
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
weshop-dsh-plugin
Advanced tools
Native Cordis WeShop canvas, tools, skills, and Web UI for DeepSeek Harness
An AI visual workspace for e-commerce creation, built into DeepSeek Harness.
Select products, models, or reference images on an infinite canvas. Describe the result you want in natural language, and watch it appear right next to the conversation.
Read the Chinese README · Get a WeShop API Key · Contact us
[!IMPORTANT] Install and successfully run DeepSeek Harness before installing this plugin. This repository is a Harness plugin, not a standalone application.
WeShop for DeepSeek Harness brings WeShop's e-commerce visual workspace directly into DeepSeek Harness, so creative work happens on the same infinite canvas as your conversation instead of a separate tool.
It is built for workflows like:
@ references for selected items.weshop-canvas agent preset and WeShop Skills, ready on first use.WESHOP_API_KEY; the key never reaches browser state or the model..tgz for installation on any machine running Harness.| Pain Point (Traditional) | The WeShop Workspace |
|---|---|
| Tool-switching: product photos, edits, and video each live in a different app. | One canvas: photography, try-on, background replacement, edits, and video happen in the same space as your conversation. |
| Manual round-trips: generate somewhere else, then download and re-upload. | Automatic publishing: results are added straight to the canvas as soon as they're ready. |
| Prompt-only workflows: hard to point at this product or this reference image. | Spatial selection: select items on the canvas and reference them with @ right in chat. |
| Opaque key handling: unclear where credentials are stored. | Restricted local storage: your API Key is saved by the local Harness Host and never returned to the browser or model. |
Install Node.js. We recommend the current DeepSeek Harness release: it includes a native plugin manager and creates the Web profile automatically.
With Harness closed, run one command:
npx @deepseek-ai/dsh plugin --profile web add weshop-dsh-plugin
This installs WeShop, creates the Harness Web profile when needed, and enables its bundle automatically. No GitHub account, access token, pnpm configuration, or manual file editing is required.
Then restart Harness:
npx @deepseek-ai/dsh web
Create or open a task, then choose the WeShop Canvas preset. The preset is installed automatically on first activation.
If you use the community plugin market, install it once and restart Harness:
dsh plugin --profile web add dshmarket
Then open Settings → Plugin Market, search for WeShop, and install it there.
For the simplest update, close Harness and run:
npx @deepseek-ai/dsh plugin --profile web update weshop-dsh-plugin
If you already use the public npm package, this also works:
cd ~/.dsh/profiles/web
pnpm update weshop-dsh-plugin
Upgrading from an older WeShop install or older Harness release? Start Harness once with
npx @deepseek-ai/dsh web, close it, then runnpx weshop-dsh-plugin setup. It replaces legacy.tgz,@weshop/dsh-canvas,@weshop/dsh-weshop-2-0, and@weshopai/dsh-weshop-2-0installs. Afterwards, use the update command above.
Access to this private repository is required.
git clone git@github.com:weshopai/weshop-dsh-plugin.git
cd weshop-dsh-plugin
corepack enable
pnpm install --frozen-lockfile
pnpm build
pnpm pack
This creates a versioned file such as weshop-dsh-plugin-1.0.2.tgz.
Install it into the Harness Web profile:
PLUGIN_TARBALL="/absolute/path/to/weshop-dsh-plugin-1.0.2.tgz"
npx @deepseek-ai/dsh plugin --profile web add "$PLUGIN_TARBALL"
Open the canvas and select Configure API Key in the top bar. The key is saved by the local Harness Host with restricted file permissions and is never returned to the browser, canvas state, or model.
You may instead provide the key before starting Harness:
export WESHOP_API_KEY="your-key"
npx @deepseek-ai/dsh web
Get a key from WeShop OpenAPI.
pnpm install --frozen-lockfile
pnpm build
pnpm pack --dry-run
Package entry points and runtime contributions:
lib/index.js — Cordis Host plugin, tools, Skills, routes, and private configuration.lib/client.js — browser canvas and synchronized conversation UI.cordis.patch.yml — bundle composition entry.presets/weshop-canvas/ — bundled WeShop agent preset.skills/ — bundled canvas and WeShop OpenAPI instructions.For support or partnerships, email hi@weshop.ai.
This software is available under the MIT License.
FAQs
Native Cordis WeShop canvas, tools, skills, and Web UI for DeepSeek Harness
The npm package weshop-dsh-plugin receives a total of 0 weekly downloads. As such, weshop-dsh-plugin popularity was classified as not popular.
We found that weshop-dsh-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.