Coder/deepseek-harness
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
8,315 Commits 1 Branch 0 Tags
f5d53f04b7f02f7ad69c0dd135b61ae4f16a7330
Commit Graph

2429 Commits

Author SHA1 Message Date
ZiyaZhang
f5d53f04b7 cleanup(web): stop sandboxing served workspace documents 
A preview lost localStorage and cookies under CSP sandbox — measurably, the
reported artifact throws SecurityError on load and its theme toggle goes
dead. The capability the sandbox denied is one the file's author, an agent
already holding this user's shell, never needed the browser for, so the
header sat behind a trust boundary it had already crossed.

Isolating a preview becomes a real question when workspace content stops
being the viewer's own; the answer then is a separate origin, not a header.
 2026-07-31 23:20:36 -07:00
ZiyaZhang
00390ae851 feat(web): open a produced file from the conversation 
Serve one file at a time out of a Session's workspace under /f on the web
transport, and point the conversation's existing file-open affordance at it.
Clicking a write/edit/read row's path now opens that file in a browser tab —
including from a LAN client, where the Host's system opener is fenced to
loopback and answered nothing.

- /f/<sessionId>/<segments> in client-connection, behind the same
  browser-trust fence as /api; realpath confinement, streamed reads,
  GET/HEAD only, nosniff + no-store.
- Script-capable documents carry CSP sandbox: model-authored markup must not
  be same-origin with /api, where events.mux is a readable GET stream.
- ApiProxy.workspaceRootOf answers where a Session's files live without
  resuming an agent; the client program cannot reach the core services.
- The /f URL shape lives in dsh-host-apiproxy/api so both ends share one
  encoding (client bundles may not value-import another plugin).
 2026-07-31 12:07:43 -07:00
kingwl
32a0e871b7 fix(web): preserve queue on stop 2026-07-31 20:51:05 +08:00
Turtle
dc88440dad Merge remote-tracking branch 'origin/master' into codex/experimental-cli-command-names 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	packages/ui/tui/README.i18n.yaml
 2026-07-31 20:18:15 +08:00
Turtle
60a0bcd358 feat(cli): mark meta and upgrade commands experimental 2026-07-31 20:16:19 +08:00
Tianyi Cui
e1eb581f2b Merge pull request #1018 from deepseek-harness/feature/tui-first-run-welcome 
feat(tui): add versioned first-run welcome
 2026-07-31 20:08:56 +08:00
Tianyi Cui
76f3b402e1 Merge remote-tracking branch 'origin/master' into worktree/pr1018-todo-retarget-20260731 2026-07-31 19:48:14 +08:00
imccyu
23ee31efc0 Merge branch 'master' into fix/remove-badge 2026-07-31 19:47:55 +08:00
Tianyi Cui
d64b032311 Merge pull request #1082 from deepseek-harness/worktree/fix-web-duplicate-folder-names-20260731 
fix(workspace): allow same-basename folders in Web
 2026-07-31 19:37:38 +08:00
07akioni
410a837e02 Merge remote-tracking branch 'origin/master' into fix/remove-badge 2026-07-31 19:33:01 +08:00
Tianyi Cui
e0cedd16b8 Merge remote-tracking branch 'origin/master' into worktree/pr1018-todo-retarget-20260731 2026-07-31 19:25:27 +08:00
Tianyi Cui
7d04e4654a Merge remote-tracking branch 'origin/master' into worktree/pr1018-todo-retarget-20260731 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	packages/ui/tui/README.i18n.yaml
 2026-07-31 19:23:34 +08:00
Ziya
9b1486f90f Merge pull request #1078 from deepseek-harness/fix/web-turn-error-surface 
fix(web): surface terminal turn failures
 2026-07-31 07:23:09 -04:00
Tianyi Cui
2abf643326 Merge pull request #1040 from deepseek-harness/feat/recommended-deployment-presets 
feat(cli): even out the shipped tool rosters across both surfaces
 2026-07-31 19:21:18 +08:00
07akioni
94a600eddd Merge branch 'master' into fix/remove-badge 2026-07-31 19:19:55 +08:00
Tianyi Cui
3aa98ba609 Merge remote-tracking branch 'origin/master' into worktree/pr1018-todo-retarget-20260731 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	apps/cli/README.md
#	apps/cli/README.zh.md
 2026-07-31 19:17:50 +08:00
hypatiamay
dcc9e50f84 Merge pull request #1026 from deepseek-harness/feat/compaction-progress-visibility 
feat(tui): show live compaction progress
 2026-07-31 19:17:43 +08:00
Tianyi Cui
c16e33d8db Merge latest master into feat/recommended-deployment-presets 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	apps/web/tsconfig.json
#	tsconfig.host.json
 2026-07-31 19:16:05 +08:00
07akioni
