dsh-git-seam
为 DeepSeek Harness 代理提供结构化 Git 工具：支持确定性的 porcelain 格式解析（中文/UTF-8 路径、Windows），以及提交前 diff 策略门禁，拒绝盲目提交。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:qt-11564/dsh-git-seam#d8cd4ea7d91fb8cdd6d53ed45555783cac1ab182Git Seam 以 dsh-git-seam 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Structured git tools for DeepSeek Harness (dsh) agents — with a diff-before-commit gate that refuses blind commits and deterministic porcelain parsing that handles Chinese/UTF-8 paths, spaces, and CRLF stably on Windows and Linux.
The agent gets six tools — git_status, git_diff, git_log, git_show, git_branch, git_commit — plus a policy layer that enforces review-before-commit discipline instead of relying on the model to remember it.
git in bash?An agent can already run git through the bash tool. What bash cannot give you:
git_commit is refused unless the changes were actually reviewed with git_diff first — same turn, and covering exactly the files the commit would include. Files staged after the review (e.g. via a shell git add) are caught and named. Bash cannot enforce this; it can only hope.LC_ALL=C, GIT_TERMINAL_PROMPT=0, core.quotepath=false, and machine formats (status --porcelain=v1 -z, diff --numstat, log --format=…). Chinese filenames, BOM'd UTF-8 content, spaces, renames, and CRLF are parsed by code, not by the model's luck.git_commit asks for approval with a real per-file plan: path (+N/-M), untracked paths listed as (new file). Bash escalation shows a command string, not a change list.user.email, and ../ traversal return clear errors with the next step, not raw stderr.# from GitHub (recommended)
dsh plugin --profile web add github:qt-11564/dsh-git-seam
# or from npm (once published)
dsh plugin --profile web add dsh-git-seam
Then restart the profile. Verify with dsh --profile web --dump-config (look for the git-seam row) or just start a conversation — the six git_* tools appear automatically.
- id: git-seam
name: dsh-git-seam # or ./index.mjs when installed from a local checkout
config:
maxBytes: 32768 # output byte budget; truncation notice + spill path beyond it
requireDiffBeforeCommit: true # the diff-before-commit gate (set false to disable)
requireCommitApproval: true # route git_commit through the approval service
timeoutMs: 30000 # per-command timeout; longer commands are killed
| Tool | Input | Output |
|---|---|---|
git_status | cwd? | branch, ahead/behind, staged/unstaged/untracked lists, clean flag |
git_diff | spec? (worktree / --staged / A..B), path? | per-file +N/−M stats + truncated unified diff |
git_log | range?, path? | commits: hash, author, date, subject |
git_show | ref (required), path? | commit metadata + stats + truncated diff |
git_branch | cwd? | current branch + all local branches |
git_commit | message (required), paths? | new hash + summary; gated and approval-routed |
git_commit is checked on tools/pre-execute:
git_diff in the same turn (a diff from a previous turn does not count; a failed diff does not count).git diff structurally cannot show them; their review is read-based (fs tools), and the approval plan still lists them.Denials name the offending files and tell the model what to do (run git_diff again). The gate is an ordinary tools/pre-execute listener — it unloads with the plugin and composes with the rest of the policy chain.
reset, checkout, revert, merge, rebase are out of scope; git_commit is the only mutating tool.stash, remote operations (push/pull/fetch), or submodules.blame, GPG signing, or LFS.npm install # installs tsx for the selftest
npm test # 13-case selftest: gate semantics, approval plan, full commit flow
The selftest drives the real plugin module with a mocked ctx against a real git fixture repo (real porcelain output). For the test's @deepseek-ai/dsh-tools import to resolve without publishing, either npm i @deepseek-ai/dsh-tools or drop a dev shim under node_modules/@deepseek-ai/dsh-tools re-exporting your harness checkout's packages/core/tools/src/schema.ts.
MIT