dsh-wsl

中英双语 Bilingual：中文在前，English below.

中文

DeepSeek Harness 插件：在 Windows 上通过 WSL（Windows Subsystem for Linux）执行命令。

解决两个问题：

1. DSH 极简模式在 Windows 上不可用 —— 随包预设 minimal-wsl（「极简模式 (WSL)」）把极简模式的 bash 映射到 WSL，包括非持久（每次调用新 shell）与持久 PTY（保持状态、交互程序、Ctrl-C）两套实现；
2. Windows 上的 DSH 想直接利用 WSL 环境做工程 —— 通用 wsl 模型工具，standard/cordis 预设的会话里从 Windows 侧直接执行一条 WSL 命令。

为什么极简模式在 Windows 上失败

文件系统不是问题（dsh-fs-local 在 Windows 上正常），问题只在 shell 执行层。本插件把执行层整体搬到 WSL，同时保留 Windows 侧的文件工具。

架构

dsh-wsl/
├── lib/
│   ├── index.js       # Host 半边：预设安装器 + 通用 wsl 工具 + /wsl-manager API
│   ├── backend.js     # 持久 PTY 的 WSL TerminalBackend（node-pty ConPTY -> wsl.exe -> Linux PTY）
│   ├── wsl.js         # 发行版探测、WSLENV 合并、预热（纯函数可测）
│   ├── path.js        # Windows ⇄ /mnt 路径转换（纯函数）
│   └── client.js      # Web 插件设置页「WSL」标签（发行版列表/预热/诊断）
├── agent-presets/
│   └── minimal-wsl/   # 随包预设：persona(路径规则) + wsl-shell 组 + persistent-shell 组 + filesystem 组
│       └── wsl-executor.mjs   # 零依赖执行器：wsl.exe [-d distro] [--cd /mnt/...] -- bash -c <cmd>
└── test/              # 单元测试（纯逻辑）+ 两个活体冒烟（需本机 WSL）

执行链路

• 非持久 bash：wsl-executor.mjs（preset 本地文件，仅 Node 内置模块）在 entry-local realm 里 ctx.provide('shell')，dsh-tool-bash 注册其上。每条命令 = 一次 wsl.exe 调用。
• 持久 PTY：WslTerminalBackend 注册进 preset 组的 terminals 注册表（类型 shell），dsh-tool-bash-persistent 通过它打开会话。node-pty 在 Windows 侧分配 ConPTY，wsl.exe 给 Linux bash 一个真 PTY——交互程序、Ctrl-C、作业控制原生可用（与 Windows Terminal 同机制）。命令完成检测用提示符标记（OSC 133;D + 受控 PS1 dsh>），静默推断与超时兜底；Linux bash 的 pid 经私有 OSC 777 序列回传，signal() 通过 wsl.exe 边信道读 /proc/<pid>/stat 解析前台进程组。

安装

插件需安装进 DSH 的 profile 工作区（preset 行与 profile 行都从那里解析）：

1. 把 dsh-wsl 加进 C:\Users\<你>\.dsh\profiles\web\package.json 的 dependencies：

   "dependencies": { "dsh-wsl": "file:D:/Project/DSH-Plugins/dsh-wsl" }

2. 在该目录运行 pnpm install；
3. 把插件行追加到 profiles\web\cordis.patch.yml：

   - insert:
       - id: dsh-wsl
         name: 'dsh-wsl'

4. 重启 DSH web。宿主半边会自动把 minimal-wsl 预设安装到 ${DSH_HOME}/.agent-presets/minimal-wsl/（已存在则跳过，force: true 才覆盖）。

修改插件代码后，pnpm 的 file: 依赖不会自动重拷：先删除 profiles\web\node_modules\dsh-wsl 再重跑 pnpm install（或直接改 file: 指向的仓库内容后删除该目录）。

前置条件：Windows 10/11 + WSL2 + 至少一个发行版（wsl --install）。持久 PTY 依赖 node-pty（profile 工作区已随 DSH 附带）。

