dsh-provider-control

August 13, 2026 · View on GitHub

DeepSeek Harness 个人适配声明（Personal Adaptation Notice）

本项目是 DeepSeek Harness 的个人适配产物（personal adaptation），并非 DeepSeek Harness 官方文件（not an official DeepSeek Harness file），随附功能、使用说明与个人产物（bundled with features, documentation, and personal artifacts），可与 DeepSeek Harness 搭配使用，也可独立使用。

This project is a personal adaptation for DeepSeek Harness, and is NOT an official DeepSeek Harness file, bundled with features, documentation, and personal artifacts. It can be used alongside DeepSeek Harness or standalone.

作者 / Author: h565656445

合作 / Collaboration: 如有项目可以一起合作，欢迎联系。微信：wohaishihenshuaide。If you have projects, let's collaborate. WeChat: wohaishihenshuaide.

用途 / What this is for

提供商控制模块：模型路由与注册表，凭据解析与提供商 Worker 清单管理。

Provider control module: model routing and registry, credential resolution and provider-worker manifest management.

Hermes Provider Control / Hermes 提供方控制

模型提供方控制面：HermesProviderControl.psm1 按 provider_registry（schema v0.2）匹配 capability 选择提供方，按 secrets_policy 引用凭据 profile（本包不复制 secrets_policy.json，仅随附 provider_registry.json 示例），通过 Windows 凭据管理器读取密钥（fail-closed），并对每次解析写入凭据使用审计。

The model provider control plane: HermesProviderControl.psm1 selects providers by capability against provider_registry (schema v0.2), resolves credentials by profile reference per the secrets policy (this package does not copy secrets_policy.json; only the provider_registry.json sample is bundled), reads secrets through the Windows Credential Manager (fail-closed), and appends a credential usage audit on every resolution.

Features / 功能

提供方选择：按 capability 与注册表匹配提供方 / Provider selection by capability against the registry
凭据解析：profile 引用 + Windows 凭据管理器，fail-closed / Credential resolution via Windows Credential Manager, fail-closed
绑定校验：Secrets Policy / Worker manifest 的 SHA-256 绑定 / SHA-256-bound worker config (Secrets Policy, manifest)
使用审计：每次解析追加凭据审计事件 / Per-resolution credential audit events
示例数据：config/provider_registry.json（无密钥值）/ Sample registry with no secret values

What's inside / 目录结构

dsh-provider-control/
├── README.md
├── LICENSE
├── src/HermesProviderControl.psm1
├── config/provider_registry.json
├── schemas/schema_registry/v0.2/
│   ├── provider-registry.schema.json
│   └── provider-worker-manifest.schema.json
└── .dsh/

Quick start / 快速开始

Import-Module .\src\HermesProviderControl.psm1 -Force

# 选择提供方
Invoke-HermesProviderControl -Action PrepareSelection -ProviderId deepseek -Capability text.candidate `
  -ProviderRegistryPath .\config\provider_registry.json -ProviderRegistrySha256 <64-hex> `
  -SecretsPolicyPath <path> -SecretsPolicySha256 <64-hex> `
  -TaskContractPath <path> -TaskContractSha256 <64-hex>

# 解析凭据（需 Windows 凭据管理器条目 hermes_<profile>）
Invoke-HermesProviderControl -Action ResolveCredential -CredentialProfileRef cred-provider-a `
  -CallerAdapterId my-adapter -Capability contract.fixture_record `
  -SecretsPolicyPath <path> -SecretsPolicySha256 <64-hex> -RuntimeRoot .\runtime