Unofficial macOS Launcher v3.0.0

DeepSeek Harness v3.0.0

官方 alpha.3，安全住进原生窗口

↓ 下载 DMG · 安装说明 · 更新历史

---

这次解决了什么

@deepseek-ai/dsh@0.1.2-alpha.3 给本机 Web UI 增加了本次启动浏览器认证，并把 Session 投影缓存升级为逐会话文件。旧版启动器若只替换版本号，会遇到三个问题：裸地址返回 401、启动令牌落入日志、删除归档会话后留下新版缓存。

v3.0.0 以主版本升级补齐了整条兼容链：

• 安全认证：严格识别本 App 启动进程输出的本机认证 URL，只在内存中交给 WKWebView，由 WebKit 完成 303 和 HttpOnly Cookie 交换。
• 日志脱敏：所有写入 harness-web.log 的内容都会抹掉 token= 后的值；令牌不会进入弹窗、偏好设置或发布包。
• 401 不再误判：外部 alpha 服务需要认证时，App 会明确提示先停止它，不会在同一个 3080 端口再启动第二个内核。
• 失败自动回退：目标版本只有在本 App 启动、认证并完成最终 HTTP 200 页面载入后才成为 last-known-good；否则自动恢复 0.1.1-rc.2。
• 双更新通道：普通用户继续使用 latest/next；只有显式启用 Alpha 实验通道后才跟进 npm alpha。
• v4 缓存兼容：归档清理同时处理旧 session_projcache.json 和新版 session_projcache/sessions/<id>.json。

安全边界

• 认证 URL 必须是精确的 http://127.0.0.1:3080/，且只有一个合法的 43 字符 token；任意外部地址或畸形值都会被拒绝。
• 归档清理只接受官方 Workspace v2、legacy projection cache v3 和直接位于 v4 records 目录中的普通 JSON 文件。
• 会话目录、项目目录和投影缓存文件只要是软链接或越过预期层级就会跳过。
• workspace.json、legacy cache 和本次目标的 v4 records 必须先成功备份；备份失败时不会移动或改写任何记录。
• API Key 仍由官方 Harness 管理。本次升级不读取、不复制、不迁移 .credentials.yaml。

兼容说明

• 默认推荐：@deepseek-ai/dsh@0.1.2-alpha.3
• 已验证回退：@deepseek-ai/dsh@0.1.1-rc.2
• 历史最低保留：@deepseek-ai/dsh@0.1.0-rc.6
• Node.js：^22.19.0 || >=24.0.0
• 默认 JSONL / Zstd Session 目录保持兼容。
• 官方 alpha.3 已移除可选 SQLite Session 后端；自定义 SQLite Profile 必须先用旧版导出。

首次打开

本版本为 ad-hoc 签名、未经 Apple 公证的公开预发布构建。请在访达中右键 App → 打开 → 再次确认；不要关闭 Gatekeeper。

---

_{非官方启动器 · 与 DeepSeek、Apple Inc. 无隶属、赞助或背书关系 · MIT · NOTICE}

Unofficial macOS Launcher v2.7.0

DeepSeek Harness v2.7.0

归档之后，可以真正删除

↓ 下载 DMG · 安装说明 · 更新历史

---

✨ 这次更新了什么

官方内核只提供归档：会话从侧边栏消失，完整记录仍然留在 ~/.dsh/sessions 里，一个字节都没少。v2.7.0 让启动器接手最后一步。

• 🗑️ 一键清除 —— App 菜单新增 清除已归档的会话…（N 个），标题里直接写明有多少个可清；没有归档会话时置灰。
• 🧾 先算再问 —— 确认框写明这次会清掉几个会话、多少体积，确认之后才动手。
• ♻️ 进废纸篓，不是凭空消失 —— 会话记录移入废纸篓，误清可以直接拖回来。
• 🧹 列表一起清干净 —— 同时清理 workspace.json 的归档集合与工作区成员，以及 session_projcache.json 里的标题和统计缓存，侧边栏不留残影。
• 🛟 改写前自动备份 —— 两个列表文件在改写前备份到 ~/Library/Logs/DeepSeek Harness/storage-backups/，只保留最近 5 份。

Note

内核会把会话列表常驻内存并回写，所以清除时会先停止再重启 Harness 内核，工作台里未发送的内容可能丢失。如果 127.0.0.1:3080 是你在终端里启动的服务，启动器只提示你先停掉它，不会擅自终止外部进程。

