delegate-to-deepseek-harness

# Delegate to DeepSeek Harness

> Community Codex Skill for scoped, asynchronous DeepSeek delegation. Codex can submit a long-running workstream to a locally running DeepSeek Harness, continue independent work, and later collect a verified result through a loopback-only Web API and cwd-pinned file channel.

Canonical repository: https://github.com/papperrollinggery/delegate-to-deepseek-harness

## Core facts

- Project type: standalone Codex Skill plus a Python 3.10+ standard-library CLI.
- Current release line: v0.4.x; the machine-readable installed version is in VERSION.
- Primary use cases: copywriting, research synthesis, video-preproduction text, coding, review, and independent opinions inside larger projects.
- Parallel behavior: delegate returns after prompt acceptance by default; Codex should continue independent work and use collect at natural checkpoints.
- Long-running behavior: there is no default wall-clock wait limit; an explicit timeout limits only the client wait and never cancels the Harness turn.
- Update behavior: check-update.sh reads GitHub's latest published release metadata at most once per day, stays silent when current or offline, and asks for user approval before update-global.sh installs that release.
- Non-goals: Codex subagent creation, new Codex task creation, video rendering, media editing, upload, publication, or automatic external actions.
- Harness dependency: official DeepSeek Harness Web profile; compatibility target is @deepseek-ai/dsh 0.1.0-rc.7.
- Supported models: deepseek-v4-pro and deepseek-v4-flash through deepseek-official.
- Harness endpoint boundary: literal loopback hosts only: 127.0.0.1, localhost, or ::1. The separate update checker may read this repository's public latest-release metadata from GitHub.
- Runtime Python dependencies: none outside the standard library.
- Project status: community project; not affiliated with or endorsed by OpenAI or DeepSeek.
- Service lifecycle: operational commands auto-start the loopback service from a private state directory and return a service receipt; startup inherits DSH_HOME or normal dsh Home semantics, suppresses automatic browser opening, and supports --no-auto-start for fail-fast diagnostics. start/stop require POSIX process and signal support.
- License: MIT License. See https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/LICENSE.

## Primary documentation

- [English README](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/README.md): overview, installation, architecture, routing, CLI, safety, and FAQ.
- [Chinese README](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/README.zh-CN.md): complete Simplified Chinese documentation.
- [English use-case cookbook](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/docs/use-cases.md): copy-paste scenarios for copywriting, video preproduction, synthesis, code, and review.
- [Chinese use-case cookbook](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/docs/use-cases.zh-CN.md): Simplified Chinese scenario guide.
- [Security policy](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/SECURITY.md): invariants, limitations, and private disclosure guidance.
- [Contributing guide](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/CONTRIBUTING.md): validation and safe development workflow.

## Runtime artifacts

- [SKILL.md](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/SKILL.md): trigger description, safety rules, task routing, and delegation loop.
- [agents/openai.yaml](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/agents/openai.yaml): Codex-facing display metadata and default invocation prompt.
- [scripts/dsh_harness.py](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/scripts/dsh_harness.py): deterministic loopback-only Harness RPC client.
- [VERSION](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/VERSION): current published Skill version.
- [scripts/check-update.sh](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/scripts/check-update.sh): throttled, read-only update notification.
- [scripts/install-global.sh](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/scripts/install-global.sh): global Codex Skill installer.
- [scripts/update-global.sh](https://github.com/papperrollinggery/delegate-to-deepseek-harness/blob/main/scripts/update-global.sh): user-approved GitHub release updater.

## File-channel contract

- SCOPE.md: read/write scope and explicit limitations.
- TASK.md: bounded delegated task and output protocol.
- RESULT.md: primary result; preserve model-written content.
- OPINION.md: optional review or suggestion channel.
- ASK.md: blocking question or scope-expansion request; never auto-approve.
- STATUS.json: durable session, RPC, pre-prompt baseline sequence, model, resolved reasoning effort, preset, scope, completion, and status data; the baseline supports collection after early history events roll out.
- .dsh-delegation-history/<run-id>/: recoverable archive of the previous run's control files when a cwd is reused; sensitive local task data, not an isolation boundary.
- REPLY.md: reserved future channel; not implemented.

## Safety interpretation

- Loopback-only transport is mandatory because the Harness Web API has no authentication boundary.
- workspace-write is a write boundary only; it does not provide read or outbound-network isolation.
- proposal-only is an instructional expected-write guardrail; the actual write boundary remains the session cwd, and it is not a read sandbox.
- delegate, run, and send prompting paths are serialized per cwd by this CLI, and unsafe overlap with other running same-directory sessions is rejected; independent UI or third-party clients are outside that lock.
- collect uses the durable sessionId and rpcId in STATUS.json to finalize an asynchronous delegation without creating a second session.
- stop refuses to terminate a healthy owned Harness service while any session is still running; recovery of an owned but unresponsive process remains possible.
- Operational invocation authorizes safe loopback startup without a repeated user confirmation, but never authorizes credentials, account selection, payment, scope expansion, or high-risk approval.
- create, run, and delegate select a model and optional reasoning effort and also persist the RC.7 deployment-wide default selection.
- The minimal preset is deliberately rejected.

## Upstream references

- [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): official Harness source and developer-preview status.
- [OpenAI Skill documentation](https://developers.openai.com/codex/skills): current Skill structure and discovery model.