feat(dsh): qualify portable report rendering (#113)

Qualify DeepSeek Harness for the existing portable HTML and Markdown report path while preserving explicit no-files behavior and the shared publication contract.\n\nImplements Issue #112 using docs/specs/2026-08-25-112-deepseek-harness-portable-report-rendering.md. Validated with native DSH smoke checks, focused Node 24 tests, the full four-lane GitHub CI matrix, browser coverage, and package verification.\n\nCo-authored-by: Codex (GPT 5.6 Sol) <codex@openai.com>

Author: Cobb04

docs/adapters/README.md

@@ -4,7 +4,7 @@ This is the single entry point for Claude Code, Codex, Qoder, Cursor, Qwen,
 GitHub Copilot, Pi, Kimi Code, WorkBuddy, and Grok host boundaries, plus the
 DeepSeek Harness (DSH) verified install/discovery, developer-preview
 configured-assets, session, Asset Practices, neutral Harness analysis, and
-Evidence Bundle slices. Do not
+Evidence Bundle slices, plus qualified portable HTML report rendering. Do not
 create `docs/adapters/claude-code.md`, `docs/adapters/codex.md`,
 `docs/adapters/qoder.md`, `docs/adapters/cursor.md`, `docs/adapters/qwen.md`,
 `docs/adapters/copilot.md`, `docs/adapters/pi.md`,
@@ -46,7 +46,7 @@ project `.kimi-code/skills/`), then runs `/skill:better-harness`.
 | Kimi Code | Analysis-capable source-local host | `.kimi-plugin/plugin.json` | `scripts/agent-customize/providers/kimi.mjs` | `scripts/session-analysis/platforms/kimi.mjs` | self-contained HTML + Markdown | `AGENTS.md` + `~/.kimi-code/skills` + project `.kimi-code/skills`/`.kimi/skills` + `~/.kimi-code/mcp.json` | `harness evidence-bundle --platform kimi` -> validated `html` render |
 | WorkBuddy | Analysis-capable source-local host | none (skills install into `~/.workbuddy/skills`) | `scripts/agent-customize/providers/workbuddy.mjs` | `scripts/session-analysis/platforms/workbuddy.mjs` | self-contained HTML + Markdown | `~/.workbuddy` `AGENTS.md` + identity files + `.agents` + `AGENTS.md` | `session-analysis --platform workbuddy sources` -> validated `html` render |
 | Grok | Analysis-capable source-local host | none (skills install into `~/.grok/skills`) | `scripts/agent-customize/providers/grok.mjs` | `scripts/session-analysis/platforms/grok.mjs` | self-contained HTML + Markdown | `~/.grok` + `.grok` + `.agents` + `AGENTS.md` | `session-analysis --platform grok sources` -> skill symlink -> validated `html` render |
-| DeepSeek Harness (DSH) | Verified install/discovery for headless/base and Web `standard`/`code`/`cordis`; shared read-only analysis over developer-preview configured and Session evidence | local DSH Cordis policy at `scripts/dsh-skill-discovery/index.mjs`; no lifecycle shell | `scripts/agent-customize/providers/dsh.mjs`; filesystem Skills and cwd-sensitive Instructions, configured-not-observed | `scripts/session-analysis/platforms/dsh.mjs`; `dsh-v1` for the audited format-0 session-evidence slice from DSH `dsh-v0.1.0-rc.7` and `dsh-v0.1.0-rc.8`, raw `.jsonl` and feature-detected `.jsonl.zstd` | unavailable; neutral `harness analyze` and Evidence Bundle only | canonical Skill from the complete root; model Skill calls rejected | `npm run test:dsh-native`; `npm run test:dsh-configured-assets-native`; shared analysis remains inline/no-files |
+| DeepSeek Harness (DSH) | Verified install/discovery for headless/base and Web `standard`/`code`/`cordis`; shared read-only analysis over developer-preview configured and Session evidence | local DSH Cordis policy at `scripts/dsh-skill-discovery/index.mjs`; no lifecycle shell | `scripts/agent-customize/providers/dsh.mjs`; filesystem Skills and cwd-sensitive Instructions, configured-not-observed | `scripts/session-analysis/platforms/dsh.mjs`; `dsh-v1` for the audited format-0 session-evidence slice from DSH `dsh-v0.1.0-rc.7` and `dsh-v0.1.0-rc.8`, raw `.jsonl` and feature-detected `.jsonl.zstd` | self-contained HTML + Markdown | canonical Skill from the complete root; model Skill calls rejected | `npm run test:dsh-native`; `npm run test:dsh-configured-assets-native`; validated portable `html` render and native output-root inertness |
 
