dsh-web
zhu1090093659/dsh-webDeepSeek Harness(DSH)Web 插件聚合生态包 · 一切皆插件,创意工坊分发(dsh-market.com)
DeepSeek Harness 终极指南:快速入门、资源推荐、精选插件与实用工具 |The Ultimate Guide to DeepSeek Harness: QuickStart, Resources, Plugins&Toolkit
The ultimate guide to DeepSeek Harness: resources, tutorials, plugins, and tools
This project follows a curated, quality-over-quantity approach to collecting excellent DeepSeek Harness resources and building a richer Agent ecosystem with AI practitioners.
If this project helps you, please consider giving it a ⭐. You can also follow @李不凯正在研究 on X for more hands-on Agent content.
DeepSeek Harness (also known as DSH or dsh) is an open-source Agent Harness project from DeepSeek AI. Built on Cordis, it follows an Everything is a Plugin architecture: model adapters, tools, session logs, interfaces, and the Agent Loop can all be composed and replaced through a plugin tree.
The latest verified official GitHub developer preview is 0.1.2-rc.1; both npm latest and next now point to 0.1.2-rc.1. This RC adds full-history turn navigation, exact token / duration statistics, subagent model selection, ACP standard controls, schedules, connection retry, and replaces one-way report with continuable two-way send_message. Public WebFetch is enabled by default with SSRF protection; the SQLite Session backend was removed (old data is retained and requires an older version to export); DeepSeek adapter requests include enabled plugin package names and versions by default (configurable off), while incremental Session-log upload remains opt-in and off by default. The official release also states that DSH has not been security-audited and that Sandboxes, Approvals, and Permissions do not guarantee isolation. DSH versions shown below are only the development or test baselines claimed by project authors and must not be treated as automatic compatibility with the latest preview.
Install Node.js 22.19.x or 24+ (24+ recommended), then run:
npx @deepseek-ai/dsh web
Open http://127.0.0.1:3080 by default. Configure a model provider under Settings → Models, then create a session. See the official quick start and model provider guide for details.
git clone https://github.com/deepseek-ai/deepseek-harness.git
cd deepseek-harness
pnpm install
pnpm run build
pnpm dsh web
The official Python SDK lets you call Harness programmatically through its bundled runtime, without requiring a system Node.js installation. It currently requires Python 3.10+. Refer to the official Python SDK guide for supported platforms and current limitations.
python -m venv .venv
. .venv/bin/activate
python -m pip install deepseek-harness-sdk
web and headless are built-in distribution Profiles. External plugins join a target Profile as Bundles that declare dsh.bundle:
dsh plugin --profile web add <package-or-git-spec>
dsh --profile web --dump-config
When installing from a Git repository, pin a commit and inspect its installation scripts first. pnpm may require explicit approval for dependency build scripts, which execute outside the Agent sandbox. See the official plugin packaging and installation guide for the complete mechanism.
The official project provides an open-source repository, a companion paper, extensive reference documentation, and an actively maintained developer community.
| Guide | Format | Coverage |
|---|---|---|
| DeepSeek Harness from Zero to One | Chinese guide and demos | Covers concepts, source walkthroughs, eight demos, and a mini-harness teaching project |
| DeepSeek Harness: From First Boot to Teardown | Chinese hands-on ebook | Available as PDF, EPUB, and HTML, with the full system prompt, a 129-line default boot manifest, and three raw session logs |
| Dissecting DeepSeek Harness | Interactive source-code course | Breaks down sessions, context, tools, sandboxing, Code Mode, Subagents, and other core mechanisms |
| What Cordis Is Doing, Seen Through DeepSeek Harness | Chinese architecture essay | Explains the Cordis mental model from a plugin author's perspective and how complexity moves inside the system |
| DeepSeek Harness Handbook | Bilingual handbook | 14 chapters on install, plugin development, security, and cost, with online reading, PDFs, and runnable examples; content is CC BY-NC-SA 4.0 and based on 0.1.0-rc.6 |
| NanoCordis | Runnable teaching implementation | Rebuilds the Cordis plugin framework and a DSH-shaped agent runtime in about 1,600 lines of TypeScript; MIT, npm 0.1.0, and 95 tests. The default fake model needs no key, the Bash tool still asks for approval, and real-model credentials are read only from environment variables |
Public long-form social posts with substantial arguments, practical detail, or first-hand context that supplement gaps in official materials.
