dsh-git-ai

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

# dsh-git-ai

English | [中文](README.zh.md)

[GitHub](https://github.com/NiuZhuang/dsh-git-ai) · [npm](https://www.npmjs.com/package/dsh-git-ai) · [Issues](https://github.com/NiuZhuang/dsh-git-ai/issues)

A [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness) plugin that records which files the agent edited, with which model, and in which session into [git-ai](https://github.com/git-ai-project/git-ai). It listens on the harness's `tools/pre-execute` / `tools/post-execute` interception points, translates each relevant tool call into git-ai's generic [`agent-v1`](https://usegitai.com/docs/cli/add-your-agent) checkpoint payload, and invokes `git-ai checkpoint  --hook-input stdin` with that JSON on stdin. git-ai itself is never modified; after the agent commits, git-ai writes the attribution into git notes and reports `ai_additions`/`ai_accepted` per tool-model pair.

## Preview

Hover over a line of code in VS Code to see who wrote it, with which model, and in which DeepSeek Harness session it was generated:

![Git AI attribution popover](https://raw.githubusercontent.com/NiuZhuang/dsh-git-ai/main/docs/image.png)

## Requirements

- DeepSeek Harness installed via npm (`npx @deepseek-ai/dsh@latest`) — the plugin peer-depends on the official `@deepseek-ai/*` packages it ships with.
- [git-ai](https://github.com/git-ai-project/git-ai) installed and on `PATH` (or point `gitAiPath` at it).

## Install

The package ships as a profile bundle: installing it and activating the patch is one command.

```sh
dsh plugin --profile web add dsh-git-ai
```

> **pnpm ≥ 10 note:** `dsh plugin add` forwards to pnpm, and pnpm 10+ rejects adding to a
> workspace root with `ERR_PNPM_ADDING_TO_ROOT`. dsh profiles are pnpm workspace roots by
> design, so on machines with pnpm ≥ 10 use `-w` (or add `ignore-workspace-root-check: true`
> to `~/.dsh/profiles//pnpm-workspace.yaml` once):
>
> ```sh
> dsh plugin --profile web add -w dsh-git-ai
> ```

`dsh plugin` forwards to pnpm inside your profile directory and auto-activates the bundle because the package declares `dsh.bundle`. Without the bundle mechanism (or to load it in a custom profile), add the row to your profile's `cordis.patch.yml`:

```yaml
- dsh-git-ai:
    gitAiPath: git-ai
    agentName: deepseek-harness
```

## Config

```ts
import type { Config } from 'dsh-git-ai'
const config: Config = {
  gitAiPath: 'git-ai',                  // optional: git-ai executable (bare name resolves through PATH)
  agentName: 'deepseek-harness',        // optional: `agent_name` stamped on every checkpoint
  model: '',                            // optional: explicit model; empty falls back to agent.options.model
  checkpointPreset: 'agent-v1',         // optional: the git-ai generic-integration preset
  timeoutMs: 10_000,                    // optional: git-ai invocation timeout
  trackBash: true,                      // optional: emit pre/post shell checkpoints for bash/pwsh
}
```

## Checkpoint mapping

| Harness point | Tool | git-ai payload |
|---|---|---|
| `tools/post-execute` (success) | `write`, `edit` | `ai_agent` with `edited_filepaths` from `file_path` |
| `tools/post-execute` (success) | `str_replace_editor` (not `view`) | `ai_agent` with `edited_filepaths` from `path` |
| `tools/pre-execute` | `bash`, `pwsh` | `pre_shell_command` with `command` and `tool_use_id` |
| `tools/post-execute` | `bash`, `pwsh` | `post_shell_command` with `command` and `tool_use_id` |

Payload identity fields: `repo_working_dir` is the session cwd (falling back to the process cwd), `agent_name` is `config.agentName`, `model` is `config.model` when set else `agent.options.model` (else `''`), and `conversation_id` is the session id. Relative `file_path` / `path` values are resolved against the session cwd into absolute paths; absolute values pass through unchanged. `str_replace_editor` `view` commands are read-only and never attributed.

A failed edit (`result.isError === true`) emits nothing; a failed bash command still emits its `post_shell_command` so the before/after pair closes. Bash tracking keys on the tool `callId`, so pre and post checkpoints share `tool_use_id`.

## Failure containment

git-ai is an optional external dependency. A missing binary, nonzero exit, timeout, or executor rejection is logged as a warning and never propagated: the tool call and the agent turn proceed exactly as if the plugin were absent.

## Verification

```sh
# 1. start the harness with the plugin loaded
dsh web
# 2. have the agent edit files in a git repository
# 3. check git-ai received the checkpoints
git-ai status --json
# 4. commit
git add -A && git commit -m "test"
# 5. check attribution
git-ai stats HEAD --json
```

## Development

```sh
pnpm install
pnpm test          # vitest, 100% coverage on src/
pnpm typecheck
pnpm build         # emits lib/ for publishing
```

## Publishing

```sh
pnpm build
pnpm publish --access public
```

## Known Limitations and Deferred Work

- **File-edit tools emit only the post-edit `ai_agent` checkpoint.** git-ai attributes a file's changed lines against HEAD or the last checkpointed value, so uncommitted edits made to the same file before the agent's edit (e.g. by the user) are also attributed to the agent. A pre-edit `human` checkpoint before each edit tool would isolate them; the bash pre/post pair already provides this isolation for shell commands.
- **An unmatched `pre_shell_command` is possible.** If a bash tool is denied or canceled between pre and post, the pre snapshot stays open and later changes to the same files are treated as untracked by git-ai until the next checkpoint.
- **Synchronous invocation latency.** Each tracked tool call awaits its git-ai checkpoint (bounded by `timeoutMs`) before the tool result settles.
- **Bash output attribution is snapshot-based.** git-ai infers changed files from file snapshots, so a command that edits files outside the repo tree is not attributed.

## License

MIT