 ## Read-only Plugin Lifecycle
 
@@ -221,9 +221,12 @@ edit host settings, or register an `apply` path.
   `--include-user-home` is supplied. The evidence is
   `configured-not-observed`: runtime/in-process Skills and active Cordis,
   Profile, and Preset composition remain unresolved. DSH advertises exactly
-  `sessionAnalysis`, `agentCustomize`, `assetPractices`, `harnessReport`, and
-  `evidenceBundle`. Shared analysis accepts a canonical contained `--cwd` and
-  remains inline/no-files because checkup, rendering, and output are unsupported. See
+  `sessionAnalysis`, `agentCustomize`, `assetPractices`, `harnessReport`,
+  `reportRendering`, and `evidenceBundle`. Shared analysis accepts a canonical
+  contained `--cwd`. Durable output reuses the portable renderer at the generic
+  Better Harness root `<target>/.dsh/better-harness`; explicit inline/no-files
+  operation remains write-free. Checkup, Canvas, Studio, and public Quickstart
+  support remain unavailable. See
   [DeepSeek Harness Configured Assets](../../references/agent-customize/platforms/dsh.md)
   and run the credential-free owner smoke with
   `npm run test:dsh-configured-assets-native`.
@@ -252,10 +255,13 @@ edit host settings, or register an `apply` path.
   remains readable. There is no fallback dependency or shell.
   The combined DSH boundary does not provide live PTY or process state,
   complete runtime configured-asset resolution, plugin lifecycle, a managed
-  shell, manifest or package integration, rendered report/output routing, README
+  shell, manifest or package integration, Canvas, Checkup, Studio, README
   Quickstart, SQLite or custom
   persistence, automatic optimization, plugin fault or causality attribution,
-  or artifact repair or writes. See
+  or repair or mutation of native DSH Session sources, Skills, Instructions, or
+  configuration/state. Better Harness-owned report writes and recovery remain
+  limited to `<target>/.dsh/better-harness` under the generic portable
+  publication contract. See
   [Story #93](https://github.com/QoderAI/better-harness/issues/93)
   and the [dated support specification](../specs/2026-08-18-93-deepseek-harness-session-evidence.md).
 
@@ -267,13 +273,15 @@ Canonical templates live under `templates/reporting/`.
   `findings.json`, Canvas-only `canvas.json`, and `report.canvas.tsx`.
 - `cursor-canvas.md`: Cursor Canvas output contract, covering the complete
   report, native Context Usage projection, and public IDE actions.
-- `html-visual.md`: portable Claude Code/Codex/Qwen/Copilot/Pi/Kimi Code/WorkBuddy/Grok visual output contract, covering
+- `html-visual.md`: portable Claude Code/Codex/Qwen/Copilot/Pi/Kimi Code/WorkBuddy/Grok/DeepSeek Harness visual output contract, covering
   `findings.json`, `report.md`, and `report.html`.
 - Markdown-only output has no visual companion.
 
-DSH is intentionally absent from these output-mode host lists. Its neutral
-`harnessReport` capability does not grant rendering, HTML, Canvas, or Markdown
-output support.
+DSH reuses the portable `html` mode to publish `findings.json`, `report.md`, and
+`report.html` at the generic Better Harness-owned root
+`<target>/.dsh/better-harness`. That root is not a native DSH storage contract.
+This qualification adds neither Canvas, Checkup, Studio, nor a claim of full
+DSH support.
 
 ## Split Triggers
 

docs/docs/hosts/adapter-matrix.md

@@ -14,14 +14,14 @@ host-neutral.
 ## Support levels
 
 Better Harness currently declares ten more complete capability-level host
-adapters plus bounded DSH discovery, configured-assets, and session slices. Six
-have verified public
-Quickstart paths. Pi, Kimi Code, WorkBuddy, and Grok are visible as adapter
-support because their installation and end-to-end evidence boundaries differ
-from that six-host set. DSH has Verified install/discovery for a qualified
-runtime/preset boundary plus developer-preview configured-assets and
-session-evidence contracts. It supports shared read-only Asset Practices,
-neutral Harness analysis, and Evidence Bundles, but is not an output adapter. The
+adapters plus bounded DSH discovery, configured-assets, and session slices.
+Six have verified public Quickstart paths. Pi, Kimi Code, WorkBuddy, and Grok
+are visible as adapter support because their installation and end-to-end
+evidence boundaries differ from that six-host set. DSH has Verified
+install/discovery for a qualified runtime/preset boundary plus developer-preview
+configured-assets and session-evidence contracts. It supports shared read-only
+Asset Practices, neutral Harness analysis, Evidence Bundles, and qualified
+portable HTML durable output. The
 [canonical adapter matrix](https://github.com/QoderAI/better-harness/blob/main/docs/adapters/README.md)
 remains the complete capability-level source of truth.
 
