DeepSeek Harness plugin

dsh-kungfu

Typed, read-only DeepSeek Harness tools for installed Kungfu Projects and Work.

Jump to install

Source facts

Repository
kungfu-systems/dsh-kungfu
Latest update
Aug 18, 2026
Category
Tools & Capabilities
GitHub stars
0
Format
plugin
Catalog evidence
Upstream dsh.bundle evidence
Evidence path
package.json#dsh.bundle
Checked against
0.1.0-rc.8
Upstream check date
2026-08-20

This evidence comes from the upstream catalog. This site has not installed, run, or security-reviewed the plugin.

Install

Start with a prompt that asks an agent to review the GitHub repository and source. Switch to the command if you want to install it yourself.

Copy this prompt into DSH, Codex, or another agent and ask it to review the GitHub repository and source first.

Do not install or run any commands yet. Read this plugin's GitHub repository, README, and relevant source code. Then answer the questions below clearly and directly so I can decide whether it fits my needs:

1. What is this plugin, and what problem does it solve?
2. Who is it for, and what are its typical use cases?
3. How is it used after installation? Include one minimal example.
4. What known limitations or privacy, security, compatibility, or maintenance risks does it have?
5. Give a clear recommendation: recommend, conditionally recommend, or do not recommend, with reasons.

Distinguish statements documented by the repository, inferences from source code, and unknowns. If evidence is insufficient, say so explicitly. Do not guess or simply repeat the README.

GitHub: https://github.com/kungfu-systems/dsh-kungfu
Plugin: dsh-kungfu
Author: kungfu-systems

Check the source files

Read the README and other files from this plugin directory before installing.

File explorer3 files
README.mdSource · read only

dsh-kungfu

dsh-kungfu is a standalone DeepSeek Harness plugin for inspecting installed Kungfu Projects and durable Work state through typed, read-only tools.

The first release targets Kungfu 4.0.0-alpha.2 and does not require changes to Kungfu itself. The plugin invokes a fixed allowlist of local Kungfu CLI commands without a shell, applies time and output limits, and returns structured results to the Harness.

Status

Version 0.1 targets DeepSeek Harness 0.1.0-rc.x and an installed Kungfu 4.0.0-alpha.2. It was tested against the public DSH plugin interfaces and the four exact read-only commands exposed by Kungfu alpha.2.

Requirements

  • Node.js 22 or newer;
  • DeepSeek Harness with @deepseek-ai/dsh-tools in the supported peer range;
  • kungfu 4.0.0-alpha.2 available on PATH, or an explicit KUNGFU_BIN.

Install

Install the prebuilt npm package into a Harness profile:

dsh plugin --profile default add @kungfu-tech/dsh-kungfu

Until the npm package is available, use the prebuilt tarball attached to the GitHub release:

dsh plugin --profile default add \
  https://github.com/kungfu-systems/dsh-kungfu/releases/latest/download/kungfu-tech-dsh-kungfu-0.1.0.tgz

Restart that profile after installation. The bundle patch registers the plugin with these defaults:

binary: kungfu
timeoutMs: 15000
maxOutputBytes: 1048576

Set KUNGFU_BIN before starting the Harness when the executable is not named kungfu or is outside PATH.

Tools

ToolPurposeInstalled Kungfu command
kungfu_workspace_inspectInspect one workspace candidate.kungfu workspace inspect PATH --json
kungfu_projectsList remembered local Projects.kungfu project list
kungfu_project_worksList retained Work for one Project.kungfu project works PATH
kungfu_work_statusRead one exact Initiative/Assignment status.kungfu work status --workspace ... --initiative-id ... --assignment-id ...

See [docs/tools.md](docs/tools.md) for inputs, outputs, and error behavior.

Scope

  • local, read-only inspection only;
  • no arbitrary command or shell execution;
  • no credential collection or network transport;
  • no mutation of Kungfu Projects, Work, or configuration.

The plugin launches only the fixed argument vectors above with shell: false. It applies cancellation, timeout, and combined-output limits before parsing a JSON object. Results can contain local paths and Work metadata already visible to the invoking user, so treat Harness transcripts as potentially sensitive.

Project map

  • [docs/MAP.md](docs/MAP.md) routes users, contributors, and reviewers.
  • [CONTRIBUTING.md](CONTRIBUTING.md) covers development and DCO.
  • [SECURITY.md](SECURITY.md) describes private vulnerability reporting.

License

Apache-2.0. See [LICENSE](LICENSE). Project names and marks are addressed in [TRADEMARK.md](TRADEMARK.md).