xiajiajun516/dsh-config-manager
One-click backup, export, import and migration of a whole DSH config: settings, plugins, MCP, skills and workspaces. Secrets are excluded by default and, if you opt in, are AES-256-GCM encrypted rather than written in the clear; imports preview first and auto-backup with rollback, profiles hold multiple setups, and remote sync pushes portable config through a private Git repo with secrets excluded.
Install
via npm
Resolves a published tarball rather than cloning the repository, and installs without any extra setup. Swap `web` for your profile name if you run another one.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/web/pnpm-workspace.yaml.
The desktop app keeps its own profile, desktop, and only the dsh command it ships may change it — the npm-installed dsh refuses that profile. Install the command from the app menu (Manage dsh Command…), open Desktop once, quit it fully, run the line below, then reopen Desktop.
via npm
Resolves a published tarball rather than cloning the repository.
via GitHub · npm package
Installing from GitHub runs the project's build script, which pnpm blocks until you allowlist it — run the command once and pnpm prints the exact key to add under `allowBuilds` in ~/.dsh/profiles/desktop/pnpm-workspace.yaml.
Our install check ran in a web profile on npm's dsh, not in the desktop app.
What happened when we ran it
Installed cleanly when we ran it
Every command here is run in a throwaway container against a clean profile, and the result is whatever the harness recorded — not a guess from the source. Last run 8d agoon DeepSeek Harness 0.2.2-rc.1.
Show it in your README
For maintainers: the badge serves this listing's latest sandbox verdict, so a re-run updates it on its own — and it links readers to the full result here.
Due diligence
Security
No build script was blocked in our run.
Source: our sandbox install on DeepSeek Harness 0.2.2-rc.1, 8d ago.
package.json declares no preinstall, install or postinstall script.
Source: package.json on GitHub, read at our last sync. prepare is not recorded; it runs only on a GitHub install, and shows up under build scripts when pnpm blocks it.
shell commands (bash, exec, spawn …); API keys, tokens or passwords
Source: a keyword match on the README — a hint about what the plugin touches, not an analysis of its code.
Not an audit. These are the record of one install and two text scans; nobody has read this plugin's code on your behalf. Plugins run with your agent's permissions.
What it is — Manages backup, export, import and migration of DeepSeek Harness configuration.
Who it is for — If you need to synchronize or migrate DeepSeek Harness configuration across machines using profiles to manage multiple setups. If you do not use the configuration market or import from other AI agents, it is not necessary.
Watch out — Passed sandbox test in new profile. No obvious issues found. Requires API key or token.
The verdict — If your work involves configuration synchronization across machines, I would install it because it supports remote sync through a private Git repo and profiles that hold multiple setups.
Generated by grok-4.6, and a starting point rather than a verdict. Where it says a plugin installs or does not, that is from a real run in a clean profile — everything else is read off the repository. Trust the source over this.
dsh-config-manager is a DeepSeek Harness plugin that backs up, exports, imports, migrates and synchronises a complete DeepSeek Harness configuration. It packages settings, model providers, installed plugins and their configuration, MCP servers, skills, agent presets, workspaces and global instructions such as AGENTS.md into a portable archive. Imports use a review-first flow: preview the changes, resolve conflicts per item, create an automatic snapshot, apply the import and roll back if necessary. Dead absolute paths can be detected and remapped during migration.
dsh-config-manager reads the local DeepSeek Harness configuration and writes restored files and settings. Scheduled backups are configured from the Home view, while machine-local $DSH_HOME/profiles/<name> entries are managed from Environment → Profiles and are not included in exported backups. Secrets are excluded by default. If credentials are included, ~/.dsh/.credentials.yaml is stored as scrypt plus AES-256-GCM ciphertext rather than clear text. Remote synchronisation can use a private Git repository, WebDAV, an S3-compatible object store or GitHub Gist, and requires the relevant credentials.
This suits developers moving or reviewing full DeepSeek Harness environments across Windows, macOS and Linux. It is a poor fit for users who only need CLI snapshots; the README identifies a separate backup plugin for that use case. Because dsh-config-manager reaches configuration files, plugin and workspace data, and can use terminal-level or remote credentials, installation should be limited to a profile with the intended permissions.
DeepSeek Harness configuration can be exported as one ZIP archive and imported on another Windows, macOS or Linux machine. The documented bundle can contain settings, model providers, plugins and plugin configuration, MCP servers, skills, agent presets, workspaces and AGENTS.md. During migration, dsh-config-manager detects dead absolute paths and supports batch prefix mapping.
DeepSeek Harness keeps $DSH_HOME/profiles/<name> outside the backup. These profiles determine which plugin stack starts on a machine and are managed separately in Environment → Profiles, where they can be listed, created, renamed or deleted. The same view can launch or stop an independent instance.
The import flow previews changes before writing them. It supports per-item conflict decisions, creates an automatic snapshot before applying changes, and can roll back to that snapshot. Scheduled full backups are configured in Home → Scheduled backup with 6h, 12h, 24h, 7d, or a custom weekly weekday and time. Retention keeps the last N backups plus one per month and one per year.
Secrets are not exported or synchronised by default. When “Export secrets” is selected, ~/.dsh/.credentials.yaml is encrypted with scrypt and AES-256-GCM inside the snapshot; the encryption password is required for restoration. Remote synchronisation supports a private Git repository, WebDAV, an S3-compatible object store, and GitHub Gist. The remote payload excludes clear-text secrets.
The plugin can also import configuration and, for supported sources, chat history from 30 other AI-agent formats. Secret values are not read during that process; only key names are used so values can be entered again.
The built-in configuration market provides preview-first installation for shared configurations. Each section must be explicitly approved, and supply-chain warnings are shown. Conversation rewind creates a new branch while leaving the original archived; workspace-file changes can be reviewed by diff and line counts before reverting.
The README documents these UI flows rather than a separate command-line command set or named configuration keys.
Written from the project's own documentation and kept in sync with it. Where the two disagree, the source is authoritative — read the README on GitHub
Same category
Tencent
Four read-only tools over a WeKnora knowledge base: list knowledge bases, hybrid passage search, reassemble one document's chunks in order, and WeKnora's own cited RAG or ReAct-agent answer with a resumable session id.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
superdesigndev
Tool catalog for agents: search ~2,600 external endpoints (SEO and SERP, backlinks, social, people and company enrichment, ad libraries, scraping) by the task you want done, read each one's parameters and per-call price, then call it with the credential injected server-side. Ships the skill plus an MCP row that stays disabled until TREG_TOKEN is set.
Installed cleanly when we ran it
T-Auto
Provides bash, PowerShell 7, and high-performance Rust tools for DSH on Windows to reduce token usage.
DeepSeek Harness 0.2.2-rc.1 refuses the latest release
sixtysevenlf
Lets a DSH agent drive a local Blender over a direct TCP channel with 15 tools: viewport frames, custom-angle renders, Python execution, headless and job offload, transaction rollback, and a planning layer of 228 ops across 34 families.
Installs, but needs a build approved first
yjl9903
Anime Garden for DSH: search anime torrent resources from 動漫花園, 蜜柑计划, 萌番组 and ANi inside DSH — via chat, a sidebar panel with fansub and type filters, a seasonal calendar, and an in-app floating player.
No one-line install — this plugin lives inside a larger repository and publishes no npm package.
TencentCloudBase
Tencent CloudBase backend for DeepSeek Harness — scaffold and deploy full-stack apps from chat, render query results as table cards with paging, sorting and CSV export, preview a deployment on its domain, and call the CloudBase MCP toolset (`mcp__cloudbase__*`) with device-code login.
Installed cleanly when we ran it
