DeepSeek Harness: An Agent Runtime Where Even the Main Loop Is a Plugin
0. Conclusion First (TL;DR)
What is DeepSeek Harness (dsh): An open-source Agent runtime framework (MIT license, GitHub: deepseek-ai/deepseek-harness) released by DeepSeek on 2026-08-13, with the core philosophy of "Everything is a Plugin." Its positioning is not another "programming assistant product," but a runtime base for freely assembling Agents. The official formula: Agent = Model + Harness. [VERIFIED - Official Repository/README]
What is the "plugin" it refers to: Plugins are the capability units of dsh, loaded through the underlying Cordis framework. Model adapters, tool registries, session storage, sandboxes, and even the Agent main loop itself are all plugins. Extending dsh = mounting a plugin; there is no "privileged core" that requires patching. [VERIFIED - Official Repository/README + The New Stack]
Difference from Claude Code's Skills/MCP/Subagent/Agent Team (in one sentence): Claude Code is a finished product + external extension points (Skills/MCP/Subagent/Agent Team/Hooks are all interfaces attached outside a fixed core); dsh breaks the product itself into plugins—the granularity of extension goes deep into the Agent Loop. You cannot replace Claude Code's main loop, but you can with dsh. [VERIFIED - Cross-referenced from multiple sources]
How to create a plugin: Write a TypeScript file, export an
apply(ctx)function, register a tool inside the function usingctx.tools.register(defineTool({...})), and then mount it withdsh web --patch ./cordis.yml. A tool plugin can be up and running in about 20 lines of code. [VERIFIED - CSDN DeepSeek Tech Community + Datawhale Tutorial + Juejin Testing]Do you need to create a plugin for project code development with dsh: Not for basic use. Install dsh → configure the model Key → select a workspace → start chatting directly. The Standard preset comes with a full suite of capabilities: files, Shell, search, planning, sub-agents, and workflows. You only need to write a plugin when you need custom tools, custom UI, or to swap the model adapter; for lightweight "instructions/workflows," Skills are sufficient and don't require writing a plugin. [VERIFIED - Official Web UI Guide + Multiple Tests]
What does "the 0.8 version mentioning the use of Claude Code, Codex" mean: RC.8 made Claude Code and Codex into Profile Bundles that can be installed on demand, allowing dsh to call them as sub-agents. That is: dsh acts as the scheduling layer, responsible for breaking down tasks; Claude Code / Codex act as the execution layer, each doing their specialized work. The prerequisite is that you have these two CLIs installed locally and logged in (dsh finds the binaries from PATH). Note this is "dsh calling Claude Code," which is different from the other path (putting the DeepSeek model into Claude Code for use). Don't mix them up. [VERIFIED - GitHub Release v0.1.0-rc.8 Original Text + Jiqizhixin/Sina Tech + The New Stack]
Important Risk Warning: dsh is a Developer Preview, and the official documentation warns in capital letters "THERE WILL BE COMPATIBILITY-BREAKING CHANGES." Use with caution in production environments. [VERIFIED - Official README]
1. What is DeepSeek Harness: Positioning and Working Mode
1.1 Basic Facts (Verified)
Release Date: 2026-08-13, released on the same day as the official DeepSeek-V4-Pro-0813 version. [VERIFIED - VentureBeat / The New Stack]
Open Source License: MIT. [VERIFIED - Official Repository]
Tech Stack: TypeScript monorepo (approximately 57 package groups, about 500,000 lines of code, with about 300 lines of C11 at the bottom layer for the Linux sandbox). [VERIFIED - ArceApps In-depth Analysis Article (based on GitHub API data)]
Release Background: When DeepSeek previously published DeepSWE benchmark results, the community criticized them as "vendor-reported and unreproducible." The team promised to open-source the harness used for evaluation—dsh is the fulfillment of that promise. [VERIFIED - ArceApps, marked as industry interpretation]
Ecosystem Popularity (citing third-party snapshots, not official data): Approximately 50,000 stars within 12 hours of release (timed by journalist Justin3Go); a GitHub API snapshot showed about 95,386 stars and 8,826 forks on August 15 (captured by Flowtivity); other reports claim it broke 160,000 stars within days. [UNVERIFIED - Star counts are third-party snapshots, numbers vary across sources, for popularity reference only]
Contribution Policy: The official team is not accepting external PRs for now, guiding developers to participate via GitHub Discussions and "writing plugins"; the repository enforces a zero-issue policy. [VERIFIED - Official Repository + The New Stack]
1.2 Core Positioning: Agent = Model + Harness
The official definition is straightforward: the model is the "soul" of the Agent, and the Harness is the "body" that enables it to work—context management, tool invocation, task planning, file reading/writing, code execution, permission control, memory, retry mechanisms, etc., are all here. [VERIFIED - Official README + Official API Documentation]
A plain-language translation: A large model is a thousand-mile horse, fast but unable to find its way or carry things; the Harness is the saddle, reins, and rider. The industry consensus in 2026 is that model capabilities are converging; what truly creates a gap is this "engineering shell."
1.3 Working Modes: Four Presets
dsh comes with four "factory combinations," embodying the "Everything is a Plugin" assembly philosophy: [VERIFIED - Official Documentation + The New Stack + Prompt Genius]
Standard: A complete programming Agent. File system tools, Shell, file/web search, Skills, planning, goals, sub-agents, and workflows are all included. Choose this for daily development.
Code / PTC Mode (Programmatic Tool Calling): Instead of exposing tools to the model one by one, it generates a TypeScript SDK, allowing the model to write a program to call tools in batches—compressing what would originally be 5 rounds of tool calls into 1 execution. Saves tokens and reduces latency. PTC mode was renamed from "Code mode" in rc.7.
Minimal: Only keeps two tools, bash + file editor, specifically for model benchmarking and controlled evaluation. This is the mode the official team uses to run benchmarks like DeepSWE.
Creator: The Standard full suite + runtime checks + in-memory experimental plugins + preset writing guides. For "Agent builders"—allows on-the-fly assembly of a custom new mode (e.g., Code Review mode, PPT mode).
1.4 Three Entry Points
Web UI:
npx @deepseek-ai/dsh web, defaulting to http://127.0.0.1:3080. The browser is the shell; sessions and logs are all local. [VERIFIED - Official Documentation]Headless CLI:
dsh --profile headless "task", runs a persistent task once, prints the final answer, and exits. Suitable for scripts and CI. [VERIFIED - Official Documentation]Python SDK:
pip install deepseek-harness-sdk(0.1.0rc6, requires Python 3.10+), can be embedded into Python applications, comes with its own runtime (the machine running it does not need Node.js installed). [VERIFIED - Official + Community Testing]
1.5 Model-Agnostic
The model adapter itself is also a plugin. The official provider directory covers DeepSeek, OpenAI, Anthropic, AWS Bedrock, Azure, Google Gemini (documentation still refers to it as Vertex), Kimi, and any OpenAI-compatible endpoint (including local Ollama, OpenRouter). Changing models = changing configuration, no recompilation needed. [VERIFIED - The New Stack + Prompt Genius + Official Documentation]
1.6 Session Logs: Append-Only Event Stream (Trajectory)
Everything the model sees—system prompts, reasoning processes, tool calls, sub-agent dispatches, every context injection—is written into an append-only session log. Recovery, forking, retrieval, replay, and auditing are all based on this event stream. The official principle is called "model-visible means logged" (everything that enters the model must be reconstructable from the log). [VERIFIED - Official Architecture Documentation + The New Stack]
1.7 Security and Sandbox
File operations are divided into three permission levels: read-only / workspace write / full access. Sensitive operations can be configured for manual approval. [VERIFIED - Official + VentureBeat Comparison Table]
Sandbox: Linux uses Landlock (self-developed Node addon, about 300 lines of C11), macOS uses Seatbelt, Windows uses ACL restricted-token runner. [VERIFIED - The New Stack]
The input box is disabled when no workspace is selected—this is a deliberate entry-level safeguard. [VERIFIED - Official Web UI Guide + Practical Guide]
2. What Exactly is a "Plugin": Plugin Mechanism Detailed
2.1 Underlying: Cordis Framework
dsh runs on Cordis—a plugin meta-framework authored by Cui Tianyi (creator of the Koishi chatbot framework, former Jane Street engineer), accompanied by the paper "A Programming Paradigm for Spatiotemporal Composability" (88 pages, co-authored by researchers from Peking University and DeepSeek). The Cordis source code is copied into the dsh repository's vendor/ directory and renamed to the @deepseek-ai scope. [VERIFIED - ArceApps + Official Repository + CSDN Tech Community]
Cordis does only three things: loading, unloading, and dependency management of plugins. The core is "reversible side effects": when a plugin registers a tool, listens to an event, or mounts a web route, it simultaneously registers a cleanup action; when the plugin is unloaded/reloaded, all these registrations are revoked—hot swapping leaves no residue like "old tools still hanging" or "listeners piling up." [VERIFIED - ArceApps + WeChat Technical Article (Orange's AI Cafe)]
2.2 You Only Need to Understand 5 Concepts to Write a Plugin
[VERIFIED - CSDN DeepSeek Tech Community "DeepSeek Harness First Experience: Getting Started, Installation, and Custom Plugins"]
Plugin: A function with
apply(ctx), or a Service subclass. The framework calls apply at startup.ctx (Context): The plugin's sole entry point, a scoped service container. Plugins retrieve services like tools, llm, sessions from it, and also register the capabilities they provide into it. Each capability occupies a fixed key (ctx.tools, ctx.llm, ctx.sessions).
