@agenticcontrolplane/dsh: Inspecting Tool Calls and Logging Decisions in DeepSeek Harness

@agenticcontrolplane/dsh is a native Cordis plugin for DeepSeek Harness, designed to enhance security controls in agent workflows. By integrating with dsh's typed interception points, this plugin performs policy checks before the execution of tool calls (such as bash, file editing, etc.), supporting three decision modes: allow, deny, and ask, while logging the allowed actions, blocked attempts, and the reasons behind them. Additionally, it offers post-call output scanning functionality to convert server-side blocks into corrective feedback. This plugin is zero-dependency, built on a plain ESM architecture, and supports configuration through profile settings or environment variables (e.g., ACP_BEARER_TOKEN). Installation requires Node 22 and follows