Open-source developer in Beijing. I build the DeepSeek Harness plugin ecosystem: 42 Apache-2.0 plugins in a 48-repo family — security, workflows, research, messaging bridges and developer experience — plus the DSH Desktop Market catalog, a plugin-certification registry and the dsh-plugin-doctor CI checker. Every plugin ships CI, a Gitee mirror and five-language docs held to the same section count by a gate in its own CI.
One command installs the core family — dsh-kit:
./install-all.sh web # Linux / macOS
.\install-all.ps1 -Profile web # Windows PowerShell| Plugin | What it gives you | Install |
|---|---|---|
| dsh-auto-review | Second-model auto-review on the approval chain, fail-closed by default (228★) | dsh plugin --profile web add dsh-auto-review |
| dsh-research-report | Verifiable research reports: content-addressed evidence ledger, manifest seal hash, byte-level citation checks, drift detection, disproof ledger (214★) | dsh plugin --profile web add dsh-research-report |
| dsh-industry-research | Industry/company research: chain-map SVG with bottleneck detection, timeline, company cards, adversarial review (207★) | dsh plugin --profile web add dsh-industry-research |
| dsh-memento | Approval-gated cross-session memory (ctx.memory + SQLite) (138★) |
dsh plugin --profile web add dsh-memento |
| dsh-permission-rules | Claude Code-style declarative allow/deny/ask rules plus a process-level network policy (117★) | dsh plugin --profile web add dsh-permission-rules |
| dsh-mcp-panel | MCP management console: /mcp + Settings tab + trial calls (74★) |
dsh plugin --profile web add dsh-mcp-panel |
Every repo below is external to PerryLink/*; every number is measured, merged work only, and open
proposals are deliberately not listed. The third column names the project's owner — the account alone
does not say whether that is a company, a standards body or one person.
★ 1,000+ — named individually, as the rule requires, each carrying the party that owns the project.
Twenty external repos above a thousand stars carry merged work (★ measured 2026-10-05), three more than
the round before — and none of the three is a row that merely drifted over the line: ruvnet/ruflo and
walkinglabs/learn-harness-engineering entered with merges landed in the ten days since, and
punkpeye/fastmcp has carried its merge since 2026-09-24 and was missing from the earlier seventeen.
Six of those rows belong to a company or a well-known project organization — Reactive Resume, DeepSeek,
cordiverse, Tencent, and the ACP project that Zed and JetBrains jointly govern, which accounts for two of
the twenty; the other fourteen are catalog repos, small community orgs and one-person projects, and the
column says so rather than letting the account name imply a company:
| Repository | ★ | 项目归属方 |
|---|---|---|
| ruflo | 73,842 | ruvnet (rUv / Reuven Cohen) — individual maintainer; a 73.8k★ agent harness on a personal account, not a company repo, and the largest row in this table |
| reactive-resume | 43,755 | reactive-resume org — independent open-source project (rxresu.me) |
| laya | 30,650 | NandhaKishorM — individual maintainer; the repo was created 2026-09-18 |
| learn-harness-engineering | 18,986 | walkinglabs community org — the harness-engineering tutorial site |
| awesome-dsh-plugin | 17,758 | awesome-dsh-plugin org — community catalog, no company behind it |
| FlashMLA | 13,034 | DeepSeek — the official deepseek-ai org |
| Cordis | 8,999 | cordiverse org; its maintainer Shigma is now at DeepSeek, and Cordis is the kernel DeepSeek Harness vendors as @deepseek-ai/cordis |
| dsh-web | 8,364 | zhu1090093659 — individual maintainer |
| ouroboros | 6,179 | Q00 — individual maintainer (@zep-us) |
| dsh-market | 5,508 | dsh-market org — the community plugin market behind dshmarket.com, not a DeepSeek repo |
| teamai-cli | 5,121 | 腾讯 Tencent — the official Tencent org, opensource.tencent.com |
| agent-client-protocol | 4,371 | agentclientprotocol org — governed jointly by Zed Industries and JetBrains |
| fastmcp | 3,272 | punkpeye (Frank Fiegel) — individual maintainer at Glama; the TypeScript MCP framework |
| deepseek-harness-desktop | 3,012 | dsh-tauri community org — self-described non-official and non-commercial, not a DeepSeek repo |
| claude-agent-acp | 2,610 | agentclientprotocol org — the same jointly-governed org as the row above, a separate repository |
| awesome-jev | 2,124 | yibie — individual maintainer, community catalog for Jev; the row the 09-25 round both printed and denied, kept now on the commit the history probe finds |
| dsh-plugin-radar | 1,464 | AdamPlatin123 — individual maintainer, catalog is a generated artifact |
| Agents-Anywhere | 1,413 | anywhere-labs community org — 3 public repos, created 2026-05, dshdesktop.cn; not a company |
| awesome-deepseek-harness | 1,137 | 0xsline — individual maintainer, community catalog |
| awesome-vibecoded-saas | 1,037 | Anil Chandra Naidu Matcha — individual maintainer, community catalog |
The rest of the contributor set is the community catalog layer rather than upstream projects:
