从一个需求到一个能装上去的插件

import type { Context } from '@deepseek-ai/cordis'
 
export const name = 'my-plugin'
 
export function apply(ctx: Context) {
  // 在这里注册能力
}

export function apply(ctx, config = {}) {
  const { conventions = '', auditFile = '', redactionEnabled = true } = config
}

# $DSH_HOME/cordis.patch.yml
- insert:
    - id: audit
      name: '/绝对路径/dsh-plugin-audit/src/index.js'
      config:
        conventions: |
          1. 改动任何文件前先读它
          2. 提交前必须跑测试
        auditFile: /tmp/audit.jsonl
        redactionEnabled: true

dsh --profile headless --dump-config | grep -A9 "id: audit"

- id: audit
  name: >-
    /home/.../extensions/dsh-plugin-audit/src/index.js
  config:
    conventions: |
      1. 改动任何文件前先读它
      2. 提交前必须跑测试
    auditFile: /tmp/audit.jsonl
    redactionEnabled: true

dsh: UNKNOWN: next is not a function

ctx.on('agent/pre-step', async (agent, proposal, next) => { ... })   // ← 错

// packages/core/agent/src/runtime-types.ts:231
'agent/pre-step'(
  payload: { agent: Agent; messages: UserMessage[]; turn: number; step: number; signal: AbortSignal },
  next: () => Promise<PreStepDecision>
): Promise<PreStepDecision>

// packages/core/tools/src/index.ts:175
'tools/post-execute'(exec: ToolExecution, result: Readonly<ToolExecutionResult>, next): Promise<PostToolDecision>

dsh: UNKNOWN: Cannot read properties of undefined (reading 'kind')

// runtime-types.ts:53
export type PreStepDecision =
  | { kind: 'reject' }
  | { kind: 'enter'; messages: UserMessage[] }

ctx.on('agent/pre-step', async (payload, next) => {
  console.error('[debug] payload keys:', Object.keys(payload), '| next:', typeof next)
  const decision = await next()
  console.error('[debug] decision:', JSON.stringify(decision)?.slice(0, 200))
  ...
})

[debug] payload keys: [ 'messages', 'turn', 'step', 'signal', 'agent' ] next type: function
[debug] decision: {"kind":"enter","messages":[{"content":[{"type":"text","text":"读一下 secrets.txt"}],
                   "source":{"kind":"user"},"role":"user","id":"8325abd9-b51c-46d6-9e5a-e5ba88646777"}]}

{ content: [...], role: 'user', id: '<uuid>', source: { kind: 'user' } }

import { randomUUID } from 'node:crypto'
 
return {
  kind: 'enter',
  messages: [
    ...(decision.messages ?? []),
    {
      id: randomUUID(),
      role: 'user',
      content: [{ type: 'text', text: `【团队规约】\n${conventions.trim()}` }],
      source: { kind: 'user' },
    },
  ],
}

/** Losslessly JSON-serializable parsed arguments (tools validate their own schema). */
readonly arguments: unknown

ctx.on('tools/post-execute', async (exec, result, next) => {
  const settled = await next()          // ← 必须调，我们只观察
  try {
    const args = redact(exec?.arguments, rules)
    const out = redact(settled?.content ?? result?.content, rules)
    write({
      at: new Date().toISOString(),
      sessionId: exec?.agent?.id ?? null,
      callId: exec?.callId ?? null,
      tool: exec?.name ?? null,
      isError: Boolean(settled?.isError ?? result?.isError),
      args: truncate(args.text, maxFieldChars),
      result: truncate(out.text, maxFieldChars),
      redacted: [...new Set([...args.hits, ...out.hits])],
    })
  } catch (err) {
    ctx.logger?.warn?.(`[audit] 记录失败：${err?.message ?? err}`)   // 不往外抛
  }
  return settled                        // ← 原样返回，不改写
})

const DEFAULT_REDACTIONS = [
  { label: 'API key',     re: /\b(sk|ghp|glpat|xox[baprs])-[A-Za-z0-9_-]{8,}\b/g },
  { label: 'Bearer token', re: /\bBearer\s+[A-Za-z0-9._-]{16,}/gi },
  { label: '私钥',        re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g },
  { label: '邮箱',        re: /\b[\w.+-]+@[\w-]+\.[\w.]{2,}\b/g },
]

API_KEY=sk-abcdefghij1234567890
contact: [email protected]

dsh --profile headless "读一下 secrets.txt 并原样告诉我内容"

共 2 条审计记录

tool=bash  isError=True   脱敏=[]
  args  : {"command":"ls -la .","description":"List demo project directory"}
  result: Error: sandbox mode "workspace-write" is requested but no sandbox backend
          is usable on this host; refusing to run the command unconfined.

tool=read  isError=False  脱敏=['API key', '邮箱']
  args  : {"file_path":"secrets.txt"}
  result: <path>.../secrets.txt</path><type>file</type>...

{
  "name": "dsh-plugin-audit",
  "version": "0.1.0",
  "type": "module",
  "main": "src/index.js",
  "exports": { ".": "./src/index.js" },
  "keywords": ["dsh-plugin", "deepseek-harness", "audit"],
  "peerDependencies": { "@deepseek-ai/cordis": "*" },
  "files": ["src", "README.md"]
}

dsh plugin --profile web add dsh-plugin-audit

- insert:
    - id: audit
      name: 'dsh-plugin-audit'      # 包名，不再是路径
      config: { ... }

if (process.env.AUDIT_DEBUG) console.error('[debug] payload keys:', Object.keys(payload))

sessionId: exec?.agent?.id ?? null,
const out = redact(settled?.content ?? result?.content, rules)