dsh-harness-panel
DeepSeek Harness 的设置部分：在一个原生风格的页面中，提供 MCP 服务器状态及启动/停止、会话技能目录启用/禁用、钩子桥接启动/停止，以及 AGENTS.md 加载链的内联编辑。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:felixzhang-glitch/dsh-harness-panel#8db2d87f93e7b3278a7857a060e4dea2706c3926Harness Panel 以 dsh-harness-panel 发布，当前版本为 0.3.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A DeepSeek Harness plugin that adds a Harness page to Settings — one place to inspect and start/stop MCP servers, enable/disable skills, start/stop hook bridges, and inspect or edit the AGENTS.md instruction chain, styled to match the native settings UI.
English · 中文
MCP
@deepseek-ai/dsh-mcp-client row: connection status (observed from the upstream mcp/status seam, honestly unknown when unobserved), transport, sanitized target, tool inventorypluginManager Remote the built-in Plugins page uses; disabling stops the mcp-client row and its toolsinitialize POST / stdio spawn handshake, 10s deadline)Skills
/ menu reads (remote.skills), so the panel always agrees with the composeruser-invocable: false, disable-model-invocation: true) in the skill's SKILL.md, so it leaves the model catalog and the / menu in every registry scope; the panel keeps listing it with an off switch, and re-enabling restores the original frontmatter linesHooks
@deepseek-ai/dsh-hooks-claude-code / @deepseek-ai/dsh-hooks-codex): each row's configPath file parsed into event → matcher → command viewstype to the sentinel the bridges skip, records the original value, and reloads the bridge row so it takes effect immediately. The bridge row itself deliberately carries no whole-row switch — the loader's live re-enable of a row is unreliable, so the page stays at the granularity the file edit serves~/.claude/settings.json, ~/.codex/hooks.json, project-level, …) scanned read-only and clearly marked not mountedAGENTS.md
$DSH_HOME/AGENTS.md, $DSH_AGENTS_HOME/AGENTS.md, then the project root down to the session working directory, base candidates before each directory's .local overlaysplugins list, and the root fallback, so the displayed maxBytes/candidate configuration is the one in effect~/.dsh/AGENTS.md -> ~/.agents/AGENTS.md preserves the symlink. Missing candidates can be created from their directory cardThe visual language follows the shipped settings sections rather than inventing its own: --dsw-* design tokens only (no hard-coded colors), native corner radii (--dsw-radius-xl cards, --dsw-radius-md controls), 0.5px hairline strokes, the underline tab strip used by the built-in Plugins page, and the shipped Switch atom from @deepseek-ai/dsh-client-ui-primitives — the exact control the Plugins page uses. Light and dark themes both work.
Desktop profile (~/.dsh/profiles/desktop):
cd ~/.dsh/profiles/desktop
# package.json → dependencies: "dsh-harness-panel": "link:<path to this repo>"
# package.json → dsh.profile.bundles: add "dsh-harness-panel"
pnpm install
# restart DSH (the desktop profile has no live reload)
Or install by local path from Settings → Plugins.
remote.pluginManager.setPluginEnabled: the official manager writes the profile's cordis.patch.yml and reloads the row, exactly as the built-in Plugins page does. This host half registers no write route for themPOST /harness-panel/skills/toggle, POST /harness-panel/hooks/toggle-hook, and POST /harness-panel/agents/write. Each requires content-type: application/json, an x-harness-panel: 1 header, and a same-origin Origin when the browser sends one; the toggle bodies are bounded to 16 KiB and the AGENTS.md body to 4 MiBtype; an AGENTS.md write is refused unless the path is a candidate discovered for the requested working directory, and its expectedMtimeMs must match the file on disk. Symlinked candidates are written through so the link survives, but a resolved target outside the project root or either instruction home is refused$DSH_HOME/harness-panel/state.json (default ~/.dsh/harness-panel/state.json): skill names, descriptions, paths, disable times, and the original frontmatter/type lines, mode 0600. No instruction bodies, no credentialsctx.fs provider; file content is returned only to the same-origin panel and is never loggedpnpm install
pnpm build # emits lib/index.js (host ESM) + lib/client.js (browser bundle)
pnpm typecheck
pnpm test # vitest: mcp aggregation, hooks parsing, AGENTS.md discovery/render/file edits, sanitization, skill file/state, route gates, switch models
The scripts prefer bunx and fall back to the local Node. On the macOS desktop install the DSH-bundled Node is hardened and cannot load the ad-hoc native rollup/rolldown bindings, so bunx tsdown / bunx vitest run is the path that works there.
