Borrowing it
Nothing to install: this file belongs to dabaicai001/star-dsh-desktop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/dabaicai001/star-dsh-desktop/main/AGENTS.mdgit clone --depth 1 https://github.com/dabaicai001/star-dsh-desktopWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md)<a href="https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md"><img src="https://agentmods.dev/badge/instructions/dabaicai001/star-dsh-desktop/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md"><img src="https://agentmods.dev/badge/instructions/dabaicai001/star-dsh-desktop/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.03590 | $0.03590 |
| Opus 5.5 | $0.01436 | $0.01436 |
| Sonnet 5.5 | $0.00718 | $0.00718 |
| Haiku 4.5 | $0.00359 | $0.00359 |
Grade A, and why
star-dsh-desktop AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 149 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — StarHub 协作指引
写给 AI Agent 和人类贡献者:读完这份文件就能上手改这个仓库。架构级变更请同步更新 docs/ 与本文件。
项目是什么
StarHub 是 DevOps 桌面应用,单一窗口整合:数据库客户端(MySQL / PostgreSQL / SQLite / Redis / ClickHouse / SQL Server / Elasticsearch)、SSH 终端、SFTP、Docker 面板、Android 真机、AI 助手。
StarHub 不是桌面项目,是上游 DeepSeek Harness Electron 壳的外部插件集:桌面壳、品牌/签名/更新栈都是上游的,StarHub 交付「插件 + 两个 sidecar 子进程 + 静态资产」三件套。去 Tauri 化(M1–M4)已把原来的 Tauri 壳整体退役,详见 docs/去Tauri化-M1..M4-*.md 四份清单。
| 项 | 值 |
|---|---|
| 仓库 | https://github.com/dabaicai001/star-dsh-desktop |
| 主分支 | main |
| 协议 | MIT |
| 当前版本 | v0.134.3(🐛 修 SSH AI 助手面板「连接中断、永远空白」(消息发得出、主界面会话里也有回复,唯独终端页 AI 面板什么都不显示):SSE 路由 GET /starhub/api/assistant/stream 把 res.writeHead(200, {content-type: text/event-stream, ...}) 排在了 registry.attach() 之后——而 attach 的重放循环在第一帧就同步 res.write(),Node 此刻已冲刷隐式响应头(只有 Date/Connection/Transfer-Encoding,没有 content-type),随后的 writeHead 既丢头又抛 ERR_HTTP_HEADERS_SENT,webserver 兜底只能 destroy 连接。浏览器 EventSource 收到没有 text/event-stream 的 200 直接判致命错误(不重试)→ 面板 onDrop → 「连接中断,重新打开本页签可恢复」+ 空白;POST 路由不走 EventSource 所以照常能发。现在响应头先于任何一帧写出;attach 失败(助手已关闭)时头已发出、状态码改不了,改用 SSE error 帧告知面板(折叠成错误项)而不是回 200 JSON。测试侧的假 res 同步升级为 Node 忠实头语义(首次 write 冲刷隐式头、其后 writeHead 抛 ERR_HTTP_HEADERS_SENT)——原宽容桩只记录不抛,正是这个 bug 从 28 个测试眼皮下溜过的原因;新增「未知助手 id → SSE 错误帧」与主流程的 content-type 断言(38 例全绿)。) |
架构一句话
三层进程:上游 Electron 壳(零改动) 跑 dsh Host(Node)进程 → Host 里的 starhub-bridge 插件 spawn 两个 sidecar:Rust sidecar(sidecar-rust/,ssh/sftp/android/browser 契约层 + 直播帧枢纽) 与 Go Sidecar(sidecar/,数据库/中间件适配),均经 stdio 换行分帧 JSON-RPC 通话 → 前端是 DSH 主壳 + StarHub React 工作台(vendor/deepseek-harness/,上游 deepseek-ai/deepseek-harness 的 vendored 副本,随仓库直接版本化)。
目录结构
starhub/
├── sidecar-rust/ # Rust sidecar(M1 起域逻辑的新家)
│ └── crates/
│ ├── starhub-sidecar # 二进制 + stdio JSON-RPC 方法面(模型面 + ui.* 面)
│ ├── starhub-live # 直播/接管帧枢纽(M3):本地 WS + Android 帧源
│ ├── starhub-contract # 领域事件 schema + 模型可读能力文本
│ └── starhub-domain-{ssh,db,android,browser}
│
├── sidecar/ # Go 1.25 Sidecar — 数据库/中间件代理
│ ├── main.go # stdio JSON-RPC server 入口
│ ├── adapters/ # mysql / postgres / sqlite / redis / clickhouse / mssql /
