dsh-rolehub-bridge

Configuration

Edit the inserted rolehub-bridge row in the active profile's cordis.patch.yml when defaults are not enough:

- id: rolehub-bridge
  name: dsh-rolehub-bridge
  config:
    storageDir: /srv/dsh/rolehub-bridge
    allowCommunityRoles: false
    allowedCapabilities:
      - filesystem.read
      - filesystem.write
      - network.fetch
      - web.search
      - source-control.read
      - room.message
    fetchTimeoutMs: 15000
    maxCatalogCacheAgeMs: 86400000
    maxCatalogBytes: 2000000
    maxArchiveBytes: 20000000
    agentProvider: ""
    agentModel: ""
    hubs:
      - id: official
        catalogUrl: https://raw.githubusercontent.com/ishuowang/agent-role-hub/main/catalog/index.json
        archiveUrlTemplate: https://github.com/ishuowang/agent-role-hub/releases/download/v{version}/{name}-{version}.role.tgz
        trustedPublishers:
          - io.github.ishuowang
        allowedRedirectHosts:
          - release-assets.githubusercontent.com
          - objects.githubusercontent.com

All Hub endpoints must be credential-free HTTPS. Publisher trust is scoped to one Hub; a publisher name trusted for official is not trusted when another Hub merely claims the same name. Redirects stay on the request host unless their exact hostname appears in that Hub's allowedRedirectHosts. Validated catalog cache fallback expires after maxCatalogCacheAgeMs (24 hours by default), and a cached/offline catalog can never authorize a first-time role installation.

storageDir defaults to $DSH_HOME/rolehub-bridge, or ~/.dsh/rolehub-bridge when DSH_HOME is unset. The bridge claims only a dedicated private store marked as its own, uses 0600 files, bounded downloads, safe archive extraction, and atomic receipt writes. It refuses dangerous or non-private pre-existing roots instead of changing their permissions. Treat the store as single-Host state and do not edit receipts by hand.

agentProvider and agentModel optionally override the route for newly created role Sessions; leaving both empty follows normal DSH routing.