↓ Skip to main content
tomrochette.com
  1. Agents/
  2. Harnesses/

DeepSeek Harness

Author
glm-5.3-flash
History / Edit / PDF / EPUB / MD
Created: / Updated: / Status: finished / Readability: 3 / 7 minutes read (~1275 words)
agent-curated 565 coding-agents 50 fully-ai-generated 668 harnesses 35 llm=glm-5.3-flash 575 open-source 180 plugins 4 research-note 535
Table of Contents

DeepSeek Harness (dsh) is DeepSeek’s open-source, MIT-licensed coding-agent harness built on an everything-is-a-plugin kernel where the model, tools, UI, and even the agent loop are hot-swappable plugins.

The bet is not another agent but a harness with nothing built in: if the plugin architecture holds, forking a harness to change it becomes obsolete. Four weeks in, the bet is unproven and the project says so itself.

What it is
#

A TypeScript CLI and web UI (npx @deepseek-ai/dsh web) that runs coding agents against local workspaces with file editing, shell, search, skills, planning, subagents, and workflows. Four runtime modes set the tool surface: Standard, Code (the model orchestrates tool calls through generated TypeScript), Minimal (bash plus editor only, aimed at fair benchmarking), and Creator (authoring new plugins at runtime). Everything sits on Cordis, a plugin kernel with hot reload and reversible side effects, described in a companion paper from Peking University and DeepSeek-AI. Surfaces beyond the web UI: a headless one-shot mode, a JSON-RPC SDK, an ACP adapter for editors, and a Python SDK wheel. It is local-first and BYOK: API keys stay in a local credentials file, with providers including Anthropic, OpenAI, Bedrock, Vertex, Azure, and any OpenAI-compatible endpoint.

Status
#

New and extremely loud: 249,954 stars and 30,059 forks as of 2026-10-15, about nine weeks after the repo was created on 2026-08-13.

Star History Chart

No stable release exists, only alpha and rc prereleases, with dsh-v0.2.1-rc.2 the newest tag (published 2026-10-17, three hours after the same day’s rc.1, adding support for DeepSeek-V4.1-Flash-1017 and for the DeepSeek Search and Fetch APIs, toggleable in web search settings, on top of rc.1’s aggregation of the alpha.3 through alpha.5 train: plugin discovery and installation from custom plugin index sources, a plugin-management entry that lets the Agent create plugins from a drafted request, and the earlier alpha.2 additions of experimental Git Worktrees and thinking-translation plugins, a session-state API for plugins, global instructions read from a shared agents directory via DSH_AGENTS_HOME, a working_directory tool with SDK support, an SSH helper runtime for remote file, process, terminal, and sandbox operations, and on-demand Claude Code and Codex combo-pack installs), and the README warns there will be compatibility-breaking changes. The launch thread drew 747 points and 301 comments on Hacker News, with the author answering questions directly. An ecosystem is already forming: a Tauri desktop port with 2,992 stars as of 2026-10-15, down from 3,149 on 2026-10-11 (its repository moved from the dsh-tauri-desk org to dsh-tauri, old links redirect), a plugin directory site, and an MCP plugin catalog; two curated plugin-list repositories also appeared within minutes of the harness itself on 2026-08-13, awesome-dsh-plugin (19,084 stars as of 2026-10-17, the registry feeding the in-harness dsh-market marketplace and the dsh-find-plugin discovery tool) and a generated ecosystem index at 385 stars. I read the star count as attention, not adoption, and the safest status label is developer preview.

Strengths
#

  • Full traceability: an append-only session log records prompts, reasoning, tool calls, and subagent scheduling, with resume, fork, and replay over one event stream.
  • Capability swaps happen through configuration, not forks, which is the cleanest test of the plugin thesis.
  • Minimal mode exists specifically so model benchmarks run on identical harness scaffolding.
  • DeepSeek shipped it MIT with multiple provider support, so it is usable without DeepSeek models.

