dsh-win32
在原生 Windows 上修复和诊断 DeepSeek Harness。官方 PowerShell、Workspace Write、快捷方式和旧版预设修复。不使用 WSL。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-win32@0.17.11
Win32 以 dsh-win32 发布，当前版本为 0.17.11。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Official PowerShell. Workspace Write. One command.
npx dsh-win32 setup
Current DeepSeek Harness already includes persistent PowerShell and a Windows ACL sandbox. dsh-win32 checks that official stack, finds known Windows failures, applies the repairs it can prove safe, and creates a desktop shortcut.
It does not install Git, PowerShell, busybox, WSL, or another DSH bundle on the current path.
Use the standalone CLI above on current DSH. Do not run dsh plugin --profile web add dsh-win32 for this workflow: that installs the legacy bundle, not the current Windows setup path.
中文 · Windows evidence and legacy details
Using a coding agent? Copy the setup and verification request. For a guided walkthrough, see Windows troubleshooting in Chinese.
Start with the Windows first-run walkthrough if DSH will not launch or a check fails. It follows one problem from diagnosis through the next verification step. Share your first-run result, including attempts that are still blocked.
Reproduced setup flow. This is not a screen recording.
Reproduced dsh-win32 setup on current DSH
The command checks the official persistent PowerShell and Workspace Write packages, creates the shortcut, and leaves the profile on the stock Minimal preset.
DeepSeek Harness desktop shortcut for the Web profileAfter setup, open DSH, add a workspace, choose the stock Minimal preset, and keep Workspace Write enabled.
Use another profile without creating a shortcut.
npx dsh-win32 setup --profile desktop --no-shortcut
--sandboxed remains accepted for old notes and scripts. Current DSH already provides the sandbox, so the flag makes no extra change.
npx dsh-win32 verify
npx dsh-win32 verify --json
verify is a model- and API-key-free acceptance run against an already installed @deepseek-ai/dsh dependency tree. It does not use registry metadata as proof. In an isolated temporary home and workspace it invokes the installed model-facing persistent pwsh tool through the official terminal, subprocess, Workspace Write policy, and Windows ACL sandbox components.
A pass requires all of these live observations:
pwsh calls retain the same PTY, current directory, and environment stateNo user DSH profile, config, workspace, or PowerShell profile is loaded or changed. Secret-bearing environment variables are not passed to the worker, and reports contain no tested paths or terminal output. Native Windows and a DSH-supported Node release are required; Node 23 is explicitly unsupported.
If a timeout or output limit leaves worker or descendant containment unconfirmed, verification fails and preserves the isolated snapshot instead of deleting files under a potentially live process.
verify creates its own Workspace Write policy and Windows ACL-confined PowerShell child. If you run it from an agent that is already inside another Workspace Write or Windows ACL sandbox, approve one unsandboxed/full-access execution for this verify command only; otherwise the nested restricted-token/ConPTY layers can stall before PowerShell launches. This does not bypass the acceptance boundary: the inner child under test remains confined, and the outside-write denial is still required to pass. Worker timeouts report only a fixed, path-free progress checkpoint so nested-launch stalls can be distinguished without exposing terminal output or environment values.
The boundary is deliberate: this composes the installed official components and invokes the real persistent tool, but it does not start the complete stock Minimal host/preset, run the plugin installer, execute hook bridges, or make a model request. A pass must therefore be read as component-chain acceptance, not as an end-to-end stock-session or hook-enforcement claim.
Tools run under a non-driving synthetic agent with a real temporary DSH session. The verifier does not instantiate DSH's private agent-loop inbox; any attempt to use that inbox fails the check instead of returning fabricated state.
The repository CI installs @deepseek-ai/dsh@latest from scratch and runs this acceptance on real Windows. Pushes, pull requests, and manual runs cover npm and strict pnpm layouts on Node 22.19 and 24. A weekly upstream watch retains both installers on Node 22.19, so a new DSH publication is checked even when dsh-win32 itself has not changed.
