shengsheng90/DSH-taskboard
Local SQLite taskboard as a native overlay page: projects, tasks, comments, relations, attachments and workflow automation, with backlog → todo → in_progress → in_review → done statuses, `taskboard_*` Agent tools that can only submit work to in_review, a headless JSON CLI and a packaged skill.
Install
via npm
Resolves a published tarball rather than cloning the repository, and installs without any extra setup. Swap `web` for your profile name if you run another one.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/web/pnpm-workspace.yaml.
The desktop app keeps its own profile, desktop, and only the dsh command it ships may change it — the npm-installed dsh refuses that profile. Install the command from the app menu (Manage dsh Command…), open Desktop once, quit it fully, run the line below, then reopen Desktop.
via npm
Resolves a published tarball rather than cloning the repository.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/desktop/pnpm-workspace.yaml.
Our install check ran in a web profile on npm's dsh, not in the desktop app.
What happened when we ran it
Installed cleanly when we ran it
Every command here is run in a throwaway container against a clean profile, and the result is whatever the harness recorded — not a guess from the source. Last run 8d agoon DeepSeek Harness 0.2.2-rc.1.
Show it in your README
For maintainers: the badge serves this listing's latest sandbox verdict, so a re-run updates it on its own — and it links readers to the full result here.
Due diligence
Security
No build script was blocked in our run.
Source: our sandbox install on DeepSeek Harness 0.2.2-rc.1, 8d ago.
package.json declares no preinstall, install or postinstall script.
Source: package.json on GitHub, read at our last sync. prepare is not recorded; it runs only on a GitHub install, and shows up under build scripts when pnpm blocks it.
shell commands (bash, exec, spawn …)
Source: a keyword match on the README — a hint about what the plugin touches, not an analysis of its code.
Not an audit. These are the record of one install and two text scans; nobody has read this plugin's code on your behalf. Plugins run with your agent's permissions.
What it is — Adds a native SQLite overlay page to DeepSeek Harness for projects, tasks, comments, relations, attachments and workflow automation, with taskboard_* tools that can only submit to in_review, plus a JSON CLI and a packaged Skill.
Who it is for — You run the web profile, drive one project across several Agent sessions, and need a local ledger that is not Session or Goal, with done reserved for a human. Skip it if Harness is only for one-shot answers, or if your process requires the Agent itself to mark work done.
Watch out — A clean-profile sandbox install registered with the harness. Host checks cover install and module load on 0.1.6-alpha.1, 0.1.7-rc and 0.2.0-rc; GUI and model execution still need a pass after a Host upgrade. It invokes the shell. Node.js must be ^22.19.0 or >=24.0.0 (24 recommended for node:sqlite), with write access to the Harness home and a restart.
The verdict — Worth it for me: prebuilt Host and Client artifacts already ship in the package, so I skip a TypeScript build and a Harness checkout.
Generated by grok-4.6, and a starting point rather than a verdict. Where it says a plugin installs or does not, that is from a real run in a clean profile — everything else is read off the repository. Trust the source over this.
DSH-taskboard is a DeepSeek Harness plugin that adds a local SQLite taskboard as a native overlay page for project and task management. It stores projects, tasks, comments, relations, attachments, workflows and automation in SQLite, which is the task authority rather than the session, workspace or Web Client. The page is loaded as a native DeepSeek Harness overlay, not an iframe or a second chat runtime.
DeepSeek Harness loads DSH-taskboard as a profile bundle with its Cordis patch. The plugin provides in-process taskboard_* Agent tools, the headless JSON CLI dsh-taskboard, and the packaged manage-taskboard Skill. Its workflow includes backlog, todo, in_progress, in_review, done, blocked and canceled; Agent tools can submit verified work only to in_review, while an authenticated human using the UI or CLI must accept it as done. Configuration includes databasePath, attachmentRoot and worker limits.
DSH-taskboard is intended for local project tracking where task state must remain separate from conversation execution. It is a poor fit for a non-web profile, an environment that cannot write to $DSH_HOME, or a workflow that requires Agents to mark tasks complete without human acceptance. The terminal surface is the dsh-taskboard CLI: installing it gives commands that can read and modify the task database, subject to the profile’s permissions. Node.js ^22.19.0 or >=24.0.0 is required.
DeepSeek Harness loads DSH-taskboard into the web profile from $DSH_HOME/profiles/<profile>. The profile composition includes the taskboard configuration layer, with these documented keys:
| Key | Purpose |
|---|---|
databasePath |
Location of the local SQLite database |
attachmentRoot |
Root location for task attachments |
| Worker-limit keys | Limits for plugin workers; the README refers to these as worker limits |
The README does not specify default values for these keys. The package requires write access to $DSH_HOME, which defaults to ~/.dsh.
DeepSeek Harness exposes the in-process taskboard_* Agent tools and the packaged Skill manage-taskboard. The Agent tools do not provide a generic status mutation or an accept operation. They can submit verified work to in_review; acceptance to done is reserved for an authenticated human through the native UI or the CLI.
The plugin also provides the headless JSON CLI dsh-taskboard. It operates without the Web Client and can be used for taskboard operations from a terminal. The README identifies it as a JSON CLI but does not list its individual subcommands or flags.
The taskboard supports the statuses backlog, todo, in_progress, in_review, done, blocked and canceled. SQLite is the sole task authority. Tasks also have stable readable keys such as DSH-42, opaque IDs and optimistic versions. DeepSeek Harness remains responsible for Agent Sessions, Goals, Workspaces, tools, permissions and the Web Client.
DeepSeek Harness must use the web profile. Node.js ^22.19.0 or >=24.0.0 is required; Node.js 24 is recommended. Repository development uses pnpm 11.15.1, while profile installation uses the pnpm supplied by DeepSeek Harness. Network access is needed to clone the repository and install Node dependencies, and the Harness process must be restartable. Installation and module loading are tested against listed 0.1.x and 0.2.0-rc releases, but GUI operations and model execution still require checking after a Host upgrade.
Written from the project's own documentation and kept in sync with it. Where the two disagree, the source is authoritative — read the README on GitHub
Same category
loopx-project
LoopX, a provider-neutral, local-first state kernel and control plane for long-horizon agents: keeps Goal, Todo, gate, evidence, quota, recovery, and handoff state above DeepSeek Harness, while the plugin bootstraps the CLI and skills, admits bounded same-session continuation, and adds a loopback GoalBar for the exact bound loop.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
huangruiteng
LoopX, a provider-neutral, local-first state kernel and control plane for long-horizon agents: keeps Goal, Todo, gate, evidence, quota, recovery, and handoff state above DeepSeek Harness, while the plugin bootstraps the CLI and skills, admits bounded same-session continuation, and adds a loopback GoalBar for the exact bound loop.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
Q00
Config-only bundle that mounts Ouroboros through the DSH MCP client, exposing 36 interview, Seed, execution, evaluation, and evolution workflow tools in DSH.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
chuspeeism
Embeds the active installed Codex Taskboard runtime in the DeepSeek Harness sidebar, using its launcher runtime descriptor instead of a fixed port.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
EthanYoQ
Installs a dedicated AI novel-writing preset and workbench: revisioned local project assets, a compact side drawer, and native approval-gated single-file changes.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