23 further repositories, DSH plugin directories and small community projects
(dsh-handbook and
imsai-sh's list, which alone took 41
merges, among them) — the catalogs ingest the family and carry no company owner, so they are named here
only in aggregate. 43 external repositories carry at least one merged pull request of ours together
with a commit attributed to this account, and 317 merges were counted inside them — re-derived
2026-10-05 from this account's own merged pull requests, so 317 is exact rather than a floor over a
probed subset. Two further repositories took 33 more of our merged pull requests without
crediting a commit to this account on their default branches —
SihanTeng's list, 32 of them, which is
the case the rule at the top of this section was written about, and
dsh-better-sidebar, one, which merged 2026-10-04 and
carries no commit of ours on main — so neither sizes the contributor set. 317 + 33 = the
350 merged pull requests this account has outside PerryLink/*, concentrated in 45 repositories;
a further 94 are open across 56 repositories and are deliberately not counted here.
The ten days since the last round moved the merged count by 29 (2026-09-25 → 2026-10-05, the
window this round re-measured), and 22 of those 29 are laya alone — the last of them
#924, which merged 2026-10-04T17:50:19Z and is the
most recent merge this account has anywhere. Six more landed one apiece in six repositories that were
not part of this set at all before — ruflo,
learn-harness-engineering,
koishi-plugin-booru,
dsh-plugin-manager,
dsh-plugin-market and
dsh-annotation — which is what puts the largest row in the
table above, ruflo at 73,842★, in a set it was not part of ten days ago. The twenty-ninth is
dsh-better-sidebar, merged
2026-10-04T17:26:07Z, and it is the one merge in the window that credits this account no commit —
which is why it is named in the paragraph above instead of being counted with the other 28.
laya — NandhaKishorM/laya — 46 merged pull requests of
the 49 this account has opened there and second among merged-PR authors, behind aashish254 (126)
and ahead of Bruce-Yii (27); the maintainer NandhaKishorM holds one merged PR of his own because he
commits to main directly rather than through pull requests, and none of the three leaders is a
collaborator. As of 2026-10-05 it reads 0 open and 3 closed unmerged; 45 of the 46 merged inside a
nine-day run (2026-09-21 → 2026-09-29), and the maintainer merges in batches — fifteen of them share two
timestamps, seven at 19:29:05 on 09-27 and eight at 17:40:36 on 09-29. The complete list is one
query away:
laya pull requests by this account
— the same 49, always current, in any language.
The 46 merged pull requests, by area
- Multilingual routing and evaluation — a caller-supplied language hint
(#211), a reproducible per-language harness
(#210), a re-run of the 51-language sweep in both temperature
regimes (#222), the multilingual columns refreshed from that re-run
(#389), letters counted for the scripts no range claims
(#169), and a
Routerthat no longer picks a checkpoint from a language code naming no language (#368). - HTTP serving and containers — inference moved off the event loop
(#230), the Compose
laya-serveservice (#234), the inference failure the client is not allowed to see now reaching the operator's log (#375), a request with no state no longer answered about the literal textnull(#427), and a lone surrogate in the body returning 400 instead of 500 (#454). - Email disclaimers and names — the request kept when a disclaimer footer shares its paragraph
(#94), "confidential" no longer read as a disclaimer
(#227), a
From:line opening ordinary prose no longer deleting the request (#371), and a name class that excluded lowercase in every script (#503). - Correctness across the call surface — three assertions that could not fail
(#231), the load-time and budget errors no suite reached
(#237), an ECE that binned differently from its siblings
(#232), non-ASCII characters kept in non-string instructions
(#228), a README link pointing at a heading that does not exist
(#236), a choice label with no description that came back as a
non-string (#380), a nested choice label reported as a named caller
error instead of a bare
TypeError(#425), a score legend that echoed the caller's own type instead of level text (#420),hooks_installedremoving a hook it did not install (#424), a nullchoicelabel that made the answer undecodable (#508), a short temperature list that now fails at load rather than at the first decode (#502), #249, where anoulcriteria dict that cannot be read raises instead of silently falling back to defaults — the line the project's 0.3.11 release note calls "stricter noul criteria" — and #299, two parity cells in the benchmark table that did not match the JSON they cite. - The test and CI surface — the Windows lane (#212) and #376, six pytest suites that every lane invoked in a way that exited 0 without running a single test, including the only coverage of the HTTP surface.
