star-dsh-desktop: Instructions file for Codex

AGENTS.md

star-dsh-desktop AGENTS.md is an instructions file for Codex, OpenCode from dabaicai001/star-dsh-desktop. It costs 3,590 tokens per session, scanned A, original, MIT.

Repository instructions for StarHub, a desktop DevOps application for Windows, macOS, and Linux. It combines database tools, SSH and file transfer, Docker controls, and an AI assistant in one window.

In plain words
What is it for?
Use them when working on StarHub's Rust desktop process, Go database adapters, React interface, SSH/SFTP, databases, Docker, AI features, or command access rules.
Why use it?
They explain the multi-process architecture and current integration details, reducing the risk of changing the wrong layer or breaking command permissions.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is dabaicai001/star-dsh-desktop's own configuration. It tells Codex and OpenCode how to work on star-dsh-desktop itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything star-dsh-desktop configures →

Reuse

Borrowing it

Nothing to install: this file belongs to dabaicai001/star-dsh-desktop. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/dabaicai001/star-dsh-desktop/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/dabaicai001/star-dsh-desktop

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for star-dsh-desktop AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/dabaicai001/star-dsh-desktop/agents-md/github.svg)](https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md"><img src="https://agentmods.dev/badge/instructions/dabaicai001/star-dsh-desktop/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for star-dsh-desktop AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/dabaicai001/star-dsh-desktop/agents-md"><img src="https://agentmods.dev/badge/instructions/dabaicai001/star-dsh-desktop/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,590 This file is loaded in full into every session.
When invoked 3,590 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03590 $0.03590
Opus 5.5 $0.01436 $0.01436
Sonnet 5.5 $0.00718 $0.00718
Haiku 4.5 $0.00359 $0.00359

Measured 22d ago against content hash 75fd830ad580, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

star-dsh-desktop AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 22d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 149 lines

How it starts

The opening of the file, as written. The whole thing — 149 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — StarHub 协作指引

写给 AI Agent 和人类贡献者:读完这份文件就能上手改这个仓库。架构级变更请同步更新 docs/ 与本文件。

项目是什么

StarHub 是 DevOps 桌面应用,单一窗口整合:数据库客户端(MySQL / PostgreSQL / SQLite / Redis / ClickHouse / SQL Server / Elasticsearch)、SSH 终端、SFTP、Docker 面板、Android 真机、AI 助手。

StarHub 不是桌面项目,是上游 DeepSeek Harness Electron 壳的外部插件集:桌面壳、品牌/签名/更新栈都是上游的,StarHub 交付「插件 + 两个 sidecar 子进程 + 静态资产」三件套。去 Tauri 化(M1–M4)已把原来的 Tauri 壳整体退役,详见 docs/去Tauri化-M1..M4-*.md 四份清单。

项 值
仓库 https://github.com/dabaicai001/star-dsh-desktop
主分支 main
协议 MIT
当前版本 v0.134.3(🐛 修 SSH AI 助手面板「连接中断、永远空白」(消息发得出、主界面会话里也有回复,唯独终端页 AI 面板什么都不显示):SSE 路由 GET /starhub/api/assistant/stream 把 res.writeHead(200, {content-type: text/event-stream, ...}) 排在了 registry.attach() 之后——而 attach 的重放循环在第一帧就同步 res.write(),Node 此刻已冲刷隐式响应头(只有 Date/Connection/Transfer-Encoding,没有 content-type),随后的 writeHead 既丢头又抛 ERR_HTTP_HEADERS_SENT,webserver 兜底只能 destroy 连接。浏览器 EventSource 收到没有 text/event-stream 的 200 直接判致命错误(不重试)→ 面板 onDrop → 「连接中断,重新打开本页签可恢复」+ 空白;POST 路由不走 EventSource 所以照常能发。现在响应头先于任何一帧写出;attach 失败(助手已关闭)时头已发出、状态码改不了,改用 SSE error 帧告知面板(折叠成错误项)而不是回 200 JSON。测试侧的假 res 同步升级为 Node 忠实头语义(首次 write 冲刷隐式头、其后 writeHead 抛 ERR_HTTP_HEADERS_SENT)——原宽容桩只记录不抛,正是这个 bug 从 28 个测试眼皮下溜过的原因;新增「未知助手 id → SSE 错误帧」与主流程的 content-type 断言(38 例全绿)。)

架构一句话

三层进程:上游 Electron 壳(零改动) 跑 dsh Host(Node)进程 → Host 里的 starhub-bridge 插件 spawn 两个 sidecar:Rust sidecar(sidecar-rust/,ssh/sftp/android/browser 契约层 + 直播帧枢纽) 与 Go Sidecar(sidecar/,数据库/中间件适配),均经 stdio 换行分帧 JSON-RPC 通话 → 前端是 DSH 主壳 + StarHub React 工作台(vendor/deepseek-harness/,上游 deepseek-ai/deepseek-harness 的 vendored 副本,随仓库直接版本化)。

