six by default, one of them yours) and some of the rest are played by agents bound to different provider, model, temperature, system prompt and disguise settings; you interrogate them and cross-check the answers to work out which seats are not human. Seat identity and each agent model configuration stay hidden in the host state until a seat is judged, then the disguise parameters are revealed. Every round exports a per-seat conversation JSONL plus the judgment record, and the same seed with the same move script replays byte-identical, so runs with different models or disguise strengths can be diffed.

Available on npm as dsh-doudizhu-lan. Three-player LAN Dou Dizhu (斗地主) played from a floating window: one machine opens a room on its own port, the other two join with a six-character room code plus an address. Empty seats can be filled by computer players in four switchable strengths (easy, medium, hard, hell), so one or two people can still play a whole hand; the deal starts as soon as the three seats are filled. 54 cards in four suits, bidding of 1/2/3 or pass, the landlord takes the three bottom cards and holds 20, play runs clockwise, and the first-bid seat rotates clockwise between hands. The rule engine is pure and covers 11 legal shapes, with big joker > small joker > 2 > A > K down to 3, suits never compared, straights, pair-straights and planes excluding the 2s and the jokers, and a rocket that beats everything. The table itself is built to be read at a glance: three seat cards side by side in play order (you, then your next and previous seats) with role, hand count and a bar that runs out, one line that says whose hand is on the table and what would beat it, the bottom cards as text, an in-place play history that folds into a single summary line and unfolds into every trick including the passes, plus hint and auto-play buttons that pick the cheapest legal answer out of the local rule enumeration. Nicknames can be changed mid-hand (twelve characters, duplicates get a suffix). Computers run inside the authority and are handed only their own hand, the public record and the seat counts, so no hand can leak; the authority is the only place that decides which card ids leave it. Computers are driven by the room itself, so a one-person table keeps playing with nobody else on the LAN port. Humans have no turn timer, the collapsed floating pill can be dragged around the screen, and 179 unit tests pin the rules, the wire format, the theme tokens, the drag gesture, the history grouping and the computer seats.

Turns the right edge of the chat scroll area into a theremin-style strip: the vertical mouse position picks the pitch (higher up, higher note), and blue ticks mark your own messages so you can click one to jump to it. Includes a draggable on/off pill and volume slider.

A piano keyboard in the DeepSeek Harness UI: click a key to play it, or hold and drag sideways for a glissando across the keys. Notes are synthesized live with Web Audio — no samples, no network, no third-party dependencies — and the volume and starting octave are remembered between sessions.

Two games inside DeepSeek Harness where the model supplies intent and a local engine owns the rules: a twin-brain snake that periodically draws a strategy card, and Chinese chess where the model only comments on a move picked from locally generated legal candidates. Both keep running when the model is slow, offline or out of quota.

Adds a checkbox-style switch at the right end of the Installed group header on the DSH Plugins page: it opens a checklist of the unofficial plugins, all checked by default, and toggles only the ones you keep checked. Once everything is off the button flips to enabling them again. Disable/enable only — it never uninstalls a plugin or deletes plugin files and configuration, and its UI copy follows the app language.

Exports the plugin profile together with selected $DSH_HOME files and browser localStorage into one JSON, imports it back after a per-file preview, and can run pnpm install to reinstall the listed plugins; the format is interchangeable with the dsh-market profile backup.

Agent2Agent (A2A) protocol bridge: serves an A2A endpoint with agent card, message/send, message/stream SSE, task lifecycle (get/cancel/resubscribe) and input-required continuation; a2a_discover/a2a_send/a2a_task_status/a2a_cancel tools for calling remote agents; plus a web ops panel with live task board, one-click cancel and a remote agent directory.

Control Proxmox VE virtual machines from the conversation: 16 tools for the VM console over VNC (screenshots, mouse, keyboard, batched actions, Unicode text and clipboard) and for running commands and reading or writing files through the QEMU guest agent, all over one ssh connection to the node, so the host needs no X11 or Wayland.

Connects the DeepSeek Harness agent running on your own computer to the HarnessMate platform, so you can chat with it, exchange files and approve its tool calls from a phone or a browser.

Connects the DSHM Android client to computer-hosted DeepSeek Harness sessions for remote chat, model switching, and approvals with device pairing and revocation.

Adds a local phone pairing, gateway control, and diagnostic panel for Pocket Bridge in DSH Settings.

Launch Android apps on a virtual display and drive them with screen reading, taps and swipes, leaving the main screen untouched.

iOS remote companion for DSH Desktop 0.2.0-rc.2 on macOS Apple Silicon, with pairing, approval notifications, and device revocation.

OpenAI-compatible HTTP endpoint for DSH sessions plus a phone panel that reads transcripts, browses files, sends or queues messages, and answers approvals and questions.

Deterministic prompt-injection interception: tool results from file reads, repo searches and web fetches are scanned before they enter model context; high-severity findings quarantine-wrap or block, and credential-material files quarantine on the path alone.

System-prompt surface drift gate: every section any plugin or preset contributes to the assembled system prompt is hashed and baselined; a silent rewrite of what the model is told fails loud.

Deterministic write gate: scope policy denies out-of-scope write/edit calls before they touch the disk, residue rules scan the written text, and every decision lands in a content-hashed JSONL ledger; can reuse the repo's agent-pr-gate.yaml so CI and session enforce one policy.

Tool-surface snapshot and drift gate: baselines the full visible tool registry (name/description/parameters, MCP tools included) into a committable JSON file and warns loudly when an upgrade adds, removes or reshapes a tool.

Hermetic composition lock: fingerprints the profile's dependencies, bundle order, lockfile and patch layer; booting a drifted composition warns, or fails under strict mode (the --frozen posture for CI).

Deterministic network egress gate: web fetches and searches are checked against a destination allowlist in tools/pre-execute and denied before they run; shell fetch-verbs are observed (enforcement opt-in).

Signed chain-of-custody for sessions: every watched tool result appends a hash-chained, ed25519-signed record, with commits bound into the chain — tampering with any line or truncating the tail fails deterministic replay verification.