@jacksonchen/dsh-devops
DeepSeek Harness 的 GitLab + Kubernetes DevOps 控制平面：AI 工具、Web 控制台、Webhook 和告警监控
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add github:Jackson-chen97/dsh-devops#08ce3ea8ce4c4564421c31a17f5a4beb1fd9c236
Devops 以 @jacksonchen/dsh-devops 发布，当前版本为 0.2.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
GitLab + Kubernetes DevOps control plane for DeepSeek Harness (DSH): AI tools, web console, webhook notifications, and alert monitoring.
| GitLab tab | K8s tab |
|---|---|
| 查看图片 | 查看图片 |
followup() notification; background polling detects pipeline failures and pod issuesnode:https🚀 Recommended: Local Checkout Method (No npm dependency issues)
Due to a known issue with @deepseek-ai/dsh-type-meta missing from npm, the local checkout method is the most reliable way to install this plugin. See GitHub discussion #410 and discussion #984.
This guide walks you through cloning the repository and installing it locally.
# Create a directory for your project tools (or use existing location)
mkdir -p ~/dev/tools
cd ~/dev/tools
# Clone the dsh-devops repository
git clone https://github.com/Jackson-chen97/dsh-devops
cd dsh-devops
Use one of these two methods:
Option A: Using the dsh plugin CLI (registers dependency + bundle automatically)
dsh plugin --profile web add "~/dev/tools/dsh-devops"
Option B: Edit the profile package.json directly
Declare it in BOTH dependencies and dsh.profile.bundles:
{
"dependencies": {
"@jacksonchen/dsh-devops": "~/dev/tools/dsh-devops"
},
"dsh": {
"profile": {
"bundles": ["@jacksonchen/dsh-devops"]
}
}
}
dsh --profile web
The browser should open the WebUI automatically (default http://127.0.0.1:3080/).
The plugin ships its own
cordis.patch.yml, which is applied automatically as a bundle layer (including the connection-service dependency patch for DSH 0.1.5) — you do not need to insert the plugin entry into the profile'scordis.patch.ymlmanually.
✅ Works offline - No pnpm registry needed
✅ Bypasses dependency issues - The dsh-type-meta problem is avoided
✅ Install without building - The checkout ships lib/ built by tsdown (host ESM + web client CJS)
✅ Hot reload support - Re-run pnpm build after changing src/, restart DSH, done
Once the dsh-type-meta issue is resolved by maintainers, you can use these traditional methods:
From npm (after publishing):
dsh plugin --profile web add @jacksonchen/dsh-devops
From GitHub:
dsh plugin --profile web add https://github.com/Jackson-chen97/dsh-devops.git
Equivalent pnpm commands in the profile directory:
cd ~/.dsh/profiles/web
pnpm add @jacksonchen/dsh-devops # npm (once published)
pnpm add https://github.com/Jackson-chen97/dsh-devops.git # GitHub
~/.dsh-devops/config.jsonOr configure via a cordis patch entry config: block (headless setups etc.):
- id: dsh-devops
name: '@jacksonchen/dsh-devops'
config:
gitlab:
baseUrl: 'https://gitlab.example.com'
token: 'glpat-xxxx'
projects:
- id: main
path: 'my-group/my-project'
tokenEnv: 'GITLAB_TOKEN'
k8s:
kubeconfigs:
- id: prod
path: '~/.kube/config'
context: 'prod'
Note the structural difference: the Settings UI writes
~/.dsh-devops/config.json(theservers[]/kubeconfigs[]multi-entry shape), while a cordisconfig:uses the Schemastery schema above and takes precedence over the settings file.
All tools are registered as soon as the plugin loads — no YAML config needed. They read the same configuration the Settings > DevOps UI saves (~/.dsh-devops/config.json), so switching project/cluster in the dashboard applies to AI calls immediately. Calling a tool before configuring returns a hint to finish setup first.
