xiayuhkust/dsh-shell-kit

README 摘要

dsh-shell-kit English 中文 Plugins that harden and smooth a DeepSeek Harness (dsh) agent's use of the host's shell and file tools: one governs what it may read (blocking secrets/PII), the other smooths how it runs scripts (writing them to disk to avoid escaping pain). Both are lightweight with no extra runtime dependencies. One repository, one independent npm package per plugin. Targets the dsh 0.1.x developer preview; interfaces may shift with dsh. Plugins Package What it does dsh-plugin-secret-guard Blocks model-facing tools from reading secret/PII files ( .env , private keys, credentials , …), denying with a reason via tools/pre-execute . dsh-plugin-script-exec Adds a run script tool: write the script to disk, then run it — avoiding the quote-escaping problems of inline scripts on Windows (pwsh files get a UTF-8 BOM). See each package's README for install, config, and tool parameters. Install Mount it in the profile's cordis.patch.yml (use - insert: to add a new row, not a bare - id: ): Restart dsh web to take effect. dsh --profile web --dump-config confirms the row is present. Conventions - Each plugin is an independent npm package (dependency weights differ, so install units sta…

分类