使用

1. 发行版选择：Web 插件设置 → 插件配置 → WSL 卡片（横条）里用下拉框选择本地发行版（空 = WSL 默认发行版）。选择立即生效并持久化到 settings.yaml（wsl.distro），执行器、持久 PTY 后端与 wsl 工具在每次调用时读取，无需重启。
2. 极简模式 (WSL)：Web 界面新建会话时选择该预设。bash 工具与 str_replace_editor 双工具表面与原极简模式一致，但命令在 WSL 里执行。
3. 通用 wsl 工具：宿主半边注册的 wsl 工具（command/description/timeoutMs/workdir/distro 参数）。注意：DSH 的模型工具由预设行注册，宿主级注册对 preset 作用域会话可能不可见——如需在 standard/cordis 会话中使用，把 dsh-wsl 的工具行加进对应用户预设的组成（后续版本计划提供标准预设变体）。
4. 路径规则（已写进预设 persona 与工具描述）：文件工具用 D:\dir\file，bash 命令用 /mnt/d/dir/file，同一份文件。
5. 沙箱：会话切到完全访问后 bash/wsl 工具才放行。受限模式下会返回明确指引（WSL VM 内的进程不受 Windows 受限令牌约束，且经 /mnt/* 可达全部 Windows 文件——受限模式只会造成「看似受限」的假象）。持久 PTY 会话打开期间禁止切换沙箱模式（沿用官方后端的行为）。

配置

宿主半边（cordis.patch.yml 行的 config）：

wsl-executor.mjs（preset 内 agent.cordis.yml 的 config）：distro（兜底）、timeoutMs、maxTimeoutMs、maxOutputBytes、maxSpillBytes、graceMs。

实现注意：宿主半边声明 inject: ['webServer', 'tools', 'subprocess']。不声明 inject 的行会在这些服务就绪前激活，ctx.get() 全部拿空——表现为状态接口 404/兜底页与工具缺失（0.1.0 首版的线上症状）。

沙箱与信任模型（务必阅读）

• WSL2 是虚拟机：Windows 的受限令牌/ACL 沙箱只约束 wsl.exe 这个启动桩，对 VM 内的 Linux 进程完全无效。
• Linux 侧通过 /mnt/*（drvfs/9P）可以读写全部 Windows 文件。
• 因此本插件在非完全访问模式下拒绝执行，而不是假装受限。切换会话沙箱或让模型单次升级后放行。

已知限制

• stdin 转发不支持：wsl.exe 的 stdin 中继无法喂给 bash 内建命令（bash 启动时缓存了 EOF，之后到达的数据只有绕过 bash 缓冲区的原始读取可见——已实证）。执行器对 stdin 请求返回明确错误，指引改用 heredoc。
• 每次非持久调用有 ~100ms 热开销；发行版冷启动约 5–7 秒（插件自动预热一次）。
• /mnt/* 上重依赖构建（大量小文件 I/O）比 WSL 原生文件系统慢；工程可放 WSL 家目录（此时文件工具不可见，v2 计划支持 \\wsl.localhost UNC 工程目录）。
• drvfs 权限语义：文件恒为 777、chmod 无效（git/脚本在 /mnt 上仍可用）。
• 持久 PTY 不支持运行时 resize（TerminalBackendSession 契约本身无 resize 方法）。
• 命令行参数中的反斜杠会被 wsl.exe 吞掉，因此路径转换全部在 JS 内完成，不依赖 wslpath。

开发与测试

npm test                      # 单元测试（纯逻辑，无需 WSL）
node test/smoke-live.mjs      # 非持久执行器活体冒烟（需本机 WSL）
node test/backend-smoke-live.mjs  # 持久 PTY 活体冒烟（需本机 WSL + node-pty）
node test/tool-smoke-live.mjs     # 通用 wsl 工具活体冒烟（需本机 WSL）

本地跑测试需要解析 peerDependencies：仓库内 node_modules 是指向 profile 工作区 node_modules 的 junction（已被 .gitignore 忽略），按需重建：

New-Item -ItemType Directory -Path node_modules -Force | Out-Null
New-Item -ItemType Junction -Path 'node_modules\@deepseek-ai' -Target "$env:DSH_HOME\profiles\node_modules\@deepseek-ai" -Force | Out-Null
New-Item -ItemType Junction -Path 'node_modules\node-pty' -Target "$env:DSH_HOME\profiles\node_modules\node-pty" -Force | Out-Null

License

MIT

English

DeepSeek Harness plugin: execute commands on Windows through WSL (Windows Subsystem for Linux).

