dsh-depguard

仓库内包含的插件

• dsh-depguardv0.1.0✓

  DeepSeek Harness plugin: predict (pre-install) and detect (post-install) duplicate @deepseek-ai/dsh-* copies, version drift, and vendored core services to prevent Symbol-key crashes like "Cannot read properties of undefined (reading 'prepare')".

  package.json

  package.json

  dsh.bundle.patch

  cordis.patch.yml

  官方核心包 (2)

  • @deepseek-ai/cordis^4.0.1共享
  • @deepseek-ai/dsh-tools^0.1.0-rc.6共享
• bad-pluginv1.0.0

  package.json

  tests/fixtures/bad-plugin-manifest/package.json

  dsh.bundle.patch

  —

  官方核心包 (1)

  • @deepseek-ai/dsh-tools^0.0.1-rc.1私有副本

路径固定于提交 3f2e9814a5fa

概览

根因是 discussion 1337：@deepseek-ai/dsh-tools 等核心包出现第二份物理副本时，JS Symbol 键（每次求值都不同）会让 ctx.tools[scheduler] 变 undefined，一次工具调度就崩，还会在会话里留下孤儿 toolcalls，之后每轮 400 INVALIDREQUEST 死锁。