dshbase

Blog · Analysis

DeepSeek Harness plugin ecosystem: 209 community plugins

August 14, 2026 · dshbase

In the first weeks after DeepSeek Harness (dsh) went public, the official repo's Show and tell category turned into a firehose — 209 posts and counting, the overwhelming majority shipping a working plugin. Because dsh is everything-is-a-plugin (the agent loop, tools, sandbox, and UI are themselves plugins on the Cordis kernel), the community didn't bolt extensions onto a fixed product — they grew the product's organs. We read all 209 posts, pulled details on 36 of the most representative, and grouped them into ten categories below. The full, verified list lives in the plugin directory.

1. UI & themes

The Web GUI is just another plugin surface, so the first wave of community work was cosmetic and navigational — often client-side only, no host changes, uninstallable by deleting one line.

  • dsh-bg-image — a full-page wallpaper with frosted-glass sidebar and chat area, auto-adapting to light/dark theme.
  • dsh-width-tiers — five chat-width presets (standard / medium / wide / ultra / full) via a floating picker above the composer.
  • dsh-turn-index — a right-sidebar table of contents for the session: click any turn to jump and highlight it.
  • dsh-milestone — a dot-timeline navigator with in-bar search, hover previews, and one-click jumps to any question.

2. Memory & sessions

dsh ships session-level memory (append-only event logs and AGENTS.md). The community's most crowded race was filling the gap the official release left open: memory that survives across sessions.

  • dsh-mnemosyne — a cross-session memory "seam": facts remembered in session A are recallable in session B via memory_remember / memory_recall.
  • dsh-memory — zero-dependency JSON memory with self-correcting "lessons" that harden after a mistake repeats twice.
  • dsh-hindsight-memory — semantic memory over PostgreSQL + pgvector embeddings, with auto-recall injected before every step.
  • dsh-llmwiki — a local Markdown wiki (Obsidian-compatible) that acts as long-term memory via a section provider plus memory_search / memory_save tools.

3. Tools & capabilities

Where the memory race got crowded, the tool space had genuine holes — and builders moved fast to close them with model-facing tools registered through ctx.tools.

  • dsh-tool-git — structured, safe git operations (git_status, git_diff, git_commit) instead of hand-typing bash; repoRoot is pinned and git_add blocks ".".
  • dsh-email — six email tools (list / read / search / send with an approval gate, folders, attachments) plus a web settings page.
  • dsh-tool-somark — parse PDFs, images, Word, and PowerPoint into structure-preserving Markdown with page/token counts.
  • @tonydua/dsh-web-search-exa — zero-config Exa web search: anonymous MCP fallback without an API key, auto-upgrading to REST when you add one.

4. Workflow & automation

The defining upgrade from "chatbot" to "harness" is agents that act on schedule, in parallel, and without you watching. Several plugins push exactly that boundary.

  • dsh-delayed-task — durable delayed tasks: the agent genuinely returns at the agreed time, even after you close the page, to reassess evidence.
  • dsh-polling — cron-driven scheduled tasks created in natural language and managed from a web card (daily reports, folder watching, scripts).
  • dsh-taskswarm — wave-based multi-agent orchestration: a supervisor plans dependency-ordered waves, workers run in git-worktree-isolated lanes, then a reviewer gates the merge.
  • dsh-messager — task-status notifications through OS toasts, browser notifications, and a Feishu webhook, aligned to the UI's status dots.

5. Messaging & platform

A lot of people don't want to sit in a browser. This category is about bringing dsh to where you already are — chat apps, your real browser, your editor, or a native desktop shell.

  • dsh-adapter-feishu — run the agent inside Feishu over a WebSocket long connection, no public IP or tunnel required.
  • dsh-feishu-bridge — a fail-closed Feishu/Lark channel that verifies signatures and blocks replays at its own edge (it also found and reported an upstream SDK gap).
  • dsh-browser — a Chrome sidebar extension that lets dsh read, click, fill, and navigate your real browser while preserving your login state.
  • DeepSeek-Harness-for-VS-Code — a VS Code client with editor-tab sessions, live stats, and full two-way sync with the web app.

6. Development & observability

The more a harness runs unattended, the more you need to see inside it — costs, traces, and diagnostics. A whole sub-ecosystem formed around that.

  • dsh-doctor-windows — a one-shot /doctor-windows command diagnosing Node, PowerShell, Koffi, proxy, and UTF-16 path hazards on Windows.
  • dsh-plugin-langfuse — exports every session to Langfuse as an OpenTelemetry trace tree (turns, generations, tool spans, tokens).
  • dsh-usage — token usage, cost estimates, and a GitHub-style 52-week heatmap per model and session.
  • dsh-eval-regression — a deterministic golden-output evaluator (required/forbidden fragments, a 0..1 score) as one transparent gate.

7. Vision & multimodal

DeepSeek's text-only models can't see images natively — so the community gave them eyes, and hands for images and video, mostly by delegating to OpenAI-compatible vision endpoints.

  • dsh-vision — a vision tool that describes images for text-only models via any OpenAI-compatible vision API.
  • dsh-imagecraft — image_gen and image_vision tools powered by your existing ChatGPT subscription, no API key needed.
  • dsh-nanobananapro / dsh-seedance2 — API-powered image and video generation with task polling and balance checks.

8. Security & governance

An agent that can run tools is an agent that can do damage. A small but serious cluster of plugins treats the sandbox, authorization, and auditability as first-class problems.

  • DSH Trust Layer — four privacy-minimal observability plugins: telemetry redaction, per-turn verification receipts, hash-chained evidence receipts, and labeled context provenance.
  • dsh-tool-underseal — hash-sealed authorization for agent delegation: workers must check in before write tools unlock, and the mandate can't be rewritten in chat.
  • dsh-quota-limits — simulate OpenAI / Anthropic / Google subscription quotas on DeepSeek calls, returning a synthetic 429 over budget.

9. Models & providers

dsh's model layer is provider-agnostic by design, and the community stretched it to any backend you already pay for.

  • dsh-codex-connect — ChatGPT OAuth sign-in and OpenAI Codex models through the normal Harness model picker, additively installed.
  • dsh-llm-auto-route — auto-detects a provider from env/base URL/model name and routes with health checks and failover before the first output.
  • deepseek-harness-huggingface — a read-only Hugging Face Hub model search tool (hf_search_models), no token required.

10. Fun & culture

Because everything is a plugin, everything is also a joke. Within 24 hours the community had skinned the UI as QQ 2006, embedded fake 2005-era ad portals, and raised a desktop pet. It's the clearest proof that the plugin surface is real: people use it the way you'd use a blank canvas.

  • dsh-deepseek-girl-pet — a desktop pet that reads the session state and tracks your mouse across 16 directions.
  • DSH Meme Hub — a curated, screenshot-rich index of 28 community "meme" projects, from ad portals to skins to mini-games.

The through-line

Ten categories, but one pattern: nobody waited for a roadmap. The memory race, the Feishu bridges, the Codex connectors, the vision sidecars — they all appeared because the kernel made it a one-command install (dsh plugin add …) to ship a new organ. That's the real story of the 209 posts: not that plugins exist, but how fast a blank-canvas architecture can be colonized. If you want the curated, test-verified subset rather than the firehose, start at the plugin directory — each card shows verification status and the exact install command.

All articles →

🌐 中文