dsh-plugin-git-inspect

v0.3.6 compatibility update: verified against Harness 0.1.5-rc.2 and the 0.1.1-rc.2 baseline. Web plugins no longer request the retired runtime module. Download links below target the fixed archive; other host versions require verification.

简体中文 | English

Read-only Git visibility for agents running inside DeepSeek Harness.

What It Adds

The plugin registers ten read-only model-facing tools:

Tool	Purpose	Optional arguments
git_status	Show the current branch and working-tree status.	None
git_diff	Show the working-tree diff or the staged index diff.	staged, path
git_diff_stat	Show a file-level summary of changes.	staged, path
git_log	Show recent commits in compact one-line form.	maxCount, path
git_show	Show a selected commit, tag, or other revision.	revision, path
git_refs	List recent local branches, remote-tracking branches, and tags.	maxCount
git_conflicts	List unresolved merge-conflict paths.	path
git_blame	Show commit attribution for a bounded line range in one file.	path, startLine, lineCount
git_stash_list	List recent stashes without creating or applying one.	maxCount
git_worktree_list	List registered worktrees in stable porcelain format.	None

The working directory comes from the active Harness session (session.header.cwd). When a session does not provide one, the plugin falls back to the host process working directory.

Safety Model

• It never invokes a shell. git is resolved through the Harness subprocess service and started with a fixed argv vector.
• User paths are passed after Git's -- pathspec separator; shell expansion is never involved.
• Pager, color, external diff, text conversion, optional Git locks, and terminal prompts are disabled for predictable automation.
• Only inspection commands are exposed. There is no commit, push, reset, stash, checkout, or file-editing tool.
• The Harness cancellation signal is forwarded to the child process.
• stdout and stderr are bounded by configuration; the result reports when output was truncated.
• git_blame returns 50 lines by default and is capped at 200 lines, preventing whole-file attribution from consuming the model context.

Requirements

• Windows, macOS, or Linux with git available on the host PATH.
• Node.js >=22.19.0.
• A DeepSeek Harness composition providing:
  • @deepseek-ai/dsh-tools
  • @deepseek-ai/dsh-system-prompt
  • @deepseek-ai/dsh-subprocess
• A subprocess implementation, such as @deepseek-ai/dsh-subprocess-local.

v0.3.6 is type-checked, tested, built, and package-validated against DeepSeek Harness 0.1.2-rc.1 while retaining compatibility with 0.1.0-rc.5 through rc.8 and 0.1.1-rc.1 through rc.2.

Install As A Bundle

The repository ships cordis.patch.yml and declares dsh.bundle in package.json. With the Harness CLI installed, add it to the web profile:

dsh plugin --profile web add https://github.com/Wanbinyu/dsh-plugin-git-inspect/releases/download/v0.3.6/dsh-plugin-git-inspect-0.3.6.tgz

Restart dsh after installation. The bundle inserts the git-inspect row and installs the plugin runtime. You can inspect or customize cordis.patch.yml.

Manual Installation

If the host project needs to own the composition layer, install the package and add the row manually:

npm install github:Wanbinyu/dsh-plugin-git-inspect

Add this row to a Cordis composition that already provides the required Harness services:

- id: git-inspect
  name: dsh-plugin-git-inspect
  config:
    timeoutMs: 30000
    maxOutputBytes: 200000
    stderrMaxBytes: 16384
    graceMs: 1000
    defaultLogCount: 20
    maxLogCount: 100
    defaultBlameLineCount: 50
    maxBlameLineCount: 200

The repository includes an overlay example at examples/cordis.yml. The overlay does not install a subprocess provider; that remains a host composition responsibility.

Configuration

All limits must be positive integers. Each default count cannot exceed its corresponding maximum.

Option	Default	Effect
timeoutMs	30000	Maximum tool execution time supplied to Harness tools.
maxOutputBytes	200000	stdout capture limit.
stderrMaxBytes	16384	stderr capture limit.
graceMs	1000	Termination grace period for the Git subprocess.
defaultLogCount	20	Commit count used when git_log.maxCount is omitted.
maxLogCount	100	Upper bound for git_log.maxCount.
defaultBlameLineCount	50	Line count used when git_blame.lineCount is omitted.
maxBlameLineCount	200	Upper bound for git_blame.lineCount.

Tool Calls

{"name":"git_status","arguments":{}}

{"name":"git_diff","arguments":{"staged":true,"path":"src/index.ts"}}

{"name":"git_log","arguments":{"maxCount":10,"path":"src/index.ts"}}

{"name":"git_show","arguments":{"revision":"HEAD","path":"src/index.ts"}}

{"name":"git_conflicts","arguments":{}}

{"name":"git_blame","arguments":{"path":"src/index.ts","startLine":20,"lineCount":30}}

{"name":"git_stash_list","arguments":{"maxCount":10}}

{"name":"git_worktree_list","arguments":{}}

Non-zero Git exit codes, a missing repository, a blank path, an aborted request, or a terminated subprocess are reported as structured tool errors instead of being treated as successful output.

Development

git clone https://github.com/Wanbinyu/dsh-plugin-git-inspect.git
cd dsh-plugin-git-inspect
npm install
npm run verify

The integration suite creates temporary repositories and exercises the real git executable through the local Harness subprocess provider. It covers branch status, working-tree and staged diffs, diff summaries, revisions, refs, conflicts, blame, stashes, worktrees, path-filtered history, bounded output, cancellation/error paths, and argv safety. verify runs type checking, tests, the build, and package-content validation; GitHub Actions executes it on Node.js 22 under Ubuntu, Windows, and macOS.

Scope

This plugin is a read-only inspection surface for agent workflows. Write operations, remote synchronization, branch switching, worktree management, and file editing are deliberately out of scope so a host composition can apply its own approval policy.

Links

• DeepSeek Harness
• GitHub repository
• Issues
• 简体中文说明

License

MIT. See LICENSE.