Compatibility: DSH >=0.2.0 <0.3.0 (developed against desktop 0.2.1-rc.1). AGENTS.md discovery, dedupe and budget rendering mirror @deepseek-ai/dsh-agent-instructions 0.2.1-rc.2; if a later loader changes those semantics, the panel needs the same adjustment.
DeepSeek Harness 设置面板插件：在设置导航中新增 Harness 入口，集中查看并启停 MCP 服务器、Skills 与 Hooks，并查看/编辑 AGENTS.md 指令链，视觉与原生设置页一致。
mcp/status 事件，无观察时如实显示未知）、传输方式、脱敏目标、工具清单，一键探活；每个可寻址行右侧有原生启停开关，停用后 mcp-client 行与其工具一起下线/ 菜单同源），每个 skill 右侧有原生启用/停用开关。停用直接写入该 skill SKILL.md 的官方 frontmatter 键（user-invocable: false、disable-model-invocation: true），在任何 registry scope 都生效，skill 从模型目录与 / 菜单消失；面板仍以关闭状态列出，重新启用时按记录还原原始行type 改为 bridge 跳过的哨兵值（provider 自身的机制），记录原始值并重载 bridge 行立即生效。bridge 整行不设总开关：loader 对整行的热恢复不可靠，面板停留在文件编辑能服务的粒度。本机约定路径上未挂载的配置文件继续只读扫描$DSH_HOME/AGENTS.md → $DSH_AGENTS_HOME/AGENTS.md → 项目根到会话工作目录，每层先基础候选再 .local 覆盖），标注每个候选的最终去向：已注入、空文件、被截断、因预算省略、同组重复折叠、超过单文件上限、不可读或未创建。预算与去重按 dsh-agent-instructions 0.2.x 的算法复刻，并给出将注入内容的完整预览；当前 preset 通过会话投影与 preset plugins 解析，显示实际生效的 maxBytes 与候选配置。每个文件有内联编辑器，保存走候选路径白名单 + 1 MiB 内容上限 + mtime 前置校验；~/.dsh/AGENTS.md -> ~/.agents/AGENTS.md 这类符号链接写穿目标而保留链接，缺失候选可在对应目录卡片中新建安全边界：MCP 与 hook 开关调用 shipped remote.pluginManager.setPluginEnabled，由官方 manager 写 profile 的 cordis.patch.yml 并 reload，与内置 Plugins 页一致；host 的写入路由为 POST /harness-panel/skills/toggle、POST /harness-panel/hooks/toggle-hook 与 POST /harness-panel/agents/write，均要求 JSON、x-harness-panel: 1 与同源 Origin，开关类 body 上限 16 KiB，AGENTS.md 写入上限 4 MiB。skill 开关只改目标 SKILL.md 的两个 invocation 键（先校验声明的 skill name），hook 开关只改该命令的 type；AGENTS.md 写入只接受本次按请求工作目录发现出的候选路径，且 expectedMtimeMs 必须与磁盘一致；符号链接写穿目标，但目标落在项目根或两个指令 home 之外时拒绝写入。host 写出的文件仅这些编辑与 $DSH_HOME/harness-panel/state.json（默认 ~/.dsh/harness-panel/state.json，0600），state 文件只含 skill 名称、描述、路径、停用时间与原始行记录，不含正文与凭据。AGENTS.md 发现与读取使用 host 的 Node 文件系统而非 agent 沙箱 provider；文件内容只返回给同源面板，不写日志。路由仅监听 loopback。
开发命令见上文；安装或重新构建后需重启 DSH（desktop profile 无 live reload）。