| Post | Author and Context | Summary |
|---|---|---|
| Understanding DSH from an Early Participant's Perspective | Jiayuan (JY) Zhang; the author reports receiving repository access one month early | Frames DSH as both a working Coding Agent and an Agent development framework; uses a “LEGO car” analogy for Everything is a Plugin and discusses runtime self-extension, early self-evolving software, current maturity, and functional-programming characteristics. |
| Understanding DSH as an Agent Runtime / Agent OS | Anionex; private-beta participant and plugin author | Explains DSH through the composability of models, tools, policies, storage, context, interfaces, and Loops, then discusses limited Agent visibility into the runtime and controlled self-extension. |
| After a Night with DeepSeek Harness, I Found It Challenging Claude Code the Minecraft Way | PingWest; launch-night media observation | Maps DSH core, plugins, directories, and distributions to Minecraft vanilla, Mods, CurseForge, and modpacks, while recording launch-night compatibility and security debates. |
| Reading DSH Against Codex: Declarative Plugins vs a Swappable Agent Loop | 鸭哥; line-by-line source comparison with Codex. Expanded essay at yage.ai | Contrasts Codex's declarative plugins with DSH's in-process imperative plugins, arguing that everyday coding does not need Cordis complexity; the one structural advantage is a hot-swappable Agent Loop that gives a self-evolving harness a physical slot. |
The following projects provide standalone user interfaces, distribution formats, or productized assemblies rather than a single tool capability.
Classification note: Distributions and forks directly reuse, modify, or repackage the complete DSH Runtime and cannot be installed with
dsh plugin, so they are not plugins. Standalone clients connect to DSH through Web, RPC, ACP, or companion bridge plugins. Both remain important parts of the Harness ecosystem.
| Project | Platform / Form | Description |
|---|---|---|
| DeepSeek Harness Desktop (anywhere-labs) | macOS (Apple Silicon) / Windows · Electron | v2.0.2 pins and runs DSH 0.1.1-rc.2 unchanged, with a local service, tray, recovery / rollback, and built-in plugin market; upstream breaking changes may invalidate old Profiles and unadapted plugins, so create a safe Profile and retain the plugin list before upgrading |
| dsh-desktop | macOS / Windows · Electron · Early | Reuses the official Web UI unchanged and keeps long-running tasks alive in the tray; disables renderer Node integration, restricts navigation, and verifies update packages with SHA-256, but the Agent process retains normal user-level file access and release packages are not formally developer-signed |
| DeepSeek Harness Desktop (steven-kid) | macOS / Windows / Linux · Electron · Early | Minimal shell that preserves the upstream Web UI, uses a random loopback port, Electron sandboxing, and contextIsolation, and smoke-tests packaged startup across platforms; macOS builds are not notarized and Windows builds are not commercially signed |
| DeepSeek Harness Desktop App | macOS / Windows · Electron · Community workbench | v0.1.9 adds projects, Git Worktrees, a browser, Canvas, Sites, Office artifacts, file / folder attachments, and 14 pinned Bundles on the official Web / Profile runtime path. The macOS Apple Silicon package is signed and notarized; the Windows x64 package is unsigned but installation, startup, offline Profiles, recovery, uninstall, and residue cleanup passed on a GitHub Windows runner. Interrupted plugin installs retry safely on the next launch, while plugins deliberately removed by the user are not restored |
| TinyWhale | macOS · Electron · Distribution fork | Directly forks deepseek-ai/deepseek-harness and adds a desktop shell; connects to an existing Web UI or launches a full dsh web Runtime, so it is not a plugin |
| Oh-DSH | macOS / Linux / Windows · Community distribution | Packages DSH, Node.js, and local capabilities as Desktop, Web, and TUI editions with tiered installers and a unified ohdsh launcher |
