deepseek-harness/packages
Tianyi Cui bac97a5b2e test(acp-snapshot): cover the delta-insert trailing-newline branch
formatSystemPromptSnapshot's insert-join ternary had its already-newline-
terminated arm unexercised (a delta whose insert ends in a blank line),
failing the per-file 100% branch gate on suite.ts (99.24%).
2026-07-11 23:55:56 +08:00
..
bash fix(review): reconcile sandbox and approval contracts 2026-07-11 21:37:38 +08:00
code-runtime Merge remote-tracking branch 'origin/master' into workflow-vm-to-workerthread 2026-07-09 23:48:17 +08:00
compact Merge remote-tracking branch 'origin/master' into agent-request-messages 2026-07-09 22:43:26 +08:00
cordis Merge remote-tracking branch 'origin/master' into codex/skill-system 2026-07-11 22:31:28 +08:00
core Merge remote-tracking branch 'origin/master' into codex/skill-system 2026-07-11 22:31:28 +08:00
fs Merge origin/master into timeout-design 2026-07-08 11:18:27 +08:00
guard fix review finding: cap the detailed reminder's argument payload 2026-07-08 14:40:08 +08:00
hooks feat(bash): the sandboxed executor — per-call policy carrier, denial facts, runner-failure classification 2026-07-10 15:43:02 +08:00
llm refactor(agent): replace the per-step advice seam with agent/session-prefix 2026-07-08 15:44:30 +08:00
sandbox fix(review): reconcile sandbox and approval contracts 2026-07-11 21:37:38 +08:00
session-persistence Merge remote-tracking branch 'origin/master' into worktree-node-22-18-compat 2026-07-07 21:33:40 +08:00
skill fix(skill): forward cancellation to local reads 2026-07-10 17:47:28 +08:00
subagent fix(subagent-acp): contain onError sink exceptions to keep result from rejecting 2026-07-10 16:42:20 +08:00
support test(acp-snapshot): cover the delta-insert trailing-newline branch 2026-07-11 23:55:56 +08:00
timeout chore(timeout-policy): drop now-unused schemastery dependency 2026-07-08 15:10:15 +08:00
todo Merge remote-tracking branch 'origin/master' into simpl-b1-fold-ui-stdio 2026-07-04 20:38:38 +08:00
ui Merge remote-tracking branch 'origin/master' into codex/skill-system 2026-07-11 22:31:28 +08:00
util test: make the timeout-wins race deterministic under fake timers 2026-07-06 19:55:46 +08:00
web feat(tool-web): declare web tool timeout budgets via config 2026-07-08 14:40:14 +08:00
workflow Merge remote-tracking branch 'origin/master' into codex/skill-system 2026-07-10 21:10:58 +08:00
AGENTS.md docs(AGENTS): rewrite the root standing orders to the 1,500-word budget 2026-07-04 14:22:47 +08:00
CLAUDE.md Document the codebase thoroughly and tighten type safety 2026-06-11 13:01:00 +08:00
README.md Merge remote-tracking branch 'origin/master' into codex/skill-system 2026-07-11 22:31:28 +08:00

Packages

Harness packages use the @deepseek-ai/dsh-* scope. Each is a Cordis plugin: a default Service subclass or functional plugin declaring ctx keys/events through declaration merging and contributing through ctx.effect(), ctx.on(), or ctx.waterfall(). Authoring conventions: AGENTS.md and root AGENTS.md § Conventions.

Hierarchy

Packages are grouped by modular role at packages/<group>/<pkg>/. The group directory is a pure container (no package.json); the package name stays @deepseek-ai/dsh-<pkg> regardless of group. Each group README is the canonical per-package map — package roles, ctx keys, and the product-vs-support split live there, next to the code.

Group Role Release expectation
core/ Product API spine: session, system-prompt, tools, agent, and the concrete loop Product — stable surface
llm/ LLM capability family: the abstract service + provider adapters Product — stable surface
bash/ Bash capability family: the executor seam, a local impl, and the model-facing tool Product — stable surface
code-runtime/ Code-execution capability family: the abstract runtime seam for model-written programs + a worker-thread backend Product — stable surface
sandbox/ Process-confinement seam; bwrap/Landlock/Seatbelt backends Product — stable surface
fs/ Filesystem capability family: the abstract seam, a local impl, and the model-facing file tools Product — stable surface
skill/ Skill capability family: the provider registry, local provider, and model-facing catalog/loader Product — stable surface
compact/ Compaction capability family: the abstract seam + a basic backend (tool deferred) Product — stable surface
subagent/ Subagent capability family: the provider-registry seam and the model-facing delegation tool Product — stable surface
workflow/ Workflow capability family: the script-engine seam, the worker-thread engine, and the model-facing workflow tool Product — stable surface
web/ Web capability family: the abstract seam, search/fetch provider impls, and the model-facing web tools Product — stable surface
timeout/ Tool-call timeout policy: the tools/execute deadline enforcer Product — stable surface
todo/ Todo/planning family: the model-facing todo_write tool Product — stable surface
guard/ Loop-hygiene guards: advisory repeat-call reminders Product — stable surface
cordis/ Self-referential runtime toolset: inspect the live runtime's plugins and services, mount/unmount model-written plugins (design) Product — stable surface
hooks/ Hook bridges + the shared Claude Code / Codex wire-protocol library Product — stable surface
session-persistence/ Persistence capability family: the seam + JSONL/SQLite backends Product — stable surface
ui/ Editor/client integration surfaces: ACP bridge, app packages, user-approval and user-interaction seams, ask-user tool Product — stable surface
support/ Dev/test/example infrastructure (invariants, replay adapter, subagent mock) Support — lower compatibility expectations
util/ Low-level zero-dependency utilities shared across groups (the Branded<B> primitive) Support — small, stable, harness-dep-free

The split is the point: a package's group says whether it is part of the product API or support/test/example infrastructure, so release and removal decisions do not treat every package as an equal public contract. New packages join an existing group; adding a new top-level group is a deliberate act (extend the group READMEs and this table).

Dependencies

The inter-package dependency graph is generated: docs/module-graph.md (pnpm run gen-module-graph, freshness-gated in CI).

The rule it must obey: extension plugins depend on interfaces, never on the concrete loop. dsh-agent-loop is swappable — UI/hook/tool plugins keep working against the dsh-agent vocabulary if the loop is replaced. The sanctioned exception is a composition/bundle package like dsh-agent-core, whose whole job is to assemble the concrete spine: it depends on dsh-agent-loop (and the other concrete spine plugins) on purpose. The rule constrains plugins that EXTEND the system, not the bundle that COMPOSES it. A swappable capability splits into interface / implementation / consumer packages (the bash trio is the template — see capability seams).

Each package has its own README.md with purpose, service API, events, extension points, and deliberate non-goals (TODOs).