DeepSeek Harness (dsh) is DeepSeek’s open-source, MIT-licensed coding-agent harness built on an everything-is-a-plugin kernel where the model, tools, UI, and even the agent loop are hot-swappable plugins.
The bet is not another agent but a harness with nothing built in: if the plugin architecture holds, forking a harness to change it becomes obsolete. Four weeks in, the bet is unproven and the project says so itself.
What it is #
A TypeScript CLI and web UI (npx @deepseek-ai/dsh web) that runs coding agents against local workspaces with file editing, shell, search, skills, planning, subagents, and workflows.
Four runtime modes set the tool surface: Standard, Code (the model orchestrates tool calls through generated TypeScript), Minimal (bash plus editor only, aimed at fair benchmarking), and Creator (authoring new plugins at runtime).
Everything sits on Cordis, a plugin kernel with hot reload and reversible side effects, described in a companion paper from Peking University and DeepSeek-AI.
Surfaces beyond the web UI: a headless one-shot mode, a JSON-RPC SDK, an ACP adapter for editors, and a Python SDK wheel.
It is local-first and BYOK: API keys stay in a local credentials file, with providers including Anthropic, OpenAI, Bedrock, Vertex, Azure, and any OpenAI-compatible endpoint.
Status #
New and extremely loud: 249,954 stars and 30,059 forks as of 2026-10-15, about nine weeks after the repo was created on 2026-08-13.
No stable release exists, only alpha and rc prereleases, with dsh-v0.2.1-rc.3 the newest tag (published 2026-10-23, adding “More” menus to the left sidebar, session view, and right sidebar for browsing and creating plugins, a fix for unsent-draft recovery when switching sessions, and API-key adapter model-list refreshes aligned with the account-login mode, on top of rc.2 (published 2026-10-17, three hours after the same day’s rc.1), which added support for DeepSeek-V4.1-Flash-1017 and for the DeepSeek Search and Fetch APIs, toggleable in web search settings, and rc.1’s aggregation of the alpha.3 through alpha.5 train: plugin discovery and installation from custom plugin index sources, a plugin-management entry that lets the Agent create plugins from a drafted request, and the earlier alpha.2 additions of experimental Git Worktrees and thinking-translation plugins, a session-state API for plugins, global instructions read from a shared agents directory via DSH_AGENTS_HOME, a working_directory tool with SDK support, an SSH helper runtime for remote file, process, terminal, and sandbox operations, and on-demand Claude Code and Codex combo-pack installs), and the README warns there will be compatibility-breaking changes.
The launch thread drew 747 points and 301 comments on Hacker News, with the author answering questions directly.
An ecosystem is already forming: a Tauri desktop port with 2,992 stars as of 2026-10-15, down from 3,149 on 2026-10-11 (its repository moved from the dsh-tauri-desk org to dsh-tauri, old links redirect), a plugin directory site, and an MCP plugin catalog; two curated plugin-list repositories also appeared within minutes of the harness itself on 2026-08-13, awesome-dsh-plugin (19,084 stars as of 2026-10-17, the registry feeding the in-harness dsh-market marketplace and the dsh-find-plugin discovery tool) and a generated ecosystem index at 385 stars.
I read the star count as attention, not adoption, and the safest status label is developer preview.
Strengths #
- Full traceability: an append-only session log records prompts, reasoning, tool calls, and subagent scheduling, with resume, fork, and replay over one event stream.
- Capability swaps happen through configuration, not forks, which is the cleanest test of the plugin thesis.
- Minimal mode exists specifically so model benchmarks run on identical harness scaffolding.
- DeepSeek shipped it MIT with multiple provider support, so it is usable without DeepSeek models.
Cautions #
- The project’s own SAFETY.md states it has not undergone a security audit, executes model-generated code, and that its sandboxing and approval prompts do not guarantee isolation.
- Alpha software with announced breaking changes; anything built on it will churn.
- Hacker News debate flagged plugin ecosystems as an attack surface and a long-term compatibility burden, and found the Cordis paper’s novelty overstated.
- Issues are disabled in favor of Discussions, which makes the bug backlog harder to read than peers.
Pricing #
Free and open source under MIT. No hosted tier and no pricing page; costs are whatever your model provider charges.
Compared to #
- Claude Code: the turnkey choice with subscription billing and polished defaults; choose dsh when you want open internals and full traces instead.
- OpenCode: the stable community-governed daily driver; choose dsh when you want to modify the harness itself rather than configure it.
