kalynnka/vscode-deepseek-harness
Unofficial: drive your own DeepSeek Harness (dsh) as a native VS Code chat agent, beside Claude Code and Codex.
安装Install
dsh plugin --profile web add github:kalynnka/vscode-deepseek-harness把 kalynnka/vscode-deepseek-harness 加入你的 DSH 配置（web profile）即可启用。
READMEREADME
vscode-deepseek-harness
An unofficial VS Code extension that registers DeepSeek Harness as a chat session target in VS Code's native agent sessions view — the same surface that hosts Claude Code and Codex — rather than shipping another webview chat panel.
Status: M0–M5 implemented. A VSIX builds, installs and activates with its proposed APIs granted.
- docs/plans/0001-vscode-chat-session-provider.md — architecture decision, API mapping, and milestones.
- docs/gaps.md — what the chat UI wanted, what
/apicould not give it, and what was done instead.
Using it
dsh answers in the same chat panel Copilot does. There is no second sidebar and no webview: the panel above is VS Code's own, and the reply in it came from the dsh on this machine.
Which agent answers is a picker at the bottom of the composer, reading Local in a default install. Click it and choose DeepSeek Harness — from then on, everything you type in that chat goes to your harness. The chip stays until you change it, so this is a per-conversation choice rather than a mode.
Once you are on it, the composer is the ordinary one, and the parts of it that matter here are:
| In the composer | What reaches dsh |
|---|---|
| Your editor selection, pinned as a chip | The file, the line range, and the selected lines themselves |
A file dragged in, or #-referenced |
Its path, relative to the session's working directory |
| A pasted image | A real image attachment, when the model accepts one |
A /-line naming a command dsh owns |
The command, executed through dsh's own registry — never sent to the model |
| Model picker | session.selectModel — every provider and model your dsh advertises |
| Reasoning picker | The efforts of the selected model, with that model's own default |
| Permissions picker | read-only / workspace-write / danger-full-access, whatever your dsh's preset table holds |
A selection is sent as text because dsh has no structured reference type; a saved file is sent as a path, because dsh has its own read tools and would rather open it than be handed it. Both decisions, and their cost, are in gaps §10.
The SESSIONS list on the right is your real dsh session history — the same sessions the dsh web UI shows, because it is the same harness. Opening one rebuilds its transcript; New Session starts one in your workspace folder.
What it does
| Sessions list | Your real dsh sessions, live: added, removed, running, and blocked-on-you |
| Transcript | Past turns rebuilt from the session log, with tool cards |
| Live turns | Prose, reasoning, and tool calls streaming as they happen |
| Questions | Answered inline in the chat, blocking exactly as dsh's ask() does |
| Approvals | Same, as an Allow once / Reject prompt |
| Attachments | Your selection with its line range, dropped files, #-references, pasted images |
| Model switch | Every provider and model your dsh advertises, read fresh per session |
| Thinking effort | The reasoning efforts of the selected model, with its own default |
| Permissions | The session's preset, switched through dsh's own /permission command |
| Slash commands | dsh's own plan, compact, feedback, export, permission, goal — proxied from the composer and the Command Palette, never sent to the model |
| Token usage | Per turn, prompt and completion, with the cache read/write split |
| Context | Percent of the model's window on each session row |
| Control | Stop, fork from a chosen turn, new session in your workspace folder |
| Model switch by command | /models in the composer (or Switch Model… in the Command Palette) opens dsh's own catalog |
Nothing in that table is hardcoded. Providers, models, reasoning efforts, titles, token counts and context capacity are all read from the running harness, so a model your dsh gains tomorrow appears without an update here.
Slash commands
dsh's own slash commands — /plan, /compact, /feedback, /export, /permission, /goal, whatever this dsh ships — are proxied, not sent. Two surfaces use them:
- In the chat. A lone
/-line that names a command dsh owns for that session is intercepted before it can reach the model: it is executed through dsh's own command registry, the outcome renders inline in the chat, no turn is opened and nothing is billed. An unknown/foois not intercepted and flows to the model as an ordinary prompt — exactly how dsh's own web composer treats it. A/permission read-onlytyped here is therefore free and instant, not a model call. - The
/dropdown. Typing/in the composer lists dsh's commands alongside the editor's own, and picking one runs it through the same proxy. The editor fixes an agent's dropdown list at registration, so these entries are contributed statically and filtered live againstcommands/list: a command your dsh does not advertise is hidden, and one it gains beyond the list still runs when typed — it just cannot appear in the dropdown. See gaps §16. - Command Palette → DeepSeek Harness: Run Slash Command… Pick the session to act on (or let it create one in your workspace), pick a command from dsh's live catalog, fill its argument using the input hint dsh advertises, and run it. The picker also offers a free-form entry for any
/command line.
Nothing about execution is hardcoded: the command set, the descriptions and the input hints come from commands/list on the exact session, so a command your dsh gains tomorrow runs here without an update. The dropdown's labels are the one static piece, and the live catalog decides which of them show. The mechanics — and why a naive session.prompt would have cost a turn — are in gaps §12.
