Skip to content

dsh-project-anchor v0.1.0-preview.1

Pre-release
Pre-release

Choose a tag to compare

View all tags
@KKLL2025 KKLL2025 released this 16 Aug 08:38
v0.1.0-preview.1
a69e6ff

dsh-project-anchor v0.1.0-preview.1

This is a source-only GitHub Preview for DeepSeek Harness 0.1.0-rc.6.
It is not published to npm.

What's new

  • Adds consent-gated cold recovery for the exact DSH Goal linked to an active
    Anchor. Missing state, revision drift, deferral, unavailable questions, and
    resume failure leave the Goal association and current Milestone unchanged.
  • Adds a complete Simplified Chinese README covering installation, first use,
    recovery, limits, removal, and maintainer verification.
  • Makes fast, continuity, and high-risk/release execution intensity
    explicit in the bundled drive-large-project guidance without adding another
    persisted planner or risk field to the native plugin.
  • Updates frozen-Skill provenance to the merged upstream revision while keeping
    all bundled payload bytes unchanged and hash-verified.

Reviewed source

Install only this reviewed 40-character commit:

a69e6ff868767b3bb5fb58ac94c4fd9a9b6378ac

Fixed-SHA CI passed all four jobs on Node 22.19.0 and 24.11.0, including the
Windows clean-source release-candidate jobs:

https://github.com/KKLL2025/dsh-project-anchor/actions/runs/31933832239

Install

Require Node ^22.19.0 || >=24.11.0, pnpm on PATH, and DSH 0.1.0-rc.6.

npm install --global @deepseek-ai/dsh@0.1.0-rc.6
dsh --version
dsh plugin --profile web add github:KKLL2025/dsh-project-anchor#a69e6ff868767b3bb5fb58ac94c4fd9a9b6378ac

The first add is expected to stop before running the GitHub package's prepare
script. With the verified pnpm 11.21.0 route, pnpm printed this exact key:

allowBuilds:
  dsh-project-anchor@https://codeload.github.com/KKLL2025/dsh-project-anchor/tar.gz/a69e6ff868767b3bb5fb58ac94c4fd9a9b6378ac: true

Review the fixed source before granting that host-code permission. Then repeat
the same add command and verify the installed dependency and composed bundle:

dsh plugin --profile web add github:KKLL2025/dsh-project-anchor#a69e6ff868767b3bb5fb58ac94c4fd9a9b6378ac
dsh plugin --profile web list dsh-project-anchor --depth 0
dsh --profile web --dump-config

The list must contain dsh-project-anchor@0.1.0-preview.1; the config dump must
contain exactly one # == dsh-project-anchor layer. Restart an already-running
DSH profile after installation.

Verification evidence

  • Clean-source local RC: 10 test files and 80 tests passed; one 32-file artifact
    passed onboarding, consumer, and local Git-source smokes.
  • Local RC artifact SHA-256:
    545bf2ac4b8a9baf91eca6cf12df75341bc4220f977c3d5433bcfd63dddc225e.
  • A clean DSH profile installed from the public GitHub full SHA using DSH
    0.1.0-rc.6 and pnpm 11.21.0. The run verified default prepare denial, the
    exact full-SHA codeload allowBuilds key, source prepare/build, the lockfile
    revision, package version, all three frozen Skills, and one bundle layer. It
    did not boot the profile or send a prompt.
  • The public repository carries the dsh-plugin topic and has GitHub private
    vulnerability reporting enabled.

Compatibility and security limits

  • DSH remains in developer preview; later host revisions may require plugin
    changes.
  • GitHub source at the full commit above is the only supported distribution
    route for this Preview. Do not install from a moving branch.
  • GitHub installation runs this package's prepare script only after explicit
    pnpm allowBuilds approval. This is host code execution, not a sandbox.
  • npm publication, long-term security support, OS power-loss/torn-write recovery,
    and cross-machine recovery are outside this Preview.
  • Report suspected vulnerabilities through GitHub private vulnerability
    reporting rather than a public issue.
Assets 2
Loading