目录结构

starhub/
├── sidecar-rust/           # Rust sidecar(M1 起域逻辑的新家)
│   └── crates/
│       ├── starhub-sidecar      # 二进制 + stdio JSON-RPC 方法面(模型面 + ui.* 面)
│       ├── starhub-live         # 直播/接管帧枢纽(M3):本地 WS + Android 帧源
│       ├── starhub-contract     # 领域事件 schema + 模型可读能力文本
│       └── starhub-domain-{ssh,db,android,browser}
│
├── sidecar/                 # Go 1.25 Sidecar — 数据库/中间件代理
│   ├── main.go               # stdio JSON-RPC server 入口
│   ├── adapters/             # mysql / postgres / sqlite / redis / clickhouse / mssql /
│   │                         # elasticsearch / broker(Kafka/NSQ)/ docker(+compose,+ssh)/ csv / backup
│   ├── pool/  rpc/           # 连接池 / JSON-RPC 协议
│   └── bin/                  # 构建输出 starhub-sidecar[.exe]
│
├── vendor/deepseek-harness/ # DSH 主壳与 StarHub React 工作台(上游 deepseek-ai/deepseek-harness
│                            # 的 vendored 副本,随仓库直接版本化;上游 commit 记录于
│                            # vendor/deepseek-harness/UPSTREAM_COMMIT.txt)
│   ├── apps/
│   │   ├── starhub-window/   # StarHub 资产工作台构建入口(产物 dist-starhub-react/)
│   │   ├── web/  cli/        # DSH 自身应用
│   │   └── desktop/ desktop-host/  # 上游 DSH 自家 Electron 桌面壳(发布链用它打包)
│   ├── examples/
│   │   ├── starhub-web/      # web 组合的 profile 模板(旧 Tauri 壳用)
│   │   └── starhub-desktop/  # desktop 组合的 profile 模板(provisioning 用)
│   └── packages/starhub/     # 10 个内置插件:approval-bridge / bridge / client-nav /
│                             # domain-events / host-static / live-context /
│                             # session-registry / ssh-assistant / tool-context /
│                             # tools
│
├── scripts/
│   ├── provision-dsh.mjs     # M4:把 StarHub 组合装进 dsh profile
│   ├── smoke-dsh-desktop.mjs # M4:provisioning + 宿主进程冒烟
│   ├── build-plugin-bundle.mjs  # 纯插件形态:拼出自包含 bundle(→ dist-plugin/,--pack 出 .tgz)
│   ├── smoke-plugin-bundle.mjs  # 纯插件形态:pnpm 安装 + 宿主冒烟(五条断言)
│   ├── build-sidecar.*       # Go sidecar 构建
│   ├── build-window.mjs      # React 工作台构建
│   ├── bump-version.mjs      # 版本号同步
│   ├── cargo-sidecar.bat     # Windows 上跑 sidecar-rust 的 cargo(MSVC + 工具链)
│   └── cargo-sidecar.mjs     # 上面的跨平台包装:Windows 转 .bat,其它平台直调 cargo
│
├── dsh-runtime/             # 打包好的 dsh 运行时(gitignore;package:dsh-runtime 产出)
├── dist-starhub-react/      # React 工作台产物(gitignore)
├── dist-plugin/             # 纯插件 bundle 组装产物(gitignore;plugin:bundle 产出,--pack 另出 .tgz)
├── docs/                    # 技术方案 / 设计系统 / 踩坑记录 / 已知坑索引 / 去Tauri化 M1-M4 清单
├── test-sftp/               # SSH/SFTP stub + 桥兼容验收脚本
└── tests/                   # node --test 单测(utils、AI 上下文/滚动/记忆、SSH prompt/cwd/后台任务、provisioning)

Read the full file on GitHub · 149 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 22d ago Changed · +20 tokens per session 75fd830ad580
  2. 23d ago Changed · +1 lines · +186 tokens per session 629cf4c666de
  3. 24d ago Changed · -167 tokens per session 01912fab916b
  4. 26d ago Changed · +181 tokens per session d462b6b50691
  5. 27d ago Changed · +6 lines · +332 tokens per session da4579a65bfe
  6. 28d ago Changed · +8 lines · -107 tokens per session 2e4e88534b7d
  7. 1mo ago Changed · -7 tokens per session 7047fb425c53
  8. 1mo ago Changed · -30 tokens per session 6ebd3251e944
  9. 1mo ago Changed · -26 tokens per session 707d46eb89c1
  10. 1mo ago First seen · 134 lines · 3,208 tokens per session scan A 0176fd0f02ac

Subscribe to this mod's changes

star-dsh-desktop AGENTS.md is an instructions file published in the GitHub repository dabaicai001/star-dsh-desktop (12 stars, last pushed 23d ago), licensed MIT. It adds 3,590 tokens to every session, about $0.0144 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

star-dsh-desktop AGENTS.md compared with instructions from other repositories

star-dsh-desktop AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
star-dsh-desktop AGENTS.mddabaicai001/star-dsh-desktopInstructions file1223d agoMITA3,590Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode