Web Session-log export command and shared download dialog

Remote BFF assembly and Host Agent/Session lookup policy

Background job registry (ctx.jobs) for the DeepSeek Harness — shared ids, owner isolation, polling, cancellation, and completion listeners for long-running tool work

Human-facing slash command for persisted same-session goals

Wire consumer layer: HTTP-up/WebSocket-down client, ConnectionController dual streams with reconnect, and fixture api

Local process-sandbox backends for the DeepSeek Harness sandbox seam: bwrap, the npm-distributed landlock-run launcher, macOS Seatbelt, or the Windows ACL restricted-token runner — functionally probed, fail-closed

Model-facing same-session goal tools with execution-time authority checks

Shared LLM generation policy for DeepSeek Harness session-title providers

Abstract process-sandbox seam (ctx.sandbox) for the DeepSeek Harness: same-world confinement vocabulary and the SandboxProvider contract

Zero-dependency bounded-retention primitive: ItemRetainer/TextRetainer + neutral notice helpers (what did we keep, what did we omit)

Web ask_user_question feature: host tool mount plus composer-takeover question UI

Model-facing filesystem tools (read, write, edit) over the DeepSeek Harness filesystem seam (ctx.fs)

File-backed credentials provider ($DSH_HOME/.env under the live process environment) for the DeepSeek Harness

Local PowerShell implementation of the DeepSeek Harness bash executor seam

Registry service for package-owned DeepSeek Harness runtime invariants

Abstract filesystem capability seam (ctx.fs) for the DeepSeek Harness — vocabulary types, the FileSystem service (text IO + optional version-guarded atomic mutations), and the fs/* policy event vocabulary

Local-subprocess implementation of the DeepSeek Harness bash executor seam

Shell-side React glue: createSlotRenderer, SessionProvider, bindSnapshotSelector (uSES bridge), useInvoke

Sandbox-consuming implementation of the DeepSeek Harness bash executor seam (confines every command via ctx.sandbox, reports denial/enforcement result facts)

OpenTelemetry backend for the DeepSeek Harness telemetry seam: hands captured session records to the OTel JS SDK's log pipeline