dsh-foundry

DSH Foundry

A zero-patch desktop distribution of the official DeepSeek Harness.

中文 · Download · Features · Build · License

Introduction

The official DeepSeek Harness is an everything-is-a-plugin agent framework with a web interface. DSH Foundry packages it as a real desktop application: the Node runtime, the DSH release, and the package manager are all sealed inside the installer. No prerequisites, no terminal setup — the app provisions its own profile on first launch.

This project does not fork or modify official source. It composes only through public extension points, so upstream improvements are inherited for free.

Official DSH belongs to DeepSeek. This project has no affiliation with DeepSeek.

Download

Builds are unsigned and not notarized (ad-hoc signed, not Developer ID).

• macOS: right-click → Open the first time; do not double-click. If macOS says the app "is damaged and can't be opened", that build predates the ad-hoc signing fix — use a newer one, or clear the quarantine attribute with xattr -cr "/Applications/DSH Foundry.app".
• Windows: choose More info → Run anyway when SmartScreen warns.

Plugins only, no desktop app:

dsh plugin --profile <name> add @dsh-foundry/daily-bundle

Features

• Desktop shell: follows the system theme, with a macOS traffic-light safe area, Windows caption controls, and a native directory picker.
• Repository workbench: @file references (inserting a path, never file contents), bounded search, and read-only Git review (structurally incapable of staging, committing, or rewriting history), with session-scoped context and background jobs.
• Plugin provenance: source, version, profile, bundle, Foundry-qualified status, and disable impact for every plugin. Provenance comes only from declared metadata; missing data reads as Unknown.
• Evaluation framework: a 45-task corpus across 9 categories, two-way verified oracles, and paired bootstrap statistics.

Plugins run with your user authority. Approval prompts for model tool calls do not apply to plugin code or MCP servers.

Why not a fork

A patching distribution merges upstream on every release. This project only composes: no fork, no vendoring, no patches, no deep imports, no monkey patching — zero tracked changes in the upstream checkout.

pnpm run gate:coupling   # release gate: rejects local source paths and undeclared subpaths

All business traffic travels the official transports (HTTP / WebSocket / Typert); Electron IPC carries only windows, directory picking, external links, and lifecycle — workbench modules must not import the desktop bridge.

Building from source

pnpm install
pnpm run bundle
pnpm run build:icon
pnpm run package:darwin-arm64    # or package:win32-x64
pnpm run installer darwin-arm64  # produces release/installer/*.dmg
pnpm run installer win32-x64     # produces release/installer/*.exe

Layout:

apps/desktop/     Electron main, preload, window policy
packages/         adapter, bridge contract, layout and native plugins, workbench, governance, eval
scripts/          staging, gates, packaging, installers
corpus/           evaluation corpus
assets/           icons

Status

macOS Apple Silicon is the qualification target and is packaged and accepted. Windows x64 is a build candidate that installs and runs on real hardware; the full acceptance matrix is still pending.

No claim is made about coding efficiency: the corpus is designed at 45 tasks, but the only comparison on record is a 5-task pilot and promotion is UNDECIDED (see evidence/pilot-report.md; tests/readme-claims.test.ts rejects any figure the evidence does not support). No comparison with Claude Code, Codex, or any other DSH distribution has ever been run.

License

MIT. Not affiliated with DeepSeek. The whale mark in the app icon is taken from the upstream Harness and is DeepSeek's trademark (details).