dsh-self-update
DeepSeek Harness git-source 安装的应用内自更新（检查 / 一键更新 / 回滚 / 重启），可选原生 macOS shell。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Shane-Jay/dsh-self-update#a6fdfc8eda68103573e75a9106fa52cda2f40636Self Update 以 dsh-self-update 发布，当前版本为 0.4.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 简体中文
In-app self-update for DeepSeek Harness git-source installs — with an optional native macOS shell.
Update panel: current vs. new version, the steps about to run, and a one-click Update buttonIf you run DeepSeek Harness from a git checkout (git clone + pnpm dsh web) — the way most self-hosted setups do — there is no built-in way to update it. Every release means manually running git pull, pnpm install, pnpm build, then restarting the service, and if anything breaks you dig out the old commit by hand.
dsh-self-update turns that whole cycle into a button. It is a harness plugin that:
git pull --ff-only → pnpm install → pnpm clean → pnpm build:official (official branding build), with live per-step progress — the clean step drops stale gitignored build output that would otherwise poison a large version jump (skipped gracefully on harness versions without a clean script);local-backup-<timestamp> branch, the tree is hard-reset to the remote, and the update continues (refused while the tree is dirty);git pull, any other tool — the UI says "Restart needed" instead of quietly serving new frontend on top of an old host;pnpm dsh web in a terminal.Not for you if you installed dsh via npm i -g @deepseek-ai/dsh: there is no git working copy to update, so this plugin hides itself entirely. Use an npm-based updater such as dsh-update-checker instead.
cd <your-deepseek-harness-checkout>
pnpm dsh plugin --profile web add dsh-self-update
Restart the dsh service once and you are done. No configuration needed — the plugin uses the process working directory as the harness checkout (override with the plugin config repoRoot if yours differs).
The Restart now button makes the process exit with code 75 ("please restart me"). Teach your supervisor to honor it:
| Runner | Config |
|---|---|
| systemd | RestartForceExitStatus=75 |
| PM2 | autorestart: true (the default) |
| macOS shell (below) | built in |
| bare terminal / no supervisor | built in (self-respawn on macOS/Linux; manual on Windows) |
When no supervisor is detected, the plugin spawns a detached /bin/sh helper that waits for the old pid to die (freeing the port) and then re-execs the identical node command line — a bare pnpm dsh web, or an orphaned process, restarts itself. On Windows there is no such path: the button reads Stop service and you run pnpm dsh web again by hand. The panel always states which of the three will happen.
Detection reads DSH_SELF_UPDATE_SUPERVISOR first, then systemd's INVOCATION_ID, then PM2's pm_id/PM2_HOME. Set DSH_SELF_UPDATE_SUPERVISOR to any value (e.g. custom) when your supervisor already honors exit code 75 — otherwise the plugin self-respawns behind its back. none/0/false declare the opposite: nobody will restart me.
A native Swift + WKWebView app (no Electron) that owns the dsh service: click the icon to open the UI, closing the window keeps the service running, ⌘Q stops it. It adds a "Check for Updates…" menu item that opens the in-app update panel, and it automatically relaunches the service when it exits with code 75 (and marks it DSH_SELF_UPDATE_SUPERVISOR=macapp so the plugin leaves the restart to the shell). A server it merely adopted — one already listening on the port that the shell did not start — is now watched too: if it goes away, the shell waits up to 45 s for it to come back on its own and otherwise starts and owns a fresh one. Works with the browser-auth introduced in harness 0.1.2: the shell picks up the tokened URL the server prints at startup, so the embedded page signs in by itself.
node macapp/build-mac-app.mjs # requires Xcode command line tools
# outputs ~/Applications/DSH.app
First launch: right-click → Open (the app is ad-hoc signed, not notarized).
| Updates | Platforms | Auto-restart | |
|---|---|---|---|
dsh-update-checker | npm packages | restart is Windows-only | ✅ (Win) |
dsh-update-copilot | plugins; core is report-only | all | ❌ |
dsh-self-update | the harness git checkout itself | all (restart incl. macOS/Linux) | ✅ (exit-code 75; no supervisor needed on macOS/Linux) |
The exit-code-75 restart contract is the piece the community has been asking the harness core for (see upstream discussions #1231 and #2717) — this plugin is a working implementation of it.
/self-update/api/update/{status,check,install,realign,rollback,restart}. Write routes require Content-Type: application/json and a local Origin (CSRF line of defense).dsh-self-update:open on window (detail: { check: true } to check immediately). This is exactly what the macOS menu item does via evaluateJavaScript.GET /update/status carries runtime: { pid, startedAt, sha, shortSha, stale, supervisor, restartMode }. stale = the HEAD on disk is no longer the one this process booted from (the UI treats it exactly like "installed, restart pending"); supervisor is macapp | systemd | pm2 | custom | none; restartMode is supervisor | self-respawn | manual.POST /update/restart answers { ok, mode, exitCode } and exits ~300 ms later; mode is the restartMode above. Exit code 75 means "restart requested" — anything else is a crash. The browser then polls status and reloads only once a different pid answers (up to 120 s).~/.dsh-self-update/update-state.json; the self-respawn helper's output at ~/.dsh-self-update/respawn.log.If an update leaves dsh unable to boot (plugin/core seam breakage), the Web UI — rollback button included — is gone with it. Fall back to the CLI:
node scripts/rollback-harness.mjs # target = previousSha from the state file
node scripts/rollback-harness.mjs --sha <commit> # or pick a commit yourself
The updater records previousSha before every install precisely for this moment.
Sibling layout, same as the rest of the dsh plugin ecosystem: this repo must be checked out next to deepseek-harness — the @deepseek-ai/* dev dependencies are link:../deepseek-harness/....
pnpm install
pnpm typecheck && pnpm test && pnpm build
The updater test suite runs against real (offline) git repositories; only the install/build commands are stubbed.