- Codex: OpenAI’s CLI with real OS-level sandboxing; dsh has stronger observability but no sandbox guarantees today.
Bottom line #
Recommended for harness builders and benchmark runners who want a hackable, fully traced agent platform, with eyes open that it is an alpha. Not for anyone whose threat model includes untrusted repos on day one, or who wants a stable daily driver this quarter.
Changes #
- 2026-08-30 - Created in an owner-directed star sweep, with five references fetched.
- 2026-09-09 - Recorded the desktop-port repo’s move to the dsh-tauri-desk org and fixed the redirected link.
- 2026-09-16 - Refreshed stars and forks, and recorded the dsh-v0.1.6-alpha.1 prerelease; the project remains prerelease-only.
- 2026-09-22 - Recorded the dsh-v0.1.7-alpha.1 and dsh-v0.1.7-alpha.2 prereleases (both September 22) and refreshed repository scale.
- 2026-09-24 - Recorded the dsh-v0.1.7-rc.1 (September 23) and dsh-v0.1.7-rc.2 (September 24) release candidates, which add a web terminal sidebar, session archiving, scheduled tasks with reminders, and desktop onboarding, and refreshed repository scale; the project remains prerelease-only.
- 2026-09-29 - Recorded the dsh-v0.2.0-rc.1 prerelease (September 28), the first candidate of the 0.2.0 series, and refreshed repository scale; the project remains prerelease-only.
- 2026-10-02 - Recorded the dsh-v0.2.0-rc.2 prerelease (September 29), which added desktop menu-bar management of the dsh command and plugins without a separate Node or pnpm install, and refreshed repository scale; the project remains prerelease-only.
- 2026-10-03 - Recorded the dsh-v0.2.1-alpha.1 prerelease (October 3), which added an experimental Claude Code Mods compatibility layer, an agent-driven plugin-creation entry in the plugin manager, prefilled unsent prompts, and reverse-proxy support via
--public-url, and refreshed repository scale; the project remains prerelease-only. - 2026-10-07 - Added the deepseek-ai/deepseek-harness star history chart to the Status section.
- 2026-10-11 - Recorded the dsh-v0.2.1-alpha.2 prerelease (October 9), which added experimental Git Worktrees and thinking-translation plugins, a plugin session-state API, shared-directory AGENTS.md loading via DSH_AGENTS_HOME, a working_directory tool, an SSH helper runtime, and on-demand Claude Code and Codex combo installs; refreshed repository scale; and updated the desktop-port reference to the renamed dsh-tauri org.
- 2026-10-17 - Recorded the 0.2.1 train reaching its first release candidate, dsh-v0.2.1-rc.1 (October 17), which aggregates the alpha.3 through alpha.5 changes, including plugin discovery from custom index sources and an agent-driven plugin-creation entry in the plugin manager; the project remains prerelease-only.
- 2026-10-17 - Added the curated plugin-list cluster (awesome-dsh-plugin at 19,084 stars, the registry behind dsh-market and dsh-find-plugin, plus a 385-star generated index) to the ecosystem sentence and references, both repositories created minutes after the harness on 2026-08-13, per the cross-category scan’s ecosystem-evidence resolution.
- 2026-10-21 - Recorded the dsh-v0.2.1-rc.2 prerelease (October 17, three hours after rc.1), which added DeepSeek-V4.1-Flash-1017 support and DeepSeek Search and Fetch APIs in web search settings; the project remains prerelease-only.
- 2026-10-24 - Recorded the dsh-v0.2.1-rc.3 prerelease (October 23): More menus in the left sidebar, session view, and right sidebar for browsing and creating plugins, unsent-draft recovery when switching sessions, and API-key adapter model-list refreshes matching the account-login mode.
See also #
- Harness Feature Matrix - the capability comparison this note joins
- Agentic Coding Tools Landscape - the map of the harness layer
- OpenCode - the stable open-source alternative
- Model Selection for Coding Tasks - what the models you plug into dsh change
References #
https://github.com/deepseek-ai/deepseek-harness - repository, README, install, MIT license, 247,775 stars as of 2026-10-12
https://www.deepseek.com/harness/en/ - runtime modes and plugin architecture claims
https://raw.githubusercontent.com/deepseek-ai/deepseek-harness/HEAD/SAFETY.md - the project’s own security warnings
https://news.ycombinator.com/item?id=49285244 - the 747-point launch thread, including critical takes on plugins and the Cordis paper
https://arxiv.org/abs/2608.25512 - the Cordis composability paper behind the architecture