zootguru/dsh-vpn-ops

README 摘要

dsh-vpn-ops 简体中文 Safety-gated WireGuard and VLESS Reality operations for DeepSeek Harness (DSH). dsh-vpn-ops is a real DSH bundle: it ships cordis.patch.yml , exports a Cordis apply(ctx, config) lifecycle entry point, and registers eight typed tools. It turns a reviewed, allowlisted server definition into repeatable preflight, plan, apply, status, verification, rollback, and client-export operations. Status: 0.1.0 initial public release. The bundle load path is verified against DSH 0.1.1-rc.2 ; production network rollout still requires an operator-owned staging server and acceptance test. See Compatibility and Limitations. Why this is not “SSH from the model” The model can choose only a configured targetId and clientId . It cannot supply a host, credential, remote path, package URL, or shell command. - Strict host-key checking and public-key-only SSH are mandatory. - Every process is spawned with an argv array; no local shell is used. - Remote work runs a fixed helper shipped in the reviewed package. - Remote mutation defaults to off. - vpn apply requires a fresh, persisted plan, an unchanged remote baseline, and the exact confirmation string returned by vpn plan . - Apply writes b…

分类