dsh-mcp-test
DeepSeek Harness 的工具面快照与漂移门禁：记录每个可见工具的架构（包括 MCP 工具），将升级与基线进行差异比较，并拒绝未明确说明的界面变更
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:zhengqiuyang/dsh-mcp-test#c28f52932fb6546c68b99203c6d40d4d30cc3219Mcp Test 以 dsh-mcp-test 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Tool-surface snapshot and drift gate for DeepSeek Harness (dsh).
Everything the model can call is a supply-chain surface: first-party tools,
plugin tools, MCP tools. This plugin snapshots the full visible tool registry
(name / description / parameters via ctx.tools.schemas()), stores a
baseline you commit, and diffs every registry change against it — so
upgrading a plugin or MCP server that silently adds, removes, or reshapes a
tool fails loud instead of slipping through. Zero LLM calls in the trust
path.
Family: dsh-read-guard (what agents read) · dsh-pr-gate (what they write) · dsh-attest (what they did) · dsh-mcp-test (what they can call).
The dsh supply-chain lane has seven static-scanner plugins (install-time
vetting of package manifests) — none watches the live tool surface.
dsh-plugin-observatory audits plugin compatibility at the loader level,
not the model-visible schema level. Nobody answers the question that
actually matters at upgrade time: "did what my model can call just
change?" The schema-diff methodology is ported from
mcp-test's upgrade gate, applied
to the whole registry instead of one MCP connection.
boot / tools/change ──> snapshot ctx.tools.schemas()
──> baseline present? diff : establish baseline
──> drift: added / removed / changed(name.description|parameters)
──> warn (default) or rebaseline (explicit opt-in)
.dsh-mcp-test/baseline.json, name-sorted, stable JSON)
is meant to be committed — it is the contract.ignoreTools excludes your own deliberately-dynamic tools.v0.1 ships the snapshot + drift pillar. The behavioral probe pillar (functional + injection tests against running MCP servers, mcp-test's headline feature) is on the roadmap.
dsh plugin --profile default add github:zhengqiuyang/dsh-mcp-test
git installs build from source; authorize once in the profile's
pnpm-workspace.yaml:
allowBuilds:
dsh-mcp-test: true
- id: dsh-mcp-test
name: dsh-mcp-test
config:
baselinePath: .dsh-mcp-test/baseline.json
rebaselineOnDrift: false # true only when accepting an intended upgrade
ignoreTools: []
npm install
npm test
If dsh ships first-party tool-surface pinning, or the observatory-style plugins add schema-level drift gating, this freezes at its last working version with a postmortem here.