🔒 安全边界

• 只删除 <DSH_HOME>/sessions/<项目>/<会话> 这一层，路径形状不符即跳过并报告，不会波及其他目录。
• 某个目录没能移入废纸篓时，它的列表条目会被保留，不会产生看不见的孤儿记录。
• 子代理会话记录不会被连带删除：父子关系只存在于 zstd 压缩的日志头内，启动器不做猜测。
• DSH_HOME 按官方规则解析（含 ~ 展开、空值视为未设置），不写死 ~/.dsh。
• 服务仍只监听 127.0.0.1:3080；不读取、迁移或修改 API Key 与工作区数据。

📦 环境要求

项目	要求
系统	macOS 12 或更高
芯片	Apple Silicon
Node.js	22.19–22.x 或 24.0+（不支持 23.x）
Harness 内核	@deepseek-ai/dsh@0.1.0-rc.6，首次启动经你确认后通过 npx 获取

⚠️ 首次打开

本版本为 ad-hoc 签名、未经 Apple 公证的预发布版。请在访达中右键 App → 打开 → 再次确认；不要关闭 Gatekeeper。

🔐 校验下载

cd ~/Downloads
shasum -a 256 -c DeepSeek-Harness-v2.7.0-macOS-arm64.dmg.sha256

---

_{非官方启动器 · 与 DeepSeek、Apple Inc. 无隶属、赞助或背书关系 · MIT · NOTICE}

Unofficial macOS Launcher v2.6.0

DeepSeek Harness v2.6.0

内核回退，一次退一步

↓ 下载 DMG · 安装说明 · 更新历史

---

✨ 这次更新了什么

以前回退只有一个目的地：随 App 内置的默认版本。连着更新过几次之后，一次回退会把中间那些能用的版本全部跳过。

现在改成按历史逐级回退：

• 🕘 记住走过的路 —— 每次切换内核前，把你正在用的那一版记入历史，最多 10 条。
• 🎯 写明退到哪 —— 菜单项从「恢复内置内核」变成 回退到上一版内核 0.1.0-rc.6，标题里直接写明目标版本。
• ↩️ 连点连退 —— 一路沿历史退回内置版本；没有可退目标时菜单置灰，不会再出现「点了等于没点」。
• 🛡️ 不会退坏 —— 回退目标按 SemVer 校验，且永不低于内置版本，启动器升级后也不会留下跑不起来的版本。

Note

版本历史从 v2.6.0 开始累积，更早构建的切换记录无法追溯。

🔒 安全边界没有变化

• 服务仍只监听 127.0.0.1:3080，不对局域网暴露。
• 不读取、迁移或修改 API Key、会话与工作区数据。
• 更新信息只来自固定的 npm 官方 dist-tags 地址，异常版本号会被拒绝。

📦 环境要求

项目	要求
系统	macOS 12 或更高
芯片	Apple Silicon
Node.js	22.19–22.x 或 24.0+（不支持 23.x）
Harness 内核	@deepseek-ai/dsh@0.1.0-rc.6，首次启动经你确认后通过 npx 获取

⚠️ 首次打开

本版本为 ad-hoc 签名、未经 Apple 公证的预发布版。请在访达中右键 App → 打开 → 再次确认；不要关闭 Gatekeeper。

🔐 校验下载

cd ~/Downloads
shasum -a 256 -c DeepSeek-Harness-v2.6.0-macOS-arm64.dmg.sha256

---

_{非官方启动器 · 与 DeepSeek、Apple Inc. 无隶属、赞助或背书关系 · MIT · NOTICE}

Unofficial macOS Launcher v2.5.0

Unofficial macOS Launcher v2.5.0

Native presentation and browser-launch fix release.

Highlights

• Blends the standard macOS title bar into the Harness workspace and follows the page's light or dark appearance.
• Removes common browser tells from the embedded workspace: link previews, hand cursors, draggable page assets, whole-page rubber-band scrolling, WebKit-style context actions, and selectable navigation chrome.
• Keeps text editing native by preserving cut, copy, paste, undo, redo, delete, and select-all commands where they apply.

Fixed

• Starts the official Harness Web UI with --no-open, so launching the native App no longer opens the same localhost workspace in Safari or another default browser.
• Keeps external HTTP and HTTPS links opening in the default browser while the local Harness workspace remains inside the App.

Safety and compatibility

• The service remains bound to 127.0.0.1:3080; this release does not expose Harness to the LAN.
• Model credentials, Harness sessions, workspaces, and the user-selected official core version are not migrated or copied by the launcher.
• The bundled rollback target remains the previously verified @deepseek-ai/dsh@0.1.0-rc.6.

