dsh-gitflow

Letting an AI coding agent safely operate a Git repository is a stubborn problem in day-to-day development: read-only operations like status, diff, and log should flow freely, while mutating operations like commit and branch must pass through a human approval gate, and the agent must never silently run destructive commands such as git push or git stash. dsh-gitflow provides DeepSeek Harness with a tightly scoped set of Git tools that separate read and write paths, route every mutation through the DSH approval seam, and mechanically prevent out-of-scope or data-losing commands.

The plugin covers the everyday Git workflow: reading branch names and working-tree counts, inspecting staged or unstaged unified diffs, retrieving bounded structured commit history (including unborn repositories), committing only already-staged changes with a /commit review skill, and listing or creating and switching local branches. It also integrates with the Change Ledger service for checkpoint listing and two-phase restore, with an optional auto-checkpoint hook that captures a restore point before configured mutation tools execute. All Git arguments are shell-quoted, commit messages travel through stdin, and the plugin explicitly never runs git add, git reset, git stash, git push, or any branch-deletion command.

This plugin is for developers driving coding tasks with DeepSeek Harness who want the agent to independently inspect repository state and complete commits or branch operations only under human supervision. If you value least-privilege, auditable, and rollback-friendly AI-assisted Git workflows, dsh-gitflow narrows Git operations down to a small set of predictable atomic tools, so you can hand routine commit chores to your agent with confidence.