| DSH Desktop | macOS / Windows · Electron | Cross-platform desktop client for managing local Harness instances, workspaces, random ports, Profiles, plugins, and sessions |
| dsh-launcher | Windows · WebView2 | Lightweight launcher with silent startup, a standalone window, portable packages, and MSI distribution |
| Project | Type | Description |
|---|---|---|
| dsh-TUI | TUI Bundle | Claude Code-style full-screen terminal, streaming status, context instruments, and session rollback |
| dsh-tianshu-tui | TUI Bundle | Complete terminal interaction layer evolved from Tianshu, with state driven by the DSH session event stream |
| dsh-tui | TUI Bundle · Early | Supports local DeepSeek and offline use; under active development, and the pre-port test suite is not yet running |
| dsh-mini-tui | TUI plugin · Early | Lightweight terminal UI connected directly to the DSH Runtime; MIT and v0.2.0, installed from npm and developed and tested against DSH 0.1.0-rc.6 |
| Orbis | Mobile remote control · Beta | Uses a DSH plugin for device pairing, end-to-end encrypted transport, and real-time multi-device updates |
| dsh-web-ui | Web UI collection | Collects task boards, Git Graph, mobile UI, skins, pets, runtime statistics, and other components |
| dsh-web | Docker Web · Early | Deploys a complete Web interface, workspace, and plugin market with Docker; development is moving quickly, and a data volume is required to persist configuration and sessions |
Inclusion does not imply that a project is signed, notarized, self-contained, or production-ready. Check each project's README and Releases for current status.
allow / deny approval decisions.0.2.1, declaring DSH 0.1.1-rc.1 compatibility and shipping a test suite; it is still a same-day fast-moving project with no CI, GitHub Release, or independent-use evidence, so it remains Early. The plugin writes a collaboration ledger and separate Git repository under ~/.dsh/spec-collab and starts additional AI review Sessions; its HTTP management surface is loopback- and same-origin-only by default, pseudonyms are not authentication, and external exposure requires separate authentication plus a trusted reverse proxy.0.1.0, pinned to DSH 0.1.1-rc.2; the repository reports 104 tests plus native isolated acceptance on macOS and Windows. It appends no custom event types and is not a sandbox, memory system, or semantic proof engine; conservative command-effect parsing and evidence matching can still miss cases, and the same-day first release has no independent-use evidence, so marked Early.open-record-replay source checkout.v0.1.1, still Early.0.2.1. Analysis tools run with permission_mode: full and may start a local kernel; cloud-backed models and higher tiers require an OmicOS account.next 0.1.0-rc.4, verified on DSH 0.1.1-rc.1 with MCP and package smoke checks. It writes to ~/.config/dsh-crew/status.d/, and external model services may require API keys; it remains a prerelease without separate test CI, so it is marked Early.@dsh-trading/bundle@0.1.0. It exposes no order-execution interface and heuristically blocks fund-moving tools, but that filter is not a complete security boundary, so the project is marked Early.0.1.3, Node.js 24+, and peer dependencies starting at DSH 0.1.1-rc.1; the Release reports 34 automated tests and Ubuntu / macOS / Windows CI. This version reuses the official Composer height, adds a scroll safety area and anchor-geometry regression coverage, and keeps expanded tasks, streaming state, and located messages above the Composer. The build excludes upstream login / CDP scrapers and the standalone dashboard. The plugin does not read model credentials or open its own listener, but it can read and write creative-project files and invoke specialist Roles within the calling Agent's visible tools, and it adds a DSH Web Server file route protected by Host, Origin, Session, path-containment, and optimistic-concurrency checks. First released on August 21 and explicitly verified only on DSH rc.1, it still lacks long-term maintenance and independent-usage evidence, so it is marked Early.