- Prediction hooks and batched routing — process-wide default hooks never reaching
predict_batch(#379),predict_batchdropping each request'slang, so per-language temperatures never applied (#381), andlang_temperaturescrashing on the inputs it exists to reject (#428). - The TypeScript front end — the
From:header rules the Python side already had, ported rather than re-derived (#422); the Azerbaijani schwa counted as a non-English letter (#423); and a score legend that echoed the caller's own types, unlike the Python backends (#556). - CLI, packaging and serving edges —
--presetsending the request under a key no question set names (#426); the onnx extra missing itsonnxscriptdependency (#504); the packaging test scanning.venvfor broken links (#500); and two over-budget messages that each named a knob which makes the problem worse rather than the one that fixes it (#455, #501). - Documentation — #378, which stopped the README presenting a
confidence threshold as permission to act on its own, and the pages the project's docs-structure issue asked
contributors to write: the fine-tuning guide (#505), the Questions
and answers guide (#418), and the reference entry for
answer_confidence, which no page documented (#419).
The nine area headings above are this account's own grouping of its 45 nine-day merges, not the project's taxonomy; the merge counts are the repository's own.
Three closures, and the reason is on the record for each: #370, closed by this account as a duplicate of #362, which opened the same fix four minutes earlier; #416, the Routing guide, closed by the maintainer in favour of another contributor's #461 so the project would not carry two routing pages; and #925, closed unmerged at 2026-10-04T17:54:52Z, four minutes after #924 merged.
Security — published advisory GHSA-j922-p6h6-p255 for dsh-permission-rules (medium, patched in 0.6.16).
Official harness repo — it does not accept external pull requests, so that line runs through issues, Discussions
(the Show Your Plugins! post #6104) and the plugin
ecosystem instead — while the wider deepseek-ai org is open to fixes, and the account now proposes them at the
systems layer rather than only in its catalogs: of the 20 pull requests it has opened across that org, FlashMLA
#224 remains the only one merged, and 16 are open, 14 of
them code fixes carrying a reproduction across ten repositories — DeepEP
three, FlashMLA and
deepseek-recipe two each, and one apiece in
DeepGEMM, 3FS,
TileKernels,
DeepSeek-MoE,
DeepSeek-Prover-V1.5,
DeepJIT and DeepSelect — the
other two are catalog additions.
The other 36 plugins and the five support repos are one line each below. The roster's source of truth
is dsh-kit — its plugins.txt and a parity script hold the
family to that file; the machine-readable catalogue is
dsh-catalog, which is also the DSH Desktop Market source;
and each plugin's own README carries the detail this page only summarises.
The full family — 42 plugins + 5 support repos, one line each
Counting note: "42 plugins" counts every repo that declares dsh.bundle.patch, re-derived one repo at a time on
2026-10-04 by reading each repo's own package.json at its default branch. Measured against the 47 PerryLink-owned
repositories this page names: 42 declare the contract and 5 do not — the support trio
dsh-catalog, dsh-kit and
dsh-plugin-certification (the certification registry, whose
MCP server publishes from dsh-cert-mcp instead), plus
jevcore (no dsh.bundle; only its jevcore-dsh workspace member is a plugin)
and laya-mcp (an MCP sidecar, not a plugin). The third-party
pan17/dsh-wechat carries a plugin row but is not one of them: 47 + 1 = the 48
repos this page names. A naive scan of the account finds two more than the heading claims — the retired
dsh-plugin-upgrade corridor legs dsh-plugin-upgrade-015 and
dsh-plugin-upgrade-016, both archived, both still carrying the manifest, and neither an active plugin: 42 active + 2
retired = the 44 such a scan returns. The heading and the badge keep the active figure.