1766461947 Merge remote-tracking branch 'origin/master' into fix/remove-badge 2026-07-31 19:13:22 +08:00
Ziya
9473951c79 Merge branch 'master' into fix/web-turn-error-surface 2026-07-31 07:13:02 -04:00
07akioni
f9dc4aa702 feat: remove "插话" badge displayed in user message 2026-07-31 19:12:16 +08:00
hypatiamay
57761539b4 Merge pull request #989 from deepseek-harness/feat/manual-compact-single-lock 
feat(compact): add queued manual /compact
 2026-07-31 19:10:48 +08:00
Ziya
4f13ce7b7f Merge branch 'master' into fix/web-turn-error-surface 2026-07-31 07:07:05 -04:00
creatixchu
404c58717a Merge remote-tracking branch 'origin/worktree/hero-blank-session-settling' into worktree/hero-blank-session-settling 2026-07-31 18:43:37 +08:00
Tianyi Cui
ce04a85d80 Merge origin/master into same-basename workspace fix 
# Conflicts:
#	packages/client/ui-workspace/README.i18n.yaml
 2026-07-31 18:42:20 +08:00
CreatixChu
e18efd3375 Merge branch 'master' into worktree/hero-blank-session-settling 2026-07-31 18:39:38 +08:00
Tianyi Cui
678ad97f9a Allow same-basename Workspace paths 2026-07-31 18:37:34 +08:00
creatixchu
a4d88a98ee doc(agent-notes): widen the settling-exemption note to the shipped condition 2026-07-31 18:37:08 +08:00
Tianyi Cui
1c1a65f208 Merge origin/master into feat/recommended-deployment-presets 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	apps/cli/package.json
#	pnpm-lock.yaml
 2026-07-31 18:32:24 +08:00
Tianyi Cui
1f8dd72bd9 Merge latest master into manual compaction 2026-07-31 18:28:21 +08:00
Tianyi Cui
54242bef1c Merge latest master into manual compaction 2026-07-31 18:26:40 +08:00
Tianyi Cui
e9c040894f fix(cli): align shipped composition contracts 2026-07-31 18:25:03 +08:00
Ziya
05608d9098 Merge branch 'master' into fix/web-turn-error-surface 2026-07-31 06:19:46 -04:00
Tianyi Cui
ba43750e68 Merge pull request #1070 from deepseek-harness/agent/memory-mcp-examples 
feat(examples): add generic MCP memory examples
 2026-07-31 18:18:21 +08:00
Tianyi Cui
5d87f8b291 Merge latest master into manual compaction 2026-07-31 18:11:53 +08:00
ZiyaZhang
215bf15f78 fix(web): surface terminal turn failures 2026-07-31 03:10:48 -07:00
Tianyi Cui
21163711ea Merge origin/master into worktree/core-web-minimal-profile 2026-07-31 18:10:48 +08:00
creatixchu
42ca5cd31c Merge remote-tracking branch 'origin/master' into worktree-session-hover-menu-fix 
# Conflicts:
#	packages/client/ui-primitives/README.i18n.yaml
#	packages/client/ui-primitives/README.zh.md
 2026-07-31 18:00:02 +08:00
Tianyi Cui
20cb7e7360 Merge latest master into manual compaction 2026-07-31 17:58:30 +08:00
creatixchu
be7bf9d426 doc(agent-notes): record the blank-session settling exemption 2026-07-31 17:57:13 +08:00
Tianyi Cui
6e26f9fd83 Merge latest master into manual compaction 
# Conflicts:
#	apps/cli/README.i18n.yaml
#	docs/architecture.i18n.yaml
#	docs/event-producer-consumer.md
#	docs/module-graph.md
#	examples/acp-agent/tests/snapshots/cordis-inspect-jsdoc/session.jsonl
#	packages/compact/compact-basic/README.i18n.yaml
#	packages/pty/pty-local/tests/index.spec.ts
 2026-07-31 17:57:11 +08:00
Tianyi Cui
43a1c0bd8f Merge branch 'master' into worktree/core-web-minimal-profile 2026-07-31 17:57:09 +08:00
creatixchu
31e467e744 Merge remote-tracking branch 'origin/master' into worktree-session-hover-menu-fix 
# Conflicts:
#	apps/web/tests/workspace-management.e2e.ts
#	packages/client/ui-workspace/README.i18n.yaml
 2026-07-31 17:56:06 +08:00
Chinesezjc
bcb474d13e Merge pull request #1066 from deepseek-harness/feat/web-cards-toolrow 
refactor(web): collapse every card tool row through one ToolRow
 2026-07-31 17:54:38 +08:00
Tianyi Cui
d03927f69b Merge branch 'master' into worktree/core-web-minimal-profile 2026-07-31 17:52:08 +08:00
Ziya
4814008ca0 Merge pull request #948 from deepseek-harness/docs/third-party-notices 
docs: add THIRD_PARTY_NOTICES.md disclosing third-party dependencies
 2026-07-31 05:51:57 -04:00
Tianyi Cui
a3905519fb Merge pull request #1068 from deepseek-harness/codex/dsh-home-path 
refactor(config): centralize DSH home paths
 2026-07-31 17:50:41 +08:00
Tianyi Cui
c77f889a2a Merge branch 'master' into worktree/core-web-minimal-profile 
# Conflicts:
#	apps/cli/README.i18n.yaml
 2026-07-31 17:50:21 +08:00
NI0317
c4d88bc25e Merge latest origin/master into feature/tui-first-run-welcome 
# Conflicts:
#	apps/cli/README.i18n.yaml
 2026-07-31 17:49:03 +08:00
NI0317
346d1e4c74 fix(tui): address onboarding review feedback 2026-07-31 17:47:07 +08:00