dsh-desktop

What it is

DSH Desktop is an independent Electron client for the DeepSeek Harness, known as dsh. The window presents the official web UI itself rather than a reimplementation, while the engineering effort sits outside the window: closing the window does not stop tasks, the app stays resident in the tray, the agent runs in a governed execution environment, and plugins install through a review before install market. The README explicitly states it is a community maintained third party project and not an official DeepSeek product, with trademarks belonging to their respective owners.

Features

Long tasks stay resident on the desktop with controlled restart and auto recovery after the local service exits or the system wakes; the agent execution environment reuses the user's own dsh instance or PATH and aligns macOS PATH with the login shell, and ELECTRON_RUN_AS_NODE is not leaked to the agent. Security is framed as identity rather than a feature list: a sandboxed window, navigation locked to the official source, SHA-256 verified updates, and narrower permissions for remote addresses. A built in security market reviews plugin code via an agent before install and performs no commands itself.

Distribution and connection

Release packages bundle a fixed version of the official dsh runtime so ordinary users need no Node.js, pnpm or dsh CLI; smart mode probes a local instance on 127.0.0.1:3080, then PATH dsh, then npx cache, then the bundled runtime, while fixed address mode connects to a user maintained web UI without starting any runtime. The README notes the official dsh listens on 127.0.0.1 by default and that exposing 0.0.0.0 is explicitly rejected as a remote code execution risk. Chinese and English READMEs are provided and the project is MIT licensed.

Editorial conclusion

DSH Desktop is MIT licensed and reported sixty six stars at indexing, and the README notes the official dsh binds to 127.0.0.1 by default with 0.0.0.0 exposure explicitly rejected as a remote code execution risk.