dsh-plugin

Community plugin collection for DeepSeek Harness (DSH).

中文文档：README.md

Community plugins — not DeepSeek official products. There is no official endorsement, review, or store listing for these plugins. DeepSeek Harness is in developer preview; compatibility can break at any time. Pin versions and never install latest.

Plugins

Plugin	Version	Status	Build / test
dsh-session-supervisor	0.1.0-beta.0	developer preview	self-contained pnpm package
dsh-dream-reflection	0.1.0-rc.1	release candidate (local development)	built and tested inside a DeepSeek Harness checkout
dsh-browser-automation	0.1.0-rc.1	Local acceptance passed (not on npm)	Self-contained pnpm workspace; per-file 100% coverage gate; real-harness install acceptance

dsh-session-supervisor

A durable, bounded lifecycle supervisor with scheduled evaluation for live DeepSeek Harness sessions. Maintenance transactions, an incident state machine, budget accounting, and durable receipts over session lifecycle facts. See README.en.md (中文：README.md).

Self-contained pnpm package — development and CI run from the plugin directory:

cd plugins/dsh-session-supervisor
pnpm install
pnpm run typecheck
pnpm run test          # vitest; `pnpm run coverage` enforces the 100% gate
pnpm run build

Compatibility baseline: npm-pinned @deepseek-ai/dsh-* 0.1.0-rc.6, Node ^22.19.0 || >=24.0.0, pnpm ≥ 10. See docs/compatibility.md.

dsh-dream-reflection

Scheduled dream-reflection plugin: bounded, redacted, quarantine-reviewed memory cards over workspace sessions. Cards enter quarantine first; only cards approved by a human via /dream approve become dynamic context. See README.md (Chinese-only docs).

This package is developed and tested inside a DeepSeek Harness checkout as an out-of-tree plugin: its tsconfig.json and vitest.config.ts resolve the harness source plane (../../tsconfig.base.json, ../../vitest.shared.ts), and its node_modules/@deepseek-ai/* are symlinks into the harness packages. Build and test commands therefore run from the harness checkout, as documented in CONTRIBUTING.md. Compatibility baseline: harness 0.1.0-rc.5, Node ^22.19 || >=24.

dsh-browser-automation

Isolated public-web browser automation plugin family: open public pages, read bounded semantic snapshots, perform controlled interactions, and capture screenshots inside an isolated Chromium context — without inheriting the user's logins, profiles, or secrets. Four packages (Service Definition / Playwright provider / tool Consumer / profile bundle) form a complete capability seam; write actions require one-shot human approval with TOCTOU re-verification at the action site, full-chain egress, and operation-scoped network leases. See README.en.md (中文：README.md).

Self-contained pnpm workspace — development and acceptance run from the plugin directory:

cd plugins/dsh-browser-automation
pnpm install
pnpm run typecheck
pnpm run test          # vitest; includes real-Chrome integration (self-skips without Chrome)
pnpm run test:coverage # per-file 100% hard gate
pnpm run build
node scripts/exports-check.mjs

Real-harness acceptance (run inside a DeepSeek Harness checkout, isolated DSH_HOME): node plugins/dsh-browser-automation/scripts/acceptance.mjs — CLI install → composed dump → official boot() mount assertions → tarball pack/install → keyless read-only call → uninstall; the whole chain exits 0. Compatibility baseline: harness local master (47f94385), Node ^22.19.0 || >=24.0.0, pnpm 11 (corepack-pinned), Chrome 151 (verified on macOS); other platforms per docs/compatibility.md.

Repository layout

plugins/                        one directory per plugin; each is a self-contained package
  dsh-session-supervisor/       pnpm package; .github/ keeps its standalone CI config
  dsh-dream-reflection/         source package (build/test plane lives in a harness checkout)
  dsh-browser-automation/       self-contained pnpm workspace (four packages + acceptance script)
.github/workflows/              collection-level CI (root-level workflows only)

CI note. GitHub Actions executes only workflows under the repository-root .github/workflows. Each plugin keeps its own standalone CI configuration under its directory for the day the plugin is extracted into its own repository; the operative collection-level pipeline for dsh-session-supervisor is .github/workflows/session-supervisor-ci.yml. The test:profile-install smoke step is intentionally not part of the collection pipeline: it drives the real dsh CLI from an adjacent harness source checkout — run it locally with DSH_BIN pointing at a real dsh executable.

Security

Each plugin ships its own security docs: SECURITY.md / threat model for dsh-session-supervisor; SECURITY.md / THREAT_MODEL.md for dsh-dream-reflection; SECURITY.md / threat model for dsh-browser-automation. Report vulnerabilities per the plugin's disclosure policy; do not file public issues with exploit details.

License

Each plugin is licensed under its own terms — all three are MIT. See the LICENSE file inside each plugin directory. The repository-level files are MIT-licensed as well (LICENSE at the root).