inject (Dependency Injection): Plugins declare "which services I need," and the framework waits for these services to be ready before mounting them. Loading order is determined by dependencies, not by configuration order.
Event: Inter-plugin communication.
ctx.on('eventName', callback)subscribes, dispatched via four methods: emit / waterfall / parallel / serial (general broadcast, sequentially modifying the same data, parallel, sequentially finding the first willing handler).Reversible effect: All registrations go through
ctx.effect()/ctx.on(), automatically revoked when the plugin is unloaded.
2.3 Three Roles: Capability Seam
A replaceable capability is split into three decoupled roles: [VERIFIED - Official ADR-0009 + ArceApps + dev.to]
Service Definition: Agrees on what the capability is called and what the data looks like (e.g., dsh-shell).
Provider: The actual implementation of the capability (e.g., dsh-bash-local / dsh-bash-sandbox).
Consumer: The model-side tool that uses the capability (e.g., dsh-tool-bash).
After decoupling these three parts, changing the Provider does not affect the tool Schema seen by the Consumer. For example, switching Shell from local to a remote sandbox is imperceptible to the model.
2.4 Two Types of Plugins: Host Plugin vs. Client Plugin
[VERIFIED - TreeRouter Blog "Build DeepSeek Harness Plugins with Cordis Tutorial" + Official Package Structure]
Host Plugin: Runs in the Node.js backend, can register tool functions, read/write local files, execute Shell, inject system prompts. Example: custom file operation tools, Git interaction plugins.
Client Plugin: Runs in the browser frontend, extends the Web UI, adds sidebar tabs, renders new interface components. Example: dsh-workspace-enhance (adds a file tree sidebar).
Hard constraint: Host plugins cannot manipulate the DOM; client plugins cannot directly access the local file system; cross-environment communication goes through the dsh internal event bus.
2.5 Plugin Distribution Format: Bundle
Plugins are packaged as npm packages with two extra things: [VERIFIED - TreeRouter + ArceApps + CSDN]
The
package.jsondeclares adsh.bundlefield (host/client entry paths).It comes with a
cordis.patch.yml, telling the Harness which line of the plugin tree to insert the plugin into.
Installation command: dsh plugin --profile web add <plugin package name>. After installation, the Harness service must be restarted (both plugin host code and browser code are loaded at startup; just refreshing the page is not enough). [VERIFIED - Consistent across multiple tests]
2.6 How Far "Everything is a Plugin" Goes
The official list of replaceable items (official original text): Model, Tools, Skills, Sessions, Sandbox, File System, Storage, Agent Loop, Scheduling, UI. ArceApps' comment hits the nail on the head: Agent Loop being a plugin means dsh is not "another Claude Code," but "a manifesto on how an Agent runtime should be structured to support self-modifying Agents." [VERIFIED - Official README + ArceApps]
3. How to Create a Plugin (Complete Hands-On)
The following code and commands are all from publicly tested tutorials (CSDN DeepSeek Tech Community, Datawhale Tutorial, Juejin, WeChat Official Account "DeepSeek Harness Plugin Development Complete Guide"), based on the official package API. [VERIFIED - Cross-referenced from multiple sources]
3.1 Environment Setup (Source Repository Needed for TS Plugin Development)
Daily use only requires npx @deepseek-ai/dsh web; developing original TS plugins requires cloning the source code (the official getting-started documentation method):
git clone https://github.com/deepseek-ai/deepseek-harness.git
cd deepseek-harness
corepack enable
pnpm install
pnpm run build # Cannot be omitted, otherwise the Web side lacks build artifacts and the plugin won't take effect
Node.js version requirement: ^22.19.0 || >=24.0.0, actual testing suggests using Node 24 directly (community testing v24.19.0). [VERIFIED - Official + Community Testing]
3.2 Minimal Plugin: Registering Nothing
A minimal plugin has only three things:
import type { Context } from '@deepseek-ai/cordis'
export const name = 'hello' // Plugin name, for diagnostics only, can be omitted
export function apply(ctx: Context) {
console.log('hello from my first plugin')
}
3.3 Tool Plugin: greet Example (Recommended Reference)
import type { Context } from '@deepseek-ai/cordis'
import { defineTool } from '@deepseek-ai/dsh-tools'
export const name = 'greet-tool'
export const inject = ['tools'] // Declares dependency on the tool registration service
export function apply(ctx: Context) {
ctx.tools.register(defineTool({
name: 'greet',
description: 'Greet someone by name.',
parameters: {
name: { type: 'string', required: true, description: 'The name to greet' }
},
async execute(args) {
return `Hello, ${args.name}!`
}
}))
}
The model knows the tool exists through the description, and knows how to call it through the JSON Schema of parameters. [VERIFIED - Datawhale Tutorial + Juejin]
3.4 Mounting to Web Service
Create a new cordis.yml (or cordis.patch.yml):
- insert:
- id: greet-tool
name: "/your/absolute/path/deepseek-harness/scratch-plugin/src/greet-tool.ts"
Startup:
pnpm dsh web --patch ./scratch-plugin/cordis.yml
# If port conflicts: pnpm dsh web --patch ... --port 3082
Verification: Settings → Plugin list confirms "Enabled," then in a session, let the Agent call the greet tool. You can see the input and output of the tool call fully expanded, confirming the plugin loop runs through. [VERIFIED - Juejin + CSDN Testing]
3.5 Hard Rules for Production-Grade Plugins
[VERIFIED - WeChat Official Account "DeepSeek Harness Plugin Development Complete Guide" (based on 0.1.0-rc.6 source code testing) + CSDN]
Must use named exports
name / inject / Config / apply, default export is forbidden (if present, the entire namespace is collapsed, and inject is lost).injectonly declares hard dependencies; optional services are obtained viactx.get(name).Configmust be a Standard Schema.Tools must go through
defineTool, with parameter validation, output Schema, and execute returning canonical JSON.Never write secrets into a patch—
--dump-configwill print the entire configuration.The first troubleshooting step:
dsh --profile web --dump-configto view the effective configuration after layering.
3.6 Using Ready-Made Plugins (More Common Daily)
dsh plugin --profile web add @dsh-external/dsh-git-workflow # Example: Git workflow plugin
dsh plugin --profile web update # Update all
dsh plugin --profile web remove <plugin name> # Uninstall
dsh restart web # Restart to take effect
Community plugin discovery channels: GitHub topic dsh-plugin; third-party directory deepseek-harness-plugin.com. Note: You must review the source code before installing third-party plugins—plugins run within the host process, are trusted code, and can call tools, run programs, and read the workspace. [VERIFIED - Community Consensus + Efficiency Jun Review]
4. Comparison with Claude Code / Codex Extension Mechanisms
4.1 Clarify a Prerequisite First
Claude Code and OpenAI Codex are finished programming Agents for end-users; DeepSeek Harness is a runtime base for Agent builders. This determines the difference in extension philosophy. [VERIFIED - VentureBeat + The New Stack + Consistent across multiple comparison articles]
4.2 Claude Code's Extension Mechanisms (Per Official Documentation)
Claude Code's official documentation lists these extension points: [VERIFIED - Claude Code Official Documentation features-overview]
CLAUDE.md: Persistent project context (conventions, rules) loaded for every session.
