dsh-rtk-compressor
通过 RTK (Rust Token Killer) 路由 bash 命令，以压缩 shell 输出并节省上下文令牌的 DeepSeek Harness 插件。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:sondin/dsh-rtk#d49134e23cc42944071f2cdb3a7b7b6b86137d02Rtk Compressor 以 dsh-rtk-compressor 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A DeepSeek Harness plugin that
routes eligible bash commands through RTK (Rust Token Killer) so the output
an agent reads back is already filtered, grouped, truncated, and deduplicated —
saving context tokens the same way RTK's own agent hooks do.
bash tool keeps working, but commands like
git status, cat src/main.rs, grep -rn TODO src, npm test, git diff,
and find . -name '*.ts' are transparently rewritten to their rtk
equivalents (rtk git status, rtk read src/main.rs, rtk grep ...,
rtk cargo test, ...) before execution.rtk skill is registered for the agent, teaching it how to interpret
compressed output, recall elided content (rtk recall), bypass filtering
(rtk bypass), and read savings analytics (rtk gain).DSH's tool pipeline deliberately cannot rewrite exec.arguments (tools/pre-execute
and tools/execute receive deep-frozen arguments). Instead, this plugin wraps the
shell executor seam: the bash tool resolves a ShellExecSpec through
ctx.shell.resolve(...) and spawns with ctx.shell.execute(spec). The plugin
wraps ctx.shell.execute and, for each command, calls rtk rewrite <command>
(RTK's own "single source of truth" hook command):
rtk rewrite exit | meaning | plugin behavior |
|---|---|---|
| 0 / 3 | rewrite printed | executes the rewritten rtk ... command |
| 1 | no RTK equivalent | passes the command through unchanged |
| 2 | deny rule matched | passes through (DSH's own approval already ran) |
| spawn error / timeout | RTK unavailable | passes through; failure is not cached |
The rewritten command runs with RTK_SUPPRESS_HOOK_WARNING=1 so RTK's
"install a hook" nag never pollutes tool output. A bounded LRU cache avoids
re-spawning rtk rewrite for repeated commands.
Sandboxing is unaffected: the sandbox executor still applies the configured
sandbox mode to the spawned process, and RTK preserves exit codes, so the
[exit code: N] markers stay accurate.
The plugin is a DSH bundle (an npm package whose package.json declares
dsh.bundle.patch). Install it into a profile with the plugin manager:
dsh-rtk-compressor, git URL
https://github.com/sondin/dsh-rtk, or a local
link:/absolute/path/to/dsh-rtk).plugin_manager tool: call installBundle with the same spec.dsh plugin --profile <profile> add <spec> then
enable the dsh-rtk bundle.The bundle's cordis.patch.yml mounts the plugin row:
- insert:
- id: rtk
name: dsh-rtk
config:
enabled: true
After installation, restart DSH (or rely on HMR when the profile runs with
live patch reload). The plugin takes effect for every bash tool call.
The plugin row accepts a Schemastery config:
| field | type | default | description |
|---|---|---|---|
enabled | boolean | true | master switch; when false every command passes through |
binary | string | "rtk" | path to the RTK binary |
timeoutMs | number | 2000 | per-rtk rewrite call timeout |
cacheSize | number | 256 | LRU cache size for rewrite results |
excludedCommands | string[] | [] | command prefixes that are never rewritten |
debug | boolean | false | log each rewrite decision to the harness logger |
Example:
- id: rtk
name: dsh-rtk
config:
enabled: true
excludedCommands:
- sudo
- ssh
debug: false
When the skills service is present (it is in the default composition), the
plugin registers a runtime skill named rtk. The skill tells the agent:
rtk recall <hash> / rtk recall --grep <pattern> to recover elided contentrtk bypass <command> to execute a command without filteringrtk gain, rtk discover, rtk session for savings analyticspnpm install
pnpm test
Tests cover the rewrite decision logic (with a fake shell executor), the disposer
restoring the original executor on plugin unload, and the real rtk rewrite
CLI behavior (rewrites, chains, no-equivalent, already-rtk commands).
a && b), using RTK's own rtk rewrite as the source of
truth (so new RTK commands work without plugin updates), registering an rtk
skill for agents, and requiring no build step.