The pnpm lane preserves a strict 24-hour publication cooldown and an explicit build-script allowlist. It can select an older eligible release than npm. Read the installed DSH version in each result; a pass is not evidence for a release that the package manager has not installed.
npx dsh-win32 doctor
npx dsh-win32 doctor --json
npx dsh-win32 fix
doctor verifies the published DSH Windows package contract and checks local Windows failures. Its JSON output follows the dsh-doctor/v1 envelope. Use verify when you need live evidence from the installed stack rather than registry metadata.
fix only repairs installed koffi versions that are known broken or fail a real runtime load. It verifies the load again after repair.
Two current DSH control paths sit outside repairs that dsh-win32 can safely apply:
dsh plugin add can split a local package path containing spaces, and relative package paths can resolve from an unexpected working directory (upstream #2485). Prefer a published package specifier. If a local package is unavoidable, stage it at a space-free absolute path and read back the installed package identity rather than trusting a successful command alone.{"continue": false} result can be recorded as decision: stop without halting the run (upstream #1514). After changing hooks or upgrading DSH, run a harmless unconditional deny canary and confirm the target action is actually blocked.doctor cannot prove either behavior from package metadata, and verify deliberately avoids user profiles, hook configuration, model requests, and plugin installation. They therefore do not report these upstream paths as passing. The canary remains a user-controlled end-to-end check until DSH exposes a safe, isolated hook acceptance interface.
Once the Windows checks pass, dsh-movein can preview importing an existing Claude Code, Codex, or OpenCode setup. It is optional and separate from Windows setup: dsh-win32 does not install it for you.
Start with a preview in the project you want to move. Do not add --apply until you have reviewed the destinations, conflicts, and unsupported settings.
npx dsh-movein
Moving configuration does not prove hook enforcement or a complete stock Minimal session. Keep the verification boundaries above.
DSH rc.6 and older did not ship the current official PowerShell stack. The previous Git Bash and busybox presets remain available behind an explicit flag.
The package's @deepseek-ai/dsh-subprocess-local peer range, >=0.1.0-rc.5 <0.1.0-rc.7, intentionally bounds that legacy bundle. It is not the host version range for the standalone setup, doctor, or verify commands, which do not wire the bundle into current DSH. A successful dsh plugin add is not compatibility evidence; the missing host-peer warning is tracked in upstream #6680.
If a current DSH profile already lists dsh-win32 as a plugin, run npx dsh-win32 doctor --profile NAME with that profile's actual name. Doctor warns about the legacy bundle and suggests a removal command; it does not remove anything. Review and back up the affected profile before deciding whether to remove it.
npx dsh-win32 setup --legacy
npx dsh-win32 setup --legacy --sandboxed
npx dsh-win32 doctor --legacy
Legacy setup requests the exact invoked dsh-win32 version without lowering the profile's pnpm release-age or build policy. If a new release is held, wait for the configured cooldown and retry; do not add a release-age bypass.
Legacy setup reinstalls default presets. From 0.17.10, an existing preset is first moved intact to a unique backup under $DSH_HOME/dsh-win32/preset-backups (or ~/.dsh/dsh-win32/preset-backups). Custom edits remain in that backup, not in the new active preset. Plugin activation still leaves existing presets untouched. To fix only a missing persona text/prefix field without resetting your custom tools or shell settings, use the in-place recovery instructions.
On Windows, doctor --legacy checks installed persona keys without rewriting rosters or printing their prompt text. A passing key check is not proof of full host/session compatibility. Add --profile NAME when inspecting a non-web profile; recovery commands retain that selection and legacy mode.
The legacy Git Bash preset needs danger-full-access. The legacy busybox preset can run in Workspace Write. Neither path installs Git automatically.
Read the implementation evidence, compatibility history, and complete legacy limitations.
doctor checks published package metadata; verify separately reports and loads the selected installed DSH identity.verify does not boot the complete stock Minimal host/preset, so host wiring and UI session ownership remain outside its pass claim.dsh plugin add path handling or hook enforcement; see the upstream boundaries above.C:\tmp as outside the expected legacy write fence until the upstream Windows path issue is fixed.MIT.
