DeepSeek Harness published 0.2.2-rc.1 on November 4, 2026, as a pre-release and the first release candidate in the 0.2.2 series. Its headline additions are experimental delegation to locally installed Codex or Claude command-line tools and separate Git worktrees for Sessions. The official release notes also set a Node.js 24.9 minimum and change several file and network defaults.
Delegate independent tasks to local coding CLIs
The experimental subagent_oar plugin can delegate independent tasks to locally installed Codex or Claude CLIs. DeepSeek Harness says delegation tools follow the current Agent’s tool restrictions, a specific guardrail for work handed off by the Harness agent.
Before upgrading, check the runtime requirement and review the changed file and network defaults against your deployment.
Run Sessions in separate Git worktrees
The experimental Change requests and worktrees plugin gives each Session a separate Git worktree. It also supports searchable local and pull-request diffs, per-file navigation, quoting code or comments, and tracking checks and reviews. If you already enabled the standalone @deepseek-ai/dsh-experimental-tool-worktree plugin, remove it from dsh.profile.bundles; its entry is incorporated into the newer plugin.
Check these runtime and plugin changes before upgrading
Harness 0.2.2-rc.1 requires Node.js 24.9 or later. The release advises updating an older Node.js runtime before upgrading Harness. Developers maintaining self-deployed components also need to account for changes to the PTC and SSH control paths.
| Change | What to update |
| Minimum runtime | Upgrade Node.js to 24.9 or later before upgrading Harness. |
| Standalone worktree plugin | If enabled, remove @deepseek-ai/dsh-experimental-tool-worktree from dsh.profile.bundles. |
| PTC and SSH protocols | The Node control channel moves to birpc, and SSH moves from protocol version 2 to version 3. Update self-deployed bootstraps and SSH helpers accordingly. |
The release also changes plugin interfaces, including conditional per-step tool activation, asynchronous Session Projection registration, and the separation of native and PTC execution plugins. For PTC Mode consumers, caller-cancelled run_code calls now return ABORTED rather than CODE_RUN_FAILED, so SDK and Session handling needs to account for the new cancellation status.
Review file and network behavior
Read-before-write and external-change checks are disabled by default. Sandbox limits and the Review screen remain, and a profile can restore the previous observation policy. The separate apply_patch tool is also disabled by default; when enabled, it can create, edit, delete, or move multiple files in one call, with changes available in Review.
Web Fetch can access non-public addresses. Deployments need to restrict network access separately.
Interface and image-upload changes
The interface adds Japanese, Spanish, French, German, Russian, and Brazilian Portuguese text and locale configuration. The default upload limit is now 50 MiB per image. The release also supports updating third-party plugin packages and attempts to restore the previous version if a hot update fails.
