dsh-engineering-suite

One native DeepSeek Harness Profile Bundle that installs four independent engineering plugins together:

• dsh-specflow for durable specification-driven delivery;
• dsh-gitflow for bounded Git inspection, commits, branches, and optional Change Ledger restore points;
• dsh-guardian for dangerous-operation policy, canonical result redaction, and security review;
• dsh-code-intel for symbol outlines and persistent lexical or embedding-assisted code search.

简体中文

Why a bundle

The four plugins are useful independently, but an engineering profile usually needs all of them. This package is an official DSH bundle layer: it ships the exact v0.1.3 runtime artifacts behind four package subpaths and its cordis.patch.yml inserts those plugin rows. It does not wrap their APIs, duplicate their state, or add another model-visible tool.

The suite pins every component to v0.1.3 so one release has one reproducible composition without depending on ambiguous third-party npm names. VS Code is not included because it is a client extension, not a profile plugin.

Install

Version 0.1.0 is tested with DSH 0.1.0-rc.8 and 0.1.1-rc.1 on Node.js ^22.19 || >=24.

dsh plugin --profile web add https://github.com/lonelymoon87/dsh-engineering-suite/releases/download/v0.1.0/dsh-engineering-suite-0.1.0.tgz

Replace web with headless for the one-shot agent profile. Restart a long-running profile after installation. To remove the suite layer:

dsh plugin --profile web remove dsh-engineering-suite

Install an individual component instead when the full suite is unnecessary. Profile and home cordis.patch.yml layers remain authoritative and may replace configuration for the inserted ids.

Permissions and data

This bundle adds no runtime code or data handling of its own. The installed components retain their documented behavior:

• SpecFlow reads specification progress and may guide ordinary workspace-file changes;
• GitFlow executes local Git commands through the DSH shell and gates mutations through approval;
• Guardian inspects tool calls and canonical results in process without reading credential stores;
• Code Intel writes a rebuildable local index and contacts an embedding endpoint only when explicitly configured.

Read each linked component README before enabling the suite in a sensitive workspace. None of the components send telemetry or register required custom session events.

Verification

• CI validates the package on Node 22.19 and Node 24.
• The compatibility matrix installs the packed suite into clean DSH 0.1.0-rc.8, latest, and next profiles and confirms all four plugin rows.
• Component behavior remains covered by each component repository; this repository tests composition and distribution only.

License

MIT