dsh-exec-extension
A DeepSeek Harness bundle for one-shot exec, in the same shape as official surface plugins (dsh.bundle.patch + parseCmdline + commander). Stock headless-startup only declares [task...]; this bundle disables that row and inserts a replacement that still provides headlessStartup.task for unmodified headless-runner.
The CLI follows OpenCode run and Pi -p: piped stdin is merged into the prompt, @file / -f attaches files, --format json streams session events, --dir sets cwd, --yolo skips permission prompts (it does not disable the sandbox). Model overlay is in-process (Rust WASM) and never writes $DSH_HOME/settings.yaml.
Install
dsh plugin --profile exec add @deepseek-ai/dsh-headless@$(npm view @deepseek-ai/dsh version)
dsh plugin --profile exec add dsh-exec-extension
dsh --profile exec --helpFollow the same npm latest channel as the dsh CLI (npx @deepseek-ai/dsh / npm install --global @deepseek-ai/dsh). Do not use @next unless you installed dsh@next. @deepseek-ai/dsh-headless has a stale latest tag, so the first line takes the CLI's latest version instead of headless's own. dsh-exec-extension uses its own latest. Freeze with @<version> only when you need a snapshot. npm install does not need a prepare allowlist.
Git fallback: dsh plugin --profile exec add github:LvDAO/dsh-exec-extension
Dedicated profile only. Stock dsh --profile headless --model x "t" must still fail.
CLI
dsh --profile exec [options] [--] [task|-]
cat README.md | dsh --profile exec "summarize this"
dsh --profile exec @notes.md --full-auto "use the notes"| Flag | Meaning |
|---|---|
-m, --model |
This-process model (never part of the task) |
--effort, --reasoning-effort |
off\|high\|max |
--thinking |
Pi thinking tiers; xhigh/max → max, minimal/low/medium/high → high |
--provider |
This-process provider |
-C, --cwd / --cd / --dir |
Working directory (published on headlessStartup.cwd) |
--timeout <seconds> |
appExit(1) after N seconds |
-s, --sandbox / --permission-mode |
read-only | workspace-write | danger-full-access |
--approval ask\|never\|allow |
ask fail-closes without a UI; never auto-denies; allow auto-grants |
--full-auto |
workspace-write + auto-allow (CI) |
--yolo / --dangerously-skip-permissions |
Skip permission prompts (auto-allow). Does not set danger-full-access; default sandbox stays workspace-write. Unrestricted access is --sandbox danger-full-access |
--tools-mode native\|code\|both |
Tools presentation |
-f, --file / @path |
Attach file text into the task |
--output-schema <path> |
Prompt-level JSON Schema constraint (not constrained decode) |
-o, --output-last-message <path> |
Also write the final assistant text |
--format text\|json / --mode json |
json is session-event JSONL |
-c, --config key=value |
Repeatable this-process overlay |
--env KEY=VALUE / --api-key |
Process env only (not written to disk) |
--print-selection |
Print overlaid selection JSON and exit |
Unknown flags error. Overlay never calls saveSelection().
--output-schema is a prompt constraint, not constrained decoding. --approval allow and --yolo install a process-local auto-grant because dsh never auto-denies and headless has no UI. --yolo does not set danger-full-access; use --sandbox danger-full-access for unrestricted tools.
headlessStartup is { task, cwd, permissionMode, approvalPolicy, autoApprove, toolsMode?, format }. sandbox-policy, approval, and tools inject that service (!!js ctx.headlessStartup.*). Stock headless-runner still only reads task.
Non-goals
MCP, Host, HTTP, resume, --image, forking headless-runner. Put MCP on the profile patch + process env, not on this CLI.
Develop
Node ≥ 22.19. WASM is committed; prepare skips rustc.
npm test
DSH_BIN=/path/to/dsh npm run acceptance