Skills: Reusable instructions/knowledge/workflows, Markdown files (SKILL.md), callable via /commands or auto-loaded by the model. Loaded into the current context, occupying the main window. Since 2026, custom slash commands have been merged into Skills.
MCP: An open protocol for connecting external services and tools (databases, Slack, browsers, etc.), with MCP servers providing the tools.
Subagents: Isolated executors with independent context windows, returning only a summary to the main session, not polluting the main context.
Agent Teams (experimental, disabled by default, released 2026-02): Multiple independent Claude Code sessions communicating with each other, sharing a task list for self-coordination, with significantly higher token costs.
Hooks: Deterministic automation triggered by lifecycle events (PreToolUse, etc.).
Plugins: A packaging layer—bundles Skills/Hooks/Subagents/MCP servers into an installable unit, supporting namespaces and marketplace distribution.
4.3 Core Difference: Extension Granularity is Not on the Same Level
Claude Code's extension = adding interfaces outside a finished product; dsh's plugins = disassembling the product itself.
Claude Code's Skills/MCP/Subagents/Agent Teams are all "patches around a fixed Agent Loop." You cannot change Claude Code's main loop, its session model, or its context compression algorithm—these are vendor-locked cores.
dsh's plugins can replace any layer: model adapter, tool set, session storage, sandbox, Agent Loop, scheduling, UI. ArceApps' original words: "You can replace the main loop with a plugin implementing your own multi-Agent architecture; in Claude Code, this can only be done by forking the repository." [VERIFIED - ArceApps]
4.4 dsh Plugins vs. Claude Code Skills/MCP/Subagent/Agent Team
Item-by-item comparison (in plain language):
dsh Plugin vs. Claude Code Skills: Skills are documents that "teach the model how to work" (knowledge/workflows); dsh plugins are code that "changes system capabilities" (registering tools, swapping adapters, injecting system prompts). dsh itself also has Skill capabilities (discovering SKILL.md from project .dsh/skills, .agents/skills, user directories, loaded by the model on demand), which exists as a member of the plugin family, positioned similarly to Claude Code Skills. [VERIFIED - MoClaw + CSDN Technical Analysis]
dsh Plugin vs. Claude Code MCP: MCP is a cross-product tool connection protocol. dsh itself is an MCP client (and also supports exposing dsh as an MCP server / ACP), able to connect to the same MCP ecosystem. MCP is a layer for "connecting external services," while plugins are "assembly units for the entire runtime"—the two are not competitive; dsh uses plugins to bring in MCP client capabilities. [VERIFIED - The New Stack + Prompt Genius]
dsh Plugin vs. Claude Code Subagent: Subagent is an execution mode (working in an isolated context); dsh also has subagent capabilities (five providers: in-process / fork / ACP / Codex / Claude Code). dsh's uniqueness is that the subagent provider itself is also a plugin—this is the architectural foundation for RC.8 making Claude Code/Codex into Profile Bundles. [VERIFIED - CSDN Technical Analysis + Official Package Structure]
dsh Plugin vs. Claude Code Agent Team: Agent Team is an execution mode for multi-session coordination; dsh's counterpart is the Workflow capability (the model generates constrained JavaScript orchestration scripts, runs them in a Worker Thread VM, and can launch sub-agents in parallel). Note: The dsh repository also has "Agent Teams" packages being incubated (commit on 2026-08-18 "incubate Agent Teams packages"). [VERIFIED - Official Repository Commit History + CSDN Technical Analysis]
4.5 One-Sentence Summary of Differences
Claude Code is a precision Swiss watch: the gears cannot be swapped, but the dial, strap, and crown have standard interfaces (Skills/MCP/Hooks/Subagents/Agent Teams). Codex is a rugged engineering vehicle: Rust core + dual-mode (local CLI/Cloud), extension via MCP + AGENTS.md + configuration. DeepSeek Harness is a box of Lego: no finished product, all building blocks, and even the "assembly method" itself can be swapped. [VERIFIED - Industry Comparison Article Consensus]
4.6 Known Shortcomings Comparison (Honest List)
| Dimension | DeepSeek Harness | Claude Code / Codex |
|---|---|---|
| Maturity | Developer Preview, breaking change warnings | Mature commercial products |
| Managed Background Agent | Not provided (not officially documented) | Provided |
| Native GitHub PR Workflow | Integration not complete | Claude Code has GitHub Actions; Codex has Cloud tasks/auto PR |
| Extension Onboarding Cost | High (many concepts: Profile/Bundle/Patch) | Low (one-time install, ready to use out of the box) |
| Configuration Complexity | cordis.yml assembly, patch whole-line replacement easy to misstep | Configuration files relatively simple |
[VERIFIED - VentureBeat Comparison Table + Prompt Genius + Community Criticism ("for Agent builders" not average users)]
5. Claude Code / Codex in RC.8 ("Version 0.8"): Meaning and Operation
5.1 Version Clarification
The "0.8 version" users refer to = v0.1.0-rc.8 (released 2026-08-19, pre-release version). [VERIFIED - GitHub Release Original Text]
Related version timeline: v0.1.0-rc.5 (open-source debut on Aug 13) → RC.7 (Aug 17, Codex/Claude Code sub-agent tasks integrated into Job Panel) → RC.8 (Aug 19, both upgraded to installable Profile Bundles on demand). [VERIFIED - Tencent Cloud Developer Community + Sina Tech/Jiqizhixin]
5.2 RC.8 Official Original Text (Key Item)
GitHub Release v0.1.0-rc.8 original text (New Features):
Make Claude Code and Codex subagents installable on demand as Profile Bundles, with non-interactive permission modes and named instances for Codex
Chinese official release notes:
Claude Code and Codex sub-agents can both be installed on demand as Profile Bundles, with Codex also supporting non-interactive permission modes and multiple named instances
[VERIFIED - GitHub Release Original Text]
5.3 What This Means: dsh Turns Claude Code/Codex into "Dispatchable Teammates"
Core meaning (consistent across multiple source interpretations) [VERIFIED - Jiqizhixin/Sina Tech + KAD + NetEase/AppSo + CSDN]:
dsh becomes a unified scheduling layer: The upper layer (dsh + main model, e.g., DeepSeek V4 Pro) is responsible for breaking down tasks and orchestrating workflows; the lower layer pulls in Claude Code or Codex as sub-agents to work based on task needs. Architecture evolution path: RC.7 first made both sub-agent tasks appear in the Job Panel, RC.8 upgraded them to independent Profile Bundles for on-demand installation.
Why do this: Different coding Agents have different strengths—Claude Code excels at complex reasoning/large codebase exploration (SWE-Bench Verified 80.8%, but token consumption is about 4x that of Codex); Codex executes directly, has high token efficiency, and is suitable for implementation tasks with clear acceptance criteria. In one task, you can "hand frontend styling to Claude Code, backend API refactoring to Codex, and orchestrate the whole thing with DeepSeek V4 Pro."
Two new capabilities for Codex:
Non-interactive permission mode: Runs the entire process without manual confirmation, suitable for CI/CD and Harness batch processing.
Multiple named instances: Multiple Codex sub-agents for different purposes (different permissions, different working directories) can be configured in parallel on the same machine.
Supporting mechanisms: reportDelivery allows sub-agents to actively report back after completing a task and wake up the parent task; web_search supports concurrent queries.
5.4 Prerequisites (Must Be Met)
[VERIFIED - The New Stack + Prompt Genius + Community Testing]
Claude Code CLI (
npm install -g @anthropic-ai/claude-code) and/or Codex CLI must be installed locally and logged in with their respective authentications.dsh implements delegation by resolving binaries in PATH—you bring your own installation and login, dsh is only responsible for calling them.
