dsh-enhanced-plugins: Instructions file for Codex

AGENTS.md

dsh-enhanced-plugins AGENTS.md is an instructions file for Codex, OpenCode from sky-unicorn/dsh-enhanced-plugins. It costs 3,985 tokens per session, scanned A, original, MIT.

Repository-wide instructions for developing plugins for DeepSeek Harness, a framework for building agent extensions. They describe where to find the relevant source code, which documents are authoritative, and how plugin parts fit together.

In plain words
What is it for?
Use them when working on a DeepSeek Harness plugin to inspect its repository, verify APIs and versions, follow lifecycle and configuration rules, and keep project-specific details out of general instructions.
Why use it?
They reduce mistakes caused by assuming the plugin has a standard structure or by using the wrong version of the framework. They also define checks to perform before changing code.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions AGENTS.md.

This is sky-unicorn/dsh-enhanced-plugins's own configuration. It tells Codex and OpenCode how to work on dsh-enhanced-plugins itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything dsh-enhanced-plugins configures →

Reuse

Borrowing it

Nothing to install: this file belongs to sky-unicorn/dsh-enhanced-plugins. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/sky-unicorn/dsh-enhanced-plugins/master/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/sky-unicorn/dsh-enhanced-plugins

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for dsh-enhanced-plugins AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md/github.svg)](https://agentmods.dev/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md"><img src="https://agentmods.dev/badge/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for dsh-enhanced-plugins AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md"><img src="https://agentmods.dev/badge/instructions/sky-unicorn/dsh-enhanced-plugins/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 3,985 This file is loaded in full into every session.
When invoked 3,985 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.03985 $0.03985
Opus 5.5 $0.01594 $0.01594
Sonnet 5.5 $0.00797 $0.00797
Haiku 4.5 $0.00398 $0.00398

Measured 1mo ago against content hash cddd280d1d63, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

dsh-enhanced-plugins AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 96 lines

How it starts

The opening of the file, as written. The whole thing — 96 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AGENTS.md — DeepSeek Harness 插件项目通用规则

本文件适用于采用它的整个仓库,可复用于不同的 DeepSeek Harness(下称 DSH)外部插件项目。规则不得写入某个插件独有的协议、namespace、业务对象、字段或产品行为;项目专属事实应从当前仓库的 README、manifest、源码和测试中读取。

权威来源与开始工作前的检查

  • 使用本规则的仓库是 DSH 插件项目,不是独立应用、DSH fork 或 DSH 内置 package。默认通过公开插件扩展点实现需求,不为接入插件而修改 DSH 本体。
  • 本地 DSH 源码的固定位置是 D:\work\workspace\github\deepseek-harness。开始任何涉及 DSH API、构建、运行时或 UI 的工作前,先确认该目录存在;若不存在,停止相关工作并向用户询问,不得自行克隆、改用其他 checkout 或猜测接口。
  • 先检查当前插件仓库的 package.json、锁文件、README、构建配置、patch、exports、源码目录和测试,确定它实际包含 Host、Client、Service、Tool、Provider、Consumer 或 bundle 中的哪些部分。不得假设所有插件都有相同目录结构或同时包含 Host/Web 两半。
  • 官方技术文档入口如下。这些 URL 是章节入口而非单页;根据任务沿侧边栏继续阅读相关子页,不能只读取入口页:
  • 插件生命周期、服务、事件、配置、发布或 UI 任务必须继续阅读对应的 Develop、Cordis tutorial、Cordis API、subsystem 和 cookbook 子页。设置界面任务还必须阅读 reference/cookbook/adding-a-settings-card、reference/subsystems/client-modules 与 reference/subsystems/settings。
  • 在线文档表达公开设计和最新约定,本地 checkout 表达当前实际 ABI、slot 结构和视觉实现。两者不一致时,记录本地 commit,核对目标版本的类型与源码,采用能在该 checkout 上验证通过的接口并说明差异;不得静默拼接两个版本的 API。
  • 将 sibling checkout 视为只读参考和联调目标。除非用户明确要求,不得在 D:\work\workspace\github\deepseek-harness 中提交、格式化、生成或修改文件。

