OMSociety/dsh-git-forge

dsh-git-forge is a community plugin built specifically for DeepSeek Harness (DSH), mounting inside the dsh-better-sidebar host to deliver a "Forge account library, per-project grants, and push policy" management surface. It governs two concerns: injecting HTTPS git credentials into the agent shell so tokens never reach model context, and intercepting pushes to unauthorized hosts at the Host tools.guard layer, covering bare git push, git remote add, and git remote set-url. SSH remotes and the system gh auth are deliberately left untouched. Installation is performed via dsh plugin --profile web add "dsh-git-forge@1.0.0" from npm, or dsh plugin --profile web add "github:OMSociety/dsh-git-forge" from source; one-line scripts are also published for both bash and PowerShell. Hard requirements include a DSH web profile with version >=0.1.7-rc.2 <0.3.0-0, the dsh-better-sidebar host at >=0.12.0, and Node.js >=20.

The typical workflow begins by refreshing the browser so the client bundle loads and the "Git 凭据" entry appears in the right sidebar. From there the user opens the Account Library tab, adds an account, and runs the API probe to confirm token validity, then switches to Project Authorization and grants that account to the active DSH session workspace (identified by projectPathKey, not the sub-repository path) along with the enforcePush flag. Subsequent HTTPS git fetch and git push commands issued by the agent trigger the credential helper, which auto-injects the token only when exactly one authorized token account exists for that gitHost, matching the documented R1 rule. The plugin also exposes four read-only model tools: list_accounts, list_project_accounts, get_policy, and check_remote, letting the agent inspect grants and verify whether a given remote URL is permitted without performing any push.

All state lives under $DSH_HOME/git-forge/ with directory mode 0700: accounts.json holds metadata, secrets.json (mode 0600) holds tokens, grants.json stores the projectPathKey → accountIds mapping together with enforce and unbound policy, and gitconfig is injected into the agent shell as a credential helper that first clears the system-level helper. Token material is excluded from API responses, tool output, and model context, and when no grant exists for a project the push interceptor leaves pushes untouched so the rollout can be gradual. Users must refresh the browser after install, must rotate any token suspected of leaking from secrets.json, and must verify their dsh-better-sidebar build covers DSH 0.2.x before upgrading the host. The plugin ships under MIT, with maintenance continuing on the OMSociety repository since 2026-09-28 and original authorship credited to @thirsty5034.