Add hyperagents_dsh: DeepSeek Harness as a first-class candidate (rebase of #57)

[Andyyesiyu]

Summary

Rebases / replays #57 onto current main (post-#77 continuous evolve agent) so hyperagents_dsh can merge first.

What conflicted and how it was resolved

Area	Conflict	Resolution
docs/concepts/design.md	Recipe inventory list vs full-benchmark profiles from main	Kept tbench_full recipes and added hyperagents_dsh
recipes/README.md	Same inventory split	Listed dsh alongside existing HyperAgents / tbench_full entries
docs/QUICKSTART.md	Root QUICKSTART.md no longer exists on main	Relocated edit to docs/QUICKSTART.md with corrected relative link
tests/test_recipe_inventory.py, test_phase_e_recipes.py, fixtures, release artifact	Inventory/operator expectations diverged after tbench_full landed	Merged both: keep tbench_full coverage; add local-mutate / node_check / builtin-dsh assertions and exclude dsh from Codex-image expectations

What this PR keeps from #57

• recipes/hyperagents_dsh/ (recipe + doctor + prepare-runtime)
• seeds/dsh/ (profile, Harbor adapter, runners, compositions)
• library/validate/node_check.py
• builtin-dsh registration in src/evolve/workspace.py
• inventory / composition / phase / release tests

Fixes applied for merge readiness

1. Node ≥ 22.19 truly enforced in prepare-runtime.sh (rejects 22.0–22.18; accepts 22.19+ / later majors). Covered by tests/test_hyperagents_dsh.py.
2. SDK / sandbox boundaries documented and tightened
   • Recipe README + scaffold AGENTS.md: dsh Python SDK is not the unrelated PyPI name; uv add from a deepseek-harness clone path.
   • mutate_local preflight fails nonzero if deepseek_harness is not importable.
   • Mutation cordis sandbox policy: workspace-write (not danger-full-access).
3. mutate_local failure semantics: exhausted driver failures with no target/ changes propagate the driver exit code (no longer masquerade as clean no_proposal). Successful no-ops still return 0 so the framework records discard / no changes to commit.
4. Harbor adapter: nonzero / timeout dsh driver exits raise instead of looking like a successful agent phase.
5. Operator inventory docs (library/PROTOCOL.md, library/README.md) list node_check.

Follow-ups (explicitly out of scope)

• Efficiency usage metrics / efficiency_floor gate
• Outer-agent SPEC-001 / Ralph loop
• SoL-Pi mechanism ports
• Stronger host-side isolation of candidate-owned .mjs plugins during rollout (documented as trusted eval infrastructure for now)

Test plan

• Focused: inventory, phase-e, composition (dsh + resource consumer), operator-config fixture, test_hyperagents_dsh.py
• Default suite: uv run --frozen pytest -q → 1550 passed, 17 skipped
• Prefer merging this branch rather than resurrecting the dirty Add hyperagents_dsh: DeepSeek Harness as a first-class candidate #57 head.

Supersedes the merge path for #57.

  

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}