The dropdown also shows four commands that are the editor's, not dsh's: /fork forks the session through dsh (the same cut this extension's fork handler makes), /vscode-pet is a workbench easter egg, and /debug belongs to Copilot Chat. The editor's /models is a no-op for contributed sessions, so this extension shadows it with its own: picking or typing /models opens dsh's catalog (the dropdown shows both entries — the working one carries the dsh description), and the switch pulls the composer's own pickers along. None of the editor's entries can be hidden; gaps §19 explains why.
Relationship to upstream
DeepSeek Harness does not accept external pull requests, so this lives outside that repository and talks to it over its existing /api carrier — the same HTTP + WebSocket surface its own web UI uses. No fork, no patch.
This extension never ships a dsh. It drives the dsh you already installed, against your real $DSH_HOME, so your profiles, settings, credentials, skills and session history are the ones you already have. The whole VSIX is 42 KB: one bundled JavaScript file, a manifest, and the artwork.
Attach first, start second. If a dsh is already serving deepseekHarness.url — one you ran in a terminal, or one another editor window started — the extension uses that one. Only when nothing answers does it start its own, on the same fixed port, so the next window finds it too. One harness per machine is the normal outcome, however many windows you open.
That order matters more than it looks: dsh has no cross-process lock on session logs. Two harnesses over one $DSH_HOME interleave their appends and corrupt the logs of sessions both have open — permanently, with the errors and the lost sessions recorded in gaps §23. The extension will not become that second writer on its own; what it cannot prevent is you starting another dsh web alongside it, which is why it says so the first time it starts one.
It also never asks for your API key. Credentials stay in dsh's own credentials plane, where you already put them — they are never copied into VS Code settings.
Requirements
- VS Code 1.133.0 or later.
- Your own DeepSeek Harness install:
dshonPATH, or a built checkout (see settings). Rundsh webyourself and the extension attaches to it; otherwise it starts one for you. - Proposed APIs enabled for this extension — see below.
Install
This extension is not on the Marketplace and cannot be — an extension that declares enabledApiProposals is refused at publish time. Installing the VSIX by hand is the only route, and the proposal opt-in below is not optional: without it the contribution is skipped in silence and nothing appears anywhere.
1. Get the VSIX. Either download it from Releases — every release carries the .vsix built from that exact tag — or build your own:
npm install
npm run build
npm run package # → deepseek-harness-sessions-<version>.vsix
2. Install it.
code --install-extension deepseek-harness-sessions-*.vsix
3. Grant the proposed APIs — the next section — and restart VS Code. Not reload: restart, because argv.json is read once at startup.
To upgrade, install the newer VSIX over the old one; the grant in argv.json is keyed to the extension id and survives.
Enabling the proposed APIs
This extension uses proposed APIs, which cannot be shipped through the Marketplace. You opt in once:
Command Palette → Preferences: Configure Runtime Arguments.
Add the extension id to
enable-proposed-api:{ "enable-proposed-api": ["kalynnka.deepseek-harness-sessions"] }Restart VS Code.
You do not need to be on the editor's internal allowlist. VS Code checks product.json's allowlist first and falls back to whatever enable-proposed-api names, so this entry is the whole grant.
Extension development mode is not a substitute. On stable builds the editor requires isExtensionDevelopment && quality !== 'stable' before granting proposals broadly, so pressing F5 alone gets you nothing. The bundled launch configuration passes --enable-proposed-api explicitly for that reason.
Verifying the grant
src/probe.ts answers the question against the build you actually run, which is the only place it can be answered:
npm run build
touch .dsh-probe-request
code --user-data-dir ~/.dsh-probe-vscode \
--extensions-dir ~/.dsh-probe-vscode-ext \
--extensionDevelopmentPath "$PWD" \
--enable-proposed-api kalynnka.deepseek-harness-sessions \
--new-window
cat .dsh-probe-result.json
It writes the verdict, then quits the window it opened:
{ "vscodeVersion": "1.133.0", "ok": true, "missing": [] }
Use a user-data-dir under your home directory; VS Code will not start against one under /private/tmp on macOS.
Re-run it after every VS Code upgrade — a finalized or withdrawn proposal shows up here as ok: false naming the exact missing member, instead of as an empty sessions list with no error.
The probe calls the proposed function rather than checking that it exists. That distinction is the whole test: VS Code exports proposed classes and namespace functions unconditionally and refuses only at the call, so an existence check reports success even when the proposal has been denied. Measured on 1.133.0:
| no flag | --enable-proposed-api <id> |
|
|---|---|---|
--extensionDevelopmentPath |
denied | granted |
| installed VSIX | denied | granted |
Troubleshooting
No DeepSeek Harness entry anywhere. The chatSessions contribution is itself proposal-gated — VS Code skips it silently when the grant is missing, with no error anywhere. Check argv.json, then re-run the probe above.
No DeepSeek Harness tab, next to Claude Code and Codex. Expected, and not fixable from here: that tab strip comes from a closed allowlist of session types compiled into VS Code, and third-party types are excluded by construction. A third-party session provider appears instead as an agent in the Chat composer — "Chat with DeepSeek Harness". See gaps §9.
