dsh-recovery-proof
DeepSeek Harness 的只读恢复演练证据
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:dongsheng123132/dsh-recovery-proof#2e5cfeab274cf8d6fe99df1f54917c8662baf894Recovery Proof 以 dsh-recovery-proof 发布，当前版本为 0.2.1。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A read-only recovery-drill evidence verifier for DeepSeek Harness. It does not restore files, create checkpoints, or replace recovery executors such as Turn Rewind or Checkpoint Rewind. It verifies that an external drill left reproducible evidence. Version 0.2.0 is also a formal Codex plugin with a proof-only MCP server, and its namespace export is regression-tested against the stock DSH Web Loader.
Inputs are explicit JSON/JSONL files. Secret-, token-, prompt-, chat- and content-shaped fields are rejected. Object contents are never included in output. The verifier writes only to the explicit workspace-relative artifactDir, using an atomic write and SHA-256 read-back check.
dsh plugin install github:dongsheng123132/dsh-recovery-proof
dsh plugin compose dsh-recovery-proof
The bundle registers dsh_recovery_proof_inspect and dsh_recovery_proof_verify. The package intentionally exports a Cordis namespace (name, inject, apply) rather than a default function so the stock Loader retains the tools injection declaration.
dsh-recovery-proof inspect --workspace-root ./examples/basic --manifest recovery.manifest.json
dsh-recovery-proof verify --workspace-root ./examples/basic --manifest recovery.manifest.json --events recovery.events.jsonl --artifact-dir artifacts
Exit code 0 means the command ran and verification passed, 2 means the evidence was processed but failed policy, and 1 means invalid or unsafe input.
See examples/basic. A manifest pins system.revision, content-addressed objects, and explicit scenarios with expectedPhases, requiredObjectIds, and maxRtoMs. Events contain only structural facts: unique idempotency key, scenario, sequence, phase, status, duration and object references.
The repository retains a validated .codex-plugin/plugin.json and declares the stdio server in .mcp.json. MCP exposes:
recovery_manifest_inspect for bounded inline manifest validation;recovery_evidence_verify for bounded inline JSONL phase/RTO/rollback/stale-plan checks.Both MCP tools reuse the same validation core as DSH and CLI, but never access the filesystem, dereference object paths, write an artifact or execute a recovery action. Their result explicitly states that object-content verification was not performed. Use the DSH or CLI surface when object hashes and the content-addressed report must be verified against a workspace.
All input paths and the output directory must remain under workspaceRoot; symlink inputs and symlink output directories are rejected. No shell is spawned, no network is used, no recovery action is executed, and there are no install lifecycle scripts.
npm test
npm run check
npm run smoke:plugin
npm run smoke:mcp
# Requires a built DeepSeek Harness checkout.
DSH_CHECKOUT=/path/to/deepseek-harness npm run smoke:dsh
DSH_CHECKOUT=/path/to/deepseek-harness DSH_HOME=/path/to/isolated-home npm run smoke:web-loader
MIT