Building the DeepSeek Harness plugin ecosystem: 34 open-source plugins (Apache-2.0) across security, workflows, research, and developer experience. Every project ships five-language READMEs, CI, npm publishing, and Gitee mirrors — 60k+ npm downloads in August across the family.
DeepSeek Harness turned "everything is a plugin" into an ecosystem. I build the plugins I wish existed — engineering-discipline guardrails, runtime panels, cross-session memory, and verifiable research engines — and publish them the way production software deserves.
- Registry sprint: 27 entries live on awesome-dsh-plugin · re-submission PRs open for dsh-fast / dsh-session-sync / dsh-talk (one-plugin per maintainer preference; dsh-budget / dsh-click / dsh-draw up next) · ecosystem PRs: AdamPlatin123 radar #440 merged 08-31 · Zhiyuan-Fan #59 · Herdeny #3 · official DeepSeek Harness guide PR on awesome-deepseek-agent.
- Brand protection: official-repository declaration merged into 11 repos (same-name repository defense, including the 68-star name collision on dsh-github).
- Adoption (2026-09-02 snapshot): 643★ across 35 repos (up from 626 on 09-01; topic top-100 threshold now 504) · 60.8k npm downloads in August (20.0k in the last 7 days — release surge normalizing; npm September daily stats still rolling in) — top by downloads: dsh-mcp-panel 3.9k · dsh-permission-rules 3.1k · dsh-memento 2.8k · dsh-checkpoint-rewind 2.7k · dsh-auto-review 2.7k · dsh-lsp-actions 2.5k. Per-package live badges on each repo.
- Full audit (2026-08-27): 33/33 install · load · keyless-boot · uninstall — all green.
- Supply chain: OpenSSF Scorecard CI on all 35 repos · npm provenance on every publish (Trusted Publishing verified with a live release) ·
fundinglinks and the 1024-store install channel on every README. - Certification: dsh-plugin-certification spec v1 published — five machine-checkable dimensions, A–D grades, independent registry + badges · first registry entry live: dsh-auto-review Grade B (2026-08-31 snapshot) · proposal posted on the official security-audit discussion #454.
- Community: official Showcase post + 92 answered questions across GitHub discussions (58 on the official repo) · 36 entries auto-listed on deepseek1024.com.
- New releases: 0.1.2-alpha.3 release wave landed on 09-01 — 34 repos pushed + tagged + GitHub Released, 33 npm publishes, 2× full Gitee sync · 296 versions live across 33 published packages (60 shipped since the 08-30 npm unlock). Latest: dsh-auto-review 0.9.0 · dsh-doublecheck 0.9.2 · dsh-mcp-panel 0.6.3 · dsh-permission-rules 0.6.5 · dsh-session-pin 0.7.1 · @perrylink/dsh-github 0.7.2. dsh-library search-scoring fix landed on main (0.2.3 next).
| Plugin | What it gives you | Install |
|---|---|---|
| dsh-auto-review | Second-model auto-review on the approval chain, fail-closed by default (128★) | dsh plugin --profile web add dsh-auto-review |
| dsh-memento | Approval-gated cross-session memory (ctx.memory + SQLite) (79★) |
dsh plugin --profile web add dsh-memento |
| dsh-permission-rules | Claude Code-style declarative allow/deny/ask rules with session-log audit (99★) | dsh plugin --profile web add dsh-permission-rules |
| dsh-mcp-panel | MCP management console: /mcp + Settings tab + trial calls (52★) |
dsh plugin --profile web add dsh-mcp-panel |
| dsh-checkpoint-rewind | Claude Code /rewind equivalent: git-first snapshots, session forks, one-shot restore |
dsh plugin --profile web add dsh-checkpoint-rewind |
One-command starter pack: dsh-kit — installs the full family.
