mstar-harness

Name: mstar-harness
Author: btspoony

PluginConfirmed pluginCommunity

btspoony/mstar-harness · updated today

View source ↗

Installation

dsh plugin --profile web add @mstar-harness/dsh

dsh plugin --profile web add dsh-llm-fallbacks

dsh plugin --profile web add morning-star

dsh plugin --profile web add github:btspoony/mstar-harness

Plugins in this repository

@mstar-harness/dshv3.6.3✓
Morning Star harness dsh (DeepSeek Harness) cordis function plugin — in-process engine gates (status/dispatch/lease) with hard refusal channels.
package.json
packages/dsh/package.json
dsh.bundle.patch
packages/dsh/bundle/cordis.patch.yml
Official core packages (27)
- @deepseek-ai/cordis^4.0.2shared
- @deepseek-ai/dsh-agent^0.1.2-rc.1shared
- @deepseek-ai/dsh-api-session-controller^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-locale^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-store^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-ui-chat^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-ui-conversation^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-ui-primitives^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-ui-renderer^0.1.2-rc.1shared
- @deepseek-ai/dsh-client-ui-slots^0.1.2-rc.1shared
- @deepseek-ai/dsh-commands^0.1.2-rc.1shared
- @deepseek-ai/dsh-fs^0.1.2-rc.1shared
- @deepseek-ai/dsh-invariants^0.1.2-rc.1shared
- @deepseek-ai/dsh-jobs^0.1.2-rc.1shared
- @deepseek-ai/dsh-llm^0.1.2-rc.1shared
- @deepseek-ai/dsh-scope^0.1.2-rc.1shared
- @deepseek-ai/dsh-session^0.1.2-rc.1shared
- @deepseek-ai/dsh-settings^0.1.2-rc.1shared
- @deepseek-ai/dsh-skill^0.1.2-rc.1shared
- @deepseek-ai/dsh-skill-filesystem^0.1.2-rc.1shared
- @deepseek-ai/dsh-subagent^0.1.2-rc.1shared
- @deepseek-ai/dsh-system-prompt^0.1.2-rc.1shared
- @deepseek-ai/dsh-tools^0.1.2-rc.1shared
- @deepseek-ai/dsh-typert-protocol^0.1.2-rc.1shared
- @deepseek-ai/dsh-util-time^0.1.2-rc.1shared
- @deepseek-ai/dsh-util-workspace-path^0.1.2-rc.1shared
- @deepseek-ai/schemastery^3.18.1shared

Paths are pinned to commit 60d8f6b18b2a

Overview

An omni-plugin for harness engineering workflows with multi-agents, programmatic gates and skills.

Repository check result

Results are bound to the listed commit and cover only static checks run by this registry. The Evidence Score measures reviewable information; it is not a compatibility percentage or a security guarantee.

Static repository check

Sep 8, 2026, 9:23 AM

High risk

Checked commit: 60d8f6b18b2a
Evidence Score: 87/100
Static risk: High risk
Files scanned: 7
Findings: 5

Evidence breakdown

Source provenance25/25

Install documentation25/25

Maintenance18/20

Compatibility evidence11/20

Security signals8/10

Compatibility confidence: Limited

Findings (5)

Highshell.rm-rf

packages/cli/package.json:21dangerous-shell

"build": "rm -rf dist && bun build src/index.ts --target node --outfile dist/mstar-harness.js && bun ../../scripts/escape-dist-literals.ts dist/mstar-harness.js",

Highshell.rm-rf

packages/dsh/package.json:60dangerous-shell

"build": "bun run bundle-assets && rm -rf dist && bun build src/index.ts src/invariant.ts --target node --outdir dist --external @deepseek-ai/cordis --external @deepseek-ai/dsh-skill-filesystem --exte…

Highshell.rm-rf

packages/engine/package.json:29dangerous-shell

"build": "rm -rf dist && bun build src/index.ts --target node --outfile dist/engine.js && bun build src/audit.ts --target node --outfile dist/audit.js && bunx tsc",

Highshell.rm-rf

packages/omp/package.json:28dangerous-shell

"build": "bun run bundle-assets && rm -rf dist hooks tools && bun build src/hooks/pre/mstar-gates.ts --target node --outfile dist/hooks/pre/mstar-gates.js && bun build src/tools/mstar_status_validate/…

Highshell.rm-rf

packages/opencode/package.json:25dangerous-shell

"build": "bun run bundle-assets && rm -rf dist && bun build src/mstar.ts --target node --outfile dist/mstar.js",

Not run

Dependency advisory database scan
Installation execution test
Runtime behavior verification

Scanner 1.0.0 · Scorer 1.0.0