插件架构与职责边界

  • 遵循 DSH“行为由插件组成”的架构。新行为应进入已有公开 Service、event、registry、slot、settings 或 bundle 扩展点;不要修改 agent loop、Web shell 或其他核心包来绕过缺失的插件接入。
  • 先识别当前插件在 capability seam 中的角色:Service Definition、Provider、Consumer,或只负责组合它们的 bundle。新增能力时必须考虑当前所需角色及其真实调用方,不把 provider 私有行为塞进公共 service,也不把某个 UI/transport 的需要写进通用 service 接口。
  • 保持 Host、Client、模型可见行为、持久化和 transport 的职责分离。跨插件协作通过 Cordis service、typed event、registry 或 typed slot;不要导入另一个插件的私有实现来共享状态。
  • 除非需求明确改变公开结构,保留当前仓库已经声明的 package 边界、入口、subpath exports 和 patch 组合方式。不要为了套用别的插件示例而重排现有架构。
  • 所有新增公开行为都要有明确所有者。配置由注册 namespace 的插件所有,UI 只编辑;持久状态由拥有它的 subsystem 所有;transport 只负责传递,不成为业务真源。

Cordis 插件与生命周期

  • 函数插件把适用的 name、inject、Config、apply 元数据作为命名导出,不要混入 default export;提供具名服务的插件才使用默认导出的 Service 子类。以目标 checkout 当前 package 约定为准。
  • 必需服务写入 inject,让 fiber 等待依赖并在依赖消失时自动卸载;可选服务在使用点通过 ctx.get(name) 查询。不要通过手工启动顺序代替依赖声明。
  • 所有注册和资源必须属于 fiber 生命周期。优先使用本身可撤销的 ctx.on()、registry register() 和 ctx.plugin();Cordis 不管理的连接、定时器、watcher、订阅或进程必须放入 ctx.effect() 并返回 disposer。
  • ctx.plugin() 创建的 child fiber 随父级卸载。需要提前替换或终止时等待 fiber.dispose() 完成;不能泄漏注册、子进程、网络连接、监听器、重试或后台任务。
  • 异步 disposer 之间需要顺序时,把相关步骤放进同一个 disposer 并显式串行等待;不要依赖多个 effect 的完成顺序。实现必须能经受配置更新、依赖消失、显式 dispose 和 HMR。
  • 新 registry contribution 必须验证 dispose 后确实移除。配置热替换不得留下旧实例状态;用稳定 entry id 保持 Loader/HMR 只重载发生变化的部分。
  • waterfall listener 除非明确拥有短路决策权,否则必须调用 next();事件模式是公开约定,使用与声明一致的 emit、waterfall、parallel 或 serial 分发方式。
  • 需要跨插件公开能力时使用 Service;仅由单个实现内部使用的逻辑保持私有。函数、service、事件和声明合并均使用目标 package 的公开入口,不从 src/ 或未导出的内部路径导入。

Read the full file on GitHub · 96 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 1mo ago Changed · +5 lines · +113 tokens per session cddd280d1d63
  2. 2mo ago First seen · 91 lines · 3,872 tokens per session scan A f57e494d3500

Subscribe to this mod's changes

dsh-enhanced-plugins AGENTS.md is an instructions file published in the GitHub repository sky-unicorn/dsh-enhanced-plugins (4 stars, last pushed today), licensed MIT. It adds 3,985 tokens to every session, about $0.0159 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Related

dsh-enhanced-plugins AGENTS.md compared with instructions from other repositories

dsh-enhanced-plugins AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
dsh-enhanced-plugins AGENTS.mdsky-unicorn/dsh-enhanced-pluginsInstructions file4todayMITA3,985Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143ktodayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149ktodayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195ktodayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file275k2d agoMITA4,313Codex, OpenCode