dsh-plugin-git-inspect

简体中文 | English


Read-only Git visibility for agents running inside DeepSeek Harness.

> [!NOTE] > This is an independent community plugin. It is not part of the official DeepSeek Harness distribution.

What It Adds

The plugin registers ten read-only model-facing tools:

The working directory comes from the active Harness session (session.header.cwd). When a session does not provide one, the plugin falls back to the host process working directory.

Safety Model

• It never invokes a shell. git is resolved through the Harness subprocess service and started with a fixed argv vector.
• User paths are passed after Git's -- pathspec separator; shell expansion is never involved.
• Pager, color, external diff, text conversion, optional Git locks, and terminal prompts are disabled for predictable automation.
• Only inspection commands are exposed. There is no commit, push, reset, stash, checkout, or file-editing tool.
• The Harness cancellation signal is forwarded to the child process.
• stdout and stderr are bounded by configuration; the result reports when output was truncated.
• git_blame returns 50 lines by default and is capped at 200 lines, preventing whole-file attribution from consuming the model context.

Requirements

• Windows, macOS, or Linux with git available on the host PATH.
• Node.js >=22.19.0.
• A DeepSeek Harness composition providing:

- @deepseek-ai/dsh-tools - @deepseek-ai/dsh-system-prompt - @deepseek-ai/dsh-subprocess

• A subprocess implementation, such as @deepseek-ai/dsh-subprocess-local.

v0.3.2 is type-checked, tested, built, and package-validated against DeepSeek Harness 0.1.1-rc.2 while retaining compatibility with 0.1.0-rc.5 through rc.8 and 0.1.1-rc.1.

Install As A Bundle

The repository ships cordis.patch.yml and declares dsh.bundle in package.json. With the Harness CLI installed, add it to the web profile:

dsh plugin --profile web add https://github.com/Wanbinyu/dsh-plugin-git-inspect/releases/download/v0.3.2/dsh-plugin-git-inspect-0.3.2.tgz

Restart dsh after installation. The bundle inserts the git-inspect row and installs the plugin runtime. You can inspect or customize [cordis.patch.yml](cordis.patch.yml).

Manual Installation

If the host project needs to own the composition layer, install the package and add the row manually:

npm install github:Wanbinyu/dsh-plugin-git-inspect

Add this row to a Cordis composition that already provides the required Harness services:

- id: git-inspect
  name: dsh-plugin-git-inspect
  config:
    timeoutMs: 30000
    maxOutputBytes: 200000
    stderrMaxBytes: 16384
    graceMs: 1000
    defaultLogCount: 20
    maxLogCount: 100
    defaultBlameLineCount: 50
    maxBlameLineCount: 200

The repository includes an overlay example at [examples/cordis.yml](examples/cordis.yml). The overlay does not install a subprocess provider; that remains a host composition responsibility.

Configuration

All limits must be positive integers. Each default count cannot exceed its corresponding maximum.

Tool Calls

{"name":"git_status","arguments":{}}

{"name":"git_diff","arguments":{"staged":true,"path":"src/index.ts"}}

{"name":"git_log","arguments":{"maxCount":10,"path":"src/index.ts"}}

{"name":"git_show","arguments":{"revision":"HEAD","path":"src/index.ts"}}

{"name":"git_conflicts","arguments":{}}

{"name":"git_blame","arguments":{"path":"src/index.ts","startLine":20,"lineCount":30}}

{"name":"git_stash_list","arguments":{"maxCount":10}}

{"name":"git_worktree_list","arguments":{}}

Non-zero Git exit codes, a missing repository, a blank path, an aborted request, or a terminated subprocess are reported as structured tool errors instead of being treated as successful output.

Development

git clone https://github.com/Wanbinyu/dsh-plugin-git-inspect.git
cd dsh-plugin-git-inspect
npm install
npm run verify

The integration suite creates temporary repositories and exercises the real git executable through the local Harness subprocess provider. It covers branch status, working-tree and staged diffs, diff summaries, revisions, refs, conflicts, blame, stashes, worktrees, path-filtered history, bounded output, cancellation/error paths, and argv safety. verify runs type checking, tests, the build, and package-content validation; GitHub Actions executes it on Node.js 22 under both Ubuntu and Windows.

Scope

This plugin is a read-only inspection surface for agent workflows. Write operations, remote synchronization, branch switching, worktree management, and file editing are deliberately out of scope so a host composition can apply its own approval policy.

Links

• DeepSeek Harness
• GitHub repository
• Issues
• 简体中文说明

License

MIT. See [LICENSE](LICENSE).