📦 @goodandready/dsh-gitea

⚡ Overview & Problem Solved

When autonomous AI coding agents perform complex multi-step development in DeepSeek Harness, they require seamless access to issue trackers, pull request review workflows, branch creation, and isolated workspace worktrees without risking repository corruption or leaking credentials into chat logs.

@goodandready/dsh-gitea bridges DeepSeek Harness to self-hosted Gitea and Forgejo instances. It equips agents with a complete suite of 20+ structured tools, registers a live Git Status Chip directly in the Web UI chat header, and enforces safety rails (confirm: true merge guards and dedicated write wrappers).

🏗️ Architecture

graph LR
    subgraph DSH ["DeepSeek Harness"]
        UI["Web UI Chat Header<br/>(Git Status Chip)"]
        Agent["Autonomous Agent<br/>(20+ Gitea Tools)"]
        Creds["Credentials Store<br/>(GITEA_TOKEN Ref)"]
    end

    subgraph Plugin ["dsh-gitea Plugin"]
        ChipPoller["/git-status API<br/>Branch & Diff Inspector"]
        Client["GiteaClient<br/>(REST API v1)"]
        WorktreeMgr["Worktree Manager<br/>(Isolated Task Trees)"]
    end

    subgraph Server ["Self-Hosted VCS"]
        Gitea["Gitea / Forgejo Server<br/>(Issues, PRs, Labels, Milestones)"]
        GitRepo["Git Repository<br/>(Worktrees & Remotes)"]
    end

    UI -->|Polls Status| ChipPoller
    ChipPoller -->|Reads Status| GitRepo
    Agent -->|Executes Tools| Client
    Agent -->|Manages Branches| WorktreeMgr
    WorktreeMgr -->|git worktree| GitRepo
    Client -->|Authenticated REST| Gitea
    Creds -.->|Resolves In-Memory| Client

✨ Full Feature Breakdown

1. 20+ Agent Tools Suite

All tools infer owner and repo automatically from the active workspace's git remote get-url origin when omitted by the agent.

2. Per-branch PR templates

When creating a PR via issue-flow without an explicit body, the plugin fills a template by branch type: feat/, fix/, docs/, chore/, refactor/.

3. Live Git Status Chip & Topological Commit Graph

The client component injects a real-time Git Status Chip into the DSH Web UI chat header:

• Active Repository & Branch: Displays current branch name (e.g., feature/issue-42-auth).
• Tree Cleanliness: Color-coded badges indicating clean vs dirty working trees and modified files count.
• Ahead/Behind Sync Badges: Real-time sync indicator (↑ahead, ↓behind) relative to upstream or origin/<branch>.
• Topological Commit Graph Modal: Monospace branch/merge lane visualization (●, ◆, │), commit links to Gitea Web UI, branch and tag badges, and live Gitea Actions CI statuses (CI ✓, CI ✗, CI ●).
• Cross-Tab Synchronization: Efficient multi-tab coordination using navigator.locks leader election and BroadcastChannel, eliminating duplicate network polling.
• Uncommitted Diff Inspector: 1-click panel showing recent commits and uncommitted diff.

3. Worktree Isolation & Agent Safety Rails

To allow autonomous agents to work on multiple issues without touching the primary branch:

• Non-destructive Worktrees: Creates worktree paths under .worktrees/issue-<id>/ or custom directories.
• Confirm Guard Matrix: Destructive operations like gitea_pr_merge and gitea_worktree_remove strictly require explicit boolean confirm: true. Unconfirmed tool calls are automatically rejected.
• Git Wrapper Enforcement: Write operations can be routed through a dedicated wrapper (gitWrapper, e.g., git-deepseek-harness) to enforce agent author signatures.

4. Gitea Issue Templates Pack

Includes standardized Gitea YAML issue templates under .gitea/ISSUE_TEMPLATE/:

📦 Installation

Install via DeepSeek Harness CLI:

dsh plugin --profile web add @goodandready/dsh-gitea

Restart DSH Web UI and perform a hard-refresh (Ctrl+F5 or Cmd+Shift+R).

⚙️ Configuration

Navigate to Settings -> Plugins -> Gitea:

# config.yaml
dsh-gitea:
  baseUrl: "https://gitea.yourcompany.com"
  tokenEnv: "GITEA_TOKEN"
  gitWrapper: ""
  timeoutMs: 15000

Settings Reference Table

[!IMPORTANT]
Never put the raw API token in the tokenEnv field. Store the token securely in DSH Credentials and enter only its reference key name.

🔒 HTTPS and mixed content

When DSH is served over HTTPS, embedded Gitea pages must also be HTTPS or the
browser blocks them (mixed content). Requirements:

• Configure Gitea behind HTTPS (or a reverse proxy) and set Instance URL to
  the HTTPS endpoint — then generated links are already HTTPS.
• If Gitea only answers HTTP while DSH is HTTPS, the Settings card shows a
  warning. Optionally enable forceHttpsUrls to rewrite http:// links to
  https:// in tool results when Gitea sits behind an HTTPS reverse proxy that
  accepts both schemes.
• Never disable the browser's mixed-content protections.

🛠️ Reliability, Webhooks & Multi-Platform Support

Added in v0.4.3:

• Webhook Delivery: gitea_digest_delivery and push notification dispatchers use fully-formed HTTP POST JSON requests with standard headers, ensuring delivery to Slack, Discord, Telegram, or custom webhook endpoints.
• Cross-Platform Path Resolution: Seamless operation across both POSIX (Linux/macOS) and Windows file systems, normalizing path separators and handling drive letters transparently.
• Accurate Merge Analytics: gitea_repo_analytics accurately detects merged pull requests matching Gitea's REST API merged: true specifications.
• Branch & Path Policy Checking: gitea_pr_policy reliably parses requiredChecks rules alongside protected branch paths from YAML configuration files.
• Autonomous Tool Routing: Non-repository tools (gitea_repo_create_org, gitea_repo_bootstrap, gitea_digest_delivery) execute cleanly without requiring an active local Git repository origin.

🧪 Testing & Verification

Run the comprehensive unit and integration test suite:

npm test

📄 License

MIT © GooDAnDReaDY