dsh-mobile-apk — DeepSeek Harness Android Shell APK
🌐 中文说明 / 中文 README
dsh-mobile 生态 · dsh-shell-termux（shell）· dsh-client-ui-responsive（移动 UI）· dsh-host-web-compat（浏览器兼容）
0.13.0 — official release: the ADB real channel (pairing / port discovery / shell execution / authorization gates / audit) is fully implemented and device-verified.
- Plugin-marketplace caveat: the built-in marketplace covers many third-party plugins, and most of them are likely unavailable or buggy on phones (mobile vs desktop differ in WebView engine / filesystem / permission model / runtime). Mobile adaptation is long-term work — treat this beta as usability validation & feedback, not a production dependency. Report plugin issues to the issue tracker with device model / version / reproduction steps.
Android shell for DeepSeek Harness: WebView UI
over an embedded Termux runtime snapshot (extract-and-run, no Termux app needed), SAF directory
bridge, keep-alive foreground service, engine watchdog, and online runtime updates. One APK to
install: it boots a full dsh web agent that can really execute bash. App name DeepCode (icon text
DeepSearch), package com.dsharnessmobile.shell, version 0.13.0-fx-1 (versionCode 26).
Features
- Embedded runtime — xz snapshot (arm64 151.6 MB / x86_64 158.9 MB) bundling node + git + bash +
coreutils + dsh + plugins + pnpm + python/perl/ruby; first launch extracts in 2–4 min
(
refreshSnapshot), engine listens on 127.0.0.1:3080; fully offline.
- File-to-session (F5) — "Open with / Share" auto-jumps into this app and forces a fresh temp
workspace session for the file; temp workspaces get a 7-day TTL auto-cleanup and appear in the
workspace panel (issue #60).
- Search (grep/glob) — mobile ripgrep platform package (android-arm64, pcre2/NEON full-featured).
- Notifications — automatic task-completion notifications (engine event bridge + watchdog
consumer); system notification chain incl. authorization requests.
- Mobile UI — responsive plugin (drawer/sheet on phones); adjustable font size, immersive status
bar, dark theme.
- Built-in console — standalone bash terminal (
assets/console.html + embedded Termux), usable
for diagnostics even when the engine is down.
- Keep-alive — foreground service + 5s watchdog (auto-restarts a hung engine) + 3s UI monitor
poll + crash auto-rollback gate (UndoGate).
- Online runtime updates — manifest-driven snapshot swap (download → sha256 → atomic switch →
auto-restart); the running runtime can update itself without an APK update.
- SAF bridge —
pickDirectory maps the picked tree to a real path (/storage/emulated/0/…).
- Device access — All Files Access; Shizuku probe example.
- ADB real channel (0.13.0) — real
adb pair SPAKE2 handshake + NSD/mDNS port discovery,
shell execution via adbd (uid 2000) with danger-command blacklist, three-gate authorization
(All Files Access / in-app switch / pairing code) plus live session-mode gating, and native audit
(files/audit/audit.ndjson); connect-port rotation self-heals with a 5555 fallback.
Download / Install
Release v0.13.0-fx-1 ships two ABI variants (plus snapshot archives, plugin packages,
MANIFEST checksums and release notes):
| APK |
Target |
dsh-mobile-apk-v0.13.0-fx-1-arm64.apk |
arm64 devices (real phones) |
dsh-mobile-apk-v0.13.0-fx-1-x86_64.apk |
x86_64 emulators / devices |
adb install -r -t <apk> # same-signature overwrite install
ABI must match the device. A mismatched snapshot crashes the engine at startup — node ELF
EM_X86_64 vs EM_AARCH64. Pick arm64 for real phones, x86_64 for emulators.
Build
Snapshot build & packaging live in the coordination repo
(dsh-mobile); this repo is the shell. Requirements:
JDK 17+, Android SDK (compileSdk 36); Gradle 8.11.1 via wrapper.
# Snapshot build (Termux sources + dependency closure + pnpm + cordis overrides + slimming):
node scripts\build-snapshot-013.mjs <arm64|x86_64>
# One-shot packaging (snapshot → injection → gates → gradle):
pwsh scripts\build-apk-013.ps1 -Suffix "-preview"
# output: out\v0.13.0\dsh-mobile-apk-v<ver>-<abi>.apk
Gates (inside build-apk-013.ps1): third-party compliance (check-third-party.mjs, GPL
obligations) / secrets / ELF / cordis mount-set ⊇ injected set / LICENSES self-check (Python
streaming) — any failure rejects the build.
Bridge protocol v1 (window.androidBridge)
App name DeepCode (icon text DeepSearch), package com.dsharnessmobile.shell.
androidBridge.version returns the app version (currently 0.13.0-fx-1, versionCode 26);
pages feature-detect on it. The ADB methods below are the preview authorization surface — the real
channel completes in the 0.13.0 official release.