Both sub-agent providers are disabled by default and need to be explicitly enabled in settings/configuration.
The official team also provides bridges to map users' existing hooks.json (from Claude Code/Codex) to dsh's interception points—the official statement is that this is a "compatibility path, not a better design."
5.5 How to Operate (Community-Verified Path + Official Release Notes)
Since the official Profile Bundle installation command details for RC.8 are not yet uniformly documented in public materials, the following two paths are explained:
Path A: Official Built-in Sub-agent Providers (Already in RC.7/RC.8, Need Explicit Enabling)
Install and log in to Claude Code / Codex CLI (resolvable in PATH).
In dsh's settings.yaml, find the
codexandclaude-codeprovider lines within the standard preset (defaultdisabled: true), and remove the disabled flag to enable them. [VERIFIED - CSDN User Test (fating__): "In the standard preset, there prominently lie the codex and claude-code provider lines, disabled by default"]In a session, let the main Agent break down the task and delegate to sub-agents; the sub-agent execution process can be viewed in the Job Panel (supported since RC.7).
Path B: Community Plugin dsh-plugin-product-subagents (Mature Solution with Complete Documentation)
This community plugin connects Codex, Claude Code, and any ACP CLI to dsh's sub-agent channel, supporting "continuable chat" sub-agents (retaining remote session IDs, appending messages over multiple rounds): [VERIFIED - Yeyupiaoling Blog + GitHub shaokeyibb/dsh-plugin-product-subagents]
# Requirement: At least one logged-in product CLI (claude, codex, or ACP CLI) on PATH
dsh plugin --profile web add dsh-plugin-product-subagents
dsh restart web # Plugin loads only after restart
Typical usage: In a session, let the model call product_roles to list the role library, product_agents to see which Providers are available on PATH, then assign tasks based on review/exploration/troubleshooting/implementation roles. The persistent registry defaults to ~/.dsh/product-subagents-registry.json (runtime state, do not commit to git). Note that manual package installation must use pnpm (npm will overwrite @deepseek-ai/dsh-tools symlinks, causing tool call errors).
5.6 Don't Confuse This with the Other Path: Connecting DeepSeek Model to Claude Code
The official DeepSeek API documentation (api-docs.deepseek.com/guides/coding_agents) records the opposite direction: running DeepSeek models (deepseek-v4-pro[1m], etc.) inside the Claude Code client via the Anthropic-compatible endpoint provided by DeepSeek (https://api.deepseek.com/anthropic). The configuration method involves setting environment variables like ANTHROPIC_BASE_URL / ANTHROPIC_AUTH_TOKEN. [VERIFIED - DeepSeek Official API Documentation]
The essential difference between the two paths:
Harness calling Claude Code (RC.8's capability): Claude Code uses its own Claude model/login, dsh only schedules it.
DeepSeek model running inside Claude Code: Claude Code client + DeepSeek model + DeepSeek Key, unrelated to dsh.
6. Using dsh for Project Code Development: Practical Path
6.1 Conclusion: Basic Development Does Not Require Creating Plugins
The official Web UI guide and numerous tests confirm: daily project development follows four steps—"install → configure → select → chat." The Standard preset comes with complete programming Agent capabilities, no plugin writing needed. [VERIFIED - Official Web UI Guide + Alibaba Cloud Developer Community + Efficiency Jun Review]
6.2 Complete Process (Official Recommended Path + Tested Supplements)
Step 1: Installation
# Requires Node.js ≥ 22 (24 LTS recommended)
npx @deepseek-ai/dsh web
# Or global installation
npm install -g @deepseek-ai/dsh
dsh web
The first run pulls the entire runtime from npm (not a lightweight script). It takes several minutes even on a good network, during which the process occupies one CPU core and prints no output—this is normal; don't kill it at the 60-second mark. After startup, the browser automatically opens http://127.0.0.1:3080 (auto-open since rc.8; use dsh web --no-open to disable). [VERIFIED - Official + Community Testing + Tencent Cloud Interpretation]
Step 2: Configure Model
Settings → Models → Enter DeepSeek API Key (starts with sk-) → Save takes effect immediately, no restart needed. The Key is only written to the local credentials file $DSH_HOME/.credentials.yaml (default ~/.dsh/), and the interface only displays a masked descriptor. You can also add Anthropic, OpenAI, Bedrock, Vertex, Azure, Codex, or a custom OpenAI-compatible gateway. [VERIFIED - Official Web UI Guide]
Step 3: Select Workspace
Click Choose workspace to add a project directory and select it. The workspace is the security boundary—the Agent can only operate within directories you explicitly add. The input box is disabled before a workspace is selected. It is strongly recommended to use Git version control for the project first; the Agent will genuinely modify and delete files, and Git is the final insurance. [VERIFIED - Official Guide + Practical Tutorial]
Step 4: Initiate Task
Create a new session and start chatting directly, e.g., "Summarize the structure of this repository and identify the main modules." The Agent can read files, modify code, run commands, and break down sub-tasks; sensitive operations (deleting files, dangerous commands) will trigger a manual approval popup in the Web UI. The interface language can be switched to Chinese in settings. [VERIFIED - Official Guide]
6.3 When Do You Actually Need a Plugin / Skill
Need custom tools (internal ticketing system, proprietary API, corporate gateway) → Write a tool plugin (see Section 3).
Need custom UI (sidebar file tree, dedicated panel) → Write a client plugin.
Need to swap model adapter / sandbox / Agent Loop → Write a plugin to replace the corresponding capability seam.
Just want to solidify company conventions, code review checklists, deployment processes into reusable instructions → Use Skills (place Markdown files in project .dsh/skills or .agents/skills), no plugin writing needed. [VERIFIED - MoClaw Plugin vs Skill Analysis + CSDN Technical Analysis]
Want to create a dedicated Agent with a fixed capability set (e.g., Code Review mode, PPT mode, API documentation assistant) → Use Creator mode + cordis.patch.yml to assemble a Preset for team members to use directly. Example (from CSDN testing):
# api-doc-agent.cordis.patch.yml
- id: model-override
config:
model: z-ai/glm-5.2
provider: qiniu
- id: tool-whitelist
config:
allowed: [read_file, bash]
bash_whitelist: ["node scripts/parse-openapi.js"]
- id: system-prompt-override
config:
sections:
- id: role
content: "You are an API documentation specialist. Only read files and run the OpenAPI parser script."
