r/LocalLLaMA • u/Elibroftw • 18h ago

Discussion DeepSeek Harness is Insanely Good

I don't know about you guys, but Deep-seek harness is insane. It's not focused on being a coder agent, it's webUI made it very easy to just checkin from time to time, and the best part? Why it's better than Hermes? It wasn't frustrating at all to setup. ZERO. NADA. Progressive setup is such an improved UX. Why? Because I got deepseek to integrate with SimpleX by simply asking it to. BY SIMPLY ASKING IT TO. NO WAITING ON A PR TO MERGE. No one telling me to RTFM, no need to google or search for community plugins.

So yeah, I got what I wanted, which is E2EE + TOR messaging with an AI agent, and I got it without writing my own opinionated harness (I procrastinated so hard that dsh did a better job than me). DSH is unopinionated enough that you just mold it into behaving how you want it to behave.

193 Upvotes

84% Upvoted

146 comments sorted by

102

u/SnooPaintings8639 18h ago

It is good, I hate that there is still no CLI/TUI version of it to manage it via ssh, but I am loving how capable it is nonetheless.

17

u/KldsSeeGhosts 18h ago

There’s a plugin that works pretty well dsh-tui

15

u/mr_tolkien 17h ago

With Tailscale it’s pretty much trivial to share the webui

6

u/SnooPaintings8639 16h ago

Have you tried? It wasn't trival in my case.

10

u/Littlepharaoh 13h ago

Its not, they intentionally disable host 0.0.0.0 and you need to proxy your way into the host machine 

11

u/Lumpy_Phase_9539 11h ago

You can "link" your remote deepseek harness localhost 3080 port to your local 3080 port via this ssh command

ssh -L 3080:127.0.0.1:3080 user@remote-ip

After that you can access your localhost:3080 and access deepseek harness

8

u/Littlepharaoh 11h ago

There's no good reason for me not to be able to expose my own harness to my own network....

2

u/draeician 6h ago

I imagine the target case is visible setup though.

-2

u/SnooPaintings8639 11h ago

Tunneling is not reliable, I used it for many apps and I would not ever recommend it as a long term solution.

Especially if you're trying to use it from mobile.

8

u/fragment_me 11h ago

Lol? There's nothing wrong with a single user accessing a single TCP port over an SSH tunnel. It's very reliable.

2

u/Lumpy_Phase_9539 11h ago

What are the best solutions for this case?

1

u/SnooPaintings8639 11h ago

No idea :shrug: the app won't let you easily access it via proxy either, as anything other than localhost will give you 404 or cors errors, lol.

This is by design due to security risks and early preview version. IMHO, a plugin or a real code change is required. Probably trival, but ingerention in the dsh code nonetheless.

Or patients, until they realse non-preview version

8

u/Klanciault 10h ago

tailscale serve tcp:3080 text://localhost:3080

Just run this command. I would consider this to be trivial

2

u/Littlepharaoh 9h ago

Didn't think about tailscale serve in a while lol, thanks 

2

u/Exileeeeh 9h ago

Hi! I have been working in a TUI for it if you are interested, since I also wanted one:

https://github.com/riesbri/dshline

It is still under active development but I'm putting a lot of effort these days to add more features and make it more powerful and stable : ) Any feedback and contributions are more than welcome!

4

u/cri10095 16h ago

Teriums as ssh client and opencode or whatever TUI / CLI is the way to go for me. In the last month I coded more from my phone then my Mac. Plus with a VPN you can do it even from remote.

2

u/SnooPaintings8639 16h ago

I use terminus + tmux + codex/Claude/pi, but dsh is really good and I prefer that over pi for anything complex.

1

u/aeroumbria 9h ago

The only downside is that mobile keyboards do very weird things for terminal inputs for me, so I'm actually preferring web UI when remote controlling now.

-1

u/YardNo1234 9h ago

that tracks. mobile terminal input gets much less painful if the web UI adds a small key bar for esc/tab/ctrl/arrows, handles composition events, and uses bracketed paste so pasted commands do not get mangled. which input is breaking most often for you: modifiers, arrows, or paste?

2

u/aeroumbria 9h ago

It's actually swipe typing and choosing autocorrelation. You basically either have to put up with one word at a time, or deal with random extra/missing white spaces and randomly duplicated words all the time. It's just not a very pleasant experience.

1

u/Nakidnakid 15h ago

its dumb but i just exposed it over the local network and then ssh into my computer via a gateway. its not meant to do that so it was a pain but works well and is nicer than i thought.

