dsh-custom-mode
为 DeepSeek Harness (dsh) 提供自定义模式和自定义提示词：在设置页面编辑模式的系统提示词（将在下一次模型步骤中生效）、选择其基础模式、逐行切换插件，并排使用多个助手。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-custom-mode@1.9.6Custom Mode 以 dsh-custom-mode 发布，当前版本为 1.9.6。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
dsh-custom-mode — a settings page for dsh agent modes
The settings-page half of dsh-custom-mode — a Web UI for DeepSeek Harness (dsh) agent modes: choose a mode's base composition, toggle the plugin rows it mounts, and edit its system prompt, which is a plain file the agent loop re-reads before every model step — a save applies on the next step, with no restart and no new session. Several modes ("assistants") live side by side, each with its own prompt.
Searched for as: custom mode · custom prompt · system-prompt editor · multi-mode / several assistants · 自定义模式 · 自定义提示词 · 多助手／多模式.
dsh plugin --profile web add dsh-custom-mode
That one command is the whole install. The package carries the agent preset, and the host half writes it
into $DSH_HOME/.agent-presets/ on first activation — filling in only what is missing, so a prompt.md you
wrote yourself is never overwritten.
To keep the source around as well, clone the repository and run ./install.sh instead; it does the same two
things explicitly, and ./uninstall.sh undoes them (keeping your prompt unless you pass --purge).
The mode is web-profile only: agent-presets, the service that mounts presets at all, ships with dsh's
web profile. In tui / headless this package activates but registers nothing.
>=0.1.5-rc.2 <0.2.0-0（latest stable 0.1.5-rc.2 and latest preview 0.1.6-alpha.2）** — declared in engines.dsh and as an optional peer range. This package never
imports @deepseek-ai/dsh; it only reads the host services dsh injects.1.0.0, 1.0.1, …). Which dsh it supports is declared in
engines.dsh; see the repository README's "Versioning" section.The full documentation is bilingual in the repository:
The route this package serves runs the platform's own browser-trust check
(ctx.connection.requestRejection) before anything else and fails closed when that service is
unavailable. Before that check existed, the route could be read and written unauthenticated — see
SECURITY.md for the affected range and
the mitigation.
MIT