Startup: dsh --profile web --patch api-doc-agent.cordis.patch.yml
6.4 Efficiency Test Reference (Third-Party, Not Official)
Tencent News Test (2026-08-20): dsh can complete simple tasks normally; complex tasks also have decent completion after correction. Compared with Codex and WorkBuddy on making a 3D game, dsh delivered the fastest (about 13 minutes) but had initial errors (character not constrained by ropes), fixed after pointing out. [UNVERIFIED - Third-party comparison test, small sample, for reference only]
Early adopter feedback reposted by Sohu: Average single Agent loop 3.8 seconds (claiming Codex similar task 1.2 seconds), token consumption 35% higher, newbies configuring Skills need to handwrite YAML/JSON dual-mode configuration. [UNVERIFIED - Third-party repost, numbers unverifiable, cite with caution]
Official V4-Pro Pricing (peak/off-peak pricing from 2026-08-16): V4-Flash cache miss input $0.14/million tokens, output $0.28; V4-Pro input $0.435, output $0.87; cache hit as low as $0.0028/$0.003625. Peak/off-peak windows UTC 01:00-04:00 and 06:00-10:00 (Beijing time 9:00-12:00, 14:00-18:00), off-peak half price. [VERIFIED - Official API Documentation; but note independent analysis suggests this is actually a price increase relative to the old flat-rate system, see Section 7]
7. Risks, Limitations, and Selection Advice
7.1 Must-Know Limitations (All Sourced)
Developer Preview: The official README warns in capital letters "THERE WILL BE COMPATIBILITY-BREAKING CHANGES"; VentureBeat explicitly advises "enterprise developers should not treat it as a stable production platform." [VERIFIED]
RC.8 Storage Incompatibility: SQLite backend refactored (Schema upgrade), old session data cannot be read, no migration tool provided officially; must back up ~/.dsh before upgrading. [VERIFIED - GitHub Release + Tencent Cloud Interpretation]
npm Version Lag: As of the time multiple interpretations were published, npm latest was still rc.7, rc.8 is on the @next tag (
npm install -g @deepseek-ai/dsh@next) or requires source build (git checkout dsh-v0.1.0-rc.8). [VERIFIED - Tencent Cloud Interpretation; another CSDN test succeeded with npm install @0.1.0-rc.8, both coexist, recommend following the official Release]No Managed Background Agent: No officially documented managed service managed by DeepSeek (Claude Code/Codex have this). [VERIFIED - VentureBeat/Prompt Genius]
GitHub PR Workflow Not Complete. [VERIFIED - Prompt Genius]
Plugin Security: Third-party plugins run within the host process, are trusted code, and can read/write the workspace and execute commands. Must review source code, license, and update frequency before installation. Official stance: does not consider packages from the official repository more authoritative than community packages. [VERIFIED - Official + Community Consensus]
Configuration Complexity: Accurate community criticism—"Everything is a Plugin" is a selling point for developers, but means configuration complexity for average users; patch replaces entire lines by id rather than deep merging, covering one line requires restating all keys, easy for newbies to misstep. [VERIFIED - Community Comparison Articles + CSDN Technical Analysis]
Price Change: DeepSeek V4-Pro switched from flat-rate to peak/off-peak pricing on 2026-08-16. Independent analysis (aitoolsreview) points out: even at the "off-peak" price, the output price is about 2.28x the old flat-rate system, peak about 4.55x—this is an actual price increase, not a decrease. Choosing dsh + DeepSeek API requires modeling based on actual usage. [VERIFIED - aitoolsreview independent analysis, marked as third-party calculation]
7.2 Selection Advice (Judgment Based on Above Facts)
Want to "install and work immediately": Choose Claude Code or Codex, not dsh—dsh's default experience and stability are currently not as good as the other two.
Want to build your own Agent product/internal Agent platform: dsh is currently the only choice that open-sources every layer of the Agent runtime as replaceable, worth getting on board (can get running in 20 minutes).
Want to do model/Agent evaluation research: Minimal mode is specifically designed for benchmark testing.
Want freedom to switch models, combat price fluctuations, data sovereignty/auditability: dsh natively supports this (MIT open source, fully traceable sessions, fully privatizable).
Budget sensitive: The framework is free, only pay for model call fees; but note the price change in 7.1-8.
Pragmatic advice: Most teams currently dual-install "Claude Code for tasks requiring thought, Codex for tasks requiring brute force"; wait for dsh to mature before adding it to the daily use candidate list. If you want to use dsh to schedule Claude Code/Codex, first confirm the local CLI is installed and logged in, then enable the corresponding provider in settings.yaml. [VERIFIED - Industry Comparison Article Consensus]
8. Community-Recognized Recommended Plugin List
8.0 First, Clarify the Recommendation Criteria (Must Read)
There is no official "must-install list." dsh is in Developer Preview, and the plugin ecosystem is in an early explosive phase (open-sourced on 8/13, within a week GitHub repositories with the
dsh-plugintag reached 6000+, community curated list awesome-dsh-plugin includes 1000+). This list is a cross-aggregated result from multiple independent community test reviews (Tencent News, JB51/Qiniu Cloud, CSDN, Yeyupiaoling, 53AI, etc.), not an officially audited list. [VERIFIED - Consistent across multiple sources; plugin counts are from community reviews around 2026-08-18]Three types of things are often collectively called "plugins," must distinguish: ① Native dsh.bundle (installable via
dsh plugin add); ② Standalone desktop/Web workbenches (like DSH Desktop, Open Design, installed separately); ③ Skill / MCP / Browser extensions (connected via their respective protocols). The judgment criterion is not the repository name or GitHub Topic, but whether thedsh.bundlefield is declared. [VERIFIED - JB51/Qiniu Cloud 10 Plugin Detailed Explanation]Stars are not proof of quality. The GitHub
dsh-pluginTopic is self-added by repository authors. High stars only indicate community attention, not guaranteed installability, quality, or official endorsement. [VERIFIED - JB51/Qiniu Cloud]Security Red Line (More Important Than the List Itself): The official plugin index itself states "entering the plugin marketplace does not mean passing a security audit." Community plugins run with your local machine's permissions, can read your files, touch your credentials, and use your network. Spend at least half a minute reviewing the repository, installation scripts, and last update time before installing. [VERIFIED - Tencent News 16 Plugin Test + Official Index Statement]
The following Star/download counts are all GitHub page snapshots from 2026-08-17~18 and will continue to change. [UNVERIFIED - Third-party snapshots]
8.1 Batch 1: Solve the "Usability" Problem First (Essential Level)
1. dsh-market / dshmarket —— Plugin Marketplace (Ecosystem Entry)
Reason for recommendation: Search, install, update, enable/disable, backup plugins all done by clicking in the settings interface, the entry point to the plugin ecosystem. Community consensus "install this first." [VERIFIED - Tencent News + JB51 6 Plugin Test]
Community feedback: Tencent News test "after installing, many plugins can be installed with a couple of clicks in the interface, saving a lot of trouble"; dshmarket tested version 1.11.2. [VERIFIED - Test Article]
Advantages: Graphicalizes high-frequency plugin operations; the same ecosystem also has dsh-market (dshmarket.com, includes 365+ plugins), dshplugin.io (Chinese directory 154+), dsh.market (573) and other marketplaces for cross-checking. [VERIFIED - Community Review]
Disadvantages: It is itself a plugin, so you still have to run a command line once before installing it; complex plugins still require manual installation; marketplace quality varies, still requires self-review. [VERIFIED - Test Article]
2. dsh-at-file —— @ File Reference in Input Box
Reason for recommendation: Typing @ in the input box allows searching workspace files and referencing them, directly filling one of the most obvious gaps in the native interface, listed as "essential/high-frequency must-install" by multiple checklists. [VERIFIED - Tencent News + JB51]
Community feedback: Tencent News evaluation "I personally think it's essential." [VERIFIED]
Advantages: Eliminates manually typing file paths, greatly improves efficiency of bringing files into conversations.
Disadvantages: Depends on workspace indexing, initial indexing of very large repositories may slow down; only assists input, does not include file content analysis.
3. dsh-context —— Context Usage Visualization
Reason for recommendation: Turns context composition, token changes, compression, and truncation processes into a panel, helping determine why long tasks "get slower and slower" and from which step requirements start being forgotten. [VERIFIED - 53AI + JB51]
Community feedback: JB51 6 Plugin List positions it as "recommended for long sessions" (tested version 0.11.2); developers used it to troubleshoot long tasks in 53AI reports. [VERIFIED]
Advantages: Read-only, zero side effects, the most direct tool for locating diagnostic issues; in the same direction is dsh-context-doctor (audits token cost of AGENTS.md instruction chains/skill directories/tool schemas, detects duplicates and conflicts). [VERIFIED - Community Review]
Disadvantages: Only diagnoses, doesn't solve; after viewing, you still have to handle it yourself; panel information has a certain learning curve for newbies.
4. dsh-plugin-check —— Plugin Health Check
Reason for recommendation: After downloading a community plugin, scan it first—covers Manifest, Patch, build artifacts, Profile Bundle, Hub inclusion, totaling 33 checks, outputting a pass / warn / fail report. [VERIFIED - Community Review]
Community feedback: Community consensus "scan before installing," the most practical safety habit tool in the early plugin ecosystem. [VERIFIED]
Advantages: Read-only, does not modify the checked project, does not execute builds, safe to run.
Disadvantages: Checks format/build type issues, cannot replace manual source code review—malicious code is not within its detection scope.