@@ -39,7 +39,7 @@ remains the complete capability-level source of truth.
 | Kimi Code | Adapter support | Analysis-capable source-local host | `.kimi-plugin/plugin.json` | Workspace-matching Kimi wire transcripts | Self-contained HTML + Markdown |
 | WorkBuddy | Adapter support | Analysis-capable source-local host | None; skills use WorkBuddy-owned paths | Workspace-matching WorkBuddy JSONL transcripts | Self-contained HTML + Markdown |
 | Grok | Adapter support | Analysis-capable source-local host | None; skills use Grok-owned paths | Workspace-matching Grok session dirs (`updates.jsonl`) | Self-contained HTML + Markdown |
-| DeepSeek Harness (DSH) | Verified install/discovery | Qualified headless/base and Web `standard`/`code`/`cordis`; shared read-only analysis over partial configured-assets and session evidence | Local DSH Cordis policy; no lifecycle shell | DSH JSONL backend session format `0`: raw `.jsonl` and feature-detected `.jsonl.zstd` | Unavailable; inline/no-files analysis only |
+| DeepSeek Harness (DSH) | Verified install/discovery | Qualified headless/base and Web `standard`/`code`/`cordis`; shared read-only analysis over partial configured-assets and session evidence | Local DSH Cordis policy; no lifecycle shell | DSH JSONL backend session format `0`: raw `.jsonl` and feature-detected `.jsonl.zstd` | Self-contained HTML + Markdown |
 
 The `@qoder-ai/better-harness` npm package includes all seven plugin metadata
 roots. Pi reuses install metadata in the existing `package.json`, so it does
@@ -78,13 +78,16 @@ lifecycle target.
   `canvas.json`, and `report.canvas.tsx`.
 - **Cursor Canvas** — the same complete report contract rendered with
   `cursor/canvas`, native Context Window evidence, and IDE actions.
-- **HTML visual** — portable Claude Code/Codex/Qwen/Copilot/Pi/Kimi Code/WorkBuddy/Grok contract
+- **HTML visual** — portable Claude Code/Codex/Qwen/Copilot/Pi/Kimi Code/WorkBuddy/Grok/DeepSeek Harness contract
   covering `findings.json`, `report.md`, and a self-contained `report.html`
   (see the [sample report](pathname:///demo/better-harness-report/)).
 - **Markdown-only** — no visual companion.
 
-DSH is not an output-mode host. Neutral Harness analysis and Evidence Bundle
-support do not grant HTML, Canvas, Markdown, or durable report routing.
+DSH reuses the portable `html` mode to publish `findings.json`, `report.md`, and
+`report.html` at the generic Better Harness-owned root
+`<target>/.dsh/better-harness`. That root is not a native DSH storage contract.
+This qualification adds neither Canvas, Checkup, Studio, nor a claim of full
+DSH support.
 
 ## Adapter support boundaries
 
@@ -159,10 +162,12 @@ better-harness agent-customize inventory --provider dsh --workspace <path> [--cw
 User-home Skills and Instructions are not read by default. Runtime/in-process
 Skills and active Cordis, Profile, and Preset composition remain unresolved.
 The host advertises exactly `sessionAnalysis`, `agentCustomize`,
-`assetPractices`, `harnessReport`, and `evidenceBundle`. Shared analysis freezes
+`assetPractices`, `harnessReport`, `reportRendering`, and `evidenceBundle`.
+Shared analysis freezes
 canonical `--cwd` for current configured practice while leaving historical
-Session scope unchanged. Rendering, output routing, Checkup, and Quickstart
-remain unsupported.
+Session scope unchanged. Durable output reuses the existing portable renderer;
+explicit inline/no-files operation remains write-free. Checkup, Canvas, Studio,
+and public Quickstart support remain unavailable.
 Repository contributors can run the pinned credential-free comparison with
 `npm run test:dsh-configured-assets-native`. See
 [DeepSeek Harness Configured Assets](https://github.com/QoderAI/better-harness/blob/main/references/agent-customize/platforms/dsh.md).
@@ -196,11 +201,15 @@ The implemented source-checkout smoke boundary is read-only:
 node scripts/session-analysis.mjs sources --platform dsh --workspace <path> [--dsh-home <dir>]
 ```
 
-Shared analysis does not imply a complete report loop. DSH has no live
+Qualified portable output does not imply complete native DSH integration. DSH has no live
 PTY/process integration, complete runtime configured-asset resolution, plugin
-lifecycle, managed shell, manifest, package integration, rendered report/output route,
-public Quickstart, SQLite or custom persistence support, automatic
-optimization, plugin-fault attribution, or artifact mutation/recovery. See the
+lifecycle, managed shell, manifest, package integration, Canvas, Checkup,
+Studio, public Quickstart, SQLite or custom persistence support, automatic
+optimization, plugin-fault attribution, or mutation/recovery of native DSH
+Session sources, Skills, Instructions, or configuration/state. Better
+Harness-owned `findings.json`, `report.md`, and `report.html` remain managed
+under `<target>/.dsh/better-harness` by the generic portable publication and
+rollback contract. See the
 [canonical source matrix](https://github.com/QoderAI/better-harness/blob/main/docs/adapters/README.md)
 and [Story #93](https://github.com/QoderAI/better-harness/issues/93).