desktop-v2.6.0

DeepSeek Harness Desktop 2.6.0

中文

本次亮点

• Task Board v3 提供 Project、Task Run、派生 Evidence 和 Git Worktree 审核流。任务可明确选择 shared-workspace 或 Git Worktree，旧任务继续使用 shared-workspace。
• v2 账本复制迁移到 Host-owned tasks-v3.json，原文件先备份；原子写入、回读校验和迁移标记让失败恢复保持可诊断。
• Git Graph Host 提供受控 Worktree 创建、状态、差异、提交、合并和移除。Renderer 只传不透明 id，不传路径和任意 Git 参数；Discard 需要二次确认。
• Runtime Provider 缺少 Worktree 所需能力时返回明确原因并回退现有 shared-workspace；Provider 返回的 Session CWD 与 Worktree 不一致时阻断，不伪造隔离。
• Evidence 面板展示有限文件摘要、增删统计、差异预览、revision、Session/运行入口和能力证据，不保存完整会话、工具结果或 Secret。运行通知支持 dsh://run/<safe-id>。
• 官方正式版默认启用有界匿名产品统计且不提供应用内关闭开关，仅记录固定类别和区间的产品事件及官网安装包点击汇总。统计不包含持久标识、IP、对话、文件、路径、凭据、日志或堆栈，原始事件不落库，按日汇总最长保留 365 天；源码、开发、测试与 Fork 构建不包含官方统计端点。

验证

• Task Board 与 Git Graph 类型检查通过，新增 v3 migration、Worktree execution、Worktree Host service、review 和 Evidence 测试。
• Candidate fixture 使用真实临时 Git 仓库验证注册参数、Session CWD、started/completed/cancelled 事件、取消语义和重启恢复；失败 Candidate 不改变 Stable 元数据。
• 深链和通知回归覆盖 run 路由、ID 校验、去重、限频、前台抑制和点击白名单；发布门禁继续执行类型检查、全仓测试、文档、安装包内容校验、Windows 打包 E2E 和真实 Runtime 烟测。
• 匿名统计客户端、固定事件词汇、发布配置、网站下载 Beacon 和 Cloudflare 聚合 Worker 均有自动化覆盖；Worker 的 17 项测试验证来源、字段、大小、认证、聚合与保留边界。

下载与校验

下载 DeepSeek-Harness-Desktop-Setup-2.6.0-x64.exe，并使用同一 GitHub Release 中的 SHA256SUMS.txt 校验安装包。安装器 SHA-256 以发布页相邻校验文件为准。

说明

这是社区构建版本，并非 DeepSeek、OpenAI 或腾讯官方发行版。安装包当前未使用商业代码签名证书，Windows SmartScreen 可能显示“未知发布者”，请仅从项目 GitHub Release 下载并核对 SHA-256。Task Board 的 Worktree 功能按 Runtime Provider capability 协商；Stable 未提供可选能力时会安全回退到 shared-workspace。下载安装、启动或继续使用官方正式版，即表示已阅读并在适用法律允许的范围内同意仓库及官网公开的隐私政策；统计数据仅用于产品改进。

English

Highlights

• Task Board v3 adds Projects, compact Task Runs, derived Evidence, and explicit Git Worktree review. Each task chooses shared-workspace or Git Worktree, while legacy tasks remain shared-workspace.
• The v2 ledger migrates copy-first to the Host-owned tasks-v3.json; the source is backed up before an atomic write, read-back verification, and migration marker are recorded.
• Git Graph Host provides controlled Worktree create, status, diff, commit, merge, and remove operations. Renderers send opaque ids only, never paths or arbitrary Git arguments; Discard requires a second confirmation.
• Missing Worktree capabilities return a bounded reason and use the existing shared-workspace executor. A Session CWD that differs from the controlled Worktree path is blocked rather than reported as isolated.
• The Evidence panel shows bounded file summaries, additions/deletions, diff preview, revisions, Session/run links, and capability evidence without storing full history, tool results, or Secrets. Run notifications support dsh://run/<safe-id>.
• Official release builds enable bounded anonymous product metrics by default without an in-app off switch. They record only fixed product categories, duration buckets, and aggregate installer-link clicks. Metrics exclude persistent identifiers, IP addresses, conversations, files, paths, credentials, logs, and stack traces; raw events are not retained, daily aggregates expire after at most 365 days, and source, development, test, and Fork builds contain no official endpoint.

Verification

• Task Board and Git Graph typechecks pass, with focused coverage for v3 migration, Worktree execution, Host Worktree service, review, and Evidence.
• The Candidate fixture uses a real temporary Git repository to verify registration arguments, exact Session CWD, started/completed/cancelled events, cancellation semantics, and restart reconciliation. A failing Candidate cannot change Stable metadata.
• Deep-link and notification regressions cover the run route, safe ids, deduplication, rate limits, foreground suppression, and allowlisted click routing. Release gates retain repository type checks, all tests, documentation, packaged payload verification, Windows E2E checks, and a real Runtime smoke test.
• Automated coverage includes the metrics client, closed event vocabulary, release configuration, website download beacon, and aggregate Cloudflare Worker. The Worker's 17 tests verify origin, field, size, authentication, aggregation, and retention boundaries.

Download and verification

Download DeepSeek-Harness-Desktop-Setup-2.6.0-x64.exe and verify it with SHA256SUMS.txt from the same GitHub Release. Treat the adjacent checksum file as authoritative for the installer SHA-256.

Notice

This is a community build, not an official DeepSeek, OpenAI, or Tencent distribution. The installer is not currently signed with a commercial code-signing certificate, so Windows SmartScreen may display an unknown publisher. Download only from the project GitHub Release and verify SHA-256. Worktree support is negotiated by Runtime Provider capabilities; Stable safely falls back to shared-workspace when optional capabilities are absent. Installing, launching, or continuing to use an official release means that you have read and, where applicable law permits, agree to the privacy policy published in the repository and on the website; metrics are used only to improve the product.