Huanqi Cao
ab0195f802
The script made the caller choose a mode, so one sandbox failure cost two approvals: one to diagnose and one to repair. It now has no modes. A single run adds the signed-in user's full-control allow ACE to the directories on the chain that lack effective WRITE_DAC or WRITE_OWNER, removes explicit package allow ACEs at their sources, ancestor first, and verifies every change by re-reading it. A directory the caller cannot provision also has its subtree checked for explicit package allow ACEs in that same run: the sandbox reports its provisioning failure on the workspace root while the conflicting entry often sits deeper, and the walk is bounded and reports truncation. The authorized root itself may be granted and restored, so a workspace root can repair and roll itself back. Recovery artifacts shrink to one record and one script per modified object; the unused icacls save file and the duplicated command file are gone. The skill, its README paragraphs and the script tests follow the single command: the former -Fix, -GrantFullControl and -Compact switches are rejected.
DeepSeek Harness
English | 中文
DeepSeek Harness (dsh) is an open-source agent harness developed by DeepSeek AI.
It is built on an everything-is-a-plugin architecture and powered by Cordis, whose design is described in A Programming Paradigm for Spatiotemporal Composability.
Documentation: https://deepseek-harness.github.io/deepseek-harness/
Developer preview
DeepSeek Harness is in developer preview and iterating rapidly. THERE WILL BE COMPATIBILITY-BREAKING CHANGES.
Review the safety notice before running the project.
Run
Run from npm
Install Node.js, then run:
npx @deepseek-ai/dsh web
The command starts the Web UI at http://127.0.0.1:3080 by default and opens it in the default browser for a local launch. An SSH launch only prints the host URL because the SSH client or editor owns the local forwarded address. Pass --no-open to run the server without opening a browser. See Web UI guide.
Run from source
To run from a repository checkout:
git clone https://github.com/deepseek-ai/deepseek-harness.git
cd deepseek-harness
pnpm install
pnpm run build
pnpm dsh web
pnpm run build prepares the repository artifacts. pnpm dsh web uses those built artifacts without rebuilding.
Community and support
- Submit feedback or bug reports through GitHub Discussions.
- Add the
dsh-plugintopic to your plugin repository for discoverability. - Join DeepSeek Harness Discord community.
Contributing
See CONTRIBUTING.md.
Development
Start with the development guide and architecture documentation.
pnpm run dev:web builds, serves, and rebuilds client bundles on source edits in one terminal, and make help lists the matching Make targets for Web and Desktop; the guide's application commands section owns the full table.
For agents, follow AGENTS.md.
Citation
@misc{deepseek-harness2026,
title={DeepSeek Harness: Everything is a Plugin},
author={DeepSeek-AI},
year={2026},
publisher={GitHub},
howpublished={\url{https://github.com/deepseek-ai/deepseek-harness}},
}
License
Third-party dependencies and their licenses are disclosed in THIRD_PARTY_NOTICES.md.