Synchronous
| method |
signature |
description |
version |
() → string |
app version (0.13.0-fx-1) for feature detection |
getSystemDark |
() → boolean |
system dark mode (bypasses vendor WebViews whose matchMedia is stuck on light; used by the first-frame theme bridge) |
checkEngine |
() → string |
probes 127.0.0.1:3080; JSON {running, latencyMs, error?} |
hasAllFilesAccess |
() → boolean |
whether All Files Access is granted (external workspace requirement) |
getPickToken |
() → string |
one-shot token for the directory-picker bridge (validated by the engine-side pick endpoint) |
copyText |
(text) → boolean |
native clipboard write (WebView clipboard.writeText is always rejected; page falls back to this) |
getDevLogEnabled |
() → boolean |
dev debug-log toggle state |
getAdbState |
() → string |
ADB authorization state view (gate state machine): JSON {fullAccess, allowSwitch, paired, wirelessDebugOn, message} (preview) |
discoverAdbPorts |
() → string |
wireless-debug port auto-scan (native TCP sweep): pairing-port candidates as JSONArray; [] while wireless debugging is off (preview) |
setAdbPair |
(code, pairPort, connectPort) → boolean |
gate-3 pairing: real adb pair handshake; the code goes to argv only — never into the audit log (preview) |
adbShell |
(cmd) → string |
ADB shell primitive: JSON {ok, stdout?, stderr?, guidance?}; fail-closed when not authorized (preview) |
Commands
| method |
signature |
description |
keepScreenOn |
(enable) |
screen-on wake lock |
showNotification |
(title, text) |
test notification channel (POST_NOTIFICATIONS) |
pickDirectory |
(callbackId) |
SAF tree picker; result async via window.__dshBridge.onDirectoryPicked(callbackId, path) |
pickImage |
(callbackId) |
SAF image picker; result async via the same callback |
setTextZoom |
(percent) |
WebView font scale (50–200; Settings → General slider) |
setImmersiveMode |
(enable) |
immersive status bar toggle (true = status bar normally hidden) |
downloadDebugLogs |
() |
exports engine logs + environment info (zipped, system download/share dialog) |
requestAllFilesAccess |
() |
opens the system All Files Access grant page (special permission) |
restartEngine |
() |
restarts the engine process (EngineService watchdog brings it back) |
shutdownToGuide |
() |
stops the engine and falls back to the test screen (no auto-restart) |
reloadWebUI |
() |
reloads the Web UI |
openConsole |
() |
opens the built-in console |
setDevLogEnabled |
(enabled) |
sets the dev debug-log toggle (logs go under dshdata/log/ when on) |
setAdbAllow |
(enable) |
gate-2 "allow access" switch (default off; off ⇒ channel fail-closed) (preview) |
revokeAdbPair |
() |
revoke pairing (disconnect + delete adbkey + clear state; audited) (preview) |
The bridge decouples the APK from the dsh version: pages feature-detect on androidBridge.version.
Online update protocol
- App fetches
manifest.json: {url, sha256, size} (default http://10.0.2.2:8899/manifest.json
for emulator testing; production points at a release server);
- Downloads the snapshot, verifies SHA-256, extracts to a staging dir (never touching the live tree),
atomically swaps
usr → usr-old → new usr, then kills the old engine — the watchdog
restarts it from the new runtime.
Test trigger: adb shell am start -n com.dsharnessmobile.shell/.MainActivity -a com.dsharnessmobile.shell.action.UPDATE;
status is written to files/update-status.txt. Test server: serve manifest.json + the snapshot from any
local HTTP server (default endpoint http://10.0.2.2:8899/manifest.json maps the host from the emulator).
Permissions
| permission |
purpose |
INTERNET |
WebView + engine probe |
POST_NOTIFICATIONS |
notification channel (runtime request on API 33+) |
FOREGROUND_SERVICE + FOREGROUND_SERVICE_DATA_SYNC |
keep-alive foreground service |
MANAGE_EXTERNAL_STORAGE |
All Files Access (external workspace requirement; special permission, user-granted) |
SAF picking needs no permission.
ABI & pagesize
arm64 and x86_64 are both verified end-to-end; APKs are distributed per-ABI (the embedded snapshot
is arch-specific). A 16KB-page build must be produced on a 16KB device (see docs/design.md §ABI).
License
MIT. Contains third-party components under their own licenses (see dependency declarations).
GPL compliance: copyleft license texts ship in all three forms — snapshot usr/share/LICENSES/,
repo LICENSES/, and APK assets/licenses/. Design rationale: docs/design.md.
Acknowledgments & invitation
Thanks to the community for feedback and contributions — especially cdwlll (environment issues),
haitunlang (MIUI 12 compatibility), TACONailoong (legacy-WebView compat), X-SCI-TECH (PRs),
Yangerwei (file race feedback), gr12-cmd (armv7l demand), cmyfqwq (coverage-install compatibility feedback).
Contributors welcome: Android compatibility testing (Huawei / Honor / Xiaomi custom WebViews),
armv7l and more device support, completing the ADB channel, and growing the plugin ecosystem.
Development & contribution guidelines live in each repo's AGENTS.md.
这是“dsh-mobile-apk”，一个 DeepSeek Harness（dsh）的 Android 壳应用：用 WebView 界面包住内嵌的 Termux 运行时快照，让你在手机上得到一个能真正执行 bash 的完整 dsh Web 智能体，不需要电脑，也不用单独装 Termux。