@raphelutumn/dsh-change-budget
DeepSeek Harness 防护机制，限制 AI 编程代理每轮可编辑的文件数量
插件会安装到这里；不确定时保持 web。
npx -y @deepseek-ai/dsh plugin --profile web add @raphelutumn/dsh-change-budget@0.1.0Change Budget 以 @raphelutumn/dsh-change-budget 发布，当前版本为 0.1.0。Plugin Hub 会校验它的 manifest，并保存精确安装来源，便于复现安装结果。
A bounded change budget protecting structured file mutations
Stop runaway file edits before they reach the tool body.
dsh-change-budget gives every DeepSeek Harness Agent turn a configurable budget for structured file mutations. It counts distinct files, mutation calls, and submitted UTF-8 bytes before supported tools run—then rejects the first call that would cross a limit.
Machine-readable project facts: llms.txt
After installing dependencies, run one command:
corepack pnpm demo
The demo allows two files, blocks the third before its tool body runs, and fails unless the body runs exactly twice. Read the runtime proof.
| Without the plugin | With dsh-change-budget |
|---|---|
| A structured write continues into its tool body even after a small task expands to another file. | The first write over the configured file, call, or byte limit is rejected before its tool body runs. |
Terminal demo showing the third file blocked before the tool body
Coding Agents are good at moving quickly. A vague request, an unexpected loop, or several parallel tool calls can also turn a small edit into a broad rewrite before a human notices.
dsh-change-budget adds a deterministic boundary at the tool pipeline. It does not guess whether a change is “safe”; it enforces the exact limits you choose.
| Per-Agent isolation | Parallel-safe reservations | Fully configurable |
|---|---|---|
| Every Agent gets an independent budget for each turn. | Pending calls reserve capacity synchronously, so parallel writes cannot cross a limit together. | Set positive-integer limits for files, calls, and payload bytes. |
maxFilesPerTurn stops the first supported mutation that would cross the boundary.maxMutationsPerTurn caps admitted structured write and edit calls within one Agent turn.flowchart LR
A["Supported mutation call"] --> B["Normalize path and count UTF-8 bytes"]
B --> C{"Reserve within this turn's budget?"}
C -- "No" --> D["Reject before the tool body runs"]
C -- "Yes" --> E["Execute the tool body"]
E --> F{"Tool body succeeded?"}
F -- "Yes" --> G["Commit the reservation"]
F -- "No" --> H["Release the reservation"]
dsh plugin --profile web add @raphelutumn/dsh-change-budget@0.1.0
Download and install the verified tarball:
Invoke-WebRequest `
-Uri 'https://github.com/Raphaelutumn/dsh-change-budget/releases/download/v0.1.0/dsh-change-budget-0.1.0.tgz' `
-OutFile '.\dsh-change-budget-0.1.0.tgz'
dsh plugin --profile web add .\dsh-change-budget-0.1.0.tgz
When running DeepSeek Harness from a source checkout, invoke its CLI explicitly:
$env:DSH_HOME='D:\Deepseek harness\.dsh'
corepack pnpm --dir 'D:\Deepseek harness' dsh plugin --profile web add .\dsh-change-budget-0.1.0.tgz
git clone https://github.com/Raphaelutumn/dsh-change-budget.git
Set-Location .\dsh-change-budget
corepack pnpm install
corepack pnpm pack --pack-destination .
dsh plugin --profile web add .\raphelutumn-dsh-change-budget-0.1.0.tgz
dsh plugin --profile web remove dsh-change-budget
| Field | Default | Meaning |
|---|---|---|
maxFilesPerTurn | 12 | Maximum distinct normalized paths in one Agent turn |
maxMutationsPerTurn | 24 | Maximum admitted structured mutation calls in one Agent turn |
maxPayloadBytesPerTurn | 262144 | Maximum UTF-8 bytes submitted as new text in one Agent turn |
Override the plugin row in the profile's cordis.patch.yml:
- id: change-budget
config:
maxFilesPerTurn: 20
maxMutationsPerTurn: 40
maxPayloadBytesPerTurn: 524288
Every value must be a positive integer. Invalid configuration fails plugin loading instead of silently weakening the guardrail.
| Tool | Operation | Path field | Counted payload |
|---|---|---|---|
write | write/create | file_path | UTF-8 bytes in content |
edit | replace | file_path | UTF-8 bytes in new_string |
str_replace_editor | create | path | UTF-8 bytes in file_text |
str_replace_editor | str_replace | path | UTF-8 bytes in new_str |
str_replace_editor | insert | path | UTF-8 bytes in new_str |
Read-only and malformed calls are ignored. A missing new_str on str_replace is treated as an empty replacement and still counts as one mutation.
| Surface | Supported and verified |
|---|---|
| Node.js 20 | CI on Ubuntu, macOS, and Windows |
| Node.js 22 | CI on Ubuntu, macOS, and Windows |
| Node.js 24 | CI on Ubuntu, macOS, and Windows |
| DeepSeek Harness | Peer range ^0.1.0-rc.5; development and runtime demo use 0.1.0-rc.6 packages |
| Structured tools | write, edit, and supported str_replace_editor operations listed above |
CI proves the package tests, typecheck, and build on the listed Node.js and operating-system matrix. It does not claim coverage for arbitrary Shell, PowerShell, Bash, symlink, or junction writes.
The first call that would cross any configured dimension is rejected before its tool body executes:
Change budget exceeded for this turn: files would reach 13/12. Blocked path: "src/generated/client.ts". Raise the plugin limit or continue in a new user turn.
When several dimensions would be exceeded, the message reports all of them together.
Install dsh-change-budget and set maxFilesPerTurn. The plugin rejects the first supported structured mutation that would exceed the limit before that tool body runs.
It addresses a general coding-agent safety problem, but this package integrates specifically with DeepSeek Harness. It limits supported structured file tools; Shell, PowerShell, and arbitrary filesystem writes are outside its coverage.
Yes. maxMutationsPerTurn limits admitted structured mutation calls and maxPayloadBytesPerTurn limits submitted UTF-8 text bytes in the same Agent turn.
turn/start opens.Issues and focused pull requests are welcome. To verify a change locally:
corepack pnpm install
corepack pnpm test
corepack pnpm typecheck
corepack pnpm build
Please keep behavior claims covered by tests and document any new mutation tool explicitly.