jumpserver-dsh: DeepSeek Harness Plugin to operate assets via JumpServer and KoKo

jumpserver-dsh is a DeepSeek Harness plugin designed to address the issue where Agents directly SSH into assets, thereby preventing the retention of JumpServer control policies. The plugin manages assets via JumpServer and executes commands or reads/writes files through the KoKo Bastion. This ensures that traffic does not directly connect to the asset IP, thereby maintaining the effectiveness of command filtering, ACLs, and session auditing. It supports SSH/SFTP hosts and various databases (such as MySQL, Redis, etc.), packaging relevant operations into `jms_*` tools for the Agent to invoke. By default, only query and read-only operations are permitted. Host asset management and database write operations require the explicit enabling of specific environment variables, and all requests remain subject to Core RBAC permission control. The plugin supports...

Read More