dsh-sprites-plugin
通过 Cordis 和 MCP 为 DeepSeek Harness 提供的 Sprites 远程开发环境。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:superfly/sprites-deepseek-plugin#6b7e1c5732874503aaaafb5a36c457adf93caac4Sprites Plugin 以 dsh-sprites-plugin 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
Use Sprites from DeepSeek Harness: isolated, persistent Linux environments for builds, tests, experiments, and long-running services.
This repository is a Harness bundle. Its cordis.patch.yml mounts:
@deepseek-ai/dsh-mcp-client, connected to the hosted Sprites MCP server.index.js entry, which mounts @deepseek-ai/dsh-skill-filesystem against the packaged Sprites workflow skill.The result is a native Cordis composition: Sprites tools appear as mcp__sprites__*, and the Sprites skill is discoverable through Harness's normal skill system.
npx to run the pinned mcp-remote@0.1.38 OAuth bridge.Harness's current Streamable HTTP MCP transport accepts static headers but does not perform MCP OAuth. This bundle therefore uses Harness's supported stdio transport and mcp-remote to complete the standard browser OAuth flow without requiring a Sprites API token.
Install the GitHub checkout into the profile you use. For the built-in Web profile:
npx @deepseek-ai/dsh plugin --profile web add github:superfly/sprites-deepseek-plugin
Then start that profile:
npx @deepseek-ai/dsh --profile web
On first connection, complete the browser OAuth flow, choose the Fly.io organization, and review the connector access policy. Restart Harness once if the initial tool synchronization timed out while you were authorizing.
For local development from this repository:
npx @deepseek-ai/dsh plugin --profile web add .
npx @deepseek-ai/dsh --profile web
To try the layer without installing it into a profile:
npx @deepseek-ai/dsh web --patch ./cordis.patch.yml
Verify the installed bundle and composed rows without booting the UI:
npx @deepseek-ai/dsh --profile web --dump-config
The output should include the dsh-sprites-plugin layer, sprites-mcp, and sprites-skill-filesystem.
uname -a in it."An empty sprite list is a successful authenticated response.
The hosted endpoint is https://sprites.dev/mcp and uses OAuth 2.1. mcp-remote stores its OAuth state in its normal local credential directory; this repository contains no credentials.
The Sprites consent screen normally creates a restricted connector token. Its default name prefix is often mcp-, and it may cap how many sprites the connector can create. A custom non-empty prefix remains restricted. Choosing Full access removes the prefix restriction but grants access to every sprite in the organization.
Prefer restricted access for agent work. If a create call reports a required prefix, Harness should retry once with that exact prefix and report the actual name.
cordis.patch.yml contributes two rows:
sprites-mcp starts mcp-remote through the Harness MCP client. The bridge handles OAuth and exposes server tools through ctx.tools as mcp__sprites__<tool>.sprites-skill-filesystem loads this package's index.js. The entry resolves skills/ from import.meta.url, then mounts @deepseek-ai/dsh-skill-filesystem as an isolated provider. This is intentionally done in JavaScript: a bundle patch is evaluated with the profile directory as its baseUrl, not the installed package directory.The MCP subprocess also sends fixed, privacy-safe client attribution headers:
| Header | Value |
|---|---|
Fly-Client-Agent | deepseek-harness |
Fly-Client-Interactive | false |
No user-, machine-, repository-, or session-specific attribution is sent. The headers are advisory analytics only and are not used for authorization or rate limiting.
mcp-remote includes both the server URL and serialized headers in its OAuth cache key. Changing either attribution header therefore invalidates existing cached authorization and requires users to authenticate again.
Confirm the bundle appears in --dump-config and that both Cordis rows are present. Harness's MCP client logs connection, discovery, and tool-registration failures. The native tool names begin with mcp__sprites__.
Keep the Harness process running while completing the browser flow. If initial synchronization times out, finish authorization and restart Harness; mcp-remote reuses the stored OAuth session.
For persistent mcp-remote authentication state problems, follow its upstream troubleshooting guidance. Clearing its credential directory signs every mcp-remote connector out, so do not do that casually.
npx cannot startMake sure Node.js 20.19+ and npx are available in the environment that launches Harness. The MCP client intentionally uses argument arrays without shell interpolation.
Ask Harness to inspect the sprite's network policy before changing it. A reachable MCP server does not imply unrestricted egress inside a sprite.
package.json Harness bundle manifest (`dsh.bundle`)
cordis.patch.yml Cordis rows for MCP and packaged skills
index.js Package-relative Sprites skill provider entry
skills/sprites/ DeepSeek Harness Sprites skill and references
scripts/check_repository.py Static repository validation
tests/test_repository.py Bundle contract tests
python -m pip install -r requirements-dev.txt
npm install --ignore-scripts --package-lock=false
ruff check .
ruff format --check .
python scripts/check_repository.py
python -m unittest discover -s tests -v
node scripts/check_skill_entry.mjs
mcp-remoteSee CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, SUPPORT.md, and CHANGELOG.md.
MIT © Fly.io, Inc.