Questions people actually ask
DeepSeek Harness FAQ
License, Windows 11, safety, antivirus, and preview limits. Answers stay aligned with the official README, SAFETY notice, and npm dist-tags.
Is DeepSeek Harness free?+
Yes. Current 0.1.x packages use the MIT License. Early 0.0.1-rc packages used BSD-3-Clause. You can inspect, modify, and self-host the preview. Model API usage you attach is billed by that provider.
Is DeepSeek Harness a model?+
No. It is the agent runtime around models: plugins, sessions, sandboxes, and a local Web UI. A 0.1.2-rc.1 changelog item does not change a model ID, context window, or token price.
Does DeepSeek Harness work on Windows 11?+
Yes with Node.js ^22.19.0 or >=24.0.0. The Windows sandbox uses ACL restricted tokens. Known reports: C:\Windows\Temp lockouts, BUILTIN\Administrators workspaces, port 3080 reserved by Hyper-V/WSL2/Docker, and path truncation on some Chinese folder names. See the Windows sandbox ACL fix.
Do I need an account?+
The CLI and Web UI run locally. You do not create a DeepSeek Harness account to start 127.0.0.1:3080. Model providers you attach may still require their own keys.
Is DeepSeek Harness safe?+
It is not security-audited and is not production-ready. Sandbox, approvals, and permission presets do not guarantee isolation. The project can execute model-generated commands, load third-party plugins, and read files you expose. Read the trust and safety page before a real workspace.
Why does antivirus flag dsh?+
Heuristic scanners flag Node processes that spawn shells. There is no official .exe installer. Verify the published shasum for the pinned version (0.1.2-rc.1 is fef213043313affc36ca2226d2637ad483b5e3f6) on the integrity section.
Where do I file bugs if Issues are closed?+
The project directs feedback to GitHub Discussions or Discord. This site does not host a tracker and does not link out.
Can I use the developer preview in production?+
No. The README states there will be compatibility-breaking changes. Pin versions and keep state disposable. Plugin contracts may move before a stable release.
Are community plugins official?+
No. The dsh-plugin topic is discovery. Independent indexes have listed hundreds of repositories. You review source, license, install scripts, and permissions yourself.
Does the Web UI leave my machine?+
It binds to 127.0.0.1:3080 by default. Do not expose it. Tool calls can still reach the network under policy, because SandboxMode governs file effects only. 0.1.2-rc.1 can include plugin names in official DeepSeek requests unless you turn that off, and offers opt-in session-log uploads.