dsh-agent-preset-recommender
注重隐私的本地活动扫描器和代理预设推荐器，用于 DeepSeek Harness
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:LeemanCheung/dsh-agent-preset-recommender#94d176b70b1e0d98107065cb515b3a033916ab6b
Agent Preset Recommender 以 dsh-agent-preset-recommender 发布，当前版本为 0.1.7。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
English | 中文
A persistent, host-side DeepSeek Harness bundle that privately summarizes local Codex, Claude Code, and WorkBuddy/CodeBuddy activity and recommends a built-in DSH agent preset. It is advisory only: there is no LLM call, installation, preset mutation, or network request.
Compatibility baseline: DeepSeek Harness 0.1.2-rc.1, Cordis 4.0.2, and Schemastery 3.18.2.
The installed Host result is recorded in Windows DSH 0.1.2 acceptance.
Synthetic aggregate recommendation overview in DeepSeek Harness
Synthetic aggregate project detail in DeepSeek Harness
These previews use synthetic aggregate fixture data. They illustrate the bounded tool results only; no user sessions, paths, prompts, commands, or secrets appear.
| Area | What the plugin does | Deliberate boundary |
|---|---|---|
| Local inventory | Boundedly scans supported session, project, and workflow metadata from Codex, Claude Code, CodeBuddy, and WorkBuddy. | Skips caches, builds, .git, symlinks, inaccessible roots, and unknown content. |
| Privacy-preserving evidence | Aggregates tool, session, workflow, and day-level activity under installation-local HMAC project IDs. | Never persists prompts, replies, commands, arguments, raw events, paths, usernames, secrets, or file bodies. |
| Deterministic advice | Maps observed evidence to minimal/standard capability presets plus optional delegation, workflow, web, MCP, and LSP capabilities. | Knows the shipped minimal, standard, ptc, and cordis roster, but never changes the user's current selection. |
| Agent-facing access | Provides scan_agent_projects for a fresh bounded scan and get_agent_preset_recommendations for the saved report. | Both tools return bounded readable text; neither installs, enables, or authenticates anything. |
| Durable local operation | Atomically persists a private report, supports startup and scheduled scans, and serializes all scan triggers. | No LLM call, network request, discovered-command execution, or background work survives plugin disposal. |
dsh plugin --profile web add github:LeemanCheung/dsh-agent-preset-recommender
Restart the selected DSH profile after installation. The package declares dsh.bundle.patch and mounts one host plugin.
Observed aggregate behavior is mapped to:
minimal or standard.DSH 0.1.2-rc.1 ships minimal, standard, ptc, and cordis. The scanner lists that roster for accuracy, but automatic advice remains limited to the general-purpose minimal and standard choices. It never writes a default or current preset, so an explicit user selection remains unchanged.
Every recommendation includes confidence and numerical evidence. Thresholds are deterministic and local; results never automatically change DSH.
standard is recommended when at least one recognized session, workflow, or categorized tool call exists. Metadata files alone—and an empty observation set—yield minimal.workflow-category tool call; web, MCP, and LSP need their corresponding category count.0 with no observations; otherwise it is min(0.95, 0.35 + 0.2 × log10(observations + 1)), rounded to two decimal places, where observations are sessions + workflows + categorized tool calls.other. These are trend signals, not an audit of every product tool.cordis.patch.yml → src/index.js (Cordis lifecycle + raw model tools)
├─ scanner.js (bounded traversal and aggregation)
├─ extractors.js (selected JSON/JSONL metadata fields)
├─ recommender.js (deterministic rules)
├─ store.js (atomic private report file)
└─ render.js (bounded readable tool output)
Runtime code is plain ESM JavaScript for Node.js 20+. It uses Node built-ins plus @deepseek-ai/schemastery for plugin configuration validation. Tool definitions are registered directly through ctx.tools.register and do not import unpublished DSH tool runtime helpers.
The scanner persists aggregate metadata only:
It never persists prompts, responses, commands, tool arguments, raw events, absolute paths, usernames, secrets, or file contents. Project identifiers are derived with a random installation-local HMAC key, so report IDs cannot be dictionary-matched without the private key. WorkBuddy/CodeBuddy memory metadata is counted from file presence and modification time only; workflow/plan files are likewise never opened. The scanner makes no network requests and runs no discovered command.
Cache, dependency, build, output, coverage, virtual-environment, and .git directories are skipped. Symbolic links are not followed.
