DeepSeek Harness Plugin

dingchenhui0618-arch/dsh-ship-receipt

Category Tools & Capabilities Added 2026-10-17

A shareable delivery receipt for a project hand-off. The `ship_receipt` tool measures what it can and records what it was told, then sorts every line into three zones: verified (evidence this run produced and that reproduces elsewhere — a command that actually ran with its exit code, a file hash for a file that is under version control, a scan that found files, a git ref present in the recorded remote), local-only (true on this machine alone — uncommitted changes, unpushed commits, an artifact no one else can see), and unverified (no evidence, including every sentence a human typed). A claim with no evidence keeps its label and leaves the body blank rather than printing the claim; declares the commit and branch, artifact byte sizes and sha256 with PNG dimensions, and the three pre-push checks.

Install

# from GitHub (first run asks for allowBuilds approval — follow the hint, retry)

dsh plugin --profile web add github:dingchenhui0618-arch/dsh-ship-receipt

Any plugin you install runs third-party code with your own permissions — it can read your files, use your credentials, and reach the network, and tool approvals don’t sandbox it. GitHub-sourced plugins also run build scripts at install time — pnpm blocks those until you allow them, so an install can stop with ERR_PNPM_GIT_DEP_PREPARE_NOT_ALLOWED or ERR_PNPM_IGNORED_BUILDS; dsh prints the exact key to add under allowBuilds in your profile’s pnpm-workspace.yaml, and the install works on the next run. Allowing a build is a trust decision: only install sources you trust, and pin a commit (github:owner/repo#sha).

Links

More in this category

View the whole category →

Community comments

Comments are public GitHub Discussions. Loading them connects to GitHub and Giscus; a GitHub account is required to post.