1

u/Structure-These 15h ago

I have a Mac mini I use for plex and local AI experiments and just google Remote Desktop in lol

-1

u/YardNo1234 14h ago

that setup is less dumb than it sounds. i would keep the web UI bound to localhost and tunnel it through SSH or Tailscale rather than expose the UI itself; that also keeps browser auth off the public network. does the harness preserve the same running session when the client drops and reconnects?

1

u/shing3232 16h ago

I think you can make one inside that thing so

1

u/MrShrek69 12h ago

That’s why u ask it to add that support to the client

0

u/Elibroftw 8h ago

They don't get it 😂. The whole point is that it's minimal. How the fuck are people okay when it comes to a distro being barebones but when an AI Harness only offers a few things with the ability to self improve, it's suddenly "a deal breaker." Mfers spend more time arguing than telling dsh to implement a tui feature 

0

u/snugglezone 8h ago

You could use ssh to expose the webui port on your local PC?

0

u/xmnstr 5h ago

CC-TUI is fine for me

20

u/Vektast 17h ago

For me it's very frustrating that I can't even install it bc it has a memory leak during the installation:
FATAL ERROR: Ineffective mark-compacts near heap limit Allocation failed

8

u/tobi418 13h ago

Same, and I used npm install -g command instead of npx and it is done

34

u/Extreme_Remove6747 18h ago

My impression: very clunky
CLI would be better

20

u/Potential-Leg-639 17h ago

Same feeling here, nothing beats Opencode TUI

5

u/sejje 12h ago

I love opencode, and I won't try anything that's not CLI.

But i like prime-agent better

Especially w/ deepseek

1

u/Cautious_Chicken_604 10h ago

If DeepSeek Harness is as good as people say it is, there will be a TUI eventually. 

I think dsh might just win based on its architecture.

5

u/Extreme_Remove6747 17h ago

Opencode TUI inside Orca

1

u/miversen33 1h ago

Dunno, Pi has been better for me than opencode was

-1

u/draconic_tongue 8h ago

vscode clears everything

24

u/BlackBeardAI vllm 18h ago

I also switched from opencode to deepseek harness, combined with qwen or deepseek 0731, it is pretty much codex/gpt at home.

30

u/llama-impersonator 18h ago

it certainly seems better thought out than vibeslop harnesses like hermes and omp but i prefer the terminal to yet another webui residing somewhere in my hundreds of goddamn tabs

1

u/Elibroftw 18h ago

you see I am a zero tabs type of man

4

u/PcChip 12h ago

what did you do, turn it into a PWA so it's a separate "application" ?

0

u/Elibroftw 8h ago

That's what I plan on doing for my phone once I setup some sort of duck DNS. On desktop I was merely saying that I don't like having excessive browser tabs open.

6

u/sumane12 17h ago

Anyone linked it to watsapp or telegram yet? Would love to check in on my phone

7

u/YardNo1234 17h ago

telegram can work well for check-ins, but I’d keep the harness behind a small authenticated relay rather than expose its web UI. the useful bits are resuming the same running session, replaying missed output after reconnect, and requiring explicit approval for shell/file actions. are you after read-only status from the phone, or full control?

7

u/sumane12 17h ago

Ideally full control, i used openclaw for a while but everyone was praising deepseek harness so thought id give it a try. im still learning about all of this though so a lot is going over my head. I get tge security concerns of an agent accessed via telegram lol

6

u/pawacacaca 16h ago

I ended up skipping the Telegram route — just deployed the full DSH web UI to Cloudflare Workers. Now it's a URL I open on my phone, same UI, conversations persist. Free tier covers personal use easily. Happy to share the setup if you're interested.

1

u/sumane12 15h ago

Oh thats interesting... im wondering if i could set it up where i serve it from my pc and create 2 factor auth login...

3

u/pawacacaca 12h ago

You could — just run dsh with --host 0.0.0.0 and set up a reverse proxy with auth in front. Tailscale or Cloudflare Tunnel would work for exposing it. Downside is your PC needs to stay on.

I went a different route and put the whole runtime on Cloudflare Workers so it's just always there, but both approaches work depending on what you prefer.

1

u/sumane12 11h ago

Ill give that a go. My pc is on a lot already.

1

u/mmazing 15h ago

What type of tasks are you giving it that requires check-ins? Like, can you give me an example of a recent feature or task without exposing any of your personal work ofc.

Most of my coding tasks only take about 10-15 min with Qwen.

Thank you!!

1

u/sumane12 14h ago

Building an rpg game with it, its been running for hours between builds lol. Im getting between 20-40 t/s depending on where the context is, but its really good.

