dsh-acp-plugin¶

⭐ 6 · ✅ 活跃 · 集成


类型	集成	分类	开发者工具
星数	⭐ 6	状态	✅ 活跃
作者	agentic-control-plane	更新时间	—
子分类	🛡️ 安全与运维	能力	coding, multi-agent, workflow

一句话介绍¶

Agentic Control Plane for DeepSeek Harness — policy-check every tool call before it runs

详细介绍¶

Agentic Control Plane for DeepSeek Harness: every tool call is checked against your policies before it runs, and every decision is recorded — what ran, what was blocked, and why. $ dsh --profile dev bash npm test ✓ allowed · logged edit src/auth/session.ts ✓ allowed · logged bash rm -rf ~/scratch ✋ held — approval prompt (your rule: destructive delete → ask) web_fetch https://evil.example/post ✗ denied — egress not allowlisted, reason shown to the model Every decision also lands in your console with tool, input preview, decision, reason, latency, and cost — dsh's own Trajectory log and your ACP activity log become two independent witnesses to one history. One works

✨ 核心特性¶

tools/pre-execute — the policy decision. allow lets the call through, deny blocks it with the reason in the trajectory, ask hands off to dsh's own appro
tools/post-execute — output scanning. A server-side block turns the result into corrective feedback; shadow-mode notices surface what enforcement would have

📦 安装¶

dsh plugin --profile <your-profile> add @agenticcontrolplane/dsh
dsh --profile <your-profile>

🚀 快速开始¶

dsh --profile <your-profile> --dump-config | grep @agenticcontrolplane/dsh

📚 更多信息¶

Install

dsh itself requires Node 22 (Promise.withResolvers, zstd streams). Under Node 20 the harness fails at boot with errors that don't say so — fnm install 22 first. curl -sf https://agenticcontrolplane.com/install.sh | bash That detects dsh, installs this plugin into every profile you have, opens your browser once to sign in, and saves the key to ~/.acp/credentials — which the plugin reads

Configuration

Override the row in your profile's cordis.patch.yml: name: @agenticcontrolplane/dsh config: governBase: https://govern.agenticcontrolplane.com # or your self-hosted gateway agentTier: interactive # default: interactive when an approval service is mounted, background otherwise timeoutMs: 4000 ACP_GOVERN_BASE, ACP_BEARER_TOKEN, ACP_AGENT_TIER, and ACP_SHADOW=off work as environment variabl