deepseekplugins

DeepSeek Harness plugin

dsh-github-reviewer

DeepSeek Harness plugin: automated GitHub PR review bot ported from LingoBridge

Tools & Capabilities
Jump to install

Source facts

Repository
Xinlong-Wu/dsh-github-reviewer
Latest update
Aug 21, 2026
Category
Tools & Capabilities
GitHub stars
1
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/Xinlong-Wu/dsh-github-reviewer
Plugin: dsh-github-reviewer
Author: Xinlong-Wu

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer4 files
README.en.mdSource · read only
README language

dsh-github-reviewer

English | 中文

![npm version](https://www.npmjs.com/package/dsh-github-reviewer) ![CI](https://github.com/Xinlong-Wu/dsh-github-reviewer/actions/workflows/ci.yml) ![license](https://github.com/Xinlong-Wu/dsh-github-reviewer/blob/main/LICENSE) ![node](https://nodejs.org)

A DeepSeek Harness plugin that polls configured GitHub repositories for open pull requests and posts automated COMMENT reviews. It is a TypeScript port of the GitHub reviewer built into LingoBridge, and it drives every review and /bot chat through the harness agent loop: one live Agent per PR, one session log per PR, durable through the harness session-persistence seam.

Features

  • Polls configured repositories for open pull requests; draft PRs are skipped.
  • Authenticates as a GitHub App (RS256 app JWT → short-lived installation tokens, cached until near expiry) or with a personal access token (PAT mode).
  • Reviews a PR when it first appears or when its head.sha changes; unchanged PRs are tracked in a per-account cursor record in the storage domain and not reviewed again.
  • Reads trusted review instructions only from .github/review_instructions.md in the base repository (base branch, then base SHA). If the file is missing and defaultInstructions is configured, that text is used; otherwise the PR is marked missing_instructions and retried only after the head SHA changes.
  • One harness Agent and session per PR. Reviews and /bot chats on the same PR run in the same session, so the loop replays the PR's full conversation history — the model remembers earlier findings and discussions. Sessions persist across restarts through sessionPersistence when a provider is mounted, and the reviewer resumes the existing session instead of starting a fresh one.
  • Runs the review through the real agent loop: the review system prompt is registered as a complete system-prompt section on the PR agent, and the guarded GitHub tools are registered as scoped harness tools, so the loop's logging, checkpoints, and compaction all apply.
  • Spawns a fresh per-turn GitHub MCP server (github-mcp-server) over stdio, injecting the installation token as GITHUB_PERSONAL_ACCESS_TOKEN and the configured web URL as GITHUB_HOST; tool schemas are discovered once per process and cached.
  • Guards every tool call: calls must target the current PR, reads are limited to allowed methods and refs, and writes are limited to the create → inline comments → submit_pending(event=COMMENT) pending-review workflow.
  • Handles comment commands on already-processed PRs: /review triggers a re-review, /bot <message> continues the PR conversation and posts the reply to the issue thread or the review thread it answered.
  • Interrupted reviews resume: the reviewing cursor state re-triggers the review after a restart and continues the remaining work from the persisted session.
  • The default instance can expose a Web settings card whose saves hot-restart only the internal reviewer runtime. Settings, workspace, and Client UI are optional injected companions, so their absence does not stop the Host reviewer.
  • Sanitizes untrusted PR title/body text before prompt placement (HTML comments/hidden attributes, invisible/control characters, markdown image alt text, markdown link titles, GitHub token-like strings).

Quick start

dsh plugin --profile web add dsh-github-reviewer

Installation adds the bundle to the web profile and registers one enabled github-reviewer instance; uiSettings also defaults to true. Before the next restart, complete authentication and MCP configuration by id in the profile's cordis.patch.yml, and add repositories as needed (no disabled: false or uiSettings: true is required; see [Deployment and Mounting](docs/deploy.en.md)). The GitHub Reviewer settings card starts collapsed and edits repositories as owner (organization or user)/repository rows. Focusing a field loads repositories accessible to the configured GitHub credential and offers searchable suggestions without disabling free text; catalog failures and manually entered values outside the catalog never block editing or saving. Add/remove actions remain icon-only, and review candidates come from DSH's configured provider/model catalog. Candidates are prioritized from top to bottom and can be reordered by dragging. Repositories may be empty; the reviewer stays running but polls nothing.

Documentation

TopicEnglish中文
Deployment & mounting: requirements, profile patch syntax, MCP server, verification[docs/deploy.en.md](docs/deploy.en.md)[docs/deploy.md](docs/deploy.md)
Configuration reference: fields, env injection, !!js expressions[docs/config.en.md](docs/config.en.md)[docs/config.md](docs/config.md)
How it works: polling/cursor, review flow, tool guards, trust model[docs/architecture.en.md](docs/architecture.en.md)[docs/architecture.md](docs/architecture.md)
Development and known limitations[docs/development.en.md](docs/development.en.md)[docs/development.md](docs/development.md)

The fully annotated minimal composition example lives in [cordis.yml.example](./cordis.yml.example).

License

[Apache-2.0](LICENSE)

Back to searchOpen GitHub repository

More related plugins

View category