DeepSeek Harness Plugin Hub

Publish and manage complete Harness Profiles. Discover Plugins for your next setup.

Explore

PluginsPresetsDocsNews

Community

Publish a pluginContactReport an issue

Resources

Plugin Hub on GitHubDeepSeek HarnessSystem statusPrivacy notice
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

Independent and unofficial. Not affiliated with, authorized by, or endorsed by DeepSeek.

Ponytail — DSH Plugin for DeepSeek Harness
← Plugins
P

@maci0/dsh-ponytail

Ponytail

Ponytail, lazy senior dev mode, for DeepSeek Harness: bundled skills, an always-on anti-over-engineering ruleset, and a Plugin configuration card.

The plugin will be installed here. Keep web if you are unsure.

npx -y @deepseek-ai/dsh plugin --profile web add github:maci0/dsh-ponytail#4942cd24ec8f7ce8fd6d846a6a6eb3a11939da8f
READMECompatibilityVersions

Compatibility and provenance

Ponytail is published as @maci0/dsh-ponytail and currently resolves to version 0.19.0. The Hub verifies its manifest and preserves the exact installation source for reproducible installs.

DSH compatibility
*
Runtime surfaces
web
Release source
github
Registry updated
10/16/2026

Versions

0.19.0stable
10/16/2026
0.18.4
stable
10/15/2026
0.18.3stable
10/10/2026

Related plugins

Loading related plugins…

Latest
0.19.0
DSH
*
HMR
Process restart
Tree shaking
Safe tree shaking not declared
Unpacked size
Unavailable
Files
Unavailable
Surface
web
License
MIT
Source
github
GitHub
★ 0
Weekly downloads
0
Last push
10/16/2026
View source ↗
README badge

Click the badge to copy Markdown for your README.

Do you maintain this Plugin?Claim benefit · Priority security scan

Verify the GitHub repository declared in package.json to manage this listing. After you claim it, Hub will prioritize a security scan of the current version and publish the result when it passes.

Claim this Plugin →
Report an issue
DeepSeek Harness Plugin Hub
ProfilesPluginsCategoriesNewsDocsSign inManage Profiles
ProfilesPluginsCategoriesNewsDocsSign in

Related plugins

More verified plugins in developer-tools.

Client Ui Git Graph@linxin666/dsh-client-ui-git-graphExternal dsh web GUI plugin: a blank-session git branch selector + Git graph, with real host-side git operations and guards, as a dsh profile bundleSsh@linxin666/dsh-sshRemote SSH operations for the dsh web GUI: host config store (~/.dsh/dsh-ssh.json, import from ~/.ssh/config), a persistent ssh2 connection pool with jump-host support, exec / PTY web terminal / SFTP transfer / local port-forward tunnels / cluster executiUpdate@linxin666/dsh-updateSelf-update plugin for the dsh web GUI: probes npm for newer family releases and runs the owning profile's pnpm update in place, from a sidebar trigger beside the settings seat with a release-notes panelTui@deepseek-harness-tui/dsh-tuiInteractive terminal interface for DeepSeek Harness agents, sessions and tools.

README

dsh-ponytail

Your agent adds a cache class, a config flag, and a factory for one product. This plugin makes it stop and write the one line that works instead. The ladder: question whether the thing needs to exist, reuse what is already in the repo, then the standard library, then the platform, then an installed dependency, then one line. Stop at the first rung that holds. Adapted from DietrichGebert/ponytail (MIT): "He says nothing. He writes one line. It works."

What you get

  • The ladder on every request. While any level except off is active, the mode-filtered ruleset joins the system prompt.
  • Six skills the skill tool can load, so they also appear as /ponytail-review, /ponytail-audit, … in the composer: ponytail, ponytail-review, ponytail-audit, ponytail-debt, ponytail-gain, ponytail-help.
  • Two ways to switch level. The model calls the ponytail tool; you type /ponytail <level> or just say stop ponytail.
  • A settings card and a composer chip, so the level is visible without opening Settings.
  • No unrequested abstractions, no boilerplate. Deletion over addition, boring over clever.

Install

Install it as a bundle. dsh plugin add … mounts the row from the package's own patch layer, which is what the settings editor can write to. A row added with --patch is an overlay: it disappears at the next start, and the Plugins card cannot save into it (the editor refuses a write an overlay would win).

dsh plugin --profile web add --save-exact @maci0/dsh-ponytail@0.19.0

Pin an exact npm version. To upgrade, run the same command with the newer version, then restart dsh web (bundle layers compose at boot).

Use it

/ponytail ultra   -> Ponytail level: ultra (was full).
/ponytail         -> Ponytail level: ultra.
/ponytail off     -> Ponytail off (was ultra). Normal behavior.

Then ask for the work. This is the full example from the skill itself:

> Add a cache for these API responses.

`@lru_cache(maxsize=1000)` on the fetch function. Skipped custom cache class,
add when lru_cache measurably falls short.

Model side, the tool takes one optional argument: {"mode": "lite"} sets and persists a level, and calling it with no argument reports the current one.

