v0.4.0 — DeepSeek Harness rc.8 persistent PowerShell protection
DeepSeek Harness rc.8 support
This release updates the guard for the persistent Windows PowerShell tool introduced in DeepSeek Harness rc.8.
Added
- Persistent-shell state review for cwd, environment, modules, and loaded types
- Hard blocks for PowerShell remoting, detached jobs/processes, scheduled/event registrations, dot-sourcing, and alias/function shadowing
- Absolute-path enforcement for mutating filesystem commands (enabled by default)
- Device-namespace path blocking (
\\?\\and\\.\\) - Broader registry mutation detection
- Web settings toggles for persistent-shell checks and absolute mutation paths
Compatibility fixes
- Exports
./package.jsonso the rc.8 Web client scanner discovers the settings card - Marks Harness host packages as optional peer dependencies for clean Profile installs
Validation
- 34/34 automated tests passed
- Packed bundle installed into a real
@deepseek-ai/dsh@0.1.0-rc.8Web Profile - Web Host loaded the settings client successfully (HTTP 200)
pnpm peers checkreported no peer dependency issues
Asset
dsh-windows-workspace-guard-0.4.0.tgz- SHA-256:
988D698B2678357F98E2EE735C9D89F0DD259BC75F188F7F8935A0076D4B9CB8