An explicit config: block in the cordis patch entry still works as an override layer for headless setups.
| Tool | Description |
|---|---|
gitlab_mr_create | Create MR (optional reviewers, auto-triggers pipeline watch) |
gitlab_mr_review | Review MR (approve/request_changes/comment) |
gitlab_mr_list | List merge requests |
gitlab_tag_create | Create git tag |
gitlab_pipeline_status | Get pipeline status |
gitlab_pipeline_jobs | List pipeline jobs |
gitlab_pipeline_watch | Start/check pipeline monitoring |
k8s_deployment_status | Get deployment rolling status |
k8s_pods | List pods with restart counts |
k8s_events | Get recent K8s events |
k8s_logs | Get pod logs (tail N lines) |
| Field | Required | Description |
|---|---|---|
baseUrl | Yes | GitLab instance URL |
token | Yes | GitLab access token (direct value) |
defaultProject | No | Default project ID (falls back to first) |
projects[].id | Yes | Unique project identifier |
projects[].path | Yes | GitLab project path (group/project) |
projects[].token | Either | Per-project direct token (settings-file source, wins over tokenEnv) |
projects[].tokenEnv | Either | Env var name containing the token (cordis config source) |
projects[].defaultBranch | No | Default branch for this project |
| Field | Required | Description |
|---|---|---|
kubeconfigs[].id | Yes | Unique cluster identifier |
kubeconfigs[].path | Yes | Kubeconfig file path (~ supported) |
kubeconfigs[].context | No | Context to use (defaults to current-context) |
kubeconfigs[].namespace | No | Default namespace override |
defaultContext | No | Default cluster ID |
defaultNamespace | No | Fallback namespace |
| Field | Required | Description |
|---|---|---|
secret | Yes | Shared secret for webhook verification |
projectPaths | No | Filter by project path (whitelist) |
quietEvents | No | Event types to suppress |
| Field | Default | Description |
|---|---|---|
pollIntervalSec | 30 | Polling interval |
cooldownSec | 300 | Alert cooldown to prevent spam |
pipeline[] | ⚠️ | Pipeline alert rules (trigger: failed/canceled/success) |
pod[] | ⚠️ | Pod alert rules (trigger: crash/restart/pending_stuck) |
pnpm install # install dependencies
pnpm run typecheck # TypeScript check
pnpm run build # tsdown dual build: host ESM + browser client (output in lib/)
pnpm run test # run vitest suite
pnpm run verify # typecheck + build + test in one go
Note: With a local link install (the profile dependencies point at this directory), DSH loads the artifacts in lib/ directly — re-run pnpm build after changing src/, otherwise the host keeps loading the stale bundle. The committed lib/ also means a fresh clone can be installed without building.
src/
├── index.ts # Public contract: name / inject / Config / apply
├── protocol.ts # RPC channel + endpoint names (shared host/client)
├── config.ts # Schemastery schema + cross-field validation
├── types.ts # Shared domain types
├── core/ # Framework-independent domain layer
│ ├── gitlab/ # GitLab REST client + multi-project router/service
│ ├── k8s/ # K8s REST client + kubeconfig parser + router/service
│ ├── webhook/ # Pure event parsing + followup message generation
│ ├── monitor/ # Alert rule evaluation + throttle
│ ├── http.ts # fetch/node:https with timeout + CA pinning
│ └── logging.ts # ~/.dsh-devops/devops.log writer/reader
├── host/ # DSH host adaptation layer
│ ├── plugin.ts # apply(): lazy services + tools + RPC + webhook + monitor
│ ├── rpc.ts # /dsh-devops-read + /dsh-devops-write channels
│ ├── endpoints-*.ts # RPC endpoint handlers (raw params, test-before-save)
│ ├── tools*.ts # gitlab_* / k8s_* AI tool definitions
│ ├── services.ts # Lazy per-call service wrappers
│ ├── config-store.ts # ~/.dsh-devops/config.json persistence + migration
│ └── runtime-config.ts # cordis override > settings file resolution
└── client/ # Web console (React TSX + CSS Modules, zh/en locales)
├── index.ts # slots.inject('settings.section' | 'conversation.view')
├── api.ts # DevopsClient — RPC wrapper over the two channels
├── locales.ts # zh/en dictionaries (DSH LocaleRuntime)
├── DevopsSettings.tsx / DevopsDashboard.tsx
├── DevopsUI.module.css
└── ui.tsx # Shared primitives (searchable Select/Modal/StatCard/…)
fetch, ESM; development builds need ≥ 22)MIT