kingwl
7afdc6e3b9
The default-relative ladder conflicts with per-session overrides: schemas are registry-global while the effective mode is switchable, so a session overridden NARROWER than the default loses exactly the lever it needs — a workspace-write default with a read-only override could only request danger-full-access (forced over-escalation), and a danger-full-access default with a read-only override advertised no fields at all (confined, no escalation path). The enum now pins the closed target vocabulary (workspace-write / danger-full-access) whenever the executor confines; strict widening is enforced per call against the session effective mode (override ?? default), failing closed without prompting anyone. The default-relative ladder and per-session dynamic schemas move to Alternatives; the harmless Risks claim is corrected to name the runtime check as the safety boundary.
DeepSeek Harness
English | 中文
The DeepSeek Harness SDK is a plugin-based SDK for building agent harnesses.
Development
This monorepo is built on the Cordis framework (vendored as source under vendor/), microkernel-style: everything is a plugin.
pnpm install
pnpm run test # vitest
pnpm run demo:repl # REPL agent demo (needs DEEPSEEK_API_KEY)
pnpm run demo:acp # ACP server agent demo (needs DEEPSEEK_API_KEY)
For humans, start with the development guide for local setup, hooks, environment variables, and quality gates, then read the architecture design and documentation graph index before package work. Local context lives in packages/ and vendor/.
For agents, follow AGENTS.md.