dsh-rules-paths
August 25, 2026 · View on GitHub
Claude Code-style paths: rule injection for DeepSeek Harness (DSH): when the model successfully reads a file that matches a rule's paths: glob, the rule body is injected into the model context at the next step boundary. It follows the official @deepseek-ai/dsh-agent-instructions mechanics (tools/result hook, agent.inbox.nextStep inbox, agent/pre-step folding, SHA-1 dedup, byte budget).
Features
- Preset-scoped, opt-in — the plugin does not mount at the profile level. It is activated only by the agent presets that reference it; the four shipped presets (
standard/code/minimal/cordis) ignore it. New sessions get rules injection only when the chosen preset carries the row. - Path rules — a rule file declares
paths:glob patterns; a successfulreadof a matching file injects the rule body at the next step boundary. - Global rules — a rule without
paths(or with no frontmatter at all) is injected into the first entering step of the session, independent of any file read (likeAGENTS.md). - Project rules — optional scan of
<projectRoot>/.dsh/rulesand<projectRoot>/.claude/rules(Claude Code convention), keyed on the.gitproject root. - Dedup & budget — each rule is injected once per session unless its content changes (SHA-1 digest →
replace); the rendered message never exceedsmaxBytesand reportsRules budget …when rules are dropped or truncated. - Guidance, not authority — injected content is a user-role message that does not override system, developer, or direct user instructions; literal
</system-reminder>is escaped.
Install
Requires DSH 0.1.0-rc.x (Web profile).
The plugin does not mount at the profile level. Installing it is two independent steps: (1) put the package somewhere DSH can resolve, (2) opt in from a user preset. dsh plugin --profile web add installs the package, but it does not mount the plugin anywhere — mounting must come from a preset row.
Step 1 — install the package into the profile's node_modules
The package is distributed from its GitHub repository (it is not on the npm registry). Install it via the dsh plugin add command, which forwards to pnpm with a git spec:
dsh plugin --profile web add git+https://github.com/Temoa/dsh-rules-paths.git
Or, for a local checkout you are iterating on:
# from inside the profile directory (e.g. ~/.dsh/profiles/web)
pnpm add ./path/to/dsh-rules-paths
The package now lands in node_modules/@temoa/dsh-rules-paths/ but does not activate — no preset references it yet, and the manifest no longer declares a bundle patch.
Step 2 — opt in from a user preset you create
The shipped presets are read-only, so copy one and edit the copy. In the Web UI, open Settings → Agent Presets and use the copy dialog on standard (or any other shipped preset) to make a new preset. Then add the row to the new preset's agent.cordis.yml:
- id: rules-paths
name: '@temoa/dsh-rules-paths'
config:
rulesDir: "~/.dsh/rules"
rulesDirProject: true
Reload DSH, pick the new preset for a blank session (DSH locks preset switching on sessions that already produced content), and the plugin takes effect. Other sessions on the shipped presets keep ignoring it.
Restart the harness after editing the preset. Preset config is re-read on every session mount, but the plugin file is cached per process URL; rule files themselves never need a restart.
Uninstall
dsh plugin --profile web remove @temoa/dsh-rules-paths
Then open the user preset's agent.cordis.yml and delete the - id: rules-paths block. Restart DSH. Rule files under ~/.dsh/rules and the project rule directories are left untouched.
How it works
Rules live in ~/.dsh/rules/*.md (configurable via rulesDir), one rule per file:
---
paths:
- "**/*.dart"
- "lib/**/*.ts"
description: Dart conventions (optional, metadata only)
---
Rule body: guidance the model follows after reading a matching file.
On every successful read (and once at session start for global rules), the plugin:
- Lists the configured rule directories — the user-level
rulesDir, plus<projectRoot>/.dsh/rulesand<projectRoot>/.claude/ruleswhenrulesDirProjectis on. - Matches the read path against each rule's
pathsglobs, against both the absolute path and the cwd-relative path (Windows\normalized to/), so**/*.dartmatches bothD:/lab/proj/lib/main.dartandlib/main.dart. Rules withoutpaths(or without frontmatter) are treated as global. - Renders the matched bodies into a single user-role message — SHA-1 dedup per session, unchanged rules never re-sent, changed ones sent as
replace— bounded bymaxBytes, then folds it into the enteringagent/pre-stepright after the last claimed message.
paths present but neither a string nor a list skips the file with a warning; files over maxSourceBytes are skipped. Rule bodies are untrusted input: text only, delimiters escaped, never executed. No file watcher: rule edits take effect at the next reconciliation (global) or the next successful read (path rules).
| Key | Default | Meaning |
|---|---|---|
rulesDir | ~/.dsh/rules | User-level rules directory (~ expands) |
maxBytes | 65536 | Byte budget per injected message |
maxSourceBytes | 1048576 | Max bytes read per rule file (larger files skipped) |
triggerTools | ["read"] | Tool names whose successful executions trigger matching |
rulesDirProject | false | Also scan <projectRoot>/.dsh/rules and <projectRoot>/.claude/rules |
Repository layout
dsh-rules-paths/
├── package.json # manifest
├── lib/
│ ├── index.js # Host half: rule loading, matching, injection
│ └── types/index.d.ts
├── test/
│ └── index.mjs # 50-assertion test suite
├── README.md
├── README.zh.md
└── LICENSE
Development
pnpm install # or npm install — fetches devDependencies (peers + js-yaml + picomatch)
pnpm test # node test/index.mjs — 50 assertions
Tests cover: config validation, frontmatter parsing, budget rendering (omit/truncate/escape), message construction, dedup + replace, zero injection, global rules, project rules (.dsh/rules + .claude/rules), and the pre-step fold position.