The default report is:
$DSH_HOME/state/agent-preset-recommender/report.json
If DSH_HOME is unset, ~/.dsh is used. The directory also holds a private random identity.key used only to derive project IDs. Report writes use a same-directory temporary file and atomic rename; restrictive permissions are requested where the platform supports them.
| Source | Defaults | Read behavior |
|---|---|---|
| Codex | $CODEX_HOME/sessions, $CODEX_HOME/archived_sessions or ~/.codex/* | Bounded .jsonl/.json; selected session/project and tool-name fields |
| Claude Code | $CLAUDE_CONFIG_DIR/projects or ~/.claude/projects | Bounded .jsonl/.json; selected project and tool_use name fields; workflow sidecars, journals, task/session/plan stores, and global history are excluded |
| Claude personal workflows | $CLAUDE_CONFIG_DIR/workflows or ~/.claude/workflows | .js file presence and day only; scripts are never opened. Add project-local <repo>/.claude/workflows explicitly to claudeWorkflowRoots if desired |
| Claude transcripts | Disabled | Scanned only when claudeTranscriptRoots is explicitly configured |
| CodeBuddy CLI | $CODEBUDDY_CONFIG_DIR/projects or ~/.codebuddy/projects | Bounded canonical project .jsonl records; ~/.codebuddy/workflows/*.js and project-local workflow scripts are inventoried by presence only. Process maps, tool-result/blob directories, and workflow runtime sidecars are excluded |
| WorkBuddy | $WORKBUDDY_CONFIG_DIR/projects or ~/.workbuddy/projects, ~/.workbuddy-ai/projects | Heuristic, version-sensitive project .jsonl inventory; native session layout is not vendor-contracted, so it is never treated as proof of CodeBuddy session equivalence |
| Project-local CodeBuddy/WorkBuddy metadata | <project>/.codebuddy or <project>/.workbuddy memory, workflows, plans, or automations | Count and day only, including workflow .js; content is not read; memory never becomes workflow evidence |
Formats vary between product releases. CodeBuddy paths/workflow scripts are documented; WorkBuddy session-file detection is an observed heuristic. Unknown fields are ignored, malformed records are skipped, and malformed files are counted as errors without stopping the scan.
Configure the inserted agent-preset-recommender row in a DSH patch:
- id: agent-preset-recommender
config:
scanOnStart: true
intervalMinutes: 360 # 0 disables scheduled scans
maxFilesPerSource: 500
maxBytesPerFile: 1048576
recentDays: 90
stateDirectory: '' # empty = $DSH_HOME/state/agent-preset-recommender
codexRoots:
- ~/.codex/sessions
- ~/.codex/archived_sessions
claudeRoots:
- ~/.claude/projects
claudeTranscriptRoots: [] # opt in explicitly
claudeWorkflowRoots:
- ~/.claude/workflows # inventory only; script content is never read
workbuddyRoots:
- ~/.codebuddy
- ~/.workbuddy
- ~/.workbuddy-ai
- ~/WorkBuddy
- ~/CodeBuddy
Defaults honor CODEX_HOME, CLAUDE_CONFIG_DIR, CODEBUDDY_CONFIG_DIR, and WORKBUDDY_CONFIG_DIR when DSH starts. Supplying an explicit root list in the plugin configuration takes precedence over those defaults.
Bounds are validated: intervalMinutes is 0–35,791, maxFilesPerSource 1–100,000, maxBytesPerFile 1 KiB–64 MiB, and recentDays 1–3,650. Missing/inaccessible roots are skipped. Startup, scheduled, and tool-triggered scans share one serialized queue and are aborted on plugin disposal.
Set both scanOnStart: false and intervalMinutes: 0 to disable automatic scans; the model tool can still scan on demand. Before deleting the state directory to reset the report, stop the plugin: this also removes identity.key, intentionally rotating every keyed project ID.
scan_agent_projectsRuns and persists a fresh scan. Optionally refresh only selected sources:
{ "sources": ["codex", "claude"] }
Unselected source aggregates from the previous report remain intact.
get_agent_preset_recommendationsReads the persisted report without scanning:
{}
Or retrieve one keyed project:
{ "project_id": "codex-0123456789abcdef" }
Both tools return bounded readable text strings. Omitting sources or passing an empty list scans every source; a selected-source scan preserves the prior aggregate for unselected sources.
Each persisted source report exposes filesConsidered, truncatedFiles, skippedOld, skippedOversize, skippedLimit, and parseOrAccessErrors alongside counts. Summary output lists at most 50 projects and is capped at 12,000 characters; query a project_id for its bounded detail.
identity.key intentionally creates a new identifier set..jsonl.zst rollouts are not read in 0.1.7. Claude workflow scripts and dynamic workflow sidecars are deliberately not parsed.npm install
npm test
Tests use synthetic temporary fixtures and Node's built-in node:test; no local product data is read. See SECURITY.md for private vulnerability reporting guidance.