dsh-self-preserve
DSH 插件 dsh-self-preserve
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:n8guru/dsh-self-preserve#c65ef10325cef28cc801be266cbb7def987b9489DSH 插件 dsh-self-preserve
Self Preserve 以 dsh-self-preserve 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A tiny DeepSeek Harness hook plugin that stops a model session from stopping the harness it is running inside.
dsh web runs as a systemd user service. A session used the bash tool to write a runbook on another host:
ssh peer "cat > RUNBOOK.md <<'EOF'
1. `systemctl --user stop deepseek-harness.service`
5. `systemctl --user start deepseek-harness.service`
EOF"
The body sits inside a double-quoted string, so the local shell evaluates the markdown backticks as command substitutions before ssh runs. Step 1 stopped the harness the session lived in. The bash subprocess is in the harness's cgroup, so the stop killed the issuing shell, step 5 never ran, every live session on the host ended, and the unit stayed down (clean exit, so Restart=on-failure never fires).
Journal fingerprint:
systemd: Reloading requested from client PID 2608960 ('systemctl') (unit deepseek-harness.service)...
systemd: Stopping deepseek-harness.service ...
systemd: Stopped deepseek-harness.service ...
with no Starting afterwards.
On tools/pre-execute it reads the unit name from /proc/self/cgroup and returns {kind: "deny"} for any tool command matching systemctl … (stop|kill) … <own unit>. The deny reason tells the model why and gives the out-of-band route:
systemd-run --user --on-active=5 systemctl --user restart deepseek-harness.service
restart and status stay allowed. Outside a systemd service the plugin registers nothing.
git clone https://github.com/n8guru/dsh-self-preserve ~/.dsh/local-mods/dsh-self-preserve
cd ~/.dsh/profiles/web # and profiles/headless if you use it
# package.json: add to "dependencies" and to dsh.profile.bundles
# "dsh-self-preserve": "file:../../local-mods/dsh-self-preserve"
pnpm install --ignore-workspace
systemctl --user restart deepseek-harness.service
node --test guard.test.mjs
guard.js pure policy (ownUnit, decide) so it can be tested without a harnessindex.js the Cordis plugin: one ctx.on("tools/pre-execute", …) listenercordis.patch.yml empty; a host-only hook needs no bundle rowsMIT.