OpenAI plugin compatibility

Decision

Reuse the Atlas Cloud Skill content and scripts, but keep a separate DeepSeek Harness repository and host adapter.

The OpenAI/Codex package cannot be installed unchanged because DSH does not read .codex-plugin/plugin.json or .app.json. DSH also gives Cordis plugins an explicit lifecycle and qualifies MCP tool names. The reusable Skill directory format is compatible, so duplicating the workflow logic would create unnecessary drift.

Compatibility matrix

Surface	Reuse status	DSH implementation
SKILL.md frontmatter and Markdown body	Reused	Mounted from skills/ by @deepseek-ai/dsh-skill-filesystem
Skill references/, scripts/, examples, and assets	Reused	Resolved from the package-relative Skill resource directory
Codex .codex-plugin/plugin.json	Not reusable	Replaced by package.json with dsh.bundle.patch
OpenAI .app.json registered MCP connection	Not reusable	Replaced by an explicit @deepseek-ai/dsh-mcp-client row
Raw MCP tool names	Semantically reusable	DSH exposes mcp__atlascloud__<rawName> to avoid collisions
Host lifecycle and installation	Not reusable	Installed per DSH profile with dsh plugin --profile ... add ...

Why the MCP row is disabled

The OpenAI host owns the registered app connection represented by .app.json. DSH must instead start or connect to a server explicitly. This bundle includes a version-pinned stdio configuration for atlascloud-mcp, but leaves it disabled because enabling it executes a trusted child process outside the agent sandbox.

Skills remain available without MCP. Their REST and CLI guidance continues to work when the user deliberately chooses those routes and provides credentials to the executing process.

Harness anchors Loader baseUrl at the active profile directory, not at each bundle patch. The bundle therefore resolves its own installed package.json with createRequire(baseUrl) and mounts the adjacent skills/ directory. This works for npm, Git, tarball, and local-link profile installations without a build or install script.

Upstream synchronization

skills/SOURCE.json records the authoritative repository and full source commit. Syncs copy the three Skill trees, then reapply only the documented DSH tool-name notes. A verification failure on a missing relative resource blocks release.

Rejected formats

Do not add a .dsh-plugin manifest. DeepSeek Harness removed the repository-plugin path on 2026-08-09 and intentionally retains no compatibility parser. The supported standalone distribution format is a profile bundle with dsh.bundle.patch.