dsh-enterprise-suite
适用于 DeepSeek Harness 的开源企业级插件、治理控制和连接器模板
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:mickymultani/deepseek-harness-enterprise-suite#7f1adff172264055076d862bc42a29da37d0fd2aEnterprise Suite 以 dsh-enterprise-suite 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
点击下方 Badge 复制 Markdown，粘贴到 README 即可。
验证 package.json 声明的 GitHub 仓库，即可管理这个公开页面。认领后，Hub 会优先安排当前版本的安全扫描，并在通过后公开展示结果。
认领这个 Plugin →Open-source enterprise integrations, governance controls, and plugin templates for DeepSeek Harness.
The suite provides a secure starting point for organizations that want agent access to internal systems without placing connector credentials, authorization policy, and audit logic inside individual prompts or agent loops.
| Plugin | Capabilities | Status |
|---|---|---|
| Atlassian | Confluence search; Jira read, create, and deterministic issue review | Working; mock and live modes |
| Enterprise policy | Project and space allowlists, configurable DLP checks, approval-gated Jira writes | Working |
| Enterprise audit | Redacted owner-only JSONL records from final tool outcomes | Working |
The repository also includes a plugin generator, reusable connector utilities, a machine-readable enterprise plugin catalog, deployment guidance, a threat model, and starter templates for new connectors and policy plugins.
DeepSeek Harness is currently a developer preview. Pin both Harness and this suite to reviewed versions or commits.
From a DeepSeek Harness source checkout:
export DSH_HOME=/absolute/path/to/an/evaluation-home
pnpm dsh plugin --profile web add github:mickymultani/deepseek-harness-enterprise-suite#v0.1.0
pnpm dsh --profile web --dump-config
pnpm dsh web --no-open
For local development:
git clone https://github.com/mickymultani/deepseek-harness-enterprise-suite.git
cd deepseek-harness-enterprise-suite
pnpm install
pnpm test
cd /path/to/deepseek-harness
pnpm dsh plugin --profile web add /path/to/deepseek-harness-enterprise-suite
pnpm dsh web --no-open
The bundle starts in mock Atlassian mode. It cannot modify a real tenant until an operator explicitly changes the profile configuration to mode: live and supplies credential references.
Create an override at $DSH_HOME/profiles/web/cordis.patch.yml. Harness patch rows replace the complete config, so include every field:
- id: enterprise-atlassian
config:
mode: live
baseUrl: https://your-company.atlassian.net
authMode: basic
tokenRef: ATLASSIAN_API_TOKEN
emailRef: ATLASSIAN_EMAIL
requestTimeoutMs: 30000
allowInsecureHttp: false
- id: enterprise-policy
config:
mode: enforce
allowedJiraProjects: [ENG, SEC]
allowedConfluenceSpaces: [ENG, SEC]
protectedToolPrefixes: [jira_, confluence_]
requireApprovalForWrites: true
Configuration contains references, never credential values. Resolve those references with the Harness credential provider, an injected process environment, or a custom provider backed by the enterprise vault.
Generate a standalone connector plugin:
npx dsh-enterprise-suite create-dsh-enterprise-plugin knowledge-search
The generated project includes an installable bundle manifest, typed canonical tool output, configuration validation, cancellation-aware HTTP, tests, and documentation prompts. See Creating a plugin and the connector contract.
The shared plugin foundation and included plugins are suitable for evaluation. A production deployment must still validate its own tenant APIs, field mappings, identity propagation, approval experience, retention rules, regulatory controls, availability targets, and incident procedures. Capability status is tracked explicitly in the plugin catalog.