
Security News
Deno Goes the Way of the Dinosaur
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.
dsh-minesweeper
Advanced tools
DeepSeek Harness 扫雷插件 —— agent 与人类同棋盘对战。
游戏内核移植自 Retro Minesweeper(src/game/ 纯逻辑层,零改动复用其规则:首击安全区、泛起式展开、快翻、旗数上限),去 React 化后跑在 Node 里;复古 3D 界面与 Electron 壳保留在原项目,两边共享同一套规则内核。
minesweeper_* 工具经真实工具流水线落子minesweeper/game-over 事件(排行榜等插件可监听)防作弊:引擎棋盘每个格子都带 isMine 字段,工具渲染与 HTTP API 共用同一个防作弊滤网(visibleGlyph),双方都只能看到玩家视角信息。
| 工具 | 说明 |
|---|---|
minesweeper_new | 开新局。可指定难度 / 自定义尺寸(rows+cols+mines)/ 随机种子 |
minesweeper_state | 查看当前盘面(不含未翻开格子的地雷信息) |
minesweeper_auto | 服务端确定性求解:迭代执行「旗数满足→快翻」「剩余隐藏格恰为雷数→插旗」,绝不猜测。把机械步骤从 LLM 挪到服务端 |
minesweeper_moves | 批量按顺序执行多步(reveal/flag/chord,≤40 步,遇终局停止),减少逐格往返 |
minesweeper_reveal | 挖开格子;踩雷即输,翻开全部安全格即胜 |
minesweeper_flag | 插旗 / 拔旗(toggle | place | remove) |
minesweeper_chord | 快翻:数字格周围旗数恰等于数字时批量翻开 |
另注册系统提示词策略段(minesweeper-strategy):引导模型「先 auto 清机械步骤 → 确定的多步用 moves 批量提交 → 只在真正需要推理时逐步来」。
- id: minesweeper
name: dsh-minesweeper
config:
defaultDifficulty: beginner # beginner | intermediate | expert
npm run build # esbuild 打包 src → lib/index.js
dsh plugin --profile web add /Volumes/Code/Coding/DSH/dsh-Minesweeer # 安装进 profile
nohup dsh --profile web --no-open > /tmp/dsh-web.log & # 启动 Web UI (http://127.0.0.1:3080)
安装后无需 --patch:bundle 自带的 cordis.patch.yml 会把插件插入配置树;dsh.client 声明让宿主自动 serve /plugins/dsh-minesweeper/client.js 并注入浏览器启动图。
本地开发也可用 overlay 免打包加载工具半边(见 examples/dev.overlay.yml),但客户端面板需要 bundle 安装才能被发现。
src/
├── game/ 纯游戏内核(移植自 Retro Minesweeper,零框架依赖)
│ ├── types.ts Board/Cell/GameState 类型
│ ├── config.ts 三档难度 + 邻格/安全区计算
│ ├── board.ts 建盘、布雷(RNG 可注入 + mulberry32 种子随机)
│ └── gameLogic.ts reveal/chord/flag/胜负判定(纯函数)
├── session.ts 单局会话(无 React 版 useMinesweeper;计时惰性计算,无定时器)
├── service.ts MinesweeperService —— 人机共享的唯一状态源 + 终局事件恰好广播一次
├── routes.ts 人类面板 HTTP API(GET state / POST new·reveal·flag·chord,同源防护)
├── render.ts 模型可见渲染(防作弊层,visibleGlyph 是字形规则的唯一实现点)
├── index.ts Cordis 接线:工具注册 + 路由挂载 + 配置 schema + 事件
└── ../client/client.js 人类玩家面板(plain JS + React,宿主 __ModuleLoader__ 加载,slots 注册侧边栏入口)(唯一依赖 harness 的文件)
关键实现细节:
export const inject = ['tools'] 供 loader 读取;同时 Object.assign(apply, { inject, Config }) 附着到函数上,使直接 ctx.plugin(apply) 挂载(测试 / 组合场景)也能被 cordis 正确解析依赖并用 Standard Schema 校验配置。npm run typecheck # TS 全量类型检查(含真实 @deepseek-ai 类型)
npm run smoke # 无头冒烟:逻辑不变量 + 防作弊不泄露 + 种子可复现
npm run integration # 真实 Cordis 运行时:挂载 SystemPrompt → tools → 本插件,
# 经 ctx.tools.execute 完整管线对局并验证事件广播
npm test # 两者全跑
FAQs
DeepSeek Harness 扫雷插件 —— agent 工具集 + 人类面板,人机同棋盘
We found that dsh-minesweeper demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Cloudflare is acquiring Deno’s team, which will provide another year of bug fixes and security updates before ending support for the runtime.

Security News
Anthropic’s free OSS Scanner uses Mythos and other Claude models to find open source vulnerabilities and send maintainers reports with proposed fixes.

Security News
On Front Lines’ Early Adopters: CISO podcast, Andrew Becherer shares lessons from Datadog, weighs the long-term costs of AI-built tools, and explains how founders can actually gain a CISO’s trust.