DSH session workflows for packaging verifiable capsules, evaluating reusable Skills, and comparing controlled session trajectories.
Install
# from a prebuilt release tarball
dsh plugin --profile web add "https://github.com/zhangguiping-xydt/dsh-session-lab/releases/download/v0.1.0/dsh-session-lab-v0.1.0.tgz"
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:zhangguiping-xydt/dsh-session-lab
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
Evidence packaging, Skill evaluation, and controlled trajectory comparison for DeepSeek Harness sessions.
English | 中文
Turn a successful DeepSeek Harness session into reusable evidence, measurable Skills, and controlled comparisons.
dsh-session-lab is an independent, pre-1.0 community bundle. It is not an official DeepSeek product and is not endorsed by DeepSeek. It registers three complementary workflow Skills in the DSH runtime catalog:
| When you need to… | Use | You get |
|---|---|---|
| Share or archive one run | dsh-capsule |
A verified, privacy-aware .dshc evidence bundle |
| Turn a successful run into a reusable workflow | dsh-teach |
A candidate Skill plus independent baseline/treatment evaluation |
| Understand why two runs differ | dsh-time-machine |
A controlled trajectory comparison with causal limits stated |
The helpers use Python 3.10+ and the standard library only. They do not add a Host session-import endpoint, execute capsule contents, or claim exact model replay.
30-second demo
Install the bundle, restart the DSH profile, then ask for one concrete workflow:
dsh plugin --profile web add github:zhangguiping-xydt/dsh-session-lab
Use $dsh-capsule to package and verify this DSH export.
The result is a .dshc archive containing a manifest, redacted session events, integrity hashes, and (when explicitly selected) a workspace patch. For a successful workflow, try:
Use $dsh-teach to extract and independently evaluate a Skill from this successful session.
For a controlled comparison, start two DSH branches from the same completed turn and ask:
Use $dsh-time-machine to compare these two sessions from their common completed turn.
Each Skill explains its required input, output, safety checks, and known limits. Read the relevant SKILL.md before handling real session exports.
Requirements: Node.js 22.19+ (or 24+) for DSH/plugin installation and Python 3.10+ for the Skill helper scripts.
Install
Install directly from GitHub into an existing DSH profile:
dsh plugin --profile web add github:zhangguiping-xydt/dsh-session-lab
For a reproducible install, pin the reviewed release tag:
dsh plugin --profile web add github:zhangguiping-xydt/dsh-session-lab#v0.1.0
If the dsh command is not installed globally, run the latest published CLI through npx:
npx --yes @deepseek-ai/dsh@latest plugin --profile web add github:zhangguiping-xydt/dsh-session-lab
The package is currently distributed through GitHub. npm publication is not required; once an npm release exists, the shorter dsh plugin --profile web add dsh-session-lab form will also work.
For local development from a source checkout:
dsh plugin --profile web add /absolute/path/to/dsh-session-lab
dsh plugin --profile headless add /absolute/path/to/dsh-session-lab
If an npm release is published later, the GitHub spec can be replaced with dsh-session-lab. Restart an already running profile after installation. Verify the composed layer before use:
dsh --profile web --dump-config | rg '# == dsh-session-lab'
The bundle uses the host ctx.skills registry, so it does not depend on project-directory watchers. A source-only alternative is to copy an individual directory under <project>/.dsh/skills/ or ~/.dsh/skills/; restart DSH if an existing session catalog does not refresh.
After installation, the bundle appears as a mounted and enabled session-lab entry in Settings → Plugins → Plugin list:

What the reports look like
The public evaluation fixture for dsh-teach contains six paired tasks and twelve fresh DSH sessions:
baseline passed: 1/6
treatment passed: 6/6
safety failures: 0
false positives: 0
routing misses: 0
This is an example evaluation, not a guarantee for every project or model. Re-run the protocol on your own tasks before promoting a generated Skill. See the full report, Chinese case study, and evaluation protocol.
Project map
This repository is one installable DSH bundle containing three independently documented Skills:
dsh-session-lab/
├── dsh-capsule/ # package and verify portable session evidence
├── dsh-teach/ # extract and evaluate reusable Skills
└── dsh-time-machine/ # compare controlled session trajectories
Use
Invoke a Skill explicitly or describe a matching task:
Use $dsh-capsule to package and verify this DSH export.
Use $dsh-teach to extract and independently evaluate a Skill from this successful session.
Use $dsh-time-machine to compare these two sessions from their common completed turn.
Read the selected SKILL.md before execution. Session exports and generated reports may contain sensitive content even after pattern-based redaction.
Verification
python3 -m pip install -r requirements-dev.txt
coverage run --branch -m pytest
coverage report --fail-under=60
ruff check .
ruff format --check .
npm test
npm pack --dry-run
pyproject.toml configures pytest and Ruff only. The project does not publish a Python wheel; the standalone Python helpers are shipped inside the npm/DSH bundle.
The suite contains synthetic security and archive fixtures plus a checked-in real-model evaluation. The full dsh-teach example records 12 fresh DSH sessions across six paired tasks: baseline passed 1/6, treatment passed 6/6, with zero safety failures, false positives, or routing misses. See the evaluation report.
Build a release artifact
mkdir -p dist
npm pack --pack-destination dist
dsh plugin --profile headless add ./dist/dsh-session-lab-0.1.0.tgz
The CI workflow validates Python 3.10–3.13, package cleanliness, Skill structure, checked-in evaluation evidence, and installation into the latest published DSH profile.
Security
Treat raw exports, patches, images, and reports as sensitive. Automatic replacement is not anonymization, and SHA-256 integrity does not authenticate a publisher. See SECURITY.md before sharing artifacts.
The repository and each standalone Skill directory are licensed under MIT; per-Skill licenses allow independent copying.
See CONTRIBUTING.md and CODE_OF_CONDUCT.md before participating, CHANGELOG.md for release history, and RELEASING.md for the public-release checklist.
Links
More in this category
zhu1090093659/dsh-web#packages/dsh-skill-explorer★ 8801
Skill center for the dsh web GUI: browse all loaded skills grouped by source, enable or disable model invocation, create new skills, and delete into a recoverable trash.
GanyuanRan/Aegis★ 1349
Software-engineering method pack for coding agents, with skills for baseline-first planning, systematic debugging, prompt hygiene, verification before completion, and repair/retirement tracking.
superdesigndev/superdesign-skill★ 786
Design skill for UI and marketing graphics on the Superdesign canvas: reads the repo for context, extracts its design system, then generates and iterates branchable design drafts, flow pages, and reusable components through the Superdesign CLI.
linhay/harmony-next.skills★ 362
HarmonyOS NEXT skill bundle for DeepSeek Harness with offline API references and DevEco, HDC, and emulator automation guidance.
dhicoc/dsh-reverse-skill★ 252
Complete reverse-skill pack (85 SKILL.md) as a DeepSeek Harness Cordis plugin: reverse engineering, authorized pentesting and security-research skill router.
sandbaseai/sandbase-skills★ 201
Mounts 88 packaged research, social-intelligence, marketing and business Agent Skills into dsh through the filesystem Skill provider.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.