dsh-self-updater

Upgrading DeepSeek Harness Web used to mean manually running npm, cross-checking versions, and restarting the process by hand — one slip could disturb the sessions, configs, and custom profiles stored under $DSH_HOME, and you are left staring at a terminal log wondering if anything went wrong. dsh-self-updater folds that entire flow into a small version pill in the top-right corner of the DSH Web page: tap it to compare the installed version against the registry latest tag, and with one confirmation it pulls the exact package, validates via SemVer, installs, and restarts, all while streaming trimmed npm logs and blocking concurrent update attempts.

Safety constraints are baked in: the target package is hardcoded to @deepseek-ai/dsh and the version must come from the npm latest dist-tag; after install it re-reads the on-disk manifest and refuses to restart if versions mismatch; the npm cache lives under $DSH_HOME/self-updater/npm-cache instead of the system path to avoid permission issues; a failed update stays on the current version with error logs visible in the panel. HTTP routes only accept loopback and same-origin browser requests, keeping the attack surface local.

Built for operators and power users who maintain a DSH Web workflow daily and want upgrades to be safe, low-friction, and mostly hands-off. After a single install and restart, the version pill appears and every future update is one click away.