Dead-code detection for AI-generated codebases: graphlint builds a dependency graph, finds code unreachable from any entry point to enable codebase cleanup and functional‑effectiveness understanding, and exposes graphlint_query / graphlint_build / graphlint_config tools plus a graphlint skill to DSH agents.
Install
# from npm (prebuilt)
dsh plugin --profile web add dsh-graphlint
# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)
dsh plugin --profile web add github:AngelosZou/graphlint#path:/integrations/dsh
Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).
README
DeepSeek Harness plugin bundle for graphlint — dead-code detection for AI-generated codebases.
Installing this bundle gives every agent in the profile three tools
(graphlint_query, graphlint_build, graphlint_config) plus a graphlint
skill describing when and how to use them.
Requirements
- Node.js >= 20.
- A DeepSeek Harness profile (
dsh plugininitializes one on first use). - The graphlint CLI on
PATH(pip install graphlint) or inside the project's virtualenv (env/,.venv/,venv/are probed automatically).
Install
Install the published bundle into a DeepSeek Harness profile:
dsh plugin --profile web add dsh-graphlint
# or via the graphlint CLI (requires dsh on PATH):
graphlint install dsh --profile web
Then restart the profile (and refresh the browser page). The bundle's patch
layer inserts the plugin row at the profile root; you can address it by id
dsh-graphlint in your own cordis.patch.yml (e.g. to disable it per profile).
Development / repository install (linking a local checkout):
# 1. Clone the repository and build the bundle
git clone https://github.com/AngelosZou/graphlint.git
cd graphlint/integrations/dsh
npm install
npm run build
# 2. Link the bundle into a profile (run from the repository root)
cd ..
dsh plugin --profile web add link:./integrations/dsh
# 3. Restart dsh web
Tools
| Tool | Purpose |
|---|---|
graphlint_query |
Query the dependency graph for dead code, circular refs, unused imports, and other warnings. Fast incremental mode; JSON result. Common filters: warn_types, graph_id, exclude_clean, include_tests, public_as_entry. |
graphlint_build |
Full or incremental index rebuild as a background job (poll with job_output). |
graphlint_config |
show / get / set entries in the project's .graphlint/config.json, plus add-entry-rule / remove-entry-rule / add-exclude / remove-exclude for custom entry rules and excludes. |
The graphlint skill leads with these tools (they run inside the session working
directory and return structured results); the canonical CLI guidance follows as
reference.
root_dir restriction
Every tool accepts an optional root_dir. It must stay inside the session
working directory (the default) — a hard guard rejects anything else with a
clear error. Scanning a high-level root (such as a user home directory) makes
graphlint build a huge first-time index and can block for many minutes.
Optional Secondary working directories (dsh-multi-folder)
When the dsh-multi-folder
plugin is installed and the user has configured secondary working directories
for the session, those directories automatically become valid root_dir
values for all three tools: the analysis root is accepted inside any configured
secondary directory, graphlint runs with that directory as its working
directory, and the index lands in its .graphlint/. A relative root_dir
still resolves against the primary session workspace.
This compatibility is automatic and optional. Each tool probes
ctx.get('multiFolder') at call time and nothing else changes:
- multi-folder absent, unconfigured, incompatible, or throwing → the plugin behaves exactly as if it did not exist (the guard falls back to the session working directory, and the refusal message keeps its original wording);
- multi-folder present → a refusal still names the configured secondary
directories and the
/multi-foldercommand that adds one, so the model learns the valid roots instead of retrying blindly.
Development
cd integrations/dsh
npm install # first time only; afterwards npm ci
npm run build # tsc → lib/
npm test # node --test lib/test/
The test suite covers the pure logic layers (root guard, argv construction,
JSON parsing), the optional multi-folder probe and its end-to-end tool wiring
(root resolution and spawned CLI cwd, with and without the peer plugin), plus
manifest/patch contract checks. A committed package-lock.json is required (CI
runs npm ci).
Links
More in this category
yjh051108/dsh-routing-suite★ 6995
One repository, three parts: a runtime injector for DSH plugin packages (inject, hot-reload, unload, promote a dev staging tool to the front, route self-heal, plus a settings-page plugin manager that lists, unloads and drags folders in to internalize), a task-aware reasoning-mode router agent preset (router-standard / router-spec / router-react), and a graded two-level task protocol whose six tools (commit_star, lock_stage, revise_do, edit_plan, mark_task, redteam_verdict) pin task state to disk. The injector implementation ships in-tree, so the install carries its own behaviour rather than a dependency list.
strukto-ai/mirage#dsh★ 3667
Swaps the filesystem and bash providers for a mirage virtual workspace: file tools and shell commands run over mounted resources (RAM, S3, Redis, Slack, Gmail, Notion, Postgres) instead of the host disk, with per-mount read/write/exec modes, per-command sandbox routing (monty, pyodide, quickjs in process; docker, e2b, daytona remote), and installed CLIs (git, gh, slack, linear, ntn, gws, or one you register) as head words in the virtual terminal.
hust-open-atom-club/oh-dsh★ 325
Community distribution: TUI, desktop, and Web UI as one bundle with layered installation.
weijiafu14/pi2dsh★ 208
Pi Host ABI compatibility engine: after one install, unmodified Pi extensions from npm mount as native DSH plugins with `dsh plugin add <pi-package>`. Verified end to end on stock DSH with pi-mcp-adapter (full MCP manager: OAuth, resources, prompts, MCP Apps, elicitation, sampling), @tintinweb/pi-subagents, pi-code, pi-hermes-memory and pi-background-tasks; `pi2dsh inspect` reports a package's compatibility before installing.
lire1131/dsh-undo-savepoint★ 167
Undo/redo & rollback system for DSH: every config change is auto-snapshotted; undo/redo/restore to any version from the WebUI or the offline CLI/GUI tools (works even when DSH fails to boot).
Fishquito7/dsh-skill-mcp-panel★ 158
Manages DSH skills and MCP servers from the web settings: skill cards with hot enable/disable, workspace scopes, groups, batch migration and drag-and-drop import, plus stdio/HTTP MCP CRUD with connection tests, secret redaction and the unified dsh-panel CLI.
Community comments
Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.