dsh-desktop

DSH Desktop

简体中文 | English

An independent, open-source desktop wrapper for DeepSeek Harness. It starts the bundled @deepseek-ai/dsh Web UI locally and loads it in a hardened Electron window on Linux, macOS, and Windows.

DeepSeek Harness is currently a developer preview and may introduce breaking changes. DSH Desktop ships a tested, pinned Harness version as its reproducible default and recovery fallback.

Highlights

• No separate Node.js, npm, or npx installation is required for release builds.
• Uses a random free loopback port instead of assuming port 3080 is available.
• Shows immediate, stage-based startup progress while the local Harness becomes ready.
• Starts and stops the Harness server together with the desktop application.
• Provides a direct Plugins menu with online catalog search and npm/GitHub installation.
• Opens conversation files in VS Code, Cursor, VSCodium, or Zed, with workspace actions in the sidebar and native menu.
• Keeps Electron's Node integration disabled and blocks untrusted in-app navigation.
• Includes native installers and portable packages built by GitHub Actions.
• Checks GitHub Releases for newer semantic-version tags and downloads SHA-256-verified installers locally.
• Can update @deepseek-ai/dsh independently from npm without replacing the desktop application.
• Supports both Intel and Apple Silicon macOS systems.

Download

Download the latest package from GitHub Releases:

Each release provides both installer and portable editions for Windows. Other platforms provide one recommended package per architecture.

The community CI builds are currently unsigned. Windows SmartScreen and macOS Gatekeeper may therefore show a warning. Review the release source and workflow before choosing to continue. On macOS, prefer the standard Control-click → Open flow instead of disabling Gatekeeper globally.

If macOS still reports that the app is damaged or cannot verify its developer, first move it to /Applications and confirm that the package came from this repository's GitHub Release. Then open Terminal and remove the quarantine attribute from DSH Desktop only:

xattr -dr com.apple.quarantine "/Applications/DSH Desktop.app"

The DMG includes a 安装说明.txt file: open it to see the full steps and select/copy the command above directly.

For an AppImage:

chmod +x DSH-Desktop-*.AppImage
./DSH-Desktop-*.AppImage

Use

1. Start DSH Desktop and wait for the local Harness service to become ready.
2. Open Settings → Models and configure your DeepSeek API key or another supported provider.
3. Choose or add a workspace.
4. Start a session.

See the upstream Web UI guide for the Harness workflow.

Clicking a code or text file in a conversation opens it in the detected editor. HTML, images, PDFs, and directories continue to use their system-default application. Each workspace's sidebar … menu offers Open in Editor and Open Folder. Select VS Code, Cursor, VSCodium, or Zed through the native Workspace → Preferred Editor menu. Files fall back to the system-default application when no supported editor is detected; an explicit editor action reports an error instead.

The Plugins menu opens the plugin manager directly. Its Online plugins card opens a separate searchable catalog discovered through the GitHub dsh-plugin topic, with a bundled catalog snapshot for offline use and one-click installation after source review. Direct installs accept npm names plus GitHub repository, commit, tree, and #ref URLs. Repository URLs install the latest tag, or pin the current default-branch commit when no tag exists. Installed GitHub plugins can update online to the latest default-branch commit. Restart Harness after plugin changes. Maintainers can refresh the bundled snapshot with npm run catalog:generate.

GitHub install and build scripts are disabled by default and can be explicitly allowed when required. Plugins run with the same local permissions as Harness, so install only trusted code.

The application checks the latest public GitHub Release shortly after startup. When a newer vX.Y.Z tag is available, it downloads the matching DMG, setup EXE, or AppImage to the system Downloads folder and verifies the file against GitHub's SHA-256 digest. The user then opens the installer and follows the system update flow; the app never replaces or restarts itself. You can also use Help → Check for Updates at any time.

DSH itself has a separate update channel. The app compares the running @deepseek-ai/dsh version with npm's latest tag and offers Help → Check for DSH Updates. An accepted version is installed in the app's user-data dsh-runtime directory, verified before activation, and then the local Harness restarts. The registry-provided package integrity hash is checked by pnpm during installation. If the new runtime cannot start, DSH Desktop automatically deactivates it and returns to the bundled version. Help → Restore Bundled DSH provides the same rollback manually.

The View → Restart Harness command restarts the local service. Diagnostic output is available through Help → Open Logs Folder.

How it works

DSH Desktop
├─ Electron main process
│  ├─ restricted native path-opening bridge
│  ├─ plugin profile service + bundled pnpm
│  └─ bundled Electron runtime in Node mode
│     └─ @deepseek-ai/dsh web --patch <desktop-adapter> --port 0
├─ sandboxed Harness window
│  └─ http://127.0.0.1:<assigned-port>
└─ sandboxed local plugin-manager window
   └─ $DSH_HOME/profiles/web/package.json

Desktop capabilities come from the standalone dual-face @dsh-desktop/integration package in this repository. At startup, the app copies only that package into the upstream $DSH_HOME/profiles/node_modules extension-resolution directory and loads it with a one-off --patch. It does not modify the bundled @deepseek-ai/dsh CLI, an external DSH installation, or the user's cordis.patch.yml; optional DSH updates live in the app-owned user-data runtime instead.

The readiness URL is read from the official dsh web output. Only that exact loopback origin is allowed to remain inside the app; regular HTTP and HTTPS links open in the system browser. Closing the app terminates the local Harness process tree.

Development

Requirements:

• Node.js 22 or newer
• npm 10 or newer

git clone https://github.com/liguobao/dsh-desktop.git
cd dsh-desktop
npm ci
npm start

Useful commands:

npm test           # unit tests
npm run check      # JavaScript syntax checks
npm run dist:linux
npm run dist:mac
npm run dist:windows

Cross-platform Electron installers should be produced on their target operating system. The repository workflow does this automatically.

Releases

Pushing a semantic version tag builds all supported packages and creates a GitHub Release:

npm version 0.1.1 --no-git-tag-version
git commit -am "release: v0.1.1"
git tag -a v0.1.1 -m "DSH Desktop v0.1.1"
git push origin HEAD --follow-tags

The tag must be exactly v followed by the version in package.json. Each architecture publishes a separate update manifest plus its checksum data; the workflow rejects a mismatched tag before building.

The workflow intentionally does not contain signing identities. Maintainers can add Apple signing/notarization and Windows code-signing secrets later without changing the application architecture.

Security

DeepSeek Harness is an agent harness that can read and modify selected workspace files and execute commands with the permissions you grant. Review the active workspace, model provider, and permission prompts before starting a task.

The HTTP server binds only to 127.0.0.1. Renderers have no Node.js access and cannot navigate outside their assigned origin or local page. The Harness preload accepts only workspace-scope and authorized path-opening messages from the exact Harness origin. The plugin manager uses its own preload and exact local-page check, exposing only fixed plugin operations; package-manager commands use argument arrays rather than a shell. The main process rejects paths and symlink escapes outside registered workspaces. See SECURITY.md for vulnerability reporting.

Project status and trademarks

This project is an independent community wrapper and is not an official DeepSeek product. DeepSeek and related names and marks belong to their respective owners.

DSH Desktop is available under the MIT License. DeepSeek Harness is also distributed under the MIT License; see NOTICE.md.