dsh-rea-toolkit
用于 DeepSeek Harness 的 REA (Reverse Engineer Anything) MCP 工具包：对 JavaScript/Electron 应用、浏览器扩展、原生二进制文件等进行静态分析，并通过随附的 REA runtime 提供服务。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:akash-digitavision/my-rea-toolkit#4df7f6983d35e9f1ea2061afed44cce662dd8f71Rea Toolkit 以 dsh-rea-toolkit 发布，当前版本为 1.0.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
One-line value: after installing, your DeepSeek Harness agent gains the full REA (Reverse Engineer Anything) toolset — evidence-backed static analysis of JavaScript/Electron applications, browser extensions, ASAR archives, .NET assemblies, native binaries, SQLite databases, WASM, EVM bytecode, and more — as native mcp__rea__* tools.
This bundle packages the REA v6.7.0 runtime (dist/, verified Windows native artifact, skills, and the exact dependency lockfile) together with a DeepSeek Harness configuration-only MCP bundle that registers REA's stdio MCP server through @deepseek-ai/dsh-mcp-client. REA analyzes targets locally; results include per-conclusion evidence and limitations.
Typical agent prompts after install:
D:/apps/legacy-ext and list its modules, IPC channels and gateway endpoints with evidence."dsh plugin --profile web add github:akash-digitavision/my-rea-toolkit
Then, inside the installed bundle directory, run the bootstrap once and restart DeepSeek Harness:
install-tools.bat # Windows
./install-tools.sh # Linux / macOS
node install-tools.mjs # directly
The bootstrap: discovers a suitable Node.js (22.19+/24.11+/26+), verifies the bundled REA runtime, installs REA's exact production dependencies from the shipped lockfile, persists DSH_REA_HOME / DSH_REA_NODE at user scope, and runs REA's own mcp doctor.
Resolution contract (see cordis.patch.yml):
| Environment | Behavior |
|---|---|
DSH_REA_NODE + DSH_REA_HOME set | Absolute node + bundled, validated REA runtime (works with no system Node on PATH) |
DSH_REA_HOME only | node from PATH + bundled runtime |
| Neither set | npx -y rea-agents@6.7.0 mcp fetches the official runtime from npm |
Without any setup the bundle still installs safely — you simply get no REA tools until the bootstrap runs (or npm/npx is available).
@deepseek-ai/dsh-mcp-client (shipped profile package).rea-windows-x64.node Node-API addon; loader checks version/ABI/architecture/SHA-256 at load), Linux x64, macOS (Apple silicon: JS analysis lanes; native binary lanes per REA docs).*TOKEN*, *KEY*, …) are scrubbed from the MCP child environment by the Harness MCP client.Development & Operations (secondary: Tools & Capabilities).
index.js apply(ctx) export is an inert plugin-spec compliance shim; the bundle is configuration-only.