dsh-shell

1. 安装并启动 DeepSeek Harness：npx @deepseek-ai/dsh web
2. 在终端执行上面的安装命令（CLI 会解析插件并核验来源）
3. 用 dsh plugins list 确认已安装，必要时重启 Harness 生效

插件以当前 dsh 进程的权限运行，安装时可能执行代码。请先通读仓库源码与许可证，确认无破坏性命令与越权访问；本站只做索引，不对第三方插件安全性作担保。

事实信息来自公开插件目录快照（2026-10-01），介绍文案由本站再加工。

以下为插件仓库 README 全文（原始内容，由公开目录抓取整理）。

# dsh-shell

> A DeepSeek Harness (DSH) plugin that lets the model run **cmd** and **PowerShell** commands on Windows — with the safety model of the standard `bash` tool.

## Why

The stock `bash` tool of many agents fails on Windows (`subprocess-local: terminal inspection is unsupported on platform win32`). `dsh-shell` registers a `shell_exec` tool that understands Windows natively:

- `cmd.exe /d /s /c ...` by default
- `powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -Command ...`
- `sh`/`bash` fallback on Linux/macOS hosts

It mirrors the `bash` tool's safety contract:

| Feature | Behavior |
| --- | --- |
| Persistent cwd | `cd` persists across calls (per session, on disk) |
| Timeout | per-command `timeout` ms, capped by `maxTimeout` |
| Output truncation | per-stream `maxOutputBytes` cap with a marker (head + tail kept) |
| Exit codes | `exit_code`, `timed_out`, `stdout`, `stderr`, `truncated` |
| Background jobs | `background: true` returns a `job_id`; poll with `shell_job_status` |
| Denylist | refuses `rm -rf /`, `format`, drive-wide `del`/`rd`, `shutdown`, registry/service deletes |
| cwd allowlist | stays inside the session workspace unless `allowAnyCwd` |

## Install

### npm

```sh
dsh plugin --profile web add @qianwenxue1/dsh-shell
```
### build soure

```sh
# from npm after publishing
dsh plugin --profile web add @qianwenxue1/dsh-shell

# or from a local checkout
git clone https://github.com/qianwenxue1/dsh-shell.git
cd dsh-shell
pnpm install
pnpm build
dsh plugin --profile web add .
```

## Config

```yaml
- id: dsh-shell
  config:
    stateDir: .dsh-shell      # per-session state under the workspace
    defaultShell: cmd         # cmd | powershell
    maxTimeout: 600000        # ms hard cap
    maxOutputBytes: 30720     # per-stream cap (head + tail kept)
    allowAnyCwd: false        # true to allow cd/commands outside the workspace
    allowDangerous: false     # true to bypass the denylist
```

## Tools

### `shell_exec`

Run a command in the persistent shell.

```jsonc
{ "command": "dir /b", "shell": "cmd" }                       // simplest
{ "command": "Get-ChildItem -Name", "shell": "powershell" }   // PowerShell cmdlets
{ "command": "npm test", "timeout": 180000, "background": true } // long-running
```

### `shell_job_status`

Poll a background job:

```jsonc
{ "job_id": "job-1710000000000-abc123" }
```

## Development

```sh
pnpm install
pnpm build
pnpm verify
```

## License

MIT