DeepSeek Harness Lands: A Plugin-Native Agent Runtime That Treats Everything as Swappable
DeepSeek Harness is the first major Agent runtime to make the entire stack—including the Agent loop—a hot-swappable plugin, which means teams can fork and customize their coding agents without waiting on a vendor's roadmap. The 115,000-star launch signals that a large developer base is ready to treat Agent infrastructure as composable rather than monolithic, and the trajectory observability gives debugging and compliance a concrete tool that most current coding agents lack.
DeepSeek Harness is an open-source Agent runtime that completes the company's earlier model releases with a configurable execution environment. Its core architecture rests on the Cordis microkernel, which handles only plugin loading and dependency management, letting every other component—models, tools, skills, sandboxes, UI, and the Agent loop—be swapped at runtime without crashing state. The framework ships with four run modes (Standard, PTC, Minimal, Creative) that differ only in which tool plugins are loaded, and a trajectory system that logs every event the model sees, filterable by source and forkable into new sessions.
Hands-on testing across six cases shows Standard Mode performing at top-tier Agent levels on Windows: repository understanding in 13 seconds, a coding-and-shell closed loop that self-diagnosed a sandbox denial and escalated privileges, and a refactoring task that dispatched parallel sub-agents to produce a 25-test Python package. Minimal Mode fails outright on Windows because its bash tool does not support win32, and the web retrieval case exposed a missing page-fetch tool that caused non-convergent searching. The plugin ecosystem already counts over 700 community plugins, installable by pasting a GitHub URL into the chat, and the Creative Mode lets users describe a plugin in natural language and have the Agent write, review, and publish it without opening an IDE.
Cost for all test tasks totaled under 8 RMB with cache hit rates above 99%. A price increase took effect August 17, raising V4 Pro peak output to 27 RMB per million tokens, but the platform remains roughly one-tenth the cost of GPT-5.6 Sol for equivalent token volumes.
Making the Agent loop itself a plugin is a genuinely unusual architectural choice that most Agent frameworks avoid because it complicates state management; pulling it off with hot-swapping suggests the Cordis microkernel is doing heavy lifting on isolation.
The sandbox interception-to-escalation chain observed in testing—where the Agent diagnosed a denial, requested permissions, and triggered manual approval—is a workflow that closed-source coding agents rarely expose to users, and it worked end-to-end without human scripting.
Minimal Mode failing on Windows is not a minor bug; it means the 'baseline' mode for benchmarking is Linux-only, which undercuts reproducibility claims for a large portion of the developer base.
The web retrieval failure is a toolchain gap, not a model gap: the Agent located the correct official URL and dispatched sub-agents, but without a fetch primitive it could only triangulate from search snippets, a limitation that will hit any research-heavy workflow.
Publishing a plugin from a natural-language description to a tagged GitHub repo without opening an IDE collapses the tool-building feedback loop to minutes, which could produce a plugin ecosystem that grows faster than VS Code's extension marketplace did in its early days.
The price increase is steep in percentage terms but the absolute cost remains an order of magnitude below GPT-5.6 Sol, which means the economic pressure on Western API providers is not going away.