dsh-context-toolkit
DeepSeek Harness 套件：原生 ctk_* 沙箱工具、可避免批量输出进入记录的路由门，以及本地全文知识库。无第三方运行时依赖。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add dsh-context-toolkit@0.2.2Context Toolkit 以 dsh-context-toolkit 发布，当前版本为 0.2.2。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
简体中文 | English
A DeepSeek Harness bundle whose single job is keeping bulk output out of the conversation.
It separates raw bytes from conclusions: commands run in a child process, files are analysed in a sandbox, and long material is filed into a local knowledge base — while the conversation receives only conclusions, excerpts and counts. A routing gate refuses, before execution, the calls that would inevitably flood the transcript.
No third-party runtime dependencies. The knowledge base rides on Node's own node:sqlite (FTS5 included) and code execution uses interpreters already on the machine, so installing it pulls nothing else.
| Problem | What this does |
|---|---|
| A command prints thousands of lines; you only need a count | ctk_execute runs it in a child process and returns the answer |
| A large file needs statistics, not a full read | ctk_execute_file keeps its bytes in the sandbox |
| Many commands, one question | ctk_batch_execute answers in one call with per-command status |
| A page or spec is read once and never reused | ctk_index files it; ctk_search pulls excerpts on demand |
curl / wget paste whole responses into the conversation | The routing gate refuses them and names the alternative |
| You cannot tell how much was saved | ctk_stats reports the ledger; the settings page shows a live occupancy panel |
| Tool | Purpose |
|---|---|
ctk_execute | Run code in a sandboxed child process (javascript / esm / typescript / shell), return only the answer |
ctk_execute_file | Run code over a file for statistics or extraction; the file text stays in the sandbox |
ctk_batch_execute | Several commands in one call, per-command status, conclusions only |
ctk_index | File text or a file into the local FTS5 knowledge base |
ctk_search | Multi-query retrieval; excerpts are centred on the match |
ctk_fetch_and_index | Fetch pages → strip markup → file them |
ctk_purge | Delete filed material (requires confirm: true) |
ctk_stats | Savings ledger: refusals, sandbox bytes, filed bytes, call counts |
ctk_doctor | Self-check: interpreters really start, scratch dir writable, knowledge round-trip |
ctk_context_report | This conversation's context occupancy and composition |
From npm (recommended):
dsh plugin --profile desktop add dsh-context-toolkit
From GitHub:
dsh plugin --profile desktop add github:chimneyQ/dsh-context-toolkit
From a local checkout:
dsh plugin --profile desktop add D:\path\to\dsh-context-toolkit
Confirm dsh-context-toolkit appears in dsh.profile.bundles inside <DSH_HOME>/profiles/desktop/package.json.
Remove:
dsh plugin --profile desktop remove dsh-context-toolkit
Reach for ctk_* first whenever the work is analysis, counting, filtering or summarising — reading that output into the conversation is the exact problem this bundle exists to solve.
// How many .log files, and how big in total?
await ctk_execute({
language: 'javascript',
code: `
const fs = require('fs');
const dir = process.argv[2];
let n = 0, bytes = 0;
for (const f of fs.readdirSync(dir)) {
if (!f.endsWith('.log')) continue;
n++; bytes += fs.statSync(dir + '/' + f).size;
}
console.log(n + ' files, ' + bytes + ' bytes');
`
});
File long material once, then pull sections:
await ctk_index({ path: 'D:/specs/api.md' }); // the full text stays in the store
await ctk_search({ queries: ['rate limit', 'auth'] }); // only the relevant excerpts come back
| Key | Default | Meaning |
|---|---|---|
routing | true | Master switch for the routing gate |
denyCurlWget | true | Block curl / wget outright |
bashNudgeMinCommandBytes | 4096 | Nudge threshold for long commands (0 disables) |
maxReadBytesBeforeAsk | 51200 | Nudge threshold for whole-file reads (0 disables) |
trustedReadBasenames | package.json etc. | Filenames exempt from the read nudge |
compressNudgeTokens | 120000 | Occupancy warning threshold (tokens) |
searchLimit | 5 | Excerpts per query in ctk_search |
snippetChars | 900 | Character ceiling per excerpt |
fetchMaxBytes | 2000000 | Per-page fetch ceiling |
storageDir | empty | Knowledge-base root; empty = <DSH_HOME>/context-toolkit |
tools.* | see below | Per-tool switches |
Tool switches: tools.execute, tools.executeFile, tools.batchExecute, tools.index, tools.search, tools.fetchAndIndex, tools.purge, tools.stats, tools.contextReport, tools.doctor — all on by default.
The offline suites need no DSH runtime:
node smoke.mjs # 66 checks: contract, runtime discovery, tools, gate (segment matching, prefix/path normalisation, script_path coverage), resource disposal, knowledge base, observability, version reporting
node test-client.mjs # 27 checks: browser-half contract and bilingual dictionary parity
node test-package.mjs # 20 checks: publish manifest and the zero-dependency constraint
node release-check.mjs # 27 checks: release readiness (manifest, deps, tool count, gate matching, version, SHA coverage, no hardcoded paths)
ctk_fetch_and_index fails with that reason spelled out — not a bare "fetch failed" — and ctk_index is the way to file local material instead.ctk_execute timeouts are hard kills: the child is terminated and timedOut is reported.sudo, exec, …) and path/extension normalisation are stripped — and script_path is read up to the first 256 KB. A tool a program invokes internally (python -c 'import wget') is outside its remit.MIT