DeepSeek Harness Plugin

Lumos-789/galadon

Category Workflow & Automation Added 2026-11-05

A five-stage engineering loop for agent-built projects — spec, build, verify, ship, learn — with one artifact and one gate per phase, so an agent always knows the single next action. Role policy, project templates and deployment sit behind explicit ports: swap the implementation without rewriting the loop. Its scaffold generator lays out the internal layers of a project — `init --layout {none,webapp,service,plugin} --stack {python,node,none}` — from nine layers sampled out of three unrelated production projects: entry docs, an OpenSpec plan face, a spec truth layer (INDEX, one file per domain, TESTING, CONSTITUTION), a wiki split into knowledge / progress / runbook, the six `.agents/` slots, server+web, scripts/deploy/config, tests+e2e and a gitignored out/. Non-none layouts also gate the directory contract and compile every source root. Ships a Python CLI (init/next/check/ship/new) plus a local command adapter and an SSH/systemd adapter with release directories, an atomic current/previous switch, a deploy lock, a commit-versioned JSON probe and automatic rollback on a failed probe; bootstrap and teardown provision and remove the unit and the reverse-proxy block idempotently and refuse to delete a root they did not create. Includes a runnable example workspace and a skill that keeps the agent on one phase at a time. Requires Python 3.10+ and PyYAML; remote deploys need SSH access, rsync, systemd and Caddy on the target.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:Lumos-789/galadon

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.