| Plugin | One-liner | npm |
|---|---|---|
| dsh-defend | Injection/jailbreak/secret detection + destructive-delete gate | npm |
| dsh-permission-rules | Declarative allow/deny/ask rules + a local HTTP/CONNECT network policy | npm |
| dsh-mask | PII masking/sanitization | npm |
| dsh-skill-pack-security | Security-audit skill pack + supply-chain gate | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-background-agents | Durable background child agents with a Web UI sidebar, messaging and interrupt | npm |
| dsh-team-rooms | Cross-session team rooms: shared message bus, task board, approval-gated handoffs and a timeline that survive restarts | npm |
| dsh-checkpoint-rewind | Snapshots, forks, one-shot restore | npm |
| dsh-github | GitHub PR/issue integration + Action, writes approval-gated | npm |
| dsh-claude-move | Migrate Claude Code/Codex/OpenCode/Hermes into DSH | npm |
| dsh-click | Desktop control tools (Windows/macOS) | npm |
| dsh-session-sync | Git-backed session synchronization | npm |
| dsh-test-drive | Install→smoke→uninstall test driver for plugins | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-composer-history | Terminal-style input history for the web composer | npm |
| dsh-output-styles | Runtime-switchable model output styles | npm |
| dsh-session-pin | Pin sessions in the Web sidebar | npm |
| dsh-memento | Approval-gated cross-session memory protocol | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-auto-review | Second-model auto-review on the approval chain | npm |
| dsh-doublecheck | Engineering-discipline guard: grill, gates, adversary review | npm |
| dsh-score | Plugin quality scoring across git/gh/npm | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-autotier | Automatic strong/cheap model-tier routing with deterministic risk guards | npm |
| dsh-budget | Token/cost metering, budget caps, carbon estimate, latency benchmarks | npm |
| dsh-observe | OTel/Langfuse telemetry export | npm |
| dsh-fast | Performance diagnostics | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-draw | Image-generation routing | npm |
| dsh-translate | Translation + JSON repair | npm |
| dsh-talk | Speech recognition and voice I/O | npm |
| dsh-library | Local knowledge-base RAG | npm |
| dsh-local-ai | Ollama LLM provider and routing | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-lsp-actions | LSP diagnostics/formatting/completion/actions | npm |
| dsh-mcp-panel | MCP management console | npm |
| dsh-plugin-guide | Plugin-dev knowledge base + CLI toolchain + release-engineering guide | npm |
| dsh-plugin-upgrade | Plugin-author upgrade skill: one package, one corridor index that detects the caller's peer band and routes to the matching closed card (0.1.3-alpha.1 → 0.1.5-rc.1, 0.1.5-rc.2 → 0.1.6-alpha.2), plus a zero-dependency seam scanner (bundle skill + npx CLI) |
npm |
| jevcore | TypeSafe Jev as typed decisions instead of prose (noul/choice/score with calibrated probabilities): offline by default, every transmission named before it happens, disabled gates register nothing (the DSH adapter jevcore-dsh, plus jevcore core and jevcore-mcp for non-DSH MCP hosts) |
npm |
| dsh-laya | Laya typed decisions (noul/choice/score) as a first-class Cordis service (ctx.laya) plus laya_ask/laya_plan tools; a client of a laya-mcp serve sidecar, so it installs and downloads nothing, and reports whether state stays on this machine as a fact rather than a policy |
npm |
Support repos: dsh-plugin-kit (review-rule meta package) ·
dsh-catalog (DSH Desktop Market catalog source) ·
dsh-cert-mcp (certification MCP server) ·
dsh-kit (one-command installer) ·
dsh-plugin-doctor (plugin health checker). Five of these repos and
plugins publish under a @perrylink/ npm name rather than their repo name — the support repos
@perrylink/dsh-plugin-kit and @perrylink/dsh-plugin-doctor, and the plugins @perrylink/dsh-github,
@perrylink/dsh-ticktick and @perrylink/dsh-skill-pack-security-provider — and a sixth name,
@perrylink/dsh-cert-mcp, is the deprecated scoped predecessor of dsh-cert-mcp; the perrylink account therefore
holds 52 npm names while the family has 42 plugin repos (measured 2026-10-04).
