dsh-plugin-git-inspect

v0.3.7 compatibility update: Typechecked and tested against Harness 0.2.1-alpha.3. Peer ranges also accept 0.2.0-rc.2, 0.1.5-rc.2, and the 0.1.1-rc.2 baseline.

简体中文 | English

Read-only Git visibility for agents running inside DeepSeek Harness.

[!NOTE] This is an independent community plugin. It is not part of the official DeepSeek Harness distribution.

What It Adds

The plugin registers ten read-only model-facing tools:

The working directory comes from the active Harness session (session.header.cwd). When a session does not provide one, the plugin falls back to the host process working directory.

Safety Model

• It never invokes a shell. git is resolved through the Harness subprocess service and started with a fixed argv vector.
• User paths are passed after Git's -- pathspec separator; shell expansion is never involved.
• Pager, color, external diff, text conversion, optional Git locks, and terminal prompts are disabled for predictable automation.
• Only inspection commands are exposed. There is no commit, push, reset, stash, checkout, or file-editing tool.
• The Harness cancellation signal is forwarded to the child process.
• stdout and stderr are bounded by configuration; the result reports when output was truncated.
• git_blame returns 50 lines by default and is capped at 200 lines, preventing whole-file attribution from consuming the model context.

Requirements

• Windows, macOS, or Linux with git available on the host PATH.
• Node.js >=22.19.0.
• A DeepSeek Harness composition providing:
  • @deepseek-ai/dsh-tools
  • @deepseek-ai/dsh-system-prompt
  • @deepseek-ai/dsh-subprocess
• A subprocess implementation, such as @deepseek-ai/dsh-subprocess-local.

v0.3.7 was typechecked and tested against Harness 0.2.1-alpha.3. Peer ranges also accept 0.2.0-rc.2, 0.1.5-rc.2, and the 0.1.1-rc.2 baseline.

Install As A Bundle

The repository ships cordis.patch.yml and declares dsh.bundle in package.json. With the Harness CLI installed, add it to the web profile:

dsh plugin --profile web add https://github.com/Wanbinyu/dsh-plugin-git-inspect/releases/download/v0.3.7/dsh-plugin-git-inspect-0.3.7.tgz

Restart dsh after installation. The bundle inserts the git-inspect row and installs the plugin runtime. You can inspect or customize cordis.patch.yml.

Manual Installation

If the host project needs to own the composition layer, install the package and add the row manually:

npm install github:Wanbinyu/dsh-plugin-git-inspect

Add this row to a Cordis composition that already provides the required Harness services:

- id: git-inspect
  name: dsh-plugin-git-inspect
  config:
    timeoutMs: 30000
    maxOutputBytes: 200000
    stderrMaxBytes: 16384
    graceMs: 1000
    defaultLogCount: 20
    maxLogCount: 100
    defaultBlameLineCount: 50
    maxBlameLineCount: 200

The repository includes an overlay example at examples/cordis.yml. The overlay does not install a subprocess provider; that remains a host composition responsibility.

Configuration

All limits must be positive integers. Each default count cannot exceed its corresponding maximum.

Tool Calls

{"name":"git_status","arguments":{}}

{"name":"git_diff","arguments":{"staged":true,"path":"src/index.ts"}}

{"name":"git_log","arguments":{"maxCount":10,"path":"src/index.ts"}}

{"name":"git_show","arguments":{"revision":"HEAD","path":"src/index.ts"}}

{"name":"git_conflicts","arguments":{}}

{"name":"git_blame","arguments":{"path":"src/index.ts","startLine":20,"lineCount":30}}

{"name":"git_stash_list","arguments":{"maxCount":10}}

{"name":"git_worktree_list","arguments":{}}

Non-zero Git exit codes, a missing repository, a blank path, an aborted request, or a terminated subprocess are reported as structured tool errors instead of being treated as successful output.

Development

git clone https://github.com/Wanbinyu/dsh-plugin-git-inspect.git
cd dsh-plugin-git-inspect
npm install
npm run verify

The integration suite creates temporary repositories and exercises the real git executable through the local Harness subprocess provider. It covers branch status, working-tree and staged diffs, diff summaries, revisions, refs, conflicts, blame, stashes, worktrees, path-filtered history, bounded output, cancellation/error paths, and argv safety. verify runs type checking, tests, the build, and package-content validation; GitHub Actions executes it on Node.js 22 under Ubuntu, Windows, and macOS.

Scope

This plugin is a read-only inspection surface for agent workflows. Write operations, remote synchronization, branch switching, worktree management, and file editing are deliberately out of scope so a host composition can apply its own approval policy.

Links

• DeepSeek Harness
• GitHub repository
• Issues
• 简体中文说明

License

MIT. See LICENSE.