dsh-pure-chat

Readme

# dsh-pure-chat

Pure chat mode for [DeepSeek Harness](https://github.com/deepseek-ai/deepseek-harness): hide every global tool so the agent only talks. Toggle per session with `/pure-chat on` and `/pure-chat off`.

纯聊天模式插件：隐藏全部全局工具，让 agent 只对话。每条会话可用 `/pure-chat on|off` 开/关。

## Install / 安装

```sh
dsh plugin --profile web add dsh-pure-chat
dsh web
```

Requires a dsh `web` profile on the `0.1.x` line (published `0.1.0-rc.6` / `0.1.1-rc.2`, or a source checkout such as `0.1.2-alpha.1`). 需要 dsh 0.1.x 线的 web profile（npm 的 rc 版本或源码版 alpha 均可）。

## Usage / 用法

`/pure-chat` — toggle for the current session:

- `/pure-chat` or `/pure-chat on` — hide all global tools (`bash`/`fs`/`web`/…); the agent can only receive and reply with text.
- `/pure-chat off` — restore the session's tools.

## How it works / 原理

On enable, the plugin applies three layers to the receiving agent: `tools.restrict({ allow: [] })` hides inherited global tools from the model's view, a `tools.guard` denies any tool execution that still happens (`Tools are disabled: pure chat mode is active.`), and a `systemPrompt.section` instructs the model not to call tools. Disabling (`/pure-chat off`) disposes all three. The `/pure-chat` command itself is registered against the `commands` service, declared via the loader entry's `inject: [commands]`.

启用时对当前 agent 施加三层保护：`tools.restrict({ allow: [] })` 从模型视野隐藏继承的全局工具；`tools.guard` 对仍在发生的调用一律拒绝（返回 `Tools are disabled: pure chat mode is active.`）；`systemPrompt.section` 提示模型不要调用工具。`/pure-chat off` 会一并回收这三层。命令注册通过 loader entry 的 `inject: [commands]` 声明 `commands` 服务。

## Notes / 说明

- Tools are restricted **per agent/session**, not globally; new sessions start with tools enabled — opt in where you want pure chat. 工具限制是**按会话**的；新会话默认有工具，需要时再 `/pure-chat on`。
- This plugin is unofficial community software (MIT), not affiliated with DeepSeek. 非官方社区插件，与 DeepSeek 官方无关。
- Third-party plugins run with your own permissions — no sandbox. 第三方插件以你自己的权限运行，无沙箱。