8.2 Batch 2: Feature Enhancements (Install by Scenario)
5. DeepSeek Harness Desktop —— Desktop Client (Unofficial)
Reason for recommendation: No Node.js installation, no commands, download the installer and double-click to use, automatically starts and manages the local Harness service; tray resident, task completion popup notifications, follows system light/dark mode, auto-updates; roadmap includes remote control via phone (iOS/Android initiate tasks, view progress). [VERIFIED - CSDN Review + ima/AI Trainer + Official README]
Community feedback: Highest community Stars (10.3k~11.2k snapshot), cumulative downloads 83k+; CSDN review conclusion "solving the barrier for average users is a real pain point, open-source MIT not a shell for selling, lightweight packaging risk controllable." [VERIFIED - Snapshot + Review]
Technical composition: Electron shell + official Harness Git submodule (fixed version following upstream), renderer process disables Node permissions, enables contextIsolation and sandbox; exposes two extension interfaces: desktopProfiles / desktopPnpm. [VERIFIED - CSDN Review]
Advantages: The most newbie-friendly entry point; the underlying is still a complete dsh (all four modes, plugins, sessions, event sourcing are there), data interoperable with the command-line version, migration cost ≈ 0; high-risk operations still pop up confirmation dialogs. [VERIFIED - TuohuangzheIT Test]
Disadvantages: Community maintained, unofficial product; current official packages only support Windows x64 and Apple Silicon Mac, no official version for Intel Mac/Linux; underlying dsh is still a preview version, breaking updates still apply; plugin marketplace feature is still in planning (README self-stated, don't assume it's live). [VERIFIED - JB51/Qiniu Cloud + Official README]
6. ModLens (@liustack/modlens) —— Giving "Eyes" to Text-Only Models
Reason for recommendation: One of the earliest vision plugins in the ecosystem. Paste an image → call an external vision engine → organize OCR text, layout, entities, semantics into structured "evidence" before handing it to the text-only model for reasoning. [VERIFIED - CSDN DeepSeek Community + Tencent News]
Community feedback: About 2.6k Stars, 355 commits, "relatively mature maintenance"; Tencent News test confirmed pasting images/recognizing text/viewing charts works. [VERIFIED - Snapshot + Test]
Advantages: The mechanism is hooked into the message pipeline, turning images into "evidence the model can read" and splicing it back into the context, not simply bridging a vision API; adds a visual entry point to the routing of text-only models. [VERIFIED - CSDN Technical Analysis]
Disadvantages: Does not carry vision capability itself, must be paired with an external vision engine interface that can view images; images may be sent to third-party vision services, use with caution for confidential screenshots, contracts, internal documents (check provider, temporary files, remote URL security configuration). [VERIFIED - Tencent News + JB51]
7. dsh-genui —— Generative UI (Letting Answers "Grow Hands and Feet")
Reason for recommendation: Allows the model to write JSON interface descriptions inside
dsh-uicode fences in replies, which the frontend renders into interactive components—cards, tables, charts, forms, file trees, timelines, code diffs, Mermaid diagrams, 3D scenes, etc., 30+ components; and implements an event loop: button clicks, form submissions send action events back to the Agent, the model continues reasoning, making it a two-way interaction rather than a static display. [VERIFIED - CSDN DeepSeek Community Source-Level Analysis]Community feedback: Tencent News test successfully rendered a bar chart requirement (A=10, B=20, C=15); 53AI evaluation "turns delivery results into interfaces that can continue to be operated." [VERIFIED - Test]
Advantages: Upgrades "plain text conversation" to "conversation with an operation panel"; directly usable in scenarios like data analysis→dashboard, knowledge explanation→instant grading quiz, research compilation→tabbed traceability.
Disadvantages: Project is relatively new; stability limited for complex layouts, 3D scenes; reliability of the event loop depends on the model adhering to the
dsh-uifence convention.
8. dsh-TUI —— Claude Code Style Terminal Interface
Reason for recommendation: Full-screen interactive terminal—context progress bar, TPS dashboard, Git info, tool status, session recovery, bringing the Web UI experience into the terminal. [VERIFIED - Community Review]
Community feedback: JB51 6 Plugin List positions it as "recommended for terminal enthusiasts" (tested version 0.8.0). [VERIFIED]
Advantages: High information density, immersive coding; efficiency boost for heavy CLI users.
Disadvantages: Only suitable for terminal enthusiasts; installation and configuration slightly more cumbersome than Web plugins.
9. dsh-files / dsh-office-tools —— File Upload and Office Generation
Reason for recommendation: dsh-files supports drag-and-drop/upload reading of TXT, PDF, Word, Excel (with session isolation, format detection, size limits); dsh-office-tools allows the Agent to generate Word/PPT/Excel that can actually be downloaded. [VERIFIED - Tencent News Test]
Community feedback: Tencent News test "had it generate a Word doc, a PPT, and an Excel file, all came out, and they were genuinely downloadable." [VERIFIED]
Advantages: Pure JS processing, no need to install Office locally; much more proper than hardcoding file paths into the input box.
Disadvantages: office-tools project is relatively new, don't expect complex formatting. [VERIFIED - Test Article]
10. dsh-browser —— Browser Operations (Codex-Level Capability)
Reason for recommendation: Operates the user's already open real tabs through a bridge plugin + Chrome extension, login state/Session/Cookie saved by Chrome; the model gets numbered links/buttons/input boxes, clicks by number, supports input, key presses, scrolling, forward/back, refresh, navigation, webpage changes automatically generate new snapshots. [VERIFIED - 53AI + Tencent "Cyber Lego" Review]
Community feedback: 53AI evaluation "DeepSeek can instantly see images and operate web pages." [VERIFIED]
Advantages: No login state management needed (reuses Chrome sessions), complete real webpage operation loop.
Disadvantages: Depends on Chrome extension; all work still squeezed into the same context window during long tasks. [VERIFIED - 53AI original text points out]
11. dsh-explorer —— File Tree + Git Status Panel
Reason for recommendation: Adds a file tree, Git status, change comparison, file preview to the interface, "renovating the dsh interface into an IDE." [VERIFIED - Tencent News]
Community feedback: "Features are quite practical, and basically read-only, relatively safe." [VERIFIED]
Disadvantages: Installation requires two parts; a heavier solution in the same direction is DSH-better-sidebar (dual workbench with right sidebar + bottom panel, including real terminal, Git Diff, background tasks, sub-Agent status).
8.3 Batch 3: Power Users / Advanced (Install as Needed)
12. dsh-agent-teams —— Multi-Agent Team Orchestration
Reason for recommendation: The Agent in the current session gets promoted to "captain," automatically creating wakeable sub-agents, tasks progress based on dependencies (DAG graph visualization), team panel shows in real-time who is working, who is idle; click a member to enter the sub-session and view the process. Example: first create "compile change list," then create three review tasks for performance/security/product impact and set them as dependencies, after the list is complete the three automatically unlock. [VERIFIED - CSDN DeepSeek Community + Tencent "Cyber Lego" + Yeyupiaoling Documentation]
Community feedback: Yeyupiaoling provided complete technical documentation based on source code; Tencent News test "features are good, but token burning is really not low"; CSDN evaluation "for work with clear dependencies that can be broken down, the effect will be very obvious." [VERIFIED]
Advantages: Parallel division of labor, dependency orchestration, event-driven scheduling (not persistent polling), file-level state persistence (tasks and messages left on disk, delivered after the captain returns or calls the status tool). [VERIFIED - Yeyupiaoling]
Disadvantages: Significant token overhead; cannot cold-recover members when the captain is offline; serialized by lock within the same dsh process, but multiple processes simultaneously modifying the same team is not guaranteed consistent; member permission scope is the same process as the captain (same-origin security risk); recommend pinning the version before installation. [VERIFIED - Yeyupiaoling Source Code Analysis]
13. dsh-anchored-standard —— Model Startup State Calibration (Community Called "Enlightenment" Plugin)
Reason for recommendation: The community observed that under the same model and same API conditions, the first round performance of Standard mode is unstable (suspected training data contamination, no official conclusion). This plugin only shows the model the official Minimal style bash and str_replace_editor in the first round, and opens the full Standard tool catalog after the first tool call is completed—adds no new capability, only calibrates the startup state. [VERIFIED - Community Review + Author Tutorial]
Community feedback: Author's data (not independent benchmark): In Project2, Standard about 91/92, official Minimal about 99/96, author's Windows test 98/99. [UNVERIFIED - Single source, small sample]
Advantages: Zero new capability cost, pure calibration; many variants (Windows version, first-round Minimal compatible version, full session warm-up version).