It solves two problems:

1. DSH's minimal preset is unusable on Windows — the bundled minimal-wsl preset ("极简模式 (WSL)") maps the minimal preset's bash onto WSL, with two implementations: non-persistent (a fresh shell per call) and persistent PTY (state kept, interactive programs, Ctrl-C);
2. A DSH install on Windows wants to use the WSL environment directly for project work — a general-purpose wsl model tool runs a single WSL command from a standard/cordis session on the Windows side.

Why the minimal preset fails on Windows

The filesystem is not the problem (dsh-fs-local works fine on Windows) — only the shell execution layer is. This plugin moves the whole execution layer into WSL while keeping the Windows-side file tools.

Architecture

dsh-wsl/
├── lib/
│   ├── index.js       # Host half: preset installer + general wsl tool + /wsl-manager API
│   ├── backend.js     # WSL TerminalBackend for the persistent PTY (node-pty ConPTY -> wsl.exe -> Linux PTY)
│   ├── wsl.js         # distro discovery, WSLENV merging, warm-up (pure, testable)
│   ├── path.js        # Windows ⇄ /mnt path translation (pure)
│   └── client.js      # Web Plugins settings "WSL" tab (distro list / warm-up / diagnostics)
├── agent-presets/
│   └── minimal-wsl/   # bundled preset: persona (path rules) + wsl-shell group + persistent-shell group + filesystem group
│       └── wsl-executor.mjs   # zero-dependency executor: wsl.exe [-d distro] [--cd /mnt/...] -- bash -c <cmd>
└── test/              # unit tests (pure logic) + two live smoke suites (need local WSL)

Execution paths

• Non-persistent bash: wsl-executor.mjs (a preset-local file, Node built-ins only) provides ctx.provide('shell') inside an entry-local realm, with dsh-tool-bash registered on top. Each command is one wsl.exe call.
• Persistent PTY: WslTerminalBackend registers into the preset group's terminals registry (type shell); dsh-tool-bash-persistent opens sessions through it. node-pty allocates a ConPTY on the Windows side, wsl.exe gives the Linux bash a real PTY — interactive programs, Ctrl-C and job control work natively (the same mechanism Windows Terminal uses). Command completion is detected via the prompt marker (OSC 133;D + controlled PS1 dsh>) with silent-inference and timeout fallbacks; the Linux bash pid is reported back through a private OSC 777 sequence, and signal() resolves the foreground process group through a wsl.exe side-channel reading /proc/<pid>/stat.

Install

Install the plugin into DSH's profile workspace (both preset rows and profile rows resolve from there):

1. Add dsh-wsl to the dependencies of C:\Users\<you>\.dsh\profiles\web\package.json:

   "dependencies": { "dsh-wsl": "file:D:/Project/DSH-Plugins/dsh-wsl" }

2. Run pnpm install in that directory;
3. Append the plugin row to profiles\web\cordis.patch.yml:

   - insert:
       - id: dsh-wsl
         name: 'dsh-wsl'

4. Restart DSH web. The host half auto-installs the minimal-wsl preset into ${DSH_HOME}/.agent-presets/minimal-wsl/ (skipped if it already exists; force: true to overwrite).

After editing the plugin code, pnpm's file: dependency does not re-copy automatically: delete profiles\web\node_modules\dsh-wsl and re-run pnpm install (or edit the repo the file: path points at and then delete that directory).

Prerequisites: Windows 10/11 + WSL2 + at least one distro (wsl --install). The persistent PTY depends on node-pty (already bundled with DSH in the profile workspace).

