lucifergzsz414/dsh-windows-native

I run DeepSeek Harness straight on Windows — no WSL, just PowerShell. Every WSL & Windows Interop plugin on the dsh-plugin list assumes you're bridging out from WSL, so none of them help here. Meanwhile the agent kept doing the same handful of things wrong: chaining commands with && (PowerShell 5.1 doesn't have it), printing Chinese text that comes back as mojibake, quietly creating a junction that Windows then refuses and nobody notices. This plugin just tells it up front so it stops guessing.

It's a system-prompt injection, nothing fancier. Copy-pasted the structure from dsh-wsl-env since that plugin already does the WSL side of the same idea well.

What it tells the agent

• PowerShell has no && / || — use ;, or A; if ($?) { B }
• The console usually isn't UTF-8, so Chinese/non-ASCII output can get mangled even though the actual data is fine — don't trust what you see printed
• Don't feed multi-line non-ASCII text through an inline heredoc or -c "..." — write it to a file first, then run the file
• Python's subprocess.run(..., text=True) decodes child output using the system locale — GBK on a Chinese Windows install, not UTF-8. A subprocess that ran fine can still blow up with UnicodeDecodeError on its own output. Pass encoding="utf-8", errors="replace" explicitly
• .bat file contents have to stay ASCII (cmd.exe pre-scans them and can corrupt UTF-8/GBK before anything runs — filenames are fine, the script body isn't)
• Set-Content/Add-Content write files using the system ANSI codepage by default, not UTF-8 — Chinese text written through either without -Encoding utf8 can end up corrupted on disk, not just on screen
• Nested quotes in an SSH command forwarded from PowerShell (ssh host "sudo python3 -c \"...\"") can hang silently for minutes past one level of nesting instead of erroring. Write the command to a local file and scp it over instead
• A junction or symlink can fail silently without admin rights / Developer Mode — check it actually exists after creating it, don't just trust the exit code
• NUL/CON/PRN/AUX/COM1-9/LPT1-9 are reserved in every directory. Discarding output the Unix way with > /dev/null doesn't hit a null device on Windows — it can leave a literal, barely-deletable file named nul sitting in the working directory. Use $null instead (> $null, | Out-Null)
• A file open in Word/Excel/WPS throws a plain PermissionError on write. That's not corruption, don't force-retry the same filename
• docker run -v "C:\path\file.yaml:/container/path:ro" can get mis-split — the drive letter's colon looks like another separator. The mount silently fails, the container still reports healthy, and it just runs on defaults. docker exec in and check the file before blaming the application code
• Native (.node) npm bindings built here are Windows binaries. Shipping them to a Linux server crashes it at runtime even though npm install and the local build both reported success — check for "PE32+"/"MS Windows" with file before shipping
• Killing the outer process (a task runner, a job wrapper) doesn't free the port if the real node/python process underneath is still alive — you end up hitting a stale server and think your fix didn't work. Find the real PID and kill that
• If you need a Scheduled Task to run something invisibly, -WindowStyle Hidden still flashes a console window for a moment. Launch it through pythonw.exe with CREATE_NO_WINDOW instead

None of this is theoretical — every line above is something that actually went wrong on this machine at some point.

Install

dsh plugin add dsh-windows-native

Config

when: windows   # inject only on native win32 (default), or "always"
order: 15
extraNotes: ""   # your own notes, appended after the built-in list

Status

Early, and the list is exactly as long as my own scar tissue — not a survey of every Windows footgun that exists. If you hit something this plugin should have warned you about, open a PR with the actual failure you saw, not a guess at what might go wrong.

Tested against @deepseek-ai/dsh 0.1.1-rc.2 — installed it locally as a file: dependency, checked dsh --dump-config to confirm it's picked up, then actually asked the running agent a question and watched the injected text come back in its answer.