Starting a session. Command Palette → New DeepSeek Harness Session, or the + ⌄ dropdown in the chat header. Typing into the plain CHAT tab does not reach dsh — that tab belongs to the local agent, and a message sent there is answered by whatever agent is selected (Copilot, in a default install).
Those commands exist only because the contribution sets canDelegate: true. VS Code's _enableContribution registers the session agent and the per-type New … Session commands only when that flag is set; without it the session type is registered and completely unreachable, with no error to explain it.
The sessions list. "chat.viewSessions.enabled": true shows it; Chat Agent Sessions: Focus Agent Sessions focuses it. Note that Chat: Show Sessions is not a Command Palette command — it exists only in the Chat welcome view's context menu — and the Focus command is hidden from the palette while chat.viewSessions.enabled is false.
"No dsh at …, and starting one failed". Nothing was serving the URL and no dsh could be started — the log says which of deepseekHarness.executable, PATH and deepseekHarness.checkoutPath it tried. Fix that, or run dsh web yourself, then click the dsh item that sits in the status bar for exactly as long as the harness is missing (it runs DeepSeek Harness: Reconnect). Those settings are machine-scoped, so VS Code reads them only from User settings — a repository must not be able to point the extension at an arbitrary binary. If your harness listens elsewhere — dsh web --port 8080, another machine, a tunnel — put its origin in deepseekHarness.url. That setting is machine-scoped, so VS Code reads it only from User settings: a repository must not be able to point the extension at a server of its choosing.
Settings
| Setting | Default | What it is for |
|---|---|---|
deepseekHarness.url |
http://127.0.0.1:3080 |
Where a dsh serves /api: attached to when one is there, started on that port when none is |
deepseekHarness.executable |
"" |
Your dsh, when it is not on PATH |
deepseekHarness.checkoutPath |
"" |
A built deepseek-harness checkout, run through node |
deepseekHarness.home |
"" |
Overrides $DSH_HOME for a harness the extension starts; empty means your real one |
deepseekHarness.historyPageMessages |
50 |
Messages per session.history call. Sizes the call, does not limit the transcript — a session is always restored whole, see gaps §1 and §17 |
deepseekHarness.extraArgs |
[] |
Extra arguments for dsh web |
The bind host is deliberately not configurable: the dsh web server has no TLS and no auth, so a harness this extension starts is always on loopback, as a child it owns and kills on exit. The port is deepseekHarness.url's, fixed rather than ephemeral — an ephemeral port would hide the harness from the next window, which would then start a second one, which is the exact hazard gaps §23 is about.
Development
npm install
npm run build # or: npm run watch
npm run typecheck
npm run smoke # read-only: attaches to your running dsh, reads list/history/models, writes nothing
npm run smoke needs a dsh web already running; DSH_URL points it somewhere other than http://127.0.0.1:3080.
Then F5 (Run Extension), which launches an Extension Development Host with the proposal flag already set.
Commits follow Conventional Commits; the pull request title is what release-please reads, because a squash merge keeps the title and discards the branch's commit subjects.
Unofficial
This is not a DeepSeek project. It is not built, endorsed, reviewed or supported by DeepSeek or by the DeepSeek Harness maintainers, and bugs in it are bugs in this repository — please do not take them upstream.
DeepSeek Harness does not accept external pull requests, which is why this exists as a separate extension talking to the harness over its published /api carrier rather than as a patch to it.
The DeepSeek name and whale mark belong to DeepSeek. They appear here as the icon and in the display name so that the agent is recognisable as the harness it drives, taken from the DeepSeek Harness documentation site; the sources are in media/. No affiliation or endorsement is claimed or implied. If DeepSeek would rather they were not used this way, open an issue and they will be replaced.
Licence
MIT — for the code in this repository. It says nothing about DeepSeek Harness itself, which carries its own licence, or about the marks above.
相关推荐Related
- deepseek-ai/deepseek-harness DeepSeek Harness: Everything is a Plugin.
- deepseek-ai/deepseek-harness DeepSeek Harness (dsh) — 由 DeepSeek AI 开发的开源 agent harness（智能体框架）。一切皆插件：核心 + 插件 + 技能 = 可热插拔的 AI 编程工作台。DeepSeek Harness: …
-
nexu-io/open-design
🎨 Best DeepSeek Harness Design Plugin. The open-source Claude Design alternative. 🖥️ Local-first desktop app. 🖼️ Your…
-
ruvnet/ruflo
🌊 The original agent meta-harness. Deploy intelligent multi-player swarms, coordinate autonomous workflows, and build c…
-
amruthpillai/reactive-resume
A one-of-a-kind resume builder that keeps your privacy in mind. Completely secure, customizable, portable, open-source a…
-
esengine/DeepSeek-Reasonix
DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.
-
volcengine/OpenViking
Self-evolving Context Database for AI Agents. Unify Agent Memory, Knowledge RAG and Skills.
-
Molunerfinn/PicGo
:rocket: The Ultimate Image Uploader for Efficient Creators. Supports Obsidian, Typora, VS Code etc. and 60+ image hosti…