DeepSeek Harness 发布 v0.2.1-alpha.1 预发布版，插件管理新增 Agent 创建插件入口

DeepSeek published the v0.2.1-alpha.1 prerelease of DeepSeek Harness on October 3, 2026, adding a “Let Agent create a plugin” entry to plugin management. Selecting it carries the existing draft into Creator mode, and execution waits until the user submits the plugin-creation request.

Plugin Management Changes

Creator mode was already documented before this prerelease. The v0.1.6-alpha.2 notes, published September 17, 2026, describe a move away from Cordis dynamic definition and execution tools toward persistent plugins installed through Plugin Manager. That release added a Plugins page for installation and configuration with live enabling and disabling, alongside runtime plugin unloading.

The October prerelease keeps Standard, Creator, and custom modes available when coding view is disabled. Built-in PTC and Minimal configurations default to Standard, while existing sessions retain their mode. Its plugin-bundle fixes address missing dependencies after a new bundle is enabled and stale dependency mappings after bundles are disabled or uninstalled. Replacing an installed package version still requires a restart.

Creator Mode Workflow

The product page’s Creator-mode demonstration uses a Pomodoro timer as its example. The agent loads the Cordis plugin-development skill, inspects providers and runtime slots, and writes package and client files. It then invokes the plugin manager’s bundle-installation tool and checks the live plugin state. The demonstration ends with the floating timer listed under Installed plugins, with Focus and Short break controls, and reports it as built, installed, and verified.

Availability and Plugin Limits

The project repository lists an MIT license and documents Web UI setup from npm or source. With Node.js installed, npx @deepseek-ai/dsh web starts the interface; a local launch defaults to http://127.0.0.1:3080 and opens the default browser. The source route clones the repository and uses pnpm install, pnpm run build, and pnpm dsh web. Harness is in developer preview, compatibility-breaking changes are expected, and the core plugins and APIs are evolving.

The plugin-market documentation describes an experimental Custom plugin markets bundle that adds a Discover tab and a read-only plugin_market tool in Creator mode; disabling the bundle removes both. DSH ships without an index source. Installing a discovered version requires confirmation before the normal compatibility and registry checks proceed. DSH’s validation covers the index file format and excludes the titles, descriptions, icons, authorship, and source claims supplied by a market.

A separate safety notice describes Harness as experimental developer-preview software that has not undergone a security audit. Harness can execute model-generated code and commands, load third-party plugins, and access the network, processes, credentials, and files made available to it. Incorrect output, defects, misconfiguration, malicious input, or untrusted plugins can damage the host, modify or delete files, or disclose data and credentials. Sandboxing, approval prompts, and permission controls can reduce risk, but they do not guarantee isolation or prevent damage, even when correctly enforced.