DeepSeek Harness Plugin Hub

发布与管理完整 Harness Profiles,发现适合你的插件。

探索

插件目录环境预设文档中心动态

社区

发布插件联系我们报告问题

相关链接

Plugin Hub GitHubDeepSeek Harness 官方项目系统状态隐私说明
© 2026 DeepSeek Harness Plugin HubPowered byPaxTech

独立、非官方社区项目,与 DeepSeek 官方无隶属、授权或背书关系。

Pi Compatible — DeepSeek Harness 插件(DSH Plugin)
DeepSeek Harness Plugin Hub
ProfilesPlugins分类动态文档登录管理 Profiles
ProfilesPlugins分类动态文档登录
← Plugins
P

dsh-pi-compatible

Pi Compatible

仅限 Full Access 的 DeepSeek Harness 预设,包含与 Pi coding-agent 0.84.2 兼容的七工具核心,以及可选的由 DSH 支持的 Plus 目录。

插件会安装到这里;不确定时保持 web。

npx -y @deepseek-ai/dsh plugin --profile web add github:kingguuu8-svg/dsh-pi-compatible#6a026456d6c5d742f5767a585236c6be441357a0
README兼容性版本

兼容性与来源证明

Pi Compatible 以 dsh-pi-compatible 发布,当前版本为 0.2.1。Plugin Hub 会校验它的 manifest,并保存精确安装来源,便于复现安装结果。

DSH 兼容范围
*
运行环境
any
发布来源
github
Registry 更新时间
2026/8/20

版本

0.2.1stable
2026/8/20

相关插件

正在加载相关插件…

最新版
0.2.1
DSH
*
HMR
重启进程
Tree shaking
未声明可安全裁剪
解包体积
未提供
文件数
未提供
Surface
any
许可证
MIT
发布源
github
GitHub
★ 2
周下载
0
最近提交
2026/8/20
查看源码 ↗
README Badge

点击下方 Badge 复制 Markdown,粘贴到 README 即可。

这是你的 Plugin?认领权益 · 优先安全扫描

验证 package.json 声明的 GitHub 仓库,即可管理这个公开页面。认领后,Hub 会优先安排当前版本的安全扫描,并在通过后公开展示结果。

认领这个 Plugin →
报告问题

相关插件

继续浏览 developer-tools 分类下经过校验的插件。

Web App@deepseek-ai/dsh-web-appdsh 浏览器界面捆绑包:位于 dsh-base 之上的 Web 补丁层,加上运行时粘合插件(提供前端 dist、Web 界面提示符、bash 运行时变量和 URL 行)Sdk Minimal@deepseek-ai/dsh-sdk-minimal独立的最小 SDK 配置包:JSON-RPC、一个 DeepSeek 适配器、持久化 Shell 和 JSONL 会话Sdk App@deepseek-ai/dsh-sdk-appdsh SDK 配置包:基于 dsh-base 提供 stdio JSON-RPC 服务和进程生命周期管理Subagent Codex@deepseek-ai/dsh-subagent-codex基于官方 app-server 协议的一次性 Codex 子代理提供程序

README

dsh-pi-compatible

English | 中文

Two Full Access-only DeepSeek Harness agent presets whose core tool contract is frozen to @earendil-works/pi-coding-agent 0.84.2.

  • Pi-compatible Core exposes exactly seven lower-case tools: read, bash, edit, write, grep, find, and ls.
  • Pi-compatible Plus exposes the same core plus explicit DSH-backed Web, Task, Todo, Plan, Think, Slash, and compaction capabilities.

The presets use DSH's filesystem, subprocess, attachment, session, cancellation, model-routing, and presentation seams. They are designed and tested only with the danger-full-access permission preset; they do not implement escalation workflows for narrower policies.

Product contract

Core tools

ToolPi-compatible behavior
read(path, offset?, limit?)Head truncation at 2,000 lines or 50 KiB, offset continuation, a 64 MiB whole-file safety cap, and PNG/JPEG/GIF/WebP/BMP handling subject to DSH attachment capabilities
bash(command, timeout?)Fresh real Bash process per call, no persistent state, no default timeout, tail truncation with a private full-output spill file
edit(path, edits[])Original-file matching, unique non-overlapping edits, Pi-style fuzzy punctuation fallback, BOM and CRLF/LF preservation, one guarded atomic write
write(path, content)Complete UTF-8 write through DSH; missing parent directories are created by the DSH local filesystem backend
grep(...)ripgrep JSON search, default 100 matches, 500-character line clipping, optional context/glob/literal/case control
find(pattern, path?, limit?)fd glob search, default 1,000 results, .gitignore-aware relative paths
ls(path?, limit?)One directory, dotfiles included, case-insensitive sort, / after directories, default 500 entries

All seven tools are visible by default. This intentionally differs from Pi 0.84.2's default four-tool activation (read, bash, edit, write): DSH does not reproduce Pi's dynamic tool-activation mechanism.

