dsh-github

DSH Web UI 的 GitHub 与本地 Git 工作流插件。

Features

• GitHub Personal Access Token account management with secret-free summaries.
• GitHub REST repository listing for github.com and GitHub Enterprise API URLs.
• Local Git operations: clone, fast-forward pull, status, commit, push, and force-with-lease.
• Sidebar panel with account, repository, local Git, and settings tabs.
• Push and force push are disabled by default and are guarded on the Host side.
• Token storage uses ~/.dsh/dsh-github.json with an atomic write and mode 0600.
• Git HTTP authentication uses an ephemeral http.extraheader environment configuration; tokens are not placed in clone URLs or process arguments.

Install in a profile

Download the newest dsh-github-*.tgz from Releases and add it to the profile:

dsh plugin --profile web add D:\downloads\dsh-github-0.1.2.tgz

For local development, build and install from a checkout instead:

pnpm install
pnpm run build
dsh plugin --profile web add link:D:\项目\dsh-github

Restart the existing DSH Web process after installation. Open the GitHub sidebar entry and add a replacement token there. The plugin deliberately does not ship a token in source, package metadata, logs, or documentation.

Agent tools

• github_auth_list, github_auth_test
• github_repo_list
• github_clone, github_pull, github_status
• github_commit, github_push

Compatibility

• DSH Host 0.1.0-rc.8 or newer compatible release.
• Node.js 22.19.0 or newer.
• Git must be available through the configured executable.

Security

The account file is local configuration, not a system secret vault. Use a fine-grained GitHub token with only the repositories and permissions needed by DSH. Revoke any token pasted into chat or source control and create a new one through the panel.