DeepSeek Harness Desktop v0.1.18

What changed

• Pinned the upstream runtime to @deepseek-ai/dsh@0.2.2-rc.1.
• DSH 0.2.2 declares engines.node >= 24.9.0. The launcher's environment gate now enforces a single Node.js floor of 24.9, replacing the previous “22.19+ on the 22.x line, or 24.2+ on the 24.x line” rule: Node.js 22.x, Node.js 23 and 24.0–24.8 are rejected up front with an installation hint instead of being started and failing. The Chinese and English README and the site copy follow the same floor.
• The preinstalled plugins need no changes. Their declared DSH compatibility ranges still pass 0.2.2's runtime preflight, both plugin sources type-check cleanly against 0.2.2-rc.1, and diff-review's rebuilt bundle is byte-for-byte identical to the shipped one. webserver/index-inject (used by webview-compat and webview-links) and the dsh web flags the shell passes (--no-open, --host, --port, --trusted-host) are unchanged.
• The phone-remote entry button is hidden for now (the panel, pairing and relay code are untouched). Setting REMOTE_PANEL_ENTRY_ENABLED = true in frontend/src/main.js restores it.
• Everything else is unchanged from v0.1.17: open-editor, diff-review (git working-tree review: staged/unstaged, accept/revert, commit/push/PR, AI review), account-login, webview-compat, webview-links (external links to the system browser) and desktop notifications.

Verification

An isolated end-to-end run of @deepseek-ai/dsh@0.2.2-rc.1 with the shipped preinstall set reaches ready and loads the Web UI with no plugin console errors. The desktop shell builds, and its Go test suite passes, including the updated Node.js gate cases.

Compatibility

Upstream DSH	@deepseek-ai/dsh@0.2.2-rc.1
Node.js	24.9 or later
Desktop platforms	macOS universal, Windows amd64, Linux amd64

Downloads

• macOS universal DMG
• macOS universal ZIP
• Windows amd64 EXE
• Linux amd64 tar.gz

Known limitations

• Node.js 24.9 or newer is required; older runtimes are rejected at startup.
• The first launch downloads the 0.2.2 dependency set, which is large; on a slow connection let the download finish and relaunch.
• diff-review reviews the git working tree, not in-conversation session changes; use the upstream changed-files card for those.
• Phone access is for a trusted LAN, not a public internet relay. The host uses HTTPS and device pairing; do not expose it directly to the internet.
• Windows executables are not code-signed; macOS packages are signed with a Developer ID certificate and notarized.
• Upstream DeepSeek Harness remains in developer preview and may introduce compatibility-breaking changes.