Disadvantages: Data is not an independent benchmark, small sample; effect varies by model/scenario, cannot be taken as a conclusion.
14. dsh-usage-stats —— Token Cost Statistics
Reason for recommendation: Counts token spending, cache hits, call counts, account balance, with a heatmap; can automatically backfill historical sessions after installation. [VERIFIED - Tencent News]
Community feedback: "Otherwise, you don't even know how many tokens you've burned." [VERIFIED]
Disadvantages: Only counts, doesn't control costs; budget control still relies on model routing type plugins.
15. dsh-turn-rewind / dsh-undo —— Context and File Rollback
Reason for recommendation: Restores conversation and files to before a certain message; previews which files will change before restoring, requires confirmation, and leaves a rescue point; dsh-undo is a "context undo button," rolling back the model context to the completion state of the previous step. [VERIFIED - Tencent News + Community Review]
Community feedback: "More reliable than manually rolling back yourself." [VERIFIED]
Disadvantages: Mainly covers conversation and file states; other side effects already produced (external API calls, etc.) may not be undoable.
16. dsh-im-bridge (WeChat Bridge) —— Remote Control dsh Anytime, Anywhere
Reason for recommendation: Directly send tasks, check status, switch Sessions, stop tasks within WeChat; when manual approval is needed, reply /yes /no on the phone to continue. [VERIFIED - Community Review]
Community feedback: Roadmap plans for WeCom, DingTalk, Feishu. [VERIFIED]
Disadvantages: Uses WeChat iLink (not official Gateway), account restriction risk exists; headless mode needs to be installed separately again. [VERIFIED - Community Tips]
17. dsh-plugin-cc —— Bridge Claude Code
Reason for recommendation: Connects Claude Code into dsh: review, criticize, delegate, session import. Note that official RC.8 also provides Claude Code/Codex sub-agent Profile Bundles, the two paths overlap, think clearly which one to use before installing. [VERIFIED - Community Review + Official Release]
Disadvantages: Coexists with the official solution, conceptually easy to confuse; depends on Claude Code CLI being installed and logged in locally. [VERIFIED - Section 5 conclusion applied]
18. Model Routing / Money-Saving Group: dsh-tier-router, dsh-llm-fallbacks, dsh-shift-router, dsh-model-failover
Reason for recommendation: Tiered routing (strong model for planning/review, cheap model for mechanical execution); auto-switch to backup when main model is rate-limited/out of funds/errors; advanced versions support LLM-Judge routing, multi-model fallback chains, exponential backoff, two-level circuit breaker. [VERIFIED - Community Review]
Community feedback (key pitfall): Tencent News test dsh-llm-fallbacks "does not take effect by default after installation, you still have to configure several models yourself, turn on the switch, and finally set the switching order." [VERIFIED]
Disadvantages: High configuration cost; routing misjudgment may affect task quality; money-saving effect depends on your accurate stratification of task difficulty.
8.4 Strictly Not "Plugins," but Often Recommended as Plugins Major Projects
These projects themselves have a large user base and high stars, but are not necessarily native bundles installable via dsh plugin add, connected in their own ways. [VERIFIED - JB51/Qiniu Cloud Classification Criteria]
Open Design (nexu-io/open-design, about 87.8k Stars): Local AI design workbench, generates web/mobile prototypes, dashboards, slides, images, videos, exports HTML/PDF/PPTX/MP4; integrates dsh as a native Agent runtime (
od agent setup deepseek-harness), compatible with Claude Code/Codex/Cursor and 20+ CLIs (BYOK). Suitable for design/content teams needing a complete delivery chain of "generate then continue editing, preview, export"; not a regular bundle. [VERIFIED - Qiniu Cloud + JB51]OpenViking (volcengine/OpenViking, about 28.7k Stars): Self-evolving context database, unifies memory/knowledge/RAG/Skill into a
viking://virtual file system, loaded hierarchically by summary-overview-detail; Agent can locate context likels/tree/findand retain retrieval traces. Suitable for cross-session memory, team knowledge bases, large-scale context; pip install, accessed via Agent Plugin/MCP/CLI, not a native bundle. [VERIFIED - Qiniu Cloud + JB51]Archify (tt-a1i/archify, about 13.6k Stars): Generates verifiable architecture diagrams/workflows/sequence/data flow/lifecycle diagrams from system descriptions or codebases, outputting self-contained HTML. Essentially an Agent Skill, comes with a preview version DSH integration (
@tt-a1i/[email protected]), suitable for code reviews, system handovers, technical documentation. [VERIFIED - JB51]Voyager (Nagi-ovo/voyager, about 19.5k Stars): Browser enhancement suite + prompt manager, can follow the Harness Web UI at localhost:3080 to manage prompt libraries. Is a browser extension, not a bundle; can read page content, evaluate permissions first in enterprise environments. [VERIFIED - JB51]
Yao (YaoApp/yao, about 7.6k Stars): Self-hosted Agent console, unified management of tasks and workspaces across desktop/mobile/browser/API, README marks dsh as integrated. Evaluate remote access, authentication, workspace file permissions before deployment. [VERIFIED - JB51]
Ouroboros (Q00/ouroboros, about 5.5k Stars): Interview-phased evaluation-budget constraint-continuous iteration verification loop, suitable for PRDs, complex refactoring, long tasks, not suitable for simple Q&A; DSH integration installed via
github:Q00/ouroboros#main&path:integrations/dsh-plugin. [VERIFIED - JB51]
8.5 Scenario-Based Selection Advice (Community Recommended Combinations)
Don't want to touch the command line at all: DSH Desktop + dsh-market + dsh-at-file + ModLens. [VERIFIED - Qiniu Cloud/JB51 Combination Criteria]
Daily coding: dsh-market + dsh-at-file + dsh-context + dsh-genui (terminal enthusiasts add dsh-TUI).
Multi-Agent / Complex Refactoring / Code Review: dsh-agent-teams + dsh-anchored-standard + dsh-usage-stats + Archify.
Design / Content Delivery: Open Design + ModLens.
Long-term Memory / Team Knowledge Base: OpenViking + dsh-memento (cross-session local memory, write requires item-by-item confirmation, with audit panel; downside is old content can interfere with new tasks over time, needs periodic cleanup). [VERIFIED - Tencent News]
Saving Money / Cost Control: dsh-tier-router + dsh-usage-stats.