Plus extensions

pi-compatible-plus additionally registers:

  • WebFetch
  • WebSearch
  • Task
  • TodoWrite
  • ExitPlanMode
  • Think
  • SlashCommand
  • /plan
  • /compact
  • DSH basic compaction and tool-result pruning

These are DSH-backed extensions, not Pi 0.84.2 core tools.

Install

Install the bundle into the DSH Web profile:

dsh plugin --profile web add kingguuu8-svg/dsh-pi-compatible

Or install a local checkout:

dsh plugin --profile web add .

The bundle installs both presets into:

${DSH_HOME:-~/.dsh}/.agent-presets/pi-compatible/
${DSH_HOME:-~/.dsh}/.agent-presets/pi-compatible-plus/

Installation is idempotent and does not overwrite a complete existing preset. Set force: true on the bundle row in the profile patch to replace packaged files during an upgrade. A forced 0.1.x → 0.2.0 migration also removes the known package-owned legacy modules from the Core directory; unrelated user files are preserved.

After installation, create a new session and choose Pi-compatible Core or Pi-compatible Plus.

Runtime configuration

VariableMeaning
PI_COMPAT_BASH_PATHAbsolute path to the real Bash executable
PI_COMPAT_FD_PATHAbsolute path to fd
PI_COMPAT_RG_PATHAbsolute path to rg
PI_COMPAT_OFFLINE=1Disable fd/rg network download
PI_OFFLINE=1Pi-compatible alias that also disables fd/rg download
DSH_HOMEDSH home and the private pi-compatible/bin cache root

Bash resolution follows Pi's platform intent: on Windows, Git Bash under Program Files is preferred before PATH Bash. PowerShell is never silently presented as bash.

fd and rg resolution is:

  1. explicit environment override;
  2. system executable on PATH;
  3. cached executable under <DSH_HOME>/pi-compatible/bin;
  4. latest compatible GitHub release download, unless offline mode is enabled.

When GitHub publishes a SHA-256 asset digest, the downloader verifies it. Downloaded files and extraction directories are private to the current user.

Persona customization

The default persona is intentionally short and direct. To customize it, copy the preset to a new id and edit that copy's agent.cordis.yml. Tool compatibility is the stable product contract; persona text is not.

Compatibility boundaries

  • Pi baseline is permanently frozen to 0.84.2 for this product line.
  • Compatibility means schema and key behavior, not byte-identical error messages or Pi's TUI rendering.
  • DSH owns path authorization, filesystem publication, subprocess-tree cancellation, attachments, sessions, and UI cards.
  • BMP is recognized, but DSH rc.6/rc.7 attachments do not accept BMP; read returns a conversion instruction instead of an image block.
  • Pi resizes large images to 2,000×2,000. DSH's attachment seam has no resize operation, so supported images are stored at their original dimensions and the deviation is disclosed in the tool result.
  • Text read rejects files above 64 MiB before whole-file decoding. Grep context expansion skips files above 10 MiB. These safety bounds prevent one tool call from exhausting the long-lived DSH host.
  • Windows is the release-blocking platform. POSIX paths remain supported on a best-effort basis.
  • The preset shadows only the model-facing sandbox:policy and approval:policy runtime-context prose because it duplicates the Full Access contract and mentions tool parameters that do not exist in Pi. DSH enforcement remains active, and all other runtime contexts remain available.
  • The preset does not reject a narrower DSH permission mode at mount time. Such modes are unsupported; host denial is reported directly and the model is instructed not to request escalation.

Development

npm run check
npm test
npm run test:integration
  • Unit tests use DSH seam mocks and require no LLM API key.
  • test:integration uses the globally installed DSH rc.6 local filesystem and subprocess packages, executes real Git Bash, and exercises downloaded/cached fd and ripgrep.
  • The running DSH Web host is separately validated by creating blank Core and Plus sessions through session.create; no model request is required for mount validation.

Trust

A user preset is a Cordis composition and has the authority of the plugins it loads. This bundle is intentionally Full Access-only and can execute arbitrary Bash commands and modify arbitrary files allowed by the host process. Review the source before installation.

License

MIT. See THIRD_PARTY_NOTICES.md for the Pi 0.84.2 behavior reference.