When DSH developers debug HTTP requests emitted by an agent, they often need to intercept, inspect, or limit requests locally. Using browser developer tools or general-purpose packet-capture tools usually lacks context and can expose sensitive information. To address this issue, mkaliezz/dsh-api-client provides local-process-based HTTP debugging capabilities.

Plugin Positioning

This is a DSH plugin that runs in a local environment and is maintained by MkaliezZ. It targets localhost preferentially to capture and analyze HTTP requests initiated by DSH processes. In version v0.1, it blocks remote hosts by default and hides sensitive request headers, aiming to provide developers with a secure and controllable debugging environment.

Core Features

  1. Local-first debugging: Focuses on capturing HTTP requests emitted by DSH processes.
  2. Default security policy: In version v0.1, it blocks remote hosts by default (localhost-first) and hides sensitive request headers to prevent disclosure of sensitive information.
  3. Traffic limiting: Applies size boundaries to requests and responses to prevent abnormal traffic from consuming excessive resources.
  4. Command adapter: Exposes a small DSH command interface for controlling debugging behavior from the command line.

Installation and Enablement

The plugin package name is @mkaliezz/dsh-api-client, and the current version is 0.2.2. The plugin is built with TypeScript, and its main entry point is lib/src/plugin.js. In the DSH ecosystem, plugins of this type are typically installed through a package manager and automatically apply the cordis.patch.yml configuration.

Before installation, ensure that the Node.js version satisfies >=20.

{
    "name": "@mkaliezz/dsh-api-client",
    "version": "0.2.2",
    "type": "module",
    "private": false,
    "description": "DSH plugin: dsh-api-client",
    "license": "MIT",
    "main": "lib/src/plugin.js",
    "types": "lib/src/plugin.d.ts",
    "files": ["lib", "cordis.patch.yml", "README.md", "LICENSE"],
    "scripts": {
        "build": "tsc -p tsconfig.json",
        "test": "npm run build && node --test lib/test/*.test.js",
        "prepublishOnly": "npm run build"
    },
    "engines": {
        "node": ">=20"
    },
    "dsh": {
        "bundle": {
            "patch": "./cordis.patch.yml"
        }
    }
}

Applicable Scenarios and Notes

  • Applicable scenarios: Developers debug agent behavior when calling external APIs locally, especially when localhost callbacks need to be validated or cross-origin/network issues need to be troubleshot.
  • Important limitations: It is not a credential manager and does not bypass Secret Guard or AgentFuse. The plugin runs with the permissions of the current DSH process. It is recommended to review the source code and license (MIT) before installation.

Summary

By adopting a local-first and default-blocking strategy, this tool provides basic secure debugging capabilities for DSH development. For more details, refer to its SkillHub directory or GitHub repository.