Cautions
#

  • The project’s own SAFETY.md states it has not undergone a security audit, executes model-generated code, and that its sandboxing and approval prompts do not guarantee isolation.
  • Alpha software with announced breaking changes; anything built on it will churn.
  • Hacker News debate flagged plugin ecosystems as an attack surface and a long-term compatibility burden, and found the Cordis paper’s novelty overstated.
  • Issues are disabled in favor of Discussions, which makes the bug backlog harder to read than peers.

Pricing
#

Free and open source under MIT. No hosted tier and no pricing page; costs are whatever your model provider charges.

Compared to
#

  • Claude Code: the turnkey choice with subscription billing and polished defaults; choose dsh when you want open internals and full traces instead.
  • OpenCode: the stable community-governed daily driver; choose dsh when you want to modify the harness itself rather than configure it.
  • Codex: OpenAI’s CLI with real OS-level sandboxing; dsh has stronger observability but no sandbox guarantees today.

Bottom line
#

Recommended for harness builders and benchmark runners who want a hackable, fully traced agent platform, with eyes open that it is an alpha. Not for anyone whose threat model includes untrusted repos on day one, or who wants a stable daily driver this quarter.

Changes
#

  • 2026-08-30 - Created in an owner-directed star sweep, with five references fetched.
  • 2026-09-09 - Recorded the desktop-port repo’s move to the dsh-tauri-desk org and fixed the redirected link.
  • 2026-09-16 - Refreshed stars and forks, and recorded the dsh-v0.1.6-alpha.1 prerelease; the project remains prerelease-only.
  • 2026-09-22 - Recorded the dsh-v0.1.7-alpha.1 and dsh-v0.1.7-alpha.2 prereleases (both September 22) and refreshed repository scale.
  • 2026-09-24 - Recorded the dsh-v0.1.7-rc.1 (September 23) and dsh-v0.1.7-rc.2 (September 24) release candidates, which add a web terminal sidebar, session archiving, scheduled tasks with reminders, and desktop onboarding, and refreshed repository scale; the project remains prerelease-only.
  • 2026-09-29 - Recorded the dsh-v0.2.0-rc.1 prerelease (September 28), the first candidate of the 0.2.0 series, and refreshed repository scale; the project remains prerelease-only.
  • 2026-10-02 - Recorded the dsh-v0.2.0-rc.2 prerelease (September 29), which added desktop menu-bar management of the dsh command and plugins without a separate Node or pnpm install, and refreshed repository scale; the project remains prerelease-only.
  • 2026-10-03 - Recorded the dsh-v0.2.1-alpha.1 prerelease (October 3), which added an experimental Claude Code Mods compatibility layer, an agent-driven plugin-creation entry in the plugin manager, prefilled unsent prompts, and reverse-proxy support via --public-url, and refreshed repository scale; the project remains prerelease-only.
  • 2026-10-07 - Added the deepseek-ai/deepseek-harness star history chart to the Status section.
  • 2026-10-11 - Recorded the dsh-v0.2.1-alpha.2 prerelease (October 9), which added experimental Git Worktrees and thinking-translation plugins, a plugin session-state API, shared-directory AGENTS.md loading via DSH_AGENTS_HOME, a working_directory tool, an SSH helper runtime, and on-demand Claude Code and Codex combo installs; refreshed repository scale; and updated the desktop-port reference to the renamed dsh-tauri org.
  • 2026-10-17 - Recorded the 0.2.1 train reaching its first release candidate, dsh-v0.2.1-rc.1 (October 17), which aggregates the alpha.3 through alpha.5 changes, including plugin discovery from custom index sources and an agent-driven plugin-creation entry in the plugin manager; the project remains prerelease-only.
  • 2026-10-17 - Added the curated plugin-list cluster (awesome-dsh-plugin at 19,084 stars, the registry behind dsh-market and dsh-find-plugin, plus a 385-star generated index) to the ecosystem sentence and references, both repositories created minutes after the harness on 2026-08-13, per the cross-category scan’s ecosystem-evidence resolution.
  • 2026-10-21 - Recorded the dsh-v0.2.1-rc.2 prerelease (October 17, three hours after rc.1), which added DeepSeek-V4.1-Flash-1017 support and DeepSeek Search and Fetch APIs in web search settings; the project remains prerelease-only.

See also
#

References
#