dsh-exec-extension

npm · 中文文档

A DeepSeek Harness bundle for one-shot exec, in the same shape as official surface plugins (dsh.bundle.patch + parseCmdline + commander). Stock headless-startup only declares [task...]; this bundle disables that row and inserts a replacement that still provides headlessStartup.task for unmodified headless-runner.

The CLI follows OpenCode run and Pi -p: piped stdin is merged into the prompt, @file / -f attaches files, --format json streams session events, --dir sets cwd, --yolo skips permission prompts (it does not disable the sandbox). Model overlay is in-process (Rust WASM) and never writes $DSH_HOME/settings.yaml.

Install

dsh plugin --profile exec add @deepseek-ai/dsh-headless@$(npm view @deepseek-ai/dsh version)
dsh plugin --profile exec add dsh-exec-extension
dsh --profile exec --help

Follow the same npm latest channel as the dsh CLI (npx @deepseek-ai/dsh / npm install --global @deepseek-ai/dsh). Do not use @next unless you installed dsh@next. @deepseek-ai/dsh-headless has a stale latest tag, so the first line takes the CLI's latest version instead of headless's own. dsh-exec-extension uses its own latest. Freeze with @<version> only when you need a snapshot. npm install does not need a prepare allowlist.

Git fallback: dsh plugin --profile exec add github:LvDAO/dsh-exec-extension

Dedicated profile only. Stock dsh --profile headless --model x "t" must still fail.

CLI

dsh --profile exec [options] [--] [task|-]
cat README.md | dsh --profile exec "summarize this"
dsh --profile exec @notes.md --full-auto "use the notes"

| Flag | Meaning | |------|---------| | -m, --model | This-process model (never part of the task) | | --effort, --reasoning-effort | off\|high\|max | | --thinking | Pi thinking tiers; xhigh/max → max, minimal/low/medium/high → high | | --provider | This-process provider | | -C, --cwd / --cd / --dir | Working directory (published on headlessStartup.cwd) | | --timeout <seconds> | appExit(1) after N seconds | | -s, --sandbox / --permission-mode | read-only \| workspace-write \| danger-full-access | | --approval ask\|never\|allow | ask fail-closes without a UI; never auto-denies; allow auto-grants | | --full-auto | workspace-write + auto-allow (CI) | | --yolo / --dangerously-skip-permissions | Skip permission prompts (auto-allow). Does not set danger-full-access; default sandbox stays workspace-write. Unrestricted access is --sandbox danger-full-access | | --tools-mode native\|code\|both | Tools presentation | | -f, --file / @path | Attach file text into the task | | --output-schema <path> | Prompt-level JSON Schema constraint (not constrained decode) | | -o, --output-last-message <path> | Also write the final assistant text | | --format text\|json / --mode json | json is session-event JSONL | | -c, --config key=value | Repeatable this-process overlay | | --env KEY=VALUE / --api-key | Process env only (not written to disk) | | --print-selection | Print overlaid selection JSON and exit |

Unknown flags error. Overlay never calls saveSelection().

--output-schema is a prompt constraint, not constrained decoding. --approval allow and --yolo install a process-local auto-grant because dsh never auto-denies and headless has no UI. --yolo does not set danger-full-access; use --sandbox danger-full-access for unrestricted tools.

headlessStartup is { task, cwd, permissionMode, approvalPolicy, autoApprove, toolsMode?, format }. sandbox-policy, approval, and tools inject that service (!!js ctx.headlessStartup.*). Stock headless-runner still only reads task.

Non-goals

MCP, Host, HTTP, resume, --image, forking headless-runner. Put MCP on the profile patch + process env, not on this CLI.

Develop

Node ≥ 22.19. WASM is committed; prepare skips rustc.

npm test
DSH_BIN=/path/to/dsh npm run acceptance