dsh-keeper is an external lifecycle and compatibility manager for DeepSeek Harness. Its primary executable is the shorter dshk; dsh-keeper is an equivalent alias. The default workflow is intentionally one command:
dshk upgradeIt discovers installed DSH profiles, evaluates plugin candidates, asks once, validates the exact set in a credential-free isolated profile, applies it as one recoverable transaction, and restores the previous generation if any live check fails.
Community project; not affiliated with DeepSeek. Developer preview: DSH core upgrades are reported but not yet applied automatically.
Node.js 24 or newer is required.
npm install --global dsh-keeper
dshk upgradeFor a one-off check:
npx dsh-keeper status- Keeps the current DSH release when a newer core cannot yet be switched transactionally.
- Selects only npm plugin candidates with usable DSH/host and Node compatibility evidence.
- Treats missing peer packages as isolation evidence instead of assuming they are user-managed conflicts.
- Holds local patches, permission changes, new lifecycle scripts, mutable Git refs, and evidence-poor candidates.
- Never removes a plugin merely because its remote repository is unavailable.
- Copies no credentials, sessions, storage, SSH keys, or provider secrets into staging.
- Revalidates promoted profiles and restores package manifests, lockfiles,
node_modules, and resident services on failure.
dshk upgrade
dshk upgrade -y # skip only the question, never validation
dshk upgrade --profile web
dshk upgrade --plugins-only
dshk upgrade --preview
dshk upgrade --dry-run
dshk upgrade --json
dshk status
dsh-keeper status # equivalent long-form executableInteractive terminals show one updating spinner line during slow work. JSON and piped output remain free of progress characters. Phase timings appear only with --verbose or in JSON.
English and Simplified Chinese are built in. Chinese systems default to zh-CN; other systems default to English.
dshk --lang en status
dshk upgrade --lang zh-CN
DSH_KEEPER_LANG=zh-CN dshk statusJSON receipts are language-neutral. Compatibility and decision explanations use stable reason codes plus structured parameters; translation happens only in human-readable rendering.
declared: the candidate exposes a compatible DSH host contract.unknown: evidence is insufficient for an automatic upgrade.blocked: a DSH, Node, or required-peer contract has a confirmed conflict.
declared is not the same as verified. Automatic switching still requires exact package resolution, isolation installation, configuration composition, live revalidation, and service recovery.
macOS, Linux, and Windows are covered by native GitHub-hosted runners. The matrix runs unit/transaction tests, bilingual CLI smoke tests, package inspection, and a real DSH profile with dsh --dump-config. See Portability and localization for the exact evidence and remaining boundaries.
corepack enable
pnpm install --frozen-lockfile
pnpm check
pnpm test:real-dsh
npm pack --dry-runArchitecture and release details:
dsh-keeper 是运行在 DSH 进程之外的生命周期与兼容性工具，日常使用短命令 dshk。普通用户只需执行 dshk upgrade：系统发现候选后展示一次明确方案，用户确认才下载并隔离验证，整组通过后自动应用；任何一步失败都会恢复旧版本和原有服务。
它不是 DSH 插件，也不替代 pnpm。这样设计的原因是：当 DSH 本身或某个 profile 已经无法启动时，修复与回滚工具仍然必须可用。远端不可达只会保留当前版本并给出手动移除建议，不会触发自动卸载。
使用 --lang zh-CN 或 DSH_KEEPER_LANG=zh-CN 可固定中文；中文系统会自动选择中文。完整工程边界与验证证据见上方文档链接。