Usage

1. Distro selection: in Web Plugins settings → plugin configuration → the WSL card (horizontal bar), pick a local distro from the dropdown (empty = WSL default distro). The choice takes effect immediately and is persisted to settings.yaml (wsl.distro); the executor, persistent PTY backend and wsl tool read it on every call — no restart needed.
2. 极简模式 (WSL): select this preset when creating a new session. The two-tool surface (bash + str_replace_editor) matches the original minimal preset, but commands execute in WSL.
3. General wsl tool: the host half registers a wsl tool (command/description/timeoutMs/workdir/distro). Note: DSH model tools are registered by preset rows, so a host-level registration may not be visible to preset-scoped sessions — to use it in a standard/cordis session, add the tool row to that preset's user composition (a standard-preset variant is planned for a later version).
4. Path rules (written into the preset persona and tool descriptions): file tools use D:\dir\file, bash commands use /mnt/d/dir/file, the same files.
5. Sandbox: bash/wsl tools only run after the session is switched to full access. In confined modes they return clear guidance (processes inside the WSL VM are not bound by the Windows restricted token, and reach all Windows files through /mnt/* — a confined mode would only appear to confine). Sandbox mode cannot be changed while a persistent PTY session is open (same as the official backend).

Configuration

Host half (cordis.patch.yml row config):

wsl-executor.mjs (the preset's agent.cordis.yml config): distro (fallback), timeoutMs, maxTimeoutMs, maxOutputBytes, maxSpillBytes, graceMs.

Implementation note: the host half declares inject: ['webServer', 'tools', 'subprocess']. A row without inject activates before those services exist and every ctx.get() comes back empty — the symptom is a 404/fallback status API and a missing tool (the 0.1.0 first-release online symptom).

Sandbox & trust model (read this)

• WSL2 is a virtual machine: the Windows restricted-token/ACL sandbox only confines the wsl.exe launcher stub — it has no effect on Linux processes inside the VM.
• The Linux side can read and write every Windows file through /mnt/* (drvfs/9P).
• Therefore this plugin refuses to run in non-full-access modes rather than pretend to be confined. Switch the session sandbox or let the model escalate once.

Known limitations

• stdin forwarding unsupported: wsl.exe's stdin relay cannot feed bash builtins (bash caches an EOF at startup, and data that arrives later is only visible to raw reads that bypass bash's buffer — verified empirically). The executor returns a clear error for stdin requests, pointing to heredoc instead.
• Each non-persistent call has ~100ms warm overhead; a distro cold boot is ~5–7s (the plugin warms it once automatically).
• Heavy builds (lots of small-file I/O) under /mnt/* are slower than on the WSL-native filesystem; projects can live in the WSL home (then file tools can't see them — \\wsl.localhost UNC project dirs are planned for v2).
• drvfs permission semantics: files are always 777, chmod is a no-op (git/scripts still work under /mnt).
• The persistent PTY does not support runtime resize (the TerminalBackendSession contract itself has no resize method).
• Backslashes in command-line args get swallowed by wsl.exe, so all path translation is done in JS, never via wslpath.

Development & testing

npm test                      # unit tests (pure logic, no WSL needed)
node test/smoke-live.mjs      # non-persistent executor live smoke (needs local WSL)
node test/backend-smoke-live.mjs  # persistent PTY live smoke (needs local WSL + node-pty)
node test/tool-smoke-live.mjs     # general wsl tool live smoke (needs local WSL)

Running tests locally requires peerDependencies: the repo's node_modules is a junction to the profile workspace's node_modules (git-ignored); rebuild as needed:

New-Item -ItemType Directory -Path node_modules -Force | Out-Null
New-Item -ItemType Junction -Path 'node_modules\@deepseek-ai' -Target "$env:DSH_HOME\profiles\node_modules\@deepseek-ai" -Force | Out-Null
New-Item -ItemType Junction -Path 'node_modules\node-pty' -Target "$env:DSH_HOME\profiles\node_modules\node-pty" -Force | Out-Null