@perrylink/dsh-plugin-kit
PerryLink DSH 插件的共享零运行时依赖工具包：可插拔的 Provider 注册表接入点、故障关闭式审批和自适应会话事件门控、机械化验证脚本、共享的清理/定价/评判模块，以及新插件骨架。
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @perrylink/dsh-plugin-kit@0.1.9Plugin Kit 以 @perrylink/dsh-plugin-kit 发布，当前版本为 0.1.9。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
npm i -g dsh1024 once, then dsh1024 plugin --profile web add @perrylink/dsh-plugin-kit (counts toward the deepseek1024.com install ranking).Shared zero-runtime-dependency toolkit for the PerryLink DSH plugin repositories. The per-project audit found 20+ of the 33 plugins hand-rolling the same Provider seam and duplicating the same sanitize/pricing/verdict shapes, so this package extracts all of it — the pluggable Provider seam, the fail-closed approval and adaptive session-event gates, the mechanical verify scripts, and the shared sanitize/pricing/judge pure modules — into one ESM + TypeScript package.
@deepseek-ai/* at runtime.
@deepseek-ai/cordis (^4.0.2), @deepseek-ai/schemastery (^3.18.2),
and the @deepseek-ai/dsh-* packages are optional peer dependencies in
the >=0.1.2-rc.1 <0.2.0 band the PerryLink plugin repos share; they exist only for type
interop. Verified 2026-09-11 against the dsh-v0.1.5-rc.2 master checkout
(full gate chain + profile install smoke).^22.19.0 || >=24.0.0, ESM only.dsh-mask (sanitize),
dsh-budget (pricing), and dsh-auto-review (judge and the
fallbackPolicy vocabulary), so migration is mechanical.seam, gates, shared)
is browser-safe.strict,
noUncheckedIndexedAccess, exactOptionalPropertyTypes.template/ with cordis.yml, a three-role
src/index.ts (Service Definition / Provider / Consumer), a test, and the
shared Renovate preset.From npm:
pnpm add @perrylink/dsh-plugin-kit
From git (the prepare script builds lib/ using only production
dependencies):
pnpm add github:PerryLink/dsh-plugin-kit
Replace a hand-rolled registry in one step:
import { ProviderRegistry } from '@perrylink/dsh-plugin-kit/seam'
const registry = new ProviderRegistry<Detector>({
default: { name: 'regex', impl: new RegexDetector() },
})
ctx.effect(() => registry.register('ner', new NerDetector()))
const active = registry.use('ner') ?? registry.use()
Install is pnpm add (see Quick start). Remove with:
pnpm remove @perrylink/dsh-plugin-kit
Nothing registers global state: uninstall is exactly the reverse of install.
No runtime configuration: the gates and helpers are pure functions. The only
configuration surface is cordis.patch.yml, the bundle-patch layer shipped
for harness profile composition; it mounts no plugin row (the kit is a
library) and documents how consuming plugins add their own rows.
| Subpath | Purpose |
|---|---|
seam | ProviderRegistry<T> — reversible, fail-loud named provider registry. |
gates | applyFailClosed; makeEventGate / maybeAppendSessionEvent / probeIgnorableAppend. |
shared | sanitize (Stripper, redactText, redactMapping, sanitizeText, sanitizeUrl), pricing (BUILTIN_PRICES, estimateUsageCost, tokenCarbon, latencyStats, formatMoney, formatTokens), judge (parseVerdict, VERDICT_SCHEMA, riskExceeds). |
verify | Mechanical CI gates (verify-license, verify-readme-languages, verify-seam) with a VerifyReport and a non-zero-exit CLI: node lib/verify/cli.js all . |
template/ | New-plugin skeleton (cordis.yml, three-role plugin, test, README, renovate.json5). |
| root barrel | Re-exports all of the above. |
The kit performs no I/O, no network access, and no subprocess spawns on its
own. Stripper keeps placeholder→original mappings in memory only, and
stats()/redactMapping() never emit plaintext; a consumer that persists a
mapping owns that decision and its storage permissions.
sanitize/redact* are display hygiene, not a security boundary: they
reduce leakage into logs and results, they do not authenticate or authorize.rejected); the only grant path
is an explicit allow-once opt-in.SECURITY.md.Session.append third argument is a SurfaceIntent
(0.1.2-rc.1) throw validateNext on the ignorable-envelope probe; the
gate degrades to skip-unknown, so audit events are dropped (fail closed)
rather than logged on those hosts.pnpm install
pnpm run typecheck # tsc --noEmit
pnpm run typecheck:ci # CI face: tsc -p tsconfig.ci.json --noEmit
pnpm test # vitest unit tests
pnpm run build # emit lib/ + declarations (also run by prepare)
pnpm run verify:self-contained
pnpm run verify:artifacts
This repository is also the maintenance hub for the 33 plugin repos:
scripts/sync-peer-range.mjs re-pins the shared peer band across all repos in
one command, renovate/default.json5 is the shared Renovate preset every repo
extends, .github/workflows/npm-publish.yml is a reusable tag-triggered
publish workflow (needs only an NPM_TOKEN secret), and data/repos.json is
the ecosystem registry consumed by the portal. See
docs/ecosystem-tooling.md.
Keywords: dsh, dsh-plugin, deepseek-harness, deepseek, cordis, perrylink, provider, seam, approval, sanitize, pricing, judge.
Maintained by PerryLink with contributions from the DSH plugin ecosystem.
Apache-2.0 — see LICENSE.