HYY-King/dsh-plugin-auditor

DSH插件审核器:为插件组合进行预检兼容性检查,预防启动崩溃。

项目介绍Project Overview

这是一个 DSH 插件审计工具,提供只读的启动前预检。它可扫描当前配置中的插件包,检测重复工具注册、entry-id 冲突、peer 版本不匹配、多个记忆插件及渠道插件缺少凭据等问题;也可在加入新插件前按包名预览冲突。适用于安装或调整第三方插件前排查会导致 harness 启动失败的配置问题。注意:结果是静态启发式信号,不代表兼容性保证。

This is a DSH plugin auditor that performs read-only pre-flight checks. It scans the current profile’s bundles for duplicate tool registrations, entry-id collisions, peer version mismatches, multiple memory plugins, and channel plugins missing credentials, and can preview conflicts for a new plugin by package name. Use it before installing or adjusting third-party plugins to catch issues that could break harness startup. The audit is a static heuristic, not a compatibility guarantee.

或使用命令行安装(适合开发者)Or use CLI install (for developers)

命令行安装CLI Install

dsh plugin --profile web add github:HYY-King/dsh-plugin-auditor

HYY-King/dsh-plugin-auditor 加入你的 DSH 配置(web profile)即可启用。

READMEREADME

dsh-plugin-auditor

Audit your DSH plugin combination before adding a new one — predict whether it will crash the harness on boot.

DeepSeek Harness loads every bundle in the profile at startup. Third-party plugins that are unconfigured or conflicting (duplicate tool registrations, entry-id collisions, peer version mismatches, missing tokens/app ids) can fail the whole plugin tree. This plugin turns those lessons into a read-only pre-flight check.

Install

# from git
dsh plugin --profile web add github:HYY-King/dsh-plugin-auditor

# or from a local directory (development)
dsh plugin --profile web add D:\path\dsh-plugin-auditor

# restart dsh web to activate

Usage

After restart, ask the agent to call the audit_plugins tool:

  • Full audit: call with no arguments to scan every bundle in the current profile.
  • New-plugin preview: pass newPlugins: ["package-name"] for a name-level conflict preview.

Checks

Check What it catches
Duplicate tool registration Two plugins registering the same tool name (e.g. two memory plugins both registering memory_forget)
Entry-id collision Multiple bundles mounting the same id in cordis.patch.yml
Peer version mismatch A plugin requiring a @deepseek-ai/* version that differs from the installed one
Memory-plugin uniqueness More than one memory plugin enabled at once — keep exactly one
Channel-plugin credentials telegram/lark/im-style plugins enabled without token/app id — disable or configure

How it works

  • Read-only: inspects the profile's package.json, cordis.patch.yml, and each installed package under node_modules; never executes audited plugin code.
  • Zero-dependency: a mini YAML parser tailored to the simple cordis.patch.yml shape.

Disclaimer

The audit is a static heuristic signal, not a compatibility guarantee. Always review a third-party plugin's source, permissions, and license before installing.

License

MIT

上一个 Prev dsh-WeCom-notify 下一个 Next dsh-nailong-desktop-pet