Typing stop ponytail or normal mode as an ordinary message has the same effect as /ponytail off, and it lands on the turn that carried it. Only the human's own words count: injected context riding the same event stream cannot toggle the level, and the message must be the command, so "add a normal mode toggle" is left alone.

Levels

LevelBehaviorPersisted
liteBuild what was asked, name the lazier alternative in one line.yes
fullThe ladder enforced. Default.yes
ultraYAGNI extremist: challenge the requirement before building it.yes
reviewOver-engineering review; points at the ponytail-review skill.no, session only
offNo injection. Normal behavior.yes

The four persistable levels live in the ponytail settings namespace, so the card, the chip, the tool, and /ponytail agree and the choice survives a restart. review stays session-only because it is a review mode, not a level a deployment should start in; the tool and the command still accept it. The card and the chip show the level the host is using, so they show review, and any level kept only for this session because the settings write failed, labelled as session-only.

Lazy is not negligent. Understanding the problem, trust-boundary validation, data-loss handling, security, and accessibility are never on the chopping block.

Configure

FieldDefaultMeaning
defaultModefullStartup level. Must be off, lite, full, or ultra.

The exported Config schema defaults the field, so a row that omits defaultMode starts in full. The user's settings namespace overrides it once a level is chosen in the card or by /ponytail. An invalid level fails while the plugin loads rather than quietly doing the wrong thing: the loader validates the row against the exported schema.

To set the startup level from the environment, override the row in your profile's cordis.patch.yml with a !!js expression (same id, which replaces the row's whole config):

- id: ponytail
  config:
    defaultMode: !!js process.env.PONYTAIL_DEFAULT_MODE ?? 'full'

Override the row this way; do not paste the bundle's insert of the id: ponytail row into your profile's cordis.patch.yml: insert does not dedupe ids, and a second row mounts the plugin twice.

How it works

The package declares dsh.bundle, so dsh plugin add appends it to dsh.profile.bundles and the row in its own cordis.patch.yml applies as a layer.

The host half mounts through public Cordis extension points: systemPrompt.section, skills.registerProvider, tools.register, commands.register, loader/volatile-update (the settings document writes the row's volatile defaultMode), session/event for the message switch, and webServer for GET /ponytail/level, which answers { mode, source } (settings or session) behind the connection trust fence. The browser half reads that route on every settings change and every 5 seconds, draws its card into the public plugins.row.config slot from configForms, registers its copy through locale.register, and draws its chip into conversation.input.left, so this plugin needs no client change of its own.

The entry point is the built lib/index.js (declarations in lib/types/); bun run build regenerates it from src/. lib/client.js is hand-authored plain JavaScript: the client module system serves it as a lazy-CJS factory on window.__ModuleLoader__ because the package exports ./client, and it is not built. Skills come from skills/<name>/SKILL.md with frontmatter parsed by yaml; the provider takes its rank and name grammar from @deepseek-ai/dsh-skill, projects disable-model-invocation, user-invocable, and whenToUse, and settles on the lookup's abort signal. Tools use defineTool from @deepseek-ai/dsh-tools and forward exec.signal. Only skills/ponytail/SKILL.md is the source of truth for the ruleset; this README keeps no second copy.

Limits

  • It does not skip comprehension. The ladder shortens the solution, never the reading. The skill says so in its own text.
  • The level is process-wide. One prompt section, one namespace value: every agent in the process shares it.
  • External subagents ignore it. In-process children inherit the ruleset, but subagent-claude-code and subagent-codex spawn their own CLI with its own system prompt, and no harness extension point wraps a spawn.
  • Two locales. The card and the chip ship en and zh; any other locale falls back through the service's own chain.
  • Host source edits need bun run build and a restart, because the Loader loads lib/index.js and a bundle layer composes at boot.
  • Browser-half edits need a page refresh.
  • A level change is not a session event. A replayed session shows the ruleset each request already carried.

Development

bun install         # the client packages are optional peers and stay uninstalled
bun run build       # tsc -p tsconfig.build.json -> lib/index.js + lib/types/
bun test            # every tests/*.test.ts, no build step
bun run typecheck   # tsc -p tsconfig.json

dsh loads plugins on Node ^22.19.0 || >=24.0.0; development and tests run on bun.

For local development, install the checkout into a profile with dsh plugin --profile <name> add <path-to-checkout>.

The suite covers level normalization and filtering, the fake-host surface, the skills provider, the client card, and a real Cordis composition mount next to the real skill registry. To uninstall, run dsh plugin --profile web remove @maci0/dsh-ponytail; that removes the dependency and the bundle layer together.

Attribution and license

MIT. Skill content and mode semantics: © DietrichGebert (ponytail). DSH port: see LICENSE.

The six skills/*/SKILL.md files are verbatim copies, so they carry upstream's figures and citations rather than this package's. /ponytail-gain therefore reports the original five-task single-shot benchmark (80–94% fewer lines, 47–77% cheaper, 3–6× faster), which upstream's own README has since revised to roughly 54% fewer lines, 20% cheaper and 27% faster on its agentic benchmark.