dsh-lifeboat

When a DeepSeek Harness profile refuses to boot because of a bad bundle, you cannot see which one is at fault and editing the manifest by hand is risky. dsh-lifeboat is an out-of-process recovery console built for exactly that moment: every probe runs against a fresh cloned snapshot in the OS temp directory while the original profile stays read-only until you explicitly confirm a recovery.

Under the hood it offers config probes and optional runtime survival probes, then uses bounded delta debugging to shrink the set of suspect bundles followed by shallow exact enumeration to prove minimality. Each candidate removal plan is independently re-verified in yet another fresh Home; failed runs, unstable evidence, or snapshot drift all suppress automatic recovery. On confirmed success the system acquires a cross-process lock, hash-checks the manifest, writes an atomic SHA-256-named backup, removes only the selected bundles while keeping dependencies installed, and supports one-click undo that survives a service restart. The server binds to loopback only, write operations require a per-process random token, there are zero runtime dependencies, and both a Web UI and a CLI JSON report are available for incident response or CI pipelines.

It is aimed at teams or individuals who maintain multi-bundle Harness profiles and need a safe, auditable, and reversible way to diagnose and fix startup failures without touching production config. It complements dsh-guard in-process snapshot rollback by covering the gap where the process never starts at all, giving operators a focused, dependency-free rescue path that never runs inside the failing Harness process itself.