DSH Plugins
August 29, 2026 · View on GitHub
A curated index of DeepSeek Harness (DSH) plugins maintained by MkaliezZ.
All repositories in this family share the topics
dsh-plugin · deepseek-harness · agent-tooling · developer-tools · typescript
(plus one domain topic each), so they surface together in the
dsh-plugin ecosystem that the DSH
CONTRIBUTING
guide points community plugins to.
Ecosystem position — this family's differentiator is evidence over assertion: deterministic fail-closed boundaries, sealed release evidence, and policy-regression loops, rather than single-purpose utilities. The flagship dsh-agentfuse-plugin is runtime-verified [可用] by the awesome-dsh-plugins radar (registered via PR #258).## Install (npm)
All plugins publish to npm under the @mkaliezz scope (the AgentFuse gate lives under
@dhms-agentfuse). Install one and wire it through your profile:
npm i -D @mkaliezz/dsh-secret-guard # examples: pick from the tables below
dsh plugin --profile web add @mkaliezz/dsh-secret-guard
| Plugin | npm package |
|---|---|
| dsh-agentfuse-plugin (gate) | @dhms-agentfuse/dsh-agentfuse + @dhms-agentfuse/core |
| dsh-task-board-ui | @mkaliezz/dsh-task-board-ui |
| dsh-secret-guard | @mkaliezz/dsh-secret-guard |
| dsh-dependency-firewall | @mkaliezz/dsh-dependency-firewall |
| dsh-plugin-firewall | @mkaliezz/dsh-plugin-firewall |
| dsh-api-client | @mkaliezz/dsh-api-client |
| dsh-policy-test | @mkaliezz/dsh-policy-test |
| dsh-test-normalizer (repo: dsh-test-normalizer) | @mkaliezz/dsh-test-runner |
| dsh-error-explainer | @mkaliezz/dsh-error-explainer |
| dsh-agent-doctor | @mkaliezz/dsh-agent-doctor |
| dsh-task-board (repo: dsh-evidence-task-board) | @mkaliezz/dsh-task-board |
| dsh-action-ledger | @mkaliezz/dsh-action-ledger |
| dsh-context-pack | @mkaliezz/dsh-context-pack |
| dsh-repo-map | @mkaliezz/dsh-repo-map |
| dsh-change-attestor | @mkaliezz/dsh-change-attestor |
| dsh-dev-server | @mkaliezz/dsh-dev-server |
| dsh-docs | @mkaliezz/dsh-docs |
Version pin — the
@deepseek-ai/*harness packages keeplatesttags that lag the active release line (0.1.1-rc.2ships undernext). Pin harness-facing dependencies to^0.1.1-rc.2so profiles never resolve a stale rc build through a default install.
Authorization & safety (fail-closed)
| Plugin | What it does |
|---|---|
| dsh-agentfuse-plugin | Deterministic, fail-closed pre-dispatch tool authorization with evidence (allow/block/ask, approval-chain deferral, agentfuse-evidence-schema-v0.1) |
| dsh-secret-guard | Fail-closed secret-like payload guard inspecting model tool arguments at tools/pre-execute |
| dsh-dependency-firewall | Classifies package-manager commands before execution: ALLOW / ASK / BLOCK |
| dsh-plugin-firewall | Offline-first static admission scanner for community plugins, before you trust them |
| dsh-api-client | Localhost-first HTTP debugging; blocks remote hosts and sensitive request headers by default |
Policy, testing & diagnostics
| Plugin | What it does |
|---|---|
| dsh-policy-test | Deterministic regression tests for DSH policy decisions without invoking the protected tool body — pairs with dsh-agentfuse-plugin (joint closed-loop example) |
| dsh-test-runner | Normalizes pytest / Vitest / Jest / Cargo summaries into a stable result shape |
| dsh-error-explainer | Structured stack-trace parsing (Python, Node.js, Rust, Java) with bounded frame metadata |
| dsh-agent-doctor | /doctor health & safety diagnostics of the effective model-visible tool surface |
Workspace & productivity
| Plugin | What it does |
|---|---|
| dsh-task-board | Persistent, deterministic task-state primitives (create / status / evidence transitions) |
| dsh-task-board-ui | DSH-styled web UI panel for the task board: view, create, and transition tasks with evidence |
| dsh-action-ledger | /action-ledger reconstructs a human-readable action ledger from the durable session log |
| dsh-context-pack | Deterministic, privacy-aware repository context packs for context injection |
| dsh-repo-map | Read-only repository structure & symbol map (complements context-pack) |
| dsh-change-attestor | Deterministic workspace-change attestation between two bounded snapshots |
Runtime & infrastructure
| Plugin | What it does |
|---|---|
| dsh-dev-server | Long-running dev-server lifecycle primitives; blocks compound shell usage |
| dsh-docs | Version-aware documentation query with excerpt bounding; host-supplied lookup |
About DSH
DeepSeek Harness is a plugin-based agent harness: everything is a plugin.
The official repository does not accept external pull requests yet — community
plugins are distributed as standalone repositories under the dsh-plugin
topic, which is exactly what this family does.