dsh-aoci
DeepSeek Harness 的 AOCI-CODE 认知层：单次 /aoci 命令 + 动态 MCP 桥接，用于受治理且由 Git 版本控制的仓库/数据库认知。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-aoci@0.2.0Aoci 以 dsh-aoci 发布，当前版本为 0.2.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
AOCI-CODE cognition layer for DeepSeek Harness: one slash command gives agents governed, Git-versioned repository and database cognition.
简体中文版见 README.zh-CN.md.
dsh-aoci integrates AOCI-CODE — a local-first stdio MCP server and Go CLI implementing the AOCI (AI-Oriented Cognition Infrastructure) paradigm — into the DeepSeek Harness (DSH) plugin ecosystem. It separates deterministic governance (initialisation, baseline establishment, verification) from semantic authorship (FRAS entries authored by the model under AOCI's governance protocol), and exposes cognition through three complementary surfaces:
mcp__aoci-<slug>__aoci_rules / aoci_overview / aoci_get_entries / aoci_search / aoci_maintain / aoci_update_entry / aoci_remove_entry / aoci_header / aoci_report), registered on demand by a dynamic MCP bridge instead of static per-repository configuration;aoci_status, aoci_verify, aoci_check, aoci_scan, aoci_panel, aoci_use, aoci_unbind, aoci_relations, aoci_impact, aoci_lineage, aoci_db) for governance, System-Cognition queries, database preflight, and agent-driven repository selection;/aoci [path]: with a path, resolves it (absolute, or relative to defaultRoot); without a path, auto-locates the current session’s workspace repository; runs conditional initialisation/baseline, binds the MCP bridge, and submits the index-build instruction to the current agent via agent.steer — cognition onboarding in a single invocation. Optional flags: --locale, --scope, --agent, --skip-scan, --db.AOCI-CODE is licensed FSL-1.1-MIT (source-available); this plugin does not bundle its binary — it guides checksum-verified downloads from the official release channel.
@deepseek-ai/cordis, dsh-settings, dsh-system-prompt, dsh-tools, dsh-jobs, dsh-llm, react, react-dom.schemastery, @modelcontextprotocol/sdk.aoci from the official AOCI-CODE Release (default C:/aoci/bin/aoci.exe), verified by SHA-256.| Surface | Names | Purpose |
|---|---|---|
| Cognition reads | mcp__aoci-<slug>__aoci_rules, ...__aoci_overview, ...__aoci_get_entries, ...__aoci_search | Load and query the governed cognition map |
| Cognition maintenance | ...__aoci_maintain, ...__aoci_update_entry, ...__aoci_remove_entry | Incremental, protocol-governed updates |
| Cognition evidence | ...__aoci_header, ...__aoci_report | Index identity and attestation |
| Deterministic governance | aoci_status, aoci_verify, aoci_check, aoci_scan, aoci_panel | Health, verification, baseline, panel (status also reports git head/working-dirty drift) |
| System Cognition | aoci_relations, aoci_impact <object>, aoci_lineage | Dependency projection, impact analysis, lineage binding |
| Database preflight | aoci_db <source> | Read-only database source access preflight (env-referenced credentials only) |
| Agent-driven binding | aoci_use <path>, aoci_unbind <slug> | Autonomous repository selection |
| Slash command | /aoci <path> | One-shot onboarding (bind + instruct agent to build) |
DSH Web GUI (client) ── RPC/HTTP ──▶ DSH Host half (this plugin)
│ ctx.tools dynamic registration
▼
aoci mcp (stdio, spawned on demand)
│ nine MCP tools
▼
repository cognition assets (aoci.txt et al., Git-versioned)
./client export is the browser half registered through DSH's __ModuleLoader__.load protocol. State ledgers persist under profile-isolated state/aoci/ (projects.json, runs.jsonl).AociBridge): spawns aoci --repo <root> mcp via Node child_process, connects StdioClientTransport + Client from @modelcontextprotocol/sdk, discovers the nine tools, and registers them on ctx.tools; unbinding unregisters and terminates the process.init runs only for uninitialised repositories (probe aoci.txt); scan runs only when no Baseline exists (probe .aoci/baseline.json); existing Baselines are maintained via argument-less aoci_maintain plus batch aoci_update_entry, proven by verify/check./aoci [path] (no-arg auto-locates the current workspace) is registered via ctx.inject(['commands'], …) and submits the build instruction through agent.steer(createUserMessage(...)) — the plan-mode submission pattern.compactAociResults (pure folding of Whole-Index bodies into receipts) and a compaction/end recovery hook (installAociCompactionGuard) align AOCI's compaction discipline with DSH session compaction.aoci binary from the official AOCI-CODE Release (e.g. aoci_0.1.0-rc18_windows_amd64.zip), SHA-256 verified against the published SHA256SUMS and placed at a stable absolute path (default C:/aoci/bin/aoci.exe).cd <plugin-checkout>
pnpm install
pnpm check # typecheck + unit tests + build
pnpm pack # dsh-aoci-<version>.tgz
dsh plugin --profile <name> add ./dsh-aoci-<version>.tgz
# restart DSH Desktop, then in the input box:
# /aoci D:\path\to\repo (absolute path)
# /aoci ./relative (requires defaultRoot configured)
After /aoci, the agent builds the index (rules → full Overview → batched Maintain → verify/check → aligned). Subsequent sessions reuse the same Git-versioned cognition; maintenance is automatic at task completion.
| Key | Default | Description |
|---|---|---|
binaryPath | C:/aoci/bin/aoci.exe | Stable absolute path to the verified aoci binary. |
defaultRoot | `` (empty) | Base directory for relative paths in /aoci and aoci_use. |
mcp.serverNamePrefix | aoci | Namespace prefix for dynamically registered MCP tools. |
mcp.toolCallTimeoutMs | 120000 | Per-call timeout for bridged MCP tools. |
projects[].root / slug / locale | — | Static projects (optional; dynamic binding via /aoci needs none). |
projects[].dbSources[] | [] | Database sources (sourceId, engine, databaseName, namespace, credentialEnv). |
projects[].schedule.cron | 0 3 * * * | Nightly health-check schedule (verify-only by default). |
The plugin was validated through four complementary approaches:
aoci 0.1.0-rc18 binary + real Git repository + MCP SDK): init succeeded; scan established a Baseline (6 files / 586 ms); verify emitted JSON; all nine MCP tools discovered; aoci_header returned index identity over MCP./aoci handler registered, bound 9/9 tools, and agent.steer submission succeeded.dsh --profile web --dump-config resolves the plugin entry and its configuration without errors.aoci ui panel are later milestones.AOCI_DB_<ID>_DSN); the plugin never stores or embeds secrets.aoci binary is downloaded from the official Release and verified by SHA-256; it is not bundled or redistributed (FSL-1.1-MIT)./aoci/* panel routes are loopback-only.The authors wish to thank:
ctx.tools, ctx.commands, and the __ModuleLoader__.load frontend contract.dsh-task-board (@linxin666/dsh-web-ui) and dsh-better-sidebar (omdsh-dev/DSH-better-sidebar), whose dual-face plugin architecture and manifest protocols were direct references.dsh-plan-mode (@deepseek-ai/dsh-plan-mode) for the ctx.inject(['commands'], …) registration and agent.steer submission patterns.See RELEASE.md for the full version history and acknowledgements.
MIT License (see LICENSE). AOCI-CODE is licensed FSL-1.1-MIT (source-available, github.com/aoci-spec/aoci-code); this project holds no AOCI-CODE binaries and distributes none. The design rationale is documented in docs/DESIGN.md.