@deepseek-ai/dsh-runtime-xray

Configuration

The Host gateway accepts these optional values under the plugin's config entry in cordis.yml:

- name: '@deepseek-ai/dsh-runtime-xray'
  config:
    maxEntitiesPerDomain: 2000
    maxRelationships: 4000
    maxEffectDepth: 32
    deadlineMs: 750

All values are bounded and validated at load time. The plugin does not require an API key, environment variable, network destination, or writable data directory.

The snapshot is read-only and allowlist-based. Default captures exclude credentials, environment values, prompt/runtime-context content, variable values, approval payloads, and tool results. Export uses per-file opaque identities and is capped at 1 MiB. Attribution is labeled exact, inferred, or unavailable; unavailable ownership is expected when DSH does not expose a public provider relationship.

The current vertical slice includes a Cordis Host Loader/service/effect projection, effective session tools and prompt metadata, a deterministic Snapshot normalizer, and a Web Client tab named 透视 (X-Ray). The tab is a peer of 对话 and 轨迹; it uses the dedicated runtimeXray/snapshot Remote, supports Current session and Host scopes, domain tabs, status filtering, details, refresh cancellation, and a redacted export preview. Unsupported ownership and optional-domain facts remain explicit diagnostics.

Session service rows carry a snapshot-local scope marker; isolated Cordis realm identities and complete-section declarations remain unavailable when the active public DSH interfaces do not expose them. Export also replaces identities embedded inside effect labels or other diagnostic strings, not only dedicated ID fields.