dsh-tool-github GitHub REST API tools for DeepSeek Harness (DSH). Registers model-facing github_* tools so the agent can bind a GitHub account, query repositories, search code/issues, read file content, create issues / pull requests / comments, and clone repositories into selectable workspaces. Also ships a browser-side GitHub panel for the web GUI (sidebar icon → account status, workspace list, bind / add-workspace actions) backed by /github-* commands. ## Web GUI panel After install and a full GUI restart (dsh web — the client plugin discovery only runs at process start and caches "not a client package" verdicts, so a running GUI will not pick up a newly added dsh.client declaration), a GitHub icon appears in the sidebar rail (next to the settings button). Click it to open the GitHub panel: - Status — bound account (@login, token source) and registered GitHub workspaces (from /github-status) - My repos — list the bound account's repositories as clickable rows; click one to clone and register it as a workspace (from /github-my-repos + /github-workspace-add) - Bind account… — paste a personal access token (runs /github-bind <token>) - Add workspace… — enter owner/repo (or owner repo [branch]) to clone and register a workspace (runs /github-workspace-add) - Refresh — re-read status The panel talks to the host only through the /github-* commands (ctx.remote.commands.execute), so it never holds a token or touches the GitHub API itself. The same commands are also typed directly in the composer: /github-status Show account + workspace status /github-bind ghp_xxx Bind an account /github-unbind Remove the stored token /github-workspace-add owner repo [branch] /github-workspace-list List cloned GitHub workspaces ## Tools ### Account binding | Tool | Description | |---|---| | github_bind | Validate a personal access token against the API and persist it to the credential store. After binding, every github_* tool authenticates as that account automatically. | | github_whoami | Show the bound account, token source (credential store / plugin config / environment), and public profile. | | github_unbind | Remove the stored token and disconnect the account. | ### GitHub API | Tool | Description | |---|---| | github_repo | Repository metadata (stars, forks, language, license, topics, activity) | | github_search | Search repositories, code, or issues | | github_my_repos | List the bound account's repositories (public + private per token scope) — pick one to work on or add as a workspace | | github_issues | List repository issues (state / label filters) | | github_create_issue | Create an issue (requires a bound account / token) | | github_prs | List pull requests (state filter) | | github_create_pr | Create a pull request (requires a bound account / token) | | github_content | Read a file or list a directory at any ref | | github_comment | Comment on an issue or PR (requires a bound account / token) | ### Workspaces | Tool | Description | |---|---| | github_workspace_add | Clone a repository into the local workspace root (~/.dsh/github-workspaces) and register it with the harness workspace registry — it then appears in the workspace picker (sidebar / new-session hero) and can be selected as the working directory. Uses git clone when possible and falls back to a codeload tarball download when git TLS is unavailable. | | github_workspace_list | List repositories cloned by github_workspace_add, with local paths and registration state. | ## Install bash # from this checkout directory dsh plugin --profile web add . Or via a local path: bash dsh plugin --profile web add D:\keep_try\dsh-tool-github Restart the web GUI (dsh web) after installing or updating so the new bundle loads. ## Usage examples "帮我绑定 GitHub 账号" → github_bind (输入 token) "当前登录的 GitHub 账号是谁" → github_whoami "把 deepseek-ai/DeepSeek-Harness 加为工作区" → github_workspace_add "有哪些 GitHub 仓库可以作为工作区" → github_workspace_list "deepseek-harness 有多少 star" → github_repo "搜 python 的 PDF 解析库 stars:>3000" → github_search ## Configuration The plugin accepts a Config with: - token — GitHub personal access token (default: ""). Prefer github_bind (credential store) or the GITHUB_TOKEN environment variable; resolution order is credential store → plugin config → environment. - baseUrl — API base URL (default https://api.github.com; set to your GitHub Enterprise URL, e.g. https://github.example.com/api/v3). - timeoutMs — per-call timeout (default 30000). - maxResults — list/search result cap (default 10). - workspaceRoot — where github_workspace_add clones repositories (default ~/.dsh/github-workspaces). Example profile patch (~/.dsh/cordis.patch.yml or profiles/<name>/cordis.patch.yml): yaml - id: tool-github config: maxResults: 20 workspaceRoot: D:\github-workspaces ## How account binding works github_bind validates the token against GET /user, then stores it through DSH's credential seam (ctx.credentials) under the GITHUB_TOKEN reference — the same store the Models page writes, persisted in $DSH_HOME/.credentials.yaml. Every other tool resolves the token per operation, so a changed credential takes effect on the next call without a restart. github_unbind removes only a credential-store binding; environment and plugin-config tokens are read-only sources. ## How workspace integration works github_workspace_add clones <owner>/<repo> into <workspaceRoot>/<owner>/<repo>, then calls ctx.workspaceRegistry.create(path, title) — the same registry the workspace picker renders. The repository immediately becomes a selectable workspace: sessions opened there use the repo as their working directory, with the agent's file tools operating inside the clone. ## Development bash npm install # install dev/test dependencies npm run check # syntax-check both bundles npm test # full test suite (host + client + schema + contract) npm run test:host # host tests only (commands, schema, contracts) npm run test:client # client DOM integration test CI (.github/workflows/ci.yml) runs on push/PR: syntax check + full test suite on Node 20 & 22, plus an npm pack --dry-run package sanity job. ## License MIT