SpookyWaste/dsh-bash-native

dsh-bash-native is a DSH-native plugin that gives the DeepSeek Harness a real POSIX bash on Windows without leaning on Git for Windows, MSYS2, or WSL, by shipping a Rust-built brush engine plus a curated POSIX toolchain that are verified against a lock and a bundle manifest every time the package resolves. Instead of paying the MSYS fork cost for every subshell or crossing the Windows/Linux VM boundary on every call, the plugin makes echo, cat, ls, cp, rm, sort and similar commands internal builtins so they spawn no new process, while everything else runs as a normal native process. Install it with dsh plugin --profile web add dsh-bash-native or paste https://github.com/SpookyWaste/dsh-bash-native into the DSH web plugin page, restart, then pick Native Bash (Windows) as the default preset under Settings → General.

The plugin registers ctx.shell as a ShellExecutor service provider layered over @deepseek-ai/dsh-bash-local and forwards every command to the resolved brush engine. It honours DSH's three-tier policy (read-only / workspace-write / danger-full-access) by handing engine argv to ctx.sandbox in restricted modes and spawning directly otherwise, reports background jobs through ctx.jobs with spill files when output exceeds the in-memory budget, and keeps working with an empty PATH. Two cordis-patch presets — bash-native (order 5, mirroring standard) and bash-native-minimal (order 6, mirroring minimal) — are installed into their own isolate: { shell: true, terminals: true } realm so the host shell and any other preset (including pwsh) are untouched, making it suitable for daily Windows shell sessions and for minimal single-shell sandboxes alike.

Requirements are Windows x64, Node 24, and DSH >=0.1.7-rc.2 <0.2.0; the bundled engine lives under engine/win32-x64/brush.exe (~15 MB) with seventeen documented patches, and the toolchain contributes 28 names (20 published, 8 install-only) including grep, sed, awk, jq, find, xargs, diff, cmp, which, timeout, stat, and ps. Known limits are non-trivial: brush on Windows is upstream preview; background-job PIDs only exist for external spawned children and only while alive, so liveness must be checked with wait, not kill -0; signals on Windows always exit with 128+n; path-rewriting for /tmp and drive aliases is purely textual, so awk '/x/{print}' and sed '/x/d' break and grep /tmp/x file silently follows the rewrite — the escape hatch is DSH_BASH_NATIVE_NO_PATHCONV=1; select is rejected at parse time; convert.exe is the Windows tool because the toolchain ships no convert; and ./script.sh does not execute because the bundle dispatches by name. The plugin, the brush engine, and the toolchain (uutils coreutils/findutils/grep/sed, jaq, goawk, plus in-tree posix-extra) are all MIT.