Distribution status

This build is distributed as an ad-hoc signed, non-notarized prerelease. On first launch, use Finder → right-click → Open; do not disable Gatekeeper.

---

v2.4.0

Native Harness core update release.

Why this matters

The native macOS launcher no longer has to be repackaged every time DeepSeek publishes a new Harness core. Users can keep the verified launcher window, explicitly check the official npm channel, and move to the newest valid release without manually editing commands. The update remains user-confirmed and reversible because upstream is still a developer preview.

Added

• Added a native “Check and update Harness core” menu action backed only by the official npm dist-tags endpoint.
• Automatically selects the higher valid latest or next semantic version after user confirmation.
• Persists the selected official package version and uses it for subsequent npx launches.
• Added a native rollback action for the bundled verified 0.1.0-rc.6 version.

Safety

• Rejects malformed package versions before constructing the npx package specifier.
• Restarts only a Harness process launched and owned by this App. An external service on port 3080 is never terminated automatically.
• Keeps updates user-initiated because upstream remains a developer preview with possible breaking changes.

---

v2.3.1

Interaction fix release.

Fixed

• Added persistent page/font zoom through the native View menu, plus Command-Plus, Command-Minus, and Command-0 shortcuts.
• Restored the standard macOS title bar so the window can be repositioned by dragging it with the mouse.
• Kept the embedded Harness content inside the standard content area so WebKit no longer captures title-bar drag gestures.

Distribution status

This build is distributed as an ad-hoc signed, non-notarized prerelease. On first launch, use Finder → right-click → Open; do not disable Gatekeeper.

---

v2.3

Initial public beta of the portable macOS launcher.

Included

• Native WKWebView window tied to the whale Dock icon.
• Portable workspace selection with no machine-specific user paths.
• First-run confirmation before npx obtains the pinned official Harness package.
• Localhost-only Harness page loading and external-link handoff to the default browser.
• Drag-to-Applications DMG and SHA-256 checksum.

Requirements

• macOS 12 or newer.
• Apple Silicon.
• Node.js 22.19+ or 24+ with npx.

Important

This build is ad-hoc signed and not notarized because no Apple Developer ID certificate is available. It is published as a prerelease. On first launch, use Finder → right-click → Open. Do not disable Gatekeeper.

This is an unofficial launcher and is not affiliated with or endorsed by DeepSeek.

Unofficial macOS Launcher v2.3.1

Unofficial macOS Launcher v2.3.1

Interaction fix release.

Fixed

• Added persistent page/font zoom through the native View menu, plus Command-Plus, Command-Minus, and Command-0 shortcuts.
• Restored the standard macOS title bar so the window can be repositioned by dragging it with the mouse.
• Kept the embedded Harness content inside the standard content area so WebKit no longer captures title-bar drag gestures.

Distribution status

This build is distributed as an ad-hoc signed, non-notarized prerelease. On first launch, use Finder → right-click → Open; do not disable Gatekeeper.

---

v2.3

Initial public beta of the portable macOS launcher.

Included

• Native WKWebView window tied to the whale Dock icon.
• Portable workspace selection with no machine-specific user paths.
• First-run confirmation before npx obtains the pinned official Harness package.
• Localhost-only Harness page loading and external-link handoff to the default browser.
• Drag-to-Applications DMG and SHA-256 checksum.

Requirements

• macOS 12 or newer.
• Apple Silicon.
• Node.js 22.19+ or 24+ with npx.

Important

This build is ad-hoc signed and not notarized because no Apple Developer ID certificate is available. It is published as a prerelease. On first launch, use Finder → right-click → Open. Do not disable Gatekeeper.

This is an unofficial launcher and is not affiliated with or endorsed by DeepSeek.

Unofficial macOS Launcher v2.3

Unofficial macOS Launcher v2.3

Initial public beta of the portable macOS launcher.

Included

• Native WKWebView window tied to the whale Dock icon.
• Portable workspace selection with no machine-specific user paths.
• First-run confirmation before npx obtains the pinned official Harness package.
• Localhost-only Harness page loading and external-link handoff to the default browser.
• Drag-to-Applications DMG and SHA-256 checksum.

Requirements

• macOS 12 or newer.
• Apple Silicon.
• Node.js 22.19+ or 24+ with npx.

Important

This build is ad-hoc signed and not notarized because no Apple Developer ID certificate is available. It is published as a prerelease. On first launch, use Finder → right-click → Open. Do not disable Gatekeeper.

This is an unofficial launcher and is not affiliated with or endorsed by DeepSeek.