DeepSeek Harness (DSH) adopts an “everything is a plugin” architecture. In real-world usage, developers often find it difficult to intuitively understand the exact capabilities of installed plugins (such as whether they access the filesystem, execute Shell commands, or obtain credentials). In addition, Harness itself does not provide configuration snapshots, rollback, or usage statistics. DSH++ is a local-first control-plane plugin designed to fill this operational gap.

Core Capabilities

DSH++ provides the following three main functional modules:

  • Plugin security audit: Uses dshpp audit to enumerate installed plugins, analyze their capability boundaries, classify risk levels, and flag components that should be removed.
  • Workflow regression testing: Uses dshpp test to run a fixed task suite against the current DSH configuration, compare it against a stored baseline, and detect regressions. If a regression is found, the command returns a non-zero exit code, making it suitable as a CI pipeline checkpoint.
  • Lifecycle management: Includes detecting Harness installation status, snapshotting and rolling back $DSH_HOME, running diagnostic checks, and managing Providers and Credentials.

Installation and Activation

Prerequisites: Node.js >= 20.

Global installation:

npm i -g .

Install as a Harness plugin (adds the /dshpp slash command):

dsh plugin --profile web add github:limlnx523/dsh-plus-plus

Common Usage

After installation, you can use the following commands:

  • dshpp status: View a DSH environment overview (Home, Env, Settings, Backups).
  • dshpp audit: Generate a plugin security risk report.
  • dshpp test: Run workflow regression tests for DSH.
  • dshpp doctor: Run a diagnostic checklist.
  • dshpp web: Start the local web console.

Web Console and Configuration

  • Web console: Run dshpp web to start the console locally. It is available at http://127.0.0.1:4848/. The service is bound only to the local loopback interface. The console displays Providers, masked credentials, backups, usage and costs, session logs, the plugin list, and regression test results. Secrets are masked by default unless you use the --show option.
  • Configuration storage:
    • Harness home directory: $DSH_HOME or ~/.dsh
    • Credential store: $DSH_HOME/.env (this file should not be committed to version control)
    • DSH++ state: ~/.dsh-plus-plus/ (stores backups, Provider inventory, and regression baselines)

Notes

  • No third-party dependencies: The plugin does not depend on any third-party runtime libraries and uses Node.js built-in modules.
  • Permission security: At runtime, the plugin has the permissions of the current DSH process. Inspect the source code and license before installing.
  • Credential management: All credentials are stored in $DSH_HOME/.env. Snapshots will warn whether sensitive information may be included.