│ │ # elasticsearch / broker(Kafka/NSQ)/ docker(+compose,+ssh)/ csv / backup
│ ├── pool/ rpc/ # 连接池 / JSON-RPC 协议
│ └── bin/ # 构建输出 starhub-sidecar[.exe]
│
├── vendor/deepseek-harness/ # DSH 主壳与 StarHub React 工作台(上游 deepseek-ai/deepseek-harness
│ # 的 vendored 副本,随仓库直接版本化;上游 commit 记录于
│ # vendor/deepseek-harness/UPSTREAM_COMMIT.txt)
│ ├── apps/
│ │ ├── starhub-window/ # StarHub 资产工作台构建入口(产物 dist-starhub-react/)
│ │ ├── web/ cli/ # DSH 自身应用
│ │ └── desktop/ desktop-host/ # 上游 DSH 自家 Electron 桌面壳(发布链用它打包)
│ ├── examples/
│ │ ├── starhub-web/ # web 组合的 profile 模板(旧 Tauri 壳用)
│ │ └── starhub-desktop/ # desktop 组合的 profile 模板(provisioning 用)
│ └── packages/starhub/ # 10 个内置插件:approval-bridge / bridge / client-nav /
│ # domain-events / host-static / live-context /
│ # session-registry / ssh-assistant / tool-context /
│ # tools
│
├── scripts/
│ ├── provision-dsh.mjs # M4:把 StarHub 组合装进 dsh profile
│ ├── smoke-dsh-desktop.mjs # M4:provisioning + 宿主进程冒烟
│ ├── build-plugin-bundle.mjs # 纯插件形态:拼出自包含 bundle(→ dist-plugin/,--pack 出 .tgz)
│ ├── smoke-plugin-bundle.mjs # 纯插件形态:pnpm 安装 + 宿主冒烟(五条断言)
│ ├── build-sidecar.* # Go sidecar 构建
│ ├── build-window.mjs # React 工作台构建
│ ├── bump-version.mjs # 版本号同步
│ ├── cargo-sidecar.bat # Windows 上跑 sidecar-rust 的 cargo(MSVC + 工具链)
│ └── cargo-sidecar.mjs # 上面的跨平台包装:Windows 转 .bat,其它平台直调 cargo
│
├── dsh-runtime/ # 打包好的 dsh 运行时(gitignore;package:dsh-runtime 产出)
├── dist-starhub-react/ # React 工作台产物(gitignore)
├── dist-plugin/ # 纯插件 bundle 组装产物(gitignore;plugin:bundle 产出,--pack 另出 .tgz)
├── docs/ # 技术方案 / 设计系统 / 踩坑记录 / 已知坑索引 / 去Tauri化 M1-M4 清单
├── test-sftp/ # SSH/SFTP stub + 桥兼容验收脚本
└── tests/ # node --test 单测(utils、AI 上下文/滚动/记忆、SSH prompt/cwd/后台任务、provisioning)
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 22d ago Changed · +20 tokens per session 75fd830ad580
- 23d ago Changed · +1 lines · +186 tokens per session 629cf4c666de
- 24d ago Changed · -167 tokens per session 01912fab916b
- 26d ago Changed · +181 tokens per session d462b6b50691
- 27d ago Changed · +6 lines · +332 tokens per session da4579a65bfe
- 28d ago Changed · +8 lines · -107 tokens per session 2e4e88534b7d
- 1mo ago Changed · -7 tokens per session 7047fb425c53
- 1mo ago Changed · -30 tokens per session 6ebd3251e944
- 1mo ago Changed · -26 tokens per session 707d46eb89c1
- 1mo ago First seen · 134 lines · 3,208 tokens per session scan A 0176fd0f02ac
star-dsh-desktop AGENTS.md is an instructions file published in the GitHub repository dabaicai001/star-dsh-desktop (12 stars, last pushed 23d ago), licensed MIT. It adds 3,590 tokens to every session, about $0.0144 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
star-dsh-desktop AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| star-dsh-desktop AGENTS.mddabaicai001/star-dsh-desktop | Instructions file | 12 | 23d ago | MIT | A | 3,590 | Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | yesterday | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |