Short answerThe official project is the Agent runtime at deepseek-ai/deepseek-harness, published as @deepseek-ai/dsh. It is not an unscoped Python package or a thin DeepSeek API client.

Runtime or API wrapper?

Official runtimeAgent composition

Profiles, Agent loop, tools, policy, sandbox, Sessions, model adapters, MCP, and UI.

API wrapperModel requests

Request formatting, streaming, reasoning fields, retries, or a model-specific client.

Classification ruleCheck behavior

Use owner, package scope, executable, and product boundary—not the repository name.

Current official coordinates.

Repository
deepseek-ai/deepseek-harness
Package
@deepseek-ai/dsh
GitHub release
dsh-v0.1.0-rc.8
npm tags
latest rc.7 · next rc.8
Commit
141eb6f
Handbook
Independent SandBase project

Read metadata before executing code.

npm view @deepseek-ai/dsh \
  name version dist-tags repository.url homepage --json

Then prove what the shell selected.

Remote

git remote get-url origin

Revision

git rev-parse HEAD

Executable

command -v dsh

Runtime

dsh --version

Similar names are not provenance.

Do not infer ownership from an unscoped package, repository title, executable name, copied installation command, or a fork README.

Common questions.

Which repository?

deepseek-ai/deepseek-harness

Which package?

@deepseek-ai/dsh

Python package?

A matching PyPI name does not prove official ownership.

DeepSeek-only?

No. Model providers are adapters inside the runtime.

Send work to the right owner.

RuntimeDeepSeek AI

Bugs, proposals, plugin showcases, and upstream fixes.

HandbookSandBase

Operator guides, corrections, navigation, and reproducible evidence.

Fork-only fixName the fork

Cite the commit and state that it has not shipped upstream.

Primary evidence.

Keep the provenance record.

The canonical guide includes install-safe metadata checks, source checkout verification, exact-version execution, contribution routing, and a reusable incident record.

Read and star on GitHub