Dsh Toolkit

Build failsBundlegit (build fails)freshinstall scripts

DSH 零依赖工具包 collection —— time / encoding / json / calculator / csv / regex / markdown / diff / stat / schema 十个确定性工具，统一入口一键安装

Install Dsh Toolkit

Likely fails to load: not on npm, needs a build, and ships no `prepare` script — a git install fetches sources, not built artifacts, so the entry point is never produced.

This install is expected to fail

A git install pulls source, not build output. This package needs a build step, has no prepare script to run it, and is not published to npm — so nothing produces the compiled output the loader then goes looking for.

Three things would fix it, all of them on the author's side: publish the package to npm, add a prepare script that builds on install, or commit the build output to the repository. Until one of those happens, the command below is here so you can reproduce the failure, not so you can install it.

What would be run — expected to install and then fail to load

# 1. add the bundle to a profile — --profile my-profile points at $DSH_HOME/profiles/my-profile
dsh plugin --profile my-profile add github:omdsh-dev/dsh-toolkit

# 2. verify: the bundle should show up as a layer in the resolved config
dsh --profile my-profile --dump-config

# 3. boot the profile
dsh --profile my-profile

Before you run itinstall scripts

This package declares prepack — package-manager lifecycle scripts that execute on your machine at install time, outside the agent sandbox, before any tool-approval prompt exists.
A plugin runs with your permissions once loaded: it can read your files, use your credentials and reach the network. Tool approvals do not sandbox it.
Installing from git resolves a moving branch. Pin a commit — github:omdsh-dev/dsh-toolkit#<commit-sha> — so the code you reviewed is the code you install.

Prerequisites

API key: Not required.
Network access: Not required at runtime.
Language: TypeScript — a git install pulls this source, not build output.

Install check

Every field the verdict was derived from, so you can re-derive it yourself

Field checked	Result	Weight	What the spec says about it
lifecycleScripts	fail	warn	runs at install time, outside the agent sandbox: prepack
dsh.bundle	pass	fatal	package.json declares a `dsh.bundle` layer
dsh.bundle.patch file	pass	fatal	patch file present at `cordis.patch.yml`
npm registry	missing	warn	`@deepseek-ai/dsh-toolkit` is not published to npm
prepare script	missing	fatal	needs a build but ships no `prepare` script — a git install fetches sources, not built artifacts

Verdict reason: git-only + needs build + no prepare script
package.json read: package.json
Rules applied from: docs/user/develop/basic/publish.md
Checked at: 2026-08-15
Install-time scripts: prepack

From the README

Excerpt as published by the author, plain text, unedited

DSH 零依赖工具包 collection —— time / encoding / json / calculator / csv / regex / markdown / diff / stat / schema 十个确定性工具，**统一入口一键安装**。 DSH 生态仓库持续增长，单插件在 hub 中容易被淹没；collection 分类是辨识度最高的形态。本仓库把 10 个工具插件 **vendored 冻结**为发布态快照（各子仓库独立演进，均位于 [omdsh-dev](https://github.com/omdsh-dev) 组织下公开），统一工程、统一测试、统一维护。 **定位（官方 Profile Bundle 生态方向）**：本仓库是 **collection 与安装辅助仓库**——每个子包都是可独立安装/启用/禁用/卸载的 bundle（`dsh plugin --profile add `）；collection 提供目录、清单与批量安装脚本。meta 包 `@deepseek-ai/dsh-toolkit` 保留为**可选**的原子挂载模型（见下文两种运行模型）。 | 工具 | 能力 | 用例数 | |---|---|---| | `time` | ISO 8601 / 时区 / 日历运算 / 时长差 | 65 | | `encoding` | base64 / url / hex / hash / UUID | 46 | | `json` | JMESPath 子集查询 | 66 | | `calculator` | 安全数学表达式求值（无 eval） | 31 | | `csv` | RFC 4180 解析 / 查询 / 统计（严格引号） | 50 | | `regex` | 测试 / 提取 / 替换 / 静态解释（worke