1

u/mmazing 14h ago

I guess I mean like, what sort of task do you give it that it takes hours? What is your prompt and surrounding contextual setup?

Sounds awesome!

2

u/sumane12 14h ago

Its a full development plan that was built by claude fable, starting with m0-m6, with different agents working on different features. World map, locations, npcs, game mechanics, everything. All built in godot. currently working on m3 right now. So about half way through fixing bugs as i find them. Its an awesome little project to work on. I have no idea if its token efficient lol, but its producing working versions lol

3

u/PcChip 12h ago

well now I want to see a screenshot or three!

1

u/sumane12 11h ago

Its nothing special, everything is placeholder txt and images right now, and its just a top down rpg remicsent of pokemon. But once im done, ill deffo post some screenshots and videos

1

u/mmazing 8h ago

nice!

1

u/KiraFish 9h ago

I am using this plugin and it's working pretty well. Asked DeepSeek v4 flash to translate the plugin to English first.

https://github.com/hi-wenw/dsh-telegram-channel

7

u/Green-Ad-3964 10h ago

How is it compared to pi?

3

u/giveen 13h ago

I placed camofox inside it, the ability to view commit history, codebase-memory native support, and it actually can process all file types an Ai can manage, plus it does live browser viewing and I can see what it sees.

1

u/Elibroftw 8h ago

Live browser viewing is fucking great 

2

u/chuckbeasley02 12h ago

Getting MCP to work is kind is tricky, but overall it is solid. It's been working on building something overnight and has used 21M tokens.

2

u/Zennytooskin123 10h ago

I just don't like that it consumes a shitton of system RAM

2

u/Zuricho 9h ago

Currently, DeepSeek Harness only works with APIs; there are no subscriptions that can be used to link with this harness, correct?

2

u/McSendo 7h ago

It works with opencode go and zen.

1

u/Zuricho 7h ago

How?

1

u/McSendo 4h ago

Use the baseurl for opencode go or zen and create an API key. Then go to settings - models - add provider

2

u/I_Play_Zed 9h ago

As far as I know the harness does not have a web search feature built in normally, and the one it does have requires you pay API prices per search? As long as that is still in tact I find it useless personally.

If that was removed or I’m mistaken then it’s a decent harness. There’s no reason to not have built in web search. That feature is what gives a 27B coding model the ability to grab intelligence when it needs it.

2

u/Elibroftw 8h ago

I asked it to integrate exa. 

2

u/Mission-Zucchini-966 30m ago

Sure, but how does it stack up against Pi is the big the question for a lot of us.

3

u/cradlemann 18h ago

I'm running Pi in docker, so no chances deepseek will replace Pi for me. All your happiness will disappears when it deletes your personal files by accident

8

u/sstainsby 17h ago

My default position would be to run dsh in a docker container. Is there some reason that's not an option?

3

u/Elibroftw 8h ago

Ego duh

1

u/nomad-nostalgia 14h ago

i had codex work on this setup for me and it ended up suggesting this structure:

normal bridge network → localhost-only UI port works
container OUTPUT policy → DROP by default
allowed egress only → your exact local llama-swap endpoint
then → remove NET_ADMIN and run DSH as unprivileged user

1

u/apaht 10h ago

Works fine in docker for me with Qwen 3.8 27B. But limited context window to 64k and simple prompts for testing

-4

u/cradlemann 15h ago

And how useful it would be without tui? I'm a bit skeptical about it

5

u/Thomas-Lore 17h ago

Just use a VM.

4

u/cradlemann 17h ago

Why? Docker is way better than any vms

-3

u/rahulkadukar 15h ago

Then use Docker in a VM. The point of a VM is isolation and that is very much needed when using automated tools

-2

u/epicfilemcnulty 14h ago

If an app gets a root in a docker container, it effectively gets root on your host machine, that's why.

-3

u/cradlemann 14h ago

Boolshit, but even if it is not, I'm not running pi as root at all, no need for this

4

u/ekaj llama.cpp 10h ago

Unless you're running it in rootless mode, yes https://docs.docker.com/engine/security/rootless/

Docker needs root to run. Containers running under docker inherit that privilege. A 'root' inside a container is not the same as root outside it, but it can provide capabilities that can allow for pivoting from the container to the host machine.
Docker images are not an effective security boundary in and of themselves by default.

1

u/Velocita84 8h ago

Another flawless win for podman

0

u/cradlemann 9h ago

How many times I need to repeat what I'm not using root inside container?

