dsh-plugin-aflare

@alib8b8/dsh-plugin-aflare

DeepSeek Harness (DSH)
Cordis plugin that exposes aflare
workflow tools as native DSH tools.

Every tool spawns the local aflare binary with execFile (no shell), so
nothing leaves your machine — the same local-first guarantee aflare itself
makes.

Tools

Install

Prerequisite: the aflare binary

The plugin drives the local aflare CLI, so install it first (one line; see
the aflare README for Windows/source
options):

curl -fsSL https://raw.githubusercontent.com/alib8b8/aflare/main/install.sh | bash
aflare version   # sanity check

One-line install into DSH

dsh plugin --profile web add @alib8b8/dsh-plugin-aflare

Published on npm (@alib8b8/dsh-plugin-aflare);
the github:alib8b8/dsh-plugin-aflare spec works too.

The package declares its bundle patch (dsh.bundle.patch in package.json),
so DSH registers the plugin entry automatically — restart dsh web and the
aflare_* tools are live. No profile editing needed.

From a local checkout

git clone https://github.com/alib8b8/dsh-plugin-aflare
cd dsh-plugin-aflare
npm install && npm run build
dsh plugin --profile web add "$PWD"

This repository is the distribution mirror of
aflare/integrations/dsh-plugin;
development happens in the aflare monorepo.

Or register the built entry manually with a cordis.yml patch overlay
(absolute path required):

- insert:
    - id: aflare-tools
      name: /absolute/path/to/aflare/integrations/dsh-plugin/dist/index.js

Start DSH with the overlay:

pnpm dsh web --patch ./aflare-patch.yml

Configuration

Security

• All invocations use execFile — arguments are passed as argv, never
  through a shell, so tool parameters cannot inject commands.
• Output is truncated at 256 KB to protect model context.
• aflare's own protections (path validation, safe mode, policy engine) apply
  to every run. Set AFLARE_SAFE_MODE=1 in the DSH process environment for
  untrusted workflows.

Development

npm install
npm run typecheck   # strict TS check
npm test            # compiles, then runs integration tests via node --test

The tests execute the real aflare binary, resolved from AFLARE_BIN or
the repo-root build output (make build in the repository root). Without a
binary, the registration checks still run and the binary tests skip.

License

AGPL-3.0-or-later (same as the aflare project).