dsh-updater

Keeping a git-checkout or npm-global DeepSeek Harness installation current means manually pulling the harness, updating every integration repo under the integrations directory, and re-running install and build after each upstream release. A single failed step leaves you with a half-finished state, and a local divergence demands careful manual handling. dsh-updater wraps that entire chain into a single background job: detect the install form, fast-forward pull, frozen-lockfile install, build, and automatic rollback on failure.

The safety model is deliberately strict. Checking and updating are separated by default; execution requires an explicit call. Pulls use --ff-only exclusively; diverged targets are reported, never auto-merged or rebased. If install or build fails, the process immediately resets to the pre-update commit, leaving no partial state. After a successful update, only a pendingRestart banner is set and restarting DSH is always the user's decision. The optional auto-apply mode activates only when the system is idle and no job is running, skips diverged or dirty targets, and never retries a version that has already failed. It uses only built-in Node modules, has zero third-party dependencies, requires no sudo, and writes exclusively to user directories.

It is aimed at developers who track DSH upstream releases frequently, maintain multiple integration repositories, and prefer to reduce a repetitive multi-step update routine to a single natural-language command.