Not recommended to install a bunch at once: Community testing suggests "install only one at a time" for verification, following the process of "review source code before install → test in an independent profile → confirm config tree/network permissions/uninstall path → then enter the formal environment." [VERIFIED - Community Consensus]
8.6 Installation Commands and Security Reminders (Unified Criteria)
# Native bundle (npm package)
dsh plugin --profile web add <plugin package name>
# Native bundle (GitHub source)
dsh plugin --profile web add git+https://github.com/<owner>/<repo>.git
# Must restart Harness after installation to take effect
dsh restart web
Plugin commands are actually handed off to pnpm for processing, pnpm must be available locally first. [VERIFIED - Tencent "Cyber Lego"]
Check before installation: repository, installation scripts, last commit time, license, permission scope; recommend pinning versions for production/shared workspaces. [VERIFIED - Yeyupiaoling + Official Stance]
Community plugins run with local machine permissions (can read files, touch credentials, use network); the official index explicitly states "entering the plugin marketplace ≠ passing a security audit." [VERIFIED - Official Index + Tencent News]
dsh iterates extremely fast (rc.5→rc.8 in just one week), plugins and dsh versions have compatibility windows; if the plugin list shows anomalies, first run
dsh --profile web --dump-configto see the layered configuration. [VERIFIED - Section 3 conclusion applied]
9. Reference Source List
Official Primary Sources (Highest Confidence)
DeepSeek Harness GitHub Repository: https://github.com/deepseek-ai/deepseek-harness (README, docs/, packages/, vendor/cordis)
GitHub Release v0.1.0-rc.8 Official Release Notes (including Chinese and English): https://github.com/deepseek-ai/deepseek-harness/releases/tag/dsh-v0.1.0-rc.8
DeepSeek Official API Documentation "Connecting Agent Tools" (Claude Code/OpenCode/OpenClaw integration): Connecting Agent Tools | DeepSeek API Docs
Claude Code Official Documentation Extend Claude Code (Skills/MCP/Subagents/Agent Teams/Hooks/Plugins): https://code.claude.com/docs/en/features-overview
International Authoritative Media / In-Depth Analysis (Higher Confidence)
The New Stack, Frederic Lardinois "DeepSeek open sources an agent harness where everything is a plugin" (2026-08-13): DeepSeek open sources an agent harness where everything is a plugin - The New Stack
VentureBeat, Carl Franzen "DeepSeek Harness launches as open source rival to Claude Code..." (2026-08-13): DeepSeek Harness launches as open source rival to Claude Code, alongside V4-Pro on API with higher prices | VentureBeat
ArceApps Blog "DeepSeek Harness: the runtime where everything is a plugin" (including Cordis paper interpretation, star count snapshots, source code details): DeepSeek Harness: the runtime where everything is a plugin - ArceApps Blog
Prompt Genius "DeepSeek Harness: Everything Is a Plugin": DeepSeek Harness: Everything Is a Plugin | Prompt Genius
ScriptByAI "DeepSeek Harness: Open-Source Plugin-Based AI Agent Harness" (four modes, command quick reference): DeepSeek Harness: Open-Source Plugin-Based AI Agent Harness
Domestic Mainstream Media / Community In-Depth Content (Medium Confidence, Cross-Verified)
Sina Tech/Jiqizhixin Pro "Just Now, DeepSeek Harness Updated! Enhanced Multimodality" (RC.8 report): Just Now, DeepSeek Harness Updated! Enhanced Multimodality|Session|Workflow|Tool|Long Chain|Image-Text_Mobile Sina
Tencent Cloud Developer Community "DeepSeek Harness rc.8 Update Interpretation" (including npm version lag, SQLite incompatibility tips): DeepSeek Harness rc.8 Update Interpretation: Image Input, Auto-Open Webpage, and Two Practical Community Tools-Tencent Cloud Developer Community-Tencent Cloud
CSDN DeepSeek Tech Community "DeepSeek Harness First Experience: Getting Started, Installation, and Custom Plugins" (5 plugin concepts + minimal plugin source code): DeepSeek Harness First Experience: Getting Started, Installation, and Custom Plugins_Natural Language Processing_qq_42859625-DeepSeek Tech Community
Juejin "DeepSeek Harness Open Sourced, How to Get Started" (greet tool plugin complete process, Datawhale tutorial reference): https://juejin.cn/post/7674783303249887283
CSDN "[DeepSeek Harness Technical Analysis] How Everything is a Plugin Reconstructs Agent Runtime" (four-dimensional comparison table with Claude Code/Codex/OpenCode): [DeepSeek Harness Technical Analysis] How Everything is a Plugin Reconstructs Agent Runtime-CSDN Blog
Yeyupiaoling Blog "Using dsh-plugin-product-subagents to Connect Codex, Claude Code to Continuable Chat DSH Sub-Agents" (community solution complete documentation): Using dsh-plugin-product-subagents to Connect Codex, Claude Code to Continuable Chat DSH Sub-Agents - Yeyupiaoling
CSDN "It Can Call Claude Code as a Subordinate—DeepSeek Harness's 10 Most Underestimated Usages" (sub-agent orchestration scenarios + settings.yaml enabling method): It Can Call Claude Code as a Subordinate—DeepSeek Harness's 10 Most Underestimated Usages_Artificial Intelligence_Qiniu Cloud Industry Application-MCP Tech Community
CSDN "Thoughts on Using DeepSeek Harness" (tested settings.yaml codex/claude-code provider default disabled): Thoughts on Using DeepSeek Harness-CSDN Blog
TreeRouter Blog "Build DeepSeek Harness Plugins with Cordis Tutorial" (host/client plugin two-type division, bundle structure): Build DeepSeek Harness Plugins with Cordis Tutorial - TreeRouter Blog
NetEase/AppSo "Just Now, DeepSeek Harness Major Update, Multimodal Capabilities Enhanced": Just Now, DeepSeek Harness Major Update, Multimodal Capabilities Enhanced|Call|Workflow|Context|deepseek_NetEase Subscribe
MoClaw Blog "DeepSeek Harness Plugins vs Skills" (plugin vs Skill security review differences): DeepSeek Harness Plugins vs Skills | MoClaw Blog
Chapter 8 (Plugin Recommendation List) New Sources Added (Supplemented 2026-08-21)
Tencent News "I Installed 16 Plugins for DeepSeek Harness in One Go, The Most Ridiculous One Was Playing Web Game Ads" (2026-08-17, 16 plugins tested in batches + security reminders): I Installed 16 Plugins for DeepSeek Harness in One Go, The Most Ridiculous One Was Playing Web Game Ads_Tencent News
JB51/Qiniu Cloud Industry Application "DeepSeek Harness 10 Truly Practical Plugins Detailed Explanation (High-Star Projects and Installation Guide)" (2026-08-20, 10 plugins categorized, three connection methods analysis, Star snapshots): DeepSeek Harness 10 Truly Practical Plugins Detailed Explanation (High-Star Projects and Installation Guide)_Other_AI_JB51
JB51 "DeepSeek Harness Recommended 6 Plugins (Tested Without Pitfalls)" (dshmarket/dsh-vision-router/dsh-TUI/dsh-context/dsh-chat-import/dsh-at-file tested version numbers and installation order): DeepSeek Harness Recommended 6 Plugins (Tested Without Pitfalls)_Other_AI_JB51
Tencent "Netizens Turned DeepSeek Harness into Cyber Lego, We Picked the 11 Most Interesting Plugins" (dsh-browser/dsh-agent-teams/dsh-genui, etc.): Search Information Page
53AI "DeepSeek Harness Gained 166k Stars in One Week, What Have Developers Turned It Into?" (dsh-browser/dsh-genui/dsh-openpencil/dsh-context/dsh-agent-teams): DeepSeek Harness Gained 166k Stars in One Week, What Have Developers Turned It Into? - 53AI-AI Knowledge Base|Enterprise AI Knowledge Base|Large Model Knowledge Base|Frontline Deployment Engineer|FDE|AIHub
CSDN DeepSeek Tech Community "ModLens / dsh-genui Mechanism Analysis" (visual evidence pipeline, dsh-ui code fence + event loop source-level interpretation): DSH Best 10 Plugins_Artificial Intelligence_Everything is Lovely^-DeepSeek Tech Community
Yeyupiaoling "Using dsh-agent-teams to Orchestrate DeepSeek Harness Sessions into Agent Teams" (source-level technical documentation: event-driven scheduling, file-level persistence, lock serialization, permission scope): Using dsh-agent-teams to Orchestrate DeepSeek Harness Sessions into Agent Teams - Yeyupiaoling
CSDN "DeepSeek Harness Desktop: Nearly 6K Stars in 2 Days Open Source, a Desktop Client That Lets Ordinary People Use Local AI Agents" (Electron architecture, security mechanisms, pros/cons analysis): DeepSeek Harness Desktop: Nearly 6K Stars in 2 Days Open Source, a Desktop Client That Lets Ordinary People Use Local AI Agents.-CSDN Blog
ima Knowledge Base/AI Trainer "Why 'Everything is a Plugin'..." (deepseek-harness-desktop zero-config solution, log as single source of truth): ima.copilot-AI Trainer
TuohuangzheIT "DeepSeek Harness Desktop Hands-On Record" (command-line vs desktop version comparison table, tray/notifications/auto-update): DSH Desktop (Official Website)
DeepSeek Harness Desktop Official Repository (anywhere-labs/deepseek-harness-desktop, MIT, README declares unofficial product): https://github.com/anywhere-labs/deepseek-harness-desktop
Qiniu Cloud News "DeepSeek Harness Complete Getting Started Guide: Deployment Installation, Model Configuration to Must-Install Community Plugins" (open-design/OpenViking/archify/EverOS Star data): DeepSeek Harness Complete Getting Started Guide: Deployment Installation, Model Configuration to Must-Install Community Plugins | Qiniu Cloud