| Plugin | What it gives you | npm |
|---|---|---|
| dsh-research-report | Verifiable research reports: content-addressed evidence ledger, manifest seal hash, byte-level citation checks, drift detection, disproof ledger | npm |
| dsh-fund-research | Chinese mutual-fund research with sealed, traceable snapshots — every number traces to a hashed source | npm |
| dsh-industry-research | Industry/company research: chain-map SVG with bottleneck detection, timeline, company cards, adversarial review | npm |
| dsh-data-quality | Deterministic data profiling/cleaning/verification: DAMA scorecard, content-hash dedupe, metric expectations | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-defend | Injection/jailbreak/secret detection + destructive-delete gate | npm |
| dsh-permission-rules | Declarative allow/deny/ask permission rules | npm |
| dsh-mask | PII masking/sanitization | npm |
| dsh-skill-pack-security | Security-audit skill pack + supply-chain gate | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-background-agents | Durable background child agents with a Web UI sidebar | npm |
| dsh-checkpoint-rewind | Snapshots, forks, one-shot restore | npm |
| dsh-github | GitHub PR/issue integration + Action, writes approval-gated | npm |
| dsh-claude-move | Migrate Claude Code/Codex/OpenCode/Hermes into DSH | npm |
| dsh-click | Desktop control tools (Windows/macOS) | npm |
| dsh-session-sync | Git-backed session synchronization | npm |
| dsh-test-drive | Install→smoke→uninstall test driver for plugins | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-composer-history | Terminal-style input history for the web composer | npm |
| dsh-output-styles | Runtime-switchable model output styles | npm |
| dsh-session-pin | Pin sessions in the Web sidebar | npm |
| dsh-memento | Approval-gated cross-session memory protocol | npm |
| dsh-personal-directive | Personal directive injector with top-bar toggle (framework edition; fork of liucaimao2026/dsh-personal-directive, upstream: Minglink/dsh-infinite-gen-1) | — |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-auto-review | Second-model auto-review on the approval chain | npm |
| dsh-doublecheck | Engineering-discipline guard: grill, gates, adversary review | npm |
| dsh-score | Plugin quality scoring across git/gh/npm | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-budget | Token metering and budget governance | npm |
| dsh-observe | OTel/Langfuse telemetry export | npm |
| dsh-fast | Performance diagnostics | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-draw | Image-generation routing | npm |
| dsh-translate | Translation + JSON repair | npm |
| dsh-talk | Speech recognition and voice I/O | npm |
| dsh-library | Local knowledge-base RAG | npm |
| dsh-local-ai | Ollama LLM provider and routing | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-lsp-actions | LSP diagnostics/formatting/completion/actions | npm |
| dsh-mcp-panel | MCP management console | npm |
Companion knowledge base: dsh-plugin-guide — plugin-development knowledge base + CLI toolchain | npm
| Plugin | One-liner | npm |
|---|---|---|
| dsh-data-quality | Data profiling/cleaning/verification | npm |
| dsh-fund-research | Mutual-fund research, sealed traceable snapshots | npm |
| dsh-industry-research | Industry/company research domain pack | npm |
| dsh-research-report | Verifiable research-report engine | npm |
- GitHub (this profile) — source, CI, releases
- Gitee — full mirror of every repo's branches and tags
- npm — every plugin published with CI provenance
Listed on awesome-dsh-plugin, Awesome DeepSeek Harness, the AdamPlatin123 radar, and dsh-market (via the awesome-dsh-plugin registry). Auto-indexed on deepseek1024.com (36 entries). Certification: dsh-plugin-certification.
我在 DeepSeek Harness 上把 Claude Code / Codex 生态里最实用的能力做成了开源插件:检查点回退、声明式权限、输出风格、跨会话记忆、MCP 面板,以及可验证研究报告 / 基金研究 / 行业研究 / 数据质量「研究四件套」——共 34 个插件(Apache-2.0),全部带五语文档、CI、npm 发布与 Gitee 镜像。一键全家桶:dsh-kit。
2026-09-02 生态轮:0.1.2-alpha.3 全量波 09-01 落地——34 仓推送+tag+Release、33 次 npm 发布、Gitee 两轮全量同步,33 个已发布包累计 296 个版本(自 08-30 npm 解锁以来 60 版;最新 auto-review 0.9.0 / doublecheck 0.9.2 / mcp-panel 0.6.3 / permission-rules 0.6.5);家族合计 643+ 星(topic 前 100 门槛升至 504);npm 8 月下载 6.1 万(近 7 天 2.0 万,9 月日报数据滚动中);主榜 27 条不变,生态 PR radar #440 已合并,认证首条 auto-review B 级不变;官方仓 58 条、全 GitHub 92 条问答;deepseek1024 自动收录 36 条。