DSH Hub CLI
A CLI for DeepSeek Harness that publishes a plugin set as a versioned preset, applies others' presets and rolls them back
- 274 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Installs npm and GitHub packages into DSH profiles and replaces a profile wholesale
- Stores a sign-in token in ~/.dsh/.hub/auth.json and publishes your settings to a catalog
- Sends anonymous usage statistics until you turn them off
Install
In your terminal, with SkillFoxx CLI
npx skillfoxx add cli/dsh-hub-cliDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Installs npm and GitHub packages into DSH profiles and replaces a profile wholesale
- Stores a sign-in token in ~/.dsh/.hub/auth.json and publishes your settings to a catalog
- Sends anonymous usage statistics until you turn them off
This is third-party code. Review the repository files before installing.
What it does
DSH Hub CLI is the client of the DSH Plugin Hub catalog for DeepSeek Harness. The dsh-hub command captures from your machine a set of plugins, their order, the runtime version and the cordis.patch.yml settings file, and publishes it as an immutable preset release. Anyone else, or a CI job, applies the preset with one command and gets the same plugin versions in the same order. Before applying you can look at the difference with profile diff or save a plan with the --plan flag. A plan lives 30 minutes and stops being valid if the local state changed. The install goes to a staging folder, is validated and only then replaces the live profile. The previous profile is kept whole, so profile rollback restores it by renaming a folder. Secrets stay local: a preset carries ${ENV_VAR} references, and the CLI refuses to publish a patch with a key-looking value. The release's sha256 hash is recomputed on download. For agents there is a plugin with tools and a dsh-hub skill: mutating operations only create a plan, and a separate tool executes it after a human confirms.
Who it is for. For people who assemble a DeepSeek Harness environment from plugins and want to share it with a team, reproduce it in CI or upgrade it safely.
Good fit when
- You built a working DSH plugin set and want to hand it to a colleague with one profile apply command
- Before updating a set you need to see what will change: profile diff and profile upgrade --dry-run
- A bad profile update must be rolled back with profile rollback
- An agent should propose plugin installs but execute them only after you confirm a specific plan
- You need a scaffold for a new plugin with dsh-hub init and a check with dsh-hub validate
Not a fit when
- You do not use DeepSeek Harness: the CLI works only with its profiles in ~/.dsh
- You need audited dependency chains: the project admits that enforcing declared artifact digests and complete transitive locks is unfinished
- You want key values stored in a preset: only environment-variable references can be published
- Your Node.js is older than 22.13 and pnpm is missing
Example request
Find a web workspace preset in the DSH Plugin Hub, show what it would change in my web profile and prepare a plan without applying it.Limitations
Node.js 22.13 or newer and pnpm are required. The catalog, API and registry live at dshpluginhub.ai, and the repository holds only the client. The project is independent and not affiliated with DeepSeek. Local profile management and customization-preserving upgrade commands require CLI 0.5.0 or newer. Licensed MIT. Direct mutating commands run immediately, and the --plan and --dry-run flags switch to preview mode. Agent tools work only through plan and confirm. GitHub sources in a release must point to a full 40-character commit, and branches are rejected.
How to disable. Remove the CLI with npm uninstall --global @dsh-plugin-hub/cli. The login session sits in ~/.dsh/.hub/auth.json and dsh-hub logout clears it. dsh-hub telemetry off turns anonymous statistics off.
FAQ
How do I install DSH Hub CLI?
Run npm install --global @dsh-plugin-hub/cli. Node.js 22.13 or newer and pnpm on PATH are required. Check the install with dsh-hub --help.
How do I apply someone else's preset?
Find it with dsh-hub profile search, look at the difference with dsh-hub profile diff and apply it with dsh-hub profile apply giving the slug, version and profile name, for example dsh-web-workspace --version 0.1.0 --profile web.
How do I roll back a bad update?
The previous profile is kept whole with its lockfile. dsh-hub profile history lists revisions and dsh-hub profile rollback restores the previous one.
What does the anonymous telemetry collect?
Only the slug, version, outcome, error category, duration, platform and CLI version. It contains no account, machine ID, paths or variable values. Turn it off with dsh-hub telemetry off, the --no-telemetry flag, DSH_HUB_TELEMETRY=0 or DO_NOT_TRACK=1.
How do I publish my own plugin set?
Sign in with dsh-hub login and run dsh-hub profile share my-stack --version 1.0.0 --profile web. You can add --dry-run first to preview what goes into the release. In CI a token in the DSH_HUB_TOKEN variable replaces the login.
Discussion
No questions or reviews yet.
Related
CLI toolsSkills for the Harness CI/CD platform: pipelines, connectors, feature flags, security and cost from a chat with an agent
squeez compresses bash output by up to 95 percent in the hooks of seven AI CLIs and preserves exact identifiers
A CLI that checks npm, Python and Rust packages against the real archive before release and writes Codex a bounded task.
Hookdeck CLI forwards webhooks to a local server, manages Event Gateway and runs an MCP server through which an agent investigates delivery failures
Diffinery plugins connect Claude Code and Codex to self-hosted Git, pull requests and CI on Cloudflare through an MCP server
An MCP server that opens a remote repository clone in an isolated container and gives the agent files, commands, Git and tasks.
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Repository stars | Main difference |
|---|---|---|---|
| DSH Hub CLI (this card) | no | 274 | |
| DeepSeek Harness | yes | 280,265 | the DeepSeek agent itself, while DSH Hub CLI manages sets of its plugins |
| DSH Vision Toolkit | no | 946 | a single plugin for working with images that offers no presets or rollbacks |
README in short
The repository is a monorepo of four packages: schemas, registry, CLI and an agent tool plugin, all released under one version. It documents trust boundaries, the stage, validate and atomic swap flow for profiles, and the vulnerability disclosure policy.