| Plugin | One-liner | npm |
|---|---|---|
| dsh-wechat | WeChat ↔ DSH bridge (Tencent iLink bot): text/image/file/voice, approvals in chat — developed with pan17, who now hosts the repo and publishes the npm package | npm |
| dsh-ticktick | TickTick/Dida365 task bridge: session-header panel + 11 tools | npm |
| dsh-reach | Multi-channel approval/question bridge: WeChat/Telegram/Feishu, session console | npm |
| Plugin | One-liner | npm |
|---|---|---|
| dsh-data-quality | Data profiling/cleaning/verification | npm |
| dsh-fund-research | Mutual-fund research, sealed traceable snapshots | npm |
| dsh-industry-research | Industry/company research domain pack | npm |
| dsh-research-report | Verifiable research-report engine | npm |
- GitHub (this profile), Gitee and npm — source, CI and releases here; 46
family repos mirrored to Gitee by a daily job (default branch + all tags), plus this profile repo; the
perrylinkaccount holds 52 npm names and 909 versions, 46 of them with a non-deprecatedlatestand 44 carrying a provenance attestation on that version (measured 2026-10-04 against each name's own packument — the registry search endpoint is not authoritative here, since it returns only 47 names and omits the deprecated ones) - npm downloads — 158,593 over the trailing 30 days (npm window 09-04..10-03, summed per name from the downloads point endpoint; dshfind independently tracks 21.5k+ across the 7 family plugins it currently has a download figure for — dshfind reports rounded tiers, so that is a floor rather than a total
- DSH Desktop Market — add the catalog source
https://perrylink-dsh-catalog.perrylink.workers.dev/catalog-source.jsonunder Market → Sources to browse the family in-app; MCP Registry — three servers, all published from their release workflows over GitHub OIDC:dsh-cert-mcp,jevcore-mcpandlaya-mcp - GitHub Actions — dsh-github and
dsh-test-drive also ship composite actions, so they install as
uses: PerryLink/dsh-test-drive@vX
Published to a dozen-plus third-party DSH directories and curated lists —
awesome-dsh-plugin, DSH
Directory, Awesome DeepSeek
Harness, walkinglabs'
list, Zhiyuan-Fan's
list, the AdamPlatin123
radar, dsh-suite,
dshfind.com, deepseek1024.com and
Glama among them — and scored on OpenSSF
Scorecard; the GitHub dsh-plugin
topic is what most of them ingest from.
中文介绍
在 DeepSeek Harness 上构建插件生态:42 个开源插件,来自一个 48 仓的家族(其中 47 个由 PerryLink 自己维护) —— 安全、工作流、研究、消息桥接、开发者体验,外加 DSH Desktop
Market 目录、插件认证注册表与 dsh-plugin-doctor 这个 CI 检查器。42 个插件全部带 CI、Gitee 镜像与五语文档,文档的段落数、安装命令、配置键由每个仓自己的 CI 闸门守着一致,并声明
dsh.bundle 契约。npm 账号、Gitee 镜像、DSH Desktop Market、MCP Registry 与 GitHub Actions 的入口见上节「Where the plugins
live」。我也向上游 Cordis(DeepSeek Harness 所基于的插件内核框架)与
deepseek-ai 项目贡献:该组织下 20 条 PR 里,已合并的仍是
FlashMLA 修复(#224,唯一一条),另有 16 条开放,其中 14 条是带复现的系统层修复。
本页所有实测数字只在英文部分维护一份(外部仓与合并数、千星仓、npm 名称与下载、laya 台账),中文这里不复述,以免两处走样;需要数字请看上方的 Upstream 一节,那里每个数字都带测量日期。
这一家子所依赖的那项研究,现在是一篇有 DOI 的论文 —— 而且它测的很大一部分,正是这份主页上的两个项目:laya-mcp 与 jevcore。《当判定层的自报字段说谎时:三类判断层的成本、延迟与失效边界实测》在一套相同条目上实测三类判定层(Laya、TypeSafe Jev、DeepSeek-V4.1-Flash),四条主张三条成立、一条被自己的数据否定;判定器的接入层自报字段不可信(截断标志报「通过」却静默丢输入、概率字段把结论反号、两个判定词在真实输入下不可达),失效集中在一处 —— 答案被明确陈述时近乎完美(0.9909,n=220),必须注意到「缺席」时塌缩(0.3091,n=220);异种判定器在三个区制上都没有增量覆盖。引其一即可,不要当两篇引(英文原文 · 中文译本 · 制品);两者有出入以英文为准。
laya(NandhaKishorM/laya)是这个账号投入最深的外部项目:提了 49 条 PR,其中 46 条已合并,合并数在该仓排第二;45 条集中在 2026-09-21 至 09-29 这九天里合掉。逐条清单与九个方向见上方英文部分折叠块,或直接看这个筛选列表。
还有一条在别处:一个根本起不来的进程现在能起来了。 claude-agent-acp #1146 让 src/index.ts 里那处没有保护的顶层 await 不再因一次瞬时错误就中断模块求值、在发出任何一条 ACP 消息之前退出。
待业中。十一准备出去玩一圈，所以更新迭代节奏可能短期内仍然提升的有限。当然，问题和缺陷修复不会停，只是发布频率会降低一些，还请大家谅解。
This page is re-measured, not remembered. Every figure carries the date it was measured, and the round log records what each re-measurement corrected — including three claims of this page's own that did not survive. Round log · How every figure was measured.