Repository navigation
Expand file tree
/
Copy pathdsh-plugin.json
More file actions
169 lines (169 loc) · 6.1 KB
/
Copy pathdsh-plugin.json
File metadata and controls
169 lines (169 loc) · 6.1 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
{
"$schema": "https://raw.githubusercontent.com/T-Auto/dsh-std/8a15541117cb3c13ddb8f2468308691b6051d162/packages/manifest/schema/dsh-plugin-0.15.schema.json",
"manifestVersion": "0.15",
"id": "dsh-ops.native",
"name": "dsh-ops",
"version": "0.4.1",
"license": "MIT",
"facets": {
"host": {
"entry": "lib/index.js",
"apiVersion": "v1alpha1"
}
},
"requires": {
"contracts": [
{
"apiVersion": "tools.dsh/v1alpha1",
"kind": "Tool"
}
]
},
"permissions": [
{
"name": "dsh-ops.process.spawn",
"scope": "subprocess",
"reason": "Start fixed trusted native file operations through DSH subprocess and policy checks, or confined Bash/PTC execution."
},
{
"name": "dsh-ops.fs.read",
"scope": "filesystem-read",
"reason": "Read the native worker executable and runtime provenance."
},
{
"name": "dsh-ops.fs.write",
"scope": "dsh-home",
"reason": "Install runtime receipts; native file operations do not create audit records in read-only mode."
}
],
"contributes": {
"x-display": [
{
"icon": "./docs/assets/icon.png",
"title": "dsh-ops",
"description": "Provides optional Bash and native Rust tools for DSH to improve token efficiency; PowerShell remains host-managed",
"locales": [
"locale/en.json",
"locale/zh.json"
]
}
],
"x-prompt-sections": [
{
"name": "dsh-ops:repository-tooling:file",
"order": 3250,
"summary": "File operations only; follows the file component visibility."
},
{
"name": "dsh-ops:repository-tooling:shell",
"order": 3251,
"summary": "Prefer bash; use visible host PowerShell for Windows-native functionality without overriding its executor; removed when the shell component is off."
},
{
"name": "dsh-ops:repository-tooling:ptc",
"order": 3252,
"summary": "Scoped progressive PTC SDK guidance; absent in Native/both presentation."
}
],
"x-tool-namespaces": [
{
"serverName": "dsh-ops",
"transport": "in-process",
"source": "native Rust file worker",
"publicPrefix": "ops_",
"tools": [
"inspect_local_file",
"grep",
"glob",
"replace",
"write_file",
"edit_file",
"diff",
"stat",
"copy",
"move",
"remove",
"read_files",
"read_table",
"read_docx",
"read_pdf",
"result"
],
"shellPermission": "Per-call DSH sandbox policy and native subprocess"
},
{
"serverName": "dsh-ops",
"transport": "in-process",
"source": "the plugin's bash layer via host subprocess",
"publicPrefix": "ops_",
"tools": [
"bash"
],
"shellPermission": "shell component enabled AND publishBashTool AND authoritative per-session DSH policy; restricted modes require host confinement"
}
],
"x-components": [
{
"id": "dsh-ops-ptc",
"entry": "dsh-ops/ptc",
"defaultEnabled": true,
"platforms": ["win32", "linux", "darwin"],
"architectures": ["x64", "arm64"],
"targets": ["win32-x64", "linux-x64", "darwin-arm64", "darwin-x64"],
"presentation": "PTC-only; reader/result/SDK loader resident, other APIs become visible on the next agent step",
"runtime": "independent native Rust file worker",
"tools": ["ops_inspect_local_file","ops_grep","ops_glob","ops_replace","ops_write_file","ops_edit_file","ops_diff","ops_stat","ops_copy","ops_move","ops_remove","ops_read_files","ops_read_table","ops_read_docx","ops_read_pdf","ops_batch","ops_result","ops_load_sdk"],
"permissions": "Per-call original DSH sandboxPolicy and sandbox.confine (host full/partial enforcement reported); full access bypasses confinement and permits explicit operation roots; subprocess owns cancellation and credential scrub"
},
{
"id": "dsh-ops-shell",
"entry": "dsh-ops/shell",
"defaultEnabled": true,
"platforms": ["win32", "linux", "darwin"],
"targets": ["win32-x64", "linux-x64", "darwin-arm64", "darwin-x64"]
},
{
"id": "dsh-ops-file",
"entry": "dsh-ops/file",
"defaultEnabled": true,
"platforms": ["win32", "linux", "darwin"],
"targets": ["win32-x64", "linux-x64", "darwin-arm64", "darwin-x64"]
},
{
"id": "dsh-ops-discovery",
"entry": "dsh-ops/discovery",
"defaultEnabled": true,
"platforms": ["win32", "linux", "darwin"],
"targets": ["win32-x64", "linux-x64", "darwin-arm64", "darwin-x64"],
"presentation": "Native scopes; activation on the next admitted model step",
"tools": ["ops_discover_tools"]
},
{
"id": "dsh-ops-panel",
"entry": "dsh-ops/panel",
"defaultEnabled": false,
"presentation": "Disabled by default; enabling the row captures subsequent events. Explicit legacy capture:false stays off until changed.",
"platforms": ["win32", "linux", "darwin"],
"targets": ["win32-x64", "linux-x64", "darwin-arm64", "darwin-x64"],
"tools": []
},
{
"id": "dsh-ops-tui",
"entry": "dsh-ops/tui",
"defaultEnabled": false,
"presentation": "Optional read-only dsh-TUI panel API v1",
"tools": []
},
{
"id": "dsh-ops-hide-official",
"entry": "dsh-ops/hide-official",
"defaultEnabled": false,
"platforms": ["win32", "linux", "darwin"],
"replaceTools": [],
"retainedOfficialCommand": { "win32": "pwsh", "linux": "bash", "darwin": "bash" },
"readiness": "Opt-in per-tool read/glob/grep alternatives, selected by replaceTools (default empty). Only selected official tools are hidden after their OPS counterparts are registered in the same scope. Missing selected counterparts block that scope; unselected tools stay visible without warning lists."
}
]
},
"subscriptions": []
}