DeepSeek Harness clean-profile fix
This release fixes the deterministic startup failures found while reproducing dshbase L3 verification.
Fixed
- Optional MCP environment variables remain string-valued when unset, satisfying the DSH MCP client schema.
- The bundle launches its MCP entry from the package installed in the DSH Web profile, with no global
npm linkor customPATHrequired. - DSH installation now uses the pinned source checkout directly instead of resolving the unrelated unscoped npm package.
Real DSH verification
Against DeepSeek Harness commit 47f943859bef60e4160492346772ded9b24f765a with isolated DSH_HOME, workspace, and ports:
- Runtime health and Agents API preflight passed.
- Clean Web profile installation reported
managed-agents 0.3.7. - DSH logged
sandbase-harness MCP server connected over stdio. - DSH Web returned HTTP 200.
Release gate
- 585 tests passed; 14 environment-specific tests skipped.
- Typechecks, runtime build, production Console build, 47-file package dry-run, and release smoke passed.
- Multi-architecture image publication and provenance attestation succeeded.
Implementation and evidence: #70
Image workflow: https://github.com/sandbaseai/sandbase-harness/actions/runs/32339911412
OCI image: ghcr.io/sandbaseai/sandbase-harness-mcp:0.3.7
OCI index digest: sha256:5f7dcac499e95294be540035bd4892456ffbb7bedf2bb2d8a96d65e4203f11dc
Platforms: linux/amd64, linux/arm64.