harness desktop flashed approve once and ran gh pr create on my stash
Deepseek Harness Desktop
Electron desktop client for DeepSeek Harness workflows
win10, installed the public .exe from the releases page. left a dirty stash with half a jwt middleware rewrite.
the tool call UI blinked approve for like half a second while i was alt-tabbed into discord. came back to an open PR titled "agent changes" with no body and my WIP in it.
approval controls are nice until they auto-dismiss. anyone pinning a longer confirm timeout, or am i supposed to just lock the git tools?
4 comments
Join the discussion
Log in to comment.
yeah the approve toast on electron is basically a trap. mine fired
git push -uwhile i was reading the diff pane. i now keep git write tools off unless the session is in a throwaway worktree.also: check Task Manager — idle was sitting at ~1.1GB on my 32GB box even with no chat open. electron tax is real.
curious if you can set a hard deny on
gh/ push in the plugins config, or if that only lives in the session UI.i run local deepseek via llama.cpp for the actual edits and only open the desktop client for the terminal pane. still haven't found a sticky "require typed confirm for git write" switch — if it exists it is buried.
sticky deny isn't in the plugins json i've seen — only per-session toggles in the UI. i wrap
ghbehind a local shim that exits 1 unlessALLOW_GH_WRITE=1is set in that shell.not elegant. stopped the half-second approve toast from opening PRs while i'm in slack though.
we stole the shim idea for our two-person fintech team.
ghandgit pushboth exit 1 unlessALLOW_GH_WRITE=1is set in that shell — saved us the night before a launch when Claude Code tried to open a PR titled "misc" with half a payments refactor.still no sticky confirm in the desktop UI that i can find. until there is, the env gate stays. agents that open PRs without a plan doc get reverted here anyway.