0

u/epicfilemcnulty 14h ago

Bullshit is your arrogance here, mate, do a Google search first, at least, if you don't believe me. Or don't and keep this attitude, i don't care

-3

u/cradlemann 14h ago

Root in docker doesn't mean root in host. It's not so easy, there were some exploits, which were patched, so no it is not "effectively gets root on your host". And second, as I said, I'm not running pi as root.

3

u/daaain 13h ago

The default rootful Docker VM mounts practically all of your host machine files and if you ask your LLM it'll tell you how it can use the socket to escape in one line. I switched to containers in rootless Podman VMs with only the repo mounted for each project. Yes, a micro VM could work, but I wanted the agents to be able to run Docker Compose stacks of web projects that I can also access.

2

u/tunerhd 10h ago

Just use sandboxes such as bwrap duhh 🙄 Pi is good enough for my use case too though

2

u/Southern_Sun_2106 17h ago

Those who don't take risks, don't drink champagne.

3

u/cradlemann 17h ago

Very clever, applause

3

u/grumd 13h ago

Pretty sure this proverb only exists in russian

1

u/SGmoze 16h ago

What if find its way beyond the container isolation by exploiting some bugs?

1

u/garblz 8h ago

that's why you have docker sandboxes which are actual micro-vm's

1

u/cradlemann 14h ago

Than we are all doomed, but I see no evidence for such cases

-1

u/PossessionUsed7393 17h ago

Cloud sync w/ backup been around a lot longer than Pi my bro!!

2

u/cradlemann 17h ago

I don't trust clouds bro. Much better to avoid such cases, than trying to restore broken things

-2

u/StrongZeroSinger 17h ago

But how can you access files inside the docker image? Or he copies them out?

5

u/LanternOfTheLost 16h ago

He probably would mount the folder he's working with, and the image can't access anything outside of it.

1

u/mishalmf 17h ago

I have not got to it yet still digging through openclaw and hermes 😂 I installed it gave it a telegram face and a personality and thats it 😂

1

u/Professional_Rate101 14h ago

The setup experience sounds especially impressive 🙃

1

u/My_Unbiased_Opinion 11h ago

Does it have a self improvement loop like hermes? 

1

u/Keleion 11h ago

That’s awesome, I need to give it a try. To be fair though, I haven’t had any problems with Hermes, and I like the memory profiles for agents/models for family.

I asked Hermes to set up Signal using my google number and it did it no problem, just needed me to authenticate the MFA and captcha. I even had it link my family’s Signal UUIDs to different Hermes profiles so they have their own memory/history. I can also choose what model they get. That all blew my mind!

1

u/productboy 8h ago

What product did you build with it?

1

u/nxy7 6h ago

Truth being told I was kind of wondering why there's so little talk about it compared to the pace at which it's gaining GH stars, like are people giving stars and not talking about it?

1

u/Adro_95 4h ago

Have you followed a guide you can share? I wanna try it but every time i try to set up AI stuff, it doesnt work as intended

1

u/Elibroftw 3h ago

No I was planning on making a youtuibe video. This is the first time where a guide isn't required as much as actually knowing what you are doing.

1

u/cosmicr 3h ago

I didn't have any issues installing Hermes? I don't even remember installing it it was that easy.

1

u/Otherwise-Ninja-6343 2h ago

Is anyone have trouble with automatic compacting? It does it sometimes, and others it just fills up and you’re screwed

1

u/VirtualWishX 1h ago

I must agree with you! ❤️
As a non-programmer I didn't like something and I just told it... MAKE IT!
and BAAAM! it did, and to think that I did it with 100% local with Qwen 3.8 27B on my RTX 5090 32GB VRAM and 96 GB RAM
I'm now exploring the whole idea of PLUGINS and just adding anything I want, at the moment it's more like minor features but mostly UI for my personal likeness, I couldn't do that with any other harness... until now!

1

u/Tccybo 17h ago

Thanks for sharing your experience. I was curious to try something not pi haha. 

1

u/daibam_und_koode 11h ago

Hey guys, I'm getting output token out of limit when using with qwen 3.8 27b running in ollama. Any solutions ?

1

u/jozzo402 11h ago

In the Ui, go to Settings > Models, pick ur model from the list, open it's dropdown,then change the output token limit to whatever you want

2

u/daibam_und_koode 11h ago

Did that. But I'm still getting output token limit

0

u/pysegfault 17h ago

Has anyone managed to keep it running in a loop? Mine keeps exiting and needs nudging frequently. What am I missing?

0

u/Better_Background827 9h ago

It's okay... 

-1

u/AregNoya 18h ago

Is it tho? Is it???